@vibe-lark/larkpal 0.1.91-issue70.0 → 0.1.91-issue71.0

package/README.md

@@ -93,60 +93,9 @@ lark-cli auth login
 | `LARKPAL_ENCRYPTION_KEY` | 用户凭证加密密钥（32字节 hex） | 未设置（明文，仅限开发） |
 | `LARKPAL_PLUGINS` | 声明式加载的插件列表 | 空 |
 | `LARKPAL_CHAT_JWT_SECRET` | Chat API JWT 签名密钥 | fallback 到 `LARKPAL_API_SECRET` |
-| `LARKPAL_BUSINESS_EVENT_CALLBACK_URL` | 飞书长连接业务事件回调地址，用于固定菜单和业务卡片 action | 空 |
 
 会话工作目录默认写入 `LARKPAL_WORKSPACE` 下的隐藏目录：飞书会话为 `.chats/`，通用 Agent 会话为 `.sessions/`，Chat API 历史为 `.chat-history/`。
 
-### Business Event Callback
-
-当配置 `LARKPAL_BUSINESS_EVENT_CALLBACK_URL` 时，LarkPal 会把内置处理器未消费的业务事件 POST 到该地址。典型来源包括飞书固定机器人菜单 `application.bot.menu_v6` 和业务自定义 `card.action.trigger`。回调响应可以让 LarkPal 在触发会话中发送可见反馈；业务系统拥有 workflow 语义和卡片内容，LarkPal 只负责 Feishu transport。
-
-**文本消息响应**
-
-```json
-{ "kind": "message", "text": "配方草稿已创建，请继续填写。" }
-```
-
-兼容格式：
-
-```json
-{ "message": { "text": "配方草稿已创建，请继续填写。" } }
-```
-
-**互动卡片响应**
-
-LarkPal 原样发送 `card` payload，不重写业务 action id。
-
-```json
-{
-  "kind": "card",
-  "card": {
-    "schema": "2.0",
-    "body": { "elements": [] }
-  }
-}
-```
-
-兼容格式：
-
-```json
-{ "card": { "schema": "2.0", "body": { "elements": [] } } }
-```
-
-**轻量提示响应**
-
-对于不支持直接 toast 的事件（如固定菜单），LarkPal 会降级发送一条可见文本消息，避免用户点击后无反馈。
-
-```json
-{ "kind": "toast", "toast": { "type": "warning", "content": "请先上传实验文档。" } }
-```
-
-兼容格式：
-
-```json
-{ "toast": { "type": "warning", "content": "请先上传实验文档。" } }
-```
-
 ### larkpal-agent Runtime 专用（LARKPAL_RUNTIME=larkpal-agent 时必填）
 
 | 变量名 | 用途 | 示例 |

package/dist/cli.mjs

@@ -73,17 +73,17 @@ async function cli() {
 		process.exit(exitCode);
 	}
 	if (command === "meeting-live-smoke") {
-		const { runMeetingLiveSmokeCli } = await import("./live-smoke-DsR13pI9.mjs").then((n) => n.t);
+		const { runMeetingLiveSmokeCli } = await import("./live-smoke-CukAuAsd.mjs").then((n) => n.t);
 		await runMeetingLiveSmokeCli(args.slice(1));
 		return;
 	}
 	if (command === "meeting-live-teammate") {
-		const { runMeetingLiveTeammateCli } = await import("./live-smoke-DsR13pI9.mjs").then((n) => n.t);
+		const { runMeetingLiveTeammateCli } = await import("./live-smoke-CukAuAsd.mjs").then((n) => n.t);
 		await runMeetingLiveTeammateCli(args.slice(1));
 		return;
 	}
 	if (command === "meeting-live-check") {
-		const { runMeetingLiveCheckCli } = await import("./live-smoke-DsR13pI9.mjs").then((n) => n.t);
+		const { runMeetingLiveCheckCli } = await import("./live-smoke-CukAuAsd.mjs").then((n) => n.t);
 		const exitCode = await runMeetingLiveCheckCli(args.slice(1));
 		process.exit(exitCode);
 	}

package/dist/{live-smoke-DsR13pI9.mjs → live-smoke-CukAuAsd.mjs}

@@ -1,19 +1,17 @@
 import { t as __exportAll } from "./rolldown-runtime-wcPFST8Q.mjs";
 import { t as larkLogger } from "./lark-logger-D7_pEVQc.mjs";
 import { createWriteStream, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { basename, dirname, extname, join, resolve } from "node:path";
+import path, { basename, dirname, extname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { copyFile, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "node:fs/promises";
