dsh-instruction-memory 1.0.18 → 1.1.0

package/CHANGELOG.md

@@ -7,6 +7,38 @@
 > 1.0.13 起由 CI 经 OIDC Trusted Publishing 发布（首个带 provenance 的版本）。
 > 这些历史 tag **不应回填**——npm 上的版本号已被占用。
 
+## [1.1.0] — 2026-10-13
+
+### 新增
+
+- **用户形象（关于用户本人的画像）**：设置页新增「用户形象」分区，可维护若干关于**用户本人**的信息
+  （身份背景、喜好、性格、长期追求等），每张卡片可单独勾选「使用该形象」——支持不使用、使用一个或
+  同时使用多个（多个作为同一画像的不同侧面综合）。这与"要求 AI 怎么做"的指令条目是两类数据：
+  - Host 新增可选 `profiles: [{ id, name, content, enabled, updatedAt }]`（与 `entries` 平级，存储格式
+    仍为 v1，旧记忆无该字段即按空数组加载，无需迁移）；名称单行 ≤40 字符、内容 ≤4000 字符、最多 50 个，
+    名称与内容同时为空或超限时载入会剔除并明确披露，名称缺失时取内容前 20 字符。
+  - 注入时形象段以「## 关于用户（用户形象）」抬头输出在指令块**之前**，抬头自带优先级护栏：仅供 AI
+    在保证回答正确、完整、客观且扣题的前提下调整详略/举例/建议侧重，不得为迎合而改变事实、省略风险
+    提示或偏离问题，无关时忽略；形象不是让 AI 扮演的角色。
+  - 形象段**不参与指令字数预算裁剪**，始终完整注入；快照的 `injection` 新增 `profiles` / `profileChars`
+    / `entryChars`（指令用量条只计量指令部分，不被形象体积顶高）。
+  - 新增 `save-profile` / `delete-profile` 路由（复用 rev 乐观锁、原子写盘、未来版本拒绝、写盘失败
+    回滚与 SSE 多窗口同步）；导入/导出支持 `profiles`，导入仍为只增合并（同 id 或同名+同内容去重），
+    指令与形象在同一事务内落盘；空形象拒绝保存；请求体上限推导纳入形象容量。
+  - 设置页新增形象卡片列表（勾选开关、展开/收起、编辑、删除确认）、独立编辑器与已启用形象合计字符
+    提示；旧宿主不发布形象字段时客户端自动按无形象处理，两侧均向前/向后兼容。
+
+### 测试
+
+- `smoke-test.mjs` 新增形象清洗与注入语义断言（0 个时与旧块逐字节一致、1/多个抬头与顺序、停用/空内容
+  不注入、仅有形象时仍注入、总开关同时关闭两段、形象不受预算裁剪、确定性）。
+- `contract-test.mjs` 新增独立形象验证块：经真实路由断言保存/更新/删除（rev 恰好 +1、no-op 不写盘）、
+  空形象拒绝、stale rev 冲突、快照与 preview 字段、勾选/取消勾选的注入变化、50 个上限、混合导入一次
+  事务与去重、仅含形象的导入文件有效。
+- `verify.mjs` 新增形象双语文案键断言，以及预算用量条在形象宿主上只取 `entryChars` 的接缝断言。
+- `docs/demo.html` 演示数据加入 3 个形象（含停用示例），演示宿主支持 `save-profile`/`delete-profile`
+  并实时计算形象注入段。
+
 ## [1.0.18] — 2026-10-13
 
 ### 新增

package/README.md

@@ -67,8 +67,16 @@ dsh plugin --profile web remove dsh-instruction-memory
   多选与上方的筛选/搜索叠加（「全选」只作用于当前可见条目）。整批修改在宿主侧是**单次写入**
   （只产生一次落盘、一次修订号递增与一次同步推送），全部条目已是目标状态时不写盘；批量删除需确认。
   批量的启停/优先级/标签调整不重盖更新时间，因此不会改变同优先级下的注入先后。
+- **用户形象**：除了"要求 AI 怎么做"的指令，你还可以记录**关于你本人**的信息（身份背景、喜好、性格、
+  长期追求等），每张形象卡片可单独勾选「使用该形象」——可以一个都不用、只用一个、或同时勾选多个
+  （多个会作为同一画像的不同侧面综合）。启用后，形象段会以「## 关于用户（用户形象）」为抬头注入在
+  指令块**之前**，抬头明确把它限定为"仅供调整回答侧重"：AI 应在**保证回答正确、完整、客观且扣题**的
+  前提下据此调整解释深浅、详略、举例与建议方向，**不得为了迎合而改变事实、省略风险提示或偏离问题本身**，
+  无关时直接忽略。形象不是让 AI 扮演的角色。形象段独立于指令字数上限，始终完整注入、不做预算裁剪；
+  页面会显示已启用形象的合计字符数，便于你权衡提示词体积。总开关关闭时形象与指令一起停用。
 
-条目全部停用或总开关关闭时，该提示词段落**整个注销**，系统提示词与未安装本插件时逐字节一致。
+总开关关闭时，该提示词段落（指令与用户形象）**整个注销**，系统提示词与未安装本插件时逐字节一致；
+总开关开启但没有任何生效指令、也没有启用形象时，段落同样不出现。
 
 ## 存储
 
@@ -448,6 +456,15 @@ Package → Settings → Trusted publishing → Add trusted publisher
       "tags": ["沟通"],
       "updatedAt": 1700000000000
     }
+  ],
+  "profiles": [
+    {
+      "id": "pf-xxxx",
+      "name": "职业背景",
+      "content": "有 8 年后端开发经验，技术问题可跳过入门概念。",
+      "enabled": true,
+      "updatedAt": 1700000000000
+    }
   ]
 }
 ```
@@ -456,3 +473,7 @@ Package → Settings → Trusted publishing → Add trusted publisher
 由插件在每次成功写入时递增，**无需手填**（缺失视为 0）。`tags` 为可选的短标签字符串数组
 （最多 8 个、单个不超过 24 字符，仅用于设置页筛选，不参与注入）；缺失或非数组一律按无标签处理，
 非法项会被剔除、超长会被截断、重复项会去重，格式版本号仍为 `1`。
+
+`profiles` 为可选的**用户形象**数组（缺失按空数组处理，旧记忆无需迁移）：`name` 单行不超过 40 字符，
+`content` 不超过 4000 字符，最多 50 个；`enabled` 控制是否使用该形象。名称与内容同时为空的形象会在
+载入时剔除并明确披露；名称为空时自动取内容前 20 字符。形象保存在同一文件、同一格式版本 `1` 中。

package/lib/client.js

@@ -83,6 +83,15 @@ window.__ModuleLoader__.load({
 .im-batch-bar { display:flex; align-items:center; gap:8px; flex-wrap:wrap; padding:10px 12px; border-radius:10px;
   border:1px solid var(--dsw-alias-state-warn-primary,#d97706); background:rgba(217,119,6,.08); }
 .im-batch-check { width:15px; height:15px; margin:0; cursor:pointer; accent-color:var(--dsw-alias-brand-primary,#3b6cff); }
+.im-profiles { border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); border-radius:10px; padding:10px 12px;
+  background:var(--dsw-alias-bg-layer-1,#fff); }
+.im-profiles-head { display:flex; align-items:center; gap:8px; flex-wrap:wrap; }
+.im-profile-item { border:1px solid var(--dsw-alias-border-l1,rgba(0,0,0,.1)); border-radius:9px; padding:9px 11px;
+  margin-top:8px; background:var(--dsw-alias-bg-base,#fff); }
+.im-profile-item-off { opacity:.55; }
+.im-profile-name { font-weight:600; font-size:13.5px; }
+.im-profile-sub { margin-top:3px; }
+.im-section-title { font-weight:600; font-size:13px; }
 .im-empty { padding:26px; border-radius:10px; text-align:center; font-size:12px;
   border:1px dashed var(--dsw-alias-border-l2,rgba(0,0,0,.18)); color:var(--dsw-alias-label-secondary,#8a9099); }
 .im-err { font-size:12px; color:var(--dsw-alias-state-error-primary,#d94838); }
@@ -207,6 +216,20 @@ window.__ModuleLoader__.load({
         'batch.tagEmpty': '未输入有效的标签',
