@skillfm/local 2.2.0 → 2.5.0

package/dist/skill-tunnel/client.js

@@ -0,0 +1,260 @@
+// M2 SkillTunnelClient — WebSocket client + JSON-RPC dispatch
+//
+// 职责:
+//   - 连 brain (wss://api.skillfm.ai/v1/skill-tunnel) 带 TunnelHandshakeHeaders
+//   - 收 brain 发来的 skill.* JSON-RPC request → dispatch 到 LocalBridge → HTTP 回转 127.0.0.1
+//   - 主动发 tunnel.heartbeat / tunnel.skill_update（pending map 等 response）
+//   - 断线按 close code 决定是否重连；非致命走 ReconnectScheduler
+//
+// BYOK 纪律:
+//   - 全程 cookie / playwright profile 留本节点,client 只做"brain→本地 loopback"桥接
+//   - 凭证仅 agent_token / authSecret,存 ~/.skillfm/config.json（调用方 CLI 负责读）
+//
+// 反向契约:
+//   输入: LocalSkillRegistryEntry[] 来自 M1 readRegistry()
+//   输出: 对 brain 返回 JsonRpcSuccessResponse | JsonRpcErrorResponse
+//   上游缺数据: 若 localSkills 为空 → 仍 connect,brain 侧 handshake 校验时决定 accept/reject（我们不假设）
+//   下游假设我: handshake 头齐 9 个 + signature 正确
+import { randomUUID } from 'node:crypto';
+import { WebSocket } from 'ws';
+import { TUNNEL_CONSTANTS, TUNNEL_SUBPROTOCOL, TUNNEL_ERROR_CODES, } from '@skillfm/contracts/skill-tunnel';
+import { buildHandshakeHeaders, computeRpcMetaHmac } from './handshake.js';
+import { HeartbeatLoop } from './heartbeat.js';
+import { LocalBridge } from './local-bridge.js';
+import { ReconnectScheduler, isFatalCloseCode } from './reconnect.js';
+export class SkillTunnelClient {
+    opts;
+    bridge;
+    reconnect;
+    heartbeat;
+    ws = null;
+    status = 'disconnected';
+    lastConnectedAt = null;
+    stopped = false;
+    pending = new Map();
+    constructor(opts) {
+        this.opts = opts;
+        const endpointMap = new Map(opts.localSkills.map((s) => [s.slug, s.endpoint]));
+        this.bridge = new LocalBridge({
+            resolveEndpoint: (slug) => endpointMap.get(slug) ?? null,
+            skillAuthSecret: opts.authSecret,
+            fetch: opts.fetch,
+        });
+        this.reconnect = new ReconnectScheduler();
+        this.heartbeat = new HeartbeatLoop({
+            buildStatusSnapshot: () => this.buildHeartbeatStatus(),
+            sendHeartbeat: async (params) => {
+                await this.sendClientRequest('tunnel.heartbeat', params);
+            },
+            onTimeout: () => this.handleHeartbeatTimeout(),
+        });
+    }
+    async start() {
+        this.stopped = false;
+        await this.connectOnce();
+    }
+    async stop() {
+        this.stopped = true;
+        this.reconnect.stop();
+        this.heartbeat.stop();
+        for (const [, p] of this.pending) {
+            clearTimeout(p.timer);
+            p.reject(new Error('tunnel stopped'));
+        }
+        this.pending.clear();
+        if (this.ws && this.ws.readyState !== WebSocket.CLOSED) {
+            try {
+                this.ws.close(1000, 'graceful');
+            }
+            catch {
+                // ignore
+            }
+        }
+        this.setStatus('disconnected');
+    }
+    status$() {
+        return {
+            connected: this.status === 'connected',
+            lastConnectedAt: this.lastConnectedAt,
+            reconnectAttempts: this.reconnect.attempts,
+        };
+    }
+    /** 主动上报 skill lifecycle 事件 */
+    async sendSkillUpdate(params) {
+        await this.sendClientRequest('tunnel.skill_update', params);
+    }
+    // ==========================================================================
+    // 内部: 连接 / 事件
+    // ==========================================================================
+    async connectOnce() {
+        if (this.stopped)
+            return;
+        this.setStatus('connecting');
+        const { headers } = buildHandshakeHeaders({
+            agentToken: this.opts.agentToken,
+            authSecret: this.opts.authSecret,
+            localSkills: this.opts.localSkills,
+            skillfmLocalVersion: this.opts.skillfmLocalVersion,
+        });
+        const Ctor = this.opts.webSocketCtor ?? WebSocket;
+        // ws 的 headers 类型是 OutgoingHttpHeaders (index signature)；TunnelHandshakeHeaders 是
+        // 强类型 9 字段对象，需要 cast 到宽类型才能传给 ws 构造器。
+        const ws = new Ctor(this.opts.brainUrl, [TUNNEL_SUBPROTOCOL], {
+            headers: headers,
+        });
+        this.ws = ws;
+        ws.on('open', () => this.onOpen());
+        ws.on('message', (raw) => this.onMessage(raw));
+        ws.on('error', (err) => this.onError(err));
+        ws.on('close', (code, reason) => this.onClose(code, reason));
+    }
+    onOpen() {
+        this.lastConnectedAt = Date.now();
+        this.reconnect.reset();
+        this.heartbeat.start();
+        this.setStatus('connected');
+    }
+    onError(err) {
+        // ws 的 'error' 事件在 close 前先触发,真正的重连判断放 close 里
