dsh-instruction-memory 1.0.17 → 1.1.0

package/lib/index.js

@@ -92,6 +92,27 @@ const MAX_ENTRIES = 200
 const MAX_TITLE = 120
 const MAX_CONTENT = 6000
 const MAX_WHEN = 200
+/** Tags are short grouping labels for the settings page only; they never enter the injected block. */
+const MAX_TAGS_PER_ENTRY = 8
+const MAX_TAG_LENGTH = 24
+
+/**
+ * User-persona profiles ("用户形象"): facts about the USER (background,
+ * preferences, personality, goals) used to tilt how answers are framed. They
+ * are NOT roles the model is asked to play, and they are injected ahead of the
+ * instruction block under a header that demotes them to "tilt only, never
+ * override correctness or the question itself". They do not take part in the
+ * per-entry budget trimming: an identity must never be silently dropped.
+ */
+const MAX_PROFILES = 50
+const MAX_PROFILE_NAME = 40
+const MAX_PROFILE_CONTENT = 4000
+
+/**
+ * The batch operations the `batch` route accepts. Kept here so the command and
+ * the route's dispatch share one list.
+ */
+const BATCH_OPS = ['set-enabled', 'set-priority', 'add-tags', 'remove-tags', 'delete']
 
 /**
  * Request body ceiling for the settings-page route; anything larger is refused
@@ -106,7 +127,8 @@ const MAX_WHEN = 200
  * the flat slack covers the `{method,args:{payload:{app,…,data:{entries:[…]}}}}`
  * wrapper.
  */
-export const MAX_BODY_CHARS = MAX_ENTRIES * (MAX_CONTENT + MAX_TITLE + MAX_WHEN + 200) * 2 + 100_000
+export const MAX_BODY_CHARS = (MAX_ENTRIES * (MAX_CONTENT + MAX_TITLE + MAX_WHEN + MAX_TAGS_PER_ENTRY * MAX_TAG_LENGTH + 200)
+  + MAX_PROFILES * (MAX_PROFILE_CONTENT + MAX_PROFILE_NAME + 200)) * 2 + 100_000
 
 /** How long a crashed holder's `memory.json.lock` may block writes before it is stolen. */
 const LOCK_STALE_MS = 10_000
@@ -158,6 +180,34 @@ function priorityLabel(value) {
   return '普通'
 }
 
+/**
+ * Normalise an entry's `tags`: a de-duplicated, single-line, capped string
+ * array used ONLY by the settings page for grouping/filtering. Tags never
+ * appear in the injected block, so they do not touch buildBlock. Exported for
+ * tests and reused by the batch "add-tags" path so both merge through one
+ * rule. Non-array input (an old/hand-made entry without tags) is simply no
+ * tags, not an error; non-string/blank items are dropped; anything past
+ * MAX_TAGS_PER_ENTRY is ignored after de-duplication.
+ */
+export function sanitizeTags(raw) {
+  if (!Array.isArray(raw)) return []
+  const out = []
+  const seen = new Set()
+  for (const item of raw) {
+    if (typeof item !== 'string') continue
+    // Collapse ALL whitespace runs (newlines and repeated spaces) so the same
+    // typed label normalises identically whether it came from the editor's
+    // tag box, an import, or a hand edit — otherwise "a b" and "a  b" would
+    // both survive and fail to de-duplicate.
+    const tag = singleLine(item, MAX_TAG_LENGTH).replace(/\s+/g, ' ').trim()
+    if (tag === '' || seen.has(tag)) continue
+    seen.add(tag)
+    if (out.length >= MAX_TAGS_PER_ENTRY) break
+    out.push(tag)
+  }
+  return out
+}
+
 export function sanitizeEntry(raw) {
   if (raw === null || typeof raw !== 'object') return null
   const title = singleLine(raw.title, MAX_TITLE)
@@ -171,6 +221,31 @@ export function sanitizeEntry(raw) {
     when: singleLine(raw.when, MAX_WHEN),
     priority: raw.priority === 2 || raw.priority === 0 ? raw.priority : 1,
     enabled: raw.enabled !== false,
+    tags: sanitizeTags(raw.tags),
+    updatedAt: typeof raw.updatedAt === 'number' && Number.isFinite(raw.updatedAt) ? raw.updatedAt : Date.now(),
+  }
+}
+
+/**
+ * Normalise one "用户形象" (a fact about the USER, not a role for the model).
+ *
+ * Shape: { id, name, content, enabled, updatedAt }. `name` is a short single-
+ * line topic label ("职业背景"、"沟通偏好"、"性格"、"长期追求"); `content` is
+ * the multi-line description. Both blank means the profile is discarded
+ * (returns null) the same way a blank entry is. A blank name falls back to the
+ * first 20 characters of the content so an unnamed profile is still listable.
+ * Exported for tests.
+ */
+export function sanitizeProfile(raw) {
+  if (raw === null || typeof raw !== 'object') return null
+  const name = singleLine(raw.name, MAX_PROFILE_NAME)
+  const content = cleanText(raw.content, MAX_PROFILE_CONTENT)
+  if (name === '' && content === '') return null
+  return {
+    id: typeof raw.id === 'string' && raw.id !== '' ? raw.id.slice(0, 64) : makeId(),
+    name: name === '' ? singleLine(content, 20) : name,
+    content,
+    enabled: raw.enabled !== false,
     updatedAt: typeof raw.updatedAt === 'number' && Number.isFinite(raw.updatedAt) ? raw.updatedAt : Date.now(),
   }
 }
@@ -197,6 +272,16 @@ export function truncatedFields(raw) {
   return cut
 }
 