         'batch.noneSelected': '请先勾选要操作的指令',
         'batch.promptUnavailable': '当前环境不支持快捷输入，请逐条编辑标签',
+        'profiles.section': '用户形象',
+        'profiles.subtitle': '关于你本人的身份背景、喜好、性格与追求。勾选「使用该形象」后，AI 会在保证回答正确且扣题的前提下据此调整详略、举例与建议侧重；不会为了迎合而改变事实或偏离问题。',
+        'profiles.new': '＋ 新增形象',
+        'profiles.name': '形象名称',
+        'profiles.namePlaceholder': '例如：职业背景 / 沟通偏好 / 性格 / 长期追求',
+        'profiles.content': '形象内容',
+        'profiles.contentPlaceholder': '描述你本人的情况，例如：有 8 年后端开发经验，技术问题可跳过入门概念；喜欢先给结论、再给可执行步骤，少寒暄。',
+        'profiles.use': '使用该形象',
+        'profiles.untitled': '未命名形象',
+        'profiles.confirmDelete': '确定删除用户形象「{name}」？删除后无法恢复。',
+        'profiles.empty': '还没有用户形象。点击「＋ 新增形象」添加关于你本人的信息；不勾选任何形象时，AI 完全按原本方式回答。',
+        'profiles.count': '共 {total} 个，使用中 {active} 个',
+        'profiles.chars': '已启用形象合计 {count} 字符（独立于指令字数上限，完整注入、不做裁剪）',
+        'profiles.saving': '保存中…',
         'action.new': '＋ 新增指令',
         'action.reload': '重新载入',
         'action.export': '导出',
@@ -322,6 +345,20 @@ window.__ModuleLoader__.load({
         'batch.tagEmpty': 'No valid tag entered',
         'batch.noneSelected': 'Tick the entries to act on first',
         'batch.promptUnavailable': 'Quick entry is unavailable in this environment; edit tags one by one',
+        'profiles.section': 'User persona',
+        'profiles.subtitle': 'Facts about you: background, tastes, personality and goals. When “Use this persona” is ticked, the AI adjusts depth, examples and advice to tilt toward you — while staying correct and on-topic; it must never change facts or wander off the question to please you.',
+        'profiles.new': '＋ New persona',
+        'profiles.name': 'Persona name',
+        'profiles.namePlaceholder': 'e.g. Professional background / Communication style / Personality / Goals',
+        'profiles.content': 'Persona details',
+        'profiles.contentPlaceholder': 'Describe yourself, e.g. 8 years of backend experience, so skip intro concepts; prefers the conclusion first, then actionable steps, no small talk.',
+        'profiles.use': 'Use this persona',
+        'profiles.untitled': 'Untitled persona',
+        'profiles.confirmDelete': 'Delete the persona “{name}”? This cannot be undone.',
+        'profiles.empty': 'No persona yet. Click “＋ New persona” to add facts about yourself; with no persona ticked, the AI answers exactly as it normally would.',
+        'profiles.count': '{total} in total, {active} in use',
+        'profiles.chars': 'Active personas total {count} characters (separate from the instruction budget; injected in full, never trimmed)',
+        'profiles.saving': 'Saving…',
         'action.new': '＋ New instruction',
         'action.reload': 'Reload',
         'action.export': 'Export',
@@ -519,6 +556,30 @@ window.__ModuleLoader__.load({
       }
     }
 
+    // ---- User persona ("用户形象") drafts ----
+    function cloneProfile(profile) {
+      return {
+        id: profile.id,
+        name: profile.name,
+        content: profile.content,
+        enabled: profile.enabled === true,
+        updatedAt: profile.updatedAt,
+      }
+    }
+
+    function blankProfileDraft() {
+      return { id: '', name: '', content: '', enabled: true, updatedAt: 0 }
+    }
+
+    /** Whether a profile editor differs from the stored version (or a blank new one). */
+    function profileIsDirty(draft, profiles) {
+      const base = draft.id === ''
+        ? blankProfileDraft()
+        : (profiles || []).find((profile) => profile.id === draft.id)
+      if (base === undefined) return true
+      return base.name !== draft.name || base.content !== draft.content || base.enabled !== draft.enabled
+    }
+
     function blankDraft() {
       return { id: '', title: '', content: '', mode: 'always', when: '', priority: 1, enabled: true, tags: [], updatedAt: 0 }
     }
@@ -650,7 +711,14 @@ window.__ModuleLoader__.load({
       const budget = typeof inj.budget === 'number' && inj.budget > 0
         ? inj.budget
         : (typeof data.budgetChars === 'number' && data.budgetChars > 0 ? data.budgetChars : 0)
-      const used = typeof inj.chars === 'number' && inj.chars >= 0 ? inj.chars : 0
+      // Measure ONLY the instruction half: on a host that publishes persona
+      // profiles, `chars` is the whole section (personas + instructions) while
+      // `entryChars` is the budgeted half. Older hosts publish neither field,
+      // and there `chars` is already instructions-only, so the fallback is
+      // correct on both.
