larkin 0.4.13 → 0.4.14

package/dist/agent/reminder-routes.mjs

@@ -1,7 +1,30 @@
 import * as ReminderStore from "./reminder-store.mjs";
+import { isCanonicalInboxTarget, isUserDeliveryTarget } from "./inbox-projection.mjs";
 function versionOf(reminder) {
     return Number(reminder.version || 0);
 }
+const VALID_IM_ANCHOR = /^om_[A-Za-z0-9_-]+$/;
+const VALID_COMMENT_ANCHOR = /^doc_comment_[A-Za-z0-9_-]+$/;
+const VALID_CHAT_TARGET = /^chat:oc_[A-Za-z0-9_-]+$/;
+const VALID_THREAD_TARGET = /^thread:oc_[A-Za-z0-9_-]+:omt_[A-Za-z0-9_-]+$/;
+const VALID_DOCUMENT_COMMENT_TARGET = /^document-comment:(doc|docx|sheet|file):[A-Za-z0-9_-]+:[A-Za-z0-9_-]+:(in-thread|top-level)$/;
+function userTarget(value, field) {
+    const raw = String(value ?? "").trim();
+    // --channel historically accepted an oc_ chat id; retain that unambiguous form.
+    const target = /^oc_[A-Za-z0-9_-]+$/.test(raw) ? `chat:${raw}` : raw;
+    const complete = VALID_CHAT_TARGET.test(target) || VALID_THREAD_TARGET.test(target) || VALID_DOCUMENT_COMMENT_TARGET.test(target);
+    if (!complete || !isCanonicalInboxTarget(target) || !isUserDeliveryTarget(target)) {
+        throw new Error(`${field} 必须是完整可投递的 canonical target（chat:oc_<id>、thread:oc_<chat>:omt_<thread> 或完整 document-comment locator）`);
+    }
+    return target;
+}
+function validAnchor(value, field = "message-id", target) {
+    const anchor = String(value ?? "").trim();
+    const valid = VALID_IM_ANCHOR.test(anchor) || (target?.startsWith("document-comment:") === true && VALID_COMMENT_ANCHOR.test(anchor));
+    if (!valid)
+        throw new Error(`${field} 必须是有效的 Feishu om_ message_id，或 document-comment source 的 doc_comment_ anchor`);
+    return anchor;
+}
 export function createReminderRoutes(options) {
     const now = options.now ?? Date.now;
     const timeZone = options.timeZone ?? (() => Intl.DateTimeFormat().resolvedOptions().timeZone);
@@ -18,6 +41,60 @@ export function createReminderRoutes(options) {
                 return { ok: false, status: 400, error: "title 不能为空" };
             const current = now();
             const tz = typeof body.tz === "string" && body.tz ? body.tz : timeZone();
+            const internal = body.internal === true || body.noDelivery === true;
+            let deliveryTarget = null;
+            let deliveryAnchor = null;
+            if (internal) {
+                if (body.deliveryTarget !== undefined || body.channel !== undefined || body.msgId !== undefined) {
+                    return { ok: false, status: 400, error: "internal/no-delivery reminder 不应携带 user-facing delivery target" };
+                }
+            }
+            else {
+                try {
+                    const hasExplicitTarget = body.deliveryTarget !== undefined && body.deliveryTarget !== null && Boolean(String(body.deliveryTarget).trim());
+                    const hasExplicitChannel = body.channel !== undefined && body.channel !== null && Boolean(String(body.channel).trim());
+                    // deliveryTarget and channel are destination aliases. Preferring one
+                    // over a contradicting other could route to the wrong conversation,
+                    // so a disagreement fails closed instead of being silently resolved.
+                    if (hasExplicitTarget && hasExplicitChannel
+                        && userTarget(body.deliveryTarget, "delivery target") !== userTarget(body.channel, "channel")) {
+                        return { ok: false, status: 400, error: "deliveryTarget 与 channel 指向不同目的地；请只提供其中一个" };
+                    }
+                    const explicit = hasExplicitTarget ? body.deliveryTarget : hasExplicitChannel ? body.channel : undefined;
+                    if (explicit !== undefined)
+                        deliveryTarget = userTarget(explicit, "delivery target");
+                    if (body.msgId !== undefined && body.msgId !== null && String(body.msgId).trim()) {
+                        const anchorTarget = options.resolveMessageTarget?.(String(body.msgId).trim()) || null;