+/** Same disclosure as truncatedFields, but for a profile's name/content. */
+export function truncatedProfileFields(raw) {
+  if (raw === null || typeof raw !== 'object') return []
+  const cut = []
+  const unlimited = Number.MAX_SAFE_INTEGER
+  if (typeof raw.name === 'string' && singleLine(raw.name, unlimited) !== singleLine(raw.name, MAX_PROFILE_NAME)) cut.push('形象名称')
+  if (typeof raw.content === 'string' && cleanText(raw.content, unlimited) !== cleanText(raw.content, MAX_PROFILE_CONTENT)) cut.push('形象内容')
+  return cut
+}
+
 /** JSON.stringify keeps quotes/type visible; the String() tail is for values JSON cannot encode. */
 const describeValue = (value) => {
   const text = JSON.stringify(value)
@@ -229,7 +314,7 @@ const describeValue = (value) => {
  * user must be told their hand edit did not survive verbatim.
  */
 function normalizeData(raw) {
-  const data = { version: 1, rev: 0, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [] }
+  const data = { version: 1, rev: 0, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [], profiles: [] }
   if (raw === null || typeof raw !== 'object') return { data, dropped: 0, optionFixes: [] }
   if (typeof raw.version === 'number' && raw.version !== 1) {
     return { data, dropped: 0, optionFixes: [], rejectedVersion: raw.version }
@@ -272,7 +357,24 @@ function normalizeData(raw) {
     seen.add(entry.id)
     data.entries.push(entry)
   }
-  return { data, dropped, optionFixes }
+  // User profiles ("用户形象") follow the same tolerant rules: a missing
+  // field on an old/hand-made file is just an empty list; blank or
+  // over-cap profiles are dropped and counted for disclosure, never adopted
+  // silently (the next save rewrites the file without them).
+  const profileList = Array.isArray(raw.profiles) ? raw.profiles : []
+  const seenProfileIds = new Set()
+  let droppedProfiles = 0
+  for (const candidate of profileList) {
+    const profile = sanitizeProfile(candidate)
+    if (profile === null || data.profiles.length >= MAX_PROFILES) {
+      droppedProfiles += 1
+      continue
+    }
+    if (seenProfileIds.has(profile.id)) profile.id = makeId()
+    seenProfileIds.add(profile.id)
+    data.profiles.push(profile)
+  }
+  return { data, dropped, droppedProfiles, optionFixes }
 }
 
 /**
@@ -291,6 +393,7 @@ function cloneData(data) {
     enabled: data.enabled === true,
     budgetChars: data.budgetChars,
     entries: (Array.isArray(data.entries) ? data.entries : []).map((entry) => ({ ...entry })),
+    profiles: (Array.isArray(data.profiles) ? data.profiles : []).map((profile) => ({ ...profile })),
   }
 }
 