+      const used = typeof inj.entryChars === 'number' && inj.entryChars >= 0
+        ? inj.entryChars
+        : (typeof inj.chars === 'number' && inj.chars >= 0 ? inj.chars : 0)
       const countFlagged = (list, wantTruncated) =>
         Array.isArray(list)
           ? list.filter((item) => item !== null && typeof item === 'object'
@@ -860,12 +928,60 @@ window.__ModuleLoader__.load({
     /** How long the undo bar keeps its offer alive after a confirmed delete. */
     const UNDO_TTL_MS = 10000
 
+    /**
+     * Editor for one "用户形象" (facts about the user). Deliberately minimal:
+     * a single-line name and a multi-line description. Save is disabled while
+     * both are blank (the Host would reject that anyway). The enable toggle
+     * lives on the card, not here: the editor edits content, the card decides
+     * whether the persona is used.
+     */
+    function ProfileEditor(props) {
+      const limits = props.limits || {}
+      const maxName = typeof limits.maxProfileName === 'number' ? limits.maxProfileName : 40
+      const maxContent = typeof limits.maxProfileContent === 'number' ? limits.maxProfileContent : 4000
+      const set = (patch) => props.onChange(Object.assign({}, props.draft, patch))
+      const canSave = (props.draft.name.trim() !== '' || props.draft.content.trim() !== '')
+      return h('div', { className: 'im-editor im-profiles' },
+        h('div', null,
+          h('label', { className: 'im-label' }, t('profiles.name')),
+          h('input', {
+            className: 'im-input',
+            value: props.draft.name,
+            maxLength: maxName,
+            placeholder: t('profiles.namePlaceholder'),
+            disabled: props.busy,
+            onChange: (ev) => set({ name: ev.target.value }),
+          })),
+        h('div', null,
+          h('label', { className: 'im-label' }, t('profiles.content')),
+          h('textarea', {
+            className: 'im-textarea',
+            rows: 6,
+            value: props.draft.content,
+            maxLength: maxContent,
+            placeholder: t('profiles.contentPlaceholder'),
+            disabled: props.busy,
+            onChange: (ev) => set({ content: ev.target.value }),
+          })),
+        h('div', { className: 'im-row-wrap' },
+          h('button', {
+            className: 'im-btn im-btn-primary',
+            disabled: props.busy || !canSave,
+            onClick: props.onSave,
+          }, props.busy ? t('profiles.saving') : t('editor.save')),
+          h('button', { className: 'im-btn', disabled: props.busy, onClick: props.onCancel }, t('editor.cancel'))))
+    }
+
     function InstructionPanel() {
       const [view, setView] = React.useState(null)
       const [error, setError] = React.useState('')
       const [notice, setNotice] = React.useState('')
       const [busy, setBusy] = React.useState(false)
       const [draft, setDraft] = React.useState(null)
+      // The persona editor draft (null = closed). Independent of the entry
+      // draft: editing an instruction never closes an open persona and vice
+      // versa is handled by closing one when opening the other (see handlers).
+      const [profileDraft, setProfileDraft] = React.useState(null)
       const [budgetText, setBudgetText] = React.useState('')
       // Latest live value of the draft, because the SSE onmessage closure below
       // is created once and must not read a stale first-render budgetText.
@@ -1014,6 +1130,39 @@ window.__ModuleLoader__.load({
         void doBatch('add-tags', tags)
       }
 
+      // ---- User persona ("用户形象") handlers ----
+
+      async function saveProfileDraft() {
+        if (profileDraft === null) return
+        if (profileDraft.name.trim() === '' && profileDraft.content.trim() === '') return
+        const result = await send('save-profile', { profile: cloneProfile(profileDraft), baseRev: revOf() })
+        if (result !== null && result.ok === true) setProfileDraft(null)
+      }
+
+      function toggleProfile(profile) {
+        if (busy) return
+        const next = cloneProfile(profile)
+        next.enabled = !profile.enabled
+        void send('save-profile', { profile: next, baseRev: revOf() })
+      }
+
+      function editProfile(profile) {
+        if (busy) return
+        // The two editors are mutually exclusive so the panel stays legible.
+        setDraft(null)
+        setProfileDraft(cloneProfile(profile))
+        setError('')
+      }
+
+      function removeProfile(profile) {
+        if (busy) return
+        if (typeof window.confirm === 'function'
+          && !window.confirm(t('profiles.confirmDelete', {
+            name: profile.name !== '' ? profile.name : t('profiles.untitled'),
+          }))) return
+        void send('delete-profile', { id: profile.id, baseRev: revOf() })
+      }
+
       async function doExport() {
         try {
           const result = await callHost('export-data', null)
@@ -1152,6 +1301,15 @@ window.__ModuleLoader__.load({
       }
       const entries = sortEntries(data.entries)
       const activeCount = data.entries.filter((e) => e.enabled && e.content !== '').length
+      // Persona profiles, in stored order (stable injection order). Old hosts
+      // simply have no array.
