@vibe-lark/larkpal 0.1.76 → 0.1.78

package/dist/main.mjs

@@ -40,7 +40,7 @@ import * as net from "node:net";
 *
 * 本模块在启动时检测它们是否已安装，缺失时给出明确的安装指引。
 */
-const log$40 = larkLogger("preflight");
+const log$41 = larkLogger("preflight");
 function detectCli(name) {
 	try {
 		const cliPath = execFileSync("which", [name], {
@@ -78,14 +78,14 @@ function detectCli(name) {
 * 缺失任一依赖时打印安装指引并抛出错误，阻止启动。
 */
 function preflight() {
-	log$40.info("开始前置环境检查...");
+	log$41.info("开始前置环境检查...");
 	const useCodex = (process.env.LARKPAL_RUNTIME || "claude-code") === "codex-app-server";
 	const claude = detectCli("claude");
 	const codex = useCodex ? detectCli(process.env.LARKPAL_CODEX_BIN || "codex") : void 0;
 	const larkCli = detectCli("lark-cli");
 	const status = (dep) => dep.installed ? `✅ ${dep.name} (${dep.version ?? "unknown"}) → ${dep.path}` : `❌ ${dep.name} 未安装`;
-	log$40.info(`  ${status(useCodex && codex ? codex : claude)}`);
-	log$40.info(`  ${status(larkCli)}`);
+	log$41.info(`  ${status(useCodex && codex ? codex : claude)}`);
+	log$41.info(`  ${status(larkCli)}`);
 	const missing = [];
 	if (useCodex) {
 		if (!codex?.installed) missing.push([
@@ -121,10 +121,10 @@ function preflight() {
 			"",
 			"请安装缺失的依赖后重新启动 LarkPal。"
 		].join("\n");
-		log$40.error(msg);
+		log$41.error(msg);
 		throw new Error("前置环境检查未通过，缺少必要依赖");
 	}
-	log$40.info("前置环境检查通过 ✓");
+	log$41.info("前置环境检查通过 ✓");
 	return {
 		claude,
 		codex,
@@ -149,7 +149,7 @@ function preflight() {
 *   同时生成新版 (~/.lark-cli/config.json) 和旧版 (~/.config/lark/config.json)
 *   格式的配置文件，保证 lark-cli 无论通过哪种路径读取都能正常工作。
 */
-const log$39 = larkLogger("config/ensure-lark-cli");
+const log$40 = larkLogger("config/ensure-lark-cli");
 /** 新版 lark-cli 配置路径 */
 const NEW_CONFIG_DIR = join(homedir(), ".lark-cli");
 const NEW_CONFIG_PATH = join(NEW_CONFIG_DIR, "config.json");
@@ -166,19 +166,19 @@ function ensureLarkCliConfig() {
 	const appId = process.env.LARK_APP_ID;
 	const appSecret = process.env.LARK_APP_SECRET;
 	if (!appId || !appSecret) {
-		log$39.info("环境变量凭证未设置，跳过 lark-cli 配置同步");
+		log$40.info("环境变量凭证未设置，跳过 lark-cli 配置同步");
 		return;
 	}
 	const hasNewConfig = existsSync(NEW_CONFIG_PATH);
 	const hasLegacyConfig = existsSync(LEGACY_CONFIG_PATH);
 	if (hasNewConfig && hasLegacyConfig) {
-		log$39.info("lark-cli 配置文件已存在，跳过同步", {
+		log$40.info("lark-cli 配置文件已存在，跳过同步", {
 			newConfig: NEW_CONFIG_PATH,
 			legacyConfig: LEGACY_CONFIG_PATH
 		});
 		return;
 	}
-	log$39.info("检测到环境变量凭证但 lark-cli 配置文件缺失，开始同步", {
+	log$40.info("检测到环境变量凭证但 lark-cli 配置文件缺失，开始同步", {
 		appId,
 		hasNewConfig,
 		hasLegacyConfig
@@ -197,9 +197,9 @@ function ensureLarkCliConfig() {
 			encoding: "utf-8",
 			mode: 384
 		});
-		log$39.info("已生成新版 lark-cli 配置文件", { path: NEW_CONFIG_PATH });
+		log$40.info("已生成新版 lark-cli 配置文件", { path: NEW_CONFIG_PATH });
 	} catch (err) {
-		log$39.warn("生成新版 lark-cli 配置文件失败", {
+		log$40.warn("生成新版 lark-cli 配置文件失败", {
 			path: NEW_CONFIG_PATH,
 			error: err instanceof Error ? err.message : String(err)
 		});
@@ -218,9 +218,9 @@ function ensureLarkCliConfig() {
 			encoding: "utf-8",
 			mode: 384
 		});
-		log$39.info("已生成旧版 lark-cli 配置文件", { path: LEGACY_CONFIG_PATH });
+		log$40.info("已生成旧版 lark-cli 配置文件", { path: LEGACY_CONFIG_PATH });
 	} catch (err) {
-		log$39.warn("生成旧版 lark-cli 配置文件失败", {
+		log$40.warn("生成旧版 lark-cli 配置文件失败", {
 			path: LEGACY_CONFIG_PATH,
 			error: err instanceof Error ? err.message : String(err)
 		});
@@ -251,72 +251,98 @@ function getWorkspaceChatHistoryRoot(workspaceRoot = resolveWorkspaceRoot()) {
 * 以及确保会话工作目录结构完整。
 */
 const logger$10 = larkLogger("config/defaults");
-const DEFAULT_SETTINGS = {
-	permissions: {
-		allow: [
-			"Bash(*)",
-			"Read(*)",
-			"Write(*)",
-			"Edit(*)",
-			"MultiEdit(*)",
-			"Glob(*)",
-			"Grep(*)",
-			"LS(*)",
-			"TodoWrite(*)",
-			"WebFetch(*)",
-			"WebSearch(*)"
-		],
-		deny: [
-			"Write(//.claude/CLAUDE.md)",
-			"Edit(//.claude/CLAUDE.md)",
-			"Write(//.claude/settings.json)",
-			"Edit(//.claude/settings.json)",
-			"Read(//.lark-cli/**)",
-			"Read(//.config/lark/**)",
-			"Read(//.larkpal/credentials.json)",
-			"Read(//.env)",
-			"Read(//.env.*)",
-			"Bash(cat ~/.lark-cli:*)",
-			"Bash(cat ~/.config/lark:*)",