+                        deliveryAnchor = validAnchor(body.msgId, "message-id", anchorTarget || deliveryTarget);
+                        if (deliveryTarget && !anchorTarget) {
+                            return { ok: false, status: 400, error: `message-id ${String(body.msgId).trim()} 无法验证其所属 Inbox target；请省略 anchor 或提供可验证的 anchor` };
+                        }
+                        if (!deliveryTarget && !anchorTarget) {
+                            return { ok: false, status: 400, error: `message-id ${deliveryAnchor} 没有当前 Inbox 的 canonical delivery target` };
+                        }
+                        if (anchorTarget) {
+                            const normalizedAnchorTarget = userTarget(anchorTarget, "message-id target");
+                            if (deliveryTarget && deliveryTarget !== normalizedAnchorTarget) {
+                                return { ok: false, status: 400, error: "delivery target 与 message-id 所属 Inbox target 冲突" };
+                            }
+                            deliveryTarget = deliveryTarget || normalizedAnchorTarget;
+                        }
+                    }
+                    if (deliveryTarget && (deliveryTarget.startsWith("thread:") || deliveryTarget.startsWith("document-comment:")) && !deliveryAnchor) {
+                        return { ok: false, status: 400, error: `${deliveryTarget} 必须同时提供可验证的 message-id anchor` };
+                    }
+                    if (!deliveryTarget) {
+                        const source = options.currentInboxSource?.() || null;
+                        if (!source)
+                            return { ok: false, status: 400, error: "user-facing reminder 必须显式指定 delivery target，或从当前 Inbox source 派生" };
+                        deliveryTarget = userTarget(source.deliveryTarget, "current Inbox target");
+                        deliveryAnchor = validAnchor(source.deliveryAnchor, "current Inbox anchor", deliveryTarget);
+                    }
+                }
+                catch (error) {
+                    return { ok: false, status: 400, error: error.message };
+                }
+            }
             let recurrence = null;
             if (body.repeat !== undefined) {
                 recurrence = ReminderStore.parseRepeat(body.repeat, tz);
@@ -42,14 +119,17 @@ export function createReminderRoutes(options) {
             const reminder = {
                 reminderId: ReminderStore.newId(), ownerAgentId: options.agentId, title,
                 fireAt: ReminderStore.nowIso(fireAtMs), firedAt: null, createdAt: ReminderStore.nowIso(current),
-                status: "scheduled", msgRef: body.msgId ?? null, msgPermalink: null,
+                status: "scheduled", msgRef: deliveryAnchor, msgPermalink: null,
+                deliveryTarget, deliveryAnchor, deliveryMode: internal ? "internal" : "user",
                 repeat: body.repeat ?? null, tz: body.repeat !== undefined ? tz : null,
                 channel: body.channel ?? null, payload: body.payload ?? null,
                 version: 1, events: [],
             };
-            ReminderStore.appendEvent(reminder, "scheduled", "agent", options.agentId, reminder.fireAt, current);
+            ReminderStore.appendEvent(reminder, "scheduled", "agent", options.agentId, reminder.fireAt, current, {
+                deliveryTarget, deliveryAnchor, deliveryMode: internal ? "internal" : "user",
+            });
             ReminderStore.mutate(options.stateFile, (store) => store.reminders.push(reminder));
-            options.log(`reminder 已建 #${reminder.reminderId.slice(0, 8)} fireAt=${reminder.fireAt}${reminder.repeat ? ` repeat=${String(reminder.repeat)}` : ""}`);
+            options.log(`reminder 已建 #${reminder.reminderId.slice(0, 8)} fireAt=${reminder.fireAt}${reminder.repeat ? ` repeat=${String(reminder.repeat)}` : ""} deliveryTarget=${deliveryTarget || "none"}`);
             return { ok: true, status: 200, data: { reminder: ReminderStore.toSummary(reminder), ...(warning ? { warning } : {}) } };
         }
         if (method === "GET" && !reminderId) {

package/dist/agent/reminder-store.cjs

@@ -201,10 +201,13 @@ function toSummary(reminder) {
         status: reminder.status,
         msgRef: reminder.msgRef ?? null,
         msgPermalink: reminder.msgPermalink ?? null,
+        deliveryTarget: reminder.deliveryTarget ?? null,
+        deliveryAnchor: reminder.deliveryAnchor ?? null,
+        deliveryMode: reminder.deliveryMode === "internal" ? "internal" : "user",
         recurrence,
     };
 }
-function appendEvent(reminder, eventType, actorType, actorId, nextFireAt, ms) {
+function appendEvent(reminder, eventType, actorType, actorId, nextFireAt, ms, metadata) {
     if (!Array.isArray(reminder.events))
         reminder.events = [];
     reminder.events.push({
@@ -215,6 +218,6 @@ function appendEvent(reminder, eventType, actorType, actorId, nextFireAt, ms) {
         actorId: actorId ?? null,
         occurredAt: (0, exports.nowIso)(ms),
         nextFireAt: nextFireAt ?? null,
-        metadata: null,
+        metadata: metadata ?? null,
     });
 }

package/dist/agent/reminder-store.mjs

@@ -186,10 +186,13 @@ export function toSummary(reminder) {
         status: reminder.status,
         msgRef: reminder.msgRef ?? null,
         msgPermalink: reminder.msgPermalink ?? null,
+        deliveryTarget: reminder.deliveryTarget ?? null,
+        deliveryAnchor: reminder.deliveryAnchor ?? null,
+        deliveryMode: reminder.deliveryMode === "internal" ? "internal" : "user",
         recurrence,
     };
 }
-export function appendEvent(reminder, eventType, actorType, actorId, nextFireAt, ms) {
+export function appendEvent(reminder, eventType, actorType, actorId, nextFireAt, ms, metadata) {
     if (!Array.isArray(reminder.events))
         reminder.events = [];
     reminder.events.push({
@@ -200,6 +203,6 @@ export function appendEvent(reminder, eventType, actorType, actorId, nextFireAt,
         actorId: actorId ?? null,
         occurredAt: nowIso(ms),
         nextFireAt: nextFireAt ?? null,
-        metadata: null,
+        metadata: metadata ?? null,
     });
 }

package/dist/agent/transport-business-context.cjs

@@ -46,6 +46,7 @@ const inbox_projection_js_1 = require("./inbox-projection.cjs");
 const message_policy_js_1 = require("../feishu/message-policy.cjs");
 const outbound_transport_js_1 = require("../feishu/outbound-transport.cjs");
 const reminder_routes_js_1 = require("./reminder-routes.cjs");
+const reminder_delivery_audit_js_1 = require("./reminder-delivery-audit.cjs");
 const transport_shell_js_1 = require("./transport-shell.cjs");
 const agent_lark_cli_workspace_js_1 = require("../app/agent-lark-cli-workspace.cjs");
 function formatFeishuError(error, grantLink = null) {
@@ -152,6 +153,24 @@ function createTransportBusinessContext(env = process.env) {
         }
     };
     const resolveChatId = (target) => (0, transport_shell_js_1.resolveMappedChatId)(loadMap(), target);
+    const recordReminderDelivery = ({ target, succeeded, messageId, reason }) => {
+        const current = stateStore.resolveCurrentReminder();
+        try {
+            (0, reminder_delivery_audit_js_1.auditReminderDelivery)({ stateStore, agentId, target, succeeded, ...(messageId ? { messageId } : {}),
+                ...(reason ? { reason } : {}), resolveChatId });
+        }
+        catch (error) {
+            if (succeeded && current && stateStore.markCurrentReminderDeliveryCommitted) {
+                try {
+                    stateStore.markCurrentReminderDeliveryCommitted(current.reminderId, current.deliveryAnchor, messageId);
+                }
+                catch (markerError) {
+                    log(`reminder committed marker 写失败 id=#${current.reminderId.slice(0, 8)}: ${markerError.message}`);
+                }
+            }
+            log(`reminder outbound audit 写失败 id=#${current?.reminderId.slice(0, 8) || "unknown"}: ${error.message}`);
+        }
+    };
     const larkArgs = (...rest) => rest;
     const larkCli = (args, cwd) => {
         const managed = (0, agent_lark_cli_workspace_js_1.managedOfficialLarkCli)(selectedAgent, process.env);
@@ -307,7 +326,8 @@ function createTransportBusinessContext(env = process.env) {
     const outbound = (0, outbound_transport_js_1.createOutboundTransport)({
         attachmentDir, attachmentIndexFile, resolveChatId, replyContextFor,
         sendText: larkSend, replyText: larkReply, sendMedia: larkSendMedia,
-        appendConversation, botDisplayName: () => botIdentity()?.name, agentName, dryRun, log,
+        appendConversation, onDeliveryOutcome: recordReminderDelivery,
+        botDisplayName: () => botIdentity()?.name, agentName, dryRun, log,
     });
     const liveGrantLink = () => {
         try {
@@ -469,7 +489,11 @@ function createTransportBusinessContext(env = process.env) {
         },
         mappedChannels: loadMap, larkJsonOut, feishuError, botDisplayName, feishuAppInfo, log,
     });
-    const reminderRoutes = (0, reminder_routes_js_1.createReminderRoutes)({ stateFile: paths.reminders, agentId, query, log });
+    const reminderRoutes = (0, reminder_routes_js_1.createReminderRoutes)({
+        stateFile: paths.reminders, agentId, query, log,
+        currentInboxSource: () => stateStore.resolveCurrentInboxSource(),
+        resolveMessageTarget: (messageId) => stateStore.resolveInboxMessageTarget(messageId),
+    });
     try {
         fs.appendFileSync(transportLogFile, `${new Date().toISOString()} INIT profile=${selectedAgent.feishuProfile} larkCfgDir=${selectedAgent.larkConfigDir} inbox=${paths.inbox}\n`);
     }