+      const profiles = Array.isArray(data.profiles) ? data.profiles : []
+      const activeProfiles = profiles.filter((p) => p.enabled === true && p.content !== '').length
+      // Prefer the Host's rendered size (includes the shared header); fall
+      // back to a local sum for hosts that do not publish the field yet.
+      const profileChars = injection && typeof injection === 'object' && typeof injection.profileChars === 'number'
+        ? injection.profileChars
+        : profiles.reduce((n, p) => n + (p.enabled === true && p.content ? p.name.length + p.content.length + 5 : 0), 0)
       // Every tag actually in use, most frequent first (then name), for the
       // tag filter row.
       const allTags = (() => {
@@ -1271,6 +1429,63 @@ window.__ModuleLoader__.load({
               ? h('div', { className: 'im-warn im-meter-line' }, t('budget.omitted', { count: meter.omitted }))
               : null)
           : null,
+        // ---- User persona ("用户形象"): facts about the USER, not a role ----
+        h('div', { key: 'profiles', className: 'im-profiles' },
+          h('div', { className: 'im-profiles-head' },
+            h('span', { className: 'im-section-title' }, t('profiles.section')),
+            h('button', {
+              className: 'im-btn im-btn-primary',
+              disabled: busy,
+              onClick: () => { setProfileDraft(blankProfileDraft()); setDraft(null); setError('') },
+            }, t('profiles.new')),
+            h('span', { className: 'im-spacer' }),
+            h('span', { className: 'im-meta' }, t('profiles.count', { total: profiles.length, active: activeProfiles }))),
+          h('div', { className: 'im-meta im-profile-sub' }, t('profiles.subtitle')),
+          profileDraft !== null
+            ? h(ProfileEditor, {
+              draft: profileDraft,
+              busy: busy,
+              limits: view !== null && view.limits ? view.limits : null,
+              onChange: setProfileDraft,
+              onSave: saveProfileDraft,
+              onCancel: () => setProfileDraft(null),
+            })
+            : null,
+          profiles.length === 0 && profileDraft === null
+            ? h('div', { className: 'im-empty' }, t('profiles.empty'))
+            : profiles.map((profile) => h('div', {
+              className: 'im-profile-item' + (profile.enabled === true ? '' : ' im-profile-item-off'),
+              key: profile.id,
+            },
+              h('div', { className: 'im-item-head' },
+                h('span', { className: 'im-profile-name' },
+                  profile.name !== '' ? profile.name : t('profiles.untitled')),
+                h('span', { className: 'im-spacer' }),
+                h('label', { className: 'im-switch' },
+                  h('input', {
+                    type: 'checkbox',
+                    checked: profile.enabled === true,
+                    disabled: busy,
+                    onChange: () => toggleProfile(profile),
+                  }),
+                  t('profiles.use')),
+                h('button', {
+                  className: 'im-btn',
+                  disabled: busy,
+                  onClick: () => editProfile(profile),
+                }, t('entry.edit')),
+                h('button', {
+                  className: 'im-btn im-btn-danger',
+                  disabled: busy,
+                  onClick: () => removeProfile(profile),
+                }, t('entry.delete'))),
+              h(EntryBody, { text: profile.content, key: 'body' }),
+              profile.updatedAt > 0
+                ? h('div', { className: 'im-meta' }, t('entry.updatedAt', { time: new Date(profile.updatedAt).toLocaleString() }))
+                : null)),
+          activeProfiles > 0
+            ? h('div', { className: 'im-meta im-meter-line' }, t('profiles.chars', { count: profileChars }))
+            : null),
         // F3 bulk action bar, only while in multi-select mode. "Select all"
         // covers the currently visible (filtered/searched) entries.
         (batchMode && entries.length > 0)
@@ -1378,7 +1593,7 @@ window.__ModuleLoader__.load({
           h('button', {
             className: 'im-btn im-btn-primary',
             disabled: busy,
-            onClick: () => { setDraft(blankDraft()); setError('') },
+            onClick: () => { setDraft(blankDraft()); setProfileDraft(null); setError('') },
           }, t('action.new')),
           h('button', { className: 'im-btn', disabled: busy, onClick: () => send('reload', null) }, t('action.reload')),
           h('button', { className: 'im-btn', disabled: busy, onClick: doExport }, t('action.export')),
@@ -1503,7 +1718,7 @@ window.__ModuleLoader__.load({
               : h('button', {
                 className: 'im-btn',
                 disabled: busy,
-                onClick: () => { setDraft(cloneEntry(entry)); setError('') },
+                onClick: () => { setDraft(cloneEntry(entry)); setProfileDraft(null); setError('') },
               }, t('entry.edit')),
             batchMode
               ? null

package/lib/index.js

@@ -96,6 +96,18 @@ const MAX_WHEN = 200
 const MAX_TAGS_PER_ENTRY = 8
 const MAX_TAG_LENGTH = 24
 
+/**
+ * User-persona profiles ("用户形象"): facts about the USER (background,
+ * preferences, personality, goals) used to tilt how answers are framed. They
+ * are NOT roles the model is asked to play, and they are injected ahead of the
+ * instruction block under a header that demotes them to "tilt only, never
+ * override correctness or the question itself". They do not take part in the
+ * per-entry budget trimming: an identity must never be silently dropped.
+ */
+const MAX_PROFILES = 50
+const MAX_PROFILE_NAME = 40
+const MAX_PROFILE_CONTENT = 4000
+
 /**
  * The batch operations the `batch` route accepts. Kept here so the command and
  * the route's dispatch share one list.
@@ -115,7 +127,8 @@ const BATCH_OPS = ['set-enabled', 'set-priority', 'add-tags', 'remove-tags', 'de
  * the flat slack covers the `{method,args:{payload:{app,…,data:{entries:[…]}}}}`
  * wrapper.
