@openclaw-china/feishu-china 2026.3.4-2 → 2026.3.7

package/dist/index.js

@@ -4748,12 +4748,27 @@ function extractFilesFromText(text, options = {}) {
 
 // ../../packages/shared/src/cron/index.ts
 var CRON_HIDDEN_PROMPT = `
-When creating or updating a cron task, use the main session's last route as the delivery target.
-- Do not ask the user for userId/chatId
-- sessionTarget="isolated"
+When creating or updating a cron task, always store a fixed delivery target in the job itself.
+- Use the built-in cron tool (action=add/update). Do not run shell commands.
+- Must use sessionTarget="isolated" for reminder jobs.
 - payload.kind="agentTurn"
-- payload.deliver=true
-- Do not set payload.channel/to (fall back to last route automatically)
+- payload.message must be plain user-visible reminder text only.
+- You must encode runtime guardrails directly into payload.message so the cron run can follow them without extra context.
+- Runtime guardrails to encode in payload.message:
+  - return plain text only
+  - never call any tool
+  - never call the message tool
+  - never send manually; delivery is handled by cron delivery settings
+- Do not include tool directives, "NO_REPLY", or heartbeat markers in payload.message.
+- Job name is never a message target.
+- During cron run, must return plain text only and never call the message tool.
+- Use top-level delivery with announce mode:
+  delivery.mode="announce"
+  delivery.channel=<OriginatingChannel> (example: "qqbot")
+  delivery.to=<OriginatingTo> (examples: "user:<openid>" / "group:<group_openid>")
+  delivery.accountId=<AccountId> when available
+- Never set delivery.channel="last" for multi-channel environments.
+- If OriginatingChannel/OriginatingTo are unavailable, ask a concise follow-up for channel and target.
 - Do not call the message tool to send`;
 var CRON_TRIGGER_KEYWORDS = [
   "\u5B9A\u65F6",