larkin 0.3.3 → 0.4.1

package/dist/agent/inbox-projection.cjs

@@ -1,22 +1,118 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNTIME_REDELIVERY_TARGET = exports.RUNTIME_REMINDER_TARGET = void 0;
+exports.isCanonicalInboxTarget = isCanonicalInboxTarget;
 exports.targetKeyOfInboxEnvelope = targetKeyOfInboxEnvelope;
 exports.projectInboxEnvelope = projectInboxEnvelope;
 exports.targetOfInboxEnvelope = targetOfInboxEnvelope;
 exports.projectInboxEvents = projectInboxEvents;
 exports.projectInboxCheck = projectInboxCheck;
+exports.RUNTIME_REMINDER_TARGET = "runtime:reminder";
+exports.RUNTIME_REDELIVERY_TARGET = "runtime:redelivery";
+const CHAT_TARGET_PREFIX = "chat:";
+const THREAD_TARGET_PREFIX = "thread:";
+const DOCUMENT_COMMENT_TARGET_PREFIX = "document-comment:";
+const REMINDER_MESSAGE_PREFIX = "rem_";
+const REDELIVERY_MESSAGE_PREFIX = "redeliver_";
+function hasNonemptySuffix(value, prefix) {
+    return value.startsWith(prefix) && value.length > prefix.length;
+}
+function internalTargetOfInboxEnvelope(envelope) {
+    const messageId = typeof envelope.message_id === "string" ? envelope.message_id : "";
+    const reminderKind = envelope.kind === "reminder";
+    const redeliveryKind = envelope.kind === "redelivery";
+    const reminderMarker = messageId.startsWith(REMINDER_MESSAGE_PREFIX);
+    const redeliveryMarker = messageId.startsWith(REDELIVERY_MESSAGE_PREFIX);
+    const reminderId = hasNonemptySuffix(messageId, REMINDER_MESSAGE_PREFIX);
+    const redeliveryId = hasNonemptySuffix(messageId, REDELIVERY_MESSAGE_PREFIX);
+    const hasInternalMarker = reminderKind || redeliveryKind || reminderMarker || redeliveryMarker;
+    if (!hasInternalMarker)
+        return null;
+    if (reminderKind && reminderId && !redeliveryKind && !redeliveryMarker)
+        return exports.RUNTIME_REMINDER_TARGET;
+    if (redeliveryKind && redeliveryId && !reminderKind && !reminderMarker)
+        return exports.RUNTIME_REDELIVERY_TARGET;
+    throw new Error(`Inbox internal source requires matching kind and message_id prefix; received kind=${JSON.stringify(envelope.kind ?? null)} message_id=${JSON.stringify(envelope.message_id ?? null)}`);
+}
+function isChatTarget(target) {
+    return hasNonemptySuffix(target, CHAT_TARGET_PREFIX);
+}
+function isThreadTarget(target) {
+    return hasNonemptySuffix(target, THREAD_TARGET_PREFIX);
+}
+function isDocumentCommentTarget(target) {
+    return hasNonemptySuffix(target, DOCUMENT_COMMENT_TARGET_PREFIX);
+}
+function isCanonicalInboxTarget(target) {
+    return isChatTarget(target)
+        || isThreadTarget(target)
+        || target === exports.RUNTIME_REMINDER_TARGET
+        || target === exports.RUNTIME_REDELIVERY_TARGET
+        || isDocumentCommentTarget(target);
+}
+function invalidTarget(target) {
+    return new Error(`Invalid canonical Inbox target ${JSON.stringify(target)}; expected chat:<nonempty>, thread:<nonempty>, runtime:reminder, runtime:redelivery, or document-comment:<nonempty>`);
+}
+function optionalLocator(envelope, key) {
+    const value = envelope[key];
+    if (value === undefined || value === null || value === "")
+        return "";
+    if (typeof value !== "string")
+        throw new Error(`Inbox ${key} must be a string when present; received ${JSON.stringify(value)}`);
+    return value;
+}
 function targetKeyOfInboxEnvelope(envelope) {
     if (!envelope)
-        return "runtime:unknown";
-    if (envelope.kind === "document_comment" && typeof envelope.target === "string" && envelope.target) {
-        return envelope.target;
+        throw new Error("Inbox envelope is required to derive a canonical target");
+    const internalTarget = internalTargetOfInboxEnvelope(envelope);
+    const chatId = optionalLocator(envelope, "chat_id");
+    const threadId = optionalLocator(envelope, "thread_id");
+    if (threadId && !chatId) {
+        throw new Error(`Inbox thread locator requires nonempty chat_id and thread_id; received chat_id=${JSON.stringify(chatId)} thread_id=${JSON.stringify(threadId)}`);
