@lemonbeijing/lemonclaw-mcp-service 0.1.2 → 0.1.3

package/README.md

@@ -1,10 +1,12 @@
 # LemonClaw MCP Service
 
-Local STDIO MCP service for the LemonClaw portable Runtime. The MCP package embeds the shared Runtime manager and starts Runtime Python directly; it does not install, resolve, or execute the WorkBuddy Launcher package.
+面向柠檬云的本地 STDIO MCP 服务，支持 ACC 财务、SCM 进销存、ERP 业财和独立开票。可查询客户、供应商、商品、仓库等基础资料，以及采购、销售、库存、收付款、往来、凭证、账簿、发票和经营或财务报表；对于 Action 文档明确支持的写操作，会在用户确认后执行。
+
+MCP 包内嵌共享 Runtime 管理组件并直接启动 Runtime Python，不安装、解析或执行 WorkBuddy Launcher 包。要求 Node.js 20 或更高版本；首次相关 Tool 调用时安装 Runtime，之后按策略检查更新。MCP 服务与 WorkBuddy Launcher 共用 `~/.lemonclaw-cli` 中的 Runtime 指针、安装锁、认证、账套上下文、文档、下载和开票文件。
+
+必须在 MCP 服务环境中配置 `LEMONCLAW_API_KEY`，该凭据不会作为 Tool 参数暴露。每次 Tool 执行前，MCP 会先解析或安装 Runtime，再通过 Runtime 认证模块同步发生变化的 API Key，最后调用目标业务操作；API Key 未变化时不会重复写入。
 
-Requires Node.js 20 or newer. Runtime is installed or periodically updated on the first relevant tool call. The MCP service and WorkBuddy Launcher share `~/.lemonclaw-cli`, including the runtime pointer, installation lock, authentication, account context, documents, downloads, and invoice files.
-
-## Run from this repository
+## 从仓库运行
 
 ```text
 npm install
@@ -12,27 +14,31 @@ npm run build
 node dist/lemonclaw-mcp.cjs
 ```
 
-Example MCP host configuration:
+MCP Host 配置示例：
 
 ```json
 {
   "mcpServers": {
     "lemonclaw": {
-      "type": "stdio",
-      "command": "node",
-      "args": ["D:/VSProject/lemonscmskills/mcp-service/dist/lemonclaw-mcp.cjs"]
+      "type": "stdio",
+      "command": "node",
+      "args": ["D:/VSProject/lemonscmskills/mcp-service/dist/lemonclaw-mcp.cjs"],
+      "env": {
+        "LEMONCLAW_API_KEY": "<在 MCP Host 中配置为密钥>"
+      }
     }
   }
 }
 ```
 
-After publication, use `npx --yes --prefer-online @lemonbeijing/lemonclaw-mcp-service@latest`. `npx` refreshes the MCP service when the host reconnects or restarts it; Runtime updates remain independent.
-
-## Tool groups
-
-- Authentication: `lemon_auth_status`, `lemon_auth_save_api_key`, `lemon_auth_clear`
-- Account context: `lemon_account_current`, `lemon_account_list`, `lemon_account_switch`, `lemon_account_select`, `lemon_account_clear`
-- ACC/SCM/ERP actions: `lemon_action_search`, `lemon_action_show`, `lemon_action_read_doc`, `lemon_action_run`
-- Independent invoicing: `lemon_invoice_read_doc`, `lemon_invoice_api`, `lemon_invoice_run_helper`
-
-`stdout` is reserved for MCP JSON-RPC. CLI and Runtime output is captured and returned as MCP Tool content; service diagnostics use `stderr` only.
+发布后可使用 `npx --yes --prefer-online @lemonbeijing/lemonclaw-mcp-service@latest`。MCP Host 重连或重启服务时，`npx` 会刷新 MCP 包；Runtime 更新与 MCP 包更新相互独立。
+
+## Tool 分组
+
+- 账套上下文：`lemon_account_current`、`lemon_account_list`、`lemon_account_switch`、`lemon_account_select`、`lemon_account_clear`
+- ACC/SCM/ERP 业务：`lemon_action_search`、`lemon_action_show`、`lemon_action_read_doc`、`lemon_action_run`
+- 独立开票：`lemon_invoice_read_doc`、`lemon_invoice_api`、`lemon_invoice_run_helper`
+
+`stdout` 仅用于 MCP JSON-RPC。CLI 和 Runtime 输出会被捕获并作为 MCP Tool 内容返回；服务诊断只使用 `stderr`。
+
+认证是 Tool 的内部前置条件。不要通过提示词或 Tool 输入发送 API Key；需要更换凭据时，应更新 MCP Host 中的 `LEMONCLAW_API_KEY` 并重新连接。

package/dist/lemonclaw-mcp.cjs

@@ -3279,8 +3279,8 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@lemonbeijing/lemonclaw-mcp-service",
-      version: "0.1.2",
-      description: "Local stdio MCP service for LemonClaw portable Runtime.",
+      version: "0.1.3",
+      description: "\u7528\u4E8E\u67E5\u8BE2\u548C\u64CD\u4F5C\u67E0\u6AAC\u4E91 Lemon Cloud \u4E1A\u52A1\u6570\u636E\u7684 MCP \u670D\u52A1\uFF0C\u8986\u76D6\u8D26\u5957\u3001\u8FDB\u9500\u5B58 SCM\u3001\u4E1A\u8D22 ERP\u3001\u8D22\u52A1 ACC \u548C\u72EC\u7ACB\u5F00\u7968\uFF1B\u652F\u6301\u5BA2\u6237\u3001\u4F9B\u5E94\u5546\u3001\u5546\u54C1\u3001\u4ED3\u5E93\u3001\u91C7\u8D2D\u3001\u9500\u552E\u3001\u5E93\u5B58\u3001\u6536\u4ED8\u6B3E\u3001\u5F80\u6765\u3001\u51ED\u8BC1\u3001\u8D26\u7C3F\u3001\u53D1\u7968\u53CA\u7ECF\u8425\u4E0E\u8D22\u52A1\u62A5\u8868\uFF0C\u5E76\u652F\u6301\u7ACB\u5373\u5F00\u7968\u3001\u6279\u91CF\u5F00\u7968\u548C\u95EE\u9898\u53CD\u9988\u3002",
       license: "UNLICENSED",
       type: "module",
       engines: {
@@ -5293,6 +5293,7 @@ async function resolveRuntimeEnvironment(descriptor, baseEnv = process.env) {
 }
 
 // src/invoice-runtime.js
+var MCP_CREDENTIAL_NOTICE = "> MCP \u51ED\u636E\u8986\u76D6\u89C4\u5219\uFF1AAPI Key \u5DF2\u7531 MCP \u73AF\u5883\u53D8\u91CF\u63D0\u4F9B\uFF0C\u5E76\u5728\u8C03\u7528\u672C Tool \u524D\u5B8C\u6210\u5185\u90E8\u540C\u6B65\u3002\u4E0D\u5F97\u5411\u7528\u6237\u7D22\u53D6\u3001\u5C55\u793A\u6216\u901A\u8FC7 Tool \u53C2\u6570\u4F20\u9012 API Key\uFF1B\u4E0B\u65B9 Runtime \u6587\u6863\u4E2D\u4EFB\u4F55\u6536\u96C6\u6216\u4FDD\u5B58 API Key \u7684\u65E7\u6307\u5F15\u5747\u4E0D\u9002\u7528\u4E8E MCP\u3002";
 var INVOICE_HELPERS = Object.freeze({
   customer_service_link: "scripts/customer_service_link.py",
   preview_server: "scripts/preview_http_server.py",
@@ -5311,7 +5312,6 @@ var API_ARGUMENT_FLAGS = Object.freeze({
   uscic: "--uscic",
   auth_company_id: "--auth-company-id",
   company_detail_id: "--company-detail-id",
-  api_key_last_four: "--api-key-last-four",
   ai_tool: "--ai-tool",
   model: "--model",
   feedback_contact: "--feedback-contact",
@@ -5351,7 +5351,9 @@ async function readInvoiceDocument(runtimeProvider, relativePath) {
     throw new Error("Invoice document path escapes the invoice directory.");
   }
   const content = await (0, import_promises2.readFile)(targetReal, "utf8");
-  return content.replace(/^\uFEFF/, "");
+  return `${MCP_CREDENTIAL_NOTICE}
+
+${content.replace(/^\uFEFF/, "")}`;
 }
 function requireValue(args, key, operation) {
   const value = args[key];
@@ -5390,9 +5392,12 @@ async function runInvoiceApi(runtimeProvider, args) {