-			"Bash(cat ~/.larkpal/credentials:*)",
-			"Bash(head ~/.lark-cli:*)",
-			"Bash(head ~/.config/lark:*)",
-			"Bash(tail ~/.lark-cli:*)",
-			"Bash(tail ~/.config/lark:*)",
-			"Bash(less ~/.lark-cli:*)",
-			"Bash(less ~/.config/lark:*)",
-			"Bash(more ~/.lark-cli:*)",
-			"Bash(more ~/.config/lark:*)",
-			"Bash(env:*)",
-			"Bash(printenv:*)",
-			"Bash(export -p:*)",
-			"Bash(echo $LARK_APP_SECRET:*)",
-			"Bash(echo $ANTHROPIC_API_KEY:*)"
-		]
-	},
-	hooks: {
-		SessionStart: [{ hooks: [{
-			type: "http",
-			url: "http://localhost:3000/hooks/session-start",
-			timeout: 5
-		}] }],
-		Stop: [{ hooks: [{
-			type: "http",
-			url: "http://localhost:3000/hooks/stop",
-			timeout: 5
-		}] }],
-		SessionEnd: [{ hooks: [{
-			type: "http",
-			url: "http://localhost:3000/hooks/session-end",
-			timeout: 5
-		}] }],
-		Notification: [{ hooks: [{
-			type: "http",
-			url: "http://localhost:3000/hooks/notification",
-			timeout: 5
-		}] }]
-	}
-};
+function createDefaultSettings() {
+	const hookBaseUrl = getClaudeHookBaseUrl();
+	return {
+		permissions: {
+			allow: [
+				"Bash(*)",
+				"Read(*)",
+				"Write(*)",
+				"Edit(*)",
+				"MultiEdit(*)",
+				"Glob(*)",
+				"Grep(*)",
+				"LS(*)",
+				"TodoWrite(*)",
+				"WebFetch(*)",
+				"WebSearch(*)"
+			],
+			deny: [
+				"Write(//.claude/CLAUDE.md)",
+				"Edit(//.claude/CLAUDE.md)",
+				"Write(//.claude/settings.json)",
+				"Edit(//.claude/settings.json)",
+				"Read(//.lark-cli/**)",
+				"Read(//.config/lark/**)",
+				"Read(//.larkpal/credentials.json)",
+				"Read(//.env)",
+				"Read(//.env.*)",
+				"Bash(cat ~/.lark-cli:*)",
+				"Bash(cat ~/.config/lark:*)",
+				"Bash(cat ~/.larkpal/credentials:*)",
+				"Bash(head ~/.lark-cli:*)",
+				"Bash(head ~/.config/lark:*)",
+				"Bash(tail ~/.lark-cli:*)",
+				"Bash(tail ~/.config/lark:*)",
+				"Bash(less ~/.lark-cli:*)",
+				"Bash(less ~/.config/lark:*)",
+				"Bash(more ~/.lark-cli:*)",
+				"Bash(more ~/.config/lark:*)",
+				"Bash(env:*)",
+				"Bash(printenv:*)",
+				"Bash(export -p:*)",
+				"Bash(echo $LARK_APP_SECRET:*)",
+				"Bash(echo $ANTHROPIC_API_KEY:*)"
+			]
+		},
+		hooks: {
+			SessionStart: [{ hooks: [{
+				type: "http",
+				url: `${hookBaseUrl}/hooks/session-start`,
+				timeout: 5
+			}] }],
+			Stop: [{ hooks: [{
+				type: "http",
+				url: `${hookBaseUrl}/hooks/stop`,
+				timeout: 5
+			}] }],
+			PreToolUse: [{
+				matcher: "Read",
+				hooks: [{
+					type: "http",
+					url: `${hookBaseUrl}/hooks/pre-tool-use`,
+					timeout: 5
+				}]
+			}],
+			PostToolUse: [{
+				matcher: "Read",
+				hooks: [{
+					type: "http",
+					url: `${hookBaseUrl}/hooks/post-tool-use`,
+					timeout: 5
+				}]
+			}],
+			SessionEnd: [{ hooks: [{
+				type: "http",
+				url: `${hookBaseUrl}/hooks/session-end`,
+				timeout: 5
+			}] }],
+			Notification: [{ hooks: [{
+				type: "http",
+				url: `${hookBaseUrl}/hooks/notification`,
+				timeout: 5
+			}] }]
+		}
+	};
+}
+function getClaudeHookBaseUrl() {
+	const explicit = process.env.LARKPAL_CC_HOOK_BASE_URL?.trim();
+	if (explicit) return explicit.replace(/\/+$/, "");
+	const port = process.env.LARKPAL_GATEWAY_PORT || "3000";
+	const rawHost = process.env.LARKPAL_GATEWAY_HOST || "localhost";
+	return `http://${rawHost === "0.0.0.0" || rawHost === "::" ? "127.0.0.1" : rawHost}:${port}`;
+}
 const DEFAULT_CLAUDE_MD = `# LarkPal
 
 你是一个运行在飞书中的 AI 协作伙伴。这是你的初始状态。
@@ -414,7 +440,7 @@ async function ensureDefaults() {
 	const claudeMdPath = join(claudeDir, "CLAUDE.md");
 	await mkdir(claudeDir, { recursive: true });
 	logger$10.info("确保 ~/.claude 目录存在", { path: claudeDir });
-	await writeFile(settingsPath, JSON.stringify(DEFAULT_SETTINGS, null, 2), "utf-8");
+	await writeFile(settingsPath, JSON.stringify(createDefaultSettings(), null, 2), "utf-8");
 	logger$10.info("settings.json 已同步（强制覆盖）", { path: settingsPath });
 	if (await fileExists(claudeMdPath)) logger$10.info("CLAUDE.md 已存在，跳过生成", { path: claudeMdPath });
 	else {
@@ -441,7 +467,7 @@ async function ensureDefaults() {
 * - github: { type: "api_key", token }
 * - custom-api: { type: "http_bearer", base_url, token }
 */
-const log$38 = larkLogger("user/credential-vault");
+const log$39 = larkLogger("user/credential-vault");
 var CredentialVault = class {
 	credentialPath;
 	encryptionKey;
@@ -453,12 +479,12 @@ var CredentialVault = class {
 		if (keyEnv) {
 			this.encryptionKey = keyEnv.length === 64 ? Buffer.from(keyEnv, "hex") : Buffer.from(keyEnv, "base64");
 			if (this.encryptionKey.length !== 32) {
-				log$38.error("LARKPAL_ENCRYPTION_KEY 长度不正确，需要 32 字节", { actualLength: this.encryptionKey.length });
+				log$39.error("LARKPAL_ENCRYPTION_KEY 长度不正确，需要 32 字节", { actualLength: this.encryptionKey.length });
 				this.encryptionKey = null;
-			} else log$38.info("凭证加密已启用");
+			} else log$39.info("凭证加密已启用");
 		} else {
 			this.encryptionKey = null;
-			log$38.warn("LARKPAL_ENCRYPTION_KEY 未设置，凭证将以明文存储（仅限开发模式）");
+			log$39.warn("LARKPAL_ENCRYPTION_KEY 未设置，凭证将以明文存储（仅限开发模式）");
 		}
 	}
 	/**
@@ -466,7 +492,7 @@ var CredentialVault = class {
 	*/
 	async load() {
 		if (!existsSync$1(this.credentialPath)) {
-			log$38.info("凭证文件不存在，使用空凭证", { path: this.credentialPath });
+			log$39.info("凭证文件不存在，使用空凭证", { path: this.credentialPath });
 			this.store = {};
 			this.loaded = true;
 			return;
@@ -475,12 +501,12 @@ var CredentialVault = class {
 			const raw = await readFile$1(this.credentialPath, "utf-8");
 			this.store = JSON.parse(raw);
 			this.loaded = true;
-			log$38.info("凭证文件加载完成", {
+			log$39.info("凭证文件加载完成", {
 				path: this.credentialPath,
 				credentialCount: Object.keys(this.store).length
 			});
 		} catch (err) {
-			log$38.error("凭证文件加载失败", {
+			log$39.error("凭证文件加载失败", {
 				path: this.credentialPath,
 				error: err instanceof Error ? err.message : String(err)
 			});
@@ -494,12 +520,12 @@ var CredentialVault = class {
 	async save() {
 		try {
 			await writeFile$1(this.credentialPath, JSON.stringify(this.store, null, 2), "utf-8");
-			log$38.info("凭证文件保存完成", {
+			log$39.info("凭证文件保存完成", {
 				path: this.credentialPath,
 				credentialCount: Object.keys(this.store).length
 			});
 		} catch (err) {
-			log$38.error("凭证文件保存失败", {
+			log$39.error("凭证文件保存失败", {
 				path: this.credentialPath,
 				error: err instanceof Error ? err.message : String(err)
 			});
@@ -521,7 +547,7 @@ var CredentialVault = class {
 	*/
 	async setCredential(name, credential) {
 		if (!this.loaded) await this.load();
-		log$38.info("设置凭证", {
+		log$39.info("设置凭证", {
 			name,
 			fields: Object.keys(credential)
 		});
@@ -537,7 +563,7 @@ var CredentialVault = class {
 		if (!(name in this.store)) return false;
 		delete this.store[name];
 		await this.save();
-		log$38.info("凭证已删除", { name });
+		log$39.info("凭证已删除", { name });
 		return true;
 	}
 	/**
@@ -566,7 +592,7 @@ var CredentialVault = class {
 				envVars[envKey] = String(fieldValue);
 			}
 		} catch (err) {
-			log$38.warn("凭证解密失败，跳过", {
+			log$39.warn("凭证解密失败，跳过", {
 				name,
 				error: err instanceof Error ? err.message : String(err)
 			});
@@ -623,7 +649,7 @@ var CredentialVault = class {
 * - B 用户的 CC 进程连接 B 的数据库 MCP Server
 * - 全局工具（lark-cli、文件操作等）所有用户共享
 */
-const log$37 = larkLogger("user/mcp-merge");
+const log$38 = larkLogger("user/mcp-merge");
 /** 全局 MCP 配置路径 */
 const GLOBAL_MCP_CONFIG_PATH = path$1.join(os.homedir(), ".claude", "mcp-servers.json");
 /**
@@ -679,9 +705,9 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 	if (existsSync$1(GLOBAL_MCP_CONFIG_PATH)) try {
 		const raw = await readFile$1(GLOBAL_MCP_CONFIG_PATH, "utf-8");
 		globalConfig = JSON.parse(raw);
-		log$37.info("全局 MCP 配置加载完成", { serverCount: Object.keys(globalConfig).length });
+		log$38.info("全局 MCP 配置加载完成", { serverCount: Object.keys(globalConfig).length });
 	} catch (err) {
-		log$37.warn("全局 MCP 配置文件解析失败", {
+		log$38.warn("全局 MCP 配置文件解析失败", {
 			path: GLOBAL_MCP_CONFIG_PATH,
 			error: err instanceof Error ? err.message : String(err)
 		});
@@ -692,13 +718,13 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 		if (existsSync$1(userMcpPath)) try {
 			const raw = await readFile$1(userMcpPath, "utf-8");
 			userConfig = JSON.parse(raw);
-			log$37.info("用户 MCP 配置加载完成", {
+			log$38.info("用户 MCP 配置加载完成", {
 				userId: userCtx.userId,
 				serverCount: Object.keys(userConfig).length,
 				servers: Object.keys(userConfig)
 			});
 		} catch (err) {
-			log$37.warn("用户 MCP 配置文件解析失败", {
+			log$38.warn("用户 MCP 配置文件解析失败", {
 				userId: userCtx?.userId,
 				path: userMcpPath,
 				error: err instanceof Error ? err.message : String(err)
@@ -710,7 +736,7 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 		...globalConfig,
 		...userConfig
 	};
-	log$37.info("MCP 配置合并完成", {
+	log$38.info("MCP 配置合并完成", {
 		userId: userCtx?.userId,
 		builtinServers: Object.keys(builtinConfig),
 		globalServers: Object.keys(globalConfig),
@@ -719,7 +745,7 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 	});
 	const tmpPath = path$1.join(os.tmpdir(), `mcp-${sessionId}.json`);
 	await writeFile$1(tmpPath, JSON.stringify({ mcpServers: merged }, null, 2), "utf-8");
-	log$37.info("MCP 合并配置已写入临时文件", {
+	log$38.info("MCP 合并配置已写入临时文件", {
 		path: tmpPath,
 		serverCount: Object.keys(merged).length
 	});
@@ -733,7 +759,7 @@ async function cleanupMcpConfig(sessionId) {
 	try {
 		if (existsSync$1(tmpPath)) {
 			await unlink$1(tmpPath);
-			log$37.debug("MCP 临时配置文件已清理", { path: tmpPath });
+			log$38.debug("MCP 临时配置文件已清理", { path: tmpPath });
 		}
 	} catch {}
 }
@@ -781,7 +807,7 @@ function getToolDisplayName(toolName) {
 * - result(data)                     — 最终结果
 * - parseError(error, rawLine)       — 解析错误（不中断流）
 */
-const log$36 = larkLogger("cc-runtime/stream-parser");
+const log$37 = larkLogger("cc-runtime/stream-parser");
 const MAX_TOOL_RESULT_CONTENT_CHARS = 8e3;
 var CCStreamParser = class extends EventEmitter {
 	toolNamesById = /* @__PURE__ */ new Map();
@@ -798,7 +824,7 @@ var CCStreamParser = class extends EventEmitter {
 		try {
 			msg = JSON.parse(trimmed);
 		} catch (err) {
-			log$36.warn("NDJSON 解析失败，跳过该行", {
+			log$37.warn("NDJSON 解析失败，跳过该行", {
 				error: String(err),
 				rawLine: trimmed.slice(0, 200)
 			});
@@ -806,7 +832,7 @@ var CCStreamParser = class extends EventEmitter {
 			return;
 		}
 		if (msg.parent_tool_use_id != null && msg.type !== "result") {
-			log$36.debug("跳过 subagent 内部事件", {
+			log$37.debug("跳过 subagent 内部事件", {
 				type: msg.type,
 				parentToolUseId: msg.parent_tool_use_id
 			});
@@ -829,7 +855,7 @@ var CCStreamParser = class extends EventEmitter {
 				this.handleResult(msg);
 				break;
 			case "system":
-				log$36.info("收到 system 消息", {
+				log$37.info("收到 system 消息", {
 					subtype: msg.subtype,
 					detail: JSON.stringify(msg).slice(0, 500)
 				});
@@ -837,7 +863,7 @@ var CCStreamParser = class extends EventEmitter {
 				this.emit("system", msg);
 				break;
 			default:
-				log$36.debug("收到未知消息类型，已忽略", { type: msg.type });
+				log$37.debug("收到未知消息类型，已忽略", { type: msg.type });
 				break;
 		}
 	}
@@ -856,14 +882,14 @@ var CCStreamParser = class extends EventEmitter {
 		switch (event.type) {
 			case "content_block_start": {
 				const block = event.content_block;
-				log$36.debug("content_block_start 事件", {
+				log$37.debug("content_block_start 事件", {
 					blockType: block?.type,
 					toolName: block?.name,
 					toolUseId: block?.id
 				});
 				if (block?.type === "tool_use" && block.name) {
-					this.recordToolUse(block.name, block.id);
-					log$36.info("工具调用开始", {
+					if (!this.recordToolUse(block.name, block.id, block.input)) break;
+					log$37.info("工具调用开始", {
 						toolName: block.name,
 						displayName: getToolDisplayName(block.name),
 						toolUseId: block.id
@@ -882,7 +908,7 @@ var CCStreamParser = class extends EventEmitter {
 			case "message_delta": {
 				const stopReason = event.delta?.stop_reason;
 				if (stopReason) {
-					log$36.info("轮次结束", { stopReason });
+					log$37.info("轮次结束", { stopReason });
 					this.emit("turnEnd", stopReason);
 				}
 				break;
@@ -902,7 +928,7 @@ var CCStreamParser = class extends EventEmitter {
 		const content = msg.message?.content;
 		const stopReason = msg.message?.stop_reason;
 		const blockTypes = Array.isArray(content) ? content.map((b) => `${b.type}${b.name ? ":" + b.name : ""}`).join(", ") : "none";
-		log$36.info("收到完整 assistant 消息", {
+		log$37.info("收到完整 assistant 消息", {
 			model: msg.message?.model,
 			stopReason,
 			contentBlocks: content?.length,
@@ -910,8 +936,8 @@ var CCStreamParser = class extends EventEmitter {
 		});
 		if (Array.isArray(content)) {
 			for (const block of content) if (block.type === "tool_use" && block.name) {
-				this.recordToolUse(block.name, block.id);
-				log$36.info("从 assistant 消息提取工具调用", {
+				if (!this.recordToolUse(block.name, block.id, block.input)) continue;
+				log$37.info("从 assistant 消息提取工具调用", {
 					toolName: block.name,
 					displayName: getToolDisplayName(block.name),
 					toolUseId: block.id
@@ -931,7 +957,7 @@ var CCStreamParser = class extends EventEmitter {
 		if (!Array.isArray(content)) return;
 		for (const item of content) if (item.type === "tool_result" && item.tool_use_id) {
 			const result = this.buildToolResultSummary(item, msg.toolUseResult);
-			log$36.debug("工具结果返回", {
+			log$37.debug("工具结果返回", {
 				toolUseId: item.tool_use_id,
 				toolName: result.toolName,
 				isError: result.isError,
@@ -944,15 +970,19 @@ var CCStreamParser = class extends EventEmitter {
 		if (msg.subtype !== "init" || !Array.isArray(msg.tools)) return;
 		this.declaredTools = new Set(msg.tools);
 	}
-	recordToolUse(toolName, toolUseId) {
+	recordToolUse(toolName, toolUseId, toolInput) {
 		if (toolUseId) this.toolNamesById.set(toolUseId, toolName);
 		if (this.declaredTools && !this.declaredTools.has(toolName)) {
-			log$36.warn("模型请求了未声明工具", {
+			const availableTools = [...this.declaredTools];
+			log$37.warn("模型请求了未声明工具，已抑制正常 toolUseStart", {
 				toolName,
-				toolUseId
+				toolUseId,
+				availableTools
 			});
-			this.emit("unknownToolUse", toolName, toolUseId);
+			this.emit("unknownToolUse", toolName, toolUseId, toolInput, availableTools);
+			return false;
 		}
+		return true;
 	}
 	buildToolResultSummary(item, toolUseResult) {
 		const serializedContent = serializeToolResultContent(item.content);
@@ -974,7 +1004,7 @@ var CCStreamParser = class extends EventEmitter {
 	* 处理 tool_progress 消息 — 工具执行进度
 	*/
 	handleToolProgress(msg) {
-		log$36.debug("工具执行进度", {
+		log$37.debug("工具执行进度", {
 			toolName: msg.tool_name,
 			elapsed: msg.elapsed_time_seconds
 		});
@@ -984,7 +1014,7 @@ var CCStreamParser = class extends EventEmitter {
 	* 处理 result 消息 — CC 执行完成的最终结果
 	*/
 	handleResult(msg) {
-		log$36.info("CC 执行完成", {
+		log$37.info("CC 执行完成", {
 			subtype: msg.subtype,
 			isError: msg.is_error,
 			durationMs: msg.duration_ms,
@@ -1048,6 +1078,223 @@ function tryParseJson$1(value) {
 	}
 }
 //#endregion
+//#region src/cc-runtime/transcript-sanitizer.ts
+const log$36 = larkLogger("cc-runtime/transcript-sanitizer");
+const ARTIFACT_DIR = "larkpal-artifacts";
+const MAX_READ_BYTES = readPositiveIntEnv$1("LARKPAL_TRANSCRIPT_SANITIZER_MAX_BYTES", 50 * 1024 * 1024);
+async function sanitizeClaudeTranscriptFile(filePath) {
+	const result = {
+		changed: false,
+		lines: 0,
+		sanitizedImageBlocks: 0,
+		artifacts: 0
+	};
+	const fileStat = await stat(filePath);
+	if (fileStat.size > MAX_READ_BYTES) {
+		log$36.warn("跳过过大的 Claude transcript sanitizer", {
+			filePath,
+			size: fileStat.size
+		});
+		return result;
+	}
+	const raw = await readFile(filePath, "utf-8");
+	const hasTrailingNewline = raw.endsWith("\n");
+	const lines = raw.split("\n");
+	if (hasTrailingNewline) lines.pop();
+	result.lines = lines.length;
+	const out = [];
+	const artifactRoot = join(dirname(filePath), ARTIFACT_DIR);
+	for (const line of lines) {
+		if (!line.trim()) {
+			out.push(line);
+			continue;
+		}
+		if (!mightContainImagePayload(line)) {
+			out.push(line);
+			continue;
+		}
+		let entry;
+		try {
+			entry = JSON.parse(line);
+		} catch {
+			out.push(line);
+			continue;
+		}
+		const lineStats = await sanitizeTranscriptEntry(entry, artifactRoot);
+		if (lineStats.sanitizedImageBlocks > 0) {
+			result.changed = true;
+			result.sanitizedImageBlocks += lineStats.sanitizedImageBlocks;
+			result.artifacts += lineStats.artifacts;
+			out.push(JSON.stringify(entry));
+		} else out.push(line);
+	}
+	if (!result.changed) return result;
+	const tempPath = `${filePath}.larkpal-sanitized-${process.pid}-${Date.now()}`;
+	await writeFile(tempPath, out.join("\n") + (hasTrailingNewline ? "\n" : ""), "utf-8");
+	await rename(tempPath, filePath);
+	log$36.info("Claude transcript 图片结果已清理", {
+		filePath,
+		...result
+	});
+	return result;
+}
+function isTranscriptSanitizerEnabled() {
+	const value = process.env.LARKPAL_TRANSCRIPT_SANITIZER;
+	return value !== "0" && value !== "false";
+}
+async function sanitizeTranscriptEntry(entry, artifactRoot) {
+	let sanitizedImageBlocks = 0;
+	let artifacts = 0;
+	const message = asObject$1(entry.message);
+	const content = message ? message.content : void 0;
+	const toolUseResult = asObject$1(entry.toolUseResult);
+	let firstArtifactUri;
+	if (Array.isArray(content)) for (let i = 0; i < content.length; i++) {
+		const block = asObject$1(content[i]);
+		if (!block) continue;
+		if (block.type === "tool_result") {
+			const toolUseId = typeof block.tool_use_id === "string" ? block.tool_use_id : void 0;
+			const replacement = await sanitizeToolResultContent(block.content, artifactRoot, toolUseId);
+			if (!replacement) continue;
+			block.content = replacement.content;
+			sanitizedImageBlocks += replacement.imageBlocks;
+			artifacts += replacement.artifacts;
+			firstArtifactUri ??= replacement.metadata[0]?.artifactUri;
+			continue;
+		}
+		if (isBase64ImageBlock(block)) {
+			const artifact = await writeImageArtifact(artifactRoot, block, void 0, i);
+			content[i] = {
+				type: "text",
+				text: buildReplacementText([artifact])
+			};
+			sanitizedImageBlocks++;
+			artifacts++;
+			firstArtifactUri ??= artifact.artifactUri;
+		}
+	}
+	const toolUseResultReplacement = await sanitizeToolUseResult(toolUseResult, artifactRoot, firstArtifactUri);
+	if (toolUseResultReplacement) {
+		sanitizedImageBlocks += toolUseResultReplacement.sanitizedImageBlocks;
+		artifacts += toolUseResultReplacement.artifacts;
+	}
+	return {
+		sanitizedImageBlocks,
+		artifacts
+	};
+}
+async function sanitizeToolUseResult(toolUseResult, artifactRoot, existingArtifactUri) {
+	if (toolUseResult?.type !== "image") return null;
+	const file = asObject$1(toolUseResult.file);
+	if (!file || typeof file.base64 !== "string") return null;
+	let artifactUri = existingArtifactUri;
+	let artifacts = 0;
+	if (!artifactUri) {
+		artifactUri = (await writeImageArtifact(artifactRoot, {
+			type: "image",
+			source: {
+				type: "base64",
+				media_type: typeof file.type === "string" ? file.type : void 0,
+				data: file.base64
+			},
+			filePath: typeof file.filePath === "string" ? file.filePath : void 0
+		}, void 0, 0)).artifactUri;
+		artifacts = 1;
+	}
+	file.artifactUri = artifactUri;
+	file.base64 = "[redacted by LarkPal: image artifact externalized]";
+	return {
+		sanitizedImageBlocks: 1,
+		artifacts
+	};
+}
+async function sanitizeToolResultContent(content, artifactRoot, toolUseId) {
+	if (!Array.isArray(content)) return null;
+	const metadata = [];
+	let imageBlocks = 0;
+	let artifacts = 0;
+	for (let i = 0; i < content.length; i++) {
+		const block = asObject$1(content[i]);
+		if (!isBase64ImageBlock(block)) continue;
+		imageBlocks++;
+		const artifact = await writeImageArtifact(artifactRoot, block, toolUseId, i);
+		metadata.push(artifact);
+		artifacts++;
+	}
+	if (imageBlocks === 0) return null;
+	return {
+		content: buildReplacementText(metadata),
+		imageBlocks,
+		artifacts,
+		metadata
+	};
+}
+async function writeImageArtifact(artifactRoot, block, toolUseId, index) {
+	const source = asObject$1(block.source);
+	const data = typeof source?.data === "string" ? source.data : "";
+	const mimeType = typeof source?.media_type === "string" ? source.media_type : void 0;
+	const artifactId = `${toolUseId ?? randomUUID()}-${index}`;
+	const artifactPath = join(artifactRoot, `${artifactId}.json`);
+	const artifactUri = `artifact://claude-transcript/${artifactId}`;
+	const dimensions = formatDimensions(block);
+	await mkdir(artifactRoot, { recursive: true });
+	await writeFile(artifactPath, JSON.stringify({
+		artifactUri,
+		originalToolName: "Read",
+		toolUseId,
+		mimeType,
+		dimensions,
+		originalSize: data.length,
+		sourcePath: typeof block.filePath === "string" ? block.filePath : void 0,
+		base64: data
+	}, null, 2), {
+		encoding: "utf-8",
+		flag: "w"
+	});
+	return {
+		artifactUri,
+		originalToolName: "Read",
+		toolUseId,
+		mimeType,
+		dimensions,
+		originalSize: data.length,
+		sourcePath: typeof block.filePath === "string" ? block.filePath : void 0,
+		summary: "Rendered image/PDF page preview externalized by LarkPal transcript sanitizer."
+	};
+}
+function buildReplacementText(metadata) {
+	return JSON.stringify({
+		larkpalSanitized: true,
+		reason: "Previous image tool result was externalized to avoid replaying base64 image payloads into provider requests.",
+		artifacts: metadata
+	});
+}
+function isBase64ImageBlock(value) {
+	if (!value || value.type !== "image") return false;
+	const source = asObject$1(value.source);
+	return source?.type === "base64" && typeof source.data === "string";
+}
+function formatDimensions(block) {
+	const dimensions = asObject$1(block.dimensions);
+	if (!dimensions) return void 0;
+	const width = dimensions.displayWidth ?? dimensions.originalWidth;
+	const height = dimensions.displayHeight ?? dimensions.originalHeight;
+	if (typeof width !== "number" || typeof height !== "number") return void 0;
+	return `${width}x${height}`;
+}
+function mightContainImagePayload(line) {
+	return line.includes("\"base64\"") && (line.includes("\"image\"") || line.includes("\"source\""));
+}
+function asObject$1(value) {
+	return typeof value === "object" && value != null ? value : void 0;
+}
+function readPositiveIntEnv$1(name, fallback) {
+	const raw = process.env[name];
+	if (!raw) return fallback;
+	const parsed = Number.parseInt(raw, 10);
+	return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+//#endregion
 //#region src/cc-runtime/process-manager.ts
 /**
 * CC 进程管理器 — 按 session_id 管理 Claude Code 常驻进程的生命周期
@@ -1268,7 +1515,16 @@ var SessionProcessManager = class {
 		const { sessionId, cwd, prompt } = config;
 		const isEphemeral = config.transcriptMode === "ephemeral";
 		const claudeSessionId = isEphemeral ? v4() : v5(sessionId, LARKPAL_SESSION_NAMESPACE);
-		const isResuming = !isEphemeral && (opts?._forceResume || this.ccSessionExists(cwd, claudeSessionId));
+		const transcriptPath = this.getCCSessionFilePath(cwd, claudeSessionId);
+		const transcriptExists = existsSync(transcriptPath);
+		const isResuming = !isEphemeral && (opts?._forceResume || transcriptExists);
+		if (isResuming && transcriptExists && isTranscriptSanitizerEnabled()) await sanitizeClaudeTranscriptFile(transcriptPath).catch((err) => {
+			log$35.warn("Claude transcript sanitizer 失败，继续启动进程", {
+				sessionId,
+				transcriptPath,
+				error: err instanceof Error ? err.message : String(err)
+			});
+		});
 		const args = [
 			"-p",
 			"--input-format",
@@ -1817,12 +2073,10 @@ var SessionProcessManager = class {
 	*/
 	ccSessionExists(cwd, claudeSessionId) {
 		try {
-			const cwdEncoded = this.encodeCwdForCC(cwd);
-			const sessionFile = join(homedir(), ".claude", "projects", cwdEncoded, `${claudeSessionId}.jsonl`);
+			const sessionFile = this.getCCSessionFilePath(cwd, claudeSessionId);
 			const exists = existsSync(sessionFile);
 			log$35.debug("检查 CC session 文件", {
 				cwd,
-				cwdEncoded,
 				claudeSessionId,
 				sessionFile,
 				exists
@@ -1833,6 +2087,10 @@ var SessionProcessManager = class {
 			return false;
 		}
 	}
+	getCCSessionFilePath(cwd, claudeSessionId) {
+		const cwdEncoded = this.encodeCwdForCC(cwd);
+		return join(homedir(), ".claude", "projects", cwdEncoded, `${claudeSessionId}.jsonl`);
+	}
 };
 //#endregion
 //#region src/runtime/claude-code-adapter.ts
@@ -6996,6 +7254,76 @@ async function runBatchTasks(taskConfigs, concurrency, processManager) {
 	logger$6.info("批量任务全部完成", { totalTasks: taskConfigs.length });
 }
 //#endregion
+//#region src/cc-runtime/image-read-guard.ts
+const DEFAULT_MAX_IMAGE_READS_PER_RUN = 4;
+const IMAGE_EXTENSIONS = new Set([
+	".png",
+	".jpg",
+	".jpeg",
+	".gif",
+	".webp",
+	".bmp",
+	".tif",
+	".tiff"
+]);
+const imageReadCounts = /* @__PURE__ */ new Map();
+function evaluateImageReadGuard(body) {
+	const limit = getImageReadLimit();
+	const filePath = getReadFilePath(body);
+	if (limit <= 0 || !filePath || !isImagePath(filePath)) return {
+		allowed: true,
+		count: 0,
+		limit,
+		filePath
+	};
+	const key = getRunKey(body);
+	const count = (imageReadCounts.get(key) ?? 0) + 1;
+	imageReadCounts.set(key, count);
+	if (count <= limit) return {
+		allowed: true,