+        console.error('[skill-tunnel] ws error:', err.message);
+    }
+    onClose(code, reason) {
+        this.heartbeat.stop();
+        for (const [, p] of this.pending) {
+            clearTimeout(p.timer);
+            p.reject(new Error(`ws closed (code=${code})`));
+        }
+        this.pending.clear();
+        this.setStatus('disconnected');
+        if (this.stopped)
+            return;
+        if (isFatalCloseCode(code)) {
+            console.error(`[skill-tunnel] fatal close code ${code}: ${reason.toString('utf-8')} — no reconnect`);
+            return;
+        }
+        this.reconnect.schedule(() => {
+            void this.connectOnce();
+        });
+    }
+    onMessage(raw) {
+        let frame;
+        try {
+            frame = JSON.parse(raw.toString());
+        }
+        catch {
+            console.error('[skill-tunnel] non-JSON frame dropped');
+            return;
+        }
+        // Response (brain 回我们主动发出的 heartbeat 等)
+        if ('result' in frame || 'error' in frame) {
+            this.handleResponse(frame);
+            return;
+        }
+        // Request (brain → agent, skill.*)
+        if ('method' in frame && 'id' in frame) {
+            void this.handleServerRequest(frame);
+        }
+    }
+    async handleServerRequest(req) {
+        const response = await this.bridge.dispatch(req.id, req.method, req.params);
+        this.sendFrame(response);
+    }
+    handleResponse(res) {
+        const p = this.pending.get(res.id);
+        if (!p) {
+            // heartbeat ack 可能没在 pending（fire-and-forget）,更新 ack 时间就好
+            if ('result' in res) {
+                this.heartbeat.onAck();
+            }
+            return;
+        }
+        this.pending.delete(res.id);
+        clearTimeout(p.timer);
+        if ('error' in res) {
+            p.reject(new Error(`rpc error ${res.error.code}: ${res.error.message}`));
+        }
+        else {
+            this.heartbeat.onAck();
+            p.resolve(res.result);
+        }
+    }
+    // ==========================================================================
+    // 内部: 发送
+    // ==========================================================================
+    sendFrame(frame) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN)
+            return;
+        try {
+            this.ws.send(JSON.stringify(frame));
+        }
+        catch (err) {
+            console.error('[skill-tunnel] send failed:', err.message);
+        }
+    }
+    async sendClientRequest(method, params) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            throw new Error('tunnel not connected');
+        }
+        const id = randomUUID();
+        const req = {
+            jsonrpc: '2.0',
+            id,
+            method,
+            params,
+            meta: {
+                hmac: computeRpcMetaHmac(id, method, params, this.opts.authSecret),
+            },
+        };
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                this.pending.delete(id);
+                reject(new Error(`rpc timeout ${method}`));
+            }, TUNNEL_CONSTANTS.RPC_REQUEST_TIMEOUT_MS);
+            if (typeof timer.unref === 'function') {
+                timer.unref();
+            }
+            this.pending.set(id, {
+                resolve: (v) => resolve(v),
+                reject,
+                timer,
+            });
+            this.sendFrame(req);
+        });
+    }
+    // ==========================================================================
+    // Heartbeat 工具
+    // ==========================================================================
+    buildHeartbeatStatus() {
+        const out = {};
+        const now = Date.now();
+        for (const s of this.opts.localSkills) {
+            out[s.slug] = {
+                pid: s.server_pid,
+                rss_mb: 0, // M1 registry 暂不存内存; 后续可通过 process.memoryUsage 读
+                healthy: true,
+                last_check_at: s.last_health_at ?? now,
+            };
+        }
+        return out;
+    }
+    handleHeartbeatTimeout() {
+        console.error('[skill-tunnel] heartbeat timeout — reconnecting');
+        if (this.ws && this.ws.readyState === WebSocket.OPEN) {
+            try {
+                this.ws.close(TUNNEL_CONSTANTS.HEARTBEAT_INTERVAL_MS, 'heartbeat timeout');
+            }
+            catch {
+                // ignore
+            }
+        }
+        // close 事件会触发 reconnect 调度
+    }
+    setStatus(s) {
+        if (this.status === s)
+            return;
+        this.status = s;
+        this.opts.onStatusChange?.(s);
+    }
+}
+export { TUNNEL_ERROR_CODES };
+//# sourceMappingURL=client.js.map

