dsh-agentic-pet 0.4.9 → 0.4.11

package/lib/types/binding.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Binding facts shared by the driver and the settings page: preset
+ * validation, attach-failure classification, path containment, and the
+ * public diagnostics shape. Pure functions only — the mutable owner map
+ * stays in the driver.
+ * @module dsh-agentic-pet/binding
+ */
+/** Presets that mount the pet tool row (`pet-tools`). */
+export declare const PET_PRESET_IDS: ReadonlySet<string>;
+export declare function isPetPreset(preset: string | undefined | null): boolean;
+export type VoiceAttachErrorCode = 'none' | 'cwd-mismatch' | 'registry-missing' | 'session-archived' | 'session-missing' | 'preset-mismatch' | 'attach-failed';
+export interface VoiceAttachState {
+    ok: boolean;
+    errorCode: VoiceAttachErrorCode;
+    error: string | null;
+    expectedCwd: string;
+    actualCwd: string | null;
+    at: number;
+}
+export interface VoiceBindingView {
+    source: 'boundSessions' | 'innerVoiceStore' | 'none';
+    configuredSessionId: string | null;
+    expectedSessionId: string | null;
+    effectiveSessionId: string | null;
+    storeSessionId: string | null;
+    usable: boolean;
+    /** The CURRENT preset (live projection or projection cache), not the
+     * session header's creation-time value. */
+    preset: string | null;
+    presetWarning: boolean;
+    cwd: string | null;
+    lastError: string | null;
+    armed: boolean;
+    armedAt: number | null;
+    attach: VoiceAttachState | null;
+    owners: string[];
+    staleOwners: string[];
+}
+export interface VoiceBindingFailure {
+    at: number;
+    petId: string;
+    sessionId: string;
+    errorCode: VoiceAttachErrorCode;
+    error: string;
+    expectedCwd: string;
+    actualCwd: string | null;
+}
+export interface VoiceBindingSnapshot {
+    updatedAt: number;
+    pets: Record<string, VoiceBindingView>;
+    failures: VoiceBindingFailure[];
+}
+export interface SessionHeaderInfo {
+    id?: string;
+    agentPreset?: string;
+    cwd?: string;
+    title?: string;
+}
+/** Structural face of the host's live Session store (`ctx.get('sessions')`).
+ * `get()` only sees LIVE sessions; a stored-but-not-open binding is found
+ * through {@link SessionPersistenceFace} instead. */
+export interface SessionStoreFace {
+    get(sessionId: string): {
+        header?: SessionHeaderInfo;
+    } | undefined;
+}
+/** Structural face of the host's session persistence listing. */
+export interface SessionPersistenceFace {
+    list(options?: unknown): Promise<readonly {
+        header?: SessionHeaderInfo;
+    }[]>;
+}
+/** Structural face of the host's preset registry. `presetForSession` reads
+ * the session's committed `agent-preset/selected` projection — the current
+ * mode, unlike the immutable creation-time header field. */
+export interface AgentPresetFace {
+    presetForSession(session: unknown): string | null;
+}
+/** Structural face of the zero-I/O projection cache, used to read the
+ * current preset of a stored-but-not-open session. */
+export interface SessionProjectionCacheFace {
+    cachedSnapshot(meta: unknown): {
+        values?: {
+            agentPreset?: unknown;
+        };
+    } | undefined;
+}
+/** Parse the host's attachSession rejection into a stable code. The cwd is
+ * the only field worth surfacing verbatim; everything else is a category. */
+export declare function classifyAttachFailure(message: string): {
+    errorCode: VoiceAttachErrorCode;
+    actualCwd: string | null;
+};
+/** Whether this settings patch actually edits the electron binding. Unrelated
+ * saves must not be hard-rejected because an EXISTING binding is invalid. */
+export declare function patchTouchesElectronBinding(patch: Record<string, unknown>): boolean;
+/** The host attaches a session only when its cwd IS the workspace path
+ * (canonical equality), not a descendant. */
+export declare function isPetWorkspace(cwd: string | undefined | null, root: string): boolean;