-import { homedir, tmpdir } from "node:os";
+import { copyFile, mkdir, readFile, readdir, rename, rm, stat, unlink, writeFile } from "node:fs/promises";
+import os, { homedir, tmpdir } from "node:os";
 import { execFileSync, spawn } from "node:child_process";
 import { createHash, randomUUID } from "node:crypto";
 import { createInterface } from "node:readline";
 import { v4, v5 } from "uuid";
-import { readFile as readFile$1, unlink as unlink$1, writeFile as writeFile$1 } from "fs/promises";
+import { readFile as readFile$1, writeFile as writeFile$1 } from "fs/promises";
 import { existsSync as existsSync$1 } from "fs";
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
-import path$1 from "path";
-import os from "os";
 import { EventEmitter } from "node:events";
 import { pipeline } from "node:stream/promises";
 import { Transform } from "node:stream";
@@ -216,6 +214,29 @@ var CredentialVault = class {
 	}
 };
 //#endregion
+//#region src/runtime/tool-policy.ts
+const SIGNAL_NO_REPLY_TOOL = "signal_no_reply";
+function appendDisallowedTool(policy, tool) {
+	const disallowedTools = policy?.disallowedTools ?? [];
+	if (disallowedTools.some((rule) => rule.tool === tool)) return {
+		...policy,
+		allowedTools: policy?.allowedTools ?? [],
+		allowedSkills: policy?.allowedSkills ?? [],
+		disallowedTools
+	};
+	return {
+		...policy,
+		allowedTools: policy?.allowedTools ?? [],
+		allowedSkills: policy?.allowedSkills ?? [],
+		disallowedTools: [...disallowedTools, { tool }]
+	};
+}
+function serializeDisabledMcpTools(policy) {
+	const tools = policy?.disallowedTools?.map((rule) => rule.tool.trim()).filter(Boolean);
+	if (!tools?.length) return void 0;
+	return [...new Set(tools)].join(",");
+}
+//#endregion
 //#region src/user/mcp-merge.ts
 /**
 * per-user MCP Server 配置合并
@@ -235,28 +256,53 @@ var CredentialVault = class {
 * - 全局工具（lark-cli、文件操作等）所有用户共享
 */
 const log$9 = larkLogger("user/mcp-merge");
+const currentDir = path.dirname(fileURLToPath(import.meta.url));
 /** 全局 MCP 配置路径 */
-const GLOBAL_MCP_CONFIG_PATH = path$1.join(os.homedir(), ".claude", "mcp-servers.json");
+const GLOBAL_MCP_CONFIG_PATH = path.join(os.homedir(), ".claude", "mcp-servers.json");
 /**
 * 获取 larkpal MCP Server 的可执行路径
 *
 * 优先使用 dist/mcp-server.mjs（生产构建），回退到 tsx 直接运行源码（开发模式）
 */
 function getLarkpalMcpServerCommand$1() {
-	const distPath = path$1.resolve(import.meta.dirname ?? __dirname, "..", "dist", "mcp-server.mjs");
-	if (existsSync$1(distPath)) return {
+	const distCandidates = [
+		path.resolve(currentDir, "mcp-server.mjs"),
+		path.resolve(currentDir, "..", "dist", "mcp-server.mjs"),
+		path.resolve(currentDir, "..", "..", "dist", "mcp-server.mjs")
+	];
+	for (const distPath of distCandidates) if (existsSync(distPath)) return {
 		command: "node",
 		args: [distPath]
 	};
-	const srcPath = path$1.resolve(import.meta.dirname ?? __dirname, "..", "src", "mcp-server", "index.ts");
-	if (existsSync$1(srcPath)) return {
