@vibe-lark/larkpal 0.1.40 → 0.1.42

package/dist/main.mjs

@@ -22,6 +22,7 @@ import path, { join as join$1 } from "path";
 import os, { homedir as homedir$1 } from "os";
 import express, { Router } from "express";
 import cron from "node-cron";
+import { EventEmitter as EventEmitter$1 } from "events";
 import * as Lark from "@larksuiteoapi/node-sdk";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { resolveDefaultAgentId } from "openclaw/plugin-sdk/agent-runtime";
@@ -224,7 +225,7 @@ function ensureLarkCliConfig() {
 * 首次启动时检测并生成 ~/.claude/settings.json 和 ~/.claude/CLAUDE.md，
 * 以及确保会话工作目录结构完整。
 */
-const logger$9 = larkLogger("config/defaults");
+const logger$10 = larkLogger("config/defaults");
 const DEFAULT_SETTINGS = {
 	permissions: {
 		allow: [
@@ -395,13 +396,13 @@ async function ensureDefaults() {
 	const settingsPath = join(claudeDir, "settings.json");
 	const claudeMdPath = join(claudeDir, "CLAUDE.md");
 	await mkdir(claudeDir, { recursive: true });
-	logger$9.info("确保 ~/.claude 目录存在", { path: claudeDir });
+	logger$10.info("确保 ~/.claude 目录存在", { path: claudeDir });
 	await writeFile(settingsPath, JSON.stringify(DEFAULT_SETTINGS, null, 2), "utf-8");
-	logger$9.info("settings.json 已同步（强制覆盖）", { path: settingsPath });
-	if (await fileExists(claudeMdPath)) logger$9.info("CLAUDE.md 已存在，跳过生成", { path: claudeMdPath });
+	logger$10.info("settings.json 已同步（强制覆盖）", { path: settingsPath });
+	if (await fileExists(claudeMdPath)) logger$10.info("CLAUDE.md 已存在，跳过生成", { path: claudeMdPath });
 	else {
 		await writeFile(claudeMdPath, DEFAULT_CLAUDE_MD, "utf-8");
-		logger$9.info("已生成默认 CLAUDE.md", { path: claudeMdPath });
+		logger$10.info("已生成默认 CLAUDE.md", { path: claudeMdPath });
 	}
 }
 //#endregion
@@ -819,14 +820,16 @@ var CredentialVault = class {
 /**
 * per-user MCP Server 配置合并
 *
-* CC 进程启动时，将全局 MCP 和用户私有 MCP 合并后传入：
+* CC 进程启动时，将全局 MCP、内置 MCP（larkpal）和用户私有 MCP 合并后传入：
 *
-*   ~/.claude/mcp-servers.json                ← 全局 MCP（lark-cli 等共享工具）
-*   /workspace/users/{userId}/mcp-servers.json ← 用户私有 MCP
-*     ↓ 合并（用户优先级高于全局，同名覆盖）
+*   内置 larkpal MCP Server                     ← 必定注入（交互式 tool）
+*   ~/.claude/mcp-servers.json                  ← 全局 MCP（lark-cli 等共享工具）
+*   /workspace/users/{userId}/mcp-servers.json  ← 用户私有 MCP
+*     ↓ 合并（用户优先级最高 > 全局 > 内置）
 *   临时文件 /tmp/mcp-{sessionId}.json → 通过 --mcp-config 传入 CC
 *
 * 效果：
+* - 所有 CC 进程都有 larkpal MCP Server（ask_user、request_permission、signal_no_reply）
 * - A 用户的 CC 进程连接 A 的数据库 MCP Server
 * - B 用户的 CC 进程连接 B 的数据库 MCP Server
 * - 全局工具（lark-cli、文件操作等）所有用户共享
@@ -835,32 +838,44 @@ const log$30 = larkLogger("user/mcp-merge");
 /** 全局 MCP 配置路径 */
 const GLOBAL_MCP_CONFIG_PATH = path.join(os.homedir(), ".claude", "mcp-servers.json");
 /**
-* 合并全局和用户 MCP 配置，写入临时文件
+* 获取 larkpal MCP Server 的可执行路径
 *
-* @returns 临时文件路径，用于 --mcp-config 参数；如果没有用户配置则返回 null
+* 优先使用 dist/mcp-server.mjs（生产构建），回退到 tsx 直接运行源码（开发模式）
+*/
+function getLarkpalMcpServerCommand() {
+	const distPath = path.resolve(import.meta.dirname ?? __dirname, "..", "dist", "mcp-server.mjs");
+	if (existsSync$1(distPath)) return {
+		command: "node",
+		args: [distPath]
+	};
+	const srcPath = path.resolve(import.meta.dirname ?? __dirname, "..", "src", "mcp-server", "index.ts");
+	if (existsSync$1(srcPath)) return {
+		command: "npx",
+		args: ["tsx", srcPath]
+	};
+	return {
+		command: "node",
+		args: [distPath]
+	};
+}
+/**
+* 构建内置 larkpal MCP Server 配置
+*/
+function getBuiltinLarkpalConfig() {
+	const { command, args } = getLarkpalMcpServerCommand();
+	return {
+		command,
+		args,
+		env: {}
+	};
+}
+/**
+* 合并全局、内置和用户 MCP 配置，写入临时文件
+*
+* @returns 临时文件路径，用于 --mcp-config 参数（总是返回有效路径）
 */
 async function mergeAndWriteMcpConfig(userCtx, sessionId) {
-	const userMcpPath = path.join(userCtx.credentialDir, "mcp-servers.json");
-	let userConfig = {};
-	if (existsSync$1(userMcpPath)) try {
-		const raw = await readFile$1(userMcpPath, "utf-8");
-		userConfig = JSON.parse(raw);
-		log$30.info("用户 MCP 配置加载完成", {
-			userId: userCtx.userId,
-			serverCount: Object.keys(userConfig).length,
-			servers: Object.keys(userConfig)
-		});
-	} catch (err) {
-		log$30.warn("用户 MCP 配置文件解析失败", {
-			userId: userCtx.userId,
-			path: userMcpPath,
-			error: err instanceof Error ? err.message : String(err)
-		});
-	}
-	if (Object.keys(userConfig).length === 0) {
-		log$30.info("用户无自定义 MCP 配置，使用全局默认", { userId: userCtx.userId });
-		return null;
-	}
+	const builtinConfig = { larkpal: getBuiltinLarkpalConfig() };
 	let globalConfig = {};
 	if (existsSync$1(GLOBAL_MCP_CONFIG_PATH)) try {
 		const raw = await readFile$1(GLOBAL_MCP_CONFIG_PATH, "utf-8");
@@ -872,12 +887,33 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId) {
 			error: err instanceof Error ? err.message : String(err)
 		});
 	}
+	let userConfig = {};
+	if (userCtx) {
+		const userMcpPath = path.join(userCtx.credentialDir, "mcp-servers.json");
+		if (existsSync$1(userMcpPath)) try {
+			const raw = await readFile$1(userMcpPath, "utf-8");
+			userConfig = JSON.parse(raw);
+			log$30.info("用户 MCP 配置加载完成", {
+				userId: userCtx.userId,
+				serverCount: Object.keys(userConfig).length,
+				servers: Object.keys(userConfig)
+			});
+		} catch (err) {
+			log$30.warn("用户 MCP 配置文件解析失败", {
+				userId: userCtx?.userId,
+				path: userMcpPath,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		}
+	}
 	const merged = {
+		...builtinConfig,
 		...globalConfig,
 		...userConfig
 	};
 	log$30.info("MCP 配置合并完成", {
-		userId: userCtx.userId,
+		userId: userCtx?.userId,
+		builtinServers: Object.keys(builtinConfig),
 		globalServers: Object.keys(globalConfig),
 		userServers: Object.keys(userConfig),
 		mergedServers: Object.keys(merged)
@@ -1144,16 +1180,14 @@ var SessionProcessManager = class {
 		if (config.maxBudgetUsd) args.push("--max-budget-usd", String(config.maxBudgetUsd));
 		if (config.model) args.push("--model", config.model);
 		args.push("--effort", CC_EFFORT);
-		if (config.userContext && !config.userContext.isTenantIdentity) try {
-			const mcpConfigPath = await mergeAndWriteMcpConfig(config.userContext, sessionId);
-			if (mcpConfigPath) {
-				args.push("--mcp-config", mcpConfigPath);
-				log$29.info("MCP 配置已合并并注入到 CC 进程", {
-					sessionId,
-					userId: config.userContext.userId,
-					mcpConfigPath
-				});
-			}
+		try {
+			const mcpConfigPath = await mergeAndWriteMcpConfig(config.userContext && !config.userContext.isTenantIdentity ? config.userContext : null, sessionId);
+			args.push("--mcp-config", mcpConfigPath);
+			log$29.info("MCP 配置已合并并注入到 CC 进程", {
+				sessionId,
+				userId: config.userContext?.userId,
+				mcpConfigPath
+			});
 		} catch (err) {
 			log$29.warn("MCP 配置合并失败，CC 进程将使用全局默认配置", {
 				sessionId,
@@ -1162,6 +1196,7 @@ var SessionProcessManager = class {
 		}
 		const processEnv = { ...process.env };
 		processEnv.CLAUDE_CODE_ENABLE_SDK_FILE_CHECKPOINTING = "1";
+		processEnv.LARKPAL_MCP_SESSION_ID = sessionId;
 		if (config.userContext) {
 			const { userContext } = config;
 			processEnv.LARKPAL_USER_ID = userContext.userId;
@@ -1982,7 +2017,7 @@ async function createLarkpalAgentAdapter() {
 *   群聊 → /workspace/chats/group_{chat_id}/
 *   话题 → /workspace/chats/group_{chat_id}/topics/{thread_id}/
 */
-const logger$8 = larkLogger("routing/session-router");
+const logger$9 = larkLogger("routing/session-router");
 const SESSION_OUTPUT_RULES = [
 	`## 内容输出优先级`,
 	"",
@@ -2021,7 +2056,7 @@ var SessionRouter = class {
 				cwd: path.join(this.workspaceRoot, "chats", `p2p_${safeId}`),
 				type: "p2p"
 			};
-			logger$8.debug("解析私聊路由", {
+			logger$9.debug("解析私聊路由", {
 				chatId,
 				userId: safeId,
 				sessionId: route.sessionId,
@@ -2037,7 +2072,7 @@ var SessionRouter = class {
 				cwd: path.join(groupCwd, "topics", threadId),
 				type: "topic"
 			};
-			logger$8.debug("解析话题路由", {
+			logger$9.debug("解析话题路由", {
 				chatId,
 				threadId,
 				sessionId: route.sessionId,
@@ -2050,7 +2085,7 @@ var SessionRouter = class {
 			cwd: groupCwd,
 			type: "group"
 		};
-		logger$8.debug("解析群聊路由", {
+		logger$9.debug("解析群聊路由", {
 			chatId,
 			sessionId: route.sessionId,
 			cwd: route.cwd
@@ -2064,7 +2099,7 @@ var SessionRouter = class {
 	* 此方法是幂等的，多次调用不会报错也不会覆盖已有文件。
 	*/
 	async ensureSessionDirectory(route) {
-		logger$8.info("确保会话目录存在", {
+		logger$9.info("确保会话目录存在", {
 			sessionId: route.sessionId,
 			cwd: route.cwd
 		});
@@ -2074,7 +2109,7 @@ var SessionRouter = class {
 		const claudeMdPath = path.join(route.cwd, "CLAUDE.md");
 		if (!existsSync$1(claudeMdPath)) {
 			await writeFile$1(claudeMdPath, this.generateClaudeMd(route), "utf-8");
-			logger$8.info("创建会话级 CLAUDE.md", {
+			logger$9.info("创建会话级 CLAUDE.md", {
 				path: claudeMdPath,
 				type: route.type
 			});
@@ -2138,7 +2173,7 @@ var SessionRouter = class {
 *
 * 内部通过 taskStore 维护所有任务的生命周期状态。
 */
-const logger$7 = larkLogger("gateway/execute");
+const logger$8 = larkLogger("gateway/execute");
 /** 全局任务存储：taskId → TaskInfo */
 const taskStore = /* @__PURE__ */ new Map();
 /**
@@ -2172,7 +2207,7 @@ function createExecuteRouter(processManager) {
 */
 async function handleExecute(req, res, processManager) {
 	const body = req.body;
-	logger$7.info("收到执行请求", {
+	logger$8.info("收到执行请求", {
 		session_id: body.session_id,
 		cwd: body.cwd,
 		prompt: body.prompt?.slice(0, 200),
@@ -2182,7 +2217,7 @@ async function handleExecute(req, res, processManager) {
 		has_llm_config: !!body.llm_config
 	});
 	if (!body.session_id || !body.cwd || !body.prompt) {
-		logger$7.warn("执行请求参数缺失", {
+		logger$8.warn("执行请求参数缺失", {
 			hasSessionId: !!body.session_id,
 			hasCwd: !!body.cwd,
 			hasPrompt: !!body.prompt
@@ -2202,7 +2237,7 @@ async function handleExecute(req, res, processManager) {
 		createdAt: /* @__PURE__ */ new Date()
 	};
 	taskStore.set(taskId, taskInfo);
-	logger$7.info("任务已创建", {
+	logger$8.info("任务已创建", {
 		taskId,
 		sessionId: body.session_id,
 		mode
@@ -2233,7 +2268,7 @@ async function handleExecute(req, res, processManager) {
 		const callbacks = createTaskCallbacks(taskId);
 		processManager.executePrompt(config, callbacks).catch((err) => {
 			const errorMsg = err instanceof Error ? err.message : String(err);
-			logger$7.error("异步任务执行异常", {
+			logger$8.error("异步任务执行异常", {
 				taskId,
 				error: errorMsg
 			});
@@ -2241,7 +2276,7 @@ async function handleExecute(req, res, processManager) {
 			taskInfo.error = errorMsg;
 			taskInfo.completedAt = /* @__PURE__ */ new Date();
 		});
-		logger$7.info("异步任务已启动，立即返回", { taskId });
+		logger$8.info("异步任务已启动，立即返回", { taskId });
 		res.status(202).json({
 			task_id: taskId,
 			status: "running"
@@ -2250,7 +2285,7 @@ async function handleExecute(req, res, processManager) {
 	}
 	try {
 		const result = await executeAndWaitResult$1(taskId, config, processManager);
-		logger$7.info("同步任务执行完成", {
+		logger$8.info("同步任务执行完成", {
 			taskId,
 			resultSubtype: result?.subtype
 		});
@@ -2261,7 +2296,7 @@ async function handleExecute(req, res, processManager) {
 		});
 	} catch (err) {
 		const errorMsg = err instanceof Error ? err.message : String(err);
-		logger$7.error("同步任务执行失败", {
+		logger$8.error("同步任务执行失败", {
 			taskId,
 			error: errorMsg
 		});
@@ -2279,12 +2314,12 @@ async function handleExecute(req, res, processManager) {
 */
 async function handleBatchExecute(req, res, processManager) {
 	const body = req.body;
-	logger$7.info("收到批量执行请求", {
+	logger$8.info("收到批量执行请求", {
 		taskCount: body.tasks?.length,
 		concurrency: body.concurrency
 	});
 	if (!body.tasks || !Array.isArray(body.tasks) || body.tasks.length === 0) {
-		logger$7.warn("批量执行请求参数缺失: tasks 为空或格式错误");
+		logger$8.warn("批量执行请求参数缺失: tasks 为空或格式错误");
 		res.status(400).json({
 			error: "Bad Request",
 			message: "Missing or empty required field: tasks"
@@ -2294,7 +2329,7 @@ async function handleBatchExecute(req, res, processManager) {
 	for (let i = 0; i < body.tasks.length; i++) {
 		const task = body.tasks[i];
 		if (!task?.session_id || !task?.cwd || !task?.prompt) {
-			logger$7.warn("批量执行子任务参数缺失", { index: i });
+			logger$8.warn("批量执行子任务参数缺失", { index: i });
 			res.status(400).json({
 				error: "Bad Request",
 				message: `Task at index ${i} is missing required fields: session_id, cwd, prompt`
@@ -2325,7 +2360,7 @@ async function handleBatchExecute(req, res, processManager) {
 			}
 		};
 	});
-	logger$7.info("批量任务已创建", {
+	logger$8.info("批量任务已创建", {
 		batchId,
 		taskIds,
 		concurrency
@@ -2342,17 +2377,17 @@ async function handleBatchExecute(req, res, processManager) {
 */
 function handleGetTask(req, res) {
 	const taskId = req.params.taskId;
-	logger$7.info("查询任务状态", { taskId });
+	logger$8.info("查询任务状态", { taskId });
 	const taskInfo = taskStore.get(taskId);
 	if (!taskInfo) {
-		logger$7.warn("任务不存在", { taskId });
+		logger$8.warn("任务不存在", { taskId });
 		res.status(404).json({
 			error: "Not Found",
 			message: `Task ${taskId} not found`
 		});
 		return;
 	}
-	logger$7.info("返回任务状态", {
+	logger$8.info("返回任务状态", {
 		taskId,
 		status: taskInfo.status
 	});
@@ -2369,10 +2404,10 @@ function handleGetTask(req, res) {
 */
 async function handleCancelTask(req, res, processManager) {
 	const taskId = req.params.taskId;
-	logger$7.info("收到取消任务请求", { taskId });
+	logger$8.info("收到取消任务请求", { taskId });
 	const taskInfo = taskStore.get(taskId);
 	if (!taskInfo) {
-		logger$7.warn("取消失败：任务不存在", { taskId });
+		logger$8.warn("取消失败：任务不存在", { taskId });
 		res.status(404).json({
 			error: "Not Found",
 			message: `Task ${taskId} not found`
@@ -2380,7 +2415,7 @@ async function handleCancelTask(req, res, processManager) {
 		return;
 	}
 	if (taskInfo.status !== "running") {
-		logger$7.warn("取消失败：任务不在运行状态", {
+		logger$8.warn("取消失败：任务不在运行状态", {
 			taskId,
 			status: taskInfo.status
 		});
@@ -2394,7 +2429,7 @@ async function handleCancelTask(req, res, processManager) {
 		await processManager.stopProcess(taskInfo.sessionId);
 		taskInfo.status = "cancelled";
 		taskInfo.completedAt = /* @__PURE__ */ new Date();