@@ -299,6 +402,11 @@ const droppedEntriesMessage = (count) =>
     ? '存储文件中有 ' + count + ' 条条目未能载入（内容为空或超过 ' + MAX_ENTRIES + ' 条上限）；下次保存时它们将从文件中移除'
     : null
 
+const droppedProfilesMessage = (count) =>
+  count > 0
+    ? '存储文件中有 ' + count + ' 个用户形象未能载入（名称与内容同时为空或超过 ' + MAX_PROFILES + ' 个上限）；下次保存时它们将从文件中移除'
+    : null
+
 /**
  * The load-time disclosures for one normalizeData result: dropped entries and
  * corrected hand-edited options, joined with a full-width semicolon.
@@ -309,6 +417,8 @@ const loadWarnings = (loaded) => {
   const parts = []
   const dropped = droppedEntriesMessage(loaded.dropped)
   if (dropped !== null) parts.push(dropped)
+  const droppedProfiles = droppedProfilesMessage(loaded.droppedProfiles || 0)
+  if (droppedProfiles !== null) parts.push(droppedProfiles)
   if (Array.isArray(loaded.optionFixes) && loaded.optionFixes.length > 0) {
     parts.push('存储文件中的以下选项值无效，已按规则修正：' + loaded.optionFixes.join('；') + '；下次保存时修正值将写入文件')
   }
@@ -544,9 +654,53 @@ function formatEntry(entry, tag) {
  * competing for the budget at all. When nothing renders, `text` is '' and
  * `included` is [] even though `budget` still reports the effective ceiling.
  */
-export function planInjection(data) {
-  const budget = clampBudget(data !== null && typeof data === 'object' ? data.budgetChars : undefined)
-  const blank = () => ({ text: '', budget, activeCount: 0, included: [], omitted: [] })
+/**
+ * The persona ("用户形象") preamble. One fixed header whether one or several
+ * profiles are active: each is a SIDE of the same user (background, tastes,
+ * personality, goals), so there is no "play multiple roles" framing. The
+ * wording deliberately demotes the whole section to a tilt on framing —
+ * correctness, completeness and the question itself always win.
+ */
+const PERSONA_HEADER = [
+  '## 关于用户（用户形象）',
+  '以下是用户本人提供的个人形象信息，描述其身份背景、喜好、性格与追求，不是要求你扮演的角色。请在保证回答正确、完整、客观且紧扣问题本身的前提下，结合这些信息调整解释的深浅、详略、举例与建议的侧重；不得为了迎合这些信息而改变事实、省略必要的风险提示或偏离问题核心；与当前问题无关时直接忽略。',
+  '',
+].join('\n')
+
+/**
+ * Build the persona section from enabled profiles with non-empty content, in
+ * stored order. Returns the rendered text plus one { id, name, chars } item
+ * per rendered profile, in the same shape the snapshot exposes. Deterministic:
+ * no timestamps, no counts, identical profiles in produce byte-identical
+ * text. An empty/disabled set renders to '' so callers can join unconditionally.
+ */
+function buildProfilesBlock(profiles) {
+  const active = (Array.isArray(profiles) ? profiles : [])
+    .filter((profile) => profile !== null && typeof profile === 'object'
+      && profile.enabled === true
+      && typeof profile.content === 'string' && profile.content !== '')
+  if (active.length === 0) return { text: '', profiles: [], chars: 0 }
+  const blocks = []
+  const items = []
+  for (const profile of active) {
+    const name = typeof profile.name === 'string' && profile.name !== ''
+      ? profile.name
+      : singleLine(profile.content, 20)
+    const block = '### ' + name + '\n' + profile.content
+    blocks.push(block)
+    items.push({ id: typeof profile.id === 'string' ? profile.id : '', name, chars: block.length })
+  }
+  const text = PERSONA_HEADER + '\n' + blocks.join('\n\n')
+  return { text, profiles: items, chars: text.length }
+}
+
+/**
+ * The entry half of the plan: the existing instruction block with its budget
+ * trimming. Kept as the inner function so planInjection can prepend the
+ * persona section without touching (and risking) the trimming logic.
+ */
+function planEntries(data, budget) {
+  const blank = () => ({ text: '', activeCount: 0, included: [], omitted: [] })
   if (data === null || typeof data !== 'object' || data.enabled !== true) return blank()
   const active = (Array.isArray(data.entries) ? data.entries : [])
     .filter((entry) => entry.enabled === true && entry.content !== '')
@@ -641,6 +795,48 @@ export function planInjection(data) {
   }
 }
 