     }
-    if (typeof envelope.chat_id === "string" && envelope.chat_id) {
-        return typeof envelope.thread_id === "string" && envelope.thread_id
-            ? `thread:${envelope.chat_id}:${envelope.thread_id}`
-            : `chat:${envelope.chat_id}`;
+    const locatorTarget = chatId ? (threadId ? `thread:${chatId}:${threadId}` : `chat:${chatId}`) : null;
+    const hasExplicitTarget = Object.prototype.hasOwnProperty.call(envelope, "target");
+    if (hasExplicitTarget) {
+        if (typeof envelope.target !== "string" || envelope.target.length === 0)
+            throw invalidTarget(String(envelope.target));
+        const target = envelope.target;
+        if (!isCanonicalInboxTarget(target))
+            throw invalidTarget(target);
+        if (isChatTarget(target) || isThreadTarget(target)) {
+            if (internalTarget || envelope.kind === "document_comment")
+                throw new Error(`Inbox chat/thread target conflicts with source kind/message_id`);
+            if (locatorTarget && locatorTarget !== target) {
+                throw new Error(`Inbox chat/thread target conflicts with locator target ${JSON.stringify(locatorTarget)}`);
+            }
+            return target;
+        }
+        if (target === exports.RUNTIME_REMINDER_TARGET || target === exports.RUNTIME_REDELIVERY_TARGET) {
+            if (locatorTarget)
+                throw new Error(`Inbox runtime target cannot carry chat_id/thread_id locators`);
+            if (internalTarget !== target)
+                throw new Error(`Inbox target ${target} requires exact matching kind and message_id prefix`);
+            return target;
+        }
+        if (isDocumentCommentTarget(target)) {
+            if (envelope.kind !== "document_comment" || internalTarget)
+                throw new Error(`Inbox document-comment target requires kind=document_comment and no internal source`);
+            if (locatorTarget)
+                throw new Error(`Inbox document-comment target cannot carry chat_id/thread_id locators`);
+            return target;
+        }
+        throw invalidTarget(target);
     }
-    return targetOfInboxEnvelope(envelope) || "runtime:system";
+    if (envelope.kind === "document_comment") {
+        throw new Error("Inbox document_comment requires an explicit document-comment:<nonempty> target");
+    }
+    if (locatorTarget) {
+        if (internalTarget)
+            throw new Error(`Inbox internal source cannot be derived as a chat/thread target`);
+        return locatorTarget;
+    }
+    if (internalTarget)
+        throw new Error(`Inbox internal source requires an explicit ${internalTarget} target`);
+    throw new Error(`Inbox envelope has no canonical target locator (message_id=${JSON.stringify(envelope.message_id ?? null)}, kind=${JSON.stringify(envelope.kind ?? null)})`);
 }
 /** Enrich the durable local Inbox without changing the canonical Runtime envelope. */
 function projectInboxEnvelope(canonical, locators) {
@@ -32,22 +128,14 @@ function projectInboxEnvelope(canonical, locators) {
         content: locators.content !== undefined ? locators.content : (typeof canonical.content === "string" ? canonical.content : ""),
     };
 }
-/** Preserve the target/thread format consumed by the existing Agent CLI. */
+/** Return an allowlisted canonical target when the envelope is locatable. */
 function targetOfInboxEnvelope(envelope) {
-    if (!envelope)
-        return null;
-    if (envelope.kind === "document_comment") {
-        return typeof envelope.target === "string" && envelope.target ? envelope.target : null;
+    try {
+        return targetKeyOfInboxEnvelope(envelope);
     }
-    if (envelope.channel_type === "thread" && envelope.parent_channel_name) {
-        const base = envelope.parent_channel_type === "dm"
-            ? `dm:@${String(envelope.parent_channel_name)}`
-            : `#${String(envelope.parent_channel_name)}`;
-        return `${base}:${String(envelope.channel_name || "").slice(0, 8)}`;
+    catch {
+        return null;