  */
-export const MAX_BODY_CHARS = MAX_ENTRIES * (MAX_CONTENT + MAX_TITLE + MAX_WHEN + MAX_TAGS_PER_ENTRY * MAX_TAG_LENGTH + 200) * 2 + 100_000
+export const MAX_BODY_CHARS = (MAX_ENTRIES * (MAX_CONTENT + MAX_TITLE + MAX_WHEN + MAX_TAGS_PER_ENTRY * MAX_TAG_LENGTH + 200)
+  + MAX_PROFILES * (MAX_PROFILE_CONTENT + MAX_PROFILE_NAME + 200)) * 2 + 100_000
 
 /** How long a crashed holder's `memory.json.lock` may block writes before it is stolen. */
 const LOCK_STALE_MS = 10_000
@@ -213,6 +226,30 @@ export function sanitizeEntry(raw) {
   }
 }
 
+/**
+ * Normalise one "用户形象" (a fact about the USER, not a role for the model).
+ *
+ * Shape: { id, name, content, enabled, updatedAt }. `name` is a short single-
+ * line topic label ("职业背景"、"沟通偏好"、"性格"、"长期追求"); `content` is
+ * the multi-line description. Both blank means the profile is discarded
+ * (returns null) the same way a blank entry is. A blank name falls back to the
+ * first 20 characters of the content so an unnamed profile is still listable.
+ * Exported for tests.
+ */
+export function sanitizeProfile(raw) {
+  if (raw === null || typeof raw !== 'object') return null
+  const name = singleLine(raw.name, MAX_PROFILE_NAME)
+  const content = cleanText(raw.content, MAX_PROFILE_CONTENT)
+  if (name === '' && content === '') return null
+  return {
+    id: typeof raw.id === 'string' && raw.id !== '' ? raw.id.slice(0, 64) : makeId(),
+    name: name === '' ? singleLine(content, 20) : name,
+    content,
+    enabled: raw.enabled !== false,
+    updatedAt: typeof raw.updatedAt === 'number' && Number.isFinite(raw.updatedAt) ? raw.updatedAt : Date.now(),
+  }
+}
+
 /**
  * Which fields of a raw entry had to be cut to fit the stored limits.
  *
@@ -235,6 +272,16 @@ export function truncatedFields(raw) {
   return cut
 }
 
+/** Same disclosure as truncatedFields, but for a profile's name/content. */
+export function truncatedProfileFields(raw) {
+  if (raw === null || typeof raw !== 'object') return []
+  const cut = []
+  const unlimited = Number.MAX_SAFE_INTEGER
+  if (typeof raw.name === 'string' && singleLine(raw.name, unlimited) !== singleLine(raw.name, MAX_PROFILE_NAME)) cut.push('形象名称')
+  if (typeof raw.content === 'string' && cleanText(raw.content, unlimited) !== cleanText(raw.content, MAX_PROFILE_CONTENT)) cut.push('形象内容')
+  return cut
+}
+
 /** JSON.stringify keeps quotes/type visible; the String() tail is for values JSON cannot encode. */
 const describeValue = (value) => {
   const text = JSON.stringify(value)
@@ -267,7 +314,7 @@ const describeValue = (value) => {
  * user must be told their hand edit did not survive verbatim.
  */
 function normalizeData(raw) {
-  const data = { version: 1, rev: 0, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [] }
+  const data = { version: 1, rev: 0, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [], profiles: [] }
   if (raw === null || typeof raw !== 'object') return { data, dropped: 0, optionFixes: [] }
   if (typeof raw.version === 'number' && raw.version !== 1) {
     return { data, dropped: 0, optionFixes: [], rejectedVersion: raw.version }
@@ -310,7 +357,24 @@ function normalizeData(raw) {
     seen.add(entry.id)
     data.entries.push(entry)
   }
-  return { data, dropped, optionFixes }
+  // User profiles ("用户形象") follow the same tolerant rules: a missing
+  // field on an old/hand-made file is just an empty list; blank or
+  // over-cap profiles are dropped and counted for disclosure, never adopted
+  // silently (the next save rewrites the file without them).
+  const profileList = Array.isArray(raw.profiles) ? raw.profiles : []
+  const seenProfileIds = new Set()
+  let droppedProfiles = 0
+  for (const candidate of profileList) {
+    const profile = sanitizeProfile(candidate)
+    if (profile === null || data.profiles.length >= MAX_PROFILES) {
+      droppedProfiles += 1
+      continue
+    }
+    if (seenProfileIds.has(profile.id)) profile.id = makeId()
+    seenProfileIds.add(profile.id)
+    data.profiles.push(profile)
+  }
+  return { data, dropped, droppedProfiles, optionFixes }
 }
 
 /**
@@ -329,6 +393,7 @@ function cloneData(data) {
     enabled: data.enabled === true,
     budgetChars: data.budgetChars,
     entries: (Array.isArray(data.entries) ? data.entries : []).map((entry) => ({ ...entry })),
+    profiles: (Array.isArray(data.profiles) ? data.profiles : []).map((profile) => ({ ...profile })),
   }
 }
 
@@ -337,6 +402,11 @@ const droppedEntriesMessage = (count) =>
     ? '存储文件中有 ' + count + ' 条条目未能载入（内容为空或超过 ' + MAX_ENTRIES + ' 条上限）；下次保存时它们将从文件中移除'
     : null
 
+const droppedProfilesMessage = (count) =>
+  count > 0
+    ? '存储文件中有 ' + count + ' 个用户形象未能载入（名称与内容同时为空或超过 ' + MAX_PROFILES + ' 个上限）；下次保存时它们将从文件中移除'
+    : null
+
 /**
  * The load-time disclosures for one normalizeData result: dropped entries and
  * corrected hand-edited options, joined with a full-width semicolon.
