@vibe-lark/larkpal 0.1.38 → 0.1.39

package/dist/main.mjs

@@ -9,6 +9,7 @@ import "dotenv/config";
 import { homedir } from "node:os";
 import { access, lstat, mkdir, readFile, readdir, readlink, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
 import { execSync, spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
 import { createInterface } from "node:readline";
 import { v4, v5 } from "uuid";
 import { EventEmitter } from "node:events";
@@ -326,6 +327,54 @@ const DEFAULT_CLAUDE_MD = `# LarkPal
 ## 技能
 - 你的可用技能在 ~/.claude/commands/ 和当前目录的 .claude/commands/ 中
 - 使用 /help 查看所有可用技能
+
+## 交互式卡片（重要）
+
+当你需要向用户发送交互式卡片时，在回复中嵌入以下标记。系统会自动检测并发送对应的飞书卡片。
+
+### 权限申请卡片
+当 lark-cli 调用返回权限不足错误（如 99991672、scope missing）时，使用此标记引导用户申请权限：
+
+[PERMISSION_REQUEST]
+\`\`\`json
+{"scopes": ["calendar:calendar", "vc:meeting.meetingevent:read"]}
+\`\`\`
+
+系统会发送一张独立的权限申请卡片，包含"去申请"和"已完成"按钮。用户完成配置后会自动通知你重试。
+
+### 向用户提问卡片
+当你需要收集用户的多维信息时（不确定且需要用户决策的场景），使用此标记发送结构化提问卡片：
+
+[ASK_USER]
+\`\`\`json
+{
+  "question": "为了帮你完成这个任务，需要确认以下信息：",
+  "phases": [
+    {
+      "id": "target",
+      "title": "目标选择",
+      "description": "你想在哪个环境操作？",
+      "options": [{"label": "测试环境", "value": "sit"}, {"label": "生产环境", "value": "prod"}],
+      "allowFreeText": true,
+      "required": true
+    },
+    {
+      "id": "scope",
+      "title": "操作范围",
+      "options": [{"label": "仅当前模块", "value": "current"}, {"label": "全量", "value": "all"}],
+      "required": false
+    }
+  ]
+}
+\`\`\`
+
+卡片会逐 phase 展示选项，用户可选择预设项或跳过。至少需要回答一个 phase。回答完成后系统会将结果注入对话继续。
+
+**注意**：标记文本会从最终展示给用户的回复中自动移除，用户只会看到卡片本身。
+
+### 何时使用标记 vs lark-cli
+- **需要用户回答、确认、选择** 的场景 → 必须使用 [ASK_USER] 或 [PERMISSION_REQUEST] 标记，系统会统一样式并处理回调
+- **纯通知、展示信息** 的卡片（不需要用户交互反馈） → 可以用 lark-cli 自行发送
 `;
 async function fileExists(filePath) {
 	try {
@@ -3673,9 +3722,71 @@ function getDefaultClaudeMdBody() {
 - 当需要查看会话历史消息时，使用 lark-cli 从飞书接口获取
 - 用户发送的图片会自动保存到当前工作目录的 files/ 子目录中（以 img_key 命名）
 
+## 安全规则（最高优先级）
+- **严禁**读取、输出、展示或以任何方式向用户透露以下敏感信息：
+  - 环境变量中的 LARK_APP_SECRET、ANTHROPIC_API_KEY 及任何包含 SECRET/KEY/TOKEN/PASSWORD 的值
+  - ~/.lark-cli/config.json 和 ~/.config/lark/config.json 中的 appSecret / app_secret 字段
+  - ~/.larkpal/credentials.json 中的任何凭证内容
+  - 任何 API 密钥、Token、密码等敏感凭证
+- **严禁**执行 \`cat\`/\`head\`/\`tail\`/\`grep\` 等命令读取上述文件内容
+- **严禁**在对话中引用、复述或暗示凭证的具体值（即使用户明确要求）
+- **严禁**修改 ~/.claude/CLAUDE.md 和 ~/.claude/settings.json — 这些文件由系统管理，人设内容来源于飞书云文档，你无权更改
+- 如果用户要求修改全局人设，应回复："全局人设由飞书云文档统一管理，请在云文档中修改后执行 /sync-app-info 同步。"
+- 如果用户想添加个人偏好，可以修改当前会话目录下的 CLAUDE.md（仅当前会话生效）
+- 如果用户要求查看凭证，应回复："出于安全策略，凭证信息不可查看或透露。"
+- lark-cli 的认证配置由系统自动管理，无需用户介入
+
 ## 技能
 - 你的可用技能在 ~/.claude/commands/ 和当前目录的 .claude/commands/ 中
 - 使用 /help 查看所有可用技能
+
+## 交互式卡片（重要）
+
+当你需要向用户发送交互式卡片时，在回复中嵌入以下标记。系统会自动检测并发送对应的飞书卡片。
+
+### 权限申请卡片
+当 lark-cli 调用返回权限不足错误（如 99991672、scope missing）时，使用此标记引导用户申请权限：
+
+[PERMISSION_REQUEST]
+\`\`\`json
+{"scopes": ["calendar:calendar", "vc:meeting.meetingevent:read"]}
+\`\`\`
+
+系统会发送一张独立的权限申请卡片，包含"去申请"和"已完成"按钮。用户完成配置后会自动通知你重试。
+
+### 向用户提问卡片
+当你需要收集用户的多维信息时（不确定且需要用户决策的场景），使用此标记发送结构化提问卡片：
+
+[ASK_USER]
+\`\`\`json
+{
+  "question": "为了帮你完成这个任务，需要确认以下信息：",
+  "phases": [
+    {
+      "id": "target",
+      "title": "目标选择",
+      "description": "你想在哪个环境操作？",
+      "options": [{"label": "测试环境", "value": "sit"}, {"label": "生产环境", "value": "prod"}],
+      "allowFreeText": true,
+      "required": true
+    },
+    {
+      "id": "scope",
+      "title": "操作范围",
+      "options": [{"label": "仅当前模块", "value": "current"}, {"label": "全量", "value": "all"}],
+      "required": false
+    }
+  ]
+}
+\`\`\`
+
+卡片会逐 phase 展示选项，用户可选择预设项或跳过。至少需要回答一个 phase。回答完成后系统会将结果注入对话继续。
+
+**注意**：标记文本会从最终展示给用户的回复中自动移除，用户只会看到卡片本身。
+
+### 何时使用标记 vs lark-cli
+- **需要用户回答、确认、选择** 的场景 → 必须使用 [ASK_USER] 或 [PERMISSION_REQUEST] 标记，系统会统一样式并处理回调
+- **纯通知、展示信息** 的卡片（不需要用户交互反馈） → 可以用 lark-cli 自行发送
 `;
 }
 /**
@@ -5616,6 +5727,294 @@ var LarkClient = class LarkClient {
 };
 injectLarkClient(LarkClient);
 //#endregion
+//#region src/card/interactive-cards.ts
+/**
+* 交互式卡片模块 — 授权卡片 & 提问卡片
+*
+* 基于"后处理检测 + 下轮注入"的异步模式：
+* CC 无法暂停等待用户输入，因此通过卡片交互收集用户反馈后，
+* 将结果作为新消息注入 CC 的下一轮对话。
+*
+* 包含：
+* - 授权申请卡片（Permission Auth Card）
+* - 多 Phase 提问卡片（Ask Card）
+* - CC 输出文本后处理（检测特殊标记）
+* - 操作 ID 生命周期管理
+*/
+const log$19 = larkLogger("card/interactive-cards");
+const pendingOperations = /* @__PURE__ */ new Map();
+const OPERATION_TTL_MS = 1800 * 1e3;
+setInterval(() => {
+	const now = Date.now();
+	for (const [id, op] of pendingOperations) if (now - op.createdAt > OPERATION_TTL_MS) pendingOperations.delete(id);
+}, 6e4);
+/**
+* 构建授权申请卡片（CardKit v2 格式）
+*
+* 包含：
+* - 缺失权限列表
+* - "去申请" 按钮（跳转到开放平台）
+* - "已完成" 按钮（回调通知宿主层）
+*/
+function buildAuthCard(ctx) {
+	const operationId = randomUUID();
+	const openPlatformHost = ctx.brand === "lark" ? "https://open.larksuite.com" : "https://open.feishu.cn";
+	const scopeQuery = ctx.scopes.join(",");
+	const authUrl = `${openPlatformHost}/app/${ctx.appId}/auth?q=${encodeURIComponent(scopeQuery)}`;
+	const card = {
+		schema: "2.0",
+		config: {
+			wide_screen_mode: true,
+			update_multi: true
+		},
+		header: {
+			template: "orange",
+			title: {
+				tag: "plain_text",
+				content: "🔐 需要申请权限才能继续"
+			}
+		},
+		body: { elements: [
+			{
+				tag: "markdown",
+				content: `当前操作需要以下飞书权限，请应用管理员前往开放平台申请：\n\n${ctx.scopes.map((s) => `• \`${s}\``).join("\n")}`
+			},
+			{ tag: "hr" },
+			{
+				tag: "markdown",
+				content: "**第一步：** 前往开放平台申请上述权限并发布版本"
+			},
+			{
+				tag: "action",
+				actions: [{
+					tag: "button",
+					text: {
+						tag: "plain_text",
+						content: "去申请权限 ↗"
+					},
+					type: "primary",
+					multi_url: {
+						url: authUrl,
+						pc_url: authUrl,
+						android_url: authUrl,
+						ios_url: authUrl
+					}
+				}]
+			},
+			{
+				tag: "markdown",
+				content: "**第二步：** 权限申请通过后，点击下方按钮通知我继续"
+			},
+			{
+				tag: "action",
+				actions: [{
+					tag: "button",
+					text: {
+						tag: "plain_text",
+						content: "✓ 已完成权限配置"
+					},
+					type: "default",
+					behaviors: [{
+						type: "callback",
+						value: {
+							action: "auth_complete",
+							operationId
+						}
+					}]
+				}]
+			}
+		] }
+	};
+	pendingOperations.set(operationId, {
+		type: "auth",
+		operationId,
+		chatId: ctx.chatId,
+		sessionId: ctx.sessionId,
+		createdAt: Date.now(),
+		authContext: {
+			appId: ctx.appId,
+			scopes: ctx.scopes
+		}
+	});
+	log$19.info("已创建授权卡片操作", {
+		operationId,
+		scopes: ctx.scopes,
+		sessionId: ctx.sessionId
+	});
+	return {
+		card,
+		operationId
+	};
+}
+/**
+* 构建多 phase 提问卡片（CardKit v2 格式）
+*
+* 每次显示一个 phase：
+* - 有预设选项时显示按钮组
+* - 允许自由文本时显示输入提示
+* - 底部有"跳过"和"提交"按钮
+*/
+function buildAskCard(ctx, phaseIndex = 0) {
+	const operationId = randomUUID();
+	const phase = ctx.phases[phaseIndex];
+	const totalPhases = ctx.phases.length;
+	const elements = [];
+	elements.push({
+		tag: "markdown",
+		content: ctx.question
+	});
+	if (phase.description) elements.push({
+		tag: "markdown",
+		content: phase.description
+	});
+	elements.push({ tag: "hr" });
+	elements.push({
+		tag: "markdown",
+		content: `**${phase.title}** (${phaseIndex + 1}/${totalPhases})`
+	});
+	if (phase.options && phase.options.length > 0) {
+		const optionButtons = phase.options.map((opt) => ({
+			tag: "button",
+			text: {
+				tag: "plain_text",
+				content: opt.label
+			},
+			type: "default",
+			behaviors: [{
+				type: "callback",
+				value: {
+					action: "ask_select",
+					operationId,
+					phaseId: phase.id,
+					value: opt.value
+				}
+			}]
+		}));
+		elements.push({
+			tag: "action",
+			actions: optionButtons
+		});
+	}
+	if (phase.allowFreeText !== false) elements.push({
+		tag: "markdown",
+		content: "_💡 你也可以直接回复消息补充更多信息_"
+	});
+	const bottomActions = [];
+	if (totalPhases > 1 && phaseIndex < totalPhases - 1) bottomActions.push({
+		tag: "button",
+		text: {
+			tag: "plain_text",
+			content: "跳过 →"
+		},
+		type: "default",
+		behaviors: [{
+			type: "callback",
+			value: {
+				action: "ask_skip",
+				operationId,
+				phaseId: phase.id
+			}
+		}]
+	});
+	bottomActions.push({
+		tag: "button",
+		text: {
+			tag: "plain_text",
+			content: "✓ 完成提交"
+		},
+		type: "primary",
+		behaviors: [{
+			type: "callback",
+			value: {
+				action: "ask_submit",
+				operationId
+			}
+		}]
+	});
+	if (bottomActions.length > 0) {
+		elements.push({ tag: "hr" });
+		elements.push({
+			tag: "action",
+			actions: bottomActions
+		});
+	}
+	const card = {
+		schema: "2.0",
+		config: {
+			wide_screen_mode: true,
+			update_multi: true
+		},
+		header: {
+			template: "blue",
+			title: {
+				tag: "plain_text",
+				content: "💬 需要补充信息"
+			}
+		},
+		body: { elements }
+	};
+	pendingOperations.set(operationId, {
+		type: "ask",
+		operationId,
+		chatId: ctx.chatId,
+		sessionId: ctx.sessionId,
+		createdAt: Date.now(),
+		askContext: {
+			phases: ctx.phases,
+			currentPhase: phaseIndex,