package/dist/skill-tunnel/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/skill-tunnel/client.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,EAAE;AACF,MAAM;AACN,8EAA8E;AAC9E,wFAAwF;AACxF,yEAAyE;AACzE,oDAAoD;AACpD,EAAE;AACF,WAAW;AACX,yEAAyE;AACzE,yEAAyE;AACzE,EAAE;AACF,QAAQ;AACR,uDAAuD;AACvD,iEAAiE;AACjE,qFAAqF;AACrF,2CAA2C;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAgB,MAAM,IAAI,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,iCAAiC,CAAC;AAazC,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AA0BtE,MAAM,OAAO,iBAAiB;IACX,IAAI,CAA2B;IAC/B,MAAM,CAAc;IACpB,SAAS,CAAqB;IAC9B,SAAS,CAAgB;IAElC,EAAE,GAAqB,IAAI,CAAC;IAC5B,MAAM,GAAiB,cAAc,CAAC;IACtC,eAAe,GAAkB,IAAI,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC;IACP,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEzD,YAAY,IAA8B;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC;YAC5B,eAAe,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;YACxD,eAAe,EAAE,IAAI,CAAC,UAAU;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,IAAI,aAAa,CAAC;YACjC,mBAAmB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE;YACtD,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBAC9B,MAAM,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;YAC3D,CAAC;YACD,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAED,OAAO;QACL,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,MAAM,KAAK,WAAW;YACtC,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ;SAC3C,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,KAAK,CAAC,eAAe,CAAC,MAA+B;QACnD,MAAM,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,6EAA6E;IAC7E,cAAc;IACd,6EAA6E;IAErE,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAE7B,MAAM,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC;YACxC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;YAChC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB;SACnD,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,SAAS,CAAC;QAClD,kFAAkF;QAClF,sCAAsC;QACtC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE;YAC5D,OAAO,EAAE,OAA4C;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QAEb,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACnC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAClD,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/E,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC9B,CAAC;IAEO,OAAO,CAAC,GAAU;QACxB,+CAA+C;QAC/C,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAEO,OAAO,CAAC,IAAY,EAAE,MAAc;QAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,IAAI,GAAG,CAAC,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAE/B,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CACX,mCAAmC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CACtF,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC3B,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,SAAS,CAAC,GAAY;QAC5B,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAiB,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,wCAAwC;QACxC,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;YAC1C,IAAI,CAAC,cAAc,CAAC,KAAwB,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,IAAI,QAAQ,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YACvC,KAAK,IAAI,CAAC,mBAAmB,CAAC,KAAuB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,GAAmB;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAEO,cAAc,CAAC,GAAoB;QACzC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,0DAA0D;YAC1D,IAAI,QAAQ,IAAI,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACzB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5B,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,SAAS;IACT,6EAA6E;IAErE,SAAS,CAAC,KAAmB;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI;YAAE,OAAO;QAC9D,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,MAA+B,EAC/B,MAAe;QAEf,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAmB;YAC1B,OAAO,EAAE,KAAK;YACd,EAAE;YACF,MAAM;YACN,MAAM;YACN,IAAI,EAAE;gBACJ,IAAI,EAAE,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;aACnE;SACF,CAAC;QACF,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC,EAAE,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;YAC5C,IAAI,OAAQ,KAA2C,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC5E,KAA0C,CAAC,KAAK,EAAE,CAAC;YACtD,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAM,CAAC;gBAC/B,MAAM;gBACN,KAAK;aACN,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,eAAe;IACf,6EAA6E;IAErE,oBAAoB;QAC1B,MAAM,GAAG,GAAgD,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG;gBACZ,GAAG,EAAE,CAAC,CAAC,UAAU;gBACjB,MAAM,EAAE,CAAC,EAAE,iDAAiD;gBAC5D,OAAO,EAAE,IAAI;gBACb,aAAa,EAAE,CAAC,CAAC,cAAc,IAAI,GAAG;aACvC,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,sBAAsB;QAC5B,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACrD,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,2BAA2B;IAC7B,CAAC;IAEO,SAAS,CAAC,CAAe;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;CACF;AAID,OAAO,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/skill-tunnel/handshake.d.ts