+	const srcPath = path.resolve(currentDir, "..", "mcp-server", "index.ts");
+	if (existsSync(srcPath)) return {
 		command: "npx",
 		args: ["tsx", srcPath]
 	};
 	return {
+		command: "node",
+		args: [distCandidates[0] ?? path.resolve(currentDir, "mcp-server.mjs")]
+	};
+}
+function getExternalMcpProxyCommand() {
+	const distCandidates = [
+		path.resolve(currentDir, "mcp-http-proxy.mjs"),
+		path.resolve(currentDir, "..", "dist", "mcp-http-proxy.mjs"),
+		path.resolve(currentDir, "..", "..", "dist", "mcp-http-proxy.mjs")
+	];
+	for (const distPath of distCandidates) if (existsSync(distPath)) return {
 		command: "node",
 		args: [distPath]
 	};
+	const srcPath = path.resolve(currentDir, "..", "mcp-http-proxy", "index.ts");
+	if (existsSync(srcPath)) return {
+		command: "npx",
+		args: ["tsx", srcPath]
+	};
+	return {
+		command: "node",
+		args: [distCandidates[0] ?? path.resolve(currentDir, "mcp-http-proxy.mjs")]
+	};
 }
 /**
 * 构建内置 larkpal MCP Server 配置
@@ -264,8 +310,9 @@ function getLarkpalMcpServerCommand$1() {
 * 重要: CC 启动 MCP Server 子进程时，env 字段可能是「覆盖」语义（不继承父进程环境变量）。
 * 因此必须将所有关键变量显式传递，特别是 PATH 和 HOME。
 */
-function getBuiltinLarkpalConfig(sessionId, cwd) {
+function getBuiltinLarkpalConfig(sessionId, cwd, policy) {
 	const { command, args } = getLarkpalMcpServerCommand$1();
+	const disabledTools = serializeDisabledMcpTools(policy);
 	return {
 		command,
 		args,
@@ -275,20 +322,59 @@ function getBuiltinLarkpalConfig(sessionId, cwd) {
 			NODE_PATH: process.env["NODE_PATH"] || "",
 			LARKPAL_MCP_SESSION_ID: sessionId,
 			...cwd ? { LARKPAL_MCP_CWD: cwd } : {},
+			...disabledTools ? { LARKPAL_MCP_DISABLED_TOOLS: disabledTools } : {},
 			LARKPAL_GATEWAY_PORT: process.env["LARKPAL_GATEWAY_PORT"] || "3000"
 		}
 	};
 }
+function getExternalMcpProviderConfig(provider) {
+	const { command, args } = getExternalMcpProxyCommand();
+	return {
+		command,
+		args,
+		env: {
+			PATH: process.env["PATH"] || "/usr/local/bin:/usr/bin:/bin",
+			HOME: process.env["HOME"] || "/home/larkpal",
+			NODE_PATH: process.env["NODE_PATH"] || "",
+			LARKPAL_EXTERNAL_MCP_NAME: provider.name,
+			LARKPAL_EXTERNAL_MCP_URL: provider.url,
+			...provider.headers ? { LARKPAL_EXTERNAL_MCP_HEADERS_JSON: JSON.stringify(provider.headers) } : {},
+			...provider.headerEnv ? { LARKPAL_EXTERNAL_MCP_HEADER_ENV_JSON: JSON.stringify(provider.headerEnv) } : {},
+			...provider.headersJsonEnv ? { LARKPAL_EXTERNAL_MCP_HEADERS_JSON_ENV: provider.headersJsonEnv } : {},
+			...provider.toolAllowlist?.length ? { LARKPAL_EXTERNAL_MCP_TOOL_ALLOWLIST: provider.toolAllowlist.join(",") } : {}
+		}
+	};
+}
+function buildExternalMcpConfig(providers) {
+	const result = {};
+	for (const provider of providers ?? []) {
+		const name = provider.name.trim();
+		const url = provider.url.trim();
+		if (!name || !url) {
+			log$9.warn("外部 MCP Provider 配置缺少 name 或 url，已跳过", {
+				name: provider.name,
+				url: provider.url
+			});
+			continue;
+		}
+		result[name] = getExternalMcpProviderConfig({
+			...provider,
+			name,
+			url
+		});
+	}
+	return result;
+}
 /**
 * 合并全局、内置和用户 MCP 配置，写入临时文件
 *
 * @returns 临时文件路径，用于 --mcp-config 参数（总是返回有效路径）
 */
-async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
-	const builtinConfig = { larkpal: getBuiltinLarkpalConfig(sessionId, cwd) };
+async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd, policy, externalProviders) {
+	const builtinConfig = { larkpal: getBuiltinLarkpalConfig(sessionId, cwd, policy) };
 	let globalConfig = {};
-	if (existsSync$1(GLOBAL_MCP_CONFIG_PATH)) try {
-		const raw = await readFile$1(GLOBAL_MCP_CONFIG_PATH, "utf-8");
+	if (existsSync(GLOBAL_MCP_CONFIG_PATH)) try {
+		const raw = await readFile(GLOBAL_MCP_CONFIG_PATH, "utf-8");
 		globalConfig = JSON.parse(raw);
 		log$9.info("全局 MCP 配置加载完成", { serverCount: Object.keys(globalConfig).length });
 	} catch (err) {
@@ -299,9 +385,9 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 	}
 	let userConfig = {};
 	if (userCtx) {
-		const userMcpPath = path$1.join(userCtx.credentialDir, "mcp-servers.json");
-		if (existsSync$1(userMcpPath)) try {
-			const raw = await readFile$1(userMcpPath, "utf-8");
+		const userMcpPath = path.join(userCtx.credentialDir, "mcp-servers.json");
+		if (existsSync(userMcpPath)) try {
+			const raw = await readFile(userMcpPath, "utf-8");
 			userConfig = JSON.parse(raw);
 			log$9.info("用户 MCP 配置加载完成", {
 				userId: userCtx.userId,
@@ -316,20 +402,23 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 			});
 		}
 	}
+	const externalConfig = buildExternalMcpConfig(externalProviders);
 	const merged = {
 		...builtinConfig,
 		...globalConfig,
-		...userConfig
+		...userConfig,
+		...externalConfig
 	};
 	log$9.info("MCP 配置合并完成", {
 		userId: userCtx?.userId,
 		builtinServers: Object.keys(builtinConfig),
 		globalServers: Object.keys(globalConfig),
 		userServers: Object.keys(userConfig),
+		externalServers: Object.keys(externalConfig),
 		mergedServers: Object.keys(merged)
 	});
-	const tmpPath = path$1.join(os.tmpdir(), `mcp-${sessionId}.json`);
-	await writeFile$1(tmpPath, JSON.stringify({ mcpServers: merged }, null, 2), "utf-8");
+	const tmpPath = path.join(os.tmpdir(), `mcp-${sessionId}.json`);
+	await writeFile(tmpPath, JSON.stringify({ mcpServers: merged }, null, 2), "utf-8");
 	log$9.info("MCP 合并配置已写入临时文件", {
 		path: tmpPath,
 		serverCount: Object.keys(merged).length
@@ -340,10 +429,10 @@ async function mergeAndWriteMcpConfig(userCtx, sessionId, cwd) {
 * 清理 MCP 临时配置文件
 */
 async function cleanupMcpConfig(sessionId) {
-	const tmpPath = path$1.join(os.tmpdir(), `mcp-${sessionId}.json`);
+	const tmpPath = path.join(os.tmpdir(), `mcp-${sessionId}.json`);
 	try {
-		if (existsSync$1(tmpPath)) {
-			await unlink$1(tmpPath);
+		if (existsSync(tmpPath)) {
+			await unlink(tmpPath);
 			log$9.debug("MCP 临时配置文件已清理", { path: tmpPath });
 		}
 	} catch {}
@@ -478,6 +567,8 @@ const log$8 = larkLogger("cc-runtime/stream-parser");
 const MAX_TOOL_RESULT_CONTENT_CHARS = 8e3;
 var CCStreamParser = class extends EventEmitter {
 	toolNamesById = /* @__PURE__ */ new Map();
+	emittedToolUseIds = /* @__PURE__ */ new Set();
+	emittedToolUseFingerprints = /* @__PURE__ */ new Set();
 	declaredTools = null;
 	/**
 	* 解析一行 NDJSON 文本
@@ -556,12 +647,21 @@ var CCStreamParser = class extends EventEmitter {
 				});
 				if (block?.type === "tool_use" && block.name) {
 					if (!this.recordToolUse(block.name, block.id, block.input)) break;
+					if (!hasDurableToolInput(block.input)) {
+						log$8.debug("工具调用 start 仅含草稿参数，等待完整 assistant 消息", {
+							toolName: block.name,
+							toolUseId: block.id
+						});
+						break;
+					}
+					if (this.hasEmittedToolUseStart(block.name, block.input, block.id)) break;
 					log$8.info("工具调用开始", {
 						toolName: block.name,
 						displayName: getToolDisplayName(block.name),
 						toolUseId: block.id
 					});
-					this.emit("toolUseStart", block.name, block.input ?? {}, block.id);
+					this.markToolUseStartEmitted(block.name, block.input, block.id);
+					this.emit("toolUseStart", block.name, block.input, block.id);
 				}
 				break;
 			}
@@ -604,11 +704,13 @@ var CCStreamParser = class extends EventEmitter {
 		if (Array.isArray(content)) {
 			for (const block of content) if (block.type === "tool_use" && block.name) {
 				if (!this.recordToolUse(block.name, block.id, block.input)) continue;
+				if (this.hasEmittedToolUseStart(block.name, block.input, block.id)) continue;
 				log$8.info("从 assistant 消息提取工具调用", {
 					toolName: block.name,
 					displayName: getToolDisplayName(block.name),
 					toolUseId: block.id
 				});
+				this.markToolUseStartEmitted(block.name, block.input, block.id);
 				this.emit("toolUseStart", block.name, block.input ?? {}, block.id);
 			}
 		}
@@ -651,6 +753,14 @@ var CCStreamParser = class extends EventEmitter {
 		}
 		return true;
 	}
+	hasEmittedToolUseStart(toolName, toolInput, toolUseId) {
+		if (toolUseId && this.emittedToolUseIds.has(toolUseId)) return true;
+		return this.emittedToolUseFingerprints.has(fingerprintToolUse(toolName, toolInput));
+	}
+	markToolUseStartEmitted(toolName, toolInput, toolUseId) {
+		if (toolUseId) this.emittedToolUseIds.add(toolUseId);
+		this.emittedToolUseFingerprints.add(fingerprintToolUse(toolName, toolInput));
+	}
 	buildToolResultSummary(item, toolUseResult) {
 		const serializedContent = serializeToolResultContent(item.content);
 		const truncatedContent = truncateToolResultContent(serializedContent);
@@ -673,9 +783,10 @@ var CCStreamParser = class extends EventEmitter {
 	handleToolProgress(msg) {
 		log$8.debug("工具执行进度", {
 			toolName: msg.tool_name,
+			toolUseId: msg.tool_use_id,
 			elapsed: msg.elapsed_time_seconds
 		});
-		this.emit("toolProgress", msg.tool_name, msg.elapsed_time_seconds);
+		this.emit("toolProgress", msg.tool_name, msg.elapsed_time_seconds, msg.tool_use_id);
 	}
 	/**
 	* 处理 result 消息 — CC 执行完成的最终结果
@@ -698,6 +809,19 @@ var CCStreamParser = class extends EventEmitter {
 		});
 	}
 };
+function hasDurableToolInput(toolInput) {
+	if (!toolInput || typeof toolInput !== "object" || Array.isArray(toolInput)) return false;
+	return Object.keys(toolInput).length > 0;
+}
+function fingerprintToolUse(toolName, toolInput) {
+	return `${toolName}:${stableJsonStringify(toolInput)}`;
+}
+function stableJsonStringify(value) {
+	if (value === null || typeof value !== "object") return JSON.stringify(value) ?? String(value);
+	if (Array.isArray(value)) return `[${value.map((item) => stableJsonStringify(item)).join(",")}]`;
+	const input = value;
+	return `{${Object.keys(input).sort().map((key) => `${JSON.stringify(key)}:${stableJsonStringify(input[key])}`).join(",")}}`;
+}
 function serializeToolResultContent(content) {
 	if (typeof content === "string") return content;
 	return safeJsonStringify(content);
@@ -1211,7 +1335,7 @@ var SessionProcessManager = class {
 		if (config.model) args.push("--model", config.model);
 		args.push("--effort", CC_EFFORT);
 		try {
-			const mcpConfigPath = await mergeAndWriteMcpConfig(config.userContext && !config.userContext.isTenantIdentity ? config.userContext : null, sessionId, cwd);
+			const mcpConfigPath = await mergeAndWriteMcpConfig(config.userContext && !config.userContext.isTenantIdentity ? config.userContext : null, sessionId, cwd, config.policy, config.externalMcpProviders);
 			args.push("--mcp-config", mcpConfigPath);
 			log$6.info("MCP 配置已合并并注入到 CC 进程", {
 				sessionId,
@@ -1442,8 +1566,8 @@ var SessionProcessManager = class {
 				summary: this.lastMultimodalSummaries.get(sessionId)
 			}));
 		});
-		parser.on("toolProgress", (toolName, elapsedSeconds) => {
-			getCallbacks()?.onToolProgress?.(toolName, elapsedSeconds);
+		parser.on("toolProgress", (toolName, elapsedSeconds, toolUseId) => {
+			getCallbacks()?.onToolProgress?.(toolName, elapsedSeconds, toolUseId);
 		});
 		parser.on("turnEnd", (stopReason) => {
 			log$6.info("[perf] turnEnd", {
@@ -2420,7 +2544,7 @@ var CodexAppServerAdapter = class {
 			return existing;
 		}
 		const env = this.buildProcessEnv(config);
-		const extraArgs = this.buildCodexArgs(config.sessionId, config.cwd);
+		const extraArgs = this.buildCodexArgs(config);
 		const client = this.clientFactory({
 			sessionId: config.sessionId,
 			cwd: config.cwd,
@@ -2574,7 +2698,7 @@ var CodexAppServerAdapter = class {
 		const { toolName, toolInput } = this.describeToolItem(params.item);
 		if (!toolName) return;
 		this.rememberToolName(sessionId, params.item.id, toolName);
-		callbacks.onToolUseStart?.(toolName, toolInput);
+		callbacks.onToolUseStart?.(toolName, toolInput, params.item.id);
 	}
 	handleItemCompleted(sessionId, params) {
 		if (params.item.type === "contextCompaction") {
@@ -2605,7 +2729,7 @@ var CodexAppServerAdapter = class {
 	}
 	handleMcpProgress(sessionId, params) {
 		const toolName = this.lookupToolName(sessionId, params.itemId) ?? "mcp";
-		this.activeCallbacks.get(sessionId)?.onToolProgress?.(toolName, 0);
+		this.activeCallbacks.get(sessionId)?.onToolProgress?.(toolName, 0, params.itemId);
 		log$3.debug("Codex MCP tool progress", {
 			sessionId,
 			itemId: params.itemId,
@@ -2971,10 +3095,12 @@ var CodexAppServerAdapter = class {
 		}).catch(() => {})));
 	}
 	buildProcessEnv(config) {
+		const disabledTools = serializeDisabledMcpTools(config.policy);
 		return {
 			...process.env,
 			LARKPAL_MCP_SESSION_ID: config.sessionId,
 			LARKPAL_MCP_CWD: config.cwd,
+			...disabledTools ? { LARKPAL_MCP_DISABLED_TOOLS: disabledTools } : {},
 			LARKPAL_USER_ID: config.userContext?.userId ?? process.env.LARKPAL_USER_ID,
 			LARKPAL_USER_OPEN_ID: config.userContext?.openId ?? process.env.LARKPAL_USER_OPEN_ID,
 			LARKPAL_USER_NAME: config.userContext?.userName ?? process.env.LARKPAL_USER_NAME,
@@ -2982,14 +3108,16 @@ var CodexAppServerAdapter = class {
 			LARKPAL_IS_TENANT: config.userContext?.isTenantIdentity ? "1" : process.env.LARKPAL_IS_TENANT
 		};
 	}
-	buildCodexArgs(sessionId, cwd) {
+	buildCodexArgs(config) {
 		const { command, args } = getLarkpalMcpServerCommand();
+		const disabledTools = serializeDisabledMcpTools(config.policy);
 		const env = {
 			PATH: process.env.PATH || "/usr/local/bin:/usr/bin:/bin",
 			HOME: process.env.HOME || homedir(),
 			NODE_PATH: process.env.NODE_PATH || "",
-			LARKPAL_MCP_SESSION_ID: sessionId,
-			...cwd ? { LARKPAL_MCP_CWD: cwd } : {},
+			LARKPAL_MCP_SESSION_ID: config.sessionId,
+			...config.cwd ? { LARKPAL_MCP_CWD: config.cwd } : {},
+			...disabledTools ? { LARKPAL_MCP_DISABLED_TOOLS: disabledTools } : {},
 			LARKPAL_GATEWAY_PORT: process.env.LARKPAL_GATEWAY_PORT || "3000"
 		};
 		return [
@@ -3005,7 +3133,7 @@ var CodexAppServerAdapter = class {
 		if (config.llmConfig) log$3.warn("Codex app-server v1 暂不支持 per-request llmConfig，已忽略", { sessionId: config.sessionId });
 		if (config.maxBudgetUsd != null) log$3.warn("Codex app-server v1 暂不支持 maxBudgetUsd，已忽略", { sessionId: config.sessionId });
 		if (config.maxTurns != null) log$3.warn("Codex app-server v1 暂不支持 maxTurns，已忽略", { sessionId: config.sessionId });
-		if (config.policy?.allowedTools || config.policy?.disallowedTools) log$3.warn("Codex app-server v1 暂不强制执行 tool allow/deny policy，已忽略", { sessionId: config.sessionId });
+		if (config.policy?.allowedTools?.length) log$3.warn("Codex app-server v1 暂不强制执行 tool allow policy，已忽略", { sessionId: config.sessionId });
 	}
 	createCompletionPromise(sessionId) {
 		return new Promise((resolve) => {
@@ -4127,9 +4255,11 @@ function buildAgentRuntimeConfig(input) {
 	});
 	const policy = buildExecutionPolicy(input.policy, {
 		maxTurns: input.maxTurns,
-		maxBudgetUsd: input.maxBudgetUsd
+		maxBudgetUsd: input.maxBudgetUsd,
+		allowSignalNoReplyTool: input.allowSignalNoReplyTool
 	});
 	const userContext = buildUserContext(input.identity);
+	const externalMcpProviders = input.externalMcpProviders ?? loadExternalMcpProvidersFromEnv();
 	const requestContext = {
 		requestId,
 		sessionId,
@@ -4180,9 +4310,56 @@ function buildAgentRuntimeConfig(input) {
 			authHeaders,
 			metadata
 		},
+		externalMcpProviders,
 		metadata
 	};
 }
+function loadExternalMcpProvidersFromEnv(env = process.env) {
+	const raw = env.LARKPAL_EXTERNAL_MCP_PROVIDERS;
+	if (!raw?.trim()) return void 0;