-		logger$7.info("任务已取消", {
+		logger$8.info("任务已取消", {
 			taskId,
 			sessionId: taskInfo.sessionId
 		});
@@ -2404,7 +2439,7 @@ async function handleCancelTask(req, res, processManager) {
 		});
 	} catch (err) {
 		const errorMsg = err instanceof Error ? err.message : String(err);
-		logger$7.error("取消任务时发生错误", {
+		logger$8.error("取消任务时发生错误", {
 			taskId,
 			error: errorMsg
 		});
@@ -2427,7 +2462,7 @@ function createTaskCallbacks(taskId) {
 			taskInfo.result = result;
 			taskInfo.status = result.isError ? "failed" : "completed";
 			taskInfo.completedAt = /* @__PURE__ */ new Date();
-			logger$7.info("任务收到结果", {
+			logger$8.info("任务收到结果", {
 				taskId,
 				status: taskInfo.status,
 				subtype: result.subtype,
@@ -2441,7 +2476,7 @@ function createTaskCallbacks(taskId) {
 			taskInfo.status = "failed";
 			taskInfo.error = error.message;
 			taskInfo.completedAt = /* @__PURE__ */ new Date();
-			logger$7.error("任务执行出错", {
+			logger$8.error("任务执行出错", {
 				taskId,
 				error: error.message
 			});
@@ -2463,7 +2498,7 @@ function executeAndWaitResult$1(taskId, config, processManager) {
 					taskInfo.status = result.isError ? "failed" : "completed";
 					taskInfo.completedAt = /* @__PURE__ */ new Date();
 				}
-				logger$7.info("同步任务收到结果", {
+				logger$8.info("同步任务收到结果", {
 					taskId,
 					subtype: result.subtype,
 					durationMs: result.durationMs,
@@ -2478,7 +2513,7 @@ function executeAndWaitResult$1(taskId, config, processManager) {
 					taskInfo.error = error.message;
 					taskInfo.completedAt = /* @__PURE__ */ new Date();
 				}
-				logger$7.error("同步任务执行出错", {
+				logger$8.error("同步任务执行出错", {
 					taskId,
 					error: error.message
 				});
@@ -2486,7 +2521,7 @@ function executeAndWaitResult$1(taskId, config, processManager) {
 			}
 		}).catch((err) => {
 			const errorMsg = err instanceof Error ? err.message : String(err);
-			logger$7.error("同步任务 executePrompt 调用失败", {
+			logger$8.error("同步任务 executePrompt 调用失败", {
 				taskId,
 				error: errorMsg
 			});
@@ -2506,7 +2541,7 @@ function executeAndWaitResult$1(taskId, config, processManager) {
 * 使用简单的信号量模式控制并发数，逐个启动任务直到所有任务完成。
 */
 async function runBatchTasks(taskConfigs, concurrency, processManager) {
-	logger$7.info("开始批量任务执行", {
+	logger$8.info("开始批量任务执行", {
 		totalTasks: taskConfigs.length,
 		concurrency
 	});
@@ -2518,7 +2553,7 @@ async function runBatchTasks(taskConfigs, concurrency, processManager) {
 				await processManager.executePrompt(config, callbacks);
 			} catch (err) {
 				const errorMsg = err instanceof Error ? err.message : String(err);
-				logger$7.error("批量子任务执行异常", {
+				logger$8.error("批量子任务执行异常", {
 					taskId,
 					error: errorMsg
 				});
@@ -2535,7 +2570,7 @@ async function runBatchTasks(taskConfigs, concurrency, processManager) {
 		if (executing.size >= concurrency) await Promise.race(executing);
 	}
 	await Promise.all(executing);
-	logger$7.info("批量任务全部完成", { totalTasks: taskConfigs.length });
+	logger$8.info("批量任务全部完成", { totalTasks: taskConfigs.length });
 }
 //#endregion
 //#region src/gateway/agent-completion-handler.ts
@@ -2554,7 +2589,7 @@ async function runBatchTasks(taskConfigs, concurrency, processManager) {
 *
 * 鉴权：通过 X-Internal-Secret 头验证服务间调用身份
 */
-const logger$6 = larkLogger("gateway/agent-completion");
+const logger$7 = larkLogger("gateway/agent-completion");
 /** 内部通信密钥，从环境变量读取 */
 const INTERNAL_SECRET = process.env.LARKPAL_API_SECRET || "dev-internal-secret";
 /** CC 执行时的工作目录（使用临时目录） */
@@ -2574,7 +2609,7 @@ function createAgentCompletionRouter(runtimeAdapter) {
 async function handleCompletion(req, res, runtimeAdapter) {
 	const secret = req.headers["x-internal-secret"];
 	if (secret !== INTERNAL_SECRET) {
-		logger$6.warn("Agent completion 鉴权失败", { providedSecret: secret?.slice(0, 8) + "..." });
+		logger$7.warn("Agent completion 鉴权失败", { providedSecret: secret?.slice(0, 8) + "..." });
 		res.status(401).json({
 			code: 1,
 			message: "鉴权失败"
@@ -2584,7 +2619,7 @@ async function handleCompletion(req, res, runtimeAdapter) {
 	const callbackUrl = req.headers["x-callback-url"];
 	const body = req.body;
 	if (!body.taskId || !body.prompt) {
-		logger$6.warn("Agent completion 参数不完整", {
+		logger$7.warn("Agent completion 参数不完整", {
 			hasTaskId: !!body.taskId,
 			hasPrompt: !!body.prompt
 		});
@@ -2594,7 +2629,7 @@ async function handleCompletion(req, res, runtimeAdapter) {
 		});
 		return;
 	}
-	logger$6.info("收到 Agent completion 请求", {
+	logger$7.info("收到 Agent completion 请求", {
 		taskId: body.taskId,
 		task: body.task || "unknown",
 		promptLength: body.prompt.length,
@@ -2612,7 +2647,7 @@ async function handleCompletion(req, res, runtimeAdapter) {
 			const filePath = join(taskDir, file.name);
 			const fileBuffer = Buffer.from(file.contentBase64, "base64");
 			await writeFile(filePath, fileBuffer);
-			logger$6.info("附件文件已写入", {
+			logger$7.info("附件文件已写入", {
 				filePath,
 				sizeBytes: fileBuffer.length
 			});
@@ -2630,13 +2665,13 @@ async function handleCompletion(req, res, runtimeAdapter) {
 			const { readFile } = await import("node:fs/promises");
 			const resultFilePath = join(taskDir, resultFileName);
 			const fileContent = await readFile(resultFilePath, "utf-8");
-			logger$6.info("从结果文件读取输出", {
+			logger$7.info("从结果文件读取输出", {
 				resultFilePath,
 				contentLength: fileContent.length
 			});
 			finalResult = fileContent;
 		} catch {
-			logger$6.info("结果文件不存在，使用 CC 文本输出");
+			logger$7.info("结果文件不存在，使用 CC 文本输出");
 		}
 		try {
 			const { rm } = await import("node:fs/promises");
@@ -2645,7 +2680,7 @@ async function handleCompletion(req, res, runtimeAdapter) {
 				force: true
 			});
 		} catch {}
-		logger$6.info("Agent completion 完成", {
+		logger$7.info("Agent completion 完成", {
 			taskId: body.taskId,
 			resultLength: finalResult.length
 		});
@@ -2664,7 +2699,7 @@ async function handleCompletion(req, res, runtimeAdapter) {
 		});
 	} catch (err) {
 		const errorMsg = err instanceof Error ? err.message : String(err);
-		logger$6.error("Agent completion 执行失败", {
+		logger$7.error("Agent completion 执行失败", {
 			taskId: body.taskId,
 			error: errorMsg
 		});
@@ -2692,7 +2727,7 @@ async function executeAndWaitResult(runtimeAdapter, config) {
 				resultText += text;
 			},
 			onResult(result) {
-				logger$6.info("CC 执行返回结果", {
+				logger$7.info("CC 执行返回结果", {
 					sessionId: config.sessionId,
 					subtype: result.subtype,
 					resultLength: resultText.length
@@ -2700,7 +2735,7 @@ async function executeAndWaitResult(runtimeAdapter, config) {
 				resolve(resultText || result.result || "");
 			},
 			onError(error) {
-				logger$6.error("CC 执行出错", {
+				logger$7.error("CC 执行出错", {
 					sessionId: config.sessionId,
 					error: error.message
 				});
@@ -2714,7 +2749,7 @@ async function executeAndWaitResult(runtimeAdapter, config) {
 */
 async function sendCallback(callbackUrl, taskId, status, result, error) {
 	try {
-		logger$6.info("发送回调通知", {
+		logger$7.info("发送回调通知", {
 			callbackUrl,
 			taskId,
 			status,
@@ -2735,18 +2770,18 @@ async function sendCallback(callbackUrl, taskId, status, result, error) {
 		});
 		if (!response.ok) {
 			const errText = await response.text();
-			logger$6.warn("回调通知失败", {
+			logger$7.warn("回调通知失败", {
 				callbackUrl,
 				status: response.status,
 				body: errText
 			});
-		} else logger$6.info("回调通知成功", {
+		} else logger$7.info("回调通知成功", {
 			callbackUrl,
 			taskId
 		});
 	} catch (err) {
 		const errorMsg = err instanceof Error ? err.message : String(err);
-		logger$6.error("回调通知异常", {
+		logger$7.error("回调通知异常", {
 			callbackUrl,
 			taskId,
 			error: errorMsg
@@ -2764,7 +2799,7 @@ async function sendCallback(callbackUrl, taskId, status, result, error) {
 *
 * 提供 CRUD 接口来管理技能文件。
 */
-const logger$5 = larkLogger("gateway/skills");
+const logger$6 = larkLogger("gateway/skills");
 /** 全局技能目录 */
 const GLOBAL_COMMANDS_DIR = join(homedir(), ".claude", "commands");
 /** 会话级技能基础目录 */
@@ -2807,7 +2842,7 @@ async function scanSkills(dir, scope) {
 			});
 		}
 	} catch (err) {
-		if (err.code !== "ENOENT") logger$5.warn("failed to scan skills directory", {
+		if (err.code !== "ENOENT") logger$6.warn("failed to scan skills directory", {
 			dir,
 			error: String(err)
 		});
@@ -2820,16 +2855,16 @@ async function scanSkills(dir, scope) {
 function createSkillsRouter() {
 	const router = express.Router();
 	router.get("/", async (req, res) => {
-		logger$5.info("list skills request", {
+		logger$6.info("list skills request", {
 			method: req.method,
 			url: req.originalUrl
 		});
 		try {
 			const skills = await scanSkills(GLOBAL_COMMANDS_DIR, "global");
-			logger$5.info("list skills response", { skillCount: skills.length });
+			logger$6.info("list skills response", { skillCount: skills.length });
 			res.json({ skills });
 		} catch (err) {
-			logger$5.error("list skills failed", { error: String(err) });
+			logger$6.error("list skills failed", { error: String(err) });
 			res.status(500).json({
 				error: "Failed to list skills",
 				detail: String(err)
@@ -2838,7 +2873,7 @@ function createSkillsRouter() {
 	});
 	router.post("/", async (req, res) => {
 		const { name, content, scope, session_dir } = req.body;
-		logger$5.info("create skill request", {
+		logger$6.info("create skill request", {
 			method: req.method,
 			url: req.originalUrl,
 			body: {
@@ -2849,7 +2884,7 @@ function createSkillsRouter() {
 			}
 		});
 		if (!name || !content || !scope) {
-			logger$5.warn("create skill bad request", {
+			logger$6.warn("create skill bad request", {
 				name,
 				scope
 			});
@@ -2857,12 +2892,12 @@ function createSkillsRouter() {
 			return;
 		}
 		if (scope !== "global" && scope !== "session") {
-			logger$5.warn("create skill invalid scope", { scope });
+			logger$6.warn("create skill invalid scope", { scope });
 			res.status(400).json({ error: "Invalid scope, must be \"global\" or \"session\"" });
 			return;
 		}
 		if (scope === "session" && !session_dir) {
-			logger$5.warn("create skill missing session_dir for session scope");
+			logger$6.warn("create skill missing session_dir for session scope");
 			res.status(400).json({ error: "session_dir is required for session scope" });
 			return;
 		}
@@ -2872,7 +2907,7 @@ function createSkillsRouter() {
 			const filePath = join(targetDir, `${name}.md`);
 			await writeFile(filePath, content, "utf-8");
 			const id = encodeId(filePath);
-			logger$5.info("create skill response", {
+			logger$6.info("create skill response", {
 				id,
 				name,
 				scope,
@@ -2885,7 +2920,7 @@ function createSkillsRouter() {
 				path: filePath
 			});
 		} catch (err) {
-			logger$5.error("create skill failed", { error: String(err) });
+			logger$6.error("create skill failed", { error: String(err) });
 			res.status(500).json({
 				error: "Failed to create skill",
 				detail: String(err)
@@ -2895,14 +2930,14 @@ function createSkillsRouter() {
 	router.put("/:id", async (req, res) => {
 		const id = String(req.params.id);
 		const { content } = req.body;
-		logger$5.info("update skill request", {
+		logger$6.info("update skill request", {
 			method: req.method,
 			url: req.originalUrl,
 			id,
 			contentLength: content?.length
 		});
 		if (!content) {
-			logger$5.warn("update skill bad request: missing content", { id });
+			logger$6.warn("update skill bad request: missing content", { id });
 			res.status(400).json({ error: "Missing required field: content" });
 			return;
 		}
@@ -2910,7 +2945,7 @@ function createSkillsRouter() {
 			const filePath = decodeId(id);
 			await stat(filePath);
 			await writeFile(filePath, content, "utf-8");
-			logger$5.info("update skill response", {
+			logger$6.info("update skill response", {
 				id,
 				updated: true,
 				filePath
@@ -2921,11 +2956,11 @@ function createSkillsRouter() {
 			});
 		} catch (err) {
 			if (err.code === "ENOENT") {
-				logger$5.warn("update skill not found", { id });
+				logger$6.warn("update skill not found", { id });
 				res.status(404).json({ error: "Skill not found" });
 				return;
 			}
-			logger$5.error("update skill failed", {
+			logger$6.error("update skill failed", {
 				id,
 				error: String(err)
 			});
@@ -2937,7 +2972,7 @@ function createSkillsRouter() {
 	});
 	router.delete("/:id", async (req, res) => {
 		const id = String(req.params.id);
-		logger$5.info("delete skill request", {
+		logger$6.info("delete skill request", {
 			method: req.method,
 			url: req.originalUrl,
 			id
@@ -2946,7 +2981,7 @@ function createSkillsRouter() {
 			const filePath = decodeId(id);
 			await stat(filePath);
 			await unlink(filePath);
-			logger$5.info("delete skill response", {
+			logger$6.info("delete skill response", {
 				id,
 				deleted: true,
 				filePath
@@ -2957,11 +2992,11 @@ function createSkillsRouter() {
 			});
 		} catch (err) {
 			if (err.code === "ENOENT") {
-				logger$5.warn("delete skill not found", { id });
+				logger$6.warn("delete skill not found", { id });
 				res.status(404).json({ error: "Skill not found" });
 				return;
 			}
-			logger$5.error("delete skill failed", {
+			logger$6.error("delete skill failed", {
 				id,
 				error: String(err)
 			});
@@ -2982,7 +3017,7 @@ function createSkillsRouter() {
 *   - 会话目录: /workspace/chats/
 *   - 人设文件: ~/.claude/CLAUDE.md
 */
-const logger$4 = larkLogger("gateway/status");
+const logger$5 = larkLogger("gateway/status");
 /** 会话目录 */
 const SESSIONS_DIR = "/workspace/chats";
 /** 人设文件路径 */
@@ -2993,7 +3028,7 @@ const PERSONA_FILE = join(homedir(), ".claude", "CLAUDE.md");
 function createStatusRouter() {
 	const router = express.Router();
 	router.get("/sessions", async (req, res) => {
-		logger$4.info("list sessions request", {
+		logger$5.info("list sessions request", {
 			method: req.method,
 			url: req.originalUrl
 		});
@@ -3004,7 +3039,7 @@ function createStatusRouter() {
 				entries = await readdir(SESSIONS_DIR);