     if (args.user_confirmed !== true) {
       throw new Error("SkillInvoiceIssue requires explicit user confirmation.");
     }
-    for (const key of ["eiscid", "api_key_last_four", "ai_tool", "model"]) {
+    for (const key of ["eiscid", "ai_tool", "model"]) {
       requireValue(args, key, operation);
     }
+    if (!String(runtime.apiKeyLastFour || "").trim()) {
+      throw new Error("SkillInvoiceIssue requires the configured MCP API Key.");
+    }
     if (args.payload === void 0 && !args.payload_path) {
       throw new Error("SkillInvoiceIssue requires payload or payload_path.");
     }
@@ -5401,7 +5406,9 @@ async function runInvoiceApi(runtimeProvider, args) {
     const command = [script, "--action", operation];
     appendApiArguments(command, args);
     if (payloadPath) command.push("--payload-path", String(payloadPath));
-    if (operation === "SkillInvoiceIssue") command.push("--issue-confirm", "1");
+    if (operation === "SkillInvoiceIssue") {
+      command.push("--api-key-last-four", runtime.apiKeyLastFour, "--issue-confirm", "1");
+    }
     return runProcess(runtime.python, command, {
       cwd: runtime.runtimeRoot,
       env: runtime.env,
@@ -5427,6 +5434,155 @@ var invoiceHelperNames = Object.freeze(Object.keys(INVOICE_HELPERS));
 
 // src/runtime-manager.js
 var import_runtime_core2 = __toESM(require_runtime_core(), 1);
+
+// src/runtime-auth.js
+var API_KEY_ENVIRONMENT_VARIABLE = "LEMONCLAW_API_KEY";
+var ENSURE_API_KEY_PROGRAM = String.raw`
+import base64
+import ctypes
+import hmac
+import json
+import os
+import sys
+from pathlib import Path
+
+skill_root = sys.argv[1]
+sys.path.insert(0, skill_root)
+from auth import auth as lemon_auth
+
+
+def credential_path():
+    if os.name == "nt":
+        appdata = os.environ.get("APPDATA")
+        return Path(appdata) / "LemonAuthAgent" / "api-key.dat" if appdata else None
+    config_root = os.environ.get("XDG_CONFIG_HOME")
+    root = Path(config_root) if config_root else Path.home() / ".config"
+    return root / "lemon-auth-agent" / "api-key.dat"
+
+
+def unprotect_windows(value):
+    try:
+        from ctypes import wintypes
+
+        encrypted = base64.b64decode(value.strip(), validate=True)
+        if not encrypted:
+            return None
+
+        class DataBlob(ctypes.Structure):
+            _fields_ = [
+                ("cbData", wintypes.DWORD),
+                ("pbData", ctypes.POINTER(ctypes.c_ubyte)),
+            ]
+
+        source_buffer = (ctypes.c_ubyte * len(encrypted)).from_buffer_copy(encrypted)
+        source = DataBlob(
+            len(encrypted), ctypes.cast(source_buffer, ctypes.POINTER(ctypes.c_ubyte))
+        )
+        target = DataBlob()
+        crypt32 = ctypes.WinDLL("crypt32", use_last_error=True)
+        crypt32.CryptUnprotectData.argtypes = [
+            ctypes.POINTER(DataBlob),
+            ctypes.c_void_p,
+            ctypes.c_void_p,
+            ctypes.c_void_p,
+            ctypes.c_void_p,
+            wintypes.DWORD,
+            ctypes.POINTER(DataBlob),
+        ]
+        crypt32.CryptUnprotectData.restype = wintypes.BOOL
+        if not crypt32.CryptUnprotectData(
+            ctypes.byref(source), None, None, None, None, 1, ctypes.byref(target)
+        ):
+            return None
+        try:
+            return ctypes.string_at(target.pbData, target.cbData).decode("utf-8")
+        finally:
+            kernel32 = ctypes.WinDLL("kernel32", use_last_error=True)
+            kernel32.LocalFree.argtypes = [ctypes.c_void_p]
+            kernel32.LocalFree.restype = ctypes.c_void_p
+            kernel32.LocalFree(ctypes.cast(target.pbData, ctypes.c_void_p))
+    except Exception:
+        return None
+
+
+def current_api_key():
+    path = credential_path()
+    if path is None or not path.is_file():
+        return None
+    try:
+        stored = path.read_text(encoding="utf-8").strip()
+    except (OSError, UnicodeError):
+        return None
+    if not stored:
+        return None
+    return unprotect_windows(stored) if os.name == "nt" else stored
+
+
+api_key = sys.stdin.read().strip()
+if not api_key:
+    print(json.dumps({"ok": False, "error": "missing_api_key", "message": "Missing LEMONCLAW_API_KEY."}))
+    raise SystemExit(2)
+
+existing = current_api_key()
+if existing is not None and hmac.compare_digest(existing, api_key):
+    result = {"ok": True, "data": {"saved": False, "unchanged": True}}
+else:
+    result = lemon_auth.save_api_key(api_key)
+
+print(json.dumps(result, ensure_ascii=False, separators=(",", ":")))
+`;
+function withoutApiKey(environment = {}) {
+  const sanitized = { ...environment };
+  delete sanitized[API_KEY_ENVIRONMENT_VARIABLE];
+  return sanitized;
+}
+function authenticationFailure(result) {
+  if (result.timedOut) return "LemonClaw API Key setup timed out.";
+  if (result.outputLimitExceeded) return "LemonClaw API Key setup returned too much output.";
+  if (result.spawnError) return `Unable to start LemonClaw authentication: ${result.spawnError.message}`;
+  return String(result.stderr || result.stdout || "LemonClaw API Key setup failed.").trim().slice(0, 2e3);
+}
+async function ensureRuntimeApiKey(runtime, options = {}) {
+  if (!runtime?.python || !runtime?.runtimeRoot || !runtime?.skillRoot) {
+    throw new Error("Resolved Runtime environment is incomplete.");
+  }
+  const sourceEnvironment = options.env || process.env;
+  const apiKey = String(sourceEnvironment[API_KEY_ENVIRONMENT_VARIABLE] || "").trim();
+  if (!apiKey) {
+    throw new Error(
+      `Missing ${API_KEY_ENVIRONMENT_VARIABLE}. Configure it in the LemonClaw MCP environment and reconnect.`
+    );
+  }
+  const run = options.run || runProcess;
+  const result = await run(runtime.python, ["-c", ENSURE_API_KEY_PROGRAM, runtime.skillRoot], {