+/**
+ * Compose the full injected section: the persona block ("关于用户", when at
+ * least one profile is enabled) followed by the existing instruction block.
+ *
+ * Returned shape extends the entry plan with:
+ *   profiles:    [{ id, name, chars }] — rendered persona profiles, in order
+ *   profileChars: total characters of the persona section (0 when none)
+ *   entryChars:  length of the entry half alone
+ *
+ * Guarantees:
+ *  - zero enabled profiles => the result is byte-identical to the old
+ *    entries-only plan (existing tests pin this);
+ *  - personas are NOT subject to the entry budget — the budget/included/
+ *    omitted fields still describe instructions only, and an identity is
+ *    never silently trimmed;
+ *  - a profile-only store (no instructions) still injects, and the master
+ *    `enabled` switch suppresses both halves as before.
+ */
+export function planInjection(data) {
+  const budget = clampBudget(data !== null && typeof data === 'object' ? data.budgetChars : undefined)
+  const blank = () => ({
+    text: '', budget, activeCount: 0, included: [], omitted: [],
+    profiles: [], profileChars: 0, entryChars: 0,
+  })
+  if (data === null || typeof data !== 'object' || data.enabled !== true) return blank()
+  const persona = buildProfilesBlock(data.profiles)
+  const entryPlan = planEntries(data, budget)
+  const parts = []
+  if (persona.text !== '') parts.push(persona.text)
+  if (entryPlan.text !== '') parts.push(entryPlan.text)
+  return {
+    text: parts.join('\n\n'),
+    budget,
+    activeCount: entryPlan.activeCount,
+    included: entryPlan.included,
+    omitted: entryPlan.omitted,
+    entryChars: entryPlan.text.length,
+    profiles: persona.profiles,
+    profileChars: persona.chars,
+  }
+}
+
 /**
  * Render the injected block text. A thin wrapper over planInjection: the
  * decision process lives in one place, and callers that only need the text
@@ -658,7 +854,7 @@ export function apply(ctx) {
   const systemPrompt = ctx.systemPrompt
 
   const state = {
-    data: { version: 1, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [] },
+    data: { version: 1, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [], profiles: [] },
     storagePath: null,
     storageDisplay: null,
     storageError: null,
@@ -781,7 +977,10 @@ export function apply(ctx) {
       return planInjection(state.data)
     } catch (err) {
       console.error('[instruction-memory] render failed:', err)
-      return { text: '', budget: clampBudget(state.data.budgetChars), activeCount: 0, included: [], omitted: [] }
+      return {
+        text: '', budget: clampBudget(state.data.budgetChars), activeCount: 0, included: [], omitted: [],
+        profiles: [], profileChars: 0, entryChars: 0,
+      }
     }
   }
 
@@ -1356,6 +1555,7 @@ export function apply(ctx) {
         enabled: state.data.enabled === true,
         budgetChars: clampBudget(state.data.budgetChars),
         entries: (Array.isArray(state.data.entries) ? state.data.entries : []).map((entry) => ({ ...entry })),
+        profiles: (Array.isArray(state.data.profiles) ? state.data.profiles : []).map((profile) => ({ ...profile })),
       },
       storage: {
         path: state.storageDisplay !== null ? state.storageDisplay : state.storagePath,
@@ -1381,6 +1581,15 @@ export function apply(ctx) {
         activeCount: plan.activeCount,
         included: plan.included.map((item) => ({ id: item.id, chars: item.chars, truncated: item.truncated === true })),
         omitted: plan.omitted.map((item) => ({ id: item.id, chars: item.chars })),
+        /**
+         * Persona section detail: rendered profiles (id/name/chars, in order)
+         * and their total size. `entryChars` is the instruction half alone,
+         * which is what the budget meter measures; `chars` above stays the
+         * whole section (personas + instructions) for diagnostics.
+         */
+        profiles: plan.profiles.map((item) => ({ id: item.id, name: item.name, chars: item.chars })),
+        profileChars: plan.profileChars,
+        entryChars: plan.entryChars,
         /**
          * How many times the harness has pulled this section into a prompt since
          * boot. 0 means "prepared, never assembled" — the distinction the old
@@ -1395,7 +1604,15 @@ export function apply(ctx) {
        * into memory. It is a character budget against byte sizes, so the
        * Client applies a generous multiplier — see importSizeVerdict there.
        */
-      limits: { minBudget: MIN_BUDGET, maxBudget: MAX_BUDGET, maxEntries: MAX_ENTRIES, maxBodyChars: MAX_BODY_CHARS },
+      limits: {
+        minBudget: MIN_BUDGET,
+        maxBudget: MAX_BUDGET,
+        maxEntries: MAX_ENTRIES,
+        maxProfiles: MAX_PROFILES,
+        maxProfileName: MAX_PROFILE_NAME,
+        maxProfileContent: MAX_PROFILE_CONTENT,
+        maxBodyChars: MAX_BODY_CHARS,
+      },
     }
   }
 