     }
-    return envelope.channel_type === "dm"
-        ? `dm:@${String(envelope.channel_name)}`
-        : `#${String(envelope.channel_name)}`;
 }
 /** Project persisted inbox envelopes into the exact agentApi events response data shape. */
 function projectInboxEvents(envelopes) {
@@ -56,7 +144,7 @@ function projectInboxEvents(envelopes) {
         events: envelopes,
         last_seen_msgId: last ? (last.message_id || null) : null,
         last_seen_seq: last ? (last.seq ?? null) : null,
-        reply_target: targetOfInboxEnvelope(last),
+        reply_target: last ? targetKeyOfInboxEnvelope(last) : null,
         pending_notice_ids: [],
         wake_reason: null,
         has_more: false,
@@ -64,9 +152,12 @@ function projectInboxEvents(envelopes) {
 }
 /** Bounded, content-light and deterministic projection for the read-only check command. */
 function projectInboxCheck(envelopes, onlyTarget) {
+    if (onlyTarget && !isCanonicalInboxTarget(onlyTarget)) {
+        throw new Error(`Invalid canonical Inbox check target ${JSON.stringify(onlyTarget)}`);
+    }
     const byTarget = new Map();
     for (const envelope of envelopes) {
-        const target = typeof envelope.target === "string" && envelope.target ? envelope.target : targetKeyOfInboxEnvelope(envelope);
+        const target = targetKeyOfInboxEnvelope(envelope);
         if (onlyTarget && onlyTarget !== target)
             continue;
         const rows = byTarget.get(target) ?? [];

package/dist/agent/inbox-projection.mjs

@@ -1,15 +1,109 @@
+export const RUNTIME_REMINDER_TARGET = "runtime:reminder";
+export const RUNTIME_REDELIVERY_TARGET = "runtime:redelivery";
+const CHAT_TARGET_PREFIX = "chat:";
+const THREAD_TARGET_PREFIX = "thread:";
+const DOCUMENT_COMMENT_TARGET_PREFIX = "document-comment:";
+const REMINDER_MESSAGE_PREFIX = "rem_";
+const REDELIVERY_MESSAGE_PREFIX = "redeliver_";
+function hasNonemptySuffix(value, prefix) {
+    return value.startsWith(prefix) && value.length > prefix.length;
+}
+function internalTargetOfInboxEnvelope(envelope) {
+    const messageId = typeof envelope.message_id === "string" ? envelope.message_id : "";
+    const reminderKind = envelope.kind === "reminder";
+    const redeliveryKind = envelope.kind === "redelivery";
+    const reminderMarker = messageId.startsWith(REMINDER_MESSAGE_PREFIX);
+    const redeliveryMarker = messageId.startsWith(REDELIVERY_MESSAGE_PREFIX);
+    const reminderId = hasNonemptySuffix(messageId, REMINDER_MESSAGE_PREFIX);
+    const redeliveryId = hasNonemptySuffix(messageId, REDELIVERY_MESSAGE_PREFIX);
+    const hasInternalMarker = reminderKind || redeliveryKind || reminderMarker || redeliveryMarker;
+    if (!hasInternalMarker)
+        return null;
+    if (reminderKind && reminderId && !redeliveryKind && !redeliveryMarker)
+        return RUNTIME_REMINDER_TARGET;
+    if (redeliveryKind && redeliveryId && !reminderKind && !reminderMarker)
+        return RUNTIME_REDELIVERY_TARGET;
+    throw new Error(`Inbox internal source requires matching kind and message_id prefix; received kind=${JSON.stringify(envelope.kind ?? null)} message_id=${JSON.stringify(envelope.message_id ?? null)}`);
+}
+function isChatTarget(target) {
+    return hasNonemptySuffix(target, CHAT_TARGET_PREFIX);
+}
+function isThreadTarget(target) {
+    return hasNonemptySuffix(target, THREAD_TARGET_PREFIX);
+}
+function isDocumentCommentTarget(target) {
+    return hasNonemptySuffix(target, DOCUMENT_COMMENT_TARGET_PREFIX);
+}
+export function isCanonicalInboxTarget(target) {
+    return isChatTarget(target)
+        || isThreadTarget(target)
+        || target === RUNTIME_REMINDER_TARGET
+        || target === RUNTIME_REDELIVERY_TARGET
+        || isDocumentCommentTarget(target);
+}
+function invalidTarget(target) {
+    return new Error(`Invalid canonical Inbox target ${JSON.stringify(target)}; expected chat:<nonempty>, thread:<nonempty>, runtime:reminder, runtime:redelivery, or document-comment:<nonempty>`);
+}
+function optionalLocator(envelope, key) {