+    cwd: runtime.runtimeRoot,
+    env: withoutApiKey(runtime.env),
+    stdin: apiKey,
+    timeoutMs: Math.max(1, Number(options.timeoutMs || 6e4))
+  });
+  if (result.code !== 0 || result.timedOut || result.outputLimitExceeded || result.spawnError) {
+    throw new Error(authenticationFailure(result));
+  }
+  let payload;
+  try {
+    payload = JSON.parse(String(result.stdout || "").trim());
+  } catch {
+    throw new Error("LemonClaw authentication returned an invalid response.");
+  }
+  if (payload?.ok !== true) {
+    throw new Error(String(payload?.message || payload?.error || "LemonClaw API Key setup failed."));
+  }
+  return {
+    apiKeyLastFour: apiKey.slice(-4),
+    saved: payload?.data?.saved === true,
+    unchanged: payload?.data?.unchanged === true
+  };
+}
+function removeApiKeyFromEnvironment(environment) {
+  return withoutApiKey(environment);
+}
+
+// src/runtime-manager.js
 var { publicError } = import_runtime_core2.default.errors;
 var {
   bootstrapRuntime,
@@ -5464,6 +5620,8 @@ function createRuntimeManager(options = {}) {
   };
   const run = options.runProcess || runProcess;
   const makeEnvironment = options.resolveRuntimeEnvironment || resolveRuntimeEnvironment;
+  const ensureApiKey = options.ensureRuntimeApiKey || ensureRuntimeApiKey;
+  let authenticationQueue = Promise.resolve();
   install.cleanupAbandonedInstallLock({ env });
   async function resolveDescriptor(mode = "current-or-install") {
     if (mode === "auto") return install.maybeAutoUpdate({ env });
@@ -5472,7 +5630,18 @@ function createRuntimeManager(options = {}) {
     return install.bootstrapRuntime({ env, waitForPeer: true });
   }
   async function resolveEnvironment(mode = "current-or-install") {
-    return makeEnvironment(await resolveDescriptor(mode), env);
+    const runtime = await makeEnvironment(await resolveDescriptor(mode), env);
+    const authenticationTask = authenticationQueue.then(() => ensureApiKey(runtime, { env, run }));
+    authenticationQueue = authenticationTask.then(
+      () => void 0,
+      () => void 0
+    );
+    const authentication = await authenticationTask;
+    return {
+      ...runtime,
+      apiKeyLastFour: authentication.apiKeyLastFour,
+      env: removeApiKeyFromEnvironment(runtime.env)
+    };
   }
   async function runCli(args, runOptions = {}) {
     try {
@@ -5491,47 +5660,6 @@ function createRuntimeManager(options = {}) {
   return { resolveDescriptor, resolveEnvironment, runCli };
 }
 
-// src/runtime-auth.js
-var AUTH_PROGRAM = String.raw`
-import json
-import sys
-
-operation = sys.argv[1]
-skill_root = sys.argv[2]
-sys.path.insert(0, skill_root)
-from auth import auth as lemon_auth
-
-if operation == "status":
-    result = lemon_auth.auth_status()
-elif operation == "save_api_key":
-    result = lemon_auth.save_api_key(sys.stdin.read())
-elif operation == "clear":
-    result = lemon_auth.clear_auth()
-else:
-    raise SystemExit("unsupported auth operation")
-
-print(json.dumps(result, ensure_ascii=False, separators=(",", ":")))
-`;
-async function runRuntimeAuth(runtimeProvider, args, options = {}) {
-  const resolveRuntime = options.resolveRuntime || runtimeProvider;
-  const run = options.run || runProcess;
-  if (typeof resolveRuntime !== "function") throw new Error("Runtime provider is required.");
-  const runtime = await resolveRuntime("current-or-install");
-  const operation = String(args.operation || "");
-  if (!["status", "save_api_key", "clear"].includes(operation)) {
-    throw new Error("Unsupported Runtime authentication operation.");
-  }
-  if (operation === "save_api_key" && !String(args.api_key || "").trim()) {
-    throw new Error("API Key is required.");
-  }
-  return run(runtime.python, ["-c", AUTH_PROGRAM, operation, runtime.skillRoot], {
-    cwd: runtime.runtimeRoot,
-    env: runtime.env,
-    stdin: operation === "save_api_key" ? String(args.api_key) : void 0,
-    timeoutMs: Math.max(1, Number(args.timeout_seconds || 60)) * 1e3
-  });
-}
-
 // src/tool-result.js
 function publicFailure(result) {
   if (result.timedOut) return "LemonClaw command timed out.";
@@ -5566,8 +5694,8 @@ function toolError(error) {
 }
 
 // src/server.js
-var productSchema = z.enum(["acc", "scm", "erp"]);
-var timeoutSchema = z.number().int().min(1).max(600).default(120);
+var productSchema = z.enum(["acc", "scm", "erp"]).describe("\u4E1A\u52A1\u4EA7\u54C1\uFF1Aacc=\u8D22\u52A1\uFF0Cscm=\u8FDB\u9500\u5B58\uFF0Cerp=\u4E1A\u8D22\uFF1B\u5FC5\u987B\u4E0E\u5F53\u524D\u6240\u9009\u8D26\u5957\u4EA7\u54C1\u4E00\u81F4\u3002");
+var timeoutSchema = z.number().int().min(1).max(600).default(120).describe("\u672C\u6B21\u64CD\u4F5C\u7684\u8D85\u65F6\u65F6\u95F4\uFF0C\u5355\u4F4D\u4E3A\u79D2\uFF0C\u53D6\u503C\u8303\u56F4 1 \u81F3 600\u3002");
 var optionalText = z.string().min(1).optional();
 var readOnlyAnnotations = {
   readOnlyHint: true,
@@ -5602,76 +5730,9 @@ function createLemonClawServer(options = {}) {
   const runCli = options.runCli || runtimeManager.runCli;
   const resolveRuntime = options.resolveRuntime || runtimeManager.resolveEnvironment;
   const server = new import_server.McpServer(
-    { name: "lemonclaw", version: "0.1.2" },
+    { name: "lemonclaw", version: "0.1.3" },
     {
-      instructions: "Use standard API Key authentication: check lemon_auth_status and, when unavailable, request the user's API Key and pass it only to lemon_auth_save_api_key. Never use browser or device-flow authentication. For ACC, SCM, and ERP, determine the product and account first, then use lemon_action_search, lemon_action_show, read every document exposed by show with lemon_action_read_doc, and only then call lemon_action_run. Never guess action parameters. Independent invoicing uses only the lemon_invoice_* tools and requires its Runtime documents."