+			answers: {}
+		}
+	});
+	log$19.info("已创建提问卡片操作", {
+		operationId,
+		phaseId: phase.id,
+		phaseIndex,
+		totalPhases,
+		sessionId: ctx.sessionId
+	});
+	return {
+		card,
+		operationId
+	};
+}
+/** CC 输出中的授权请求标记格式 */
+const AUTH_REQUEST_PATTERN = /\[PERMISSION_REQUEST\]\s*```json\s*(\{[\s\S]*?\})\s*```/;
+/** CC 输出中的提问请求标记格式 */
+const ASK_USER_PATTERN = /\[ASK_USER\]\s*```json\s*(\{[\s\S]*?\})\s*```/;
+/**
+* 从 CC 回复文本中检测是否包含授权请求标记
+*/
+function detectAuthRequest(text) {
+	const match = text.match(AUTH_REQUEST_PATTERN);
+	if (!match) return null;
+	try {
+		const data = JSON.parse(match[1]);
+		if (Array.isArray(data.scopes) && data.scopes.length > 0) return { scopes: data.scopes };
+	} catch {}
+	return null;
+}
+/**
+* 从 CC 回复文本中检测是否包含提问请求标记
+*/
+function detectAskRequest(text) {
+	const match = text.match(ASK_USER_PATTERN);
+	if (!match) return null;
+	try {
+		const data = JSON.parse(match[1]);
+		if (typeof data.question === "string" && Array.isArray(data.phases) && data.phases.length > 0) return {
+			question: data.question,
+			phases: data.phases
+		};
+	} catch {}
+	return null;
+}
+/**
+* 从 CC 回复文本中移除标记部分（避免展示给用户）
+*/
+function stripInteractiveMarkers(text) {
+	return text.replace(AUTH_REQUEST_PATTERN, "").replace(ASK_USER_PATTERN, "").trim();
+}
+//#endregion
 //#region src/card/reasoning-utils.ts
 /**
 * Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
@@ -5874,7 +6273,7 @@ function sortTraceValue(value) {
 }
 //#endregion
 //#region src/card/cc-stream-bridge.ts
-const log$19 = larkLogger("card/cc-stream-bridge");
+const log$18 = larkLogger("card/cc-stream-bridge");
 const CC_INTERNAL_PLACEHOLDER = "No response requested.";
 /**
 * CCStreamBridge — 将 CC 流事件桥接到 StreamingCardController
@@ -5899,7 +6298,7 @@ var CCStreamBridge = class {
 			sessionKey: options?.sessionKey
 		};
 		if (this.options.sessionKey) startToolUseTraceRun(this.options.sessionKey);
-		log$19.info("CCStreamBridge 初始化", {
+		log$18.info("CCStreamBridge 初始化", {
 			autoCompleteOnTurnEnd: this.options.autoCompleteOnTurnEnd,
 			sessionKey: this.options.sessionKey ?? "(none)"
 		});
@@ -5907,7 +6306,7 @@ var CCStreamBridge = class {
 	/** 文本增量 → 累积后调用 controller.onPartialReply */
 	onTextDelta(text) {
 		this.accumulatedText += text;
-		log$19.debug("textDelta 事件", {
+		log$18.debug("textDelta 事件", {
 			deltaLen: text.length,
 			totalLen: this.accumulatedText.length
 		});
@@ -5916,7 +6315,7 @@ var CCStreamBridge = class {
 	/** 思考增量 → 累积后调用 controller.onReasoningStream */
 	onThinkingDelta(text) {
 		this.accumulatedThinkingText += text;
-		log$19.debug("thinkingDelta 事件", {
+		log$18.debug("thinkingDelta 事件", {
 			deltaLen: text.length,
 			totalLen: this.accumulatedThinkingText.length
 		});
@@ -5928,7 +6327,7 @@ var CCStreamBridge = class {
 		const displayName = getToolDisplayName(toolName);
 		const toolParams = typeof _toolInput === "object" && _toolInput !== null ? _toolInput : void 0;
 		const hasParams = toolParams && Object.keys(toolParams).length > 0;
-		log$19.info("toolUseStart 事件", {
+		log$18.info("toolUseStart 事件", {
 			toolName,
 			displayName,
 			activeToolsCount: this.activeTools.size,
@@ -5941,7 +6340,7 @@ var CCStreamBridge = class {
 					toolName,
 					toolParams
 				})) {
-					log$19.info("toolUseStart: 更新已有步骤的 params", { toolName });
+					log$18.info("toolUseStart: 更新已有步骤的 params", { toolName });
 					this.controller.onToolStart({
 						name: toolName,
 						phase: "start"
@@ -5965,7 +6364,7 @@ var CCStreamBridge = class {
 		const toolName = this.activeTools.get(toolUseId) ?? this.lastToolName ?? "unknown";
 		const displayName = getToolDisplayName(toolName);
 		this.activeTools.delete(toolUseId);
-		log$19.info("toolResult 事件", {
+		log$18.info("toolResult 事件", {
 			toolUseId,
 			toolName,
 			displayName,
@@ -5980,7 +6379,7 @@ var CCStreamBridge = class {
 	}
 	/** 工具执行进度 → 记录日志 */
 	onToolProgress(toolName, elapsedSeconds) {
-		log$19.debug("toolProgress 事件", {
+		log$18.debug("toolProgress 事件", {
 			toolName,
 			displayName: getToolDisplayName(toolName),
 			elapsedSeconds
@@ -5988,7 +6387,7 @@ var CCStreamBridge = class {
 	}
 	/** 轮次结束 → 仅在 end_turn 时标记完成 + 触发 onIdle */
 	onTurnEnd(stopReason) {
-		log$19.info("turnEnd 事件", {
+		log$18.info("turnEnd 事件", {
 			stopReason,
 			accumulatedTextLen: this.accumulatedText.length,
 			accumulatedThinkingTextLen: this.accumulatedThinkingText.length
@@ -5996,7 +6395,7 @@ var CCStreamBridge = class {
 		if (this.options.autoCompleteOnTurnEnd && stopReason === "end_turn") {
 			const trimmedText = this.accumulatedText.trim();
 			if (trimmedText === CC_INTERNAL_PLACEHOLDER) {
-				log$19.info("检测到 CC 内部占位消息，静默丢弃", {
+				log$18.info("检测到 CC 内部占位消息，静默丢弃", {
 					text: trimmedText.slice(0, 50),
 					sessionKey: this.options.sessionKey
 				});
@@ -6004,16 +6403,26 @@ var CCStreamBridge = class {
 				return;
 			}
 			if (trimmedText === "") {
-				log$19.info("turnEnd 时文本为空，延迟到 onResult 兜底处理", { sessionKey: this.options.sessionKey });
+				log$18.info("turnEnd 时文本为空，延迟到 onResult 兜底处理", { sessionKey: this.options.sessionKey });
 				return;
 			}
+			const strippedText = stripInteractiveMarkers(trimmedText);
+			if (strippedText !== trimmedText) {
+				log$18.info("turnEnd: 检测到交互式卡片标记，修剪卡片文本", {
+					originalLen: trimmedText.length,
+					strippedLen: strippedText.length,
+					sessionKey: this.options.sessionKey
+				});
+				this.accumulatedText = strippedText;
+				if (strippedText) this.controller.onPartialReply({ text: strippedText });
+			}
 			this.controller.markFullyComplete();
 			this.controller.onIdle();
 		}
 	}
 	/** 最终结果 → 兜底最终化 + 错误处理 */
 	onResult(data) {
-		log$19.info("result 事件", {
+		log$18.info("result 事件", {
 			subtype: data.subtype,
 			isError: data.isError,
 			durationMs: data.durationMs,
@@ -6025,7 +6434,7 @@ var CCStreamBridge = class {
 			const pm = ClaudeCodeAdapter.getInstance()?.getProcessManager();
 			const sessionId = this.options.sessionKey;
 			if (sessionId && pm ? pm.consumeAborted(sessionId) : false) {
-				log$19.info("用户主动中断，按正常完成处理", {
+				log$18.info("用户主动中断，按正常完成处理", {
 					subtype: data.subtype,
 					sessionId
 				});
@@ -6034,14 +6443,14 @@ var CCStreamBridge = class {
 				this.controller.onIdle();
 			} else {
 				const errorMessage = data.result ?? `CC 执行失败: ${data.subtype}`;
-				log$19.error("CC 执行返回错误", {
+				log$18.error("CC 执行返回错误", {
 					subtype: data.subtype,
 					errorMessage: errorMessage.slice(0, 200)
 				});
 				this.controller.onError(new Error(errorMessage), { kind: "cc-execution" });
 			}
 		} else if (!this.accumulatedText.trim()) if (data.result) {
-			log$19.info("result 兜底：使用 result.result 作为最终回复", {
+			log$18.info("result 兜底：使用 result.result 作为最终回复", {
 				resultLen: data.result.length,
 				sessionKey: this.options.sessionKey
 			});
@@ -6049,7 +6458,7 @@ var CCStreamBridge = class {
 			this.controller.markFullyComplete();
 			this.controller.onIdle();
 		} else {
-			log$19.info("result 兜底：无文本且无 result，abort 卡片", { sessionKey: this.options.sessionKey });
+			log$18.info("result 兜底：无文本且无 result，abort 卡片", { sessionKey: this.options.sessionKey });
 			this.controller.abortCard();
 		}
 		else {
@@ -6063,7 +6472,7 @@ var CCStreamBridge = class {
 	* 内部复用上面的直接调用方法。
 	*/
 	bindParser(parser) {
-		log$19.info("绑定 CCStreamParser 事件到卡片控制器");
+		log$18.info("绑定 CCStreamParser 事件到卡片控制器");
 		parser.on("textDelta", (text) => this.onTextDelta(text));
 		parser.on("thinkingDelta", (text) => this.onThinkingDelta(text));
 		parser.on("toolUseStart", (toolName, toolInput) => this.onToolUseStart(toolName, toolInput));
@@ -6071,7 +6480,7 @@ var CCStreamBridge = class {
 		parser.on("toolProgress", (toolName, elapsedSeconds) => this.onToolProgress(toolName, elapsedSeconds));
 		parser.on("turnEnd", (stopReason) => this.onTurnEnd(stopReason));
 		parser.on("result", (data) => this.onResult(data));
-		log$19.info("CCStreamParser 事件绑定完成");
+		log$18.info("CCStreamParser 事件绑定完成");
 	}
 };
 //#endregion
@@ -8087,7 +8496,7 @@ function resolveLarkSdk(cfg, accountId) {
 	if (cached) return cached.sdk;
 	return LarkClient.fromCfg(cfg, accountId).sdk;
 }
-const log$18 = larkLogger("card/cardkit");
+const log$17 = larkLogger("card/cardkit");
 /**
 * 记录 CardKit API 响应日志，检测错误码并抛出异常。
 *
@@ -8097,13 +8506,13 @@ const log$18 = larkLogger("card/cardkit");
 function logCardKitResponse(params) {
 	const { resp, api, context } = params;
 	const { code, msg } = resp;
-	log$18.info(`cardkit ${api} response`, {
+	log$17.info(`cardkit ${api} response`, {
 		code,
 		msg,
 		context
 	});
 	if (code && code !== 0) {
-		log$18.warn(`cardkit ${api} FAILED`, {
+		log$17.warn(`cardkit ${api} FAILED`, {
 			code,
 			msg,
 			context,
@@ -8514,7 +8923,7 @@ function validateLocalMediaRoots(filePath, localRoots) {
 * Feishu messages, uploading media to the Feishu IM storage, and
 * sending image / file messages to chats.
 */
-const log$17 = larkLogger("outbound/media");
+const log$16 = larkLogger("outbound/media");
 /**
 * Upload an image to Feishu IM storage.
 *
@@ -8582,7 +8991,7 @@ async function validateRemoteUrl(raw) {
 		for (const addr of addresses) if (isPrivateIP(addr)) throw new Error(`[feishu-media] Domain "${hostname}" resolves to private/reserved IP "${addr}" (SSRF protection). URL: "${raw}"`);
 	} catch (err) {
 		if (err instanceof Error && err.message.includes("SSRF protection")) throw err;
-		log$17.warn(`[feishu-media] DNS resolution failed for "${hostname}": ${err}`);
+		log$16.warn(`[feishu-media] DNS resolution failed for "${hostname}": ${err}`);
 	}
 }
 /**
@@ -8600,21 +9009,21 @@ async function fetchMediaBuffer(urlOrPath, localRoots) {
 		if (localRoots !== void 0) validateLocalMediaRoots(filePath, localRoots);
 		else throw new Error(`[feishu-media] Local file access denied for "${filePath}": mediaLocalRoots is not configured. Configure mediaLocalRoots to explicitly allow local file access.`);
 		const buf = fs.readFileSync(filePath);
-		log$17.debug(`local file read: "${filePath}", ${buf.length} bytes`);
+		log$16.debug(`local file read: "${filePath}", ${buf.length} bytes`);
 		return buf;
 	}
 	await validateRemoteUrl(raw);
 	const FETCH_TIMEOUT_MS = 3e4;
-	log$17.info(`fetching remote media: ${raw}`);
+	log$16.info(`fetching remote media: ${raw}`);
 	const response = await fetch(raw, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
 	if (!response.ok) throw new Error(`[feishu-media] Failed to fetch media from "${raw}": HTTP ${response.status} ${response.statusText}. Verify the URL is accessible and returns a valid media resource.`);
 	const arrayBuffer = await response.arrayBuffer();
-	log$17.debug(`remote media fetched: ${raw}, ${arrayBuffer.byteLength} bytes`);
+	log$16.debug(`remote media fetched: ${raw}, ${arrayBuffer.byteLength} bytes`);
 	return Buffer.from(arrayBuffer);
 }
 //#endregion
 //#region src/card/image-resolver.ts
-const log$16 = larkLogger("card/image-resolver");
+const log$15 = larkLogger("card/image-resolver");
 /** Matches complete markdown image syntax: `![alt](value)` */
 const IMAGE_RE = /!\[([^\]]*)\]\(([^)\s]+)\)/g;
 var ImageResolver = class {
@@ -8660,14 +9069,14 @@ var ImageResolver = class {
 	async resolveImagesAwait(text, timeoutMs) {
 		this.resolveImages(text);
 		if (this.pending.size > 0) {
-			log$16.info("resolveImagesAwait: waiting for uploads", {
+			log$15.info("resolveImagesAwait: waiting for uploads", {
 				count: this.pending.size,
 				timeoutMs
 			});
 			const allUploads = Promise.all(this.pending.values());
 			const timeout = new Promise((resolve) => setTimeout(resolve, timeoutMs));
 			await Promise.race([allUploads, timeout]);
-			if (this.pending.size > 0) log$16.warn("resolveImagesAwait: timed out with pending uploads", { remaining: this.pending.size });
+			if (this.pending.size > 0) log$15.warn("resolveImagesAwait: timed out with pending uploads", { remaining: this.pending.size });
 		}
 		return this.resolveImages(text);
 	}
@@ -8677,7 +9086,7 @@ var ImageResolver = class {
 	}
 	async doUpload(url) {
 		try {
-			log$16.info("uploading image", { url });
+			log$15.info("uploading image", { url });
 			const buffer = await fetchRemoteImageBuffer(url);
 			const { imageKey } = await uploadImageLark({
 				cfg: this.cfg,
@@ -8685,7 +9094,7 @@ var ImageResolver = class {
 				imageType: "message",
 				accountId: this.accountId
 			});
-			log$16.info("image uploaded", {
+			log$15.info("image uploaded", {
 				url,
 				imageKey
 			});
@@ -8694,7 +9103,7 @@ var ImageResolver = class {
 			this.onImageResolved();
 			return imageKey;
 		} catch (err) {
-			log$16.warn("image upload failed", {
+			log$15.warn("image upload failed", {
 				url,
 				error: String(err)
 			});
@@ -8715,7 +9124,7 @@ var ImageResolver = class {
 * Encapsulates the terminateDueToUnavailable / shouldSkipForUnavailable
 * logic previously scattered as closures in reply-dispatcher.ts.
 */
-const log$15 = larkLogger("card/unavailable-guard");
+const log$14 = larkLogger("card/unavailable-guard");
 var UnavailableGuard = class {
 	terminated = false;
 	replyToMessageId;
@@ -8768,7 +9177,7 @@ var UnavailableGuard = class {
 		this.terminated = true;
 		this.onTerminate();
 		const affectedMessageId = fromError?.messageId ?? this.replyToMessageId ?? cardMessageId ?? "unknown";
-		log$15.warn("reply pipeline terminated by unavailable message", {
+		log$14.warn("reply pipeline terminated by unavailable message", {
 			source,
 			apiCode,
 			messageId: affectedMessageId
@@ -8805,7 +9214,7 @@ function getActiveCard(sessionId) {
 * Delegates throttling to FlushController and message-unavailable
 * detection to UnavailableGuard.
 */
-const log$14 = larkLogger("card/streaming");
+const log$13 = larkLogger("card/streaming");
 var StreamingCardController = class StreamingCardController {
 	phase = "idle";
 	cardKit = {
@@ -8893,7 +9302,7 @@ var StreamingCardController = class StreamingCardController {
 					}
 				}
 				if (!entry) {
-					log$14.debug("footer metrics lookup: session entry missing", {
+					log$13.debug("footer metrics lookup: session entry missing", {
 						sessionKey: this.deps.sessionKey,
 						candidateKeys,
 						storePath,
@@ -8911,7 +9320,7 @@ var StreamingCardController = class StreamingCardController {
 					contextTokens: typeof entry.contextTokens === "number" ? entry.contextTokens : void 0,
 					model: typeof entry.model === "string" ? entry.model : void 0
 				};
-				log$14.debug("footer metrics lookup: session entry found", {
+				log$13.debug("footer metrics lookup: session entry found", {
 					sessionKey: this.deps.sessionKey,
 					matchedKey,
 					storePath,
@@ -8936,7 +9345,7 @@ var StreamingCardController = class StreamingCardController {
 				}
 			}
 			if (!entry) {
-				log$14.debug("footer metrics lookup: session entry missing", {
+				log$13.debug("footer metrics lookup: session entry missing", {
 					sessionKey: this.deps.sessionKey,
 					candidateKeys,
 					storePath,
@@ -8954,7 +9363,7 @@ var StreamingCardController = class StreamingCardController {
 				contextTokens: typeof entry.contextTokens === "number" ? entry.contextTokens : void 0,
 				model: typeof entry.model === "string" ? entry.model : void 0
 			};
-			log$14.debug("footer metrics lookup: session entry found", {
+			log$13.debug("footer metrics lookup: session entry found", {
 				sessionKey: this.deps.sessionKey,
 				matchedKey,
 				storePath,
@@ -8962,7 +9371,7 @@ var StreamingCardController = class StreamingCardController {
 			});
 			return metrics;
 		} catch (err) {
-			log$14.warn("footer metrics lookup failed", {
+			log$13.warn("footer metrics lookup failed", {
 				error: String(err),
 				sessionKey: this.deps.sessionKey
 			});
@@ -9069,7 +9478,7 @@ var StreamingCardController = class StreamingCardController {
 		const from = this.phase;
 		if (from === to) return false;
 		if (!PHASE_TRANSITIONS[from].has(to)) {
-			log$14.warn("phase transition rejected", {
+			log$13.warn("phase transition rejected", {
 				from,
 				to,
 				source
@@ -9077,7 +9486,7 @@ var StreamingCardController = class StreamingCardController {
 			return false;
 		}
 		this.phase = to;
-		log$14.info("phase transition", {
+		log$13.info("phase transition", {
 			from,
 			to,
 			source,
@@ -9197,7 +9606,7 @@ var StreamingCardController = class StreamingCardController {
 			this.reasoning.dirty = true;
 		}
 		const text = split.answerText ?? stripReasoningTags(rawText);
-		log$14.debug("onPartialReply", { len: text.length });
+		log$13.debug("onPartialReply", { len: text.length });
 		if (!text) return;
 		this.captureToolUseElapsed();
 		if (!this.reasoning.reasoningStartTime) this.reasoning.reasoningStartTime = Date.now();
@@ -9209,7 +9618,7 @@ var StreamingCardController = class StreamingCardController {
 		this.text.lastPartialText = text;
 		this.text.accumulatedText = this.text.streamingPrefix ? this.text.streamingPrefix + "\n\n" + text : text;
 		if (!this.text.streamingPrefix && SILENT_REPLY_TOKEN.startsWith(this.text.accumulatedText.trim())) {
-			log$14.debug("onPartialReply: buffering NO_REPLY prefix");
+			log$13.debug("onPartialReply: buffering NO_REPLY prefix");
 			return;
 		}
 		await this.ensureCardCreated();
@@ -9219,7 +9628,7 @@ var StreamingCardController = class StreamingCardController {
 	}
 	async onError(err, info) {
 		if (this.guard.terminate("onError", err)) return;
-		log$14.error(`${info.kind} reply failed`, { error: String(err) });
+		log$13.error(`${info.kind} reply failed`, { error: String(err) });
 		this.captureToolUseElapsed();
 		this.finalizeCard("onError", "error");
 		await this.flush.waitForFlush();
@@ -9275,7 +9684,7 @@ var StreamingCardController = class StreamingCardController {
 			if (this.cardKit.cardMessageId) {
 				const isNoReplyLeak = !this.text.completedText && SILENT_REPLY_TOKEN.startsWith(this.text.accumulatedText.trim());
 				const displayText = this.text.completedText || (isNoReplyLeak ? "" : this.text.accumulatedText) || "Done.";
-				if (!this.text.completedText && !this.text.accumulatedText) log$14.warn("reply completed without visible text, using empty-reply fallback");
+				if (!this.text.completedText && !this.text.accumulatedText) log$13.warn("reply completed without visible text, using empty-reply fallback");
 				const resolvedDisplayText = await this.imageResolver.resolveImagesAwait(displayText, 15e3);
 				const idleToolUseDisplay = this.computeToolUseDisplay();
 				const terminalContent = prepareTerminalCardContent({
@@ -9303,7 +9712,7 @@ var StreamingCardController = class StreamingCardController {
 				const rewindSessionId = this.deps.sessionKey;
 				const rewindMessageId = ClaudeCodeAdapter.getInstance()?.getProcessManager()?.getLastUserMessageId(this.deps.sessionKey);
 				const rewindHasFileChanges = this.hasFileChangingTools(idleToolUseDisplay?.steps);
-				log$14.info("onIdle: rewind button conditions", {
+				log$13.info("onIdle: rewind button conditions", {
 					sessionId: rewindSessionId,
 					messageId: rewindMessageId,
 					hasFileChanges: rewindHasFileChanges,
@@ -9316,7 +9725,7 @@ var StreamingCardController = class StreamingCardController {
 					if (idleEffectiveCardId) {
 						const seqBeforeClose = this.cardKit.cardKitSequence;
 						this.cardKit.cardKitSequence += 1;
-						log$14.info("onIdle: closing streaming mode", {
+						log$13.info("onIdle: closing streaming mode", {
 							attempt,
 							seqBefore: seqBeforeClose,
 							seqAfter: this.cardKit.cardKitSequence
@@ -9330,7 +9739,7 @@ var StreamingCardController = class StreamingCardController {
 						});
 						const seqBeforeUpdate = this.cardKit.cardKitSequence;
 						this.cardKit.cardKitSequence += 1;
-						log$14.info("onIdle: updating final card", {
+						log$13.info("onIdle: updating final card", {
 							attempt,
 							seqBefore: seqBeforeUpdate,
 							seqAfter: this.cardKit.cardKitSequence
@@ -9348,33 +9757,33 @@ var StreamingCardController = class StreamingCardController {
 						card: completeCard,
 						accountId: this.deps.accountId
 					});
-					log$14.info("reply completed, card finalized", {
+					log$13.info("reply completed, card finalized", {
 						elapsedMs: this.elapsed(),
 						isCardKit: !!idleEffectiveCardId,
 						attempt
 					});
 					break;
 				} catch (retryErr) {
-					log$14.warn("final card update attempt failed", {
+					log$13.warn("final card update attempt failed", {
 						attempt,
 						maxRetries: MAX_FINAL_UPDATE_RETRIES,
 						error: String(retryErr)
 					});
 					if (attempt < MAX_FINAL_UPDATE_RETRIES) await new Promise((resolve) => setTimeout(resolve, FINAL_UPDATE_RETRY_DELAY_MS * attempt));
-					else log$14.error("final card update exhausted all retries, card may remain in streaming state", {
+					else log$13.error("final card update exhausted all retries, card may remain in streaming state", {
 						cardId: idleEffectiveCardId,
 						messageId: this.cardKit.cardMessageId
 					});
 				}
 			}
 		} catch (err) {
-			log$14.error("final card update failed (outer)", { error: String(err) });
+			log$13.error("final card update failed (outer)", { error: String(err) });
 		} finally {
 			clearToolUseTraceRun(this.deps.sessionKey);
 		}
 	}
 	markFullyComplete() {
-		log$14.debug("markFullyComplete", {
+		log$13.debug("markFullyComplete", {
 			completedTextLen: this.text.completedText.length,
 			accumulatedTextLen: this.text.accumulatedText.length
 		});
@@ -9413,7 +9822,7 @@ var StreamingCardController = class StreamingCardController {
 					footerMetrics
 				});
 				await this.closeStreamingAndUpdate(effectiveCardId, abortCardContent, "abortCard");
-				log$14.info("abortCard completed", { effectiveCardId });
+				log$13.info("abortCard completed", { effectiveCardId });
 			} else if (this.cardKit.cardMessageId) {
 				const abortCard = buildCardContent("complete", {
 					text: terminalContent.text,
@@ -9434,10 +9843,10 @@ var StreamingCardController = class StreamingCardController {
 					card: abortCard,
 					accountId: this.deps.accountId
 				});
-				log$14.info("abortCard completed (IM fallback)", { messageId: this.cardKit.cardMessageId });
+				log$13.info("abortCard completed (IM fallback)", { messageId: this.cardKit.cardMessageId });
 			}
 		} catch (err) {
-			log$14.warn("abortCard failed", { error: String(err) });
+			log$13.warn("abortCard failed", { error: String(err) });
 		} finally {
 			clearToolUseTraceRun(this.deps.sessionKey);
 		}
@@ -9452,10 +9861,10 @@ var StreamingCardController = class StreamingCardController {
 	async forceCloseStreaming() {
 		const effectiveCardId = this.cardKit.cardKitCardId ?? this.cardKit.originalCardKitCardId;
 		if (!effectiveCardId && !this.cardKit.cardMessageId) {
-			log$14.warn("forceCloseStreaming: no card to close");
+			log$13.warn("forceCloseStreaming: no card to close");
 			return;
 		}
-		log$14.info("forceCloseStreaming: 强制终态化卡片", {
+		log$13.info("forceCloseStreaming: 强制终态化卡片", {
 			cardId: effectiveCardId,
 			messageId: this.cardKit.cardMessageId,
 			phase: this.phase
@@ -9505,10 +9914,10 @@ var StreamingCardController = class StreamingCardController {
 				card: completeCard,
 				accountId: this.deps.accountId
 			});
-			log$14.info("forceCloseStreaming: 卡片已强制终态化");
+			log$13.info("forceCloseStreaming: 卡片已强制终态化");
 			if (!this.isTerminalPhase) this.finalizeCard("forceCloseStreaming", "abort");
 		} catch (err) {
-			log$14.error("forceCloseStreaming failed", { error: String(err) });
+			log$13.error("forceCloseStreaming failed", { error: String(err) });
 		} finally {
 			unregisterActiveCard(this.deps.sessionKey);
 			clearToolUseTraceRun(this.deps.sessionKey);
@@ -9532,7 +9941,7 @@ var StreamingCardController = class StreamingCardController {
 					this.disposeShutdownHook = null;
 					return;
 				}
-				log$14.info("reusing placeholder card", {
+				log$13.info("reusing placeholder card", {
 					cardId: this.deps.placeholderCardId,
 					messageId: this.deps.placeholderMessageId
 				});
@@ -9556,7 +9965,7 @@ var StreamingCardController = class StreamingCardController {
 						accountId: this.deps.accountId
 					});
 					if (this.isStaleCreate(epoch)) {
-						log$14.info("ensureCardCreated: stale epoch after createCardEntity, bailing out", {
+						log$13.info("ensureCardCreated: stale epoch after createCardEntity, bailing out", {
 							epoch,
 							phase: this.phase
 						});
@@ -9567,7 +9976,7 @@ var StreamingCardController = class StreamingCardController {
 						this.cardKit.originalCardKitCardId = cId;
 						this.cardKit.cardKitSequence = 1;
 						this.disposeShutdownHook = registerShutdownHook(`streaming-card:${cId}`, () => this.abortCard());
-						log$14.info("created CardKit entity", {
+						log$13.info("created CardKit entity", {
 							cardId: cId,
 							initialSequence: this.cardKit.cardKitSequence
 						});
@@ -9580,7 +9989,7 @@ var StreamingCardController = class StreamingCardController {
 							accountId: this.deps.accountId
 						});
 						if (this.isStaleCreate(epoch)) {
-							log$14.info("ensureCardCreated: stale epoch after sendCardByCardId, bailing out", {
+							log$13.info("ensureCardCreated: stale epoch after sendCardByCardId, bailing out", {
 								epoch,
 								phase: this.phase
 							});
@@ -9595,13 +10004,13 @@ var StreamingCardController = class StreamingCardController {
 							this.disposeShutdownHook = null;
 							return;
 						}
-						log$14.info("sent CardKit card", { messageId: result.messageId });
+						log$13.info("sent CardKit card", { messageId: result.messageId });
 					} else throw new Error("card.create returned empty card_id");
 				} catch (cardKitErr) {
 					if (this.isStaleCreate(epoch)) return;
 					if (this.guard.terminate("ensureCardCreated.cardkitFlow", cardKitErr)) return;
 					const apiDetail = extractApiDetail(cardKitErr);
-					log$14.warn("CardKit flow failed, falling back to IM", { apiDetail });
+					log$13.warn("CardKit flow failed, falling back to IM", { apiDetail });
 					this.cardKit.cardKitCardId = null;
 					this.cardKit.originalCardKitCardId = null;
 					const fallbackCard = buildCardContent("streaming", { showToolUse: this.deps.toolUseDisplay.showToolUse });
@@ -9614,7 +10023,7 @@ var StreamingCardController = class StreamingCardController {
 						accountId: this.deps.accountId
 					});
 					if (this.isStaleCreate(epoch)) {
-						log$14.info("ensureCardCreated: stale epoch after IM fallback send, bailing out", {
+						log$13.info("ensureCardCreated: stale epoch after IM fallback send, bailing out", {
 							epoch,
 							phase: this.phase
 						});
@@ -9623,12 +10032,12 @@ var StreamingCardController = class StreamingCardController {
 					this.cardKit.cardMessageId = result.messageId;
 					this.flush.setCardMessageReady(true);
 					if (!this.transition("streaming", "ensureCardCreated.imFallback")) return;
-					log$14.info("sent fallback IM card", { messageId: result.messageId });
+					log$13.info("sent fallback IM card", { messageId: result.messageId });
 				}
 			} catch (err) {
 				if (this.isStaleCreate(epoch)) return;
 				if (this.guard.terminate("ensureCardCreated.outer", err)) return;
-				log$14.warn("thinking card failed, falling back to static", { error: String(err) });
+				log$13.warn("thinking card failed, falling back to static", { error: String(err) });
 				this.transition("creation_failed", "ensureCardCreated.outer", "creation_failed");
 			}
 		})();
@@ -9637,10 +10046,10 @@ var StreamingCardController = class StreamingCardController {
 	async performFlush() {
 		if (!this.cardKit.cardMessageId || this.isTerminalPhase) return;
 		if (!this.cardKit.cardKitCardId && this.cardKit.originalCardKitCardId) {
-			log$14.debug("performFlush: skipping (CardKit streaming disabled, awaiting final update)");
+			log$13.debug("performFlush: skipping (CardKit streaming disabled, awaiting final update)");
 			return;
 		}
-		log$14.debug("flushCardUpdate: enter", {
+		log$13.debug("flushCardUpdate: enter", {
 			seq: this.cardKit.cardKitSequence,
 			isCardKit: !!this.cardKit.cardKitCardId
 		});
@@ -9662,7 +10071,7 @@ var StreamingCardController = class StreamingCardController {
 						reasoningText: this.reasoning.accumulatedReasoningText || void 0
 					});
 					this.cardKit.cardKitSequence += 1;
-					log$14.debug("flushCardUpdate: full card update (dirty)", {
+					log$13.debug("flushCardUpdate: full card update (dirty)", {
 						seq: this.cardKit.cardKitSequence,
 						stepCount: display?.stepCount,
 						hasReasoning: !!this.reasoning.accumulatedReasoningText
@@ -9678,7 +10087,7 @@ var StreamingCardController = class StreamingCardController {
 				} else if (resolvedText !== this.text.lastFlushedText) {
 					const prevSeq = this.cardKit.cardKitSequence;
 					this.cardKit.cardKitSequence += 1;
-					log$14.debug("flushCardUpdate: answer seq bump", {
+					log$13.debug("flushCardUpdate: answer seq bump", {
 						seqBefore: prevSeq,
 						seqAfter: this.cardKit.cardKitSequence
 					});
@@ -9693,7 +10102,7 @@ var StreamingCardController = class StreamingCardController {
 					this.text.lastFlushedText = resolvedText;
 				}
 			} else {
-				log$14.debug("flushCardUpdate: IM patch fallback");
+				log$13.debug("flushCardUpdate: IM patch fallback");
 				const flushDisplay = this.computeToolUseDisplay();
 				const card = buildCardContent("streaming", {
 					text: this.reasoning.isReasoningPhase ? "" : resolvedText,
@@ -9713,31 +10122,31 @@ var StreamingCardController = class StreamingCardController {
 			if (this.guard.terminate("flushCardUpdate", err)) return;
 			const apiCode = extractLarkApiCode(err);
 			if (isCardRateLimitError(err)) {
-				log$14.info("flushCardUpdate: rate limited (230020), skipping", { seq: this.cardKit.cardKitSequence });
+				log$13.info("flushCardUpdate: rate limited (230020), skipping", { seq: this.cardKit.cardKitSequence });
 				return;
 			}
 			if (isCardTableLimitError(err)) {
-				log$14.warn("flushCardUpdate: card table limit exceeded (230099/11310), disabling CardKit streaming", { seq: this.cardKit.cardKitSequence });
+				log$13.warn("flushCardUpdate: card table limit exceeded (230099/11310), disabling CardKit streaming", { seq: this.cardKit.cardKitSequence });
 				this.cardKit.cardKitCardId = null;
 				return;
 			}
 			if (apiCode === 300317 && this.cardKit.cardKitCardId) {
 				const oldSeq = this.cardKit.cardKitSequence;
 				this.cardKit.cardKitSequence += 100;
-				log$14.warn("flushCardUpdate: sequence conflict (300317), jumping sequence", {
+				log$13.warn("flushCardUpdate: sequence conflict (300317), jumping sequence", {
 					oldSeq,
 					newSeq: this.cardKit.cardKitSequence
 				});
 				return;
 			}
 			const apiDetail = extractApiDetail(err);
-			log$14.error("card stream update failed", {
+			log$13.error("card stream update failed", {
 				apiCode,
 				seq: this.cardKit.cardKitSequence,
 				apiDetail
 			});
 			if (this.cardKit.cardKitCardId) {
-				log$14.warn("disabling CardKit streaming, falling back to im.message.patch");
+				log$13.warn("disabling CardKit streaming, falling back to im.message.patch");
 				this.cardKit.cardKitCardId = null;
 			}
 		}
@@ -9762,7 +10171,7 @@ var StreamingCardController = class StreamingCardController {
 		if (!this.cardKit.cardKitCardId || this.isTerminalPhase) return;
 		try {
 			const display = this.computeToolUseDisplay();
-			log$14.info("updateToolUseStatus", {
+			log$13.info("updateToolUseStatus", {
 				hasDisplay: !!display,
 				stepCount: display?.stepCount,
 				steps: display?.steps?.map((s) => `${s.title}:${s.status}`).join(", ")
@@ -9784,7 +10193,7 @@ var StreamingCardController = class StreamingCardController {
 				accountId: this.deps.accountId
 			});
 		} catch (err) {
-			log$14.debug("updateToolUseStatus failed", { error: String(err) });
+			log$13.debug("updateToolUseStatus failed", { error: String(err) });
 		}
 	}
 	finalizeCard(source, reason) {
@@ -9796,7 +10205,7 @@ var StreamingCardController = class StreamingCardController {
 	async closeStreamingAndUpdate(cardId, card, label) {
 		const seqBeforeClose = this.cardKit.cardKitSequence;
 		this.cardKit.cardKitSequence += 1;
-		log$14.info(`${label}: closing streaming mode`, {
+		log$13.info(`${label}: closing streaming mode`, {
 			seqBefore: seqBeforeClose,
 			seqAfter: this.cardKit.cardKitSequence
 		});
@@ -9809,7 +10218,7 @@ var StreamingCardController = class StreamingCardController {
 		});
 		const seqBeforeUpdate = this.cardKit.cardKitSequence;
 		this.cardKit.cardKitSequence += 1;
-		log$14.info(`${label}: updating card`, {
+		log$13.info(`${label}: updating card`, {
 			seqBefore: seqBeforeUpdate,
 			seqAfter: this.cardKit.cardKitSequence
 		});
@@ -9843,7 +10252,7 @@ function extractApiDetail(err) {
 }
 //#endregion
 //#region src/messaging/format-for-cc.ts
-const log$13 = larkLogger("messaging/format-for-cc");
+const log$12 = larkLogger("messaging/format-for-cc");
 function safeParseJSON(raw) {
 	try {
 		return JSON.parse(raw);
@@ -9899,7 +10308,7 @@ function extractPostText(rawContent) {
 */
 function formatContentByType(ctx) {
 	const { contentType, content, resources } = ctx;
-	log$13.debug("formatContentByType 开始格式化", {
+	log$12.debug("formatContentByType 开始格式化", {
 		contentType,
 		contentLength: content?.length ?? 0,
 		resourceCount: resources?.length ?? 0
@@ -9941,7 +10350,7 @@ function formatContentByType(ctx) {
 		case "todo":
 		case "vote": return content;
 		default:
-			log$13.warn("遇到不支持的消息类型", { contentType });
+			log$12.warn("遇到不支持的消息类型", { contentType });
 			return `[不支持的消息类型: ${contentType}]`;
 	}
 }
@@ -9984,7 +10393,7 @@ function formatMessageTime(createTime) {
 * @returns         格式化后的纯文本字符串
 */
 function formatForCC(ctx, isGroup) {
-	log$13.info("formatForCC 开始处理", {
+	log$12.info("formatForCC 开始处理", {
 		messageId: ctx.messageId,
 		contentType: ctx.contentType,
 		chatType: ctx.chatType,
@@ -10000,7 +10409,7 @@ function formatForCC(ctx, isGroup) {
 	if (isGroup && ctx.senderName) parts.push(`[${ctx.senderName}]`);
 	if (ctx.threadId) parts.push("[话题回复]");
 	const result = (parts.length > 0 ? parts.join(" ") + " " : "") + formattedContent;
-	log$13.info("formatForCC 完成", {
+	log$12.info("formatForCC 完成", {
 		messageId: ctx.messageId,
 		resultLength: result.length,
 		hasTime: !!timeStr,
@@ -10010,7 +10419,7 @@ function formatForCC(ctx, isGroup) {
 }
 //#endregion
 //#region src/messaging/inbound/dispatch-cc.ts
-const log$12 = larkLogger("inbound/dispatch-cc");
+const log$11 = larkLogger("inbound/dispatch-cc");
 async function dispatchToCC(params) {
 	const { ctx, account, sessionRouter, processManager } = params;
 	const chatId = ctx.chatId;
@@ -10020,7 +10429,7 @@ async function dispatchToCC(params) {
 	const ccModel = params.model;
 	const maxTurns = params.maxTurns;
 	const maxBudgetUsd = params.maxBudgetUsd;
-	log$12.info("dispatchToCC 开始", {
+	log$11.info("dispatchToCC 开始", {
 		msgId,
 		chatId,
 		chatType,
@@ -10033,12 +10442,12 @@ async function dispatchToCC(params) {
 		threadId,
 		userId: ctx.senderId
 	});
-	log$12.info("会话路由解析完成", {
+	log$11.info("会话路由解析完成", {
 		sessionId: route.sessionId,
 		cwd: route.cwd,
 		type: route.type
 	});
-	if (params.userContext) log$12.info("用户上下文已注入", {
+	if (params.userContext) log$11.info("用户上下文已注入", {
 		userId: params.userContext.userId,
 		isTenantIdentity: params.userContext.isTenantIdentity,
 		credentialDir: params.userContext.credentialDir
@@ -10077,7 +10486,7 @@ async function dispatchToCC(params) {
 					for await (const chunk of readable) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 					buffer = Buffer.concat(chunks);
 				} else {
-					log$12.warn("图片资源下载返回未知格式，跳过", {
+					log$11.warn("图片资源下载返回未知格式，跳过", {
 						fileKey: imgRes.fileKey,
 						responseType: typeof response
 					});
@@ -10085,7 +10494,7 @@ async function dispatchToCC(params) {
 				}
 				if (resp.headers?.["content-type"]) mediaType = resp.headers["content-type"];
 			} else {
-				log$12.warn("图片资源下载返回空，跳过", { fileKey: imgRes.fileKey });
+				log$11.warn("图片资源下载返回空，跳过", { fileKey: imgRes.fileKey });
 				continue;
 			}
 			const imgFileName = `${imgRes.fileKey}.png`;
@@ -10095,13 +10504,13 @@ async function dispatchToCC(params) {
 				const { writeFile, mkdir } = await import("fs/promises");
 				await mkdir(filesDir, { recursive: true });
 				await writeFile(imgFilePath, buffer);
-				log$12.info("图片已保存到工作目录", {
+				log$11.info("图片已保存到工作目录", {
 					fileKey: imgRes.fileKey,
 					path: imgFilePath,
 					sizeBytes: buffer.length
 				});
 			} catch (saveErr) {
-				log$12.warn("图片保存到工作目录失败", {
+				log$11.warn("图片保存到工作目录失败", {
 					fileKey: imgRes.fileKey,
 					path: imgFilePath,
 					error: saveErr instanceof Error ? saveErr.message : String(saveErr)
@@ -10116,13 +10525,13 @@ async function dispatchToCC(params) {
 					data: base64Data
 				}
 			});
-			log$12.info("图片资源下载成功", {
+			log$11.info("图片资源下载成功", {
 				fileKey: imgRes.fileKey,
 				mediaType,
 				sizeBytes: buffer.length
 			});
 		} catch (err) {
-			log$12.warn("图片资源下载失败，跳过", {
+			log$11.warn("图片资源下载失败，跳过", {
 				fileKey: imgRes.fileKey,
 				error: err instanceof Error ? err.message : String(err)
 			});
@@ -10132,7 +10541,7 @@ async function dispatchToCC(params) {
 				type: "text",
 				text: textPrompt
 			}, ...imageBlocks];
-			log$12.info("已构建多模态 prompt", {
+			log$11.info("已构建多模态 prompt", {
 				textLength: textPrompt.length,
 				imageCount: imageBlocks.length
 			});
@@ -10140,12 +10549,12 @@ async function dispatchToCC(params) {
 			const textWithoutImageRefs = textPrompt.replace(/!\[image\]\([^)]*\)/g, "").replace(/\[图片\]\s*/g, "").trim();
 			if (textWithoutImageRefs.length > 0) {
 				prompt = textPrompt.replace(/!\[image\]\([^)]*\)/g, "[图片加载失败]");
-				log$12.info("图片下载失败但保留文字内容继续调度", {
+				log$11.info("图片下载失败但保留文字内容继续调度", {
 					messageId: ctx.messageId,
 					textLength: textWithoutImageRefs.length
 				});
 			} else {
-				log$12.warn("纯图片消息且图片全部下载失败，中止调度", {
+				log$11.warn("纯图片消息且图片全部下载失败，中止调度", {
 					messageId: ctx.messageId,
 					expectedImages: imageResources.length
 				});
@@ -10167,7 +10576,7 @@ async function dispatchToCC(params) {
 		await fsMkdir(filesDir, { recursive: true });
 		let updatedTextPrompt = typeof prompt === "string" ? prompt : prompt[0].text;
 		for (const res of attachmentResources) try {
-			log$12.info("开始下载非图片附件", {
+			log$11.info("开始下载非图片附件", {
 				type: res.type,
 				fileKey: res.fileKey,
 				fileName: res.fileName,
@@ -10181,7 +10590,7 @@ async function dispatchToCC(params) {
 				},
 				params: { type: "file" }
 			});
-			log$12.info("非图片附件 API 响应已收到", {
+			log$11.info("非图片附件 API 响应已收到", {
 				type: res.type,
 				fileKey: res.fileKey,
 				responseType: typeof response,
@@ -10200,7 +10609,7 @@ async function dispatchToCC(params) {
 					for await (const chunk of readable) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 					buffer = Buffer.concat(chunks);
 				} else {
-					log$12.warn("非图片附件下载返回未知格式，跳过", {
+					log$11.warn("非图片附件下载返回未知格式，跳过", {
 						type: res.type,
 						fileKey: res.fileKey,
 						responseType: typeof response
@@ -10208,7 +10617,7 @@ async function dispatchToCC(params) {
 					continue;
 				}
 			} else {
-				log$12.warn("非图片附件下载返回空，跳过", {
+				log$11.warn("非图片附件下载返回空，跳过", {
 					type: res.type,
 					fileKey: res.fileKey
 				});
@@ -10231,7 +10640,7 @@ async function dispatchToCC(params) {
 			}
 			const filePath = path.join(filesDir, savedFileName);
 			await fsWriteFile(filePath, buffer);
-			log$12.info("非图片附件已保存到工作目录", {
+			log$11.info("非图片附件已保存到工作目录", {
 				type: res.type,
 				fileKey: res.fileKey,
 				savedFileName,
@@ -10265,7 +10674,7 @@ async function dispatchToCC(params) {
 				}
 			}
 		} catch (err) {
-			log$12.warn("非图片附件下载失败，替换为降级描述", {
+			log$11.warn("非图片附件下载失败，替换为降级描述", {
 				type: res.type,
 				fileKey: res.fileKey,
 				error: err instanceof Error ? err.message : String(err)
@@ -10284,12 +10693,12 @@ async function dispatchToCC(params) {
 			const textBlock = prompt.find((b) => b.type === "text");
 			if (textBlock) textBlock.text = updatedTextPrompt;
 		}
-		log$12.info("非图片附件处理完成", {
+		log$11.info("非图片附件处理完成", {
 			totalAttachments: attachmentResources.length,
 			promptLength: typeof prompt === "string" ? prompt.length : prompt.find((b) => b.type === "text")?.text?.length
 		});
 	}
-	log$12.info("消息格式化完成", {
+	log$11.info("消息格式化完成", {
 		promptLength: typeof prompt === "string" ? prompt.length : prompt.length,
 		isMultimodal: Array.isArray(prompt),
 		isGroup
@@ -10321,13 +10730,13 @@ async function dispatchToCC(params) {
 	};
 	const cardController = new StreamingCardController(cardDeps);
 	registerActiveCard(route.sessionId, cardController);
-	log$12.info("StreamingCardController 已创建", {
+	log$11.info("StreamingCardController 已创建", {
 		sessionId: route.sessionId,
 		chatId,
 		replyToMessageId: cardDeps.replyToMessageId
 	});
 	cardController.ensureCardCreated().catch((err) => {
-		log$12.warn("提前创建卡片失败（streaming 回调会重试）", { error: String(err) });
+		log$11.warn("提前创建卡片失败（streaming 回调会重试）", { error: String(err) });
 	});
 	if (params.messageStore) {
 		const userContent = typeof prompt === "string" ? prompt : textPrompt;
@@ -10338,7 +10747,7 @@ async function dispatchToCC(params) {
 			channel: "feishu-bot",
 			title: userContent.slice(0, 30) + (userContent.length > 30 ? "..." : "")
 		}).catch((err) => {
-			log$12.warn("创建飞书端会话记录失败", { error: String(err) });
+			log$11.warn("创建飞书端会话记录失败", { error: String(err) });
 		});
 		params.messageStore.appendMessage({
 			sessionId: storeSessionId,
@@ -10347,18 +10756,18 @@ async function dispatchToCC(params) {
 			channel: "feishu-bot",
 			metadata: { feishuMessageId: msgId }
 		}).catch((err) => {
-			log$12.warn("记录飞书用户消息到 store 失败", { error: String(err) });
+			log$11.warn("记录飞书用户消息到 store 失败", { error: String(err) });
 		});
 	}
 	const bridge = new CCStreamBridge(cardController, {
 		autoCompleteOnTurnEnd: true,
 		sessionKey: route.sessionId
 	});
-	log$12.info("CCStreamBridge 已创建", { sessionId: route.sessionId });
+	log$11.info("CCStreamBridge 已创建", { sessionId: route.sessionId });
 	let feishuAccumText = "";
 	const callbacks = {
 		onTextDelta: (text) => {
-			log$12.debug("CC onTextDelta", {
+			log$11.debug("CC onTextDelta", {
 				sessionId: route.sessionId,
 				deltaLen: text.length
 			});
@@ -10366,28 +10775,28 @@ async function dispatchToCC(params) {
 			feishuAccumText += text;
 		},
 		onThinkingDelta: (text) => {
-			log$12.debug("CC onThinkingDelta", {
+			log$11.debug("CC onThinkingDelta", {
 				sessionId: route.sessionId,
 				deltaLen: text.length
 			});
 			bridge.onThinkingDelta(text);
 		},
 		onToolUseStart: (toolName, toolInput) => {
-			log$12.info("CC onToolUseStart", {
+			log$11.info("CC onToolUseStart", {
 				sessionId: route.sessionId,
 				toolName
 			});
 			bridge.onToolUseStart(toolName, toolInput);
 		},
 		onToolResult: (toolUseId) => {
-			log$12.info("CC onToolResult", {
+			log$11.info("CC onToolResult", {
 				sessionId: route.sessionId,
 				toolUseId
 			});
 			bridge.onToolResult(toolUseId);
 		},
 		onToolProgress: (toolName, elapsedSeconds) => {
-			log$12.debug("CC onToolProgress", {
+			log$11.debug("CC onToolProgress", {
 				sessionId: route.sessionId,
 				toolName,
 				elapsedSeconds
@@ -10395,14 +10804,14 @@ async function dispatchToCC(params) {
 			bridge.onToolProgress(toolName, elapsedSeconds);
 		},
 		onTurnEnd: (stopReason) => {
-			log$12.info("CC onTurnEnd", {
+			log$11.info("CC onTurnEnd", {
 				sessionId: route.sessionId,
 				stopReason
 			});
 			bridge.onTurnEnd(stopReason);
 		},
 		onResult: (result) => {
-			log$12.info("CC onResult", {
+			log$11.info("CC onResult", {
 				sessionId: route.sessionId,
 				subtype: result.subtype,
 				isError: result.isError,
@@ -10422,18 +10831,28 @@ async function dispatchToCC(params) {
 					numTurns: result.numTurns
 				}
 			}).catch((err) => {
-				log$12.warn("记录飞书 assistant 消息到 store 失败", { error: String(err) });
+				log$11.warn("记录飞书 assistant 消息到 store 失败", { error: String(err) });
+			});
+			if (feishuAccumText) handleInteractiveCardTriggers({
+				text: feishuAccumText,
+				chatId,
+				sessionId: route.sessionId,
+				appId: account.configured ? account.appId : "",
+				brand: account.brand,
+				account,
+				replyInThread,
+				threadId: ctx.threadId
 			});
 		},
 		onError: (error) => {
-			log$12.error("CC 进程错误", {
+			log$11.error("CC 进程错误", {
 				sessionId: route.sessionId,
 				error: error.message
 			});
 			cardController.onError(error, { kind: "cc-process" });
 		}
 	};
-	log$12.info("开始执行 CC 进程", {
+	log$11.info("开始执行 CC 进程", {
 		sessionId: route.sessionId,
 		cwd: route.cwd,
 		promptLength: prompt.length,
@@ -10450,10 +10869,10 @@ async function dispatchToCC(params) {
 			maxBudgetUsd,
 			userContext: params.userContext
 		}, callbacks);
-		log$12.info("CC 进程 executePrompt 调用完成", { sessionId: route.sessionId });
+		log$11.info("CC 进程 executePrompt 调用完成", { sessionId: route.sessionId });
 	} catch (err) {
 		const errorMessage = err instanceof Error ? err.message : String(err);
-		log$12.error("CC 进程 executePrompt 调用异常", {
+		log$11.error("CC 进程 executePrompt 调用异常", {
 			sessionId: route.sessionId,
 			error: errorMessage
 		});
@@ -10475,7 +10894,7 @@ async function dispatchToCC(params) {
 */
 async function dispatchTeammateEval(params) {
 	const { chatId, prompt, account, sessionRouter, processManager } = params;
-	log$12.info("dispatchTeammateEval 开始", {
+	log$11.info("dispatchTeammateEval 开始", {
 		chatId,
 		promptLength: prompt.length
 	});
@@ -10488,7 +10907,7 @@ async function dispatchTeammateEval(params) {
 		userName: void 0
 	});
 	if (processManager.isSessionBusy?.(route.sessionId)) {
-		log$12.info("dispatchTeammateEval 跳过：主 session 正在执行", {
+		log$11.info("dispatchTeammateEval 跳过：主 session 正在执行", {
 			chatId,
 			sessionId: route.sessionId
 		});
@@ -10521,7 +10940,7 @@ async function dispatchTeammateEval(params) {
 	const confirmReply = () => {
 		if (confirmed) return;
 		confirmed = true;
-		log$12.info("teammate 确认回复，创建流式卡片", {
+		log$11.info("teammate 确认回复，创建流式卡片", {
 			chatId,
 			thinkingLen: thinkingBuffer.length,
 			textLen: fullTextBuffer.length
@@ -10578,7 +10997,7 @@ async function dispatchTeammateEval(params) {
 		fullTextBuffer += text;
 		if (fullTextBuffer.trimStart().startsWith(NO_REPLY_TOKEN)) {
 			silenced = true;
-			log$12.info("teammate 前缀检测: 检测到 NO_REPLY 首输出，立即静默", {
+			log$11.info("teammate 前缀检测: 检测到 NO_REPLY 首输出，立即静默", {
 				chatId,
 				bufferLen: fullTextBuffer.length
 			});
@@ -10623,7 +11042,7 @@ async function dispatchTeammateEval(params) {
 				onTurnEnd: (stopReason) => {
 					finalStopReason = stopReason;
 					if (stopReason === "tool_use") {
-						log$12.debug("teammate turnEnd: tool_use, 跳过最终判断", { chatId });
+						log$11.debug("teammate turnEnd: tool_use, 跳过最终判断", { chatId });
 						if (confirmed && bridge) bridge.onTurnEnd(stopReason);
 						return;
 					}
@@ -10631,7 +11050,7 @@ async function dispatchTeammateEval(params) {
 						const trimmed = fullTextBuffer.trim();
 						if (trimmed === NO_REPLY_TOKEN || trimmed === CC_INTERNAL_PLACEHOLDER || trimmed.endsWith(NO_REPLY_TOKEN) || trimmed === "") {
 							silenced = true;
-							log$12.info("teammate turnEnd 最终判断: 静默", {
+							log$11.info("teammate turnEnd 最终判断: 静默", {
 								chatId,
 								trimmed: trimmed.slice(0, 60)
 							});
@@ -10646,7 +11065,7 @@ async function dispatchTeammateEval(params) {
 					resolve();
 				},
 				onError: (error) => {
-					log$12.error("teammate 评估 CC 进程错误", {
+					log$11.error("teammate 评估 CC 进程错误", {
 						chatId,
 						error: error.message
 					});
@@ -10659,14 +11078,14 @@ async function dispatchTeammateEval(params) {
 				prompt,
 				model: params.model
 			}, callbacks).catch((err) => {
-				log$12.error("teammate executePrompt 异常", {
+				log$11.error("teammate executePrompt 异常", {
 					chatId,
 					error: err instanceof Error ? err.message : String(err)
 				});
 				resolve();
 			});
 		});
-		log$12.info("dispatchTeammateEval 完成", {
+		log$11.info("dispatchTeammateEval 完成", {
 			chatId,
 			confirmed,
 			silenced,
@@ -10677,13 +11096,83 @@ async function dispatchTeammateEval(params) {
 		return { replied: confirmed };
 	} catch (err) {
 		const errorMessage = err instanceof Error ? err.message : String(err);
-		log$12.error("dispatchTeammateEval 异常", {
+		log$11.error("dispatchTeammateEval 异常", {
 			chatId,
 			error: errorMessage
 		});
 		return { replied: false };
 	}
 }
+/**
+* 检测 CC 回复文本中的交互标记，并发送对应的独立卡片。
+*
+* 标记格式：
+* - [PERMISSION_REQUEST] ```json { "scopes": ["scope1", "scope2"] } ```
+* - [ASK_USER] ```json { "question": "...", "phases": [...] } ```
+*/
+async function handleInteractiveCardTriggers(params) {
+	const { text, chatId, sessionId, appId, brand, account, replyInThread, threadId } = params;
+	try {
+		const authReq = detectAuthRequest(text);
+		if (authReq && appId) {
+			log$11.info("检测到 CC 输出中的权限申请标记", {
+				sessionId,
+				scopes: authReq.scopes
+			});
+			const { card } = buildAuthCard({
+				chatId,
+				sessionId,
+				appId,
+				scopes: authReq.scopes,
+				brand
+			});
+			await LarkClient.fromAccount(account).sdk.im.message.create({
+				params: { receive_id_type: "chat_id" },
+				data: {
+					receive_id: chatId,
+					msg_type: "interactive",
+					content: JSON.stringify(card),
+					...replyInThread && threadId ? { reply_in_thread: true } : {}
+				}
+			});
+			log$11.info("权限申请卡片已发送", {
+				chatId,
+				sessionId
+			});
+		}
+		const askReq = detectAskRequest(text);
+		if (askReq) {
+			log$11.info("检测到 CC 输出中的提问标记", {
+				sessionId,
+				question: askReq.question.slice(0, 50)
+			});
+			const { card } = buildAskCard({
+				chatId,
+				sessionId,
+				question: askReq.question,
+				phases: askReq.phases
+			});
+			await LarkClient.fromAccount(account).sdk.im.message.create({
+				params: { receive_id_type: "chat_id" },
+				data: {
+					receive_id: chatId,
+					msg_type: "interactive",
+					content: JSON.stringify(card),
+					...replyInThread && threadId ? { reply_in_thread: true } : {}
+				}
+			});
+			log$11.info("提问卡片已发送", {
+				chatId,
+				sessionId
+			});
+		}
+	} catch (err) {
+		log$11.error("交互式卡片后处理失败", {
+			sessionId,
+			error: err instanceof Error ? err.message : String(err)
+		});
+	}
+}
 //#endregion
 //#region src/messaging/inbound/permission.ts
 /**
@@ -12189,7 +12678,7 @@ const convertLocation = (raw) => {
 * injected via callbacks in `ConvertContext`. Callers are responsible
 * for creating the appropriate callbacks (UAT / TAT / event push).
 */
-const log$11 = larkLogger("converters/merge-forward");
+const log$10 = larkLogger("converters/merge-forward");
 /**
 * Recursively expand a merge_forward message.
 *
@@ -12204,7 +12693,7 @@ const log$11 = larkLogger("converters/merge-forward");
 const convertMergeForward = async (_raw, ctx) => {
 	const { accountId, messageId, resolveUserName, batchResolveNames, fetchSubMessages, convertMessageContent } = ctx;
 	if (!fetchSubMessages) {
-		log$11.warn("fetchSubMessages 回调未注入，无法展开合并转发消息", {
+		log$10.warn("fetchSubMessages 回调未注入，无法展开合并转发消息", {
 			messageId,
 			accountId
 		});
@@ -12222,23 +12711,23 @@ async function expand(accountId, messageId, resolveUserName, batchResolveNames,
 	let items;
 	try {
 		items = await fetchSubMessages(messageId);
-		log$11.info("fetchSubMessages 成功", {
+		log$10.info("fetchSubMessages 成功", {
 			messageId,
 			itemCount: items.length
 		});
 	} catch (error) {
-		log$11.error("fetch sub-messages failed", {
+		log$10.error("fetch sub-messages failed", {
 			messageId,
 			error: error instanceof Error ? error.message : String(error)
 		});
 		return "<forwarded_messages/>";
 	}
 	if (items.length === 0) {
-		log$11.warn("fetchSubMessages 返回空 items", { messageId });
+		log$10.warn("fetchSubMessages 返回空 items", { messageId });
 		return "<forwarded_messages/>";
 	}
 	const childrenMap = buildChildrenMap(items, messageId);
-	log$11.info("buildChildrenMap 完成", {
+	log$10.info("buildChildrenMap 完成", {
 		messageId,
 		parentKeys: [...childrenMap.keys()],
 		childCounts: [...childrenMap.entries()].map(([k, v]) => `${k}:${v.length}`)
@@ -12247,7 +12736,7 @@ async function expand(accountId, messageId, resolveUserName, batchResolveNames,
 	if (senderIds.length > 0 && batchResolveNames) try {
 		await batchResolveNames(senderIds);
 	} catch (err) {
-		log$11.debug("batchResolveNames failed (best-effort)", { error: err instanceof Error ? err.message : String(err) });
+		log$10.debug("batchResolveNames failed (best-effort)", { error: err instanceof Error ? err.message : String(err) });
 	}
 	return formatSubTree(messageId, childrenMap, accountId, resolveUserName, convertContent);
 }
@@ -12327,7 +12816,7 @@ async function formatSubTree(parentId, childrenMap, accountId, resolveUserName,
 		const indented = indentLines(content, "    ");
 		parts.push(`[${timestamp}] ${displayName}:\n${indented}`);
 	} catch (err) {
-		log$11.warn("failed to convert sub-message", {
+		log$10.warn("failed to convert sub-message", {
 			messageId: item.message_id,
 			msgType: item.msg_type ?? "unknown",
 			error: err instanceof Error ? err.message : String(err)
@@ -12541,7 +13030,7 @@ async function convertMessageContent(raw, messageType, ctx) {
 }
 //#endregion
 //#region src/messaging/inbound/parse-io.ts
-const log$10 = larkLogger("inbound/parse-io");
+const log$9 = larkLogger("inbound/parse-io");
 /**
 * 对 interactive 消息，通过 TAT 调用 API 获取完整 v2 卡片内容。
 * 事件推送的 content 可能不包含 json_card，API 调用可返回完整的 raw_card_content。
@@ -12561,7 +13050,7 @@ async function fetchCardContent(messageId, larkClient) {
 			}
 		}))?.data?.items?.[0]?.body?.content ?? void 0;
 	} catch (err) {
-		log$10.warn(`fetchCardContent failed for ${messageId}: ${err instanceof Error ? err.message : String(err)}`);
+		log$9.warn(`fetchCardContent failed for ${messageId}: ${err instanceof Error ? err.message : String(err)}`);
 		return;
 	}
 }
@@ -12576,7 +13065,7 @@ async function fetchCardContent(messageId, larkClient) {
 */
 function createFetchSubMessages(larkClient) {
 	return async (msgId) => {
-		log$10.info("fetchSubMessages 请求", {
+		log$9.info("fetchSubMessages 请求", {
 			msgId,
 			url: `/open-apis/im/v1/messages/${msgId}`
 		});
@@ -12588,7 +13077,7 @@ function createFetchSubMessages(larkClient) {
 				card_msg_content_type: "raw_card_content"
 			}
 		});
-		log$10.info("fetchSubMessages 响应", {
+		log$9.info("fetchSubMessages 响应", {
 			msgId,
 			code: response?.code,
 			msg: response?.msg,
@@ -12605,11 +13094,11 @@ function createFetchSubMessages(larkClient) {
 * the account and log function.
 */
 function createParseResolveNames(account) {
-	return createBatchResolveNames(account, (...args) => log$10.info(args.map(String).join(" ")));
+	return createBatchResolveNames(account, (...args) => log$9.info(args.map(String).join(" ")));
 }
 //#endregion
 //#region src/messaging/inbound/parse.ts
-const log$9 = larkLogger("inbound/parse");
+const log$8 = larkLogger("inbound/parse");
 /**
 * Parse a raw Feishu message event into a normalised MessageContext.
 *
@@ -12659,7 +13148,7 @@ async function parseMessageEvent(event, botOpenId, expandCtx) {
 		const fullContent = await fetchCardContent(event.message.message_id, larkClient);
 		if (fullContent) {
 			effectiveContent = fullContent;
-			log$9.info("replaced interactive content with full v2 card data");
+			log$8.info("replaced interactive content with full v2 card data");
 		}
 	}
 	const convertCtx = {
@@ -12780,7 +13269,7 @@ var MessageDedup = class {
 };
 //#endregion
 //#region src/messaging/inbound/media-download.ts
-const log$8 = larkLogger("inbound/media-download");
+const log$7 = larkLogger("inbound/media-download");
 /**
 * 从飞书 API 下载单个图片资源，返回 Buffer + mediaType
 */
@@ -12808,7 +13297,7 @@ async function downloadLarkImage(params) {
 				for await (const chunk of readable) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 				buffer = Buffer.concat(chunks);
 			} else {
-				log$8.warn("图片资源下载返回未知格式", {
+				log$7.warn("图片资源下载返回未知格式", {
 					fileKey,
 					responseType: typeof response
 				});
@@ -12816,10 +13305,10 @@ async function downloadLarkImage(params) {
 			}
 			if (resp.headers?.["content-type"]) mediaType = resp.headers["content-type"];
 		} else {
-			log$8.warn("图片资源下载返回空", { fileKey });
+			log$7.warn("图片资源下载返回空", { fileKey });
 			return null;
 		}
-		log$8.info("图片资源下载成功", {
+		log$7.info("图片资源下载成功", {
 			fileKey,
 			mediaType,
 			sizeBytes: buffer.length
@@ -12829,7 +13318,7 @@ async function downloadLarkImage(params) {
 			mediaType
 		};
 	} catch (err) {
-		log$8.warn("图片资源下载失败", {
+		log$7.warn("图片资源下载失败", {
 			fileKey,
 			error: err instanceof Error ? err.message : String(err)
 		});
@@ -12864,12 +13353,12 @@ async function buildMultimodalPrompt(params) {
 			await mkdir(saveDir, { recursive: true });
 			const imgFilePath = path.join(saveDir, `${imgRes.fileKey}.png`);
 			await writeFile(imgFilePath, buffer);
-			log$8.info("图片已保存到工作目录", {
+			log$7.info("图片已保存到工作目录", {
 				fileKey: imgRes.fileKey,
 				path: imgFilePath
 			});
 		} catch (saveErr) {
-			log$8.warn("图片保存失败", {
+			log$7.warn("图片保存失败", {
 				fileKey: imgRes.fileKey,
 				error: saveErr instanceof Error ? saveErr.message : String(saveErr)
 			});
@@ -12884,7 +13373,7 @@ async function buildMultimodalPrompt(params) {
 		});
 	}
 	if (imageBlocks.length > 0) {
-		log$8.info("已构建多模态 prompt", {
+		log$7.info("已构建多模态 prompt", {
 			textLength: textPrompt.length,
 			imageCount: imageBlocks.length
 		});
@@ -12907,7 +13396,7 @@ const TENANT_USER_ID = "tenant";
 * 在消息入口处构建 UserContext，通过参数逐层传递到
 * SessionRouter、ProcessManager、CC 进程环境。
 */
-const log$7 = larkLogger("user/context");
+const log$6 = larkLogger("user/context");
 /**
 * 构建用户上下文
 *
@@ -12917,7 +13406,7 @@ const log$7 = larkLogger("user/context");
 function buildUserContext(params) {
 	const { openId, userId, userName, chatType, workspaceRoot } = params;
 	if (chatType === "group") {
-		log$7.info("群聊场景，使用 tenant 身份", {
+		log$6.info("群聊场景，使用 tenant 身份", {
 			openId,
 			chatType
 		});
@@ -12930,7 +13419,7 @@ function buildUserContext(params) {
 		};
 	}
 	const effectiveUserId = userId || openId;
-	log$7.info("私聊场景，使用用户个人身份", {
+	log$6.info("私聊场景，使用用户个人身份", {
 		effectiveUserId,
 		openId,
 		userId,
@@ -12955,7 +13444,7 @@ function buildUserContext(params) {
 *   ├── CLAUDE.md           # 用户级人设（跨所有会话共享）
 *   └── settings.json       # 用户级偏好
 */
-const log$6 = larkLogger("user/user-dir");
+const log$5 = larkLogger("user/user-dir");
 /**
 * 确保用户目录结构存在
 *
@@ -12964,7 +13453,7 @@ const log$6 = larkLogger("user/user-dir");
 */
 async function ensureUserDirectory(userCtx) {
 	const { userId, credentialDir } = userCtx;
-	log$6.info("确保用户目录存在", {
+	log$5.info("确保用户目录存在", {
 		userId,
 		credentialDir
 	});
@@ -12972,7 +13461,7 @@ async function ensureUserDirectory(userCtx) {
 	const credentialsPath = path.join(credentialDir, "credentials.json");
 	if (!existsSync$1(credentialsPath)) {
 		await writeFile$1(credentialsPath, JSON.stringify({}, null, 2), "utf-8");
-		log$6.info("创建默认 credentials.json", {
+		log$5.info("创建默认 credentials.json", {
 			userId,
 			path: credentialsPath
 		});
@@ -12980,7 +13469,7 @@ async function ensureUserDirectory(userCtx) {
 	const mcpServersPath = path.join(credentialDir, "mcp-servers.json");
 	if (!existsSync$1(mcpServersPath)) {
 		await writeFile$1(mcpServersPath, JSON.stringify({}, null, 2), "utf-8");
-		log$6.info("创建默认 mcp-servers.json", {
+		log$5.info("创建默认 mcp-servers.json", {
 			userId,
 			path: mcpServersPath
 		});
@@ -12993,7 +13482,7 @@ async function ensureUserDirectory(userCtx) {
 			userName: userCtx.userName
 		};
 		await writeFile$1(settingsPath, JSON.stringify(defaultSettings, null, 2), "utf-8");
-		log$6.info("创建默认 settings.json", {
+		log$5.info("创建默认 settings.json", {
 			userId,
 			path: settingsPath
 		});
@@ -13011,7 +13500,7 @@ async function ensureUserDirectory(userCtx) {
 				`这是你的个人配置文件，跨所有会话共享。`,
 				`你可以在这里记录用户偏好、常用指令等信息。`
 			].join("\n"), "utf-8");
-			log$6.info("创建用户级 CLAUDE.md", {
+			log$5.info("创建用户级 CLAUDE.md", {
 				userId,
 				path: claudeMdPath
 			});
@@ -13020,79 +13509,6 @@ async function ensureUserDirectory(userCtx) {
 }
 larkLogger("user/oauth-proxy");
 //#endregion
-//#region src/gateway/plugins/loader.ts
-const PLUGIN_REGISTRY = {};
-const log$4 = larkLogger("gateway/plugin-loader");
-/** 已加载的插件实例列表 */
-let loadedPlugins = [];
-/**
-* 加载并注册所有已声明的插件
-*
-* @returns 是否有插件需要外部网络访问（影响网关监听地址）
-*/
-async function loadPlugins(app, context) {
-	const pluginNames = (process.env.LARKPAL_PLUGINS || "").split(",").map((s) => s.trim()).filter(Boolean);
-	if (pluginNames.length === 0) {
-		log$4.info("未声明任何插件，跳过插件加载");
-		return { requiresExternalAccess: false };
-	}
-	log$4.info("开始加载插件", { plugins: pluginNames });
-	let needsExternal = false;
-	for (const name of pluginNames) {
-		const factoryLoader = PLUGIN_REGISTRY[name];
-		if (!factoryLoader) {
-			log$4.warn("未知插件，跳过", {
-				name,
-				available: Object.keys(PLUGIN_REGISTRY)
-			});
-			continue;
-		}
-		try {
-			const plugin = (await factoryLoader())();
-			plugin.register(app, context);
-			log$4.info("插件路由已注册", {
-				name: plugin.name,
-				version: plugin.version,
-				description: plugin.description,
-				requiresExternalAccess: plugin.requiresExternalAccess
-			});
-			if (plugin.init) {
-				await plugin.init();
-				log$4.info("插件初始化完成", { name: plugin.name });
-			}
-			loadedPlugins.push(plugin);
-			if (plugin.requiresExternalAccess) needsExternal = true;
-		} catch (err) {
-			log$4.error("插件加载失败", {
-				name,
-				error: err instanceof Error ? err.message : String(err)
-			});
-		}
-	}
-	log$4.info("插件加载完成", {
-		loaded: loadedPlugins.map((p) => p.name),
-		requiresExternalAccess: needsExternal
-	});
-	return { requiresExternalAccess: needsExternal };
-}
-/**
-* 关闭所有已加载的插件
-*/
-async function disposePlugins() {
-	for (const plugin of loadedPlugins) try {
-		if (plugin.dispose) {
-			await plugin.dispose();
-			log$4.info("插件已清理", { name: plugin.name });
-		}
-	} catch (err) {
-		log$4.warn("插件清理失败", {
-			name: plugin.name,
-			error: err instanceof Error ? err.message : String(err)
-		});
-	}
-	loadedPlugins = [];
-}
-//#endregion
 //#region src/messaging/inbound/reply-policy.ts
 const log$3 = larkLogger("messaging/reply-policy");
 /**
@@ -14001,8 +14417,7 @@ async function main() {
 	await teammateConfig.load();
 	logger.info("Teammate 配置加载完成", { globalDefault: teammateConfig.getData().globalDefault });
 	const gatewayPort = 3e3;
-	const hasPlugins = !!process.env.LARKPAL_PLUGINS?.trim();
-	const gatewayHost = process.env.LARKPAL_GATEWAY_HOST || (hasPlugins ? "0.0.0.0" : "localhost");
+	const gatewayHost = process.env.LARKPAL_GATEWAY_HOST || "localhost";
 	const messageStore = new SessionMessageStore(workspaceRoot);
 	const gateway = createGatewayServer({
 		port: gatewayPort,
@@ -14015,15 +14430,10 @@ async function main() {
 		},
 		messageStore
 	});
-	await loadPlugins(gateway.app, {
-		workspaceRoot,
-		externalBaseUrl: process.env.LARKPAL_EXTERNAL_URL
-	});
 	await gateway.start();
 	logger.info("网关 HTTP 服务启动完成", {
 		host: gatewayHost,
-		port: gatewayPort,
-		hasPlugins
+		port: gatewayPort
 	});
 	const messageDedup = new MessageDedup({
 		ttlMs: 6e4,
@@ -14350,8 +14760,6 @@ async function main() {
 		wsAbortController.abort();
 		logger.info("WebSocket 连接已关闭");
 		messageDedup.dispose();
-		await disposePlugins();
-		logger.info("网关插件已清理");
 		await gateway.stop();
 		logger.info("网关 HTTP 服务已停止");
 		logger.info("LarkPal 已关闭");