+		count,
+		limit,
+		filePath
+	};
+	return {
+		allowed: false,
+		count,
+		limit,
+		filePath,
+		reason: `LarkPal blocked image Read #${count}; max image reads per run is ${limit}. Use text extraction or start a fresh run/session before reading more rendered page images.`
+	};
+}
+function resetImageReadGuard(key) {
+	if (key) {
+		imageReadCounts.delete(key);
+		return;
+	}
+	imageReadCounts.clear();
+}
+function getImageReadLimit() {
+	const raw = process.env.LARKPAL_CC_MAX_IMAGE_READS_PER_RUN;
+	if (!raw) return DEFAULT_MAX_IMAGE_READS_PER_RUN;
+	const parsed = Number.parseInt(raw, 10);
+	return Number.isFinite(parsed) && parsed >= 0 ? parsed : DEFAULT_MAX_IMAGE_READS_PER_RUN;
+}
+function getReadFilePath(body) {
+	const input = asObject(body.tool_input);
+	const value = input?.file_path ?? input?.path;
+	return typeof value === "string" ? value : void 0;
+}
+function getRunKey(body) {
+	const transcriptPath = typeof body.transcript_path === "string" ? body.transcript_path : void 0;
+	const sessionId = typeof body.session_id === "string" ? body.session_id : void 0;
+	const cwd = typeof body.cwd === "string" ? body.cwd : void 0;
+	return transcriptPath ?? sessionId ?? cwd ?? "global";
+}
+function isImagePath(filePath) {
+	return IMAGE_EXTENSIONS.has(extname(filePath).toLowerCase());
+}
+function asObject(value) {
+	return typeof value === "object" && value != null ? value : void 0;
+}
+//#endregion
 //#region src/gateway/hooks-handler.ts
 /**
 * HTTP Hooks 接收路由
@@ -7028,6 +7356,63 @@ function createHooksRouter() {
 		});
 		res.json({ received: true });
 	});
+	router.post("/pre-tool-use", (req, res) => {
+		const body = req.body;
+		const decision = evaluateImageReadGuard(body);
+		logger$5.info("hook received: pre-tool-use", {
+			method: req.method,
+			url: req.originalUrl,
+			sessionId: body.session_id,
+			toolName: body.tool_name,
+			filePath: decision.filePath,
+			count: decision.count,
+			limit: decision.limit,
+			allowed: decision.allowed
+		});
+		if (decision.allowed) {
+			res.json({ continue: true });
+			return;
+		}
+		res.json({
+			continue: true,
+			hookSpecificOutput: {
+				hookEventName: "PreToolUse",
+				permissionDecision: "deny",
+				permissionDecisionReason: decision.reason
+			}
+		});
+	});
+	router.post("/post-tool-use", async (req, res) => {
+		const body = req.body;
+		const transcriptPath = typeof body.transcript_path === "string" ? body.transcript_path : typeof body.transcriptPath === "string" ? body.transcriptPath : void 0;
+		logger$5.info("hook received: post-tool-use", {
+			method: req.method,
+			url: req.originalUrl,
+			sessionId: body.session_id,
+			toolName: body.tool_name,
+			transcriptPath
+		});
+		if (!transcriptPath || !isTranscriptSanitizerEnabled()) {
+			res.json({ continue: true });
+			return;
+		}
+		try {
+			const result = await sanitizeClaudeTranscriptFile(transcriptPath);
+			res.json({
+				continue: true,
+				hookSpecificOutput: result.changed ? {
+					hookEventName: "PostToolUse",
+					additionalContext: `LarkPal externalized ${result.sanitizedImageBlocks} image tool result(s) from the persisted Claude transcript to reduce future replay payload.`
+				} : void 0
+			});
+		} catch (err) {
+			logger$5.warn("post-tool-use transcript sanitizer failed", {
+				transcriptPath,
+				error: err instanceof Error ? err.message : String(err)
+			});
+			res.json({ continue: true });
+		}
+	});
 	router.post("/session-end", (req, res) => {
 		const body = req.body;
 		logger$5.info("hook received: session-end", {
@@ -7036,6 +7421,7 @@ function createHooksRouter() {
 			sessionId: body.session_id,
 			body
 		});
+		resetImageReadGuard(typeof body.transcript_path === "string" ? body.transcript_path : void 0);
 		res.json({ received: true });
 	});
 	router.post("/notification", (req, res) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibe-lark/larkpal",
-  "version": "0.1.76",
+  "version": "0.1.78",
   "description": "LarkPal - Lark/Feishu bot service",
   "type": "module",
   "main": "./dist/main.mjs",