+    const value = envelope[key];
+    if (value === undefined || value === null || value === "")
+        return "";
+    if (typeof value !== "string")
+        throw new Error(`Inbox ${key} must be a string when present; received ${JSON.stringify(value)}`);
+    return value;
+}
 export function targetKeyOfInboxEnvelope(envelope) {
     if (!envelope)
-        return "runtime:unknown";
-    if (envelope.kind === "document_comment" && typeof envelope.target === "string" && envelope.target) {
-        return envelope.target;
+        throw new Error("Inbox envelope is required to derive a canonical target");
+    const internalTarget = internalTargetOfInboxEnvelope(envelope);
+    const chatId = optionalLocator(envelope, "chat_id");
+    const threadId = optionalLocator(envelope, "thread_id");
+    if (threadId && !chatId) {
+        throw new Error(`Inbox thread locator requires nonempty chat_id and thread_id; received chat_id=${JSON.stringify(chatId)} thread_id=${JSON.stringify(threadId)}`);
     }
-    if (typeof envelope.chat_id === "string" && envelope.chat_id) {
-        return typeof envelope.thread_id === "string" && envelope.thread_id
-            ? `thread:${envelope.chat_id}:${envelope.thread_id}`
-            : `chat:${envelope.chat_id}`;
+    const locatorTarget = chatId ? (threadId ? `thread:${chatId}:${threadId}` : `chat:${chatId}`) : null;
+    const hasExplicitTarget = Object.prototype.hasOwnProperty.call(envelope, "target");
+    if (hasExplicitTarget) {
+        if (typeof envelope.target !== "string" || envelope.target.length === 0)
+            throw invalidTarget(String(envelope.target));
+        const target = envelope.target;
+        if (!isCanonicalInboxTarget(target))
+            throw invalidTarget(target);
+        if (isChatTarget(target) || isThreadTarget(target)) {
+            if (internalTarget || envelope.kind === "document_comment")
+                throw new Error(`Inbox chat/thread target conflicts with source kind/message_id`);
+            if (locatorTarget && locatorTarget !== target) {
+                throw new Error(`Inbox chat/thread target conflicts with locator target ${JSON.stringify(locatorTarget)}`);
+            }
+            return target;
+        }
+        if (target === RUNTIME_REMINDER_TARGET || target === RUNTIME_REDELIVERY_TARGET) {
+            if (locatorTarget)
+                throw new Error(`Inbox runtime target cannot carry chat_id/thread_id locators`);
+            if (internalTarget !== target)
+                throw new Error(`Inbox target ${target} requires exact matching kind and message_id prefix`);
+            return target;
+        }
+        if (isDocumentCommentTarget(target)) {
+            if (envelope.kind !== "document_comment" || internalTarget)
+                throw new Error(`Inbox document-comment target requires kind=document_comment and no internal source`);
+            if (locatorTarget)
+                throw new Error(`Inbox document-comment target cannot carry chat_id/thread_id locators`);
+            return target;
+        }
+        throw invalidTarget(target);
     }
-    return targetOfInboxEnvelope(envelope) || "runtime:system";
+    if (envelope.kind === "document_comment") {
+        throw new Error("Inbox document_comment requires an explicit document-comment:<nonempty> target");
+    }
+    if (locatorTarget) {
+        if (internalTarget)
+            throw new Error(`Inbox internal source cannot be derived as a chat/thread target`);
+        return locatorTarget;
+    }
+    if (internalTarget)
+        throw new Error(`Inbox internal source requires an explicit ${internalTarget} target`);
+    throw new Error(`Inbox envelope has no canonical target locator (message_id=${JSON.stringify(envelope.message_id ?? null)}, kind=${JSON.stringify(envelope.kind ?? null)})`);
 }
 /** Enrich the durable local Inbox without changing the canonical Runtime envelope. */
 export function projectInboxEnvelope(canonical, locators) {
@@ -25,22 +119,14 @@ export function projectInboxEnvelope(canonical, locators) {