-    }
-  );
-  server.registerTool(
-    "lemon_auth_status",
-    {
-      title: "Check LemonClaw API Key authentication",
-      description: "Check whether the current user's standard LemonClaw API Key can provide a token. This uses the Runtime authentication helper and never returns the API Key or token.",
-      inputSchema: z.object({
-        timeout_seconds: z.number().int().min(1).max(120).default(60)
-      }),
-      annotations: readOnlyAnnotations
-    },
-    async (args) => {
-      try {
-        return cliToolResult(await runRuntimeAuth(resolveRuntime, { ...args, operation: "status" }));
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
-  server.registerTool(
-    "lemon_auth_save_api_key",
-    {
-      title: "Save LemonClaw API Key",
-      description: "Save an API Key with the standard Runtime authentication helper for the current operating-system user. The key is sent to Runtime through stdin, is not placed in process arguments, and is never returned.",
-      inputSchema: z.object({
-        api_key: z.string().min(1),
-        timeout_seconds: z.number().int().min(1).max(120).default(60)
-      }),
-      annotations: {
-        readOnlyHint: false,
-        destructiveHint: false,
-        idempotentHint: false,
-        openWorldHint: false
-      }
-    },
-    async (args) => {
-      try {
-        return cliToolResult(
-          await runRuntimeAuth(resolveRuntime, { ...args, operation: "save_api_key" })
-        );
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
-  server.registerTool(
-    "lemon_auth_clear",
-    {
-      title: "Clear LemonClaw API Key authentication",
-      description: "Clear the current user's standard LemonClaw API Key and token cache without clearing account context. Use only when the user explicitly requests it.",
-      inputSchema: z.object({
-        timeout_seconds: z.number().int().min(1).max(120).default(60)
-      }),
-      annotations: {
-        readOnlyHint: false,
-        destructiveHint: true,
-        idempotentHint: true,
-        openWorldHint: false
-      }
-    },
-    async (args) => {
-      try {
-        return cliToolResult(await runRuntimeAuth(resolveRuntime, { ...args, operation: "clear" }));
-      } catch (error) {
-        return toolError(error);
-      }
+      instructions: "LemonClaw \u7684 API Key \u4EC5\u7531 MCP \u670D\u52A1\u73AF\u5883\u53D8\u91CF\u63D0\u4F9B\uFF0C\u4E0D\u5F97\u5728\u5BF9\u8BDD\u6216 Tool \u53C2\u6570\u4E2D\u7D22\u53D6\u3001\u63A5\u6536\u3001\u5C55\u793A\u6216\u4F20\u9012\u3002\u5904\u7406 ACC\u3001SCM\u3001ERP \u4E1A\u52A1\u524D\uFF0C\u5148\u786E\u5B9A\u4EA7\u54C1\u5E76\u83B7\u53D6\u6216\u5207\u6362\u8D26\u5957\uFF1B\u968F\u540E\u4F9D\u6B21\u8C03\u7528 lemon_action_search\u3001lemon_action_show\u3001lemon_action_read_doc \u8BFB\u53D6 show \u8FD4\u56DE\u7684\u5168\u90E8\u5B9E\u9645\u6587\u6863\uFF0C\u6700\u540E\u624D\u53EF\u8C03\u7528 lemon_action_run\uFF0C\u4E25\u7981\u731C\u6D4B Action \u548C\u53C2\u6570\u3002\u72EC\u7ACB\u5F00\u7968\u53EA\u4F7F\u7528 lemon_invoice_* Tools\uFF0C\u5E76\u5148\u8BFB\u53D6 Runtime \u5F00\u7968\u6587\u6863\uFF1BRuntime \u6587\u6863\u4E2D\u4EFB\u4F55\u8981\u6C42\u6536\u96C6\u6216\u4FDD\u5B58 API Key \u7684\u65E7\u6307\u5F15\u5747\u4E0D\u9002\u7528\u4E8E MCP\uFF0C\u56E0\u4E3A\u6BCF\u6B21 Tool \u8C03\u7528\u524D\u90FD\u5DF2\u5728\u5185\u90E8\u5B8C\u6210\u8BA4\u8BC1\u3002"
     }
   );
   registerCliTool(
@@ -5679,8 +5740,8 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_account_current",
     {
-      title: "Get current Lemon account context",
-      description: "Read the current product and selected account set from the existing local account context. Call this before ACC, SCM, or ERP business actions.",
+      title: "\u83B7\u53D6\u5F53\u524D\u67E0\u6AAC\u4E91\u8D26\u5957",
+      description: "\u83B7\u53D6\u5F53\u524D\u9009\u4E2D\u7684\u67E0\u6AAC\u4E91\u4EA7\u54C1\u548C\u8D26\u5957\u4FE1\u606F\u3002\u6267\u884C ACC \u8D22\u52A1\u3001SCM \u8FDB\u9500\u5B58\u6216 ERP \u4E1A\u8D22\u4E1A\u52A1\u524D\u5E94\u5148\u8C03\u7528\u672C\u5DE5\u5177\uFF0C\u4EE5\u786E\u8BA4\u540E\u7EED Action \u4F7F\u7528\u7684 product \u4E0E\u5F53\u524D\u8D26\u5957\u4E00\u81F4\uFF1B\u672C\u5DE5\u5177\u4E0D\u4F1A\u5207\u6362\u6216\u4FEE\u6539\u8D26\u5957\u3002",
       inputSchema: z.object({ timeout_seconds: timeoutSchema }),
       annotations: readOnlyAnnotations
     },
@@ -5694,10 +5755,10 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_account_list",
     {
-      title: "List Lemon account sets",
-      description: "List account-set candidates and cache their returned indexes for a later lemon_account_select call. Use only when switch has no usable candidates or the user asks to list accounts.",
+      title: "\u5217\u51FA\u67E0\u6AAC\u4E91\u8D26\u5957",
+      description: "\u5217\u51FA\u5F53\u524D\u7528\u6237\u53EF\u7528\u7684\u67E0\u6AAC\u4E91\u8D26\u5957\uFF0C\u5E76\u7F13\u5B58\u8FD4\u56DE\u7684\u5019\u9009\u5E8F\u53F7\u4F9B lemon_account_select \u4F7F\u7528\u3002\u4EC5\u5F53 lemon_account_switch \u6CA1\u6709\u8FD4\u56DE\u53EF\u7528\u5019\u9009\uFF0C\u6216\u7528\u6237\u660E\u786E\u8981\u6C42\u67E5\u770B\u8D26\u5957\u5217\u8868\u65F6\u8C03\u7528\uFF1B\u4E0D\u8981\u4E3A\u4E86\u9009\u62E9\u5DF2\u6709\u5019\u9009\u800C\u91CD\u590D\u5237\u65B0\u5217\u8868\u3002",