@@ -1539,6 +1756,162 @@ export function apply(ctx) {
     return settle(null, saved)
   })
 
+  /**
+   * Apply ONE operation to many entries in a single transaction.
+   *
+   * The settings page's multi-select must not loop save-entry/delete-entry:
+   * that would bump `rev`, write the file and broadcast an SSE frame once per
+   * id. Instead the whole batch is planned first (only entries that actually
+   * change are touched — an all-no-op batch, like deleting ids that are not
+   * there, writes nothing and keeps `rev` still), then committed through the
+   * same commit()/writeToDisk() path as every other mutation, so the lock, rev
+   * guard, rollback-on-failed-write and broadcast all apply once.
+   *
+   * `value` semantics per op: set-enabled -> boolean; set-priority -> 0|1|2;
+   * add-tags/remove-tags -> string[] (run through sanitizeTags); delete ->
+   * unused. Batch edits deliberately do NOT re-stamp updatedAt: enabling a
+   * group or tagging it must not reshuffle the within-priority injection
+   * order, which is tied to updatedAt.
+   */
+  const batchEntries = (op, ids, value, baseRev) => enqueue(async () => {
+    if (state.versionRejected) return versionRefusal()
+    if (isStaleBaseRev(baseRev)) return conflictResponse()
+    if (typeof op !== 'string' || !BATCH_OPS.includes(op)) {
+      return { ok: false, saved: false, message: '未知的批量操作：' + String(op), snapshot: snapshot() }
+    }
+    const uniqueIds = Array.isArray(ids)
+      ? [...new Set(ids.filter((id) => typeof id === 'string' && id !== ''))]
+      : []
+    if (uniqueIds.length === 0) {
+      return { ok: false, saved: false, message: '没有选择任何条目', snapshot: snapshot() }
+    }
+
+    const list = state.data.entries
+    const targets = list.filter((entry) => uniqueIds.includes(entry.id))
+    const missing = uniqueIds.length - targets.length
+    const missingNote = missing > 0
+      ? '（另有 ' + missing + ' 条未找到，可能已被其他窗口或进程修改）'
+      : ''
+
+    if (op === 'delete') {
+      // Deleting ids that are all absent changes nothing — mirror single
+      // deleteEntry's no-write behaviour rather than manufacturing a save.
+      if (targets.length === 0) {
+        return { ok: true, saved: false, message: null, snapshot: snapshot() }
+      }
+      const gone = new Set(targets.map((entry) => entry.id))
+      const affected = targets.length
+      const saved = await commit(() => {
+        state.data.entries = state.data.entries.filter((entry) => !gone.has(entry.id))
+      })
+      return settle('已删除 ' + affected + ' 条指令' + missingNote, saved)
+    }
+
+    // Pure planners: return the patch to apply, or null when this entry is
+    // already at the target state. Nothing is mutated here.
+    let planner
+    if (op === 'set-enabled') {
+      if (typeof value !== 'boolean') {
+        return { ok: false, saved: false, message: '批量启停需要一个布尔值', snapshot: snapshot() }
+      }
+      planner = (entry) => (entry.enabled === value ? null : { enabled: value })
+    } else if (op === 'set-priority') {
+      if (value !== 0 && value !== 1 && value !== 2) {
+        return { ok: false, saved: false, message: '批量优先级只能是 0、1 或 2', snapshot: snapshot() }
+      }
+      planner = (entry) => (entry.priority === value ? null : { priority: value })
+    } else if (op === 'add-tags') {
+      if (!Array.isArray(value)) {
+        return { ok: false, saved: false, message: '批量添加标签需要一个标签数组', snapshot: snapshot() }
+      }
+      const add = sanitizeTags(value)
+      if (add.length === 0) {
+        return { ok: false, saved: false, message: '没有可添加的有效标签（单个标签不超过 ' + MAX_TAG_LENGTH + ' 字符）', snapshot: snapshot() }
+      }
+      planner = (entry) => {
+        const cur = Array.isArray(entry.tags) ? entry.tags : []
+        const merged = sanitizeTags([...cur, ...add])
+        if (merged.length === cur.length && merged.every((tag) => cur.includes(tag))) return null
+        return { tags: merged }
+      }
+    } else {
+      // remove-tags
+      if (!Array.isArray(value)) {
+        return { ok: false, saved: false, message: '批量移除标签需要一个标签数组', snapshot: snapshot() }
+      }
+      const remove = new Set(sanitizeTags(value))
+      if (remove.size === 0) {
+        return { ok: false, saved: false, message: '没有可移除的有效标签', snapshot: snapshot() }
+      }
+      planner = (entry) => {