package/dist/agent/transport-business-context.mjs

@@ -9,6 +9,7 @@ import { projectInboxEvents } from "./inbox-projection.mjs";
 import { signatureDescription } from "../feishu/message-policy.mjs";
 import { createOutboundTransport } from "../feishu/outbound-transport.mjs";
 import { createReminderRoutes } from "./reminder-routes.mjs";
+import { auditReminderDelivery } from "./reminder-delivery-audit.mjs";
 import { isImageMime, looksLikeMarkdown, resolveMappedChatId, safeConversationExcerpt } from "./transport-shell.mjs";
 import { managedOfficialLarkCli } from "../app/agent-lark-cli-workspace.mjs";
 export function formatFeishuError(error, grantLink = null) {
@@ -115,6 +116,24 @@ export function createTransportBusinessContext(env = process.env) {
         }
     };
     const resolveChatId = (target) => resolveMappedChatId(loadMap(), target);
+    const recordReminderDelivery = ({ target, succeeded, messageId, reason }) => {
+        const current = stateStore.resolveCurrentReminder();
+        try {
+            auditReminderDelivery({ stateStore, agentId, target, succeeded, ...(messageId ? { messageId } : {}),
+                ...(reason ? { reason } : {}), resolveChatId });
+        }
+        catch (error) {
+            if (succeeded && current && stateStore.markCurrentReminderDeliveryCommitted) {
+                try {
+                    stateStore.markCurrentReminderDeliveryCommitted(current.reminderId, current.deliveryAnchor, messageId);
+                }
+                catch (markerError) {
+                    log(`reminder committed marker 写失败 id=#${current.reminderId.slice(0, 8)}: ${markerError.message}`);
+                }
+            }
+            log(`reminder outbound audit 写失败 id=#${current?.reminderId.slice(0, 8) || "unknown"}: ${error.message}`);
+        }
+    };
     const larkArgs = (...rest) => rest;
     const larkCli = (args, cwd) => {
         const managed = managedOfficialLarkCli(selectedAgent, process.env);
@@ -270,7 +289,8 @@ export function createTransportBusinessContext(env = process.env) {
     const outbound = createOutboundTransport({
         attachmentDir, attachmentIndexFile, resolveChatId, replyContextFor,
         sendText: larkSend, replyText: larkReply, sendMedia: larkSendMedia,
-        appendConversation, botDisplayName: () => botIdentity()?.name, agentName, dryRun, log,
+        appendConversation, onDeliveryOutcome: recordReminderDelivery,
+        botDisplayName: () => botIdentity()?.name, agentName, dryRun, log,
     });
     const liveGrantLink = () => {
         try {
@@ -432,7 +452,11 @@ export function createTransportBusinessContext(env = process.env) {
         },
         mappedChannels: loadMap, larkJsonOut, feishuError, botDisplayName, feishuAppInfo, log,
     });
-    const reminderRoutes = createReminderRoutes({ stateFile: paths.reminders, agentId, query, log });
+    const reminderRoutes = createReminderRoutes({
+        stateFile: paths.reminders, agentId, query, log,
+        currentInboxSource: () => stateStore.resolveCurrentInboxSource(),
+        resolveMessageTarget: (messageId) => stateStore.resolveInboxMessageTarget(messageId),
+    });
     try {
         fs.appendFileSync(transportLogFile, `${new Date().toISOString()} INIT profile=${selectedAgent.feishuProfile} larkCfgDir=${selectedAgent.larkConfigDir} inbox=${paths.inbox}\n`);
     }

package/dist/app/agent-cli.mjs

@@ -262,7 +262,17 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
     if (!fs.existsSync(stateStore.paths.reminders))
         stateStore.writeJson("reminders", { reminders: [] });
     const [operation, ...rest] = groupArgv;
-    const options = parseOptions(rest, new Set(["--all", "--json"]));
+    const options = parseOptions(rest, new Set(["--all", "--json", "--no-delivery", "--internal"]));
+    const assertOnlyFlags = (valueFlags, booleanFlags = []) => {
+        const allowedValues = new Set(valueFlags);
+        const allowedBooleans = new Set(booleanFlags);
+        const unsupported = [
+            ...[...options.values.keys()].filter((flag) => !allowedValues.has(flag)),
+            ...[...options.booleans].filter((flag) => !allowedBooleans.has(flag)),
+        ];
+        if (unsupported.length)
+            throw new Error(`reminder ${operation || ""} 不支持参数：${unsupported.join(", ")}`);
+    };
     if (options.positionals.length)
         throw new Error(`reminder ${operation || ""} 不接受位置参数：${options.positionals.join(" ")}`);
     const id = options.values.get("--id");
@@ -270,7 +280,8 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
     let requestPath = "/reminders";
     const body = {};
     switch (operation) {
-        case "schedule":
+        case "schedule": {
+            assertOnlyFlags(["--title", "--fire-at", "--delay-seconds", "--repeat", "--tz", "--message-id", "--delivery-target", "--target", "--channel"], ["--json", "--no-delivery", "--internal"]);
             method = "POST";
             body.title = options.values.get("--title") || "";
             if (options.values.has("--fire-at"))
@@ -283,10 +294,24 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
                 body.tz = options.values.get("--tz");
             if (options.values.has("--message-id"))
                 body.msgId = options.values.get("--message-id");
+            // The destination controls the recipient. Aliases must never silently
+            // overwrite each other, so any combination fails closed at parse time.
+            const destinationFlags = ["--delivery-target", "--target", "--channel"].filter((flag) => options.values.has(flag));
+            if (destinationFlags.length > 1) {
+                throw new Error(`reminder schedule 收到多个 delivery 目的地 flag（${destinationFlags.join("、")}）；它们互为别名且可能指向不同会话，只能指定其中一个`);
+            }
             if (options.values.has("--channel"))
                 body.channel = options.values.get("--channel");
+            if (options.values.has("--delivery-target"))
+                body.deliveryTarget = options.values.get("--delivery-target");
+            if (options.values.has("--target"))
+                body.deliveryTarget = options.values.get("--target");
+            if (options.booleans.has("--no-delivery") || options.booleans.has("--internal"))
+                body.noDelivery = true;
             break;
+        }
         case "list": {
+            assertOnlyFlags(["--status"], ["--all", "--json"]);
             const search = new URLSearchParams();
             if (options.values.has("--status"))
                 search.set("status", options.values.get("--status"));
@@ -296,6 +321,7 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
             break;
         }
         case "snooze":
+            assertOnlyFlags(["--id", "--delay-seconds"], ["--json"]);
             if (!id)
                 throw new Error("reminder snooze 需要 --id");
             method = "POST";
@@ -303,6 +329,7 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
             body.delaySeconds = numberOption(options, "--delay-seconds");
             break;
         case "update":
+            assertOnlyFlags(["--id", "--title", "--fire-at", "--delay-seconds", "--repeat", "--tz"], ["--json"]);
             if (!id)
                 throw new Error("reminder update 需要 --id");
             method = "PATCH";
@@ -319,12 +346,14 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
                 body.tz = options.values.get("--tz");
             break;
         case "cancel":
+            assertOnlyFlags(["--id"], ["--json"]);
             if (!id)
                 throw new Error("reminder cancel 需要 --id");
             method = "DELETE";
             requestPath += `/${encodeURIComponent(id)}`;
             break;
         case "log":
+            assertOnlyFlags(["--id"], ["--json"]);
             if (!id)
                 throw new Error("reminder log 需要 --id");
             requestPath += `/${encodeURIComponent(id)}/log`;
@@ -339,6 +368,8 @@ function reminderRequest(groupArgv, stateStore, agentId, deps) {
         log: () => undefined,
         ...(deps.now ? { now: deps.now } : {}),
         ...(deps.timeZone ? { timeZone: deps.timeZone } : {}),
+        currentInboxSource: () => stateStore.resolveCurrentInboxSource(),
+        resolveMessageTarget: (messageId) => stateStore.resolveInboxMessageTarget(messageId),
     });
     return routes.handle({ path: requestPath, pathNoQuery: requestPath.split("?")[0], method, body });
 }