       inputSchema: z.object({
-        dry_run: z.boolean().default(false),
+        dry_run: z.boolean().default(false).describe("\u662F\u5426\u4EC5\u68C0\u67E5\u6D41\u7A0B\u800C\u4E0D\u5B9E\u9645\u66F4\u65B0\u672C\u5730\u5019\u9009\u7F13\u5B58\u3002"),
         timeout_seconds: timeoutSchema
       }),
       annotations: readOnlyAnnotations
@@ -5713,16 +5774,16 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_account_switch",
     {
-      title: "Switch Lemon account context",
-      description: "Match a product or account clue and switch when unique. If candidates are returned, present them to the user and select from that same candidate set; do not refresh it with account list.",
+      title: "\u5339\u914D\u5E76\u5207\u6362\u67E0\u6AAC\u4E91\u8D26\u5957",
+      description: "\u6839\u636E\u4EA7\u54C1\u3001\u8D26\u5957\u540D\u79F0\u3001\u7F16\u53F7\u6216\u7248\u672C\u7B49\u7EBF\u7D22\u5339\u914D\u5E76\u5207\u6362\u67E0\u6AAC\u4E91\u8D26\u5957\u3002\u552F\u4E00\u5339\u914D\u65F6\u53EF\u76F4\u63A5\u5207\u6362\uFF1B\u8FD4\u56DE\u591A\u4E2A\u5019\u9009\u65F6\uFF0C\u5E94\u5411\u7528\u6237\u5C55\u793A\u5E76\u901A\u8FC7 lemon_account_select \u4ECE\u540C\u4E00\u6279\u5019\u9009\u4E2D\u9009\u62E9\uFF0C\u4E0D\u8981\u8C03\u7528 lemon_account_list \u5237\u65B0\u5019\u9009\u3002",
       inputSchema: z.object({
-        query: optionalText,
+        query: optionalText.describe("\u7528\u4E8E\u5339\u914D\u4EA7\u54C1\u3001\u8D26\u5957\u540D\u79F0\u3001\u7F16\u53F7\u6216\u7248\u672C\u7684\u7528\u6237\u7EBF\u7D22\u3002"),
         product: productSchema.optional(),
         asid: optionalText,
         serviceid: optionalText,
         name: optionalText,
         edition: optionalText,
-        dry_run: z.boolean().default(false),
+        dry_run: z.boolean().default(false).describe("\u662F\u5426\u53EA\u9884\u89C8\u5339\u914D\u7ED3\u679C\u800C\u4E0D\u5B9E\u9645\u5207\u6362\u8D26\u5957\u3002"),
         timeout_seconds: timeoutSchema
       }),
       annotations: {
@@ -5750,10 +5811,10 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_account_select",
     {
-      title: "Select a Lemon account set",
-      description: "Select from the candidates cached by the most recent account switch or list. Prefer the returned index. Never invent an index or silently choose between duplicate names.",
+      title: "\u9009\u62E9\u67E0\u6AAC\u4E91\u8D26\u5957\u5019\u9009",
+      description: "\u4ECE\u6700\u8FD1\u4E00\u6B21 lemon_account_switch \u6216 lemon_account_list \u7F13\u5B58\u7684\u5019\u9009\u4E2D\u9009\u62E9\u8D26\u5957\u3002\u4F18\u5148\u4F7F\u7528\u5019\u9009\u8FD4\u56DE\u7684 index\uFF0C\u5E76\u4FDD\u6301\u5019\u9009\u4E2D\u7684 product \u548C\u6807\u8BC6\u4E0D\u53D8\uFF1B\u4E0D\u5F97\u7F16\u9020\u5E8F\u53F7\uFF0C\u4E5F\u4E0D\u5F97\u5728\u91CD\u540D\u8D26\u5957\u4E4B\u95F4\u9759\u9ED8\u9009\u62E9\u3002",
       inputSchema: z.object({
-        index: z.number().int().positive().optional(),
+        index: z.number().int().positive().optional().describe("\u6700\u8FD1\u4E00\u6B21\u5019\u9009\u5217\u8868\u8FD4\u56DE\u7684\u5E8F\u53F7\u3002"),
         product: productSchema.optional(),
         asid: optionalText,
         serviceid: optionalText,
@@ -5761,7 +5822,7 @@ function createLemonClawServer(options = {}) {
         timeout_seconds: timeoutSchema
       }).refine(
         (value) => value.index !== void 0 || value.asid || value.serviceid || value.name,
-        "Provide index, asid, serviceid, or name from the latest candidate set."
+        "\u5FC5\u987B\u63D0\u4F9B\u6700\u8FD1\u4E00\u6B21\u5019\u9009\u5217\u8868\u4E2D\u7684 index\u3001asid\u3001serviceid \u6216 name\u3002"
       ),
       annotations: {
         readOnlyHint: false,
@@ -5786,11 +5847,11 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_account_clear",
     {
-      title: "Clear Lemon account context",
-      description: "Clear saved account context without clearing authentication. Use all_products only when the user explicitly requests clearing every product context.",
+      title: "\u6E05\u9664\u67E0\u6AAC\u4E91\u8D26\u5957\u4E0A\u4E0B\u6587",
+      description: "\u6E05\u9664\u5DF2\u4FDD\u5B58\u7684\u67E0\u6AAC\u4E91\u8D26\u5957\u4E0A\u4E0B\u6587\uFF0C\u4F46\u4E0D\u4F1A\u6E05\u9664 API Key \u6216\u8BA4\u8BC1\u4FE1\u606F\u3002\u9ED8\u8BA4\u4EC5\u6E05\u9664\u6307\u5B9A\u6216\u5F53\u524D\u4EA7\u54C1\uFF1B\u53EA\u6709\u7528\u6237\u660E\u786E\u8981\u6C42\u6E05\u9664\u5168\u90E8\u4EA7\u54C1\u8D26\u5957\u65F6\uFF0C\u624D\u53EF\u5C06 all_products \u8BBE\u4E3A true\u3002",
       inputSchema: z.object({
         product: productSchema.optional(),
-        all_products: z.boolean().default(false),
+        all_products: z.boolean().default(false).describe("\u662F\u5426\u6E05\u9664 ACC\u3001SCM\u3001ERP \u7684\u5168\u90E8\u8D26\u5957\u4E0A\u4E0B\u6587\u3002"),
         timeout_seconds: timeoutSchema
       }),
       annotations: {
@@ -5813,12 +5874,12 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_action_search",
     {
-      title: "Search Lemon business actions",