@@ -347,6 +417,8 @@ const loadWarnings = (loaded) => {
   const parts = []
   const dropped = droppedEntriesMessage(loaded.dropped)
   if (dropped !== null) parts.push(dropped)
+  const droppedProfiles = droppedProfilesMessage(loaded.droppedProfiles || 0)
+  if (droppedProfiles !== null) parts.push(droppedProfiles)
   if (Array.isArray(loaded.optionFixes) && loaded.optionFixes.length > 0) {
     parts.push('存储文件中的以下选项值无效，已按规则修正：' + loaded.optionFixes.join('；') + '；下次保存时修正值将写入文件')
   }
@@ -582,9 +654,53 @@ function formatEntry(entry, tag) {
  * competing for the budget at all. When nothing renders, `text` is '' and
  * `included` is [] even though `budget` still reports the effective ceiling.
  */
-export function planInjection(data) {
-  const budget = clampBudget(data !== null && typeof data === 'object' ? data.budgetChars : undefined)
-  const blank = () => ({ text: '', budget, activeCount: 0, included: [], omitted: [] })
+/**
+ * The persona ("用户形象") preamble. One fixed header whether one or several
+ * profiles are active: each is a SIDE of the same user (background, tastes,
+ * personality, goals), so there is no "play multiple roles" framing. The
+ * wording deliberately demotes the whole section to a tilt on framing —
+ * correctness, completeness and the question itself always win.
+ */
+const PERSONA_HEADER = [
+  '## 关于用户（用户形象）',
+  '以下是用户本人提供的个人形象信息，描述其身份背景、喜好、性格与追求，不是要求你扮演的角色。请在保证回答正确、完整、客观且紧扣问题本身的前提下，结合这些信息调整解释的深浅、详略、举例与建议的侧重；不得为了迎合这些信息而改变事实、省略必要的风险提示或偏离问题核心；与当前问题无关时直接忽略。',
+  '',
+].join('\n')
+
+/**
+ * Build the persona section from enabled profiles with non-empty content, in
+ * stored order. Returns the rendered text plus one { id, name, chars } item
+ * per rendered profile, in the same shape the snapshot exposes. Deterministic:
+ * no timestamps, no counts, identical profiles in produce byte-identical
+ * text. An empty/disabled set renders to '' so callers can join unconditionally.
+ */
+function buildProfilesBlock(profiles) {
+  const active = (Array.isArray(profiles) ? profiles : [])
+    .filter((profile) => profile !== null && typeof profile === 'object'
+      && profile.enabled === true
+      && typeof profile.content === 'string' && profile.content !== '')
+  if (active.length === 0) return { text: '', profiles: [], chars: 0 }
+  const blocks = []
+  const items = []
+  for (const profile of active) {
+    const name = typeof profile.name === 'string' && profile.name !== ''
+      ? profile.name
+      : singleLine(profile.content, 20)
+    const block = '### ' + name + '\n' + profile.content
+    blocks.push(block)
+    items.push({ id: typeof profile.id === 'string' ? profile.id : '', name, chars: block.length })
+  }
+  const text = PERSONA_HEADER + '\n' + blocks.join('\n\n')
+  return { text, profiles: items, chars: text.length }
+}
+
+/**
+ * The entry half of the plan: the existing instruction block with its budget
+ * trimming. Kept as the inner function so planInjection can prepend the
+ * persona section without touching (and risking) the trimming logic.
+ */
+function planEntries(data, budget) {
+  const blank = () => ({ text: '', activeCount: 0, included: [], omitted: [] })
   if (data === null || typeof data !== 'object' || data.enabled !== true) return blank()
   const active = (Array.isArray(data.entries) ? data.entries : [])
     .filter((entry) => entry.enabled === true && entry.content !== '')
@@ -679,6 +795,48 @@ export function planInjection(data) {
   }
 }
 
+/**
+ * Compose the full injected section: the persona block ("关于用户", when at
+ * least one profile is enabled) followed by the existing instruction block.
+ *
+ * Returned shape extends the entry plan with:
+ *   profiles:    [{ id, name, chars }] — rendered persona profiles, in order
+ *   profileChars: total characters of the persona section (0 when none)
+ *   entryChars:  length of the entry half alone
+ *
+ * Guarantees:
+ *  - zero enabled profiles => the result is byte-identical to the old
+ *    entries-only plan (existing tests pin this);
+ *  - personas are NOT subject to the entry budget — the budget/included/
+ *    omitted fields still describe instructions only, and an identity is
+ *    never silently trimmed;
+ *  - a profile-only store (no instructions) still injects, and the master
+ *    `enabled` switch suppresses both halves as before.
+ */
+export function planInjection(data) {
+  const budget = clampBudget(data !== null && typeof data === 'object' ? data.budgetChars : undefined)
+  const blank = () => ({
+    text: '', budget, activeCount: 0, included: [], omitted: [],
+    profiles: [], profileChars: 0, entryChars: 0,
+  })
+  if (data === null || typeof data !== 'object' || data.enabled !== true) return blank()
+  const persona = buildProfilesBlock(data.profiles)
+  const entryPlan = planEntries(data, budget)
+  const parts = []
+  if (persona.text !== '') parts.push(persona.text)
+  if (entryPlan.text !== '') parts.push(entryPlan.text)
+  return {
+    text: parts.join('\n\n'),
+    budget,
+    activeCount: entryPlan.activeCount,
+    included: entryPlan.included,
+    omitted: entryPlan.omitted,
+    entryChars: entryPlan.text.length,
+    profiles: persona.profiles,
+    profileChars: persona.chars,
+  }
+}
+
 /**
  * Render the injected block text. A thin wrapper over planInjection: the
  * decision process lives in one place, and callers that only need the text
@@ -696,7 +854,7 @@ export function apply(ctx) {
   const systemPrompt = ctx.systemPrompt
 
   const state = {
-    data: { version: 1, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [] },
+    data: { version: 1, enabled: true, budgetChars: DEFAULT_BUDGET, entries: [], profiles: [] },
     storagePath: null,
     storageDisplay: null,
     storageError: null,
@@ -819,7 +977,10 @@ export function apply(ctx) {
       return planInjection(state.data)
     } catch (err) {
       console.error('[instruction-memory] render failed:', err)
-      return { text: '', budget: clampBudget(state.data.budgetChars), activeCount: 0, included: [], omitted: [] }
+      return {
+        text: '', budget: clampBudget(state.data.budgetChars), activeCount: 0, included: [], omitted: [],
+        profiles: [], profileChars: 0, entryChars: 0,
+      }
     }
   }
 
@@ -1394,6 +1555,7 @@ export function apply(ctx) {
         enabled: state.data.enabled === true,
         budgetChars: clampBudget(state.data.budgetChars),
         entries: (Array.isArray(state.data.entries) ? state.data.entries : []).map((entry) => ({ ...entry })),
+        profiles: (Array.isArray(state.data.profiles) ? state.data.profiles : []).map((profile) => ({ ...profile })),
       },
       storage: {
         path: state.storageDisplay !== null ? state.storageDisplay : state.storagePath,
@@ -1419,6 +1581,15 @@ export function apply(ctx) {
         activeCount: plan.activeCount,
         included: plan.included.map((item) => ({ id: item.id, chars: item.chars, truncated: item.truncated === true })),
         omitted: plan.omitted.map((item) => ({ id: item.id, chars: item.chars })),
+        /**
+         * Persona section detail: rendered profiles (id/name/chars, in order)
+         * and their total size. `entryChars` is the instruction half alone,
+         * which is what the budget meter measures; `chars` above stays the
+         * whole section (personas + instructions) for diagnostics.