+	const parsed = JSON.parse(raw);
+	if (!Array.isArray(parsed)) throw new Error("LARKPAL_EXTERNAL_MCP_PROVIDERS must be a JSON array");
+	return parsed.map((entry, index) => normalizeExternalMcpProvider(entry, index));
+}
+function normalizeExternalMcpProvider(entry, index) {
+	if (!entry || typeof entry !== "object" || Array.isArray(entry)) throw new Error(`LARKPAL_EXTERNAL_MCP_PROVIDERS[${index}] must be an object`);
+	const record = entry;
+	return {
+		name: readRequiredString(record.name, `LARKPAL_EXTERNAL_MCP_PROVIDERS[${index}].name`),
+		url: readRequiredString(record.url, `LARKPAL_EXTERNAL_MCP_PROVIDERS[${index}].url`),
+		headers: readStringRecord(record.headers, `LARKPAL_EXTERNAL_MCP_PROVIDERS[${index}].headers`),
+		headerEnv: readStringRecord(record.headerEnv, `LARKPAL_EXTERNAL_MCP_PROVIDERS[${index}].headerEnv`),
+		headersJsonEnv: readOptionalString(record.headersJsonEnv),
+		toolAllowlist: readStringArray(record.toolAllowlist, `LARKPAL_EXTERNAL_MCP_PROVIDERS[${index}].toolAllowlist`)
+	};
+}
+function readRequiredString(value, field) {
+	const text = readOptionalString(value);
+	if (!text) throw new Error(`${field} is required`);
+	return text;
+}
+function readOptionalString(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function readStringRecord(value, field) {
+	if (value === void 0) return void 0;
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${field} must be an object`);
+	const result = {};
+	for (const [key, entry] of Object.entries(value)) {
+		if (typeof entry !== "string") throw new Error(`${field}.${key} must be a string`);
+		result[key] = entry;
+	}
+	return result;
+}
+function readStringArray(value, field) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value)) throw new Error(`${field} must be an array`);
+	const result = value.map((entry, index) => {
+		if (typeof entry !== "string" || !entry.trim()) throw new Error(`${field}[${index}] must be a non-empty string`);
+		return entry.trim();
+	});
+	return result.length ? result : void 0;
+}
 function getRunInputValue(...values) {
 	return values.find((value) => value !== void 0);
 }
@@ -4298,7 +4475,7 @@ function buildAuthHeaders(params) {
 	return headers;
 }
 function buildExecutionPolicy(policy, limits) {
-	return {
+	const base = {
 		allowedTools: policy?.allowedTools ?? [],
 		disallowedTools: policy?.disallowedTools,
 		allowedSkills: policy?.allowedSkills ?? [],
@@ -4309,6 +4486,7 @@ function buildExecutionPolicy(policy, limits) {
 		maxBudgetUsd: limits.maxBudgetUsd ?? policy?.maxBudgetUsd,
 		turnPolicy: policy?.turnPolicy
 	};
+	return limits.allowSignalNoReplyTool ? base : appendDisallowedTool(base, SIGNAL_NO_REPLY_TOOL);
 }
 function buildUserContext(identity) {
 	if (!identity?.userId && !identity?.openId) return void 0;
@@ -5492,6 +5670,7 @@ async function runFastDecision(params) {
 		model: params.model,
 		transcriptMode: "ephemeral",
 		maxTurns: 1,
+		allowSignalNoReplyTool: true,
 		policy: {
 			disallowedTools: [{ tool: "ask_user" }, { tool: "request_permission" }],
 			maxTurns: 1,