@aalis/plugin-user-profile 0.12.0 → 0.13.1

package/dist/index.js

@@ -1,10 +1,13 @@
 import { authority, DEFAULT_AUTHORITY } from '@aalis/api-authority';
 import { commands } from '@aalis/api-commands';
+import { contributions } from '@aalis/api-contributions';
+import { hooks } from '@aalis/api-hooks';
 import { llm, resolveLLMModel } from '@aalis/api-llm';
-import { memory } from '@aalis/api-memory';
+import { clearMetadataNamespaces, memory } from '@aalis/api-memory';
 import { persona } from '@aalis/api-persona';
 import { tools } from '@aalis/api-tools';
-import { config, contributions, definePlugin, defineService, events, hooks, logger, optional, } from '@aalis/core';
+import { userRelation } from '@aalis/api-user-relation';
+import { config, definePlugin, events, logger, optional } from '@aalis/core';
 import { WellKnownKinds } from '@aalis/schema-message';
 import { parseLLMJsonObject } from '@aalis/util-json-repair';
 // ════════════════════════════════════════════════════════════
@@ -209,15 +212,15 @@ const KNOWN_INSTRUCTION_CATEGORIES = [
     '安全',
     '其他',
 ];
-/** 生成稳定短 ID（6 字符 base36，对 30 条以内规模碰撞概率极低） */
-function genFactId(existing) {
+/** 生成稳定短 ID（6 字符 base36，对 30 条以内规模碰撞概率极低）；前缀 'f' 为事实、'i' 为指令 */
+function genShortId(prefix, existing) {
     for (let i = 0; i < 8; i++) {
-        const id = `f${Math.random().toString(36).slice(2, 7)}`;
+        const id = `${prefix}${Math.random().toString(36).slice(2, 7)}`;
         if (!existing.has(id))
             return id;
     }
     // 极端兜底：加时间戳后缀
-    return `f${Date.now().toString(36).slice(-5)}`;
+    return `${prefix}${Date.now().toString(36).slice(-5)}`;
 }
 function decimalPlaces(value) {
     if (!Number.isFinite(value))
@@ -300,8 +303,6 @@ function renderHistoryForExtract(history, userId, platform) {
         .filter(Boolean)
         .join('\n');
 }
-// 同名描述符即同一服务：本地声明 optional 依赖，类型来自兄弟插件的 type-only 导入，不构成运行时包依赖。
-const userRelation = defineService('user-relation');
 const uses = {
     memory,
     llm,
@@ -396,15 +397,6 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
     function clipInstructionText(s) {
         return s.length > cfg.maxInstructionCharsPerItem ? `${s.slice(0, cfg.maxInstructionCharsPerItem)}…` : s;
     }
-    /** 生成 Instruction 短 ID（与 Fact 同前缀但带 'i' 区分，便于日志中识别） */
-    function genInstructionId(existing) {
-        for (let i = 0; i < 8; i++) {
-            const id = `i${Math.random().toString(36).slice(2, 7)}`;
-            if (!existing.has(id))
-                return id;
-        }
-        return `i${Date.now().toString(36).slice(-5)}`;
-    }
     function parseInstructionArray(raw) {
         const usedIds = new Set();
         const list = [];
@@ -415,9 +407,9 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             const text = typeof obj.text === 'string' ? obj.text.trim() : '';
             if (!text)
                 continue;
-            let id = typeof obj.id === 'string' && obj.id.trim() ? obj.id.trim() : genInstructionId(usedIds);
+            let id = typeof obj.id === 'string' && obj.id.trim() ? obj.id.trim() : genShortId('i', usedIds);
             while (usedIds.has(id))
-                id = genInstructionId(usedIds);
+                id = genShortId('i', usedIds);
             usedIds.add(id);
             const updatedAt = typeof obj.updatedAt === 'number' ? obj.updatedAt : 0;
             const observedAt = typeof obj.observedAt === 'number' ? obj.observedAt : updatedAt || undefined;
@@ -435,25 +427,32 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         }
         return list;
     }
-    async function loadInstructions() {
-        const mem = memory.current;
+    /**
+     * 读取指令档案（不存在返回空档案）。读失败原样抛出，理由同 {@link loadProfile}；
+     * 只读渲染走 {@link loadInstructionsLenient}。
+     * mem 由调用方传入：一次操作只认开头取到的实例，理由见 {@link loadProfile}
+     */
+    async function loadInstructions(mem) {
         const empty = { instructions: [], updatedAt: 0 };
         if (!mem)
             return empty;
+        const doc = await mem.getMetadata(INSTRUCTIONS_NS, getInstructionsKey());
+        if (!doc)
+            return empty;
+        const instructions = Array.isArray(doc.instructions) ? parseInstructionArray(doc.instructions) : [];
+        return { instructions, updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0 };
+    }
+    /** 只读渲染用：读失败按空档案处理，只记 debug（结果不会被写回） */
+    async function loadInstructionsLenient(mem) {
         try {
-            const doc = await mem.getMetadata(INSTRUCTIONS_NS, getInstructionsKey());
-            if (!doc)
-                return empty;
-            const instructions = Array.isArray(doc.instructions) ? parseInstructionArray(doc.instructions) : [];
-            return { instructions, updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0 };
+            return await loadInstructions(mem);
         }
         catch (err) {
             logger.debug(`加载指令档案失败: ${err instanceof Error ? err.message : String(err)}`);
-            return empty;
+            return { instructions: [], updatedAt: 0 };
         }
     }
-    async function saveInstructions(doc) {
-        const mem = memory.current;
+    async function saveInstructions(mem, doc) {
         if (!mem)
             return;
         await mem.saveMetadata(INSTRUCTIONS_NS, getInstructionsKey(), {
@@ -488,7 +487,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             const text = clipInstructionText(a.text);
             if (textSet.has(text))
                 continue;