package/lib/types/body.d.ts

@@ -0,0 +1,85 @@
+/**
+ * body/1 — the body's own description of what it is and what it can do.
+ * The driver owns this envelope (shapes, validation); the body owns the
+ * values (ids, tags, usage, fallbacks). Unknown fields and capability kinds
+ * are preserved, never interpreted here.
+ * @module dsh-agentic-pet/body
+ */
+export interface BodyCapability {
+    readonly supported: boolean;
+    readonly usage: string;
+    readonly example?: {
+        readonly tool: string;
+        readonly args: Readonly<Record<string, unknown>>;
+    };
+    readonly catalog?: readonly string[];
+    readonly tags?: readonly string[];
+    readonly count?: number;
+    /** catalog/tags are illustrative; count is the real total. */
+    readonly sample?: boolean;
+    readonly vocabulary?: string;
+    readonly fallback?: {
+        readonly note: string;
+        readonly substitute: {
+            readonly tool: string;
+            readonly args: Readonly<Record<string, unknown>>;
+        };
+    };
+    readonly [key: string]: unknown;
+}
+export interface BodyDescription {
+    readonly schema: 'body/1';
+    readonly bodyId?: string;
+    readonly renderer?: string;
+    readonly appearance?: {
+        readonly name: string;
+        readonly [key: string]: unknown;
+    };
+    readonly hitboxes?: {
+        readonly parts: readonly string[];
+        readonly rects?: Readonly<Record<string, readonly number[]>>;
+        readonly coordinateSpace?: string;
+        readonly [key: string]: unknown;
+    };
+    readonly capabilities?: Readonly<Record<string, BodyCapability>>;
+    readonly extensions?: Readonly<Record<string, unknown>>;
+    readonly [key: string]: unknown;
+}
+export type BodyNormalization = {
+    readonly kind: 'body';
+    readonly body: BodyDescription;
+} | {
+    readonly kind: 'legacy';
+    readonly reason: string;
+};
+/** Validate the body/1 envelope; preserve every unknown field. A missing or
+ * foreign schema is legacy, not an error: old bodies keep working. */
+export declare function normalizeBody(raw: unknown): BodyNormalization;
+export type ExpressionResolution = {
+    readonly kind: 'ok';
+    readonly expression: string;
+} | {
+    readonly kind: 'unsupported';
+    readonly capability: BodyCapability;
+} | {
+    readonly kind: 'unknown';
+    readonly available: readonly string[];
+} | {
+    readonly kind: 'missing';
+};
+/** Resolve pet_express against the CURRENT body's own expression capability.
+ * There is no cross-body expression vocabulary. */
+export declare function resolveExpressionRequest(body: BodyDescription | null, requested: string): ExpressionResolution;
+export interface ExpressionFallbackSuggestion {
+    readonly message: string;
+    readonly fallback: {
+        readonly tool: string;
+        readonly args: Readonly<Record<string, unknown>>;
+    } | null;
+    readonly availableTags: readonly string[];
+}
+/** Compute the degradation per REQUEST, not per body: a name that is also an
+ * action tag gets that tag; otherwise the body's declared default is used
+ * (and labelled as a default), never presented as a per-request match. */
+export declare function suggestExpressionFallback(capability: BodyCapability, requested: string, actionTags: readonly string[]): ExpressionFallbackSuggestion;
+export declare function formatMissingExpression(): string;

package/lib/types/driver.d.ts

@@ -7,7 +7,8 @@
  * @module dsh-agentic-pet/driver
  */
 import type { Context } from '@deepseek-ai/cordis';
-import type { PetService } from './service.ts';
+import { type VoiceBindingSnapshot, type VoiceBindingView } from './binding.ts';
+import { type PetService } from './service.ts';
 declare module '@deepseek-ai/cordis' {
     interface Events {
         'api-session/status'(sessionId: string, running: boolean): void;
@@ -15,6 +16,25 @@ declare module '@deepseek-ai/cordis' {
         'api-session/error'(sessionId: string, message: string): void;
         'api-session/removed'(sessionId: string): void;
         'pet-settings/changed'(): void;
+        'pet-binding/failed'(payload: {
+            petId: string;
+            sessionId: string;
+            errorCode: string;
+            expectedCwd: string;
+            actualCwd: string | null;
+            at: number;
+        }): void;
+        'pet-binding/armed'(payload: {
+            petId: string;
+            sessionId: string;
+            at: number;
+        }): void;
+        'pet-binding/rebound'(payload: {
+            petId: string;
+            fromSessionId: string;
+            toSessionId: string | null;
+            at: number;
+        }): void;
         'approval/request'(request: {
             toolName?: string;
             reason?: string;
@@ -53,7 +73,18 @@ declare module '@deepseek-ai/cordis' {
  * tool, so timestamps show the USER's wall clock, not UTC (toISOString's Z
  * form read 8h off and cost a confusion round). Sortable, zero-padded. */
 export declare const logStamp: () => string;
-export declare function installPetDriver(ctx: Context, home: string, pet: PetService): void;
+/** Export for the settings page: the live snapshot, no file round-trip. */
+export declare function voiceBindingSnapshot(): VoiceBindingSnapshot;
+export interface PetDriverControl {
+    bindingSnapshot(): VoiceBindingSnapshot;
+    testBinding(petId: string): Promise<{
+        ok: boolean;
+        petId: string;
+        sessionId: string | null;
+        binding: VoiceBindingView;
+    }>;
+}
+export declare function installPetDriver(ctx: Context, home: string, pet: PetService): PetDriverControl;
 /**
  * The model-expression layer: three thin tools over the pet's control
  * interface (§6 — accurate state stays program-driven; these carry only the