@@ -0,0 +1,35 @@
+import type { TunnelHandshakeHeaders } from '@skillfm/contracts/skill-tunnel';
+import type { LocalSkillRegistryEntry } from '../skill-runner/types.js';
+export interface BuildHandshakeInput {
+    agentToken: string;
+    /** SKILLFM_SKILL_AUTH_SECRET — HMAC 共享密钥 */
+    authSecret: string;
+    /** 本地已跑的 skill daemon 列表（来自 M1 readRegistry）*/
+    localSkills: LocalSkillRegistryEntry[];
+    /** @skillfm/local 运行时版本 */
+    skillfmLocalVersion: string;
+}
+export interface HandshakeArtifact {
+    headers: TunnelHandshakeHeaders;
+    /** 本次 nonce（保留供上层重放检测/调试；正式请求不传）*/
+    nonce: string;
+}
+/** 生成 16-byte nonce hex（契约 §5.1 16 byte hex = 32 字符）*/
+export declare function generateNonce(): string;
+export declare function computeAgentId(agentToken: string): string;
+export declare function computeTunnelSignature(agentToken: string, nonce: string, authSecret: string): string;
+/** 组装 `slug@version,slug@version` */
+export declare function formatLocalSkills(skills: LocalSkillRegistryEntry[]): string;
+/** 组装 `slug=http://127.0.0.1:port,slug=http://127.0.0.1:port` */
+export declare function formatLocalSkillEndpoints(skills: LocalSkillRegistryEntry[]): string;
+/**
+ * 构造一次握手所需的全部 9 个头。
+ * 每次 connect / reconnect 必须调用一次（nonce 随机）。
+ */
+export declare function buildHandshakeHeaders(input: BuildHandshakeInput): HandshakeArtifact;
+/**
+ * JSON-RPC meta.hmac 签名: HMAC-SHA256(id || method || JSON.stringify(params), secret)
+ * DELTA §5.4
+ */
+export declare function computeRpcMetaHmac(id: string, method: string, params: unknown, authSecret: string): string;
+//# sourceMappingURL=handshake.d.ts.map