+         */
+        profiles: plan.profiles.map((item) => ({ id: item.id, name: item.name, chars: item.chars })),
+        profileChars: plan.profileChars,
+        entryChars: plan.entryChars,
         /**
          * How many times the harness has pulled this section into a prompt since
          * boot. 0 means "prepared, never assembled" — the distinction the old
@@ -1433,7 +1604,15 @@ export function apply(ctx) {
        * into memory. It is a character budget against byte sizes, so the
        * Client applies a generous multiplier — see importSizeVerdict there.
        */
-      limits: { minBudget: MIN_BUDGET, maxBudget: MAX_BUDGET, maxEntries: MAX_ENTRIES, maxBodyChars: MAX_BODY_CHARS },
+      limits: {
+        minBudget: MIN_BUDGET,
+        maxBudget: MAX_BUDGET,
+        maxEntries: MAX_ENTRIES,
+        maxProfiles: MAX_PROFILES,
+        maxProfileName: MAX_PROFILE_NAME,
+        maxProfileContent: MAX_PROFILE_CONTENT,
+        maxBodyChars: MAX_BODY_CHARS,
+      },
     }
   }
 
@@ -1697,6 +1876,42 @@ export function apply(ctx) {
     return settle(done + tail + missingNote, saved)
   })
 
+  const saveProfile = (raw, baseRev) => enqueue(async () => {
+    if (state.versionRejected) return versionRefusal()
+    if (isStaleBaseRev(baseRev)) return conflictResponse()
+    const profile = sanitizeProfile(raw)
+    if (profile === null) return { ok: false, saved: false, message: '形象名称与内容不能同时为空', snapshot: snapshot() }
+    profile.updatedAt = Date.now()
+    const replacesExisting = state.data.profiles.some((candidate) => candidate.id === profile.id)
+    if (!replacesExisting && state.data.profiles.length >= MAX_PROFILES) {
+      return { ok: false, saved: false, message: '最多保存 ' + MAX_PROFILES + ' 个用户形象', snapshot: snapshot() }
+    }
+    const cut = truncatedProfileFields(raw)
+    const saved = await commit(() => {
+      const list = state.data.profiles
+      const index = list.findIndex((candidate) => candidate.id === profile.id)
+      if (index >= 0) list[index] = profile
+      else list.push(profile)
+    })
+    const note = cut.length > 0
+      ? '已保存；' + cut.join('、') + '超过长度上限（名称 ' + MAX_PROFILE_NAME + ' / 内容 ' + MAX_PROFILE_CONTENT + ' 字符），超出部分已被截断'
+      : null
+    return settle(note, saved)
+  })
+
+  const deleteProfile = (id, baseRev) => enqueue(async () => {
+    if (state.versionRejected) return versionRefusal()
+    if (isStaleBaseRev(baseRev)) return conflictResponse()
+    // Mirror deleteEntry: an absent id changes nothing and must not touch disk.
+    if (!state.data.profiles.some((profile) => profile.id === id)) {
+      return { ok: true, saved: false, message: null, snapshot: snapshot() }
+    }
+    const saved = await commit(() => {
+      state.data.profiles = state.data.profiles.filter((profile) => profile.id !== id)
+    })
+    return settle(null, saved)
+  })
+
   const reload = () => enqueue(async () => {
     // `saved` is only true when the load itself wrote to disk (the
     // backup-promotion or legacy-migration branch); a plain re-read claiming
@@ -1705,7 +1920,6 @@ export function apply(ctx) {
     syncSection()
     return { ok: state.storageError === null, saved: wrote === true, message: state.storageError, snapshot: snapshot() }
   })
-
   const exportData = () => enqueue(async () => ({
     ok: true,
     // An export reads the store and never writes it; a truthful `saved:false`
@@ -1724,15 +1938,16 @@ export function apply(ctx) {
     if (payload === null || typeof payload !== 'object') {
       return { ok: false, saved: false, message: '导入内容不是有效的 JSON 对象', snapshot: snapshot() }
     }
-    // Accept both the plugin's own export envelope ({app, data:{entries}}) and
-    // a bare {entries} array (e.g. a hand-assembled file).
-    const rawEntries = Array.isArray(payload.entries)
-      ? payload.entries
-      : (payload.data !== null && typeof payload.data === 'object' && Array.isArray(payload.data.entries)
-        ? payload.data.entries
-        : null)
-    if (rawEntries === null || rawEntries.length === 0) {
-      return { ok: false, saved: false, message: '导入文件中没有找到条目', snapshot: snapshot() }
+    // Accept both the plugin's own export envelope ({app, data:{entries,…}})
+    // and a bare {entries}/{profiles} object (e.g. a hand-assembled file).