-      description: "Search for ACC, SCM, or ERP action candidates in one explicit product. Search does not select an action, create parameters, or execute business requests.",
+      title: "\u641C\u7D22\u67E0\u6AAC\u4E91\u4E1A\u52A1\u80FD\u529B",
+      description: "\u5728\u6307\u5B9A\u7684\u67E0\u6AAC\u4E91 ACC\u3001SCM \u6216 ERP \u4EA7\u54C1\u4E2D\u641C\u7D22\u4E0E\u7528\u6237\u9700\u6C42\u5339\u914D\u7684\u4E1A\u52A1\u80FD\u529B\u3002\u53EF\u641C\u7D22\u5BA2\u6237\u3001\u4F9B\u5E94\u5546\u3001\u5546\u54C1\u3001\u4ED3\u5E93\u7B49\u57FA\u7840\u8D44\u6599\uFF0C\u4EE5\u53CA\u91C7\u8D2D\u8BA2\u5355\u3001\u9500\u552E\u8BA2\u5355\u3001\u5E93\u5B58\u3001\u6536\u4ED8\u6B3E\u3001\u5F80\u6765\u3001\u51ED\u8BC1\u3001\u8D26\u7C3F\u3001\u53D1\u7968\u548C\u7ECF\u8425\u6216\u8D22\u52A1\u62A5\u8868\u7B49\u80FD\u529B\uFF1BERP \u8FD8\u8986\u76D6\u9500\u552E\u62A5\u4EF7\u3001\u4EF7\u683C\u8D44\u6599\u3001\u8BA2\u5355\u6C47\u603B\u3001\u5E93\u5B58\u8D26\u9F84\u3001\u6682\u4F30\u8C03\u6574\u548C\u5E94\u6536\u5E94\u4ED8\u9884\u8B66\u3002\u672C\u5DE5\u5177\u53EA\u8FD4\u56DE\u5F53\u524D\u4EA7\u54C1\u7684 Action \u5019\u9009\uFF0C\u4E0D\u9009\u62E9 Action\u3001\u4E0D\u751F\u6210\u4E1A\u52A1\u53C2\u6570\uFF0C\u4E5F\u4E0D\u6267\u884C\u67E5\u8BE2\u6216\u5199\u64CD\u4F5C\u3002",
       inputSchema: z.object({
         product: productSchema,
-        query: z.string().min(1),
-        limit: z.number().int().min(1).max(20).default(5)
+        query: z.string().min(1).describe("\u7528\u6237\u7684\u81EA\u7136\u8BED\u8A00\u4E1A\u52A1\u9700\u6C42\uFF0C\u4F8B\u5982\u201C\u67E5\u8BE2\u672C\u6708\u91C7\u8D2D\u8BA2\u5355\u201D\u3002"),
+        limit: z.number().int().min(1).max(20).default(5).describe("\u6700\u591A\u8FD4\u56DE\u7684\u5019\u9009\u6570\u91CF\u3002")
       }),
       annotations: readOnlyAnnotations
     },
@@ -5840,11 +5901,11 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_action_show",
     {
-      title: "Show a Lemon business action",
-      description: "Show one action's public contract and the documents that actually exist. A successful show does not prove the action is the unique semantic match.",
+      title: "\u67E5\u770B\u67E0\u6AAC\u4E91\u4E1A\u52A1\u80FD\u529B\u5951\u7EA6",
+      description: "\u67E5\u770B\u6307\u5B9A\u67E0\u6AAC\u4E91\u4E1A\u52A1 Action \u7684\u516C\u5F00\u8C03\u7528\u5951\u7EA6\u3001\u53C2\u6570\u7ED3\u6784\u53CA\u5B9E\u9645\u5B58\u5728\u7684\u8BF4\u660E\u6587\u6863\u3002\u67E5\u770B\u6210\u529F\u4E0D\u4EE3\u8868\u8BE5 Action \u5DF2\u7ECF\u662F\u7528\u6237\u9700\u6C42\u7684\u552F\u4E00\u5339\u914D\uFF1B\u5B58\u5728\u591A\u4E2A\u5408\u7406\u5019\u9009\u65F6\u4ECD\u9700\u7EE7\u7EED\u6BD4\u8F83\uFF0C\u5FC5\u8981\u65F6\u8BF7\u7528\u6237\u786E\u8BA4\u3002",
       inputSchema: z.object({
         product: productSchema,
-        action: z.string().min(1)
+        action: z.string().min(1).describe("lemon_action_search \u5019\u9009\u8FD4\u56DE\u7684\u7CBE\u786E Action \u540D\u79F0\u3002")
       }),
       annotations: readOnlyAnnotations
     },
@@ -5858,12 +5919,12 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_action_read_doc",
     {
-      title: "Read a Lemon business action document",
-      description: "Read one registered ACTION, input, or output Markdown document. Read every document exposed by lemon_action_show for the final selected action before run.",
+      title: "\u8BFB\u53D6\u67E0\u6AAC\u4E91\u4E1A\u52A1\u80FD\u529B\u6587\u6863",
+      description: "\u8BFB\u53D6\u6307\u5B9A\u4E1A\u52A1 Action \u5DF2\u6CE8\u518C\u7684\u529F\u80FD\u8BF4\u660E\u3001\u8F93\u5165\u53C2\u6570\u6216\u8F93\u51FA\u7ED3\u679C\u6587\u6863\u3002\u6700\u7EC8\u9009\u62E9 Action \u540E\uFF0C\u5FC5\u987B\u5728\u6267\u884C\u524D\u8BFB\u53D6 lemon_action_show \u5B9E\u9645\u8FD4\u56DE\u7684\u5168\u90E8\u6587\u6863\uFF0C\u5E76\u4EE5\u6587\u6863\u5B9A\u4E49\u4E3A\u51C6\u6784\u9020\u53C2\u6570\u548C\u5C55\u793A\u7ED3\u679C\uFF1B\u4E0D\u5F97\u731C\u6D4B\u4E0D\u5B58\u5728\u7684\u6587\u6863\u6216\u5B57\u6BB5\u3002",
       inputSchema: z.object({
         product: productSchema,
-        action: z.string().min(1),
-        document: z.enum(["action", "input", "output"])
+        action: z.string().min(1).describe("\u5DF2\u7ECF\u6838\u9A8C\u7684\u7CBE\u786E Action \u540D\u79F0\u3002"),
+        document: z.enum(["action", "input", "output"]).describe("\u8981\u8BFB\u53D6\u7684\u6587\u6863\u7C7B\u578B\uFF1B\u53EA\u80FD\u9009\u62E9 lemon_action_show \u8FD4\u56DE\u4E3A\u5B9E\u9645\u5B58\u5728\u7684\u7C7B\u578B\u3002")
       }),
       annotations: readOnlyAnnotations
     },
@@ -5884,19 +5945,19 @@ function createLemonClawServer(options = {}) {
     runCli,
     "lemon_action_run",
     {
-      title: "Run a Lemon business action",
-      description: "Run one already-selected ACC, SCM, or ERP action with its documented nested query/body envelope. This tool never searches, guesses parameters, or executes independent invoicing. Set user_confirmed only after explicit confirmation of a documented write action.",
+      title: "\u67E5\u8BE2\u6216\u6267\u884C\u67E0\u6AAC\u4E91\u4E1A\u52A1\u64CD\u4F5C",