package/dist/skill-tunnel/handshake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../../src/skill-tunnel/handshake.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAExE,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,+CAA+C;IAC/C,WAAW,EAAE,uBAAuB,EAAE,CAAC;IACvC,2BAA2B;IAC3B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,sBAAsB,CAAC;IAChC,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;CACf;AAED,uDAAuD;AACvD,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,MAAM,CAIR;AAED,qCAAqC;AACrC,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,CAE3E;AAED,iEAAiE;AACjE,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,uBAAuB,EAAE,GAChC,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,mBAAmB,GACzB,iBAAiB,CAoBnB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,MAAM,GACjB,MAAM,CAGR"}

package/dist/skill-tunnel/handshake.js

@@ -0,0 +1,61 @@
+// M2 SkillTunnelClient — handshake 头构造 & 签名
+//
+// 对应契约: shared/contracts/envelope-v2/skill-tunnel.ts `TunnelHandshakeHeaders`
+// 9 个必填头:
+//   x-agent-token, x-agent-id, x-local-skills, x-local-skill-endpoints,
+//   x-tunnel-nonce, x-tunnel-signature, x-skillfm-local-version
+//
+// 签名算法 (DELTA §5.1):
+//   x-agent-id = SHA-256(agent_token) hex
+//   x-tunnel-signature = HMAC-SHA256(agent_token || nonce, SKILLFM_SKILL_AUTH_SECRET) hex
+//
+// 重放防护: 每次 connect (含 reconnect) 必须重新生成 nonce。
+import { createHash, createHmac, randomBytes } from 'node:crypto';
+/** 生成 16-byte nonce hex（契约 §5.1 16 byte hex = 32 字符）*/
+export function generateNonce() {
+    return randomBytes(16).toString('hex');
+}
+export function computeAgentId(agentToken) {
+    return createHash('sha256').update(agentToken).digest('hex');
+}
+export function computeTunnelSignature(agentToken, nonce, authSecret) {
+    return createHmac('sha256', authSecret)
+        .update(agentToken + nonce)
+        .digest('hex');
+}
+/** 组装 `slug@version,slug@version` */
+export function formatLocalSkills(skills) {
+    return skills.map((s) => `${s.slug}@${s.version}`).join(',');
+}
+/** 组装 `slug=http://127.0.0.1:port,slug=http://127.0.0.1:port` */
+export function formatLocalSkillEndpoints(skills) {
+    return skills.map((s) => `${s.slug}=${s.endpoint}`).join(',');
+}
+/**
+ * 构造一次握手所需的全部 9 个头。
+ * 每次 connect / reconnect 必须调用一次（nonce 随机）。
+ */
+export function buildHandshakeHeaders(input) {
+    const nonce = generateNonce();
+    const agentId = computeAgentId(input.agentToken);
+    const signature = computeTunnelSignature(input.agentToken, nonce, input.authSecret);
+    const headers = {
+        'x-agent-token': input.agentToken,
+        'x-agent-id': agentId,
+        'x-local-skills': formatLocalSkills(input.localSkills),
+        'x-local-skill-endpoints': formatLocalSkillEndpoints(input.localSkills),
+        'x-tunnel-nonce': nonce,
+        'x-tunnel-signature': signature,
+        'x-skillfm-local-version': input.skillfmLocalVersion,
+    };
+    return { headers, nonce };
+}
+/**
+ * JSON-RPC meta.hmac 签名: HMAC-SHA256(id || method || JSON.stringify(params), secret)
+ * DELTA §5.4
+ */
+export function computeRpcMetaHmac(id, method, params, authSecret) {
+    const payload = id + method + JSON.stringify(params ?? {});
+    return createHmac('sha256', authSecret).update(payload).digest('hex');
+}
+//# sourceMappingURL=handshake.js.map