 			} catch (err) {
 				if (err.code === "ENOENT") {
-					logger$4.info("list sessions response: sessions directory not found, returning empty", { dir: SESSIONS_DIR });
+					logger$5.info("list sessions response: sessions directory not found, returning empty", { dir: SESSIONS_DIR });
 					res.json({ sessions: [] });
 					return;
 				}
@@ -3022,10 +3057,10 @@ function createStatusRouter() {
 					});
 				} catch {}
 			}
-			logger$4.info("list sessions response", { sessionCount: sessions.length });
+			logger$5.info("list sessions response", { sessionCount: sessions.length });
 			res.json({ sessions });
 		} catch (err) {
-			logger$4.error("list sessions failed", { error: String(err) });
+			logger$5.error("list sessions failed", { error: String(err) });
 			res.status(500).json({
 				error: "Failed to list sessions",
 				detail: String(err)
@@ -3034,7 +3069,7 @@ function createStatusRouter() {
 	});
 	router.get("/sessions/:id", async (req, res) => {
 		const id = String(req.params.id);
-		logger$4.info("get session detail request", {
+		logger$5.info("get session detail request", {
 			method: req.method,
 			url: req.originalUrl,
 			sessionId: id
@@ -3046,14 +3081,14 @@ function createStatusRouter() {
 				s = await stat(sessionPath);
 			} catch (err) {
 				if (err.code === "ENOENT") {
-					logger$4.warn("get session detail: session not found", { id });
+					logger$5.warn("get session detail: session not found", { id });
 					res.status(404).json({ error: "Session not found" });
 					return;
 				}
 				throw err;
 			}
 			if (!s.isDirectory()) {
-				logger$4.warn("get session detail: path is not a directory", { id });
+				logger$5.warn("get session detail: path is not a directory", { id });
 				res.status(404).json({ error: "Session not found" });
 				return;
 			}
@@ -3061,7 +3096,7 @@ function createStatusRouter() {
 			const files = [];
 			for (const entry of entries) files.push(entry);
 			const lastModified = s.mtime.toISOString();
-			logger$4.info("get session detail response", {
+			logger$5.info("get session detail response", {
 				id,
 				path: sessionPath,
 				fileCount: files.length,
@@ -3074,7 +3109,7 @@ function createStatusRouter() {
 				lastModified
 			});
 		} catch (err) {
-			logger$4.error("get session detail failed", {
+			logger$5.error("get session detail failed", {
 				id,
 				error: String(err)
 			});
@@ -3085,7 +3120,7 @@ function createStatusRouter() {
 		}
 	});
 	router.get("/status", async (req, res) => {
-		logger$4.info("get status request", {
+		logger$5.info("get status request", {
 			method: req.method,
 			url: req.originalUrl
 		});
@@ -3097,13 +3132,13 @@ function createStatusRouter() {
 				processes: [],
 				memory
 			};
-			logger$4.info("get status response", {
+			logger$5.info("get status response", {
 				uptime: uptimeSeconds,
 				memoryRss: memory.rss
 			});
 			res.json(statusData);
 		} catch (err) {
-			logger$4.error("get status failed", { error: String(err) });
+			logger$5.error("get status failed", { error: String(err) });
 			res.status(500).json({
 				error: "Failed to get status",
 				detail: String(err)
@@ -3111,7 +3146,7 @@ function createStatusRouter() {
 		}
 	});
 	router.get("/persona", async (req, res) => {
-		logger$4.info("get persona request", {
+		logger$5.info("get persona request", {
 			method: req.method,
 			url: req.originalUrl
 		});
@@ -3121,16 +3156,16 @@ function createStatusRouter() {
 				content = await readFile(PERSONA_FILE, "utf-8");
 			} catch (err) {
 				if (err.code === "ENOENT") {
-					logger$4.info("get persona: CLAUDE.md not found, returning empty");
+					logger$5.info("get persona: CLAUDE.md not found, returning empty");
 					res.json({ content: "" });
 					return;
 				}
 				throw err;
 			}
-			logger$4.info("get persona response", { contentLength: content.length });
+			logger$5.info("get persona response", { contentLength: content.length });
 			res.json({ content });
 		} catch (err) {
-			logger$4.error("get persona failed", { error: String(err) });
+			logger$5.error("get persona failed", { error: String(err) });
 			res.status(500).json({
 				error: "Failed to get persona",
 				detail: String(err)
@@ -3138,7 +3173,7 @@ function createStatusRouter() {
 		}
 	});
 	router.put("/persona", async (_req, res) => {
-		logger$4.warn("PUT /persona 已废弃，人设内容由飞书云文档统一管理，请使用 POST /api/sync-app-info 触发同步");
+		logger$5.warn("PUT /persona 已废弃，人设内容由飞书云文档统一管理，请使用 POST /api/sync-app-info 触发同步");
 		res.status(403).json({ error: "人设内容由飞书云文档统一管理，不支持直接修改。请在云文档中编辑后调用 POST /api/sync-app-info 同步。" });
 	});
 	return router;
@@ -3151,7 +3186,7 @@ function createStatusRouter() {
 * 接收来自外部系统的 hook 通知，记录详细日志。
 * 所有 hook 当前只做日志记录，不做复杂业务处理。
 */
-const logger$3 = larkLogger("gateway/hooks");
+const logger$4 = larkLogger("gateway/hooks");
 /**
 * 创建 HTTP Hooks 路由
 */
@@ -3159,7 +3194,7 @@ function createHooksRouter() {
 	const router = express.Router();
 	router.post("/session-start", (req, res) => {
 		const body = req.body;
-		logger$3.info("hook received: session-start", {
+		logger$4.info("hook received: session-start", {
 			method: req.method,
 			url: req.originalUrl,
 			sessionId: body.session_id,
@@ -3169,7 +3204,7 @@ function createHooksRouter() {
 	});
 	router.post("/stop", (req, res) => {
 		const body = req.body;
-		logger$3.info("hook received: stop", {
+		logger$4.info("hook received: stop", {
 			method: req.method,
 			url: req.originalUrl,
 			body
@@ -3178,7 +3213,7 @@ function createHooksRouter() {
 	});
 	router.post("/session-end", (req, res) => {
 		const body = req.body;
-		logger$3.info("hook received: session-end", {
+		logger$4.info("hook received: session-end", {
 			method: req.method,
 			url: req.originalUrl,
 			sessionId: body.session_id,
@@ -3188,7 +3223,7 @@ function createHooksRouter() {
 	});
 	router.post("/notification", (req, res) => {
 		const body = req.body;
-		logger$3.info("hook received: notification", {
+		logger$4.info("hook received: notification", {
 			method: req.method,
 			url: req.originalUrl,
 			body
@@ -3429,6 +3464,178 @@ function createSchedulerRouter(taskManager) {
 	return router;
 }
 //#endregion
+//#region src/gateway/mcp-callback-handler.ts
+/**
+* MCP Server 回调路由 Handler
+*
+* 接收 MCP Server（作为 CC tool provider）发起的回调请求，管理 pending requests 的生命周期。
+*
+* 架构:
+*   MCP Server → POST /api/mcp/callback        → 宿主层接收（存储 pending，发出事件）
+*   用户操作卡片 → 飞书回调 → PUT /api/mcp/resolve/:requestId → 将答案存入
+*   MCP Server → GET /api/mcp/resolve/:requestId → 轮询获取用户回答
+*/
+const logger$3 = larkLogger("gateway/mcp-callback");
+/** pending requests 内存 Map */
+const pendingRequests = /* @__PURE__ */ new Map();
+/** session 静默标记 Map */
+const sessionNoReplyFlags = /* @__PURE__ */ new Map();
+/** TTL: 30 分钟 */
+const TTL_MS = 1800 * 1e3;
+/** 定期清理过期的 pending requests（每 5 分钟检查一次） */
+setInterval(() => {
+	const now = Date.now();
+	let cleaned = 0;
+	for (const [id, req] of pendingRequests) if (now - req.createdAt > TTL_MS) {
+		pendingRequests.delete(id);
+		cleaned++;
+	}
+	if (cleaned > 0) logger$3.info("TTL cleanup completed", {
+		cleaned,
+		remaining: pendingRequests.size
+	});
+}, 300 * 1e3).unref();
+/**
+* 当收到新的 MCP callback 时发出事件。
+* 事件名: `callback:${sessionId}`，payload 为 PendingMcpRequest。
+* 用于 dispatch-cc 订阅并在收到 ask_user/request_permission 回调时发送飞书卡片。
+*/
+const onMcpCallback = new EventEmitter$1();
+onMcpCallback.setMaxListeners(100);
+/**
+* 将 result 存入对应的 pending request
+* @returns true 表示成功 resolve，false 表示 requestId 不存在
+*/
+function resolveMcpRequest(requestId, result) {
+	const pending = pendingRequests.get(requestId);
+	if (!pending) {
+		logger$3.warn("resolveMcpRequest: requestId not found", { requestId });
+		return false;
+	}
+	pending.result = result;
+	logger$3.info("resolveMcpRequest: request resolved", {
+		requestId,
+		sessionId: pending.sessionId,
+		tool: pending.tool,
+		elapsed: Date.now() - pending.createdAt
+	});
+	return true;
+}
+/**
+* 清除 session 的静默标记（每个 turn 开始时调用）
+*/
+function clearSessionNoReplyFlag(sessionId) {
+	if (sessionNoReplyFlags.has(sessionId)) {
+		sessionNoReplyFlags.delete(sessionId);
+		logger$3.debug("clearSessionNoReplyFlag: cleared", { sessionId });
+	}
+}
+/**
+* 创建 MCP Callback 路由
+*/
+function createMcpCallbackRouter() {
+	const router = express.Router();
+	router.post("/callback", (req, res) => {
+		const startTime = Date.now();
+		const { requestId, tool, params, sessionId } = req.body;
+		logger$3.info("callback received", {
+			requestId,
+			tool,
+			sessionId,
+			params
+		});
+		if (!requestId || !tool || !sessionId) {
+			logger$3.warn("callback rejected: missing required fields", {
+				requestId,
+				tool,
+				sessionId
+			});
+			res.status(400).json({ error: "Missing required fields: requestId, tool, sessionId" });
+			return;
+		}
+		if (tool === "signal_no_reply") {
+			sessionNoReplyFlags.set(sessionId, true);
+			logger$3.info("signal_no_reply: session marked as no-reply", {
+				requestId,
+				sessionId,
+				elapsed: Date.now() - startTime
+			});
+			res.json({ acknowledged: true });
+			return;
+		}
+		const pending = {
+			requestId,
+			tool,
+			params,
+			sessionId,
+			createdAt: Date.now()
+		};
+		pendingRequests.set(requestId, pending);
+		logger$3.info("pending request created", {
+			requestId,
+			tool,
+			sessionId,
+			totalPending: pendingRequests.size,
+			elapsed: Date.now() - startTime
+		});
+		onMcpCallback.emit(`callback:${sessionId}`, pending);
+		res.json({
+			status: "pending",
+			requestId
+		});
+	});
+	router.get("/resolve/:requestId", (req, res) => {
+		const requestId = req.params.requestId;
+		logger$3.debug("resolve poll", { requestId });
+		const pending = pendingRequests.get(requestId);
+		if (!pending) {
+			logger$3.warn("resolve poll: requestId not found", { requestId });
+			res.status(404).json({ status: "not_found" });
+			return;
+		}
+		if (pending.result !== void 0) {
+			const result = pending.result;
+			pendingRequests.delete(requestId);
+			logger$3.info("resolve poll: returning resolved result", {
+				requestId,
+				sessionId: pending.sessionId,
+				tool: pending.tool,
+				elapsed: Date.now() - pending.createdAt
+			});
+			res.json({
+				status: "resolved",
+				result
+			});
+			return;
+		}
+		logger$3.debug("resolve poll: still pending", {
+			requestId,
+			sessionId: pending.sessionId,
+			waitingMs: Date.now() - pending.createdAt
+		});
+		res.json({ status: "pending" });
+	});
+	router.put("/resolve/:requestId", (req, res) => {
+		const requestId = req.params.requestId;
+		const body = req.body;
+		logger$3.info("resolve put", {
+			requestId,
+			result: body.result
+		});
+		if (body.result === void 0) {
+			logger$3.warn("resolve put rejected: missing result field", { requestId });
+			res.status(400).json({ error: "Missing required field: result" });
+			return;
+		}
+		if (!resolveMcpRequest(requestId, body.result)) {
+			res.status(404).json({ error: "requestId not found" });
+			return;
+		}
+		res.json({ success: true });
+	});
+	return router;
+}
+//#endregion
 //#region src/core/app-info-sync.ts
 /**
 * 应用信息同步
@@ -3740,53 +3947,34 @@ function getDefaultClaudeMdBody() {
 - 你的可用技能在 ~/.claude/commands/ 和当前目录的 .claude/commands/ 中
 - 使用 /help 查看所有可用技能
 
-## 交互式卡片（重要）
-
-当你需要向用户发送交互式卡片时，在回复中嵌入以下标记。系统会自动检测并发送对应的飞书卡片。
-
-### 权限申请卡片
-当 lark-cli 调用返回权限不足错误（如 99991672、scope missing）时，使用此标记引导用户申请权限：
+## 交互式工具（重要）
 
-[PERMISSION_REQUEST]
-\`\`\`json
-{"scopes": ["calendar:calendar", "vc:meeting.meetingevent:read"]}
-\`\`\`
+你的 MCP 工具列表中有以下 LarkPal 系统级工具，它们由宿主层自动注册，用于与用户进行结构化交互：
 
-系统会发送一张独立的权限申请卡片，包含"去申请"和"已完成"按钮。用户完成配置后会自动通知你重试。
+### ask_user — 向用户提问
+当你需要收集用户的多维信息（不确定且需要用户决策的场景），使用此工具。
+工具会阻塞等待用户在飞书/Web 端回答后返回结构化答案。
 
-### 向用户提问卡片
-当你需要收集用户的多维信息时（不确定且需要用户决策的场景），使用此标记发送结构化提问卡片：
+参数说明：
+- question: 主问题描述
+- phases: 提问阶段列表，每个阶段可包含选项（options）或允许自由文本（allowFreeText）
 
-[ASK_USER]
-\`\`\`json
-{
-  "question": "为了帮你完成这个任务，需要确认以下信息：",
-  "phases": [
-    {
-      "id": "target",
-      "title": "目标选择",
-      "description": "你想在哪个环境操作？",
-      "options": [{"label": "测试环境", "value": "sit"}, {"label": "生产环境", "value": "prod"}],
-      "allowFreeText": true,
-      "required": true
-    },
-    {
-      "id": "scope",
-      "title": "操作范围",
-      "options": [{"label": "仅当前模块", "value": "current"}, {"label": "全量", "value": "all"}],
-      "required": false
-    }
-  ]
-}
-\`\`\`
+### request_permission — 请求飞书 API 权限
+当 lark-cli 调用返回权限不足错误（如 99991672、scope missing）时，使用此工具引导用户申请权限。
+工具会阻塞等待用户在飞书端完成权限配置后返回结果。
 
-卡片会逐 phase 展示选项，用户可选择预设项或跳过。至少需要回答一个 phase。回答完成后系统会将结果注入对话继续。
+参数说明：
+- scopes: 需要的权限列表（如 "contact:user.base:readonly"）
+- reason: 申请原因说明
 
-**注意**：标记文本会从最终展示给用户的回复中自动移除，用户只会看到卡片本身。
+### signal_no_reply — 标记本次不回复
+在 teammate 评估等场景中，如果你决定不参与当前对话，调用此工具标记后即可正常结束。
+此工具即时返回，不阻塞。
 
-### 何时使用标记 vs lark-cli
-- **需要用户回答、确认、选择** 的场景 → 必须使用 [ASK_USER] 或 [PERMISSION_REQUEST] 标记，系统会统一样式并处理回调
+### 何时使用 MCP 工具 vs lark-cli
+- **需要用户回答、确认、选择** 的场景 → 必须使用 ask_user 或 request_permission 工具，系统会统一发送飞书卡片并处理回调
 - **纯通知、展示信息** 的卡片（不需要用户交互反馈） → 可以用 lark-cli 自行发送
+- **决定静默不回复** → 使用 signal_no_reply 工具
 `;
 }
 /**
@@ -4408,6 +4596,7 @@ function registerRoutes(app, processManager, scheduledTaskManager, appCredential
 	}
 	app.use("/api", createStatusRouter());
 	app.use("/hooks", createHooksRouter());
+	app.use("/api/mcp", createMcpCallbackRouter());
 	app.use(createChatAuthRouter());
 	if (processManager && messageStore) app.use(createChatRouter({
 		processManager,
@@ -5727,389 +5916,101 @@ var LarkClient = class LarkClient {
 };
 injectLarkClient(LarkClient);
 //#endregion
-//#region src/card/interactive-cards.ts
+//#region src/card/reasoning-utils.ts
 /**
-* 交互式卡片模块 — 授权卡片 & 提问卡片
+* Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+* SPDX-License-Identifier: MIT
 *
-* 基于"后处理检测 + 下轮注入"的异步模式：
-* CC 无法暂停等待用户输入，因此通过卡片交互收集用户反馈后，
-* 将结果作为新消息注入 CC 的下一轮对话。
+* Shared utilities for the reasoning display subsystem.
+*/
+function normalizeToolName(name) {
+	return name?.trim().toLowerCase() ?? "";
+}
+function truncateText(value, maxLength) {
+	if (value.length <= maxLength) return value;
+	return `${value.slice(0, maxLength - 3)}...`;
+}
+const INLINE_ASSIGNMENT_RE = /(^|[\s"'`])([A-Za-z_][A-Za-z0-9_]*)(=(?:"[^"]*"|'[^']*'|[^\s"'`]+))/g;
+const AUTH_HEADER_SECRET_RE = /(Authorization\s*:\s*(?:Bearer|Basic|Token)\s+)([^'"\s]+)/gi;
+const QUOTED_HEADER_ARG_RE = /((?:^|[\s"'`])(?:-H|--header)\s+)(['"])([A-Za-z0-9_-]+)(\s*:\s*)([^'"]*)(\2)/gi;
+const UNQUOTED_HEADER_ARG_RE = /((?:^|[\s"'`])(?:-H|--header)\s+)([A-Za-z0-9_-]+)(\s*:\s*)([^\s"'`]+)/gi;
+const SECRET_FLAG_RE = /((?:^|[\s"'`]))(--?[A-Za-z0-9][A-Za-z0-9-]*)(=|\s+)(?:"([^"]*)"|'([^']*)'|([^\s"'`]+))/g;
+const SENSITIVE_NAME_RE = /token|secret|password|api[_-]?key|authorization|cookie|credential|bearer|session[_-]?id|client[_-]?secret|access[_-]?key/i;
+function redactInlineSecrets(value) {
+	return value.replace(INLINE_ASSIGNMENT_RE, (match, prefix, key) => isSensitiveName(key) ? `${prefix}${key}=[redacted]` : match).replace(AUTH_HEADER_SECRET_RE, "$1[redacted]").replace(QUOTED_HEADER_ARG_RE, (match, prefix, quote, name, separator) => shouldRedactHeaderValue(name) ? `${prefix}${quote}${name}${separator}[redacted]${quote}` : match).replace(UNQUOTED_HEADER_ARG_RE, (match, prefix, name, separator) => shouldRedactHeaderValue(name) ? `${prefix}${name}${separator}[redacted]` : match).replace(SECRET_FLAG_RE, (match, prefix, flag, separator, doubleQuoted, singleQuoted, bare) => {
+		if (!isSensitiveName(flag.replace(/^-+/, ""))) return match;
+		return `${prefix}${flag}${separator}${doubleQuoted !== void 0 ? "\"[redacted]\"" : singleQuoted !== void 0 ? "'[redacted]'" : bare !== void 0 ? "[redacted]" : "[redacted]"}`;
+	});
+}
+function isSensitiveName(value) {
+	return SENSITIVE_NAME_RE.test(value);
+}
+function shouldRedactHeaderValue(name) {
+	return !/^authorization$/i.test(name) && isSensitiveName(name);
+}
+//#endregion
+//#region src/card/tool-use-trace-store.ts
+/**
+* Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
+* SPDX-License-Identifier: MIT
 *
-* 包含：
-* - 授权申请卡片（Permission Auth Card）
-* - 多 Phase 提问卡片（Ask Card）
-* - CC 输出文本后处理（检测特殊标记）
-* - 操作 ID 生命周期管理
+* Runtime store for structured tool-use steps.
+*
+* The Feishu card renderer reads from this store by session key so it can
+* render observable, replayable tool execution without relying purely on
+* reply payload text.
 */
-const log$19 = larkLogger("card/interactive-cards");
-const pendingOperations = /* @__PURE__ */ new Map();
-const OPERATION_TTL_MS = 1800 * 1e3;
-setInterval(() => {
+const TRACE_TTL_MS = 1800 * 1e3;
+const MAX_SESSION_TRACES = 128;
+const MAX_STEPS_PER_SESSION = 256;
+const STEP_RUNNING_TIMEOUT_MS = 300 * 1e3;
+const GENERIC_STRING_LIMIT = 512;
+const RESULT_STRING_LIMIT = 1024;
+const COMMAND_STRING_LIMIT = 4096;
+const PATH_STRING_LIMIT = 2048;
+const sessionTraces = /* @__PURE__ */ new Map();
+function startToolUseTraceRun(sessionKey) {
+	if (!sessionKey) return;
+	pruneTraceStore();
+	sessionTraces.set(sessionKey, {
+		nextSeq: 1,
+		updatedAt: Date.now(),
+		steps: [],
+		currentRunId: void 0
+	});
+}
+function clearToolUseTraceRun(sessionKey) {
+	if (!sessionKey) return;
+	sessionTraces.delete(sessionKey);
+}
+function recordToolUseStart(params) {
+	const { sessionKey, toolName, toolParams, toolCallId, runId } = params;
+	if (!sessionKey || !toolName) return;
+	const state = sessionTraces.get(sessionKey);
+	if (!state) return;
+	if (runId) {
+		if (state.currentRunId === void 0) state.currentRunId = runId;
+		else if (state.currentRunId !== runId) return;
+	}
 	const now = Date.now();
-	for (const [id, op] of pendingOperations) if (now - op.createdAt > OPERATION_TTL_MS) pendingOperations.delete(id);
-}, 6e4);
+	if (state.steps.length >= MAX_STEPS_PER_SESSION) state.steps.splice(0, state.steps.length - MAX_STEPS_PER_SESSION + 1);
+	state.steps.push({
+		id: `${state.nextSeq}`,
+		seq: state.nextSeq,
+		toolName,
+		toolCallId: toolCallId || void 0,
+		runId: runId || void 0,
+		params: sanitizeTraceValue(toolParams, 0, { source: "params" }),
+		status: "running",
+		startedAt: now
+	});
+	state.nextSeq += 1;
+	state.updatedAt = now;
+}
 /**
-* 构建授权申请卡片（CardKit v2 格式）
-*
-* 包含：
-* - 缺失权限列表
-* - "去申请" 按钮（跳转到开放平台）
-* - "已完成" 按钮（回调通知宿主层）
-*/
-function buildAuthCard(ctx) {
-	const operationId = randomUUID();
-	const openPlatformHost = ctx.brand === "lark" ? "https://open.larksuite.com" : "https://open.feishu.cn";
-	const scopeQuery = ctx.scopes.join(",");
-	const authUrl = `${openPlatformHost}/app/${ctx.appId}/auth?q=${encodeURIComponent(scopeQuery)}`;
-	const card = {
-		schema: "2.0",
-		config: {
-			wide_screen_mode: true,
-			update_multi: true
-		},
-		header: {
-			template: "orange",
-			title: {
-				tag: "plain_text",
-				content: "🔐 需要申请权限才能继续"
-			}
-		},
-		body: { elements: [
-			{
-				tag: "markdown",
-				content: `当前操作需要以下飞书权限，请应用管理员前往开放平台申请：\n\n${ctx.scopes.map((s) => `• \`${s}\``).join("\n")}`
-			},
-			{ tag: "hr" },
-			{
-				tag: "markdown",
-				content: "**第一步：** 前往开放平台申请上述权限并发布版本"
-			},
-			{
-				tag: "action",
-				actions: [{
-					tag: "button",
-					text: {
-						tag: "plain_text",
-						content: "去申请权限 ↗"
-					},
-					type: "primary",
-					multi_url: {
-						url: authUrl,
-						pc_url: authUrl,
-						android_url: authUrl,
-						ios_url: authUrl
-					}
-				}]
-			},
-			{
-				tag: "markdown",
-				content: "**第二步：** 权限申请通过后，点击下方按钮通知我继续"
-			},
-			{
-				tag: "action",
-				actions: [{
-					tag: "button",
-					text: {
-						tag: "plain_text",
-						content: "✓ 已完成权限配置"
-					},
-					type: "default",
-					behaviors: [{
-						type: "callback",
-						value: {
-							action: "auth_complete",
-							operationId
-						}
-					}]
-				}]
-			}
-		] }
-	};
-	pendingOperations.set(operationId, {
-		type: "auth",
-		operationId,
-		chatId: ctx.chatId,
-		sessionId: ctx.sessionId,
-		createdAt: Date.now(),
-		authContext: {
-			appId: ctx.appId,
-			scopes: ctx.scopes
-		}
-	});
-	log$19.info("已创建授权卡片操作", {
-		operationId,
-		scopes: ctx.scopes,
-		sessionId: ctx.sessionId
-	});
-	return {
-		card,
-		operationId
-	};
-}
-/**
-* 构建多 phase 提问卡片（CardKit v2 格式）
-*
-* 每次显示一个 phase：
-* - 有预设选项时显示按钮组
-* - 允许自由文本时显示输入提示
-* - 底部有"跳过"和"提交"按钮
-*/
-function buildAskCard(ctx, phaseIndex = 0) {
-	const operationId = randomUUID();
-	const phase = ctx.phases[phaseIndex];
-	const totalPhases = ctx.phases.length;
-	const elements = [];
-	elements.push({
-		tag: "markdown",
-		content: ctx.question
-	});
-	if (phase.description) elements.push({
-		tag: "markdown",
-		content: phase.description
-	});
-	elements.push({ tag: "hr" });
-	elements.push({
-		tag: "markdown",
-		content: `**${phase.title}** (${phaseIndex + 1}/${totalPhases})`
-	});
-	if (phase.options && phase.options.length > 0) {
-		const optionButtons = phase.options.map((opt) => ({
-			tag: "button",
-			text: {
-				tag: "plain_text",
-				content: opt.label
-			},
-			type: "default",
-			behaviors: [{
-				type: "callback",
-				value: {
-					action: "ask_select",
-					operationId,
-					phaseId: phase.id,
-					value: opt.value
-				}
-			}]
-		}));
-		elements.push({
-			tag: "action",
-			actions: optionButtons
-		});
-	}
-	if (phase.allowFreeText !== false) elements.push({
-		tag: "markdown",
-		content: "_💡 你也可以直接回复消息补充更多信息_"
-	});
-	const bottomActions = [];
-	if (totalPhases > 1 && phaseIndex < totalPhases - 1) bottomActions.push({
-		tag: "button",
-		text: {
-			tag: "plain_text",
-			content: "跳过 →"
-		},
-		type: "default",
-		behaviors: [{
-			type: "callback",
-			value: {
-				action: "ask_skip",
-				operationId,
-				phaseId: phase.id
-			}
-		}]
-	});
-	bottomActions.push({
-		tag: "button",
-		text: {
-			tag: "plain_text",
-			content: "✓ 完成提交"
-		},
-		type: "primary",
-		behaviors: [{
-			type: "callback",
-			value: {
-				action: "ask_submit",
-				operationId
-			}
-		}]
-	});
-	if (bottomActions.length > 0) {
-		elements.push({ tag: "hr" });
-		elements.push({
-			tag: "action",
-			actions: bottomActions
-		});
-	}
-	const card = {
-		schema: "2.0",
-		config: {
-			wide_screen_mode: true,
-			update_multi: true
-		},
-		header: {
-			template: "blue",
-			title: {
-				tag: "plain_text",
-				content: "💬 需要补充信息"
-			}
-		},
-		body: { elements }
-	};
-	pendingOperations.set(operationId, {
-		type: "ask",
-		operationId,
-		chatId: ctx.chatId,
-		sessionId: ctx.sessionId,
-		createdAt: Date.now(),
-		askContext: {
-			phases: ctx.phases,
-			currentPhase: phaseIndex,
-			answers: {}
-		}
-	});
-	log$19.info("已创建提问卡片操作", {
-		operationId,
-		phaseId: phase.id,
-		phaseIndex,
-		totalPhases,
-		sessionId: ctx.sessionId
-	});
-	return {
-		card,
-		operationId
-	};
-}
-/** CC 输出中的授权请求标记格式 */
-const AUTH_REQUEST_PATTERN = /\[PERMISSION_REQUEST\]\s*```json\s*(\{[\s\S]*?\})\s*```/;
-/** CC 输出中的提问请求标记格式 */
-const ASK_USER_PATTERN = /\[ASK_USER\]\s*```json\s*(\{[\s\S]*?\})\s*```/;
-/**
-* 从 CC 回复文本中检测是否包含授权请求标记
-*/
-function detectAuthRequest(text) {
-	const match = text.match(AUTH_REQUEST_PATTERN);
-	if (!match) return null;
-	try {
-		const data = JSON.parse(match[1]);
-		if (Array.isArray(data.scopes) && data.scopes.length > 0) return { scopes: data.scopes };
-	} catch {}
-	return null;
-}
-/**
-* 从 CC 回复文本中检测是否包含提问请求标记
-*/
-function detectAskRequest(text) {
-	const match = text.match(ASK_USER_PATTERN);
-	if (!match) return null;
-	try {
-		const data = JSON.parse(match[1]);
-		if (typeof data.question === "string" && Array.isArray(data.phases) && data.phases.length > 0) return {
-			question: data.question,
-			phases: data.phases
-		};
-	} catch {}
-	return null;
-}
-/**
-* 从 CC 回复文本中移除标记部分（避免展示给用户）
-*/
-function stripInteractiveMarkers(text) {
-	return text.replace(AUTH_REQUEST_PATTERN, "").replace(ASK_USER_PATTERN, "").trim();
-}
-//#endregion
-//#region src/card/reasoning-utils.ts
-/**
-* Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
-* SPDX-License-Identifier: MIT
-*
-* Shared utilities for the reasoning display subsystem.
-*/
-function normalizeToolName(name) {
-	return name?.trim().toLowerCase() ?? "";
-}
-function truncateText(value, maxLength) {
-	if (value.length <= maxLength) return value;
-	return `${value.slice(0, maxLength - 3)}...`;
-}
-const INLINE_ASSIGNMENT_RE = /(^|[\s"'`])([A-Za-z_][A-Za-z0-9_]*)(=(?:"[^"]*"|'[^']*'|[^\s"'`]+))/g;
-const AUTH_HEADER_SECRET_RE = /(Authorization\s*:\s*(?:Bearer|Basic|Token)\s+)([^'"\s]+)/gi;
-const QUOTED_HEADER_ARG_RE = /((?:^|[\s"'`])(?:-H|--header)\s+)(['"])([A-Za-z0-9_-]+)(\s*:\s*)([^'"]*)(\2)/gi;
-const UNQUOTED_HEADER_ARG_RE = /((?:^|[\s"'`])(?:-H|--header)\s+)([A-Za-z0-9_-]+)(\s*:\s*)([^\s"'`]+)/gi;
-const SECRET_FLAG_RE = /((?:^|[\s"'`]))(--?[A-Za-z0-9][A-Za-z0-9-]*)(=|\s+)(?:"([^"]*)"|'([^']*)'|([^\s"'`]+))/g;
-const SENSITIVE_NAME_RE = /token|secret|password|api[_-]?key|authorization|cookie|credential|bearer|session[_-]?id|client[_-]?secret|access[_-]?key/i;
-function redactInlineSecrets(value) {
-	return value.replace(INLINE_ASSIGNMENT_RE, (match, prefix, key) => isSensitiveName(key) ? `${prefix}${key}=[redacted]` : match).replace(AUTH_HEADER_SECRET_RE, "$1[redacted]").replace(QUOTED_HEADER_ARG_RE, (match, prefix, quote, name, separator) => shouldRedactHeaderValue(name) ? `${prefix}${quote}${name}${separator}[redacted]${quote}` : match).replace(UNQUOTED_HEADER_ARG_RE, (match, prefix, name, separator) => shouldRedactHeaderValue(name) ? `${prefix}${name}${separator}[redacted]` : match).replace(SECRET_FLAG_RE, (match, prefix, flag, separator, doubleQuoted, singleQuoted, bare) => {
-		if (!isSensitiveName(flag.replace(/^-+/, ""))) return match;
-		return `${prefix}${flag}${separator}${doubleQuoted !== void 0 ? "\"[redacted]\"" : singleQuoted !== void 0 ? "'[redacted]'" : bare !== void 0 ? "[redacted]" : "[redacted]"}`;
-	});
-}
-function isSensitiveName(value) {
-	return SENSITIVE_NAME_RE.test(value);
-}
-function shouldRedactHeaderValue(name) {
-	return !/^authorization$/i.test(name) && isSensitiveName(name);
-}
-//#endregion
-//#region src/card/tool-use-trace-store.ts
-/**
-* Copyright (c) 2026 ByteDance Ltd. and/or its affiliates
-* SPDX-License-Identifier: MIT
-*
-* Runtime store for structured tool-use steps.
-*
-* The Feishu card renderer reads from this store by session key so it can
-* render observable, replayable tool execution without relying purely on
-* reply payload text.
-*/
-const TRACE_TTL_MS = 1800 * 1e3;
-const MAX_SESSION_TRACES = 128;
-const MAX_STEPS_PER_SESSION = 256;
-const STEP_RUNNING_TIMEOUT_MS = 300 * 1e3;
-const GENERIC_STRING_LIMIT = 512;
-const RESULT_STRING_LIMIT = 1024;
-const COMMAND_STRING_LIMIT = 4096;
-const PATH_STRING_LIMIT = 2048;
-const sessionTraces = /* @__PURE__ */ new Map();
-function startToolUseTraceRun(sessionKey) {
-	if (!sessionKey) return;
-	pruneTraceStore();
-	sessionTraces.set(sessionKey, {
-		nextSeq: 1,
-		updatedAt: Date.now(),
-		steps: [],
-		currentRunId: void 0
-	});
-}
-function clearToolUseTraceRun(sessionKey) {
-	if (!sessionKey) return;
-	sessionTraces.delete(sessionKey);
-}
-function recordToolUseStart(params) {
-	const { sessionKey, toolName, toolParams, toolCallId, runId } = params;
-	if (!sessionKey || !toolName) return;
-	const state = sessionTraces.get(sessionKey);
-	if (!state) return;
-	if (runId) {
-		if (state.currentRunId === void 0) state.currentRunId = runId;
-		else if (state.currentRunId !== runId) return;
-	}
-	const now = Date.now();
-	if (state.steps.length >= MAX_STEPS_PER_SESSION) state.steps.splice(0, state.steps.length - MAX_STEPS_PER_SESSION + 1);
-	state.steps.push({
-		id: `${state.nextSeq}`,
-		seq: state.nextSeq,
-		toolName,
-		toolCallId: toolCallId || void 0,
-		runId: runId || void 0,
-		params: sanitizeTraceValue(toolParams, 0, { source: "params" }),
-		status: "running",
-		startedAt: now
-	});
-	state.nextSeq += 1;
-	state.updatedAt = now;
-}
-/**
-* 更新已有 running 步骤的参数（当 assistant 完整消息到来后补全参数）。
-* 如果找到匹配的 running 步骤且当前 params 为空则更新，返回 true。
-* 找不到或无需更新返回 false。
+* 更新已有 running 步骤的参数（当 assistant 完整消息到来后补全参数）。
+* 如果找到匹配的 running 步骤且当前 params 为空则更新，返回 true。
+* 找不到或无需更新返回 false。
 */
 function updateToolUseParams(params) {
 	const { sessionKey, toolName, toolParams } = params;
@@ -6273,14 +6174,14 @@ function sortTraceValue(value) {
 }
 //#endregion
 //#region src/card/cc-stream-bridge.ts
-const log$18 = larkLogger("card/cc-stream-bridge");
+const log$19 = larkLogger("card/cc-stream-bridge");
 const CC_INTERNAL_PLACEHOLDER = "No response requested.";
 /**
 * CCStreamBridge — 将 CC 流事件桥接到 StreamingCardController
 *
 * 内部维护文本累积状态，将增量事件转换为控制器需要的累积文本回调。
 */
-var CCStreamBridge = class CCStreamBridge {
+var CCStreamBridge = class {
 	/** 累积的文本输出（textDelta 逐步拼接） */
 	accumulatedText = "";
 	/** 累积的思考输出（thinkingDelta 逐步拼接） */
@@ -6298,34 +6199,24 @@ var CCStreamBridge = class CCStreamBridge {
 			sessionKey: options?.sessionKey
 		};
 		if (this.options.sessionKey) startToolUseTraceRun(this.options.sessionKey);
-		log$18.info("CCStreamBridge 初始化", {
+		log$19.info("CCStreamBridge 初始化", {
 			autoCompleteOnTurnEnd: this.options.autoCompleteOnTurnEnd,
 			sessionKey: this.options.sessionKey ?? "(none)"
 		});
 	}
-	/** 交互式标记前缀 — 用于流式过滤 */
-	static INTERACTIVE_MARKER_PREFIXES = ["[ASK_USER]", "[PERMISSION_REQUEST]"];
-	/** 文本增量 → 累积后调用 controller.onPartialReply（实时过滤交互式标记） */
+	/** 文本增量 → 累积后调用 controller.onPartialReply */
 	onTextDelta(text) {
 		this.accumulatedText += text;
-		log$18.debug("textDelta 事件", {
+		log$19.debug("textDelta 事件", {
 			deltaLen: text.length,
 			totalLen: this.accumulatedText.length
 		});
-		let displayText = this.accumulatedText;
-		for (const prefix of CCStreamBridge.INTERACTIVE_MARKER_PREFIXES) {
-			const idx = displayText.indexOf(prefix);
-			if (idx !== -1) {
-				displayText = displayText.substring(0, idx).trimEnd();
-				break;
-			}
-		}
-		this.controller.onPartialReply({ text: displayText });
+		this.controller.onPartialReply({ text: this.accumulatedText });
 	}
 	/** 思考增量 → 累积后调用 controller.onReasoningStream */
 	onThinkingDelta(text) {
 		this.accumulatedThinkingText += text;
-		log$18.debug("thinkingDelta 事件", {
+		log$19.debug("thinkingDelta 事件", {
 			deltaLen: text.length,
 			totalLen: this.accumulatedThinkingText.length
 		});
@@ -6337,7 +6228,7 @@ var CCStreamBridge = class CCStreamBridge {
 		const displayName = getToolDisplayName(toolName);
 		const toolParams = typeof _toolInput === "object" && _toolInput !== null ? _toolInput : void 0;
 		const hasParams = toolParams && Object.keys(toolParams).length > 0;
-		log$18.info("toolUseStart 事件", {
+		log$19.info("toolUseStart 事件", {
 			toolName,
 			displayName,
 			activeToolsCount: this.activeTools.size,
@@ -6350,7 +6241,7 @@ var CCStreamBridge = class CCStreamBridge {
 					toolName,
 					toolParams
 				})) {
-					log$18.info("toolUseStart: 更新已有步骤的 params", { toolName });
+					log$19.info("toolUseStart: 更新已有步骤的 params", { toolName });
 					this.controller.onToolStart({
 						name: toolName,
 						phase: "start"
@@ -6374,7 +6265,7 @@ var CCStreamBridge = class CCStreamBridge {
 		const toolName = this.activeTools.get(toolUseId) ?? this.lastToolName ?? "unknown";
 		const displayName = getToolDisplayName(toolName);
 		this.activeTools.delete(toolUseId);
-		log$18.info("toolResult 事件", {
+		log$19.info("toolResult 事件", {
 			toolUseId,
 			toolName,
 			displayName,
@@ -6389,7 +6280,7 @@ var CCStreamBridge = class CCStreamBridge {
 	}
 	/** 工具执行进度 → 记录日志 */
 	onToolProgress(toolName, elapsedSeconds) {
-		log$18.debug("toolProgress 事件", {
+		log$19.debug("toolProgress 事件", {
 			toolName,
 			displayName: getToolDisplayName(toolName),
 			elapsedSeconds
@@ -6397,7 +6288,7 @@ var CCStreamBridge = class CCStreamBridge {
 	}
 	/** 轮次结束 → 仅在 end_turn 时标记完成 + 触发 onIdle */
 	onTurnEnd(stopReason) {
-		log$18.info("turnEnd 事件", {
+		log$19.info("turnEnd 事件", {
 			stopReason,
 			accumulatedTextLen: this.accumulatedText.length,
 			accumulatedThinkingTextLen: this.accumulatedThinkingText.length
@@ -6405,7 +6296,7 @@ var CCStreamBridge = class CCStreamBridge {
 		if (this.options.autoCompleteOnTurnEnd && stopReason === "end_turn") {
 			const trimmedText = this.accumulatedText.trim();
 			if (trimmedText === CC_INTERNAL_PLACEHOLDER) {
-				log$18.info("检测到 CC 内部占位消息，静默丢弃", {
+				log$19.info("检测到 CC 内部占位消息，静默丢弃", {
 					text: trimmedText.slice(0, 50),
 					sessionKey: this.options.sessionKey
 				});
@@ -6413,26 +6304,16 @@ var CCStreamBridge = class CCStreamBridge {
 				return;
 			}
 			if (trimmedText === "") {
-				log$18.info("turnEnd 时文本为空，延迟到 onResult 兜底处理", { sessionKey: this.options.sessionKey });
+				log$19.info("turnEnd 时文本为空，延迟到 onResult 兜底处理", { sessionKey: this.options.sessionKey });
 				return;
 			}
-			const strippedText = stripInteractiveMarkers(trimmedText);
-			if (strippedText !== trimmedText) {
-				log$18.info("turnEnd: 检测到交互式卡片标记，修剪卡片文本", {
-					originalLen: trimmedText.length,
-					strippedLen: strippedText.length,
-					sessionKey: this.options.sessionKey
-				});
-				this.accumulatedText = strippedText;
-				if (strippedText) this.controller.onPartialReply({ text: strippedText });
-			}
 			this.controller.markFullyComplete();
 			this.controller.onIdle();
 		}
 	}
 	/** 最终结果 → 兜底最终化 + 错误处理 */
 	onResult(data) {
-		log$18.info("result 事件", {
+		log$19.info("result 事件", {
 			subtype: data.subtype,
 			isError: data.isError,
 			durationMs: data.durationMs,
@@ -6444,7 +6325,7 @@ var CCStreamBridge = class CCStreamBridge {
 			const pm = ClaudeCodeAdapter.getInstance()?.getProcessManager();
 			const sessionId = this.options.sessionKey;
 			if (sessionId && pm ? pm.consumeAborted(sessionId) : false) {
-				log$18.info("用户主动中断，按正常完成处理", {
+				log$19.info("用户主动中断，按正常完成处理", {
 					subtype: data.subtype,
 					sessionId
 				});
@@ -6453,14 +6334,14 @@ var CCStreamBridge = class CCStreamBridge {
 				this.controller.onIdle();
 			} else {
 				const errorMessage = data.result ?? `CC 执行失败: ${data.subtype}`;
-				log$18.error("CC 执行返回错误", {
+				log$19.error("CC 执行返回错误", {
 					subtype: data.subtype,
 					errorMessage: errorMessage.slice(0, 200)
 				});
 				this.controller.onError(new Error(errorMessage), { kind: "cc-execution" });
 			}
 		} else if (!this.accumulatedText.trim()) if (data.result) {
-			log$18.info("result 兜底：使用 result.result 作为最终回复", {
+			log$19.info("result 兜底：使用 result.result 作为最终回复", {
 				resultLen: data.result.length,
 				sessionKey: this.options.sessionKey
 			});
@@ -6468,7 +6349,7 @@ var CCStreamBridge = class CCStreamBridge {
 			this.controller.markFullyComplete();
 			this.controller.onIdle();
 		} else {
-			log$18.info("result 兜底：无文本且无 result，abort 卡片", { sessionKey: this.options.sessionKey });
+			log$19.info("result 兜底：无文本且无 result，abort 卡片", { sessionKey: this.options.sessionKey });
 			this.controller.abortCard();
 		}
 		else {
@@ -6482,7 +6363,7 @@ var CCStreamBridge = class CCStreamBridge {
 	* 内部复用上面的直接调用方法。
 	*/
 	bindParser(parser) {
-		log$18.info("绑定 CCStreamParser 事件到卡片控制器");
+		log$19.info("绑定 CCStreamParser 事件到卡片控制器");
 		parser.on("textDelta", (text) => this.onTextDelta(text));
 		parser.on("thinkingDelta", (text) => this.onThinkingDelta(text));
 		parser.on("toolUseStart", (toolName, toolInput) => this.onToolUseStart(toolName, toolInput));
@@ -6490,7 +6371,7 @@ var CCStreamBridge = class CCStreamBridge {
 		parser.on("toolProgress", (toolName, elapsedSeconds) => this.onToolProgress(toolName, elapsedSeconds));
 		parser.on("turnEnd", (stopReason) => this.onTurnEnd(stopReason));
 		parser.on("result", (data) => this.onResult(data));
-		log$18.info("CCStreamParser 事件绑定完成");
+		log$19.info("CCStreamParser 事件绑定完成");
 	}
 };
 //#endregion
@@ -8506,7 +8387,7 @@ function resolveLarkSdk(cfg, accountId) {
 	if (cached) return cached.sdk;
 	return LarkClient.fromCfg(cfg, accountId).sdk;
 }
-const log$17 = larkLogger("card/cardkit");
+const log$18 = larkLogger("card/cardkit");
 /**
 * 记录 CardKit API 响应日志，检测错误码并抛出异常。
 *
@@ -8516,13 +8397,13 @@ const log$17 = larkLogger("card/cardkit");
 function logCardKitResponse(params) {
 	const { resp, api, context } = params;
 	const { code, msg } = resp;
-	log$17.info(`cardkit ${api} response`, {
+	log$18.info(`cardkit ${api} response`, {
 		code,
 		msg,
 		context
 	});
 	if (code && code !== 0) {
-		log$17.warn(`cardkit ${api} FAILED`, {
+		log$18.warn(`cardkit ${api} FAILED`, {
 			code,
 			msg,
 			context,
@@ -8933,7 +8814,7 @@ function validateLocalMediaRoots(filePath, localRoots) {
 * Feishu messages, uploading media to the Feishu IM storage, and
 * sending image / file messages to chats.
 */
-const log$16 = larkLogger("outbound/media");
+const log$17 = larkLogger("outbound/media");
 /**
 * Upload an image to Feishu IM storage.
 *
@@ -9001,7 +8882,7 @@ async function validateRemoteUrl(raw) {
 		for (const addr of addresses) if (isPrivateIP(addr)) throw new Error(`[feishu-media] Domain "${hostname}" resolves to private/reserved IP "${addr}" (SSRF protection). URL: "${raw}"`);
 	} catch (err) {
 		if (err instanceof Error && err.message.includes("SSRF protection")) throw err;
-		log$16.warn(`[feishu-media] DNS resolution failed for "${hostname}": ${err}`);
+		log$17.warn(`[feishu-media] DNS resolution failed for "${hostname}": ${err}`);
 	}
 }
 /**
@@ -9019,21 +8900,21 @@ async function fetchMediaBuffer(urlOrPath, localRoots) {
 		if (localRoots !== void 0) validateLocalMediaRoots(filePath, localRoots);
 		else throw new Error(`[feishu-media] Local file access denied for "${filePath}": mediaLocalRoots is not configured. Configure mediaLocalRoots to explicitly allow local file access.`);
 		const buf = fs.readFileSync(filePath);
-		log$16.debug(`local file read: "${filePath}", ${buf.length} bytes`);
+		log$17.debug(`local file read: "${filePath}", ${buf.length} bytes`);
 		return buf;
 	}
 	await validateRemoteUrl(raw);
 	const FETCH_TIMEOUT_MS = 3e4;
-	log$16.info(`fetching remote media: ${raw}`);
+	log$17.info(`fetching remote media: ${raw}`);
 	const response = await fetch(raw, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
 	if (!response.ok) throw new Error(`[feishu-media] Failed to fetch media from "${raw}": HTTP ${response.status} ${response.statusText}. Verify the URL is accessible and returns a valid media resource.`);
 	const arrayBuffer = await response.arrayBuffer();
-	log$16.debug(`remote media fetched: ${raw}, ${arrayBuffer.byteLength} bytes`);
+	log$17.debug(`remote media fetched: ${raw}, ${arrayBuffer.byteLength} bytes`);
 	return Buffer.from(arrayBuffer);
 }
 //#endregion
 //#region src/card/image-resolver.ts
-const log$15 = larkLogger("card/image-resolver");
+const log$16 = larkLogger("card/image-resolver");
 /** Matches complete markdown image syntax: `![alt](value)` */
 const IMAGE_RE = /!\[([^\]]*)\]\(([^)\s]+)\)/g;
 var ImageResolver = class {
@@ -9079,14 +8960,14 @@ var ImageResolver = class {
 	async resolveImagesAwait(text, timeoutMs) {
 		this.resolveImages(text);
 		if (this.pending.size > 0) {
-			log$15.info("resolveImagesAwait: waiting for uploads", {
+			log$16.info("resolveImagesAwait: waiting for uploads", {
 				count: this.pending.size,
 				timeoutMs
 			});
 			const allUploads = Promise.all(this.pending.values());
 			const timeout = new Promise((resolve) => setTimeout(resolve, timeoutMs));
 			await Promise.race([allUploads, timeout]);
-			if (this.pending.size > 0) log$15.warn("resolveImagesAwait: timed out with pending uploads", { remaining: this.pending.size });
+			if (this.pending.size > 0) log$16.warn("resolveImagesAwait: timed out with pending uploads", { remaining: this.pending.size });
 		}
 		return this.resolveImages(text);
 	}
@@ -9096,7 +8977,7 @@ var ImageResolver = class {
 	}
 	async doUpload(url) {
 		try {
-			log$15.info("uploading image", { url });
+			log$16.info("uploading image", { url });
 			const buffer = await fetchRemoteImageBuffer(url);
 			const { imageKey } = await uploadImageLark({
 				cfg: this.cfg,
@@ -9104,7 +8985,7 @@ var ImageResolver = class {
 				imageType: "message",
 				accountId: this.accountId
 			});
-			log$15.info("image uploaded", {
+			log$16.info("image uploaded", {
 				url,
 				imageKey
 			});
@@ -9113,7 +8994,7 @@ var ImageResolver = class {
 			this.onImageResolved();
 			return imageKey;
 		} catch (err) {
-			log$15.warn("image upload failed", {
+			log$16.warn("image upload failed", {
 				url,
 				error: String(err)
 			});
@@ -9134,7 +9015,7 @@ var ImageResolver = class {
 * Encapsulates the terminateDueToUnavailable / shouldSkipForUnavailable
 * logic previously scattered as closures in reply-dispatcher.ts.
 */
-const log$14 = larkLogger("card/unavailable-guard");
+const log$15 = larkLogger("card/unavailable-guard");
 var UnavailableGuard = class {
 	terminated = false;
 	replyToMessageId;
@@ -9187,7 +9068,7 @@ var UnavailableGuard = class {
 		this.terminated = true;
 		this.onTerminate();
 		const affectedMessageId = fromError?.messageId ?? this.replyToMessageId ?? cardMessageId ?? "unknown";
-		log$14.warn("reply pipeline terminated by unavailable message", {
+		log$15.warn("reply pipeline terminated by unavailable message", {
 			source,
 			apiCode,
 			messageId: affectedMessageId
@@ -9224,7 +9105,7 @@ function getActiveCard(sessionId) {
 * Delegates throttling to FlushController and message-unavailable
 * detection to UnavailableGuard.
 */
-const log$13 = larkLogger("card/streaming");
+const log$14 = larkLogger("card/streaming");
 var StreamingCardController = class StreamingCardController {
 	phase = "idle";
 	cardKit = {
@@ -9312,7 +9193,7 @@ var StreamingCardController = class StreamingCardController {
 					}
 				}
 				if (!entry) {
-					log$13.debug("footer metrics lookup: session entry missing", {
+					log$14.debug("footer metrics lookup: session entry missing", {
 						sessionKey: this.deps.sessionKey,
 						candidateKeys,
 						storePath,
@@ -9330,7 +9211,7 @@ var StreamingCardController = class StreamingCardController {
 					contextTokens: typeof entry.contextTokens === "number" ? entry.contextTokens : void 0,
 					model: typeof entry.model === "string" ? entry.model : void 0
 				};
-				log$13.debug("footer metrics lookup: session entry found", {
+				log$14.debug("footer metrics lookup: session entry found", {
 					sessionKey: this.deps.sessionKey,
 					matchedKey,
 					storePath,
@@ -9355,7 +9236,7 @@ var StreamingCardController = class StreamingCardController {
 				}
 			}
 			if (!entry) {
-				log$13.debug("footer metrics lookup: session entry missing", {
+				log$14.debug("footer metrics lookup: session entry missing", {
 					sessionKey: this.deps.sessionKey,
 					candidateKeys,
 					storePath,
@@ -9373,7 +9254,7 @@ var StreamingCardController = class StreamingCardController {
 				contextTokens: typeof entry.contextTokens === "number" ? entry.contextTokens : void 0,
 				model: typeof entry.model === "string" ? entry.model : void 0
 			};
-			log$13.debug("footer metrics lookup: session entry found", {
+			log$14.debug("footer metrics lookup: session entry found", {
 				sessionKey: this.deps.sessionKey,
 				matchedKey,
 				storePath,
@@ -9381,7 +9262,7 @@ var StreamingCardController = class StreamingCardController {
 			});
 			return metrics;
 		} catch (err) {
-			log$13.warn("footer metrics lookup failed", {
+			log$14.warn("footer metrics lookup failed", {
 				error: String(err),
 				sessionKey: this.deps.sessionKey
 			});
@@ -9488,7 +9369,7 @@ var StreamingCardController = class StreamingCardController {
 		const from = this.phase;
 		if (from === to) return false;
 		if (!PHASE_TRANSITIONS[from].has(to)) {
-			log$13.warn("phase transition rejected", {
+			log$14.warn("phase transition rejected", {
 				from,
 				to,
 				source
@@ -9496,7 +9377,7 @@ var StreamingCardController = class StreamingCardController {
 			return false;
 		}
 		this.phase = to;
-		log$13.info("phase transition", {
+		log$14.info("phase transition", {
 			from,
 			to,
 			source,
@@ -9616,7 +9497,7 @@ var StreamingCardController = class StreamingCardController {
 			this.reasoning.dirty = true;
 		}
 		const text = split.answerText ?? stripReasoningTags(rawText);
-		log$13.debug("onPartialReply", { len: text.length });
+		log$14.debug("onPartialReply", { len: text.length });
 		if (!text) return;
 		this.captureToolUseElapsed();
 		if (!this.reasoning.reasoningStartTime) this.reasoning.reasoningStartTime = Date.now();
@@ -9628,7 +9509,7 @@ var StreamingCardController = class StreamingCardController {
 		this.text.lastPartialText = text;
 		this.text.accumulatedText = this.text.streamingPrefix ? this.text.streamingPrefix + "\n\n" + text : text;
 		if (!this.text.streamingPrefix && SILENT_REPLY_TOKEN.startsWith(this.text.accumulatedText.trim())) {
-			log$13.debug("onPartialReply: buffering NO_REPLY prefix");
+			log$14.debug("onPartialReply: buffering NO_REPLY prefix");
 			return;
 		}
 		await this.ensureCardCreated();
@@ -9638,7 +9519,7 @@ var StreamingCardController = class StreamingCardController {
 	}
 	async onError(err, info) {
 		if (this.guard.terminate("onError", err)) return;
-		log$13.error(`${info.kind} reply failed`, { error: String(err) });
+		log$14.error(`${info.kind} reply failed`, { error: String(err) });
 		this.captureToolUseElapsed();
 		this.finalizeCard("onError", "error");
 		await this.flush.waitForFlush();
@@ -9694,7 +9575,7 @@ var StreamingCardController = class StreamingCardController {
 			if (this.cardKit.cardMessageId) {
 				const isNoReplyLeak = !this.text.completedText && SILENT_REPLY_TOKEN.startsWith(this.text.accumulatedText.trim());
 				const displayText = this.text.completedText || (isNoReplyLeak ? "" : this.text.accumulatedText) || "Done.";
-				if (!this.text.completedText && !this.text.accumulatedText) log$13.warn("reply completed without visible text, using empty-reply fallback");
+				if (!this.text.completedText && !this.text.accumulatedText) log$14.warn("reply completed without visible text, using empty-reply fallback");
 				const resolvedDisplayText = await this.imageResolver.resolveImagesAwait(displayText, 15e3);
 				const idleToolUseDisplay = this.computeToolUseDisplay();
 				const terminalContent = prepareTerminalCardContent({
@@ -9722,7 +9603,7 @@ var StreamingCardController = class StreamingCardController {
 				const rewindSessionId = this.deps.sessionKey;
 				const rewindMessageId = ClaudeCodeAdapter.getInstance()?.getProcessManager()?.getLastUserMessageId(this.deps.sessionKey);
 				const rewindHasFileChanges = this.hasFileChangingTools(idleToolUseDisplay?.steps);
-				log$13.info("onIdle: rewind button conditions", {
+				log$14.info("onIdle: rewind button conditions", {
 					sessionId: rewindSessionId,
 					messageId: rewindMessageId,
 					hasFileChanges: rewindHasFileChanges,
@@ -9735,7 +9616,7 @@ var StreamingCardController = class StreamingCardController {
 					if (idleEffectiveCardId) {
 						const seqBeforeClose = this.cardKit.cardKitSequence;
 						this.cardKit.cardKitSequence += 1;
-						log$13.info("onIdle: closing streaming mode", {
+						log$14.info("onIdle: closing streaming mode", {
 							attempt,
 							seqBefore: seqBeforeClose,
 							seqAfter: this.cardKit.cardKitSequence
@@ -9749,7 +9630,7 @@ var StreamingCardController = class StreamingCardController {
 						});
 						const seqBeforeUpdate = this.cardKit.cardKitSequence;
 						this.cardKit.cardKitSequence += 1;
-						log$13.info("onIdle: updating final card", {
+						log$14.info("onIdle: updating final card", {
 							attempt,
 							seqBefore: seqBeforeUpdate,
 							seqAfter: this.cardKit.cardKitSequence
@@ -9767,33 +9648,33 @@ var StreamingCardController = class StreamingCardController {
 						card: completeCard,
 						accountId: this.deps.accountId
 					});
-					log$13.info("reply completed, card finalized", {
+					log$14.info("reply completed, card finalized", {
 						elapsedMs: this.elapsed(),
 						isCardKit: !!idleEffectiveCardId,
 						attempt
 					});
 					break;
 				} catch (retryErr) {
-					log$13.warn("final card update attempt failed", {
+					log$14.warn("final card update attempt failed", {
 						attempt,
 						maxRetries: MAX_FINAL_UPDATE_RETRIES,
 						error: String(retryErr)
 					});
 					if (attempt < MAX_FINAL_UPDATE_RETRIES) await new Promise((resolve) => setTimeout(resolve, FINAL_UPDATE_RETRY_DELAY_MS * attempt));
-					else log$13.error("final card update exhausted all retries, card may remain in streaming state", {
+					else log$14.error("final card update exhausted all retries, card may remain in streaming state", {
 						cardId: idleEffectiveCardId,
 						messageId: this.cardKit.cardMessageId
 					});
 				}
 			}
 		} catch (err) {
-			log$13.error("final card update failed (outer)", { error: String(err) });
+			log$14.error("final card update failed (outer)", { error: String(err) });
 		} finally {
 			clearToolUseTraceRun(this.deps.sessionKey);
 		}
 	}
 	markFullyComplete() {
-		log$13.debug("markFullyComplete", {
+		log$14.debug("markFullyComplete", {
 			completedTextLen: this.text.completedText.length,
 			accumulatedTextLen: this.text.accumulatedText.length
 		});
@@ -9832,7 +9713,7 @@ var StreamingCardController = class StreamingCardController {
 					footerMetrics
 				});
 				await this.closeStreamingAndUpdate(effectiveCardId, abortCardContent, "abortCard");
-				log$13.info("abortCard completed", { effectiveCardId });
+				log$14.info("abortCard completed", { effectiveCardId });
 			} else if (this.cardKit.cardMessageId) {
 				const abortCard = buildCardContent("complete", {
 					text: terminalContent.text,
@@ -9853,10 +9734,10 @@ var StreamingCardController = class StreamingCardController {
 					card: abortCard,
 					accountId: this.deps.accountId
 				});
-				log$13.info("abortCard completed (IM fallback)", { messageId: this.cardKit.cardMessageId });
+				log$14.info("abortCard completed (IM fallback)", { messageId: this.cardKit.cardMessageId });
 			}
 		} catch (err) {
-			log$13.warn("abortCard failed", { error: String(err) });
+			log$14.warn("abortCard failed", { error: String(err) });
 		} finally {
 			clearToolUseTraceRun(this.deps.sessionKey);
 		}
@@ -9871,10 +9752,10 @@ var StreamingCardController = class StreamingCardController {
 	async forceCloseStreaming() {
 		const effectiveCardId = this.cardKit.cardKitCardId ?? this.cardKit.originalCardKitCardId;
 		if (!effectiveCardId && !this.cardKit.cardMessageId) {
-			log$13.warn("forceCloseStreaming: no card to close");
+			log$14.warn("forceCloseStreaming: no card to close");
 			return;
 		}
-		log$13.info("forceCloseStreaming: 强制终态化卡片", {
+		log$14.info("forceCloseStreaming: 强制终态化卡片", {
 			cardId: effectiveCardId,
 			messageId: this.cardKit.cardMessageId,
 			phase: this.phase
@@ -9924,10 +9805,10 @@ var StreamingCardController = class StreamingCardController {
 				card: completeCard,
 				accountId: this.deps.accountId
 			});
-			log$13.info("forceCloseStreaming: 卡片已强制终态化");
+			log$14.info("forceCloseStreaming: 卡片已强制终态化");
 			if (!this.isTerminalPhase) this.finalizeCard("forceCloseStreaming", "abort");
 		} catch (err) {
-			log$13.error("forceCloseStreaming failed", { error: String(err) });
+			log$14.error("forceCloseStreaming failed", { error: String(err) });
 		} finally {
 			unregisterActiveCard(this.deps.sessionKey);
 			clearToolUseTraceRun(this.deps.sessionKey);
@@ -9951,7 +9832,7 @@ var StreamingCardController = class StreamingCardController {
 					this.disposeShutdownHook = null;
 					return;
 				}
-				log$13.info("reusing placeholder card", {
+				log$14.info("reusing placeholder card", {
 					cardId: this.deps.placeholderCardId,
 					messageId: this.deps.placeholderMessageId
 				});
@@ -9975,7 +9856,7 @@ var StreamingCardController = class StreamingCardController {
 						accountId: this.deps.accountId
 					});
 					if (this.isStaleCreate(epoch)) {
-						log$13.info("ensureCardCreated: stale epoch after createCardEntity, bailing out", {
+						log$14.info("ensureCardCreated: stale epoch after createCardEntity, bailing out", {
 							epoch,
 							phase: this.phase
 						});
@@ -9986,7 +9867,7 @@ var StreamingCardController = class StreamingCardController {
 						this.cardKit.originalCardKitCardId = cId;
 						this.cardKit.cardKitSequence = 1;
 						this.disposeShutdownHook = registerShutdownHook(`streaming-card:${cId}`, () => this.abortCard());
-						log$13.info("created CardKit entity", {
+						log$14.info("created CardKit entity", {
 							cardId: cId,
 							initialSequence: this.cardKit.cardKitSequence
 						});
@@ -9999,7 +9880,7 @@ var StreamingCardController = class StreamingCardController {
 							accountId: this.deps.accountId
 						});
 						if (this.isStaleCreate(epoch)) {
-							log$13.info("ensureCardCreated: stale epoch after sendCardByCardId, bailing out", {
+							log$14.info("ensureCardCreated: stale epoch after sendCardByCardId, bailing out", {
 								epoch,
 								phase: this.phase
 							});
@@ -10014,13 +9895,13 @@ var StreamingCardController = class StreamingCardController {
 							this.disposeShutdownHook = null;
 							return;
 						}
-						log$13.info("sent CardKit card", { messageId: result.messageId });
+						log$14.info("sent CardKit card", { messageId: result.messageId });
 					} else throw new Error("card.create returned empty card_id");
 				} catch (cardKitErr) {
 					if (this.isStaleCreate(epoch)) return;
 					if (this.guard.terminate("ensureCardCreated.cardkitFlow", cardKitErr)) return;
 					const apiDetail = extractApiDetail(cardKitErr);
-					log$13.warn("CardKit flow failed, falling back to IM", { apiDetail });
+					log$14.warn("CardKit flow failed, falling back to IM", { apiDetail });
 					this.cardKit.cardKitCardId = null;
 					this.cardKit.originalCardKitCardId = null;
 					const fallbackCard = buildCardContent("streaming", { showToolUse: this.deps.toolUseDisplay.showToolUse });
@@ -10033,7 +9914,7 @@ var StreamingCardController = class StreamingCardController {
 						accountId: this.deps.accountId
 					});
 					if (this.isStaleCreate(epoch)) {
-						log$13.info("ensureCardCreated: stale epoch after IM fallback send, bailing out", {
+						log$14.info("ensureCardCreated: stale epoch after IM fallback send, bailing out", {
 							epoch,
 							phase: this.phase
 						});
@@ -10042,12 +9923,12 @@ var StreamingCardController = class StreamingCardController {
 					this.cardKit.cardMessageId = result.messageId;
 					this.flush.setCardMessageReady(true);
 					if (!this.transition("streaming", "ensureCardCreated.imFallback")) return;
-					log$13.info("sent fallback IM card", { messageId: result.messageId });
+					log$14.info("sent fallback IM card", { messageId: result.messageId });
 				}
 			} catch (err) {
 				if (this.isStaleCreate(epoch)) return;
 				if (this.guard.terminate("ensureCardCreated.outer", err)) return;
-				log$13.warn("thinking card failed, falling back to static", { error: String(err) });
+				log$14.warn("thinking card failed, falling back to static", { error: String(err) });
 				this.transition("creation_failed", "ensureCardCreated.outer", "creation_failed");
 			}
 		})();
@@ -10056,10 +9937,10 @@ var StreamingCardController = class StreamingCardController {
 	async performFlush() {
 		if (!this.cardKit.cardMessageId || this.isTerminalPhase) return;
 		if (!this.cardKit.cardKitCardId && this.cardKit.originalCardKitCardId) {
-			log$13.debug("performFlush: skipping (CardKit streaming disabled, awaiting final update)");
+			log$14.debug("performFlush: skipping (CardKit streaming disabled, awaiting final update)");
 			return;
 		}
-		log$13.debug("flushCardUpdate: enter", {
+		log$14.debug("flushCardUpdate: enter", {
 			seq: this.cardKit.cardKitSequence,
 			isCardKit: !!this.cardKit.cardKitCardId
 		});
@@ -10081,7 +9962,7 @@ var StreamingCardController = class StreamingCardController {
 						reasoningText: this.reasoning.accumulatedReasoningText || void 0
 					});
 					this.cardKit.cardKitSequence += 1;
-					log$13.debug("flushCardUpdate: full card update (dirty)", {
+					log$14.debug("flushCardUpdate: full card update (dirty)", {
 						seq: this.cardKit.cardKitSequence,
 						stepCount: display?.stepCount,
 						hasReasoning: !!this.reasoning.accumulatedReasoningText
@@ -10097,7 +9978,7 @@ var StreamingCardController = class StreamingCardController {
 				} else if (resolvedText !== this.text.lastFlushedText) {
 					const prevSeq = this.cardKit.cardKitSequence;
 					this.cardKit.cardKitSequence += 1;
-					log$13.debug("flushCardUpdate: answer seq bump", {
+					log$14.debug("flushCardUpdate: answer seq bump", {
 						seqBefore: prevSeq,
 						seqAfter: this.cardKit.cardKitSequence
 					});
@@ -10112,7 +9993,7 @@ var StreamingCardController = class StreamingCardController {
 					this.text.lastFlushedText = resolvedText;
 				}
 			} else {
-				log$13.debug("flushCardUpdate: IM patch fallback");
+				log$14.debug("flushCardUpdate: IM patch fallback");
 				const flushDisplay = this.computeToolUseDisplay();
 				const card = buildCardContent("streaming", {
 					text: this.reasoning.isReasoningPhase ? "" : resolvedText,
@@ -10132,31 +10013,31 @@ var StreamingCardController = class StreamingCardController {
 			if (this.guard.terminate("flushCardUpdate", err)) return;
 			const apiCode = extractLarkApiCode(err);
 			if (isCardRateLimitError(err)) {
-				log$13.info("flushCardUpdate: rate limited (230020), skipping", { seq: this.cardKit.cardKitSequence });
+				log$14.info("flushCardUpdate: rate limited (230020), skipping", { seq: this.cardKit.cardKitSequence });
 				return;
 			}
 			if (isCardTableLimitError(err)) {
-				log$13.warn("flushCardUpdate: card table limit exceeded (230099/11310), disabling CardKit streaming", { seq: this.cardKit.cardKitSequence });
+				log$14.warn("flushCardUpdate: card table limit exceeded (230099/11310), disabling CardKit streaming", { seq: this.cardKit.cardKitSequence });
 				this.cardKit.cardKitCardId = null;
 				return;
 			}
 			if (apiCode === 300317 && this.cardKit.cardKitCardId) {
 				const oldSeq = this.cardKit.cardKitSequence;
 				this.cardKit.cardKitSequence += 100;
-				log$13.warn("flushCardUpdate: sequence conflict (300317), jumping sequence", {
+				log$14.warn("flushCardUpdate: sequence conflict (300317), jumping sequence", {
 					oldSeq,
 					newSeq: this.cardKit.cardKitSequence
 				});
 				return;
 			}
 			const apiDetail = extractApiDetail(err);
-			log$13.error("card stream update failed", {
+			log$14.error("card stream update failed", {
 				apiCode,
 				seq: this.cardKit.cardKitSequence,
 				apiDetail
 			});
 			if (this.cardKit.cardKitCardId) {
-				log$13.warn("disabling CardKit streaming, falling back to im.message.patch");
+				log$14.warn("disabling CardKit streaming, falling back to im.message.patch");
 				this.cardKit.cardKitCardId = null;
 			}
 		}
@@ -10181,7 +10062,7 @@ var StreamingCardController = class StreamingCardController {
 		if (!this.cardKit.cardKitCardId || this.isTerminalPhase) return;
 		try {
 			const display = this.computeToolUseDisplay();
-			log$13.info("updateToolUseStatus", {
+			log$14.info("updateToolUseStatus", {
 				hasDisplay: !!display,
 				stepCount: display?.stepCount,
 				steps: display?.steps?.map((s) => `${s.title}:${s.status}`).join(", ")
@@ -10203,7 +10084,7 @@ var StreamingCardController = class StreamingCardController {
 				accountId: this.deps.accountId
 			});
 		} catch (err) {
-			log$13.debug("updateToolUseStatus failed", { error: String(err) });
+			log$14.debug("updateToolUseStatus failed", { error: String(err) });
 		}
 	}
 	finalizeCard(source, reason) {
@@ -10215,7 +10096,7 @@ var StreamingCardController = class StreamingCardController {
 	async closeStreamingAndUpdate(cardId, card, label) {
 		const seqBeforeClose = this.cardKit.cardKitSequence;
 		this.cardKit.cardKitSequence += 1;
-		log$13.info(`${label}: closing streaming mode`, {
+		log$14.info(`${label}: closing streaming mode`, {
 			seqBefore: seqBeforeClose,
 			seqAfter: this.cardKit.cardKitSequence
 		});
@@ -10228,7 +10109,7 @@ var StreamingCardController = class StreamingCardController {
 		});
 		const seqBeforeUpdate = this.cardKit.cardKitSequence;
 		this.cardKit.cardKitSequence += 1;
-		log$13.info(`${label}: updating card`, {
+		log$14.info(`${label}: updating card`, {
 			seqBefore: seqBeforeUpdate,
 			seqAfter: this.cardKit.cardKitSequence
 		});
@@ -10262,7 +10143,7 @@ function extractApiDetail(err) {
 }
 //#endregion
 //#region src/messaging/format-for-cc.ts
-const log$12 = larkLogger("messaging/format-for-cc");
+const log$13 = larkLogger("messaging/format-for-cc");
 function safeParseJSON(raw) {
 	try {
 		return JSON.parse(raw);
@@ -10318,7 +10199,7 @@ function extractPostText(rawContent) {
 */
 function formatContentByType(ctx) {
 	const { contentType, content, resources } = ctx;
-	log$12.debug("formatContentByType 开始格式化", {
+	log$13.debug("formatContentByType 开始格式化", {
 		contentType,
 		contentLength: content?.length ?? 0,
 		resourceCount: resources?.length ?? 0
@@ -10340,92 +10221,343 @@ function formatContentByType(ctx) {
 				const extracted = extractPostText(content);
 				if (extracted !== content) return extracted;
 			}
-			return content;
-		case "merge_forward": return content;
-		case "audio": return content || "[语音消息]";
-		case "sticker": return content || "[表情贴纸]";
-		case "video":
-		case "media": return content || "[视频消息]";
-		case "interactive": return content;
-		case "share_chat":
-		case "share_user":
-		case "share_calendar_event": return content;
-		case "location": return content;
-		case "system":
-		case "folder":
-		case "hongbao":
-		case "calendar":
-		case "general_calendar":
-		case "video_chat":
-		case "todo":
-		case "vote": return content;
-		default:
-			log$12.warn("遇到不支持的消息类型", { contentType });
-			return `[不支持的消息类型: ${contentType}]`;
-	}
-}
-/**
-* 将消息创建时间格式化为 AI 可理解的时间描述。
-* 包含两部分：绝对时间（ISO 格式）+ 相对时间（如"5分钟前"）。
-* 这让 AI 能判断消息的时效性，避免将很久前的讨论当作当前上下文。
-*/
-function formatMessageTime(createTime) {
-	if (!createTime) return "";
-	const msgDate = new Date(createTime);
-	const diffMs = Date.now() - createTime;
-	const absTime = msgDate.toLocaleString("zh-CN", {
-		month: "2-digit",
-		day: "2-digit",
-		hour: "2-digit",
-		minute: "2-digit",
-		hour12: false
+			return content;
+		case "merge_forward": return content;
+		case "audio": return content || "[语音消息]";
+		case "sticker": return content || "[表情贴纸]";
+		case "video":
+		case "media": return content || "[视频消息]";
+		case "interactive": return content;
+		case "share_chat":
+		case "share_user":
+		case "share_calendar_event": return content;
+		case "location": return content;
+		case "system":
+		case "folder":
+		case "hongbao":
+		case "calendar":
+		case "general_calendar":
+		case "video_chat":
+		case "todo":
+		case "vote": return content;
+		default:
+			log$13.warn("遇到不支持的消息类型", { contentType });
+			return `[不支持的消息类型: ${contentType}]`;
+	}
+}
+/**
+* 将消息创建时间格式化为 AI 可理解的时间描述。
+* 包含两部分：绝对时间（ISO 格式）+ 相对时间（如"5分钟前"）。
+* 这让 AI 能判断消息的时效性，避免将很久前的讨论当作当前上下文。
+*/
+function formatMessageTime(createTime) {
+	if (!createTime) return "";
+	const msgDate = new Date(createTime);
+	const diffMs = Date.now() - createTime;
+	const absTime = msgDate.toLocaleString("zh-CN", {
+		month: "2-digit",
+		day: "2-digit",
+		hour: "2-digit",
+		minute: "2-digit",
+		hour12: false
+	});
+	const diffSec = Math.floor(diffMs / 1e3);
+	let relTime;
+	if (diffSec < 60) relTime = "刚刚";
+	else if (diffSec < 3600) relTime = `${Math.floor(diffSec / 60)}分钟前`;
+	else if (diffSec < 86400) relTime = `${Math.floor(diffSec / 3600)}小时前`;
+	else relTime = `${Math.floor(diffSec / 86400)}天前`;
+	return `${absTime} (${relTime})`;
+}
+/**
+* 将飞书 MessageContext 格式化为 Claude Code 可理解的 AI Friendly 纯文本。
+*
+* 格式说明（提供 context，不 control）：
+* - 私聊：[04/25 14:30 (5分钟前)] 消息内容
+* - 群聊：[04/25 14:30 (5分钟前)] [张三] 消息内容
+* - 话题：[04/25 14:30 (5分钟前)] [张三] [话题回复] 消息内容
+*
+* 时间信息让 AI 能自主判断消息的时效性和上下文连贯性。
+*
+* @param ctx       已解析的飞书消息上下文
+* @param isGroup   是否为群聊上下文，群聊时在消息前添加发送者前缀
+* @returns         格式化后的纯文本字符串
+*/
+function formatForCC(ctx, isGroup) {
+	log$13.info("formatForCC 开始处理", {
+		messageId: ctx.messageId,
+		contentType: ctx.contentType,
+		chatType: ctx.chatType,
+		isGroup: isGroup ?? false,
+		senderName: ctx.senderName,
+		createTime: ctx.createTime,
+		threadId: ctx.threadId
+	});
+	const formattedContent = formatContentByType(ctx);
+	const parts = [];
+	const timeStr = formatMessageTime(ctx.createTime);
+	if (timeStr) parts.push(`[${timeStr}]`);
+	if (isGroup && ctx.senderName) parts.push(`[${ctx.senderName}]`);
+	if (ctx.threadId) parts.push("[话题回复]");
+	const result = (parts.length > 0 ? parts.join(" ") + " " : "") + formattedContent;
+	log$13.info("formatForCC 完成", {
+		messageId: ctx.messageId,
+		resultLength: result.length,
+		hasTime: !!timeStr,
+		hasThread: !!ctx.threadId
+	});
+	return result;
+}
+//#endregion
+//#region src/card/interactive-cards.ts
+/**
+* 交互式卡片模块 — 授权卡片 & 提问卡片
+*
+* 基于"后处理检测 + 下轮注入"的异步模式：
+* CC 无法暂停等待用户输入，因此通过卡片交互收集用户反馈后，
+* 将结果作为新消息注入 CC 的下一轮对话。
+*
+* 包含：
+* - 授权申请卡片（Permission Auth Card）
+* - 多 Phase 提问卡片（Ask Card）
+* - CC 输出文本后处理（检测特殊标记）
+* - 操作 ID 生命周期管理
+*/
+const log$12 = larkLogger("card/interactive-cards");
+const pendingOperations = /* @__PURE__ */ new Map();
+const OPERATION_TTL_MS = 1800 * 1e3;
+setInterval(() => {
+	const now = Date.now();
+	for (const [id, op] of pendingOperations) if (now - op.createdAt > OPERATION_TTL_MS) pendingOperations.delete(id);
+}, 6e4);
+/**
+* 构建授权申请卡片（CardKit v2 格式）
+*
+* 包含：
+* - 缺失权限列表
+* - "去申请" 按钮（跳转到开放平台）
+* - "已完成" 按钮（回调通知宿主层）
+*/
+function buildAuthCard(ctx) {
+	const operationId = randomUUID();
+	const openPlatformHost = ctx.brand === "lark" ? "https://open.larksuite.com" : "https://open.feishu.cn";
+	const scopeQuery = ctx.scopes.join(",");
+	const authUrl = `${openPlatformHost}/app/${ctx.appId}/auth?q=${encodeURIComponent(scopeQuery)}`;
+	const card = {
+		schema: "2.0",
+		config: {
+			wide_screen_mode: true,
+			update_multi: true
+		},
+		header: {
+			template: "orange",
+			title: {
+				tag: "plain_text",
+				content: "🔐 需要申请权限才能继续"
+			}
+		},
+		body: { elements: [
+			{
+				tag: "markdown",
+				content: `当前操作需要以下飞书权限，请应用管理员前往开放平台申请：\n\n${ctx.scopes.map((s) => `• \`${s}\``).join("\n")}`
+			},
+			{ tag: "hr" },
+			{
+				tag: "markdown",
+				content: "**第一步：** 前往开放平台申请上述权限并发布版本"
+			},
+			{
+				tag: "action",
+				actions: [{
+					tag: "button",
+					text: {
+						tag: "plain_text",
+						content: "去申请权限 ↗"
+					},
+					type: "primary",
+					multi_url: {
+						url: authUrl,
+						pc_url: authUrl,
+						android_url: authUrl,
+						ios_url: authUrl
+					}
+				}]
+			},
+			{
+				tag: "markdown",
+				content: "**第二步：** 权限申请通过后，点击下方按钮通知我继续"
+			},
+			{
+				tag: "action",
+				actions: [{
+					tag: "button",
+					text: {
+						tag: "plain_text",
+						content: "✓ 已完成权限配置"
+					},
+					type: "default",
+					behaviors: [{
+						type: "callback",
+						value: {
+							action: "auth_complete",
+							operationId
+						}
+					}]
+				}]
+			}
+		] }
+	};
+	pendingOperations.set(operationId, {
+		type: "auth",
+		operationId,
+		chatId: ctx.chatId,
+		sessionId: ctx.sessionId,
+		createdAt: Date.now(),
+		authContext: {
+			appId: ctx.appId,
+			scopes: ctx.scopes
+		}
 	});
-	const diffSec = Math.floor(diffMs / 1e3);
-	let relTime;
-	if (diffSec < 60) relTime = "刚刚";
-	else if (diffSec < 3600) relTime = `${Math.floor(diffSec / 60)}分钟前`;
-	else if (diffSec < 86400) relTime = `${Math.floor(diffSec / 3600)}小时前`;
-	else relTime = `${Math.floor(diffSec / 86400)}天前`;
-	return `${absTime} (${relTime})`;
+	log$12.info("已创建授权卡片操作", {
+		operationId,
+		scopes: ctx.scopes,
+		sessionId: ctx.sessionId
+	});
+	return {
+		card,
+		operationId
+	};
 }
 /**
-* 将飞书 MessageContext 格式化为 Claude Code 可理解的 AI Friendly 纯文本。
-*
-* 格式说明（提供 context，不 control）：
-* - 私聊：[04/25 14:30 (5分钟前)] 消息内容
-* - 群聊：[04/25 14:30 (5分钟前)] [张三] 消息内容
-* - 话题：[04/25 14:30 (5分钟前)] [张三] [话题回复] 消息内容
-*
-* 时间信息让 AI 能自主判断消息的时效性和上下文连贯性。
+* 构建多 phase 提问卡片（CardKit v2 格式）
 *
-* @param ctx       已解析的飞书消息上下文
-* @param isGroup   是否为群聊上下文，群聊时在消息前添加发送者前缀
-* @returns         格式化后的纯文本字符串
+* 每次显示一个 phase：
+* - 有预设选项时显示按钮组
+* - 允许自由文本时显示输入提示
+* - 底部有"跳过"和"提交"按钮
 */
-function formatForCC(ctx, isGroup) {
-	log$12.info("formatForCC 开始处理", {
-		messageId: ctx.messageId,
-		contentType: ctx.contentType,
-		chatType: ctx.chatType,
-		isGroup: isGroup ?? false,
-		senderName: ctx.senderName,
-		createTime: ctx.createTime,
-		threadId: ctx.threadId
+function buildAskCard(ctx, phaseIndex = 0) {
+	const operationId = randomUUID();
+	const phase = ctx.phases[phaseIndex];
+	const totalPhases = ctx.phases.length;
+	const elements = [];
+	elements.push({
+		tag: "markdown",
+		content: ctx.question
 	});
-	const formattedContent = formatContentByType(ctx);
-	const parts = [];
-	const timeStr = formatMessageTime(ctx.createTime);
-	if (timeStr) parts.push(`[${timeStr}]`);
-	if (isGroup && ctx.senderName) parts.push(`[${ctx.senderName}]`);
-	if (ctx.threadId) parts.push("[话题回复]");
-	const result = (parts.length > 0 ? parts.join(" ") + " " : "") + formattedContent;
-	log$12.info("formatForCC 完成", {
-		messageId: ctx.messageId,
-		resultLength: result.length,
-		hasTime: !!timeStr,
-		hasThread: !!ctx.threadId
+	if (phase.description) elements.push({
+		tag: "markdown",
+		content: phase.description
 	});
-	return result;
+	elements.push({ tag: "hr" });
+	elements.push({
+		tag: "markdown",
+		content: `**${phase.title}** (${phaseIndex + 1}/${totalPhases})`
+	});
+	if (phase.options && phase.options.length > 0) {
+		const optionButtons = phase.options.map((opt) => ({
+			tag: "button",
+			text: {
+				tag: "plain_text",
+				content: opt.label
+			},
+			type: "default",
+			behaviors: [{
+				type: "callback",
+				value: {
+					action: "ask_select",
+					operationId,
+					phaseId: phase.id,
+					value: opt.value
+				}
+			}]
+		}));
+		elements.push({
+			tag: "action",
+			actions: optionButtons
+		});
+	}
+	if (phase.allowFreeText !== false) elements.push({
+		tag: "markdown",
+		content: "_💡 你也可以直接回复消息补充更多信息_"
+	});
+	const bottomActions = [];
+	if (totalPhases > 1 && phaseIndex < totalPhases - 1) bottomActions.push({
+		tag: "button",
+		text: {
+			tag: "plain_text",
+			content: "跳过 →"
+		},
+		type: "default",
+		behaviors: [{
+			type: "callback",
+			value: {
+				action: "ask_skip",
+				operationId,
+				phaseId: phase.id
+			}
+		}]
+	});
+	bottomActions.push({
+		tag: "button",
+		text: {
+			tag: "plain_text",
+			content: "✓ 完成提交"
+		},
+		type: "primary",
+		behaviors: [{
+			type: "callback",
+			value: {
+				action: "ask_submit",
+				operationId
+			}
+		}]
+	});
+	if (bottomActions.length > 0) {
+		elements.push({ tag: "hr" });
+		elements.push({
+			tag: "action",
+			actions: bottomActions
+		});
+	}
+	const card = {
+		schema: "2.0",
+		config: {
+			wide_screen_mode: true,
+			update_multi: true
+		},
+		header: {
+			template: "blue",
+			title: {
+				tag: "plain_text",
+				content: "💬 需要补充信息"
+			}
+		},
+		body: { elements }
+	};
+	pendingOperations.set(operationId, {
+		type: "ask",
+		operationId,
+		chatId: ctx.chatId,
+		sessionId: ctx.sessionId,
+		createdAt: Date.now(),
+		askContext: {
+			phases: ctx.phases,
+			currentPhase: phaseIndex,
+			answers: {}
+		}
+	});
+	log$12.info("已创建提问卡片操作", {
+		operationId,
+		phaseId: phase.id,
+		phaseIndex,
+		totalPhases,
+		sessionId: ctx.sessionId
+	});
+	return {
+		card,
+		operationId
+	};
 }
 //#endregion
 //#region src/messaging/inbound/dispatch-cc.ts
@@ -10843,16 +10975,6 @@ async function dispatchToCC(params) {
 			}).catch((err) => {
 				log$11.warn("记录飞书 assistant 消息到 store 失败", { error: String(err) });
 			});
-			if (feishuAccumText) handleInteractiveCardTriggers({
-				text: feishuAccumText,
-				chatId,
-				sessionId: route.sessionId,
-				appId: account.configured ? account.appId : "",
-				brand: account.brand,
-				account,
-				replyInThread,
-				threadId: ctx.threadId
-			});
 		},
 		onError: (error) => {
 			log$11.error("CC 进程错误", {
@@ -10869,6 +10991,19 @@ async function dispatchToCC(params) {
 		maxTurns,
 		maxBudgetUsd
 	});
+	clearSessionNoReplyFlag(route.sessionId);
+	const mcpCallbackListener = (req) => {
+		handleMcpToolCallback(req, {
+			chatId,
+			sessionId: route.sessionId,
+			account,
+			replyInThread,
+			threadId: ctx.threadId,
+			appId: account.configured ? account.appId : "",
+			brand: account.brand
+		});
+	};
+	onMcpCallback.on(`callback:${route.sessionId}`, mcpCallbackListener);
 	try {
 		await processManager.executePrompt({
 			sessionId: route.sessionId,
@@ -10887,6 +11022,8 @@ async function dispatchToCC(params) {
 			error: errorMessage
 		});
 		await cardController.onError(err instanceof Error ? err : new Error(errorMessage), { kind: "cc-dispatch" });
+	} finally {
+		onMcpCallback.removeListener(`callback:${route.sessionId}`, mcpCallbackListener);
 	}
 }
 /**
@@ -11114,28 +11251,29 @@ async function dispatchTeammateEval(params) {
 	}
 }
 /**
-* 检测 CC 回复文本中的交互标记，并发送对应的独立卡片。
+* 处理 MCP Server 回调 — 根据 tool 类型发送对应的飞书交互卡片
 *
-* 标记格式：
-* - [PERMISSION_REQUEST] ```json { "scopes": ["scope1", "scope2"] } ```
-* - [ASK_USER] ```json { "question": "...", "phases": [...] } ```
+* 与旧的文本标记方案不同，这里直接从 MCP tool 参数中获取结构化数据，
+* 不需要从流式文本中解析 JSON。卡片回调后通过 resolveMcpRequest 将答案
+* 返回给 MCP Server，CC 自动继续执行（无需重新注入消息）。
 */
-async function handleInteractiveCardTriggers(params) {
-	const { text, chatId, sessionId, appId, brand, account, replyInThread, threadId } = params;
+async function handleMcpToolCallback(req, ctx) {
+	const { chatId, account, replyInThread, threadId } = ctx;
 	try {
-		const authReq = detectAuthRequest(text);
-		if (authReq && appId) {
-			log$11.info("检测到 CC 输出中的权限申请标记", {
-				sessionId,
-				scopes: authReq.scopes
-			});
-			const { card } = buildAuthCard({
+		if (req.tool === "ask_user") {
+			const params = req.params;
+			log$11.info("[MCP] 收到 ask_user 回调，准备发送提问卡片", {
+				requestId: req.requestId,
+				sessionId: req.sessionId,
+				question: params.question?.slice(0, 50)
+			});
+			const { card, operationId } = buildAskCard({
 				chatId,
-				sessionId,
-				appId,
-				scopes: authReq.scopes,
-				brand
+				sessionId: req.sessionId,
+				question: params.question,
+				phases: params.phases
 			});
+			mcpOperationMap.set(operationId, req.requestId);
 			await LarkClient.fromAccount(account).sdk.im.message.create({
 				params: { receive_id_type: "chat_id" },
 				data: {
@@ -11145,23 +11283,25 @@ async function handleInteractiveCardTriggers(params) {
 					...replyInThread && threadId ? { reply_in_thread: true } : {}
 				}
 			});
-			log$11.info("权限申请卡片已发送", {
-				chatId,
-				sessionId
+			log$11.info("[MCP] 提问卡片已发送", {
+				requestId: req.requestId,
+				operationId,
+				chatId
 			});
-		}
-		const askReq = detectAskRequest(text);
-		if (askReq) {
-			log$11.info("检测到 CC 输出中的提问标记", {
-				sessionId,
-				question: askReq.question.slice(0, 50)
+		} else if (req.tool === "request_permission") {
+			const params = req.params;
+			log$11.info("[MCP] 收到 request_permission 回调，准备发送授权卡片", {
+				requestId: req.requestId,
+				scopes: params.scopes
 			});
-			const { card } = buildAskCard({
+			const { card, operationId } = buildAuthCard({
 				chatId,
-				sessionId,
-				question: askReq.question,
-				phases: askReq.phases
+				sessionId: req.sessionId,
+				appId: ctx.appId,
+				scopes: params.scopes,
+				brand: ctx.brand
 			});
+			mcpOperationMap.set(operationId, req.requestId);
 			await LarkClient.fromAccount(account).sdk.im.message.create({
 				params: { receive_id_type: "chat_id" },
 				data: {
@@ -11171,18 +11311,30 @@ async function handleInteractiveCardTriggers(params) {
 					...replyInThread && threadId ? { reply_in_thread: true } : {}
 				}
 			});
-			log$11.info("提问卡片已发送", {
-				chatId,
-				sessionId
+			log$11.info("[MCP] 授权卡片已发送", {
+				requestId: req.requestId,
+				operationId,
+				chatId
 			});
 		}
 	} catch (err) {
-		log$11.error("交互式卡片后处理失败", {
-			sessionId,
+		log$11.error("[MCP] 交互卡片发送失败", {
+			requestId: req.requestId,
+			tool: req.tool,
 			error: err instanceof Error ? err.message : String(err)
 		});
+		resolveMcpRequest(req.requestId, {
+			error: "卡片发送失败",
+			details: String(err)
+		});
 	}
 }
+/**
+* 将飞书卡片 operationId 映射到 MCP requestId。
+* 当用户点击飞书卡片回调时，通过 operationId 找到对应的 MCP requestId，
+* 然后 resolve MCP request。
+*/
+const mcpOperationMap = /* @__PURE__ */ new Map();
 //#endregion
 //#region src/messaging/inbound/permission.ts
 /**