         content: locators.content !== undefined ? locators.content : (typeof canonical.content === "string" ? canonical.content : ""),
     };
 }
-/** Preserve the target/thread format consumed by the existing Agent CLI. */
+/** Return an allowlisted canonical target when the envelope is locatable. */
 export function targetOfInboxEnvelope(envelope) {
-    if (!envelope)
-        return null;
-    if (envelope.kind === "document_comment") {
-        return typeof envelope.target === "string" && envelope.target ? envelope.target : null;
+    try {
+        return targetKeyOfInboxEnvelope(envelope);
     }
-    if (envelope.channel_type === "thread" && envelope.parent_channel_name) {
-        const base = envelope.parent_channel_type === "dm"
-            ? `dm:@${String(envelope.parent_channel_name)}`
-            : `#${String(envelope.parent_channel_name)}`;
-        return `${base}:${String(envelope.channel_name || "").slice(0, 8)}`;
+    catch {
+        return null;
     }
-    return envelope.channel_type === "dm"
-        ? `dm:@${String(envelope.channel_name)}`
-        : `#${String(envelope.channel_name)}`;
 }
 /** Project persisted inbox envelopes into the exact agentApi events response data shape. */
 export function projectInboxEvents(envelopes) {
@@ -49,7 +135,7 @@ export function projectInboxEvents(envelopes) {
         events: envelopes,
         last_seen_msgId: last ? (last.message_id || null) : null,
         last_seen_seq: last ? (last.seq ?? null) : null,
-        reply_target: targetOfInboxEnvelope(last),
+        reply_target: last ? targetKeyOfInboxEnvelope(last) : null,
         pending_notice_ids: [],
         wake_reason: null,
         has_more: false,
@@ -57,9 +143,12 @@ export function projectInboxEvents(envelopes) {
 }
 /** Bounded, content-light and deterministic projection for the read-only check command. */
 export function projectInboxCheck(envelopes, onlyTarget) {
+    if (onlyTarget && !isCanonicalInboxTarget(onlyTarget)) {
+        throw new Error(`Invalid canonical Inbox check target ${JSON.stringify(onlyTarget)}`);
+    }
     const byTarget = new Map();
     for (const envelope of envelopes) {
-        const target = typeof envelope.target === "string" && envelope.target ? envelope.target : targetKeyOfInboxEnvelope(envelope);
+        const target = targetKeyOfInboxEnvelope(envelope);
         if (onlyTarget && onlyTarget !== target)
             continue;
         const rows = byTarget.get(target) ?? [];

package/dist/feishu/document-comment.cjs

@@ -11,6 +11,7 @@ exports.resolveDocumentCommentContext = resolveDocumentCommentContext;
 exports.projectDocumentCommentEnvelope = projectDocumentCommentEnvelope;
 const node_crypto_1 = require("node:crypto");
 exports.DOCUMENT_COMMENT_EVENT = "drive.notice.comment_add_v1";
+const DOCUMENT_COMMENT_TARGET_PATTERN = /^document-comment:(doc|docx|sheet|file):([A-Za-z0-9_-]+):([A-Za-z0-9_-]+):(in-thread|top-level)$/;
 function record(value) {
     return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -39,7 +40,7 @@ function documentCommentTarget(target, commentId, topLevel = false) {
     return `document-comment:${target.fileType}:${target.fileToken}:${commentId}:${topLevel ? "top-level" : "in-thread"}`;
 }
 function parseDocumentCommentTarget(value) {
-    const match = /^document-comment:(doc|docx|sheet|file):([A-Za-z0-9_-]+):([A-Za-z0-9_-]+):(in-thread|top-level)$/.exec(value);
+    const match = DOCUMENT_COMMENT_TARGET_PATTERN.exec(value);
     return match ? {
         fileType: match[1], fileToken: match[2], commentId: match[3], topLevel: match[4] === "top-level",
     } : null;

package/dist/feishu/document-comment.mjs

@@ -1,5 +1,6 @@
 import { createHash } from "node:crypto";
 export const DOCUMENT_COMMENT_EVENT = "drive.notice.comment_add_v1";
+const DOCUMENT_COMMENT_TARGET_PATTERN = /^document-comment:(doc|docx|sheet|file):([A-Za-z0-9_-]+):([A-Za-z0-9_-]+):(in-thread|top-level)$/;
 function record(value) {
     return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