+        const cur = Array.isArray(entry.tags) ? entry.tags : []
+        const kept = cur.filter((tag) => !remove.has(tag))
+        return kept.length === cur.length ? null : { tags: kept }
+      }
+    }
+
+    const changes = []
+    for (const entry of targets) {
+      const patch = planner(entry)
+      if (patch !== null) changes.push({ entry, patch })
+    }
+    if (changes.length === 0) {
+      return { ok: true, saved: false, message: '所选条目均已是目标状态' + missingNote, snapshot: snapshot() }
+    }
+    const saved = await commit(() => {
+      for (const change of changes) Object.assign(change.entry, change.patch)
+    })
+    const done = {
+      'set-enabled': value ? '已启用 ' : '已停用 ',
+      'set-priority': '已将 ',
+      'add-tags': '已为 ',
+      'remove-tags': '已从 ',
+    }[op]
+    const tail = {
+      'set-enabled': changes.length + ' 条指令',
+      'set-priority': changes.length + ' 条指令的优先级设为「' + priorityLabel(value) + '」',
+      'add-tags': changes.length + ' 条指令添加标签',
+      'remove-tags': changes.length + ' 条指令移除标签',
+    }[op]
+    return settle(done + tail + missingNote, saved)
+  })
+
+  const saveProfile = (raw, baseRev) => enqueue(async () => {
+    if (state.versionRejected) return versionRefusal()
+    if (isStaleBaseRev(baseRev)) return conflictResponse()
+    const profile = sanitizeProfile(raw)
+    if (profile === null) return { ok: false, saved: false, message: '形象名称与内容不能同时为空', snapshot: snapshot() }
+    profile.updatedAt = Date.now()
+    const replacesExisting = state.data.profiles.some((candidate) => candidate.id === profile.id)
+    if (!replacesExisting && state.data.profiles.length >= MAX_PROFILES) {
+      return { ok: false, saved: false, message: '最多保存 ' + MAX_PROFILES + ' 个用户形象', snapshot: snapshot() }
+    }
+    const cut = truncatedProfileFields(raw)
+    const saved = await commit(() => {
+      const list = state.data.profiles
+      const index = list.findIndex((candidate) => candidate.id === profile.id)
+      if (index >= 0) list[index] = profile
+      else list.push(profile)
+    })
+    const note = cut.length > 0
+      ? '已保存；' + cut.join('、') + '超过长度上限（名称 ' + MAX_PROFILE_NAME + ' / 内容 ' + MAX_PROFILE_CONTENT + ' 字符），超出部分已被截断'
+      : null
+    return settle(note, saved)
+  })
+
+  const deleteProfile = (id, baseRev) => enqueue(async () => {
+    if (state.versionRejected) return versionRefusal()
+    if (isStaleBaseRev(baseRev)) return conflictResponse()
+    // Mirror deleteEntry: an absent id changes nothing and must not touch disk.
+    if (!state.data.profiles.some((profile) => profile.id === id)) {
+      return { ok: true, saved: false, message: null, snapshot: snapshot() }
+    }
+    const saved = await commit(() => {
+      state.data.profiles = state.data.profiles.filter((profile) => profile.id !== id)
+    })
+    return settle(null, saved)
+  })
+
   const reload = () => enqueue(async () => {
     // `saved` is only true when the load itself wrote to disk (the
     // backup-promotion or legacy-migration branch); a plain re-read claiming
@@ -1547,7 +1920,6 @@ export function apply(ctx) {
     syncSection()
     return { ok: state.storageError === null, saved: wrote === true, message: state.storageError, snapshot: snapshot() }
   })
-
   const exportData = () => enqueue(async () => ({
     ok: true,
     // An export reads the store and never writes it; a truthful `saved:false`
@@ -1566,15 +1938,16 @@ export function apply(ctx) {
     if (payload === null || typeof payload !== 'object') {
       return { ok: false, saved: false, message: '导入内容不是有效的 JSON 对象', snapshot: snapshot() }
     }
-    // Accept both the plugin's own export envelope ({app, data:{entries}}) and
-    // a bare {entries} array (e.g. a hand-assembled file).
-    const rawEntries = Array.isArray(payload.entries)
-      ? payload.entries
-      : (payload.data !== null && typeof payload.data === 'object' && Array.isArray(payload.data.entries)
-        ? payload.data.entries
-        : null)
-    if (rawEntries === null || rawEntries.length === 0) {
-      return { ok: false, saved: false, message: '导入文件中没有找到条目', snapshot: snapshot() }
+    // Accept both the plugin's own export envelope ({app, data:{entries,…}})
+    // and a bare {entries}/{profiles} object (e.g. a hand-assembled file).
+    const inner = payload.data !== null && typeof payload.data === 'object' ? payload.data : payload
+    const rawEntries = Array.isArray(payload.entries) ? payload.entries
+      : (Array.isArray(inner.entries) ? inner.entries : null)
+    const rawProfiles = Array.isArray(payload.profiles) ? payload.profiles
+      : (Array.isArray(inner.profiles) ? inner.profiles : null)
+    if ((rawEntries === null || rawEntries.length === 0)
+      && (rawProfiles === null || rawProfiles.length === 0)) {
+      return { ok: false, saved: false, message: '导入文件中没有找到条目或用户形象', snapshot: snapshot() }
     }
     // Merge, never replace: importing must not be able to wipe what is here.
     // Duplicates (same id, or same title+content) and invalid items are
@@ -1589,7 +1962,7 @@ export function apply(ctx) {
     const cutFields = new Set()
     let truncatedCount = 0
     let skipped = 0
-    for (const candidate of rawEntries) {
+    for (const candidate of (rawEntries || [])) {
       const entry = sanitizeEntry(candidate)
       if (entry === null || seenIds.has(entry.id) || seenBodies.has(entry.title + '\u0000' + entry.content)) {
         skipped += 1
@@ -1613,18 +1986,70 @@ export function apply(ctx) {
       seenIds.add(entry.id)
       seenBodies.add(entry.title + '\u0000' + entry.content)
     }
-    if (accepted.length === 0) {
+    // Persona profiles merge under the same rules (same id, or same
+    // name+content) in the SAME transaction, so a mixed import never lands
+    // half-way.
+    const existingProfiles = state.data.profiles
+    const seenProfileIds = new Set(existingProfiles.map((profile) => profile.id))
+    const seenProfileBodies = new Set(existingProfiles.map((profile) => profile.name + '\u0000' + profile.content))
+    const acceptedProfiles = []
+    const cutProfileFields = new Set()
+    let truncatedProfileCount = 0
+    let skippedProfiles = 0
+    for (const candidate of (rawProfiles || [])) {
+      const profile = sanitizeProfile(candidate)
+      if (profile === null
+        || seenProfileIds.has(profile.id)
+        || seenProfileBodies.has(profile.name + '\u0000' + profile.content)) {
+        skippedProfiles += 1
+        continue
+      }
+      if (existingProfiles.length + acceptedProfiles.length >= MAX_PROFILES) {
+        skippedProfiles += 1
+        continue
+      }
+      const cut = truncatedProfileFields(candidate)
+      if (cut.length > 0) {
+        truncatedProfileCount += 1
+        for (const field of cut) cutProfileFields.add(field)
+      }
+      profile.updatedAt = Date.now()
+      acceptedProfiles.push(profile)
+      seenProfileIds.add(profile.id)
+      seenProfileBodies.add(profile.name + '\u0000' + profile.content)
+    }
+    if (accepted.length === 0 && acceptedProfiles.length === 0) {
       // Nothing was written to disk, so claiming saved:true would be a lie the
       // panel cannot distinguish from a real save.
-      return { ok: true, saved: false, message: '没有新增条目：' + skipped + ' 条已存在或无效', snapshot: snapshot() }
+      return {
+        ok: true,
+        saved: false,
+        message: '没有新增内容：' + skipped + ' 条条目、' + skippedProfiles + ' 个用户形象已存在或无效',
+        snapshot: snapshot(),
+      }
     }
     const saved = await commit(() => {
       state.data.entries.push(...accepted)
+      state.data.profiles.push(...acceptedProfiles)
     })
-    const truncated = truncatedCount > 0
-      ? '；其中 ' + truncatedCount + ' 条超过长度上限，' + [...cutFields].join('、') + '已被截断'
-      : ''
-    return settle('导入完成：新增 ' + accepted.length + ' 条，跳过 ' + skipped + ' 条（已存在或无效）' + truncated, saved)
+    const parts = []
+    if (accepted.length > 0) {
+      const truncated = truncatedCount > 0
+        ? '；其中 ' + truncatedCount + ' 条超过长度上限，' + [...cutFields].join('、') + '已被截断'
+        : ''
+      parts.push('新增指令 ' + accepted.length + ' 条，跳过 ' + skipped + ' 条' + truncated)
+    } else if (skipped > 0) {
+      parts.push('指令跳过 ' + skipped + ' 条（已存在或无效）')
+    }
+    if (acceptedProfiles.length > 0) {
+      const truncated = truncatedProfileCount > 0
+        ? '；其中 ' + truncatedProfileCount + ' 个超过长度上限，' + [...cutProfileFields].join('、') + '已被截断'
+        : ''
+      parts.push('新增用户形象 ' + acceptedProfiles.length + ' 个，跳过 ' + skippedProfiles + ' 个' + truncated)
+    } else if (skippedProfiles > 0) {
+      parts.push('用户形象跳过 ' + skippedProfiles + ' 个（已存在或无效）')
+    }
+    return settle('导入完成：' + parts.join('；'), saved)
   })
 