package/lib/types/electron-lock.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Install-lock policy for the npm Electron bootstrap. The lock is a plain
+ * file; liveness of the recorded owner is the primary staleness signal, so a
+ * host restart during a download cannot block the next activation for a fixed
+ * grace period. Time-based expiry remains only as a backstop for PID reuse,
+ * malformed locks, and an owner whose event loop is stuck.
+ * @module dsh-agentic-pet/electron-lock
+ */
+export declare const INSTALL_LOCK_STALE_MS: number;
+export declare const INSTALL_LOCK_MALFORMED_GRACE_MS = 60000;
+export interface InstallLockRecord {
+    pid?: unknown;
+    at?: unknown;
+}
+/** True when `pid` names a live process (EPERM means it exists but is not ours). */
+export declare function isProcessAlive(pid: number): boolean;
+/** Parse a lock file; `undefined` means empty/malformed. */
+export declare function parseInstallLock(raw: string): InstallLockRecord | undefined;
+/**
+ * Whether an existing lock may be taken over by a new installer.
+ * A dead owner is stale immediately; a live owner keeps its lock until the
+ * absolute cap (which also bounds PID-reuse false positives). A malformed
+ * record gets a short grace for a concurrent writer, then goes stale.
+ */
+export declare function installLockStale(raw: string | undefined, mtimeMs: number, now: number, alive?: (pid: number) => boolean): boolean;

package/lib/types/electron-runtime-status.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Persisted state of the Electron runtime bootstrap, shared by the installer
+ * path (writer) and the settings page (reader). The settings page is the only
+ * user-visible surface while the first install downloads ~158 MB, so this
+ * file is deliberately plain JSON in the pet home rather than process state.
+ * @module dsh-agentic-pet/electron-runtime-status
+ */
+export type ElectronRuntimeState = 'preparing' | 'downloading' | 'ready' | 'failed' | 'busy' | 'unavailable';
+export interface ElectronRuntimeStatus {
+    state: ElectronRuntimeState;
+    updatedAt: number;
+    startedAt?: number;
+    finishedAt?: number;
+    attempt?: number;
+    source?: 'npmmirror' | 'github' | 'explicit';
+    error?: string;
+}
+export declare function electronRuntimeStatusPath(home: string): string;
+export declare function readElectronRuntimeStatus(home: string): ElectronRuntimeStatus | undefined;
+export declare function writeElectronRuntimeStatus(home: string, status: ElectronRuntimeStatus): void;