@@ -28,7 +29,7 @@ export function documentCommentTarget(target, commentId, topLevel = false) {
     return `document-comment:${target.fileType}:${target.fileToken}:${commentId}:${topLevel ? "top-level" : "in-thread"}`;
 }
 export function parseDocumentCommentTarget(value) {
-    const match = /^document-comment:(doc|docx|sheet|file):([A-Za-z0-9_-]+):([A-Za-z0-9_-]+):(in-thread|top-level)$/.exec(value);
+    const match = DOCUMENT_COMMENT_TARGET_PATTERN.exec(value);
     return match ? {
         fileType: match[1], fileToken: match[2], commentId: match[3], topLevel: match[4] === "top-level",
     } : null;

package/dist/feishu/host-business-state.cjs

@@ -10,6 +10,7 @@ exports.shouldPreventiveReconnect = shouldPreventiveReconnect;
 exports.countWakeEnvelopes = countWakeEnvelopes;
 exports.projectActivityStatus = projectActivityStatus;
 exports.projectSessionStatus = projectSessionStatus;
+const inbox_projection_js_1 = require("../agent/inbox-projection.cjs");
 const node_crypto_1 = __importDefault(require("node:crypto"));
 const message_policy_js_1 = require("./message-policy.cjs");
 function asRecord(value) {
@@ -337,7 +338,8 @@ class HostEnvelopeProjector {
                         : `本条存量提醒缺少可用的飞书 message_id/chat_id，无法安全推断原会话；请先用 ${this.larkCommand("im +chat-search")} 确认目标，禁止猜测发送`,
             `这是你之前用 ${this.agentCommand("reminder schedule")} 设置的提醒，请按标题执行相应动作。管理: ${this.agentCommand("reminder list")} / ${this.agentCommand("reminder snooze")} / ${this.agentCommand("reminder cancel")}`,
         ].filter((line) => Boolean(line));
-        return {
+        const envelope = {
+            kind: "reminder",
             message_id: `rem_${reminder.reminderId.slice(0, 16)}_${seq}`,
             seq,
             sender_name: "定时提醒",
@@ -349,10 +351,12 @@ class HostEnvelopeProjector {
             thread_id: null,
             wake: true,
         };
+        return { ...envelope, target: inbox_projection_js_1.RUNTIME_REMINDER_TARGET };
     }
     createRedeliveryEnvelope(agentId, wakeCount) {
         const seq = this.nextSequence(agentId);
-        return {
+        const envelope = {
+            kind: "redelivery",
             message_id: `redeliver_${this.randomHex(6)}`,
             seq,
             sender_name: "系统",
@@ -363,6 +367,7 @@ class HostEnvelopeProjector {
             timestamp: this.now().toISOString(),
             thread_id: null,
         };
+        return { ...envelope, target: inbox_projection_js_1.RUNTIME_REDELIVERY_TARGET };
     }
 }
 exports.HostEnvelopeProjector = HostEnvelopeProjector;

package/dist/feishu/host-business-state.mjs

@@ -1,3 +1,4 @@
+import { RUNTIME_REDELIVERY_TARGET, RUNTIME_REMINDER_TARGET } from "../agent/inbox-projection.mjs";
 import crypto from "node:crypto";
 import { createMessageEnvelope, targetAliases, targetFor, } from "./message-policy.mjs";
 function asRecord(value) {
@@ -323,7 +324,8 @@ export class HostEnvelopeProjector {
                         : `本条存量提醒缺少可用的飞书 message_id/chat_id，无法安全推断原会话；请先用 ${this.larkCommand("im +chat-search")} 确认目标，禁止猜测发送`,
             `这是你之前用 ${this.agentCommand("reminder schedule")} 设置的提醒，请按标题执行相应动作。管理: ${this.agentCommand("reminder list")} / ${this.agentCommand("reminder snooze")} / ${this.agentCommand("reminder cancel")}`,
         ].filter((line) => Boolean(line));
-        return {
+        const envelope = {
+            kind: "reminder",
             message_id: `rem_${reminder.reminderId.slice(0, 16)}_${seq}`,
             seq,
             sender_name: "定时提醒",
@@ -335,10 +337,12 @@ export class HostEnvelopeProjector {
             thread_id: null,
             wake: true,
         };
+        return { ...envelope, target: RUNTIME_REMINDER_TARGET };
     }
     createRedeliveryEnvelope(agentId, wakeCount) {
         const seq = this.nextSequence(agentId);
-        return {
+        const envelope = {
+            kind: "redelivery",
             message_id: `redeliver_${this.randomHex(6)}`,
             seq,
             sender_name: "系统",
@@ -349,6 +353,7 @@ export class HostEnvelopeProjector {
             timestamp: this.now().toISOString(),
             thread_id: null,
         };
+        return { ...envelope, target: RUNTIME_REDELIVERY_TARGET };
     }
 }
 export function countWakeEnvelopes(lines) {

package/dist/feishu/host-shell.cjs

@@ -200,6 +200,16 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
         return store;
     };
     const hostState = new host_business_state_js_1.HostStateProjection(stateStore, log);
+    const recordInboundDeliveryFailure = (agent, code) => {
+        const at = new Date().toISOString();
+        const reason = "Inbound Runtime delivery failed non-retryably; durable Inbox/ledger state is retained for recovery.";
+        const nextAction = "Inspect the delivery/status error, correct the Runtime or canonical Inbox state, then restart to replay safely.";
+        hostState.updateStatus(agent, {
+            inboundDeliveryHealth: { state: "error", code, at, reason, nextAction },
+            runtimeReadiness: { runtime: agent.runtime, state: "incompatible", reason, nextAction },
+        });
+        hostState.recordStatusError(agent, `${reason} ${nextAction} code=${code}`);
+    };
     const agentStates = new Map();
     const saveAgentState = (record) => {
         try {
@@ -335,6 +345,7 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
             return;
         }
         const telemetryMessageId = String(event.message_id || event.event_id || eventKey);
+        let canonicalInboxDurable = false;
         if (wake)
             telemetry?.beginMessage(agent.agentId, telemetryMessageId);
         if (event.event_id)
@@ -345,58 +356,76 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
                     senderIdentity.ensureChatNames(agent, event.chat_id, 3_000),
                     event._sender_is_bot ? Promise.resolve(null) : senderIdentity.ensureSenderSignature(agent, event.sender_id, 3_000),
                 ]);
-                const envelope = envelopeProjector.projectInbound(agent, event, { anchorReply: wake, names, signature });
-                envelope.target = (0, inbox_projection_js_1.targetKeyOfInboxEnvelope)({ ...envelope, chat_id: event.chat_id, thread_id: event.thread_id });
+                const projected = envelopeProjector.projectInbound(agent, event, { anchorReply: wake, names, signature });
+                projected.target = (0, inbox_projection_js_1.targetKeyOfInboxEnvelope)({ ...projected, chat_id: event.chat_id, thread_id: event.thread_id });
                 if (wake)
-                    envelope.wake = true;
-                const inboxEnvelope = (0, inbox_projection_js_1.projectInboxEnvelope)(envelope, {
+                    projected.wake = true;
+                const candidate = (0, inbox_projection_js_1.projectInboxEnvelope)(projected, {
                     chat_id: event.chat_id,
                     thread_id: event.thread_id,
                     ...(event.create_time !== undefined ? { create_time: String(event.create_time) } : {}),
                     sender_id: event.sender_id,
-                    content: String(envelope.content ?? event.content ?? ""),
+                    content: String(projected.content ?? event.content ?? ""),
                 });
+                let append;
                 try {
-                    stateStore(agent).appendNdjson("inbox", inboxEnvelope);
+                    append = stateStore(agent).appendCanonicalInboxOnce(candidate);
                 }
                 catch (error) {
                     throw new Error(`inbox 写失败: ${errorMessage(error)}`);
                 }
-                // An event becomes permanently seen only after its canonical Inbox append
-                // is durable. Failures remain eligible for same-process redelivery.
+                canonicalInboxDurable = true;
+                // An event becomes permanently transport-seen only after the canonical
+                // append/dedupe decision is durable. Agent model-seen state is untouched.
                 if (event.event_id)
                     seenEventIds.add(eventKey);
-                hostState.appendConversation(agent, {
-                    direction: "in", from: envelope.sender_name, senderType: envelope.sender_type,
-                    target: (0, message_policy_js_1.targetFor)(event).target, wake, text: event.content, messageId: envelope.message_id,
-                    at: envelope.timestamp || new Date().toISOString(),
-                });
-                return envelope;
+                if (append.status === "duplicate_consumed")
+                    return null;
+                const inboxEnvelope = append.envelope;
+                if (append.status === "appended")
+                    hostState.appendConversation(agent, {
+                        direction: "in", from: inboxEnvelope.sender_name, senderType: inboxEnvelope.sender_type,
+                        target: String(inboxEnvelope.target || (0, message_policy_js_1.targetFor)(event).target), wake, text: event.content, messageId: inboxEnvelope.message_id,
+                        at: inboxEnvelope.timestamp || new Date().toISOString(),
+                    });
+                return inboxEnvelope;
             };
-            const envelope = wake && telemetry
+            const inboxEnvelope = wake && telemetry
                 ? await telemetry.phase(telemetryMessageId, "feishu.receive", api_1.SpanKind.CONSUMER, receive)
                 : await receive();
-            if (!wake)
+            if (!wake || !inboxEnvelope)
                 return;
-            const receipt = await runtimeHost.deliver(agent.agentId, envelope);
-            if (receipt.status === "accepted" || receipt.status === "duplicate" || receipt.status === "deferred") {
+            const receipt = await runtimeHost.deliver(agent.agentId, inboxEnvelope);
+            if (receipt.status === "error") {
+                recordInboundDeliveryFailure(agent, "non_retryable_receipt");
                 hostState.appendStatusLog(agent, "deliverLog", {
-                    from: envelope.sender_name,
-                    target: (0, message_policy_js_1.targetFor)(event).target,
-                    excerpt: (0, host_business_state_js_1.safeConversationExcerpt)(event.content, 180),
-                    at: new Date().toISOString(),
-                }, 30);
-                if (envelope.sender_type === "human" || envelope.sender_type === "agent")
-                    processingEyes.add(agent, String(envelope.message_id || ""));
-                if (receipt.status === "deferred")
-                    log(`Runtime 暂缓投递，消息保留在 inbox seq=${envelope.seq}: ${receipt.reason}`);
+                    at: new Date().toISOString(), status: "error",
+                    reason: "non-retryable Runtime delivery error; durable recovery state retained",
+                }, 80);
+                return;
             }
+            hostState.appendStatusLog(agent, "deliverLog", {
+                from: inboxEnvelope.sender_name,
+                target: String(inboxEnvelope.target || (0, message_policy_js_1.targetFor)(event).target),
+                excerpt: (0, host_business_state_js_1.safeConversationExcerpt)(event.content, 180),
+                at: new Date().toISOString(),
+            }, 30);
+            if (inboxEnvelope.sender_type === "human" || inboxEnvelope.sender_type === "agent")
+                processingEyes.add(agent, String(inboxEnvelope.message_id || ""));
+            if (receipt.status === "deferred")
+                log(`Runtime 暂缓投递，消息保留在 inbox seq=${inboxEnvelope.seq}: ${receipt.reason}`);
         }
         catch (error) {
             if (wake)
                 telemetry?.delivery(agent.agentId, telemetryMessageId, "error");
-            log(`onFeishuMessage 异常 agent=${agent.name}: ${error instanceof Error ? error.stack || error.message : String(error)}`);
-            hostState.recordStatusError(agent, `onFeishuMessage: ${errorMessage(error)}`);
+            if (canonicalInboxDurable) {
+                log(`onFeishuMessage Runtime delivery failed agent=${agent.name}; canonical Inbox retained`);
+                recordInboundDeliveryFailure(agent, "runtime_delivery_exception");
+            }
+            else {
+                log(`onFeishuMessage 异常 agent=${agent.name}: ${error instanceof Error ? error.stack || error.message : String(error)}`);
+                hostState.recordStatusError(agent, `onFeishuMessage: ${errorMessage(error)}`);
+            }
         }
         finally {
             if (event.event_id)
@@ -1241,9 +1270,14 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
             return;
         }
         if (message.type === "delivery") {
+            if (message.status === "error")
+                recordInboundDeliveryFailure(agent, "runtime_delivery_event");
             hostState.appendStatusLog(agent, "deliverLog", {
                 at: new Date().toISOString(), deliveryId: message.deliveryId, messageId: message.messageId,
-                status: message.status, ...(message.reason ? { reason: (0, host_business_state_js_1.safeConversationExcerpt)(message.reason, 120) } : {}),
+                status: message.status,
+                ...(message.status === "error"
+                    ? { reason: "non-retryable Runtime delivery error; durable recovery state retained" }
+                    : (message.reason ? { reason: (0, host_business_state_js_1.safeConversationExcerpt)(message.reason, 120) } : {})),
             }, 80);
             return;
         }
@@ -1266,7 +1300,8 @@ function createHostShell({ env = process.env, runtimeHost, channelPackage, event
                 hostState.recordStatusError(agent, `auth: ${readiness.reason}; ${readiness.nextAction}`);
             }
             else {
-                hostState.recordStatusError(agent, `${message.event.errorCategory || "provider"}: ${message.event.message}${message.event.nextAction ? `; ${message.event.nextAction}` : ""}`);
+                const category = message.event.errorCategory || "provider";
+                hostState.recordStatusError(agent, `${category}: Runtime input failed ${message.event.retryable ? "retryably" : "non-retryably"}; inspect delivery health and Runtime/provider configuration`);
             }
         }
     };