   const dispatch = async (method, args) => {
@@ -1661,6 +2086,20 @@ export function apply(ctx) {
         return importData(
           args !== null && typeof args === 'object' ? args.payload : null,
           args !== null && typeof args === 'object' ? args.baseRev : undefined)
+      case 'batch':
+        return batchEntries(
+          args !== null && typeof args === 'object' ? args.op : null,
+          args !== null && typeof args === 'object' ? args.ids : null,
+          args !== null && typeof args === 'object' ? args.value : undefined,
+          args !== null && typeof args === 'object' ? args.baseRev : undefined)
+      case 'save-profile':
+        return saveProfile(
+          args !== null && typeof args === 'object' ? args.profile : null,
+          args !== null && typeof args === 'object' ? args.baseRev : undefined)
+      case 'delete-profile':
+        return deleteProfile(
+          args !== null && typeof args === 'object' && typeof args.id === 'string' ? args.id : '',
+          args !== null && typeof args === 'object' ? args.baseRev : undefined)
       default:
         return { ok: false, saved: false, message: '未知方法：' + String(method), snapshot: snapshot() }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-instruction-memory",
-  "version": "1.0.17",
+  "version": "1.1.0",
   "description": "User-only instruction memory for DSH: long-term instructions maintained in the settings UI and auto-injected into every conversation — the model has no write access. 指令记忆：只由用户在设置页维护的长期指令，自动注入此后每轮对话；模型没有任何写入口。",
   "license": "MIT",
   "type": "module",