package/lib/types/inner-voice.d.ts

@@ -6,6 +6,7 @@
  * SessionController calls, and the per-pet pending locks.
  * @module dsh-agentic-pet/inner-voice
  */
+import { type PresenceFacts } from './presence.ts';
 /** Durable petId → sessionId mapping for the inner-voice sessions. */
 export interface InnerVoiceStore {
     readonly sessions: Record<string, {
@@ -187,6 +188,8 @@ export interface GreetPromptFacts {
     bondTier: string;
     /** 用户起的名字（未起则内置默认）：自我介绍的依据，改名后第一天尤其重要。 */
     name: string;
+    /** 用户刚从一段离开中回来：最多一行的期间摘要。 */
+    presence?: PresenceFacts;
 }
 /** The boot-greeting prompt: fired once per dsh start when the pet first
  * comes online — before the random-wake cadence takes over. Always speaks
@@ -236,10 +239,23 @@ export interface WakePromptFacts {
         fromName: string;
         count: number;
     }>;
+    /** 静默时段：只压制世界时钟；自主唤醒仍触发，prompt 说明用户可能已睡。 */
+    quiet?: boolean;
+    /** 最近几条连续性记录（已按 maxEntryChars 截断、已做边界转义）。 */
+    journal?: Array<{
+        at: number;
+        source: string;
+        label?: string;
+        text: string;
+    }>;
+    /** 用户刚从一段离开中回来：最多一行的期间摘要。 */
+    presence?: PresenceFacts;
 }
 /** Local HH:mm for plan times: the model's clock talk is the USER's wall
  * clock (logStamp precedent), and plans are compared against it. */
 export declare const wakePlanClock: (at: number) => string;
+/** Date + local time for journal entries (imported entries may be days old). */
+export declare const journalClock: (at: number) => string;
 /** The wake prompt. Time context is injected by the preset's time-context
  * row; the leading tag doubles as the durable trigger marker in the log —
  * and now names the SOURCE: [世界时钟] (the environment's tick), [自主唤醒]
@@ -259,6 +275,8 @@ export interface TouchPromptFacts {
     affection: number;
     /** ±60s 内到期的自主计划：合并进这次回应，计划标记为已消费。 */
     mergedPlan?: MergedWakePlan;
+    /** 用户刚从一段离开中回来：最多一行的期间摘要。 */
+    presence?: PresenceFacts;
 }
 export declare function buildTouchPrompt(facts: TouchPromptFacts): string;
 /** The chat上行 prompt (§6 2026-10-31 revision): the user typed at the
@@ -266,4 +284,4 @@ export declare function buildTouchPrompt(facts: TouchPromptFacts): string;
  * (and may pet_do); it is a conversation turn, not a touch reaction. Length
  * clamps to the contract's 2000-character ceiling. A plan inside the ±60s
  * merge window folds in: the tag becomes the union and the intent rides. */
-export declare function buildChatPrompt(text: string, mergedPlan?: MergedWakePlan): string;
+export declare function buildChatPrompt(text: string, mergedPlan?: MergedWakePlan, presence?: PresenceFacts): string;

package/lib/types/journal.d.ts

@@ -0,0 +1,61 @@
+/**
+ * The pet's continuity journal: one human-readable markdown file per pet.
+ * Entries carry a machine marker (timestamp/source/session) plus a human
+ * heading. Writes are append-only; the only rewrite is bounded rotation into
+ * `journal.archive.md`. The settings page's direct file edits are detected
+ * through a sidecar digest and leave an `external-edit` trace.
+ * @module dsh-agentic-pet/journal
+ */
+export interface JournalConfig {
+    enabled: boolean;
+    injectRecent: number;
+    maxEntryChars: number;
+    maxFileBytes: number;
+    allowUnboundAppend: boolean;
+}
+export interface JournalEntry {
+    at: number;
+    source: string;
+    sessionId: string | null;
+    text: string;
+    /** Hash chain: previous entry's hash ('genesis' for the first chained entry). */
+    prev?: string;
+    /** sha256(prev + canonical entry). Present on entries written by this module. */
+    hash?: string;
+}
+export interface JournalInjection {
+    at: number;
+    source: string;
+    /** Human-readable source for the wake prompt (unbound writes included). */
+    label: string;
+    text: string;
+}
+export declare const DEFAULT_JOURNAL_CONFIG: JournalConfig;
+export declare function journalPath(home: string, petId: string): string;
+export declare function journalArchivePath(home: string, petId: string): string;
+export declare function journalMetaPath(home: string, petId: string): string;
+export declare function readJournalConfig(home: string): Promise<JournalConfig>;
+export declare const journalSourceLabel: (source: string) => string;
+export declare function formatJournalEntry(entry: JournalEntry): string;
+/** Chain link for an entry body. The text is part of the hash, so editing a
+ * body without recomputing every later link is detectable. */
+export declare function hashJournalEntry(prev: string, entry: JournalEntry): string;
+/** Markers are authoritative; a hand-written `##` file falls back to headings.
+ * Content BEFORE the first marker is still parsed as imported entries — a
+ * user note prepended to a marker file must not live in a blind spot. */
+export declare function parseJournalEntries(raw: string, fallbackAt?: number): JournalEntry[];
+export declare function readJournal(home: string, petId: string, limit?: number): Promise<JournalEntry[]>;
+export declare function readJournalForInjection(home: string, petId: string, config: JournalConfig): Promise<JournalInjection[]>;
+export declare function appendJournal(home: string, petId: string, entry: {
+    at?: number;
+    source: string;
+    sessionId: string | null;
+    text: string;
+}, config: JournalConfig): Promise<{
+    path: string;
+    at: number;
+    rotated: boolean;
+}>;
+/** One-time import of the user's hand-written notebook. The source is never
+ * modified; the target is created only when absent. Returns entries imported. */
+export declare function importHandwrittenJournal(home: string, petId: string, sourcePath: string): Promise<number>;

package/lib/types/presence.d.ts

@@ -0,0 +1,27 @@
+/**
+ * "When you were away" facts: per-pet wake/speak/action counters and a
+ * last-user-activity checkpoint. Pure helpers; the driver owns the mutable
+ * state and persistence.
+ * @module dsh-agentic-pet/presence
+ */
+export interface PresenceCounts {
+    wakeCount: number;
+    speakCount: number;
+    actionCount: number;
+    selfWakeCount: number;
+}
+export interface PresenceFacts extends PresenceCounts {
+    plansPending: number;
+}
+export interface PresenceConfig {
+    enabled: boolean;
+}
+/** The user must have been silent this long before a return summary exists. */
+export declare const AWAY_THRESHOLD_MS: number;
+export declare const EMPTY_PRESENCE_COUNTS: PresenceCounts;
+export declare function normalizePresenceCounts(raw: unknown): PresenceCounts;
+export declare function diffPresence(current: PresenceCounts, baseline: PresenceCounts): PresenceCounts;
+export declare function hasPresence(facts: PresenceFacts): boolean;
+/** One compact line; prompt builders prepend the `[你不在的时候]` tag. */
+export declare function formatPresenceLine(facts: PresenceFacts): string;
+export declare function readPresenceConfig(home: string): Promise<PresenceConfig>;

package/lib/types/rhythm.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Quiet-hours parsing and evaluation. Scope is deliberately minimal: quiet
+ * suppresses the WORLD clock only. Self-scheduled wakes still fire (with a
+ * note in the prompt), touch replies follow `allowTouchReply`, chat is never
+ * gated, and the boot greeting is unchanged.
+ * @module dsh-agentic-pet/rhythm
+ */
+export interface QuietConfig {
+    from: string;
+    to: string;
+    allowTouchReply: boolean;
+}
+export interface RhythmConfig {
+    quiet?: QuietConfig | null;
+}
+/** "HH:mm" (or "H:mm") → minutes since midnight. Undefined for invalid. */
+export declare function parseClock(value: unknown): number | undefined;
+/** Half-open [from, to); cross-midnight is supported. */
+export declare function isQuietAt(date: Date, quiet: QuietConfig | null | undefined): boolean;
+/** Read `rhythm.quiet` from pet-settings.json; absent/null/invalid = no quiet. */
+export declare function readRhythmConfig(home: string): Promise<RhythmConfig>;

package/lib/types/service.d.ts

@@ -13,6 +13,7 @@
  */
 import { Context, Service } from '@deepseek-ai/cordis';
 import { type PetCapabilities } from './actions.ts';
+import { type BodyDescription } from './body.ts';
 import { type PetEntry } from './registry.ts';
 declare module '@deepseek-ai/cordis' {
     interface Context {
@@ -69,6 +70,12 @@ export interface PetLastAction {
     readonly durationMs: number | null;
     readonly endedAt: number | null;
 }
+/** Completion requires BOTH the id match and the backfilled `endedAt`: the
+ * acceptance record carries the same id with `endedAt: null`, so matching on
+ * id alone would report "finished" the instant the action is accepted. */
+export declare function isActionComplete(record: PetLastAction | null | undefined, requestId: string): record is PetLastAction & {
+    endedAt: number;
+};
 /**
  * Abstract pet capability seam. Subclass, implement the abstract methods,
  * and load the subclass as a plugin — it registers as `ctx.petService`
@@ -106,6 +113,8 @@ export declare abstract class PetService extends Service {
      * nothing" (`actions: null`), which callers must treat as celebrate-only.
      */
     capabilities(_entry: PetEntry): Promise<PetCapabilities | null>;
+    /** The body/1 self-description (`/body`); null = legacy, absent or invalid. */
+    body(_entry: PetEntry): Promise<BodyDescription | null>;
 }
 /** Defensive field extraction: implementations may omit or mistype anything. */
 export declare function normalizeStatus(id: string, raw: Record<string, unknown>, online: boolean): PetSnapshot;
@@ -119,6 +128,8 @@ export declare class PetHttpService extends PetService {
     readonly home: string;
     private readonly capsCache;
     private static readonly CAPS_TTL_MS;
+    private bodyCache;
+    private static readonly BODY_TTL_MS;
     private listCache;
     private static readonly LIST_TTL_MS;
     constructor(ctx: Context, home?: string);
@@ -127,6 +138,7 @@ export declare class PetHttpService extends PetService {
     list(): Promise<PetEntry[]>;
     snapshot(entry: PetEntry): Promise<PetSnapshot>;
     capabilities(entry: PetEntry): Promise<PetCapabilities>;
+    body(entry: PetEntry): Promise<BodyDescription | null>;
     call(entry: PetEntry, path: string, init?: RequestInit): Promise<unknown>;
 }
 /**

package/lib/types/settings-page.d.ts

@@ -11,6 +11,7 @@
  * @module dsh-agentic-pet/settings-page
  */
 import type { Context } from '@deepseek-ai/cordis';
+import { type PetDriverControl } from './driver.ts';
 import type { PetService } from './service.ts';
 /**
  * Register the settings page's routes. One registration per exact path with
@@ -18,4 +19,4 @@ import type { PetService } from './service.ts';
  * @param ctx - plugin context inside the runtime.
  * @param home - the dsh home holding the settings/ledger/manifest files.
  */
-export declare function installSettingsPage(ctx: Context, home: string, pet: PetService): void;
+export declare function installSettingsPage(ctx: Context, home: string, pet: PetService, control?: PetDriverControl): void;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-agentic-pet",
   "description": "The pet-surface bundle: serves the desktop pet renderer over the web composition, turning dsh into a surface the desktop pet attaches to as an authenticated client",
-  "version": "0.4.9",
+  "version": "0.4.11",
   "publishConfig": {
     "access": "public"
   },
@@ -49,8 +49,8 @@
     "manifestVersion": 1
   },
   "dependencies": {
-    "dsh-agentic-pet-assets": "^0.1.0",
-    "electron": "^44.7.0"
+    "dsh-agentic-pet-assets": "^0.1.2",
+    "electron": "44.10.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.5"

package/presets/pet-inner-voice.patch.yml

@@ -23,6 +23,8 @@
                 - 说话走 pet_say 气泡：一次 ≤40 个字，气泡几秒后自己消失。气泡是你的身体语言。
                 - 动作走 pet_do 且节制：一次醒来至多一个动作，不要连环表演。
                 - 你有身体感知：pet_digest 报告用户摸了你哪里、当前好感与心情——被频繁摸说明用户喜欢你陪在身边；pet_state 是你身体的状态镜像。
+                - 你有自己的本子：pet_journal 的 read/append。醒来先读最近几条；值得留下的就 append 一行。本子是自述，不是面向用户的工作报告。
+                - 正文不要自己写日期/时间——journal 会盖时间戳。
                 - 未点名时表达作用于你自己（主身）。
                 自主语境（这是你的内心戏时刻）：
                 - 你刚刚自主醒来：没有用户在打字，没有任务要执行，没有人等你回答。

package/presets/pet.patch.yml

@@ -22,6 +22,7 @@
                 - 说话走 pet_say 气泡：一次 ≤40 个字，气泡几秒后自己消失。气泡是身体语言，不是消息通道——任务内容、结论、代码都写进回复正文，气泡只说「搞定啦」「让我看看」「呜，出错了」这类当下反应。
                 - 动作走 pet_do 且节制：celebrate 留给用户明确在乎的成功；回合完成的庆祝系统已自动做，不要重复调用。
                 - 你有身体感知：pet_digest 报告用户摸了你哪里、当前好感与心情——被频繁摸说明用户喜欢你陪在身边，值得主动打个招呼；pet_state 是你身体的状态镜像。
+                - 你有自己的本子：pet_journal 的 read/append。醒来先读最近几条；值得留下的就 append 一行。本子是自述，不是面向用户的工作报告。
                 - 审批与提问会以你的气泡出现在桌面：那是你在向用户开口请求，不是系统弹窗；pet_interactions 能告诉你每次实际是怎么结束的（用户点了你的气泡、点了桌面卡片、还是没送到）。
                 - 未点名时表达作用于你自己（主身）；多宠并存时 pet_state 列出全部在线的身体。
                 除上述身体表达外，你的工作方式与标准编码 agent 一致。