package/dist/app/lark-cli.mjs

@@ -4,6 +4,7 @@ import { createHash } from "node:crypto";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { createAgentStateStore } from "../agent/agent-state-store.mjs";
+import { auditReminderDelivery } from "../agent/reminder-delivery-audit.mjs";
 import { evaluateFreshness } from "../agent/freshness-gate.mjs";
 import { feishuImFreshnessAdapter, feishuImTarget, mergeFeishuImCursor, serializeFeishuImTarget, } from "../feishu/im-freshness-adapter.mjs";
 import * as larkinConfig from "../platform/config.mjs";
@@ -281,21 +282,22 @@ const IM_WRITE_MEMO_LIMIT = 512;
 // 只标注、不拦截：每次成功写把「实际生效的幂等 key → 服务端返回的 message_id」记进备忘。
 // 同 key 再次成功且服务端返回同一个 message_id，说明服务端走了幂等去重（没有产生新消息），
 // 返回 true 供输出标注 duplicate。拦截权始终在服务端，备忘不会吞掉任何发送。
-function recordImWriteMemo(store, key, messageId) {
-    let duplicate = false;
-    store.mutateJson("freshnessState", { version: 1, cursors: {} }, (state) => {
+function recordImWriteMemo(store, key, messageId, sourceMessageId) {
+    return store.mutateJson("freshnessState", { version: 1, cursors: {} }, (state) => {
         state.im_write_memo ??= {};
         const prior = state.im_write_memo[key];
-        if (prior && prior.message_id === messageId)
-            duplicate = true;
-        state.im_write_memo[key] = { message_id: messageId, updated_at: new Date().toISOString() };
+        if (prior && prior.message_id === messageId) {
+            return { duplicate: true, ...(prior.source_message_id ? { priorSourceMessageId: prior.source_message_id } : {}) };
+        }
+        state.im_write_memo[key] = { message_id: messageId, updated_at: new Date().toISOString(),
+            ...(sourceMessageId ? { source_message_id: sourceMessageId } : {}) };
         const keys = Object.keys(state.im_write_memo);
         for (const stale of keys.slice(0, Math.max(0, keys.length - IM_WRITE_MEMO_LIMIT)))
             delete state.im_write_memo[stale];
+        return { duplicate: false };
     });
-    return duplicate;
 }
-function runCommentReply(argv, privateEnv, io, dependencies, store) {
+function runCommentReply(argv, privateEnv, io, dependencies, store, agentId) {
     const input = parseCommentReply(argv);
     const targetKey = store.resolveInboxMessageTarget(input.messageId);
     const target = targetKey ? parseDocumentCommentTarget(targetKey) : null;
@@ -324,6 +326,18 @@ function runCommentReply(argv, privateEnv, io, dependencies, store) {
         return "ready";
     });
     if (claim === "sent") {
+        const currentReminder = store.resolveCurrentReminders().filter((reminder) => reminder.deliveryTarget === targetKey).at(-1) ?? null;
+        try {
+            auditReminderDelivery({ stateStore: store, agentId, target: targetKey, deliveryAnchor: currentReminder?.deliveryAnchor,
+                succeeded: !currentReminder, ...(currentReminder ? { reason: "document comment ledger already sent this text to the anchor on an earlier reminder firing" } : {}) });
+        }
+        catch (error) {
+            io.stderr(`lark-cli: reminder delivery audit failed: ${error instanceof Error ? error.message : String(error)}\n`);
+        }
+        if (currentReminder) {
+            io.stderr("comment reply was already sent for an earlier reminder firing; no new delivery was committed\n");
+            return 2;
+        }
         io.stdout(`${JSON.stringify({ ok: true, identity: "bot", committed: true, duplicate: true, target: targetKey })}\n`);
         return 0;
     }
@@ -362,6 +376,25 @@ function runCommentReply(argv, privateEnv, io, dependencies, store) {
             };
         });
     }
+    const committedWrite = !result.error && result.status === 0;
+    const currentReminder = committedWrite
+        ? store.resolveCurrentReminders().filter((reminder) => reminder.deliveryTarget === targetKey).at(-1) ?? null
+        : null;
+    try {
+        auditReminderDelivery({ stateStore: store, agentId, target: targetKey, succeeded: committedWrite,
+            ...(committedWrite ? {} : { reason: (result.stderr || result.stdout || "comment provider failed").trim().split("\n")[0] }) });
+    }
+    catch (error) {
+        if (committedWrite && currentReminder) {
+            try {
+                store.markCurrentReminderDeliveryCommitted(currentReminder.reminderId, currentReminder.deliveryAnchor);
+            }
+            catch (markerError) {
+                io.stderr(`lark-cli: reminder committed marker failed: ${markerError instanceof Error ? markerError.message : String(markerError)}\n`);
+            }
+        }
+        io.stderr(`lark-cli: reminder delivery audit failed: ${error instanceof Error ? error.message : String(error)}\n`);
+    }
     return emitNativeResult(result, io);
 }
 function definitiveProviderRejection(result) {
@@ -1031,7 +1064,7 @@ export function runLarkCli(argv, env = process.env, dependencies = {}) {
                 }
                 catch { /* telemetry is failure-isolated */ }
             }
-            return telemetry.externalPhase(agent.agentId, store.paths.root, "document.comment.reply", SpanKind.CLIENT, () => runCommentReply(argv, privateEnv, io, nativeDependencies, store), "comment_cli");
+            return telemetry.externalPhase(agent.agentId, store.paths.root, "document.comment.reply", SpanKind.CLIENT, () => runCommentReply(argv, privateEnv, io, nativeDependencies, store, agent.agentId), "comment_cli");
         }
         catch (error) {
             io.stderr(`lark-cli: ${error instanceof Error ? error.message : String(error)}\n`);
@@ -1084,8 +1117,43 @@ export function runLarkCli(argv, env = process.env, dependencies = {}) {
             return emitNativeResult(write, io);
         }
         const writeMessage = writeResponseMessage(write);
-        const duplicate = !write.error && write.status === 0 && writeMessage
-            ? recordImWriteMemo(store, intentKey, writeMessage.message_id) : false;
+        const deliveryTarget = decision.operation === "send"
+            ? `chat:${policyFlagValue(effectiveArgv, "--chat-id")}`
+            : store.resolveInboxMessageTarget(policyFlagValue(effectiveArgv, "--message-id") || "") || targetKey;
+        const matchingReminderContexts = store.resolveCurrentReminders().filter((reminder) => reminder.deliveryTarget === deliveryTarget);
+        // When recurring firings overlap, attach this write to one occurrence rather
+        // than dropping audit state merely because reminder_id is shared. Reuse this
+        // exact anchor for both the memo and audit so they cannot select different
+        // occurrences.
+        const currentReminder = matchingReminderContexts.at(-1) ?? null;
+        const deliveryAnchor = currentReminder?.deliveryAnchor;
+        const memo = !write.error && write.status === 0 && writeMessage
+            ? recordImWriteMemo(store, intentKey, writeMessage.message_id, deliveryAnchor) : { duplicate: false };
+        const duplicateOfEarlierReminder = memo.duplicate && Boolean(currentReminder)
+            && memo.priorSourceMessageId !== currentReminder?.deliveryAnchor;
+        const committedWrite = !write.error && write.status === 0 && !duplicateOfEarlierReminder;
+        try {
+            auditReminderDelivery({ stateStore: store, agentId: agent.agentId, target: deliveryTarget, deliveryAnchor,
+                succeeded: committedWrite,
+                ...(!committedWrite ? {
+                    reason: duplicateOfEarlierReminder
+                        ? "provider deduplicated this write to an earlier reminder firing"
+                        : (write.stderr || write.stdout || "provider write failed").trim().split("\n")[0],
+                } : {}),
+                ...(writeMessage?.message_id ? { messageId: writeMessage.message_id } : {}) });
+        }
+        catch (error) {
+            if (committedWrite && currentReminder) {
+                try {
+                    store.markCurrentReminderDeliveryCommitted(currentReminder.reminderId, currentReminder.deliveryAnchor, writeMessage?.message_id);
+                }
+                catch (markerError) {
+                    io.stderr(`lark-cli: reminder committed marker failed: ${markerError instanceof Error ? markerError.message : String(markerError)}\n`);
+                }
+            }
+            io.stderr(`lark-cli: reminder delivery audit failed: ${error instanceof Error ? error.message : String(error)}\n`);
+        }
+        const duplicate = memo.duplicate;
         if (duplicate) {
             observeSuccessfulWrite(write, target, targetKey, store, generation);
             emitDuplicatedWrite(write, io, { target: targetKey });

package/dist/feishu/host-business-state.cjs

@@ -316,31 +316,50 @@ class HostEnvelopeProjector {
     }
     createReminderEnvelope(agentId, reminder, overdueMs, repeatDescription) {
         const seq = this.nextSequence(agentId);
-        const anchorMessageId = typeof reminder.msgRef === "string" && /^om_[A-Za-z0-9_-]+$/.test(reminder.msgRef)
-            ? reminder.msgRef
-            : null;
+        const legacyChannel = typeof reminder.channel === "string" ? reminder.channel.trim() : "";
+        const legacyChatTarget = /^oc_[A-Za-z0-9_-]+$/.test(legacyChannel) ? `chat:${legacyChannel}` : null;
+        const deliveryTarget = typeof reminder.deliveryTarget === "string" && reminder.deliveryTarget
+            ? reminder.deliveryTarget : legacyChatTarget;
+        const anchorMessageId = typeof reminder.deliveryAnchor === "string" && /^om_[A-Za-z0-9_-]+$/.test(reminder.deliveryAnchor)
+            ? reminder.deliveryAnchor
+            : typeof reminder.msgRef === "string" && /^om_[A-Za-z0-9_-]+$/.test(reminder.msgRef)
+                ? reminder.msgRef
+                : null;
+        const commentAnchorId = deliveryTarget?.startsWith("document-comment:") && typeof reminder.deliveryAnchor === "string"
+            && /^doc_comment_[A-Za-z0-9_-]+$/.test(reminder.deliveryAnchor) ? reminder.deliveryAnchor : null;
+        const anchorId = anchorMessageId || commentAnchorId;
+        const chatId = deliveryTarget?.match(/^chat:(oc_[A-Za-z0-9_-]+)$/)?.[1] || null;
         const lines = [
             `[定时提醒触发] ${reminder.title}`,
             `提醒ID: #${reminder.reminderId.slice(0, 8)}` + (reminder.repeat && repeatDescription
                 ? `　重复: ${repeatDescription}（下次已自动排在 ${reminder.fireAt}）`
                 : "　类型: 一次性"),
             overdueMs > 120_000 ? `注意: 原定时间已过 ${Math.round(overdueMs / 60_000)} 分钟（Runtime Host 离线期间错过，现补触发）` : null,
-            anchorMessageId ? `锚定消息: ${anchorMessageId}` : reminder.msgRef ? `历史锚点 ${String(reminder.msgRef)} 不是飞书 om_ message_id，不能用于回复` : null,
+            deliveryTarget ? `原始 deliveryTarget: ${deliveryTarget}`
+                : anchorId ? "这是升级前存量 user-facing reminder，优先回复其安全锚点；不得向标题中的任何人或第三方发送消息"
+                    : "本条为 internal/no-delivery reminder，不得向标题中的任何人或第三方发送消息",
+            anchorId ? `锚定消息: ${anchorId}` : reminder.msgRef ? `历史锚点 ${String(reminder.msgRef)} 不是可用的 delivery anchor，不能用于回复` : null,
             anchorMessageId
-                ? `回复原会话: ${this.larkCommand(`im +messages-reply --message-id ${anchorMessageId} ...`)}`
-                : null,
-            reminder.channel && /^oc_[A-Za-z0-9_-]+$/.test(reminder.channel)
-                ? `发送到原群: ${this.larkCommand(`im +messages-send --chat-id ${reminder.channel} ...`)}`
-                : reminder.channel
-                    ? `历史目标 ${reminder.channel} 不是 chat_id；${anchorMessageId ? "若不回复锚定消息，" : ""}先用 ${this.larkCommand("im +chat-search")} 查询并确认 oc_ chat_id，禁止按名称猜测发送目标`
-                    : anchorMessageId
-                        ? null
-                        : `本条存量提醒缺少可用的飞书 message_id/chat_id，无法安全推断原会话；请先用 ${this.larkCommand("im +chat-search")} 确认目标，禁止猜测发送`,
+                ? [
+                    `回复原会话: ${this.larkCommand(`im +messages-reply --message-id ${anchorMessageId}${deliveryTarget?.startsWith("thread:") ? " --reply-in-thread" : ""} ...`)}`,
+                    chatId ? `若 ${anchorMessageId} 无法由当前 Inbox 解析（例如 interaction_* 卡片锚点或已淘汰的历史消息），改用聊天兜底发送: ${this.larkCommand(`im +messages-send --chat-id ${chatId} ...`)}；仅使用这个持久化 chat_id，不得猜测收件人` : null,
+                ].filter((line) => Boolean(line)).join("\n")
+                : commentAnchorId
+                    ? `回复原文档评论: ${this.agentCommand(`comment reply --message-id ${commentAnchorId} --text ...`)}`
+                    : deliveryTarget
+                        ? chatId
+                            ? `发送到原始 target: ${deliveryTarget}: ${this.larkCommand(`im +messages-send --chat-id ${chatId} ...`)}（不得从提醒标题推断收件人）`
+                            : `发送到原始 target: ${deliveryTarget}（不得从提醒标题推断收件人）`
+                        : null,
             `这是你之前用 ${this.agentCommand("reminder schedule")} 设置的提醒，请按标题执行相应动作。管理: ${this.agentCommand("reminder list")} / ${this.agentCommand("reminder snooze")} / ${this.agentCommand("reminder cancel")}`,
         ].filter((line) => Boolean(line));
         const envelope = {
             kind: "reminder",
-            message_id: `rem_${reminder.reminderId.slice(0, 16)}_${seq}`,
+            // The random suffix keeps each firing's occurrence identity unique across
+            // Host restarts: the in-memory seq restarts at 1 and would otherwise let a
+            // recurring reminder reuse a prior occurrenceId in the delivery audit.
+            message_id: `rem_${reminder.reminderId.slice(0, 16)}_${seq}_${this.randomHex(6)}`,
+            reminderId: reminder.reminderId,
             seq,
             sender_name: "定时提醒",
             sender_type: "system",
@@ -350,6 +369,8 @@ class HostEnvelopeProjector {
             timestamp: this.now().toISOString(),
             thread_id: null,
             wake: true,
+            deliveryTarget,
+            deliveryAnchor: anchorId,
         };
         return { ...envelope, target: inbox_projection_js_1.RUNTIME_REMINDER_TARGET };
     }