@openclaw-china/shared 2026.3.4-2 → 2026.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw-china/shared",
-  "version": "2026.3.4-2",
+  "version": "2026.3.5",
   "type": "module",
   "exports": {
     ".": "./src/index.ts"

package/src/cron/index.test.ts

@@ -0,0 +1,57 @@
+import { describe, expect, it } from "vitest";
+import {
+  appendCronHiddenPrompt,
+  applyCronHiddenPromptToContext,
+  shouldInjectCronHiddenPrompt,
+  splitCronHiddenPrompt,
+} from "./index.js";
+
+describe("cron hidden prompt", () => {
+  it("injects fixed delivery guidance for reminder-like messages", () => {
+    const text = "请帮我每小时提醒喝水";
+    const next = appendCronHiddenPrompt(text);
+
+    expect(shouldInjectCronHiddenPrompt(text)).toBe(true);
+    expect(next).not.toBe(text);
+    expect(next).toContain('sessionTarget="isolated"');
+    expect(next).toContain('payload.kind="agentTurn"');
+    expect(next).toContain("Use the built-in cron tool (action=add/update)");
+    expect(next).toContain("payload.message must be plain user-visible reminder text only");
+    expect(next).toContain('delivery.mode="announce"');
+    expect(next).toContain("delivery.channel=<OriginatingChannel>");
+    expect(next).toContain("delivery.to=<OriginatingTo>");
+    expect(next).toContain('Never set delivery.channel="last"');
+  });
+
+  it("does not inject for documentation-style questions", () => {
+    const text = "cron 文档怎么用？";
+    const next = appendCronHiddenPrompt(text);
+
+    expect(shouldInjectCronHiddenPrompt(text)).toBe(false);
+    expect(next).toBe(text);
+  });
+
+  it("is idempotent when called repeatedly", () => {
+    const text = "每分钟提醒我伸展一下";
+    const once = appendCronHiddenPrompt(text);
+    const twice = appendCronHiddenPrompt(once);
+
+    expect(twice).toBe(once);
+  });
+
+  it("can split injected prompt from body", () => {
+    const injected = appendCronHiddenPrompt("set a reminder every day at 9am");
+    const result = splitCronHiddenPrompt(injected);
+
+    expect(result.base).toBe("set a reminder every day at 9am");
+    expect(result.prompt).toBeDefined();
+  });
+
+  it("applies to context command body only when needed", () => {
+    const ctx: { Body?: string; CommandBody?: string } = { Body: "每天 18:00 提醒我下班喝水" };
+    const changed = applyCronHiddenPromptToContext(ctx);
+
+    expect(changed).toBe(true);
+    expect(ctx.CommandBody).toContain("delivery.mode=\"announce\"");
+  });
+});

package/src/cron/index.ts

@@ -1,10 +1,25 @@
-const CRON_HIDDEN_PROMPT = `
-When creating or updating a cron task, use the main session's last route as the delivery target.
-- Do not ask the user for userId/chatId
-- sessionTarget="isolated"
-- payload.kind="agentTurn"
-- payload.deliver=true
-- Do not set payload.channel/to (fall back to last route automatically)
+const CRON_HIDDEN_PROMPT = `
+When creating or updating a cron task, always store a fixed delivery target in the job itself.
+- Use the built-in cron tool (action=add/update). Do not run shell commands.
+- Must use sessionTarget="isolated" for reminder jobs.
+- payload.kind="agentTurn"
+- payload.message must be plain user-visible reminder text only.
+- You must encode runtime guardrails directly into payload.message so the cron run can follow them without extra context.
+- Runtime guardrails to encode in payload.message:
+  - return plain text only
+  - never call any tool
+  - never call the message tool
+  - never send manually; delivery is handled by cron delivery settings
+- Do not include tool directives, "NO_REPLY", or heartbeat markers in payload.message.
+- Job name is never a message target.
+- During cron run, must return plain text only and never call the message tool.
+- Use top-level delivery with announce mode:
+  delivery.mode="announce"
+  delivery.channel=<OriginatingChannel> (example: "qqbot")
+  delivery.to=<OriginatingTo> (examples: "user:<openid>" / "group:<group_openid>")
+  delivery.accountId=<AccountId> when available
+- Never set delivery.channel="last" for multi-channel environments.
+- If OriginatingChannel/OriginatingTo are unavailable, ask a concise follow-up for channel and target.
 - Do not call the message tool to send`;
 
 const CRON_TRIGGER_KEYWORDS = [