+      description: "\u6267\u884C\u5DF2\u901A\u8FC7\u68C0\u7D22\u548C\u6587\u6863\u6838\u9A8C\u7684\u67E0\u6AAC\u4E91 ACC\u3001SCM \u6216 ERP \u4E1A\u52A1\u64CD\u4F5C\u3002\u652F\u6301\u67E5\u8BE2\u5BA2\u6237\u3001\u4F9B\u5E94\u5546\u3001\u5546\u54C1\u3001\u4ED3\u5E93\u7B49\u57FA\u7840\u8D44\u6599\uFF0C\u4EE5\u53CA\u91C7\u8D2D\u8BA2\u5355\u3001\u9500\u552E\u8BA2\u5355\u3001\u5E93\u5B58\u3001\u6536\u4ED8\u6B3E\u3001\u5F80\u6765\u3001\u51ED\u8BC1\u3001\u8D26\u7C3F\u3001\u53D1\u7968\u548C\u7ECF\u8425\u6216\u8D22\u52A1\u62A5\u8868\uFF1BERP \u8FD8\u652F\u6301\u9500\u552E\u62A5\u4EF7\u3001\u4EF7\u683C\u8D44\u6599\u3001\u8BA2\u5355\u6C47\u603B\u3001\u5E93\u5B58\u8D26\u9F84\u3001\u6682\u4F30\u8C03\u6574\u548C\u5E94\u6536\u5E94\u4ED8\u9884\u8B66\u3002\u5BF9\u4E8E Action \u6587\u6863\u660E\u786E\u652F\u6301\u7684\u65B0\u589E\u3001\u4FEE\u6539\u3001\u63D0\u4EA4\u7B49\u5199\u64CD\u4F5C\uFF0C\u4EC5\u5728\u7528\u6237\u660E\u786E\u786E\u8BA4\u540E\u6267\u884C\u3002\u8C03\u7528\u524D\u5FC5\u987B\u5B8C\u6210 search\u3001show \u548C\u5168\u90E8\u6587\u6863\u8BFB\u53D6\uFF0C\u4E0D\u5F97\u731C\u6D4B\u53C2\u6570\uFF1B\u672C\u5DE5\u5177\u4E0D\u7528\u4E8E\u72EC\u7ACB\u5F00\u7968\u3002",
       inputSchema: z.object({
         product: productSchema,
-        action: z.string().min(1),
+        action: z.string().min(1).describe("\u5DF2\u901A\u8FC7 search\u3001show \u548C\u6587\u6863\u6838\u9A8C\u7684\u7CBE\u786E Action \u540D\u79F0\u3002"),
         payload: z.object({
-          query: z.record(z.string(), z.unknown()).optional(),
-          body: z.union([z.record(z.string(), z.unknown()), z.array(z.unknown())]).optional(),
-          _outputMode: z.enum(["basic", "full"]).optional(),
-          _extraDisplayFields: z.array(z.string().min(1)).min(1).optional()
-        }).strict(),
-        user_confirmed: z.boolean().default(false),
-        dry_run: z.boolean().default(false),
+          query: z.record(z.string(), z.unknown()).optional().describe("Action \u6587\u6863\u5B9A\u4E49\u7684 URL \u67E5\u8BE2\u53C2\u6570\uFF1B\u65E0\u53C2\u6570\u65F6\u6309\u6587\u6863\u8981\u6C42\u7701\u7565\u6216\u4F20\u7A7A\u5BF9\u8C61\u3002"),
+          body: z.union([z.record(z.string(), z.unknown()), z.array(z.unknown())]).optional().describe("Action \u6587\u6863\u5B9A\u4E49\u7684\u8BF7\u6C42\u4F53\uFF0C\u5FC5\u987B\u4FDD\u6301\u6587\u6863\u89C4\u5B9A\u7684\u5BF9\u8C61\u6216\u6570\u7EC4\u7ED3\u6784\u3002"),
+          _outputMode: z.enum(["basic", "full"]).optional().describe("\u6587\u6863\u5141\u8BB8\u65F6\u9009\u62E9\u57FA\u7840\u7ED3\u679C basic \u6216\u5B8C\u6574\u7ED3\u679C full\u3002"),
+          _extraDisplayFields: z.array(z.string().min(1)).min(1).optional().describe("\u7528\u6237\u660E\u786E\u8981\u6C42\u989D\u5916\u5C55\u793A\u4E14 Action \u6587\u6863\u652F\u6301\u7684\u5B57\u6BB5\u540D\u79F0\u3002")
+        }).strict().describe("\u4E25\u683C\u6309\u7167 Action \u6587\u6863\u6784\u9020\u7684\u5D4C\u5957 query/body \u8BF7\u6C42\u5305\u3002"),
+        user_confirmed: z.boolean().default(false).describe("\u53EA\u6709\u7528\u6237\u660E\u786E\u786E\u8BA4\u8BE5 Action \u6587\u6863\u6807\u6CE8\u7684\u5199\u64CD\u4F5C\u65F6\u624D\u80FD\u8BBE\u4E3A true\u3002"),
+        dry_run: z.boolean().default(false).describe("\u662F\u5426\u4EC5\u6821\u9A8C\u5E76\u9884\u6F14\uFF0C\u800C\u4E0D\u5B9E\u9645\u6267\u884C\u4E1A\u52A1\u8BF7\u6C42\u3002"),
         timeout_seconds: timeoutSchema
       }),
       annotations: {
@@ -5928,10 +5989,10 @@ function createLemonClawServer(options = {}) {
   server.registerTool(
     "lemon_invoice_read_doc",
     {
-      title: "Read Lemon independent-invoicing documentation",
-      description: "Read a Runtime document relative to the invoice directory. Start with SKILL.md, then read only the immediate, batch, or feedback flow and shared documents it directs you to.",
+      title: "\u8BFB\u53D6\u67E0\u6AAC\u4E91\u72EC\u7ACB\u5F00\u7968\u6587\u6863",
+      description: "\u8BFB\u53D6 LemonClaw Runtime \u72EC\u7ACB\u5F00\u7968\u76EE\u5F55\u5185\u7684\u56FA\u5B9A\u6D41\u7A0B\u6587\u6863\uFF0C\u53EA\u5141\u8BB8\u8BBF\u95EE\u8BE5\u76EE\u5F55\u4E2D\u7684 Markdown\u3001JSON \u6216\u6587\u672C\u6587\u4EF6\uFF0C\u4E0D\u80FD\u8BFB\u53D6\u4EFB\u610F\u672C\u5730\u6587\u4EF6\u3002\u5E94\u5148\u8BFB\u53D6 SKILL.md\uFF0C\u518D\u6309\u5176\u6307\u5F15\u8BFB\u53D6\u7ACB\u5373\u5F00\u7968\u3001\u6279\u91CF\u5F00\u7968\u3001\u95EE\u9898\u53CD\u9988\u53CA\u5171\u4EAB\u89C4\u5219\u6587\u6863\u3002",
       inputSchema: z.object({
-        path: z.string().min(1).describe("For example SKILL.md or references/immediate/flow.md")
+        path: z.string().min(1).describe("\u5F00\u7968\u76EE\u5F55\u5185\u7684\u76F8\u5BF9\u6587\u6863\u8DEF\u5F84\uFF0C\u4F8B\u5982 SKILL.md \u6216 references/immediate/flow.md\u3002")
       }),
       annotations: readOnlyAnnotations
     },
@@ -5947,8 +6008,8 @@ function createLemonClawServer(options = {}) {
   server.registerTool(
     "lemon_invoice_api",
     {
-      title: "Call the Lemon independent-invoicing API adapter",
-      description: "Execute one documented independent-invoicing operation with Runtime Python. Read and follow the invoice documents first. SkillInvoiceIssue is blocked unless user_confirmed is true and required context is supplied.",
+      title: "\u8C03\u7528\u67E0\u6AAC\u4E91\u72EC\u7ACB\u5F00\u7968\u63A5\u53E3",