-            const id = genInstructionId(usedIds);
+            const id = genShortId('i', usedIds);
             usedIds.add(id);
             byId.set(id, {
                 id,
@@ -551,60 +550,72 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         const s = v.trim();
         return s.length > 0 ? s.slice(0, 40) : undefined;
     }
-    /** 解析 metadata 中的事实数组（兼容旧格式 string[]，自动迁移） */
+    /** 解析 metadata 中的事实数组；缺正文、id、时效或时间戳的条目跳过 */
     function parseFactArray(raw) {
         const usedIds = new Set();
         const facts = [];
         for (const item of raw) {
-            if (typeof item === 'string' && item.trim()) {
-                const id = genFactId(usedIds);
-                usedIds.add(id);
-                facts.push({ id, text: item.trim(), temporality: 'permanent', updatedAt: 0 });
-            }
-            else if (item && typeof item === 'object') {
-                const obj = item;
-                const text = typeof obj.text === 'string' ? obj.text.trim() : '';
-                if (!text)
-                    continue;
-                let id = typeof obj.id === 'string' && obj.id.trim() ? obj.id.trim() : genFactId(usedIds);
-                while (usedIds.has(id))
-                    id = genFactId(usedIds);
-                usedIds.add(id);
-                const cat = typeof obj.category === 'string' && KNOWN_CATEGORIES.includes(obj.category)
-                    ? obj.category
-                    : undefined;
-                const updatedAt = typeof obj.updatedAt === 'number' ? obj.updatedAt : 0;
-                const observedAt = typeof obj.observedAt === 'number' ? obj.observedAt : updatedAt || undefined;
-                facts.push({
-                    id,
-                    text,
-                    category: cat,
-                    temporality: normalizeTemporality(obj.temporality, cat),
-                    observedAt,
-                    timeHint: normalizeTextField(obj.timeHint),
-                    updatedAt,
-                });
+            if (!item || typeof item !== 'object')
+                continue;
+            const obj = item;
+            const text = typeof obj.text === 'string' ? obj.text.trim() : '';
+            if (!text ||
+                typeof obj.id !== 'string' ||
+                !obj.id.trim() ||
+                (obj.temporality !== 'permanent' && obj.temporality !== 'temporary') ||
+                typeof obj.observedAt !== 'number' ||
+                typeof obj.updatedAt !== 'number') {
+                continue;
             }
+            let id = obj.id.trim();
+            while (usedIds.has(id))
+                id = genShortId('f', usedIds);
+            usedIds.add(id);
+            const cat = typeof obj.category === 'string' && KNOWN_CATEGORIES.includes(obj.category)
+                ? obj.category
+                : undefined;
+            facts.push({
+                id,
+                text,
+                category: cat,
+                temporality: obj.temporality,
+                observedAt: obj.observedAt,
+                timeHint: normalizeTextField(obj.timeHint),
+                updatedAt: obj.updatedAt,
+            });
         }
         return facts;
     }
-    /** 读取一个用户的现有档案（不存在返回 undefined）。兼容旧格式 string[]，自动迁移 */
-    async function loadProfile(userKey) {
-        const mem = memory.current;
+    /**
+     * 读取一个用户的现有档案（getMetadata 返回空才算不存在，返回 undefined）。
+     *
+     * 读失败原样抛出：先读后改再写的一方（关系分、事实提取、自反思、定点删事实）据此中止本次写入。
+     * 若把「读不出」当成「不存在」，调用方会用默认值覆盖写回，一次瞬时读错就清空整份档案。
+     * 只读渲染走 {@link loadProfileLenient}。
+     *
+     * 档案与指令的读写函数都由调用方传入 mem，一次操作（读 → 调 LLM → 重读 → 覆盖写）全程只认
+     * 开头取到的实例：memory 胜者可能在 LLM 调用期间换人而本插件不重启，每步现取胜者会把 A 上
+     * 合并出的整张表覆盖写进 B，B 原有的条目被删。
+     */
+    async function loadProfile(mem, userKey) {
         if (!mem)
             return undefined;
+        const doc = await mem.getMetadata(PROFILE_NS, userKey);
+        if (!doc)
+            return undefined;
+        const facts = Array.isArray(doc.facts) ? parseFactArray(doc.facts) : [];
+        return {
+            facts,
+            relationScore: typeof doc.relationScore === 'number' ? Math.min(100, Math.max(0, doc.relationScore)) : 0,
+            interactionCount: typeof doc.interactionCount === 'number' ? Math.max(0, Math.floor(doc.interactionCount)) : 0,
+            lastInteractionAt: typeof doc.lastInteractionAt === 'number' ? doc.lastInteractionAt : undefined,
+            updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0,
+        };
+    }
+    /** 只读渲染用：读失败按「暂无档案」处理，只记 debug（结果不会被写回） */
+    async function loadProfileLenient(mem, userKey) {
         try {
-            const doc = await mem.getMetadata(PROFILE_NS, userKey);
-            if (!doc)
-                return undefined;
-            const facts = Array.isArray(doc.facts) ? parseFactArray(doc.facts) : [];
-            return {
-                facts,
-                relationScore: typeof doc.relationScore === 'number' ? Math.min(100, Math.max(0, doc.relationScore)) : 0,
-                interactionCount: typeof doc.interactionCount === 'number' ? Math.max(0, Math.floor(doc.interactionCount)) : 0,
-                lastInteractionAt: typeof doc.lastInteractionAt === 'number' ? doc.lastInteractionAt : undefined,
-                updatedAt: typeof doc.updatedAt === 'number' ? doc.updatedAt : 0,
-            };
+            return await loadProfile(mem, userKey);
         }
         catch (err) {
             logger.debug(`加载用户档案失败 (${userKey}): ${err instanceof Error ? err.message : String(err)}`);
@@ -612,8 +623,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         }
     }
     /** 保存档案（覆盖式） */
-    async function saveProfile(userKey, profile) {
-        const mem = memory.current;
+    async function saveProfile(mem, userKey, profile) {
         if (!mem)
             return;
         const payload = {
@@ -630,6 +640,60 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             return undefined;
         return KNOWN_CATEGORIES.includes(v) ? v : undefined;
     }
+    /** 解析 LLM 输出里的 add / update / remove 三类事实操作。sourceQuote 原样带出，是否校验由调用方决定；它不入库（mergeFactList 逐字段构造 Fact） */
+    function parseFactOps(parsed) {
+        const obj = parsed;
+        const add = Array.isArray(obj.add)
+            ? obj.add.flatMap(x => {
+                if (!x || typeof x !== 'object')
+                    return [];
+                const o = x;
+                const t = typeof o.text === 'string' ? o.text.trim() : '';
+                if (!t)
+                    return [];
+                const category = normalizeCategory(o.category);
+                const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
+                return [
+                    {
+                        text: t,
+                        category,
+                        temporality: normalizeTemporality(o.temporality, category),
+                        timeHint: normalizeTextField(o.timeHint),
+                        sourceQuote,
+                    },
+                ];
+            })
+            : [];
+        const update = Array.isArray(obj.update)
+            ? obj.update.flatMap(x => {
+                if (!x || typeof x !== 'object')
+                    return [];
+                const o = x;
+                const id = typeof o.id === 'string' ? o.id.trim() : '';
+                const t = typeof o.text === 'string' ? o.text.trim() : '';
+                if (!id || !t)
+                    return [];
+                const category = normalizeCategory(o.category);
+                const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
+                return [
+                    {
+                        id,
+                        text: t,
+                        category,
+                        temporality: normalizeTemporality(o.temporality, category),
+                        timeHint: normalizeTextField(o.timeHint),
+                        sourceQuote,
+                    },
+                ];
+            })
+            : [];
+        const remove = Array.isArray(obj.remove)
+            ? obj.remove
+                .filter((x) => typeof x === 'string' && x.trim().length > 0)
+                .map(s => s.trim())
+            : [];
+        return { add, update, remove };
+    }
     /** 调用 LLM 从历史中提取/修订事实，返回 add / update / remove 三类操作。 */
     async function llmExtractFacts(history, existingFacts, nickname, userId, platform) {
         const empty = {
@@ -725,56 +789,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
                 }
                 logger.debug('[user-profile] LLM 重试后解析成功');
             }
-            const parsedObj = parsed;
-            const add = Array.isArray(parsedObj.add)
-                ? parsedObj.add.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
-                    return [
-                        {
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                            sourceQuote,
-                        },
-                    ];
-                })
-                : [];
-            const update = Array.isArray(parsedObj.update)
-                ? parsedObj.update.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const id = typeof o.id === 'string' ? o.id.trim() : '';
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!id || !t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    const sourceQuote = typeof o.sourceQuote === 'string' ? o.sourceQuote.trim() : '';
-                    return [
-                        {
-                            id,
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                            sourceQuote,
-                        },
-                    ];
-                })
-                : [];
-            const remove = Array.isArray(parsedObj.remove)
-                ? parsedObj.remove
-                    .filter((x) => typeof x === 'string' && x.trim().length > 0)
-                    .map(s => s.trim())
-                : [];
+            const { add, update, remove } = parseFactOps(parsed);
             // sourceQuote 校验：quote 可能跨多条消息（LLM 用 \n 拼接），
             // 因此按行拆分，每行（非空）都必须能在「目标用户」语料中找到 normalize 后的子串。
             // 这样即使行与行之间夹着其他用户的消息也不会被错误拒收。
@@ -803,17 +818,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             };
             const validatedAdd = add.filter(item => validateSourceQuote(item, 'add'));
             const validatedUpdate = update.filter(item => validateSourceQuote(item, 'update'));
-            // 剥除 sourceQuote，不入库
-            const stripQuote = (item) => {
-                const { sourceQuote: _omit, ...rest } = item;
-                void _omit;
-                return rest;
-            };
-            return {
-                add: validatedAdd.map(stripQuote),
-                update: validatedUpdate.map(stripQuote),
-                remove,
-            };
+            return { add: validatedAdd, update: validatedUpdate, remove };
         }
         catch (err) {
             logger.debug(`事实提取 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
@@ -840,7 +845,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
     }
     function applyRelationUpdate(profile, triggerType, options = {}) {
         // countInteraction：是否计入互动计数与更新 lastInteractionAt。
-        // 同一条入站消息会先走 witness 路径，若被 trigger-policy 判为需回复又会走
+        // 同一条入站消息会先走 witness 路径，若被触发插件判为需回复又会走
         // agent:input:before 路径。为避免 interactionCount/lastInteractionAt 被同一条
         // 消息计两次，计数与时戳只由 witness 路径负责，agent:input:before 仅叠加 score。
         const countInteraction = options.countInteraction ?? true;
@@ -877,14 +882,14 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
                     id: u.id,
                     text,
                     category: u.category ?? old.category,
-                    temporality: u.temporality ?? old.temporality ?? normalizeTemporality(undefined, u.category ?? old.category),
-                    observedAt: old.observedAt ?? now,
+                    temporality: u.temporality ?? old.temporality,
+                    observedAt: old.observedAt,
                     timeHint: u.timeHint ?? old.timeHint,
                     updatedAt: now,
                 });
             }
             else {
-                const id = genFactId(usedIds);
+                const id = genShortId('f', usedIds);
                 usedIds.add(id);
                 byId.set(id, {
                     id,
@@ -903,7 +908,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             const text = clipText(a.text);
             if (textSet.has(text))
                 continue;
-            const id = genFactId(usedIds);
+            const id = genShortId('f', usedIds);
             usedIds.add(id);
             byId.set(id, {
                 id,
@@ -925,9 +930,14 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         merged.sort((a, b) => a.updatedAt - b.updatedAt);
         return merged;
     }
-    /** 合并 facts 部分（向后兼容包装） */
-    function mergeFacts(existing, ops) {
-        return mergeFactList(existing, ops.add, ops.update, ops.remove, cfg.maxFactsPerUser);
+    /**
+     * LLM 的 update 针对调用前快照里的 id。快照里有、重读后已不在的，说明调用期间被删（清空或定点删除），
+     * 丢弃：否则 mergeFactList 把未知 id 当新增，删掉的事实换个 id 写回。快照里本就没有的 id 照旧按新增处理
+     */
+    function dropUpdatesOfDeletedFacts(update, snapshot, fresh) {
+        const snapshotIds = new Set(snapshot.map(f => f.id));
+        const freshIds = new Set(fresh.map(f => f.id));
+        return update.filter(u => !snapshotIds.has(u.id) || freshIds.has(u.id));
     }
     /**
      * 后台触发一次事实提取（并发互斥）。
@@ -941,7 +951,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         inflightExtractions.add(userKey);
         const mem = memory.current;
         try {
-            if (!mem?.getHistory)
+            if (!mem)
                 return;
             const rawHistory = await mem.getHistory(sessionId, cfg.historyForExtraction);
             // 跨会话委派是另一个 agent 实例发出的指令·不是该用户发言，不能作为他的用户存档提取语料
@@ -949,21 +959,17 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             // 序列中至少需要一条目标用户发言，否则没有可提取语料
             if (!history.some(m => isTargetUserMessage(m, userId, platform)))
                 return;
-            const profile = (await loadProfile(userKey)) ?? {
-                facts: [],
-                relationScore: 0,
-                interactionCount: 0,
-                updatedAt: 0,
-            };
-            const ops = await llmExtractFacts(history, profile.facts, nickname, userId, platform);
+            const snapshotFacts = (await loadProfile(mem, userKey))?.facts ?? [];
+            const ops = await llmExtractFacts(history, snapshotFacts, nickname, userId, platform);
             const hasFactOps = ops.add.length > 0 || ops.update.length > 0 || ops.remove.length > 0;
             if (!hasFactOps)
                 return;
-            const newFacts = mergeFacts(profile.facts, ops);
-            // 重新读取最新档案，避免覆盖提取期间（LLM 调用时）已写入的 relationScore 等字段
-            const freshProfile = (await loadProfile(userKey)) ?? profile;
-            await saveProfile(userKey, {
-                ...freshProfile,
+            // 以 LLM 返回后重读的档案为合并基底：调用期间档案可能被清空或删了事实，以调用前的快照
+            // 为基底会把删掉的内容整份写回；重读也保住期间写入的 relationScore 等字段
+            const fresh = (await loadProfile(mem, userKey)) ?? { facts: [], updatedAt: 0 };
+            const newFacts = mergeFactList(fresh.facts, ops.add, dropUpdatesOfDeletedFacts(ops.update, snapshotFacts, fresh.facts), ops.remove, cfg.maxFactsPerUser);
+            await saveProfile(mem, userKey, {
+                ...fresh,
                 facts: newFacts,
                 updatedAt: Date.now(),
             });
@@ -1057,53 +1063,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
                 logger.warn(`[user-profile] 自反思 LLM 输出无法解析为 JSON，原文前 200 字：${text.slice(0, 200)}`);
                 return empty;
             }
-            const obj = parsed;
-            const add = Array.isArray(obj.add)
-                ? obj.add.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    return [
-                        {
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                        },
-                    ];
-                })
-                : [];
-            const update = Array.isArray(obj.update)
-                ? obj.update.flatMap(x => {
-                    if (!x || typeof x !== 'object')
-                        return [];
-                    const o = x;
-                    const id = typeof o.id === 'string' ? o.id.trim() : '';
-                    const t = typeof o.text === 'string' ? o.text.trim() : '';
-                    if (!id || !t)
-                        return [];
-                    const category = normalizeCategory(o.category);
-                    return [
-                        {
-                            id,
-                            text: t,
-                            category,
-                            temporality: normalizeTemporality(o.temporality, category),
-                            timeHint: normalizeTextField(o.timeHint),
-                        },
-                    ];
-                })
-                : [];
-            const remove = Array.isArray(obj.remove)
-                ? obj.remove
-                    .filter((x) => typeof x === 'string' && x.trim().length > 0)
-                    .map(s => s.trim())
-                : [];
-            return { ...empty, add, update, remove };
+            return parseFactOps(parsed);
         }
         catch (err) {
             logger.debug(`自反思 LLM 调用失败：${err instanceof Error ? err.message : String(err)}`);
@@ -1119,7 +1079,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         selfReflectionInflight = true;
         try {
             const mem = memory.current;
-            if (!mem?.getHistory)
+            if (!mem)
                 return;
             const rawHistory = await mem.getHistory(sessionId, cfg.selfReflectHistory);
             const history = rawHistory.filter(m => m.kind !== WellKnownKinds.CrossSessionDelegation);
@@ -1127,18 +1087,14 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             if (!history.some(m => m.role === 'assistant' && m.content))
                 return;
             const selfKey = getSelfKey();
-            const profile = (await loadProfile(selfKey)) ?? {
-                facts: [],
-                relationScore: 0,
-                interactionCount: 0,
-                updatedAt: 0,
-            };
-            const ops = await llmReflectSelf(history, profile.facts);
+            const snapshotFacts = (await loadProfile(mem, selfKey))?.facts ?? [];
+            const ops = await llmReflectSelf(history, snapshotFacts);
             if (ops.add.length === 0 && ops.update.length === 0 && ops.remove.length === 0)
                 return;
-            const newFacts = mergeFactList(profile.facts, ops.add, ops.update, ops.remove, cfg.maxSelfFacts);
-            const fresh = (await loadProfile(selfKey)) ?? profile;
-            await saveProfile(selfKey, { ...fresh, facts: newFacts, updatedAt: Date.now() });
+            // 合并基底取重读结果，理由同 triggerExtractionForUser
+            const fresh = (await loadProfile(mem, selfKey)) ?? { facts: [], updatedAt: 0 };
+            const newFacts = mergeFactList(fresh.facts, ops.add, dropUpdatesOfDeletedFacts(ops.update, snapshotFacts, fresh.facts), ops.remove, cfg.maxSelfFacts);
+            await saveProfile(mem, selfKey, { ...fresh, facts: newFacts, updatedAt: Date.now() });
             logger.debug(`Aalis 自档案已更新 (${selfKey}): +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newFacts.length} 条`);
         }
         catch (err) {
@@ -1328,26 +1284,24 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         instructionExtractionInflight = true;
         try {
             const mem = memory.current;
-            if (!mem?.getHistory)
+            if (!mem)
                 return;
             const rawHistory = await mem.getHistory(sessionId, cfg.instructionHistoryForExtraction);
             const history = rawHistory.filter(m => m.kind !== WellKnownKinds.CrossSessionDelegation);
             if (history.length === 0)
                 return;
-            const doc = await loadInstructions();
+            const doc = await loadInstructions(mem);
             const ops = await llmExtractInstructions(history, doc.instructions, authorityFn);
             if (ops.add.length === 0 && ops.update.length === 0 && ops.remove.length === 0)
                 return;
-            const newInstructions = mergeInstructions(doc.instructions, ops.add.map(a => ({ ...a, sourceChannel: 'llm' })), ops.update.map(u => {
+            // 合并基底取 LLM 返回后重读的指令表：调用期间被清掉或删掉的指令不随调用前的快照写回；
+            // update 指向已不在的 id 时 mergeInstructions 本就跳过
+            const fresh = await loadInstructions(mem);
+            const newInstructions = mergeInstructions(fresh.instructions, ops.add.map(a => ({ ...a, sourceChannel: 'llm' })), ops.update.map(u => {
                 const { id, ...patch } = u;
                 return { id, patch };
             }), ops.remove);
-            const fresh = await loadInstructions();
-            await saveInstructions({
-                ...fresh,
-                instructions: newInstructions,
-                updatedAt: Date.now(),
-            });
+            await saveInstructions(mem, { instructions: newInstructions, updatedAt: Date.now() });
             logger.debug(`指令档案已更新 (${getInstructionsKey()}): +${ops.add.length} ~${ops.update.length} -${ops.remove.length} → ${newInstructions.length} 条`);
         }
         catch (err) {
@@ -1358,8 +1312,14 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         }
     }
     async function updateRelationForUser(userKey, triggerType, options) {
-        const profile = (await loadProfile(userKey)) ?? { facts: [], relationScore: 0, interactionCount: 0, updatedAt: 0 };
-        await saveProfile(userKey, applyRelationUpdate(profile, triggerType, options));
+        const mem = memory.current;
+        const profile = (await loadProfile(mem, userKey)) ?? {
+            facts: [],
+            relationScore: 0,
+            interactionCount: 0,
+            updatedAt: 0,
+        };
+        await saveProfile(mem, userKey, applyRelationUpdate(profile, triggerType, options));
     }
     // ─── 关系分数：在 agent 触发回复路径上更新 ───
     // 注:钩子无优先级机制,同相位 handler 按插件激活序执行;本 handler 只做副作用
@@ -1421,10 +1381,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             return true;
         if (cfg.temporaryFactMaxAgeDays <= 0)
             return true;
-        const base = fact.updatedAt || fact.observedAt || 0;
-        if (!base)
-            return true;
-        return Date.now() - base <= cfg.temporaryFactMaxAgeDays * 86_400_000;
+        return Date.now() - fact.updatedAt <= cfg.temporaryFactMaxAgeDays * 86_400_000;
     }
     function renderFactLine(fact, includeMeta) {
         if (!includeMeta)
@@ -1432,12 +1389,10 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         const meta = [];
         if (fact.timeHint)
             meta.push(`时间线索：${fact.timeHint}`);
-        const observed = fact.observedAt || fact.updatedAt;
-        if (observed)
-            meta.push(`记录于：${new Date(observed).toLocaleDateString('zh-CN')}`);
+        meta.push(`记录于：${new Date(fact.observedAt).toLocaleDateString('zh-CN')}`);
         if (fact.temporality === 'temporary')
             meta.push('临时状态');
-        return meta.length > 0 ? `- ${fact.text}（${meta.join('；')}）` : `- ${fact.text}`;
+        return `- ${fact.text}（${meta.join('；')}）`;
     }
     /** 将一个用户的 Fact[] 渲染为分组文本块 */
     function renderProfileBlock(facts, label, compact) {
@@ -1489,12 +1444,13 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             // 干跑(token 快照)跳过档案加载——该路径 userId 为空串,加载既昂贵又无意义
             if (data.dryRun)
                 return null;
+            const mem = memory.current;
             const blocksToInsert = [];
             const trigger = data.triggerType ?? 'direct';
             const hasPrimarySpeaker = trigger === 'direct' || trigger === 'immediate';
             // 0a. 第三方行为指令（最高优先级）：作为不可违逆的行为约束放在 selfFacts 之前
             if (cfg.enableInstructions) {
-                const insDoc = await loadInstructions();
+                const insDoc = await loadInstructionsLenient(mem);
                 if (insDoc.instructions.length > 0) {
                     const body = renderInstructionsBlock(insDoc.instructions);
                     const insBlock = '# 第三方行为准则（最高优先）\n' +
@@ -1510,7 +1466,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             }
             // 0. Aalis 自档案：永远尝试注入到最前段，作为人格延续锚点
             if (cfg.enableSelfProfile) {
-                const selfProfile = await loadProfile(getSelfKey());
+                const selfProfile = await loadProfileLenient(mem, getSelfKey());
                 const activeSelfFacts = selfProfile?.facts.filter(isFactActive) ?? [];
                 if (activeSelfFacts.length > 0) {
                     const body = renderProfileBlock(activeSelfFacts, 'Aalis', false);
@@ -1525,13 +1481,12 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             // 1. 主发言者完整档案：仅在确实有人在「和 Aalis 对话」时注入
             if (hasPrimarySpeaker && data.userId) {
                 const userKey = userKeyOf(data.platform, data.userId);
-                const profile = await loadProfile(userKey);
+                const profile = await loadProfileLenient(mem, userKey);
                 if (profile?.facts.some(isFactActive)) {
                     const body = renderProfileBlock(profile.facts, data.userId, false);
                     const relationLine = renderRelationLine(profile);
-                    // 可选：从 user-relation 服务取「同社群活跃成员」（Louvain 标签 + PageRank 排序）。
+                    // 可选：从 user-relation 服务取「同社群活跃成员」（按配置的社群发现算法所得标签 + PageRank 排序）。
                     // 服务不存在 / 节点没社群标签 / 报错都静默跳过；该字段是锦上添花，不破坏档案主体。
-                    // 同名描述符声明 optional 依赖，类型来自兄弟插件的 type-only 导入，不构成运行时包依赖。
                     let communityLine = '';
                     try {
                         const relation = userRelation.current;
@@ -1593,7 +1548,6 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
                         break;
                 }
                 if (cfg.allowGlobalBackfill && others.size < candidateLimit) {
-                    const mem = memory.current;
                     if (mem) {
                         try {
                             const globalRecent = await mem.listMetadata(PROFILE_NS);
@@ -1624,13 +1578,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
                 if (others.size > 0) {
                     const snippets = [];
                     for (const [key, info] of others) {
-                        let profile;
-                        try {
-                            profile = await loadProfile(key);
-                        }
-                        catch {
-                            /* 静默跳过 */
-                        }
+                        const profile = await loadProfileLenient(mem, key);
                         if (!profile?.facts.some(isFactActive))
                             continue;
                         const label = info.nickname ? `${info.nickname}（${info.userId}）` : info.userId;
@@ -1674,31 +1622,44 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             // 批量提交：逐条 delete 中途失败会留下「删了一半」的档案，而用户看到的是报了成功。
             // 注意 commitMetadata 的原子性**按后端分档**（见 api-memory 契约）——sqlite/inmemory
             // 是真原子，mongodb 只保证按序执行遇错即停，仍可能停在半新半旧。批量的确定收益是
-            // 一次往返 + 遇错即停，不是无条件的「要么全成」。
-            const items = await mem.listMetadata(PROFILE_NS);
-            await mem.commitMetadata(items.map(it => ({ op: 'del', namespace: PROFILE_NS, key: it.key })));
-            data.results.push({ source: 'user-profile', success: true, message: `用户档案已清空 (${items.length} 条)` });
+            // 一次往返 + 遇错即停，不是无条件的「要么全成」。读不出的条目一并删除，计入条数。
+            const [keys] = await clearMetadataNamespaces(mem, [PROFILE_NS], logger);
+            data.results.push({
+                source: 'user-profile',
+                type: 'user-profile',
+                success: true,
+                message: `用户档案已清空 (${keys.length} 条)`,
+            });
         }
         catch (err) {
             const m = err instanceof Error ? err.message : String(err);
-            data.results.push({ source: 'user-profile', success: false, message: `用户档案清空失败: ${m}` });
+            data.results.push({
+                source: 'user-profile',
+                type: 'user-profile',
+                success: false,
+                message: `用户档案清空失败: ${m}`,
+            });
         }
         // 同步清空第三方行为指令档案（per-persona）。指令是档案的兄弟概念，
         // memory:clear scope='all' 时一并清理；types 默认包含 user-profile 即也清。
-        if (cfg.enableInstructions) {
-            try {
-                const insItems = await mem.listMetadata(INSTRUCTIONS_NS);
-                await mem.commitMetadata(insItems.map(it => ({ op: 'del', namespace: INSTRUCTIONS_NS, key: it.key })));
-                data.results.push({
-                    source: 'user-profile-instructions',
-                    success: true,
-                    message: `第三方行为指令已清空 (${insItems.length} 条)`,
-                });
-            }
-            catch (err) {
-                const m = err instanceof Error ? err.message : String(err);
-                data.results.push({ source: 'user-profile-instructions', success: false, message: `指令清空失败: ${m}` });
-            }
+        // 不看 enableInstructions：开关管功能用不用，不管已有数据能不能清。
+        try {
+            const [insKeys] = await clearMetadataNamespaces(mem, [INSTRUCTIONS_NS], logger);
+            data.results.push({
+                source: 'user-profile-instructions',
+                type: 'user-profile',
+                success: true,
+                message: `第三方行为指令已清空 (${insKeys.length} 条)`,
+            });
+        }
+        catch (err) {
+            const m = err instanceof Error ? err.message : String(err);
+            data.results.push({
+                source: 'user-profile-instructions',
+                type: 'user-profile',
+                success: false,
+                message: `指令清空失败: ${m}`,
+            });
         }
         await next();
     });
@@ -1761,7 +1722,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
                     error: '需提供 user_key 或 (platform + user_id) 或 self=true。',
                 });
             }
-            const profile = await loadProfile(userKey);
+            const profile = await loadProfileLenient(memory.current, userKey);
             if (!profile || profile.facts.length === 0) {
                 return JSON.stringify({ ok: true, userKey, found: false, message: '该用户暂无档案数据。' });
             }
@@ -1794,7 +1755,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         if (!userId)
             return '当前会话未识别用户身份，无法查看档案。';
         const userKey = userKeyOf(argv.session.platform, userId);
-        const profile = await loadProfile(userKey);
+        const profile = await loadProfileLenient(memory.current, userKey);
         if (!profile || profile.facts.length === 0) {
             return `📭 暂无档案数据 (${userKey})`;
         }
@@ -1834,27 +1795,33 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         const target = String(targetArg ?? '');
         const factId = String(factIdArg ?? '');
         const userKey = target.includes(':') ? target : userKeyOf(argv.session.platform, target);
-        const profile = await loadProfile(userKey);
-        if (!profile || profile.facts.length === 0)
-            return `📭 无档案数据 (${userKey})`;
-        const hit = profile.facts.find(f => f.id === factId);
-        if (!hit) {
-            const listing = profile.facts
-                .slice(0, 20)
-                .map(f => `  [${f.id}] ${f.text.slice(0, 50)}`)
-                .join('\n');
-            return `未找到事实 [${factId}]。${userKey} 现有 ${profile.facts.length} 条：\n${listing}`;
-        }
-        await saveProfile(userKey, {
-            ...profile,
-            facts: profile.facts.filter(f => f.id !== factId),
-            updatedAt: Date.now(),
-        });
-        return `✅ 已删除 ${userKey} 的事实 [${factId}]：${hit.text.slice(0, 60)}`;
+        const mem = memory.current;
+        try {
+            const profile = await loadProfile(mem, userKey);
+            if (!profile || profile.facts.length === 0)
+                return `📭 无档案数据 (${userKey})`;
+            const hit = profile.facts.find(f => f.id === factId);
+            if (!hit) {
+                const listing = profile.facts
+                    .slice(0, 20)
+                    .map(f => `  [${f.id}] ${f.text.slice(0, 50)}`)
+                    .join('\n');
+                return `未找到事实 [${factId}]。${userKey} 现有 ${profile.facts.length} 条：\n${listing}`;
+            }
+            await saveProfile(mem, userKey, {
+                ...profile,
+                facts: profile.facts.filter(f => f.id !== factId),
+                updatedAt: Date.now(),
+            });
+            return `✅ 已删除 ${userKey} 的事实 [${factId}]：${hit.text.slice(0, 60)}`;
+        }
+        catch (err) {
+            return `❌ 删除失败：${err instanceof Error ? err.message : String(err)}`;
+        }
     });
     commands.command('profile.self', '查看 Aalis 的自档案（跨会话的内心状态）').action(async () => {
         const selfKey = getSelfKey();
-        const profile = await loadProfile(selfKey);
+        const profile = await loadProfileLenient(memory.current, selfKey);
         if (!profile || profile.facts.length === 0) {
             return `🌱 ${getCurrentPersonaName()} 还没有积累任何自反思事实。（key=${selfKey}）`;
         }
@@ -1880,9 +1847,8 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
             return '记忆服务不支持档案批量删除。';
         }
         try {
-            const items = await mem.listMetadata(PROFILE_NS);
-            await mem.commitMetadata(items.map(it => ({ op: 'del', namespace: PROFILE_NS, key: it.key })));
-            return `✅ 已清空全部用户档案（${items.length} 条）`;
+            const [keys] = await clearMetadataNamespaces(mem, [PROFILE_NS], logger);
+            return `✅ 已清空全部用户档案（${keys.length} 条）`;
         }
         catch (err) {
             const m = err instanceof Error ? err.message : String(err);
@@ -1898,7 +1864,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         if (!cfg.enableInstructions)
             return '🚫 第三方行为指令功能未启用。';
         const personaName = getCurrentPersonaName();
-        const doc = await loadInstructions();
+        const doc = await loadInstructionsLenient(memory.current);
         if (doc.instructions.length === 0) {
             return `📭 ${personaName} 当前没有任何第三方行为指令。`;
         }
@@ -1923,19 +1889,25 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         const userId = argv.session.userId;
         const sourceUserKey = userId ? userKeyOf(argv.session.platform, userId) : undefined;
         const sourceUserName = userId ?? '匿名';
-        const doc = await loadInstructions();
-        const merged = mergeInstructions(doc.instructions, [
-            {
-                text: body,
-                severity: 'should',
-                sourceUserKey,
-                sourceUserName,
-                sourceChannel: 'command',
-            },
-        ], [], []);
-        await saveInstructions({ instructions: merged, updatedAt: Date.now() });
-        const added = merged.find(m => m.text === clipInstructionText(body));
-        return `✅ 已添加行为指令${added ? `（id=${added.id}）` : ''}：${clipInstructionText(body)}`;
+        const mem = memory.current;
+        try {
+            const doc = await loadInstructions(mem);
+            const merged = mergeInstructions(doc.instructions, [
+                {
+                    text: body,
+                    severity: 'should',
+                    sourceUserKey,
+                    sourceUserName,
+                    sourceChannel: 'command',
+                },
+            ], [], []);
+            await saveInstructions(mem, { instructions: merged, updatedAt: Date.now() });
+            const added = merged.find(m => m.text === clipInstructionText(body));
+            return `✅ 已添加行为指令${added ? `（id=${added.id}）` : ''}：${clipInstructionText(body)}`;
+        }
+        catch (err) {
+            return `❌ 添加失败：${err instanceof Error ? err.message : String(err)}`;
+        }
     });
     commands
         .command('instruct.remove <id:string>', '按 id 删除一条第三方行为指令', { visibility: 'restricted' })
@@ -1945,13 +1917,19 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         const targetId = typeof id === 'string' ? id.trim() : '';
         if (!targetId)
             return '❌ 需要提供指令 id。';
-        const doc = await loadInstructions();
-        const target = doc.instructions.find(i => i.id === targetId);
-        if (!target)
-            return `❌ 未找到 id=${targetId} 的指令。`;
-        const merged = mergeInstructions(doc.instructions, [], [], [targetId]);
-        await saveInstructions({ instructions: merged, updatedAt: Date.now() });
-        return `✅ 已删除指令（id=${targetId}）：${target.text}`;
+        const mem = memory.current;
+        try {
+            const doc = await loadInstructions(mem);
+            const target = doc.instructions.find(i => i.id === targetId);
+            if (!target)
+                return `❌ 未找到 id=${targetId} 的指令。`;
+            const merged = mergeInstructions(doc.instructions, [], [], [targetId]);
+            await saveInstructions(mem, { instructions: merged, updatedAt: Date.now() });
+            return `✅ 已删除指令（id=${targetId}）：${target.text}`;
+        }
+        catch (err) {
+            return `❌ 删除失败：${err instanceof Error ? err.message : String(err)}`;
+        }
     });
     commands
         .command('instruct.clear', '【危险】清空当前 persona 的全部第三方行为指令', {
@@ -1964,7 +1942,7 @@ function registerUserProfile({ memory, llm, events, hooks, contributions, config
         if (!mem)
             return '记忆服务不支持指令删除。';
         try {
-            const before = (await loadInstructions()).instructions.length;
+            const before = (await loadInstructionsLenient(mem)).instructions.length;
             await mem.deleteMetadata(INSTRUCTIONS_NS, getInstructionsKey());
             return `✅ ${getCurrentPersonaName()} 的第三方行为指令已清空（删除 ${before} 条）。`;
         }