+    const inner = payload.data !== null && typeof payload.data === 'object' ? payload.data : payload
+    const rawEntries = Array.isArray(payload.entries) ? payload.entries
+      : (Array.isArray(inner.entries) ? inner.entries : null)
+    const rawProfiles = Array.isArray(payload.profiles) ? payload.profiles
+      : (Array.isArray(inner.profiles) ? inner.profiles : null)
+    if ((rawEntries === null || rawEntries.length === 0)
+      && (rawProfiles === null || rawProfiles.length === 0)) {
+      return { ok: false, saved: false, message: '导入文件中没有找到条目或用户形象', snapshot: snapshot() }
     }
     // Merge, never replace: importing must not be able to wipe what is here.
     // Duplicates (same id, or same title+content) and invalid items are
@@ -1747,7 +1962,7 @@ export function apply(ctx) {
     const cutFields = new Set()
     let truncatedCount = 0
     let skipped = 0
-    for (const candidate of rawEntries) {
+    for (const candidate of (rawEntries || [])) {
       const entry = sanitizeEntry(candidate)
       if (entry === null || seenIds.has(entry.id) || seenBodies.has(entry.title + '\u0000' + entry.content)) {
         skipped += 1
@@ -1771,18 +1986,70 @@ export function apply(ctx) {
       seenIds.add(entry.id)
       seenBodies.add(entry.title + '\u0000' + entry.content)
     }
-    if (accepted.length === 0) {
+    // Persona profiles merge under the same rules (same id, or same
+    // name+content) in the SAME transaction, so a mixed import never lands
+    // half-way.
+    const existingProfiles = state.data.profiles
+    const seenProfileIds = new Set(existingProfiles.map((profile) => profile.id))
+    const seenProfileBodies = new Set(existingProfiles.map((profile) => profile.name + '\u0000' + profile.content))
+    const acceptedProfiles = []
+    const cutProfileFields = new Set()
+    let truncatedProfileCount = 0
+    let skippedProfiles = 0
+    for (const candidate of (rawProfiles || [])) {
+      const profile = sanitizeProfile(candidate)
+      if (profile === null
+        || seenProfileIds.has(profile.id)
+        || seenProfileBodies.has(profile.name + '\u0000' + profile.content)) {
+        skippedProfiles += 1
+        continue
+      }
+      if (existingProfiles.length + acceptedProfiles.length >= MAX_PROFILES) {
+        skippedProfiles += 1
+        continue
+      }
+      const cut = truncatedProfileFields(candidate)
+      if (cut.length > 0) {
+        truncatedProfileCount += 1
+        for (const field of cut) cutProfileFields.add(field)
+      }
+      profile.updatedAt = Date.now()
+      acceptedProfiles.push(profile)
+      seenProfileIds.add(profile.id)
+      seenProfileBodies.add(profile.name + '\u0000' + profile.content)
+    }
+    if (accepted.length === 0 && acceptedProfiles.length === 0) {
       // Nothing was written to disk, so claiming saved:true would be a lie the
       // panel cannot distinguish from a real save.
-      return { ok: true, saved: false, message: '没有新增条目：' + skipped + ' 条已存在或无效', snapshot: snapshot() }
+      return {
+        ok: true,
+        saved: false,
+        message: '没有新增内容：' + skipped + ' 条条目、' + skippedProfiles + ' 个用户形象已存在或无效',
+        snapshot: snapshot(),
+      }
     }
     const saved = await commit(() => {
       state.data.entries.push(...accepted)
+      state.data.profiles.push(...acceptedProfiles)
     })
-    const truncated = truncatedCount > 0
-      ? '；其中 ' + truncatedCount + ' 条超过长度上限，' + [...cutFields].join('、') + '已被截断'
-      : ''
-    return settle('导入完成：新增 ' + accepted.length + ' 条，跳过 ' + skipped + ' 条（已存在或无效）' + truncated, saved)
+    const parts = []
+    if (accepted.length > 0) {
+      const truncated = truncatedCount > 0
+        ? '；其中 ' + truncatedCount + ' 条超过长度上限，' + [...cutFields].join('、') + '已被截断'
+        : ''
+      parts.push('新增指令 ' + accepted.length + ' 条，跳过 ' + skipped + ' 条' + truncated)
+    } else if (skipped > 0) {
+      parts.push('指令跳过 ' + skipped + ' 条（已存在或无效）')
+    }
+    if (acceptedProfiles.length > 0) {
+      const truncated = truncatedProfileCount > 0
+        ? '；其中 ' + truncatedProfileCount + ' 个超过长度上限，' + [...cutProfileFields].join('、') + '已被截断'
+        : ''
+      parts.push('新增用户形象 ' + acceptedProfiles.length + ' 个，跳过 ' + skippedProfiles + ' 个' + truncated)
+    } else if (skippedProfiles > 0) {
+      parts.push('用户形象跳过 ' + skippedProfiles + ' 个（已存在或无效）')
+    }
+    return settle('导入完成：' + parts.join('；'), saved)
   })
 
   const dispatch = async (method, args) => {
@@ -1825,6 +2092,14 @@ export function apply(ctx) {
           args !== null && typeof args === 'object' ? args.ids : null,
           args !== null && typeof args === 'object' ? args.value : undefined,
           args !== null && typeof args === 'object' ? args.baseRev : undefined)
+      case 'save-profile':
+        return saveProfile(
+          args !== null && typeof args === 'object' ? args.profile : null,
+          args !== null && typeof args === 'object' ? args.baseRev : undefined)
+      case 'delete-profile':
+        return deleteProfile(
+          args !== null && typeof args === 'object' && typeof args.id === 'string' ? args.id : '',
+          args !== null && typeof args === 'object' ? args.baseRev : undefined)
       default:
         return { ok: false, saved: false, message: '未知方法：' + String(method), snapshot: snapshot() }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-instruction-memory",
-  "version": "1.0.18",
+  "version": "1.1.0",
   "description": "User-only instruction memory for DSH: long-term instructions maintained in the settings UI and auto-injected into every conversation — the model has no write access. 指令记忆：只由用户在设置页维护的长期指令，自动注入此后每轮对话；模型没有任何写入口。",
   "license": "MIT",
   "type": "module",