+      description: "\u6309\u7167\u72EC\u7ACB\u5F00\u7968\u6D41\u7A0B\u6587\u6863\u8C03\u7528\u56FA\u5B9A\u7684\u5F00\u7968\u63A5\u53E3\uFF0C\u652F\u6301\u516C\u53F8\u548C\u5BA2\u6237\u67E5\u8BE2\u3001\u767B\u5F55\u4EFB\u52A1\u72B6\u6001\u3001\u7A0E\u5C40\u8BA4\u8BC1\u72B6\u6001\u3001\u5269\u4F59\u989D\u5EA6\u3001\u7A0E\u76EE\u89E3\u6790\u3001\u7A0E\u5C40\u8BA4\u8BC1\u94FE\u3001\u6B63\u5F0F\u5F00\u7968\u53CA\u95EE\u9898\u53CD\u9988\u3002\u8C03\u7528\u524D\u5FC5\u987B\u8BFB\u53D6\u5BF9\u5E94\u6D41\u7A0B\u6587\u6863\u3002\u6B63\u5F0F\u5F00\u7968\u4EC5\u5728\u7528\u6237\u660E\u786E\u786E\u8BA4\u4E14\u5FC5\u9700\u4E0A\u4E0B\u6587\u5B8C\u6574\u65F6\u6267\u884C\uFF1B\u4E0D\u5F97\u901A\u8FC7\u53C2\u6570\u4F20\u9012 API Key\u3001Token \u6216\u5176\u4ED6\u8BA4\u8BC1\u51ED\u636E\u3002",
       inputSchema: z.object({
         operation: z.enum([
           "CompanyFullList",
@@ -5962,7 +6023,7 @@ function createLemonClawServer(options = {}) {
           "TaxBureauAuthChain",
           "SkillInvoiceIssue",
           "FeedbackSubmit"
-        ]),
+        ]).describe("\u8981\u6267\u884C\u7684\u56FA\u5B9A\u5F00\u7968\u64CD\u4F5C\uFF0C\u5FC5\u987B\u6765\u81EA\u5DF2\u8BFB\u53D6\u7684\u5BF9\u5E94\u6D41\u7A0B\u6587\u6863\u3002"),
         eiscid: optionalText,
         filter_word: optionalText,
         company_name: optionalText,
@@ -5971,9 +6032,8 @@ function createLemonClawServer(options = {}) {
         uscic: optionalText,
         auth_company_id: optionalText,
         company_detail_id: optionalText,
-        payload: z.record(z.string(), z.unknown()).optional(),
-        payload_path: optionalText,
-        api_key_last_four: optionalText,
+        payload: z.record(z.string(), z.unknown()).optional().describe("\u5BF9\u5E94\u64CD\u4F5C\u6587\u6863\u5B9A\u4E49\u7684\u8BF7\u6C42\u6570\u636E\uFF0C\u4E0D\u5F97\u6DFB\u52A0\u8BA4\u8BC1\u51ED\u636E\u3002"),
+        payload_path: optionalText.describe("\u5BF9\u5E94\u6D41\u7A0B\u6587\u6863\u5141\u8BB8\u8BFB\u53D6\u7684\u672C\u5730\u8BF7\u6C42\u6570\u636E\u6587\u4EF6\u8DEF\u5F84\u3002"),
         ai_tool: optionalText,
         model: optionalText,
         feedback_contact: optionalText,
@@ -5984,7 +6044,7 @@ function createLemonClawServer(options = {}) {
         message_id: optionalText,
         context: optionalText,
         upload_file_path: optionalText,
-        user_confirmed: z.boolean().default(false),
+        user_confirmed: z.boolean().default(false).describe("\u4EC5\u5728\u7528\u6237\u660E\u786E\u786E\u8BA4\u6B63\u5F0F\u5F00\u7968\u6216\u6587\u6863\u6807\u6CE8\u7684\u5199\u64CD\u4F5C\u540E\u8BBE\u4E3A true\u3002"),
         timeout_seconds: timeoutSchema
       }),
       annotations: {
@@ -6005,12 +6065,12 @@ function createLemonClawServer(options = {}) {
   server.registerTool(
     "lemon_invoice_run_helper",
     {
-      title: "Run a Lemon independent-invoicing helper",
-      description: "Run one whitelisted Runtime helper for invoice file parsing, validation, preview generation, preview serving, customer lookup, or customer-service output. Arguments must come from the invoice documents.",
+      title: "\u8FD0\u884C\u67E0\u6AAC\u4E91\u72EC\u7ACB\u5F00\u7968\u8F85\u52A9\u7A0B\u5E8F",
+      description: "\u8FD0\u884C\u72EC\u7ACB\u5F00\u7968\u6D41\u7A0B\u5185\u7F6E\u7684\u56FA\u5B9A\u767D\u540D\u5355\u8F85\u52A9\u7A0B\u5E8F\uFF0C\u7528\u4E8E Excel \u6216\u6570\u636E\u6587\u4EF6\u89E3\u6790\u3001JSON \u6821\u9A8C\u3001\u53D1\u7968\u9884\u89C8\u751F\u6210\u3001\u9884\u89C8\u670D\u52A1\u3001\u5BA2\u6237\u67E5\u8BE2\u53CA\u5BA2\u670D\u4FE1\u606F\u8F93\u51FA\u3002\u672C\u5DE5\u5177\u4E0D\u80FD\u6267\u884C\u4EFB\u610F\u7CFB\u7EDF\u547D\u4EE4\u3001\u4EFB\u610F Python \u811A\u672C\u6216\u767D\u540D\u5355\u4E4B\u5916\u7684\u7A0B\u5E8F\uFF1Boperation \u548C\u53C2\u6570\u5FC5\u987B\u6765\u81EA\u5DF2\u8BFB\u53D6\u7684\u5F00\u7968\u6D41\u7A0B\u6587\u6863\u3002",
       inputSchema: z.object({
-        operation: z.enum(invoiceHelperNames),
-        arguments: z.array(z.string()).max(30).default([]),
-        stdin: z.string().optional(),
+        operation: z.enum(invoiceHelperNames).describe("\u8981\u8FD0\u884C\u7684\u767D\u540D\u5355\u8F85\u52A9\u64CD\u4F5C\uFF0C\u5FC5\u987B\u6765\u81EA\u5DF2\u8BFB\u53D6\u7684\u5F00\u7968\u6D41\u7A0B\u6587\u6863\u3002"),
+        arguments: z.array(z.string()).max(30).default([]).describe("\u6309\u5BF9\u5E94\u6D41\u7A0B\u6587\u6863\u987A\u5E8F\u63D0\u4F9B\u7684\u8F85\u52A9\u7A0B\u5E8F\u53C2\u6570\uFF0C\u6700\u591A 30 \u9879\u3002"),
+        stdin: z.string().optional().describe("\u4EC5\u5728\u5BF9\u5E94\u6D41\u7A0B\u6587\u6863\u8981\u6C42\u65F6\u4F20\u5165\u7684\u6807\u51C6\u8F93\u5165\u6587\u672C\u3002"),
         timeout_seconds: timeoutSchema
       }),
       annotations: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@lemonbeijing/lemonclaw-mcp-service",
-  "version": "0.1.2",
-  "description": "Local stdio MCP service for LemonClaw portable Runtime.",
+  "version": "0.1.3",
+  "description": "用于查询和操作柠檬云 Lemon Cloud 业务数据的 MCP 服务，覆盖账套、进销存 SCM、业财 ERP、财务 ACC 和独立开票；支持客户、供应商、商品、仓库、采购、销售、库存、收付款、往来、凭证、账簿、发票及经营与财务报表，并支持立即开票、批量开票和问题反馈。",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {