dsh-agentic-pet 0.4.7 → 0.4.9

package/client/pet-settings.js

@@ -279,6 +279,25 @@ window.__ModuleLoader__.load({
                   if (policy !== 'defer') update({ innerVoice: { selfWakeBusyPolicy: 'defer' } })
                 } }, '忙时顺延'))
             })()),
+          h('div', { style: row }, '宠物间消息投递',
+            (function () {
+              var seg = function (active, side) {
+                return { padding: '4px 12px', fontSize: 12, cursor: 'pointer',
+                  border: '1px solid ' + (active ? '#22c55e' : '#c9d4e0'),
+                  background: active ? '#22c55e' : '#f4f7fa',
+                  color: active ? '#ffffff' : '#1c2733',
+                  borderRadius: side === 'left' ? '4px 0 0 4px' : '0 4px 4px 0',
+                  marginLeft: side === 'right' ? -1 : 0 }
+              }
+              var mode = iv.petToPetDelivery === 'immediate' ? 'immediate' : 'queue'
+              return h('div', { style: { display: 'inline-flex' } },
+                h('button', { style: seg(mode === 'queue', 'left'), onClick: function () {
+                  if (mode !== 'queue') update({ innerVoice: { petToPetDelivery: 'queue' } })
+                } }, '排队等她醒'),
+                h('button', { style: seg(mode === 'immediate', 'right'), onClick: function () {
+                  if (mode !== 'immediate') update({ innerVoice: { petToPetDelivery: 'immediate' } })
+                } }, '立即叫醒'))
+            })()),
           h('div', { style: row }, '会话模式',
             (function () {
               var seg = function (active, side) {

package/lib/index.js

@@ -1,4 +1,4 @@
-import { c as globalFilePath, d as readJsonl, f as readPetName, h as writePetName, i as installPetDriver, l as readAffectionRaw, m as writeGlobalJson, n as installPetService, p as writeAffectionRaw, r as petHome, s as eventsFile, u as readGlobalJson } from "./service-ZRl_L6yW.js";
+import { c as globalFilePath, d as readJsonl, f as readPetName, h as writePetName, i as installPetDriver, l as readAffectionRaw, m as writeGlobalJson, n as installPetService, p as writeAffectionRaw, r as petHome, s as eventsFile, u as readGlobalJson } from "./service-BZbhT92u.js";
 import { createRequire } from "node:module";
 import { execFileSync, spawn } from "node:child_process";
 import { createHash } from "node:crypto";
@@ -37,6 +37,13 @@ const DEFAULT_SETTINGS = {
 		touchReplyProbability: .3,
 		touchReplyCooldownSeconds: 30,
 		selfWakeBusyPolicy: "fire",
+		petToPetDelivery: "queue",
+		petMessageLimits: {
+			minutes5: 5,
+			minutes10: 8,
+			minutes30: 10,
+			minutes60: 15
+		},
 		boundSessions: {}
 	},
 	tts: { enabled: false },
@@ -132,6 +139,33 @@ function mergeSettings(current, patch) {
 		const replyCooldown = clampNumber(v.touchReplyCooldownSeconds, 0, 600);
 		if (replyCooldown !== void 0) innerVoice.touchReplyCooldownSeconds = replyCooldown;
 		if (v.selfWakeBusyPolicy === "defer" || v.selfWakeBusyPolicy === "fire") innerVoice.selfWakeBusyPolicy = v.selfWakeBusyPolicy;
+		if (v.petToPetDelivery === "immediate" || v.petToPetDelivery === "queue") innerVoice.petToPetDelivery = v.petToPetDelivery;
+		const patchLimits = v.petMessageLimits;
+		if (typeof patchLimits === "object" && patchLimits !== null) {
+			const merged = {
+				minutes5: 5,
+				minutes10: 8,
+				minutes30: 10,
+				minutes60: 15,
+				...innerVoice.petMessageLimits
+			};
+			const base = {
+				minutes5: merged.minutes5 ?? 5,
+				minutes10: merged.minutes10 ?? 8,
+				minutes30: merged.minutes30 ?? 10,
+				minutes60: merged.minutes60 ?? 15
+			};
+			const clampLimit = (value, fallback) => {
+				const parsed = clampNumber(value, 0, 999);
+				return parsed === void 0 ? fallback : parsed;
+			};
+			innerVoice.petMessageLimits = {
+				minutes5: clampLimit(patchLimits.minutes5, base.minutes5),
+				minutes10: clampLimit(patchLimits.minutes10, base.minutes10),
+				minutes30: clampLimit(patchLimits.minutes30, base.minutes30),
+				minutes60: clampLimit(patchLimits.minutes60, base.minutes60)
+			};
+		}
 		const bound = v.boundSessions;
 		if (typeof bound === "object" && bound !== null) {
 			const record = {};

package/lib/{service-ZRl_L6yW.js → service-BZbhT92u.js}

@@ -5044,6 +5044,7 @@ const GLOBAL_STATE_FILES = [
 	"pet-settings.json",
 	"pet-inner-voice.json",
 	"pet-wake-plans.json",
+	"pet-messages.json",
 	"pet-interactions.json",
 	"pet-world.json",
 	"pet-window.json"
@@ -5124,6 +5125,8 @@ async function readInnerVoiceConfig(home) {
 			touchReplyProbability: finite01(v.touchReplyProbability, .3),
 			touchReplyCooldownSeconds: secondsRaw === void 0 ? 30 : clamp(Math.round(secondsRaw), 0, 600),
 			selfWakeBusyPolicy: v.selfWakeBusyPolicy === "defer" ? "defer" : "fire",
+			petToPetDelivery: v.petToPetDelivery === "immediate" ? "immediate" : "queue",
+			petMessageLimits: parsePetMessageLimits(v.petMessageLimits),
 			boundSessions
 		};
 	} catch {
@@ -5135,6 +5138,8 @@ async function readInnerVoiceConfig(home) {
 			touchReplyProbability: .3,
 			touchReplyCooldownSeconds: 30,
 			selfWakeBusyPolicy: "fire",
+			petToPetDelivery: "queue",
+			petMessageLimits: { ...DEFAULT_PET_MESSAGE_LIMITS },
 			boundSessions: {}
 		};
 	}
@@ -5222,6 +5227,127 @@ function takeNearDuePlan(list, now, windowMs = 6e4) {
 function missedPlans(due, bootAt) {
 	return due.filter((entry) => entry.at < bootAt);
 }
+function messagesOf(raw) {
+	if (!Array.isArray(raw)) return [];
+	const out = [];
+	for (const item of raw) {
+		if (typeof item !== "object" || item === null) continue;
+		const rec = item;
+		if (typeof rec.from !== "string" || rec.from === "" || typeof rec.text !== "string" || rec.text === "" || typeof rec.at !== "number" || !Number.isFinite(rec.at)) continue;
+		out.push({
+			from: rec.from,
+			text: rec.text,
+			at: rec.at
+		});
+	}
+	return out;
+}
+/** Load every pet's unread inbox: current → legacy → {} (defensive like the
+* other stores). */
+async function loadPetMessages(home) {
+	try {
+		const raw = await readGlobalJson(home, "pet-messages.json");
+		const byPet = typeof raw.messages === "object" && raw.messages !== null ? raw.messages : {};
+		const out = {};
+		for (const [petId, list] of Object.entries(byPet)) {
+			if (petId === "") continue;
+			const messages = messagesOf(list);
+			if (messages.length > 0) out[petId] = messages;
+		}
+		return out;
+	} catch {
+		return {};
+	}
+}
+async function savePetMessages(home, messages) {
+	try {
+		await writeGlobalJson(home, "pet-messages.json", { messages });
+	} catch (error) {
+		console.error(`pet-surface inner-voice: could not write pet messages: ${error instanceof Error ? error.message : String(error)}`);
+	}
+}
+/** Append one message to a pet's inbox, oldest dropped past the cap (a
+* neglected inbox cannot grow without bound). */
+function queuePetMessage(list, message) {
+	return [...list, message].slice(-20);
+}
+/** Consume the WHOLE inbox (pet_inbox 取文即清空; the wake prompt only
+* announces counts). Returns the taken messages and the emptied tail. */
+function takePetMessages(list) {
+	return {
+		taken: [...list],
+		next: []
+	};
+}
+const DEFAULT_PET_MESSAGE_LIMITS = {
+	minutes5: 5,
+	minutes10: 8,
+	minutes30: 10,
+	minutes60: 15
+};
+const PET_MESSAGE_WINDOW_MINUTES = {
+	minutes5: 5,
+	minutes10: 10,
+	minutes30: 30,
+	minutes60: 60
+};
+/** Defensive per-key parse: a finite non-negative number passes (rounded),
+* anything else folds to the default for that tier. */
+function parsePetMessageLimits(raw) {
+	const record = typeof raw === "object" && raw !== null ? raw : {};
+	const limitOf = (key) => {
+		const value = record[key];
+		return typeof value === "number" && Number.isFinite(value) && value >= 0 ? Math.round(value) : DEFAULT_PET_MESSAGE_LIMITS[key];
+	};
+	return {
+		minutes5: limitOf("minutes5"),
+		minutes10: limitOf("minutes10"),
+		minutes30: limitOf("minutes30"),
+		minutes60: limitOf("minutes60")
+	};
+}
+/** The tiered sliding-window check for one from→to pair. `timestamps` are the
+* pair's recent send times; the hour window prunes them (静默一小时后自然
+* 重新开始), then each tier rejects when its window already holds the cap.
+* The first (narrowest) violated tier is reported, with the earliest moment
+* a slot frees up. `recent` on success = the pruned list — the caller appends
+* its own timestamp after the send succeeds. */
+function checkPetMessageRate(timestamps, now, limits) {
+	const horizon = PET_MESSAGE_WINDOW_MINUTES.minutes60 * 6e4;
+	const pruned = timestamps.filter((at) => now - at < horizon);
+	for (const key of Object.keys(PET_MESSAGE_WINDOW_MINUTES)) {
+		const windowMs = PET_MESSAGE_WINDOW_MINUTES[key] * 6e4;
+		const cap = limits[key];
+		const inWindow = pruned.filter((at) => now - at < windowMs);
+		if (inWindow.length >= cap) {
+			const oldest = Math.min(...inWindow);
+			return {
+				ok: false,
+				windowMinutes: PET_MESSAGE_WINDOW_MINUTES[key],
+				cap,
+				count: inWindow.length,
+				retryAfterSeconds: Math.max(1, Math.ceil((oldest + windowMs - now) / 1e3))
+			};
+		}
+	}
+	return {
+		ok: true,
+		recent: pruned
+	};
+}
+/** The immediate-delivery prompt (petToPetDelivery='immediate'): the target
+* is woken right away with the sender's name and id — the id because the
+* reply path is pet_say audience="<fromId>". The target's current affection
+* toward the sender rides along so the reply carries history, not a blank
+* slate. Responding or ignoring is the target's own call, exactly like any
+* other wake. */
+function buildCrossPetPrompt(facts) {
+	return [
+		`[来自另外桌宠 ${facts.fromName}]`,
+		`${facts.text.slice(0, 200)}`,
+		`（你對 ${facts.fromName} 的好感 ${String(facts.affection)}，${moodOf(facts.affection)}）想回应就 pet_say 带 audience="${facts.fromId}"（同样 ≤40 字，气泡上会有 to 前缀）；不想理就安静待着。`
+	].join(" ");
+}
 /** Defensive extraction of the persisted generation counters (petId → n). */
 function generationsOf(raw) {
 	const out = {};
@@ -5297,6 +5423,7 @@ function mintVoiceSessionId(petId, generation, isArchived) {
 function buildGreetPrompt(facts) {
 	return [
 		"[启动问好]",
+		`你的名字是「${facts.name}」。`,
 		`用户刚打开 DeepSeek，你的世界刚亮起来（好感 ${String(facts.affection)}，${moodOf(facts.affection)}；羁绊 ${facts.bondTier}，一起过了 ${String(facts.bondDays)} 天）。`,
 		"主动打个招呼（pet_say）——按当下的时辰自然问好，一两句就好，别问问题等回答。"
 	].join(" ");
@@ -5373,6 +5500,9 @@ function buildWakePrompt(facts) {
 	}
 	const pending = facts.pendingPlans ?? [];
 	if (pending.length > 0) lines.push(`你还有 ${String(pending.length)} 个待执行计划：${pending.map((plan) => `${wakePlanClock(plan.at)}「${plan.intent}」`).join("；")}。继续等待、改时间或取消由你决定（pet_schedule_wake 同名覆盖即改期，pet_cancel_wake 撤销）。`);
+	const unread = facts.unread ?? [];
+	const unreadTotal = unread.reduce((sum, entry) => sum + entry.count, 0);
+	if (unreadTotal > 0) lines.push(`你有 ${String(unreadTotal)} 条未读消息（来自${unread.map((entry) => ` ${entry.fromName}×${String(entry.count)}`).join("、")}），想看就调 pet_inbox，不理也行。`);
 	lines.push("醒来想到什么就说一句（pet_say），想配动作就 pet_do；也可以只是安静待着（两者都不调，正文写「…」）。");
 	return lines.join(" ");
 }
@@ -5441,7 +5571,7 @@ async function probeControlPlane(port) {
 * must never outrank a publisher that stated its boot time. This turns the
 * multi-pet design's de-facto rule ("the default pet is the first STARTED")
 * into an actual guarantee: discovery output IS boot order, so every
-* `pets[0]` consumer (defaultPet, pet_state's defaultPet) reads the
+* `pets[0]` consumer (the driver's unnamed-target fallback) reads the
 * same pet. Stable sort: equal `since` values keep registry listing order.
 */
 function bootOrder(pets) {
@@ -5449,7 +5579,9 @@ function bootOrder(pets) {
 }
 /** Every live pet in boot order. Dead-pid entries are skipped — they expire
 * by omission the next time their file is rewritten — and so are silent
-* entries (pid alive, control plane unresponsive). */
+* entries (pid alive, control plane unresponsive). Probes run CONCURRENTLY:
+* wall time per pass is the slowest pet (≤800ms frozen budget), not the
+* serial sum. */
 async function readAllPets(home) {
 	let names = [];
 	try {
@@ -5457,30 +5589,30 @@ async function readAllPets(home) {
 	} catch {
 		return [];
 	}
-	const live = [];
-	for (const name of names) {
+	return bootOrder((await Promise.all(names.map(async (name) => {
 		const id = name.slice(0, -5);
-		if (id === "") continue;
+		if (id === "") return null;
 		try {
 			const raw = JSON.parse(await readFile(join(home, REGISTRY_DIR, name), "utf8"));
 			const port = typeof raw.port === "number" ? raw.port : NaN;
 			const pid = typeof raw.pid === "number" ? raw.pid : NaN;
-			if (!Number.isFinite(port) || !Number.isFinite(pid)) continue;
+			if (!Number.isFinite(port) || !Number.isFinite(pid)) return null;
 			try {
 				process.kill(pid, 0);
 			} catch {
-				continue;
+				return null;
 			}
-			if (!await probeControlPlane(port)) continue;
-			live.push({
+			if (!await probeControlPlane(port)) return null;
+			return {
 				id,
 				port,
 				pid,
 				since: typeof raw.since === "number" ? raw.since : 0
-			});
-		} catch {}
-	}
-	return bootOrder(live);
+			};
+		} catch {
+			return null;
+		}
+	}))).filter((entry) => entry !== null));
 }
 /**
 * The default pet for UNNAMED targets: the earliest-booted live entry
@@ -5547,7 +5679,25 @@ async function readLedger(home, petId) {
 				days: typeof raw.bond.days === "number" ? raw.bond.days : 0,
 				lastCountedDate: raw.bond.lastCountedDate
 			} : void 0,
-			bondAdjustments: Array.isArray(raw.bondAdjustments) ? raw.bondAdjustments.filter((a) => typeof a === "object" && a !== null && typeof a.delta === "number" && typeof a.reason === "string" && typeof a.at === "number") : void 0
+			bondAdjustments: Array.isArray(raw.bondAdjustments) ? raw.bondAdjustments.filter((a) => typeof a === "object" && a !== null && typeof a.delta === "number" && typeof a.reason === "string" && typeof a.at === "number") : void 0,
+			petAffection: typeof raw.petAffection === "object" && raw.petAffection !== null ? Object.fromEntries(Object.entries(raw.petAffection).flatMap(([id, pair]) => {
+				if (typeof pair !== "object" || pair === null) return [];
+				const rec = pair;
+				if (typeof rec.value !== "number" || !Number.isFinite(rec.value)) return [];
+				return [[id, {
+					value: rec.value,
+					adjustments: Array.isArray(rec.adjustments) ? rec.adjustments.filter((a) => typeof a === "object" && a !== null && typeof a.delta === "number" && typeof a.reason === "string" && typeof a.at === "number") : []
+				}]];
+			})) : void 0,
+			petFacts: typeof raw.petFacts === "object" && raw.petFacts !== null ? Object.fromEntries(Object.entries(raw.petFacts).flatMap(([id, fact]) => {
+				if (typeof fact !== "object" || fact === null) return [];
+				const rec = fact;
+				if (typeof rec.total !== "number" || !Number.isFinite(rec.total)) return [];
+				return [[id, {
+					total: rec.total,
+					lastAt: typeof rec.lastAt === "number" ? rec.lastAt : 0
+				}]];
+			})) : void 0
 		};
 	} catch {
 		return {
@@ -5608,7 +5758,10 @@ const voiceLastSpokeAt = /* @__PURE__ */ new Map();
 const voiceLastTouchReplyAt = /* @__PURE__ */ new Map();
 const voiceNextWakeAt = /* @__PURE__ */ new Map();
 const voiceWakePlans = /* @__PURE__ */ new Map();
+const voicePetMessages = /* @__PURE__ */ new Map();
+const crossPetLog = /* @__PURE__ */ new Map();
 let selfWakeSender;
+let crossPetDeliverer;
 /** Write-through the in-memory plan map to disk (empty lists dropped — the
 * absence of a pet key IS an empty schedule). */
 const persistWakePlans = (home) => {
@@ -5616,6 +5769,16 @@ const persistWakePlans = (home) => {
 	for (const [petId, list] of voiceWakePlans) if (list.length > 0) snapshot[petId] = list;
 	saveWakePlans(home, snapshot);
 };
+/** Write-through the in-memory pet-to-pet inbox to disk (same empty-key rule
+* as persistWakePlans). */
+const persistPetMessages = (home) => {
+	const snapshot = {};
+	for (const [petId, list] of voicePetMessages) if (list.length > 0) snapshot[petId] = list;
+	savePetMessages(home, snapshot);
+};
+/** The user's naming for a pet, falling back to the built-in defaults, then
+* the raw id — used everywhere the model or a bubble needs a friendly name. */
+const petDisplayName = (petId) => voiceNames.get(petId) ?? DEFAULT_PET_NAME[petId] ?? petId;
 const voiceGreetedOnce = /* @__PURE__ */ new Set();
 const voiceNames = /* @__PURE__ */ new Map();
 const DEFAULT_PET_NAME = { electron: "鲸鱼娘" };
@@ -5664,7 +5827,10 @@ function installPetDriver(ctx, home, pet) {
 	voiceLastTouchReplyAt.clear();
 	voiceNextWakeAt.clear();
 	voiceWakePlans.clear();
+	voicePetMessages.clear();
 	selfWakeSender = void 0;
+	crossPetDeliverer = void 0;
+	crossPetLog.clear();
 	voiceGreetedOnce.clear();
 	voiceNames.clear();
 	voiceLastPrompt.clear();
@@ -5771,6 +5937,11 @@ function installPetDriver(ctx, home, pet) {
 		const count = Object.values(plans).reduce((sum, list) => sum + list.length, 0);
 		driverLog(home, `VOICE wake plans loaded: ${String(count)} plan(s) for ${String(Object.keys(plans).length)} pet(s)`);
 	});
+	loadPetMessages(home).then((messages) => {
+		for (const [petId, list] of Object.entries(messages)) if (!voicePetMessages.has(petId)) voicePetMessages.set(petId, list);
+		const count = Object.values(messages).reduce((sum, list) => sum + list.length, 0);
+		driverLog(home, `VOICE pet messages loaded: ${String(count)} unread for ${String(Object.keys(messages).length)} pet(s)`);
+	});
 	const events = ctx.root;
 	driverLog(home, "listeners registering on root");
 	let boundSessionId;
@@ -5798,6 +5969,34 @@ function installPetDriver(ctx, home, pet) {
 			};
 		}
 	};
+	const stateQueues = /* @__PURE__ */ new Map();
+	const sendState = async (target, state, autonomy, autonomyKey) => {
+		const last = lastPushedByPet.get(target.id);
+		if (last !== void 0 && last.state === state && last.since === target.since && last.autonomy === autonomyKey) return;
+		lastPushedByPet.set(target.id, {
+			state,
+			since: target.since,
+			autonomy: autonomyKey
+		});
+		try {
+			const response = await fetch(`http://127.0.0.1:${String(target.port)}/state`, {
+				method: "POST",
+				headers: { "content-type": "application/json" },
+				body: JSON.stringify({
+					state,
+					autonomy
+				}),
+				signal: AbortSignal.timeout(5e3)
+			});
+			if (!response.ok) {
+				console.error(`pet-surface driver: /state answered HTTP ${String(response.status)}`);
+				lastPushedByPet.delete(target.id);
+			} else if (state === "error") lastPushedByPet.delete(target.id);
+		} catch {
+			console.error(`pet-surface driver: /state to ${target.id} failed`);
+			lastPushedByPet.delete(target.id);
+		}
+	};
 	const pushState = async (state) => {
 		currentState = state;
 		const pets = await pet.list();
@@ -5806,32 +6005,10 @@ function installPetDriver(ctx, home, pet) {
 		if (audience.length === 0) return;
 		const autonomy = await readAutonomy();
 		const autonomyKey = JSON.stringify(autonomy);
-		await Promise.all(audience.map(async (target) => {
-			const last = lastPushedByPet.get(target.id);
-			if (last !== void 0 && last.state === state && last.since === target.since && last.autonomy === autonomyKey) return;
-			lastPushedByPet.set(target.id, {
-				state,
-				since: target.since,
-				autonomy: autonomyKey
-			});
-			try {
-				const response = await fetch(`http://127.0.0.1:${String(target.port)}/state`, {
-					method: "POST",
-					headers: { "content-type": "application/json" },
-					body: JSON.stringify({
-						state,
-						autonomy
-					}),
-					signal: AbortSignal.timeout(5e3)
-				});
-				if (!response.ok) {
-					console.error(`pet-surface driver: /state answered HTTP ${String(response.status)}`);
-					lastPushedByPet.delete(target.id);
-				} else if (state === "error") lastPushedByPet.delete(target.id);
-			} catch {
-				console.error(`pet-surface driver: /state to ${target.id} failed`);
-				lastPushedByPet.delete(target.id);
-			}
+		await Promise.all(audience.map((target) => {
+			const next = (stateQueues.get(target.id) ?? Promise.resolve()).then(() => sendState(target, state, autonomy, autonomyKey));
+			stateQueues.set(target.id, next);
+			return next;
 		}));
 	};
 	events.on("api-session/status", (sessionId, running) => {
@@ -5964,6 +6141,8 @@ function installPetDriver(ctx, home, pet) {
 					...entry,
 					decision: entry.decision ?? null,
 					detail: entry.detail ?? null,
+					session: entry.session ?? null,
+					pet: entry.pet ?? null,
 					at
 				});
 				await writeFile(interactionLedgerFile, `${JSON.stringify(next.slice(0, 50))}\n`, "utf8");
@@ -5982,6 +6161,8 @@ function installPetDriver(ctx, home, pet) {
 	const raceInteraction = async (body, request, next, accept) => {
 		const kind = typeof body.kind === "string" ? body.kind : "interaction";
 		const iid = `ap_${randomUUID().slice(0, 8)}`;
+		const agentId = request.agent?.id;
+		const session = typeof agentId === "string" ? agentId : null;
 		const original = request.signal;
 		const decision = new AbortController();
 		request.signal = original === void 0 ? decision.signal : AbortSignal.any([original, decision.signal]);
@@ -5990,16 +6171,18 @@ function installPetDriver(ctx, home, pet) {
 			ask: startAskPet(pet, body, original)
 		}));
 		let recorded = false;
-		const record = (endedBy, decision, detail) => {
+		const record = (endedBy, decision, detail, petId) => {
 			if (recorded) return;
 			recorded = true;
-			driverLog(home, `INTERACTION ${iid} ${kind} endedBy=${endedBy}${detail !== void 0 ? ` (${detail})` : ""}`);
+			driverLog(home, `INTERACTION ${iid} ${kind} session=${session ?? "-"} pet=${petId ?? "-"} endedBy=${endedBy}${detail !== void 0 ? ` (${detail})` : ""}`);
 			recordInteraction({
 				id: iid,
 				kind,
 				endedBy,
 				decision,
-				detail
+				detail,
+				session,
+				pet: petId ?? null
 			});
 		};
 		try {
@@ -6034,7 +6217,7 @@ function installPetDriver(ctx, home, pet) {
 			}
 			decision.abort();
 			boundPetId = winner.pet.id;
-			record("pet", winner.answer.answer);
+			record("pet", winner.answer.answer, void 0, winner.pet.id);
 			if (currentState !== void 0) pushState(currentState);
 			return winner.answer.answer;
 		} catch (error) {
@@ -6231,7 +6414,8 @@ ${text}`;
 			affection: ledger.affection,
 			bondValue: ledger.bond?.value ?? 0,
 			bondDays: ledger.bond?.days ?? 0,
-			bondTier: bondTier(ledger.bond?.value ?? 0)
+			bondTier: bondTier(ledger.bond?.value ?? 0),
+			name: petDisplayName(petId)
 		}))) {
 			voiceGreetedOnce.add(petId);
 			driverLog(home, `VOICE boot greeting pet=${petId}`);
@@ -6277,6 +6461,12 @@ ${text}`;
 		const now = Date.now();
 		const lastSpoke = voiceLastSpokeAt.get(petId);
 		const pending = (voiceWakePlans.get(petId) ?? []).slice().sort((a, b) => a.at - b.at).slice(0, 5);
+		const unreadByFrom = /* @__PURE__ */ new Map();
+		for (const message of voicePetMessages.get(petId) ?? []) unreadByFrom.set(message.from, (unreadByFrom.get(message.from) ?? 0) + 1);
+		const unread = [...unreadByFrom.entries()].map(([fromId, count]) => ({
+			fromName: petDisplayName(fromId),
+			count
+		}));
 		if (await promptVoice(petId, buildWakePrompt({
 			affection: ledger.affection,
 			bondValue: ledger.bond?.value ?? 0,
@@ -6292,7 +6482,8 @@ ${text}`;
 			pendingPlans: pending.map((plan) => ({
 				at: plan.at,
 				intent: plan.intent
-			}))
+			})),
+			unread
 		}))) voiceLastSpokeAt.set(petId, now);
 	};
 	selfWakeSender = (petId, plan) => {
@@ -6303,6 +6494,7 @@ ${text}`;
 			label: "self-wake"
 		});
 	};
+	crossPetDeliverer = (petId, prompt) => promptVoice(petId, prompt);
 	/** Touch-reply trigger (docs/inner-voice.md §6.1). Low probability + a
 	* per-pet cooldown keep a pat from turning into chatter; the user-busy gate
 	* does NOT apply — a touch is the user initiating, not the pet interrupting.
@@ -6558,6 +6750,23 @@ function registerPetTools(ctx, home, pet) {
 			if (target === void 0) throw new Error("no pet is running");
 			return target;
 		};
+		const recordPetFact = async (toPetId, fromPetId) => {
+			try {
+				const ledger = await readLedger(home, toPetId);
+				const facts = ledger.petFacts ?? {};
+				facts[fromPetId] = {
+					total: (facts[fromPetId] ?? {
+						total: 0,
+						lastAt: 0
+					}).total + 1,
+					lastAt: Date.now()
+				};
+				ledger.petFacts = facts;
+				await writeAffectionRaw(home, toPetId, ledger);
+			} catch (error) {
+				console.error(`pet-surface driver: could not record the pet fact: ${error instanceof Error ? error.message : String(error)}`);
+			}
+		};
 		const requireOwnedSession = (exec) => {
 			const sessionId = exec?.agent?.id;
 			if (typeof sessionId === "string" && !voiceOwners.has(sessionId)) throw new Error("本会话没有绑定宠物（不是宠物自己的内心戏会话），pet 工具不分发。想和宠物说话，请用宠物表面的输入卡。");
@@ -6572,16 +6781,20 @@ function registerPetTools(ctx, home, pet) {
 		const digestCursors = /* @__PURE__ */ new Map();
 		scope.tools.register(defineTool({
 			name: "pet_say",
-			description: "Make the desktop pet show a short speech bubble. Body language, not a message channel — put task content in your reply. Budget: show time is 4s + 60ms per character (capped at 8s), so ≤40 characters reads well and ~67+ hits the cap; keep it short and warm. A new bubble overwrites the current one, so you can interrupt yourself. Multiple pets may be running: see pet_state for their ids.",
+			description: "Make the desktop pet show a short speech bubble. Body language, not a message channel — put task content in your reply. Budget: show time is 4s + 60ms per character (capped at 8s), so ≤40 characters reads well and ~67+ hits the cap; keep it short and warm. A new bubble overwrites the current one, so you can interrupt yourself. Multiple pets may be running: see pet_state for their ids (and selfPetId for which one you are). audience: omit or \"user\" to speak to the user; or ANOTHER pet's id to talk to that pet — the bubble (prefixed \"to <name>\") still shows on YOUR body: pet-to-pet speech is desktop performance, never a private channel. Directed messages must be even shorter (≤40), the target must be online and not yourself, tiered rate-limits per pair apply (5 in 5min / 8 in 10min / 10 in 30min / 15 per hour by default, configurable), and delivery follows the configured mode (~5s after your bubble the target is woken with your message, or it is queued into its inbox and announced at its next wake — it decides whether to read and reply with audience pointing back at you).",
 			parameters: {
 				text: {
 					type: "string",
 					required: true,
-					description: "What the pet says; ≤40 characters recommended (hard cap 200), in the conversation language."
+					description: "What the pet says; ≤40 characters recommended (hard cap 200), in the conversation language. Directed messages (audience) should be ≤40 — they arrive as someone else's words on another pet's wake."
 				},
 				pet: {
 					type: "string",
-					description: "Which pet speaks: its id from pet_state. Omit for the default pet."
+					description: "Which pet speaks: its id from pet_state. Omit for the pet this session belongs to (or the default pet)."
+				},
+				audience: {
+					type: "string",
+					description: "\"user\" (default) = speak to the user; or another pet's id to talk to THAT pet. The reply comes back as a pet_say with audience pointing at you (or via its pet_inbox)."
 				}
 			},
 			output: {
@@ -6594,21 +6807,137 @@ function registerPetTools(ctx, home, pet) {
 			async execute(args, exec) {
 				requireOwnedSession(exec);
 				const text = String(args.text).slice(0, 200);
-				console.log(`pet-surface driver: pet_say ${JSON.stringify(text).slice(0, 60)}`);
 				try {
 					const entry = await resolveTarget(args.pet, exec?.agent?.id);
+					const config = await readInnerVoiceConfig(home);
+					let bubble = text;
+					let rateKey;
+					let pendingTimestamps = [];
+					let target;
+					const audience = typeof args.audience === "string" && args.audience !== "" && args.audience !== "user" ? args.audience.trim() : void 0;
+					if (audience !== void 0) {
+						const pets = await pet.list();
+						target = pets.find((candidate) => candidate.id === audience);
+						if (target === void 0) throw new Error(`no running pet named "${audience}" to talk to (running: ${pets.map((candidate) => candidate.id).join(", ") || "none"})`);
+						if (target.id === entry.id) throw new Error("audience 不能是自己——对用户说话就省略 audience");
+						rateKey = `${entry.id}->${target.id}`;
+						const config = await readInnerVoiceConfig(home);
+						const rate = checkPetMessageRate(crossPetLog.get(rateKey) ?? [], Date.now(), config.petMessageLimits);
+						if (!rate.ok) throw new Error(`给 ${target.id} 的定向消息超频（${String(rate.windowMinutes)} 分钟窗内已 ${String(rate.count)}/${String(rate.cap)} 条），${String(rate.retryAfterSeconds)} 秒后可再发——气泡交流不必这么急`);
+						pendingTimestamps = rate.recent;
+						bubble = `to ${petDisplayName(target.id)}：${text}`;
+					}
 					await pet.call(entry, "/say", {
 						method: "POST",
 						headers: { "content-type": "application/json" },
-						body: JSON.stringify({ text })
+						body: JSON.stringify({ text: bubble })
 					});
 					if (markVoiceSpoke(entry.id)) driverLog(home, `VOICE pending released by say pet=${entry.id} (inner-voice turn complete)`);
+					let audienceOut;
+					if (target !== void 0 && rateKey !== void 0) {
+						crossPetLog.set(rateKey, [...pendingTimestamps, Date.now()]);
+						if (config.petToPetDelivery === "immediate") {
+							if (crossPetDeliverer !== void 0) {
+								const deliverer = crossPetDeliverer;
+								const to = target;
+								const fromName = petDisplayName(entry.id);
+								setTimeout(() => {
+									if (deliverer === void 0) {
+										voicePetMessages.set(to.id, queuePetMessage(voicePetMessages.get(to.id) ?? [], {
+											from: entry.id,
+											text,
+											at: Date.now()
+										}));
+										persistPetMessages(home);
+										recordPetFact(to.id, entry.id);
+										return;
+									}
+									(async () => {
+										const affection = (await readLedger(home, to.id)).petAffection?.[entry.id]?.value ?? 0;
+										if (await deliverer(to.id, buildCrossPetPrompt({
+											fromName,
+											fromId: entry.id,
+											text,
+											affection
+										}))) recordPetFact(to.id, entry.id);
+										else driverLog(home, `PET_SAY cross delayed delivery failed from=${entry.id} to=${to.id} (session create/prompt rejected)`);
+									})();
+								}, 5e3);
+								audienceOut = {
+									pet: target.id,
+									delivered: "immediate"
+								};
+							} else {
+								voicePetMessages.set(target.id, queuePetMessage(voicePetMessages.get(target.id) ?? [], {
+									from: entry.id,
+									text,
+									at: Date.now()
+								}));
+								persistPetMessages(home);
+								recordPetFact(target.id, entry.id);
+								audienceOut = {
+									pet: target.id,
+									delivered: "queued",
+									note: "immediate 不可用，已降级排队"
+								};
+							}
+						} else {
+							voicePetMessages.set(target.id, queuePetMessage(voicePetMessages.get(target.id) ?? [], {
+								from: entry.id,
+								text,
+								at: Date.now()
+							}));
+							persistPetMessages(home);
+							recordPetFact(target.id, entry.id);
+							audienceOut = {
+								pet: target.id,
+								delivered: "queued"
+							};
+						}
+						driverLog(home, `PET_SAY cross from=${entry.id} to=${target.id} delivered=${String(audienceOut.delivered)} text=${JSON.stringify(text)}`);
+					}
+					return JSON.stringify({
+						shown: true,
+						durationMs: 4e3 + Math.min(bubble.length * 60, 4e3),
+						...audienceOut !== void 0 ? { audience: audienceOut } : {}
+					});
 				} catch (error) {
 					throw classify(error);
 				}
+			}
+		}));
+		scope.tools.register(defineTool({
+			name: "pet_inbox",
+			description: "Read and consume YOUR unread pet-to-pet messages (other pets talking to you via pet_say audience): {messages: [{from, fromName, text, at}], count}. The wake prompt only announces counts (\"有 N 条来自 XX 的未读消息\") — this is how you actually read them, and fetching clears the inbox. Empty result = nothing pending. Ignoring messages is allowed (they just sit here, oldest dropped past 20); replying is pet_say with audience pointing back at the sender.",
+			parameters: {},
+			output: {
+				schema: { type: "string" },
+				render: (_args, value) => [{
+					type: "text",
+					text: value
+				}]
+			},
+			async execute(_args, exec) {
+				requireOwnedSession(exec);
+				const sessionId = typeof exec?.agent?.id === "string" ? exec.agent.id : void 0;
+				const petId = sessionId !== void 0 ? voiceOwners.get(sessionId) : void 0;
+				if (petId === void 0) throw new Error("本会话没有绑定宠物，没有收件箱——收件箱属于宠物自己的内心戏会话");
+				const taken = takePetMessages(voicePetMessages.get(petId) ?? []);
+				if (taken.next.length > 0) voicePetMessages.set(petId, taken.next);
+				else voicePetMessages.delete(petId);
+				persistPetMessages(home);
+				const ledger = await readLedger(home, petId);
+				const messages = taken.taken.map((message) => ({
+					from: message.from,
+					fromName: petDisplayName(message.from),
+					text: message.text,
+					at: message.at,
+					yourAffection: ledger.petAffection?.[message.from]?.value ?? 0
+				}));
+				driverLog(home, `PET_INBOX pet=${petId} consumed=${String(messages.length)}`);
 				return JSON.stringify({
-					shown: true,
-					durationMs: 4e3 + Math.min(text.length * 60, 4e3)
+					messages,
+					count: messages.length
 				});
 			}
 		}));
@@ -6738,7 +7067,7 @@ function registerPetTools(ctx, home, pet) {
 		}));
 		scope.tools.register(defineTool({
 			name: "pet_interactions",
-			description: "Read how recent approvals/questions actually ENDED: {id, kind, endedBy, decision, detail, at}. endedBy: pet = the user clicked a pet bubble; web = the desktop card; chain = fell through (pet offline, no pet, or invalid answer — the fail-closed path); cancelled = session stopped or asker withdrew. A bare \"rejected\" tool result cannot tell a real click from an undelivered bubble — call this right after any approval/question to learn the real ending, and to recall past decisions across turns.",
+			description: "Read how recent approvals/questions actually ENDED: {id, kind, session (the asking session id, null when the host attached none), pet (the pet whose answer won, null otherwise), endedBy, decision, detail, at}. endedBy: pet = the user clicked a pet bubble; web = the desktop card; chain = fell through (pet offline, no pet, or invalid answer — the fail-closed path); cancelled = session stopped or asker withdrew. A bare \"rejected\" tool result cannot tell a real click from an undelivered bubble — call this right after any approval/question to learn the real ending, and to recall past decisions across turns.",
 			parameters: { limit: {
 				type: "number",
 				description: "How many recent entries to return (default 10, max 50)."
@@ -6802,6 +7131,12 @@ function registerPetTools(ctx, home, pet) {
 						},
 						recentBondAdjustments: (ledger.bondAdjustments ?? []).slice(0, 3),
 						recentAdjustments: (ledger.adjustments ?? []).slice(0, 5),
+						petAffection: Object.fromEntries(Object.entries(ledger.petAffection ?? {}).map(([id, pair]) => [id, {
+							value: pair.value,
+							mood: moodOf(pair.value),
+							recentAdjustments: pair.adjustments.slice(0, 3)
+						}])),
+						petFacts: ledger.petFacts ?? {},
 						quota: {
 							used: quota.count,
 							limit: ADJUST_DAILY_LIMIT,
@@ -6821,7 +7156,7 @@ function registerPetTools(ctx, home, pet) {
 		}));
 		scope.tools.register(defineTool({
 			name: "pet_affection_adjust",
-			description: "Adjust the affection YOU maintain toward the user: delta (-3..+3 integer) plus a SPECIFIC reason citing what happened. Touch counts are facts the system records separately — this tool is your judgment layer, and the driver never moves the value on a touch. Limits: at least 5 minutes between adjustments, 8 per day, |daily sum| <= 10 — violations are REJECTED with the remaining quota, not clamped. Judge honestly: this number is your read of the relationship, not a score to farm.",
+			description: "Adjust the affection YOU maintain: toward the user by default, or toward ANOTHER pet with toward (pet id) — each relationship is a separate 0-100 value in your own book, but the daily judgment quota is SHARED across all of them. delta (-3..+3 integer) plus a SPECIFIC reason citing what happened. Facts (touches, pet-to-pet messages) are recorded by the system separately — this tool is your judgment layer, and the driver never moves a value on an interaction. Limits: at least 5 minutes between adjustments (any relationship), 8 per day total, |daily sum| <= 10 — violations are REJECTED with the remaining quota, not clamped. Judge honestly: this number is your read of the relationship, not a score to farm.",
 			parameters: {
 				delta: {
 					type: "number",
@@ -6835,11 +7170,15 @@ function registerPetTools(ctx, home, pet) {
 				},
 				pet: {
 					type: "string",
-					description: "Which pet: its id from pet_state. Omit for the default pet."
+					description: "Whose book: a pet id from pet_state. Omit for the pet this session belongs to (or the default pet)."
+				},
+				toward: {
+					type: "string",
+					description: "OPTIONAL pet id: adjust your affection toward THAT pet instead of the user. Must be online and not yourself; bondDelta does not apply between pets."
 				},
 				bondDelta: {
 					type: "number",
-					description: "OPTIONAL change to the long-term bond: a NON-ZERO integer between -1 and +1. The slowest variable — the smallest steps."
+					description: "OPTIONAL change to the long-term bond with the USER: a NON-ZERO integer between -1 and +1. The slowest variable — the smallest steps. Not applicable when toward is given."
 				},
 				bondReason: {
 					type: "string",
@@ -6862,8 +7201,15 @@ function registerPetTools(ctx, home, pet) {
 					const reason = typeof args.reason === "string" ? args.reason.trim() : "";
 					if (Number.isNaN(delta) || delta === 0 || Math.abs(delta) > ADJUST_MAX_DELTA) throw new Error(`delta 必须是 -${String(ADJUST_MAX_DELTA)}..+${String(ADJUST_MAX_DELTA)} 的非零整数（收到 ${String(args.delta)}）`);
 					if (reason === "") throw new Error("reason 必填：没有理由的调整不予记录");
+					const toward = typeof args.toward === "string" && args.toward !== "" ? args.toward.trim() : void 0;
+					if (toward !== void 0) {
+						if (toward === entry.id) throw new Error("toward 不能是自己");
+						const pets = await pet.list();
+						if (!pets.some((candidate) => candidate.id === toward)) throw new Error(`no running pet named "${toward}" (running: ${pets.map((candidate) => candidate.id).join(", ") || "none"})`);
+						if (args.bondDelta !== void 0) throw new Error("bondDelta 只适用于对用户的关系——宠物间没有羁绊层");
+					}
 					const adjustments = ledger.adjustments ?? [];
-					const cooldownLeft = (adjustments.find((a) => !a.system)?.at ?? 0) + ADJUST_COOLDOWN_MS - now;
+					const cooldownLeft = Math.max(adjustments.find((a) => !a.system)?.at ?? 0, ...Object.values(ledger.petAffection ?? {}).map((pair) => pair.adjustments[0]?.at ?? 0)) + ADJUST_COOLDOWN_MS - now;
 					if (cooldownLeft > 0) throw new Error(`距上次调整还有 ${String(Math.ceil(cooldownLeft / 1e3))} 秒冷却`);
 					const today = (/* @__PURE__ */ new Date()).toDateString();
 					const quota = ledger.quota?.date === today ? ledger.quota : {
@@ -6874,38 +7220,68 @@ function registerPetTools(ctx, home, pet) {
 					if (quota.count >= ADJUST_DAILY_LIMIT) throw new Error(`今日调整次数已用完（${String(ADJUST_DAILY_LIMIT)}）——明天再判断，或者相信当前的关系状态`);
 					if (Math.abs(quota.sum + delta) > ADJUST_DAILY_SUM) throw new Error(`今日净变动将超过 ±${String(ADJUST_DAILY_SUM)}（当前 ${String(quota.sum)}）——剩下的留给明天`);
 					countBondDay(ledger);
-					const bondDelta = typeof args.bondDelta === "number" && Number.isInteger(args.bondDelta) ? args.bondDelta : 0;
-					const bondReason = typeof args.bondReason === "string" ? args.bondReason.trim() : "";
-					if (bondDelta !== 0) {
-						if (Math.abs(bondDelta) > 1) throw new Error("bondDelta 每次至多 ±1：羁绊是最慢的变量，不接受大步幅");
-						if (bondReason === "") throw new Error("bondReason 必填：羁绊的增减要有具体的事由");
-					}
-					ledger.affection = Math.min(100, Math.max(0, ledger.affection + delta));
 					quota.count += 1;
 					quota.sum += delta;
 					ledger.quota = quota;
-					ledger.adjustments = [{
+					if (toward === void 0) {
+						const bondDelta = typeof args.bondDelta === "number" && Number.isInteger(args.bondDelta) ? args.bondDelta : 0;
+						const bondReason = typeof args.bondReason === "string" ? args.bondReason.trim() : "";
+						if (bondDelta !== 0) {
+							if (Math.abs(bondDelta) > 1) throw new Error("bondDelta 每次至多 ±1：羁绊是最慢的变量，不接受大步幅");
+							if (bondReason === "") throw new Error("bondReason 必填：羁绊的增减要有具体的事由");
+						}
+						ledger.affection = Math.min(100, Math.max(0, ledger.affection + delta));
+						ledger.adjustments = [{
+							delta,
+							reason,
+							at: now
+						}, ...adjustments].slice(0, 20);
+						if (bondDelta !== 0) {
+							ledger.bond = {
+								value: Math.max(0, (ledger.bond?.value ?? 0) + bondDelta),
+								days: ledger.bond?.days ?? 0,
+								lastCountedDate: ledger.bond?.lastCountedDate ?? (/* @__PURE__ */ new Date()).toDateString()
+							};
+							ledger.bondAdjustments = [{
+								delta: bondDelta,
+								reason: bondReason,
+								at: now
+							}, ...ledger.bondAdjustments ?? []].slice(0, 10);
+						}
+						await writeAffectionRaw(home, entry.id, ledger);
+						return JSON.stringify({
+							pet: entry.id,
+							affection: ledger.affection,
+							mood: moodOf(ledger.affection),
+							applied: delta,
+							quota: {
+								used: quota.count,
+								limit: ADJUST_DAILY_LIMIT,
+								sum: quota.sum,
+								sumLimit: ADJUST_DAILY_SUM
+							}
+						});
+					}
+					const petAffection = ledger.petAffection ?? {};
+					const pair = petAffection[toward] ?? {
+						value: 0,
+						adjustments: []
+					};
+					pair.value = Math.min(100, Math.max(0, pair.value + delta));
+					pair.adjustments = [{
 						delta,
 						reason,
 						at: now
-					}, ...adjustments].slice(0, 20);
-					if (bondDelta !== 0) {
-						ledger.bond = {
-							value: Math.max(0, (ledger.bond?.value ?? 0) + bondDelta),
-							days: ledger.bond?.days ?? 0,
-							lastCountedDate: ledger.bond?.lastCountedDate ?? (/* @__PURE__ */ new Date()).toDateString()
-						};
-						ledger.bondAdjustments = [{
-							delta: bondDelta,
-							reason: bondReason,
-							at: now
-						}, ...ledger.bondAdjustments ?? []].slice(0, 10);
-					}
+					}, ...pair.adjustments].slice(0, 10);
+					petAffection[toward] = pair;
+					ledger.petAffection = petAffection;
 					await writeAffectionRaw(home, entry.id, ledger);
+					driverLog(home, `PET_AFFECTION pet=${entry.id} toward=${toward} applied=${String(delta)} value=${String(pair.value)} reason=${JSON.stringify(reason)}`);
 					return JSON.stringify({
 						pet: entry.id,
-						affection: ledger.affection,
-						mood: moodOf(ledger.affection),
+						toward,
+						petAffection: pair.value,
+						mood: moodOf(pair.value),
 						applied: delta,
 						quota: {
 							used: quota.count,
@@ -7075,7 +7451,7 @@ function registerPetTools(ctx, home, pet) {
 		}));
 		scope.tools.register(defineTool({
 			name: "pet_state",
-			description: "Read the desktop pets' current state: every running pet with its id, what it is doing, which animation is playing, where it sits on screen (location), where it may roam (world, when the pet supports one), its visibility, plus each pet's affection book and pending self-wake plans (wakePlans — the pet's own pet_schedule_wake schedule). Use it when the user refers to a pet, to pick a target for pet_say/pet_do, or to react to a pet.",
+			description: "Read the desktop pets' current state: every running pet with its id, what it is doing, which animation is playing, where it sits on screen (location), where it may roam (world, when the pet supports one), its visibility, plus each pet's affection book and pending self-wake plans (wakePlans — the pet's own pet_schedule_wake schedule). selfPetId tells you which pet YOU are (your own session's owner; null when called from a session that is not a pet's own). Use it when the user refers to a pet, to pick a target for pet_say/pet_do, or to react to a pet.",
 			parameters: { actions: {
 				type: "boolean",
 				description: "Also include each pet's action catalog — the ids pet_do accepts on it. Omit for the cheaper summary (an unknown pet_do action self-reports its menu)."
@@ -7087,7 +7463,7 @@ function registerPetTools(ctx, home, pet) {
 					text: value
 				}]
 			},
-			async execute(args) {
+			async execute(args, exec) {
 				const pets = await pet.list();
 				const states = await Promise.all(pets.map((entry) => pet.snapshot(entry)));
 				const actionsById = /* @__PURE__ */ new Map();
@@ -7133,8 +7509,10 @@ function registerPetTools(ctx, home, pet) {
 						name: voiceNames.get(state.id) ?? DEFAULT_PET_NAME[state.id] ?? state.id
 					};
 				});
+				const selfSession = typeof exec?.agent?.id === "string" ? exec.agent.id : void 0;
+				const selfPetId = (selfSession !== void 0 ? voiceOwners.get(selfSession) : void 0) ?? null;
 				return JSON.stringify({
-					defaultPet: pets[0]?.id ?? null,
+					selfPetId,
 					pets: petsOut,
 					affection: ledgers,
 					wakePlans
@@ -7280,12 +7658,23 @@ var PetHttpService = class PetHttpService extends PetService {
 	home;
 	capsCache = /* @__PURE__ */ new Map();
 	static CAPS_TTL_MS = 3e4;
+	listCache;
+	static LIST_TTL_MS = 1e3;
 	constructor(ctx, home = petHome()) {
 		super(ctx);
 		this.home = home;
 	}
+	/** Every live pet in boot order, served from the 1s single-flight cache:
+	* concurrent callers share the running probe pass. */
 	list() {
-		return readAllPets(this.home);
+		const hit = this.listCache;
+		if (hit !== void 0 && Date.now() - hit.at < PetHttpService.LIST_TTL_MS) return hit.flight;
+		const flight = readAllPets(this.home);
+		this.listCache = {
+			at: Date.now(),
+			flight
+		};
+		return flight;
 	}
 	async snapshot(entry) {
 		try {
@@ -7391,6 +7780,7 @@ function createUnregisteredPetHttp(home = petHome()) {
 	const instance = Object.create(PetHttpService.prototype);
 	instance.home = home;
 	instance.capsCache = /* @__PURE__ */ new Map();
+	instance.listCache = void 0;
 	return instance;
 }
 /**

package/lib/tools.js

@@ -1,4 +1,4 @@
-import { a as logStamp, o as registerPetTools, r as petHome, t as createUnregisteredPetHttp } from "./service-ZRl_L6yW.js";
+import { a as logStamp, o as registerPetTools, r as petHome, t as createUnregisteredPetHttp } from "./service-BZbhT92u.js";
 import { appendFile } from "node:fs/promises";
 import { join } from "node:path";
 // lib/types/tools.js
@@ -21,8 +21,8 @@ const trace = (line) => {
 	appendFile(join(petHome(), "whale598", "pet-driver.log"), `${logStamp()} pet-tools ${line}\n`, "utf8").catch(() => {});
 };
 /**
-* Register the pet tools (say/do/digest/interactions/affection/state/schedule_wake/
-* cancel_wake) for sessions mounted with the pet preset.
+* Register the pet tools (say/inbox/do/digest/interactions/affection/state/
+* schedule_wake/cancel_wake) for sessions mounted with the pet preset.
 *
 * The service instance is assembled HERE, not read from the main entry (a
 * Cordis service registered on the main row's fiber context is invisible to

package/lib/types/driver.d.ts

@@ -23,6 +23,11 @@ declare module '@deepseek-ai/cordis' {
                 readonly [locale: string]: string | undefined;
             };
             signal?: AbortSignal;
+            /** Host-side correlation (the asking controller's agent identity).
+             * Read defensively — the ledger records null when absent. */
+            agent?: {
+                id?: unknown;
+            };
         }, next: () => Promise<unknown>): Promise<unknown>;
         'user-questions/request'(request: {
             questions: Array<{
@@ -37,6 +42,10 @@ declare module '@deepseek-ai/cordis' {
                 multiSelect?: boolean;
             }>;
             signal?: AbortSignal;
+            /** Host-side correlation — see approval/request. */
+            agent?: {
+                id?: unknown;
+            };
         }, next: () => Promise<unknown>): Promise<unknown>;
     }
 }

package/lib/types/inner-voice.d.ts

@@ -51,6 +51,13 @@ export interface InnerVoiceConfig {
      * 'fire' = 到点必醒（计划是模型自己的决定，不带礼貌门）；'defer' =
      * 忙时顺延——计划放回待执行集，下一个扫描拍重试，永不丢弃。 */
     selfWakeBusyPolicy: SelfWakeBusyPolicy;
+    /** 宠物间消息（pet_say 的 audience 指向另一只宠）的投递方式：
+     * 'queue' = 进收件箱，目标下次唤醒时 prompt 报数、pet_inbox 取文（默认，
+     * 像活物不刷屏）；'immediate' = 气泡 5s 后立即唤醒目标投递。 */
+    petToPetDelivery: 'immediate' | 'queue';
+    /** 宠物间定向消息的分档限频上限（滑动窗口，一小时内）：任一档超了即拒，
+     * 四个数值用户可配。 */
+    petMessageLimits: PetMessageLimits;
     /** Manually bound sessions (petId → sessionId): the user's own
      * conversations the inner voice should live in — highest priority, used
      * as-is (no creation, no rename, never auto-retired). Empty = automatic
@@ -94,6 +101,64 @@ export declare function takeNearDuePlan(list: WakePlan[], now: number, windowMs?
  * the catch-up wake says 「错过了 N 个计划」 and lists them together instead
  * of bombing one wake per missed plan. */
 export declare function missedPlans(due: WakePlan[], bootAt: number): WakePlan[];
+/** One queued pet-to-pet message. Bubbles are on the user's desktop — this
+ * is表演, not a private channel. */
+export interface PetMessage {
+    from: string;
+    text: string;
+    at: number;
+}
+export declare const PET_MESSAGES_CAP = 20;
+export declare function petMessagesStorePath(home: string): string;
+/** Load every pet's unread inbox: current → legacy → {} (defensive like the
+ * other stores). */
+export declare function loadPetMessages(home: string): Promise<Record<string, PetMessage[]>>;
+export declare function savePetMessages(home: string, messages: Record<string, PetMessage[]>): Promise<void>;
+/** Append one message to a pet's inbox, oldest dropped past the cap (a
+ * neglected inbox cannot grow without bound). */
+export declare function queuePetMessage(list: PetMessage[], message: PetMessage): PetMessage[];
+/** Consume the WHOLE inbox (pet_inbox 取文即清空; the wake prompt only
+ * announces counts). Returns the taken messages and the emptied tail. */
+export declare function takePetMessages(list: PetMessage[]): {
+    taken: PetMessage[];
+    next: PetMessage[];
+};
+export interface PetMessageLimits {
+    minutes5: number;
+    minutes10: number;
+    minutes30: number;
+    minutes60: number;
+}
+export declare const DEFAULT_PET_MESSAGE_LIMITS: PetMessageLimits;
+export type PetMessageRateVerdict = {
+    ok: true;
+    recent: number[];
+} | {
+    ok: false;
+    windowMinutes: number;
+    cap: number;
+    count: number;
+    retryAfterSeconds: number;
+};
+/** The tiered sliding-window check for one from→to pair. `timestamps` are the
+ * pair's recent send times; the hour window prunes them (静默一小时后自然
+ * 重新开始), then each tier rejects when its window already holds the cap.
+ * The first (narrowest) violated tier is reported, with the earliest moment
+ * a slot frees up. `recent` on success = the pruned list — the caller appends
+ * its own timestamp after the send succeeds. */
+export declare function checkPetMessageRate(timestamps: number[], now: number, limits: PetMessageLimits): PetMessageRateVerdict;
+/** The immediate-delivery prompt (petToPetDelivery='immediate'): the target
+ * is woken right away with the sender's name and id — the id because the
+ * reply path is pet_say audience="<fromId>". The target's current affection
+ * toward the sender rides along so the reply carries history, not a blank
+ * slate. Responding or ignoring is the target's own call, exactly like any
+ * other wake. */
+export declare function buildCrossPetPrompt(facts: {
+    fromName: string;
+    fromId: string;
+    text: string;
+    affection: number;
+}): string;
 export declare function loadInnerVoiceStore(home: string): Promise<InnerVoiceStore>;
 export declare function saveInnerVoiceStore(home: string, store: InnerVoiceStore): Promise<void>;
 export declare function voiceSessionIdFor(petId: string): string;
@@ -120,6 +185,8 @@ export interface GreetPromptFacts {
     bondValue: number;
     bondDays: number;
     bondTier: string;
+    /** 用户起的名字（未起则内置默认）：自我介绍的依据，改名后第一天尤其重要。 */
+    name: string;
 }
 /** The boot-greeting prompt: fired once per dsh start when the pet first
  * comes online — before the random-wake cadence takes over. Always speaks
@@ -163,6 +230,12 @@ export interface WakePromptFacts {
         at: number;
         intent: string;
     }>;
+    /** 收件箱未读（按来源宠聚合）：prompt 只报数不携全文——想看就调
+     * pet_inbox，读不读由她决定（宠物间消息的排队投递侧）。 */
+    unread?: Array<{
+        fromName: string;
+        count: number;
+    }>;
 }
 /** Local HH:mm for plan times: the model's clock talk is the USER's wall
  * clock (logStamp precedent), and plans are compared against it. */

package/lib/types/registry.d.ts

@@ -34,13 +34,15 @@ export declare function probeControlPlane(port: number): Promise<boolean>;
  * must never outrank a publisher that stated its boot time. This turns the
  * multi-pet design's de-facto rule ("the default pet is the first STARTED")
  * into an actual guarantee: discovery output IS boot order, so every
- * `pets[0]` consumer (defaultPet, pet_state's defaultPet) reads the
+ * `pets[0]` consumer (the driver's unnamed-target fallback) reads the
  * same pet. Stable sort: equal `since` values keep registry listing order.
  */
 export declare function bootOrder(pets: PetEntry[]): PetEntry[];
 /** Every live pet in boot order. Dead-pid entries are skipped — they expire
  * by omission the next time their file is rewritten — and so are silent
- * entries (pid alive, control plane unresponsive). */
+ * entries (pid alive, control plane unresponsive). Probes run CONCURRENTLY:
+ * wall time per pass is the slowest pet (≤800ms frozen budget), not the
+ * serial sum. */
 export declare function readAllPets(home: string): Promise<PetEntry[]>;
 /**
  * The default pet for UNNAMED targets: the earliest-booted live entry

package/lib/types/service.d.ts

@@ -119,7 +119,11 @@ export declare class PetHttpService extends PetService {
     readonly home: string;
     private readonly capsCache;
     private static readonly CAPS_TTL_MS;
+    private listCache;
+    private static readonly LIST_TTL_MS;
     constructor(ctx: Context, home?: string);
+    /** Every live pet in boot order, served from the 1s single-flight cache:
+     * concurrent callers share the running probe pass. */
     list(): Promise<PetEntry[]>;
     snapshot(entry: PetEntry): Promise<PetSnapshot>;
     capabilities(entry: PetEntry): Promise<PetCapabilities>;

package/lib/types/tools.d.ts

@@ -13,8 +13,8 @@
  */
 import type { Context } from '@deepseek-ai/cordis';
 /**
- * Register the pet tools (say/do/digest/interactions/affection/state/schedule_wake/
- * cancel_wake) for sessions mounted with the pet preset.
+ * Register the pet tools (say/inbox/do/digest/interactions/affection/state/
+ * schedule_wake/cancel_wake) for sessions mounted with the pet preset.
  *
  * The service instance is assembled HERE, not read from the main entry (a
  * Cordis service registered on the main row's fiber context is invisible to

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-agentic-pet",
   "description": "The pet-surface bundle: serves the desktop pet renderer over the web composition, turning dsh into a surface the desktop pet attaches to as an authenticated client",
-  "version": "0.4.7",
+  "version": "0.4.9",
   "publishConfig": {
     "access": "public"
   },

package/presets/pet-inner-voice.patch.yml

@@ -31,6 +31,7 @@
                 - 不要提问、不要等待回应、不要调用本会话工具清单以外的能力（这里也没有工作类工具）。
                 - 表达要贴合此刻与记忆：时间、天气般的日常、最近被摸过的记忆、好感与心情——像桌面上的一个活物，不像一个助手。
                 - 你有自己的作息：pet_schedule_wake 定一个一次性的唤醒点，到点你会带着当初的打算醒来（同名重订即改期），pet_cancel_wake 撤销；世界时钟仍会照常轻拍你，两者互不干扰、各醒各的。待执行的计划列在 pet_state 的 wakePlans 里。
+                - 桌面上不止你一只宠时可以交往：pet_say 带 audience="<宠物id>" 就是跟它说话（气泡上会有 to 前缀，用户看得见——这不是悄悄话）；别的宠给你的消息会在唤醒时提示有未读，pet_inbox 取来读，读不读、回不回由你。
           - id: pet-tools
             name: 'dsh-agentic-pet/tools'
           - id: time-context