package/dist/skill-tunnel/handshake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../../src/skill-tunnel/handshake.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,8EAA8E;AAC9E,UAAU;AACV,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,qBAAqB;AACrB,0CAA0C;AAC1C,0FAA0F;AAC1F,EAAE;AACF,+CAA+C;AAE/C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAoBlE,uDAAuD;AACvD,MAAM,UAAU,aAAa;IAC3B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,KAAa,EACb,UAAkB;IAElB,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC;SACpC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC;SAC1B,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,iBAAiB,CAAC,MAAiC;IACjE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,yBAAyB,CACvC,MAAiC;IAEjC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAA0B;IAE1B,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,sBAAsB,CACtC,KAAK,CAAC,UAAU,EAChB,KAAK,EACL,KAAK,CAAC,UAAU,CACjB,CAAC;IAEF,MAAM,OAAO,GAA2B;QACtC,eAAe,EAAE,KAAK,CAAC,UAAU;QACjC,YAAY,EAAE,OAAO;QACrB,gBAAgB,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;QACtD,yBAAyB,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;QACvE,gBAAgB,EAAE,KAAK;QACvB,oBAAoB,EAAE,SAAS;QAC/B,yBAAyB,EAAE,KAAK,CAAC,mBAAmB;KACrD,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAU,EACV,MAAc,EACd,MAAe,EACf,UAAkB;IAElB,MAAM,OAAO,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC3D,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC"}

package/dist/skill-tunnel/heartbeat.d.ts

@@ -0,0 +1,34 @@
+import type { HeartbeatTunnelParams } from '@skillfm/contracts/skill-tunnel';
+export interface HeartbeatOptions {
+    /** 构造每次 heartbeat 的 local_skill_status 快照 */
+    buildStatusSnapshot: () => HeartbeatTunnelParams['local_skill_status'];
+    /** 发 heartbeat request（由 client 负责 JSON-RPC 封装 + WS send）*/
+    sendHeartbeat: (params: HeartbeatTunnelParams) => Promise<void>;
+    /** 心跳超时回调（调用方通常触发重连）*/
+    onTimeout: () => void;
+    /** 可选: 测试时注入 clock */
+    nowMs?: () => number;
+    /** 可选: 覆盖 interval（默认 25s）*/
+    intervalMs?: number;
+    /** 可选: 覆盖 timeout（默认 60s）*/
+    timeoutMs?: number;
+}
+export declare class HeartbeatLoop {
+    private readonly opts;
+    private interval;
+    private timeoutTimer;
+    private lastAckAt;
+    private started;
+    constructor(opts: HeartbeatOptions);
+    start(): void;
+    stop(): void;
+    /** 收到 heartbeat ack (JSON-RPC success response) —— 上层 client 调用 */
+    onAck(): void;
+    /** 暴露给测试: 手动触发一次 tick */
+    tick(): Promise<void>;
+    /** 暴露给测试: 手动触发一次超时检查 */
+    checkTimeout(): void;
+    private scheduleTimeoutCheck;
+    get lastAck(): number;
+}
+//# sourceMappingURL=heartbeat.d.ts.map

package/dist/skill-tunnel/heartbeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../src/skill-tunnel/heartbeat.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAE7E,MAAM,WAAW,gBAAgB;IAC/B,6CAA6C;IAC7C,mBAAmB,EAAE,MAAM,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;IACvE,4DAA4D;IAC5D,aAAa,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,uBAAuB;IACvB,SAAS,EAAE,MAAM,IAAI,CAAC;IACtB,sBAAsB;IACtB,KAAK,CAAC,EAAE,MAAM,MAAM,CAAC;IACrB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAmB;IACxC,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,YAAY,CAA+B;IACnD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,OAAO,CAAS;gBAEZ,IAAI,EAAE,gBAAgB;IAKlC,KAAK,IAAI,IAAI;IAgBb,IAAI,IAAI,IAAI;IAYZ,mEAAmE;IACnE,KAAK,IAAI,IAAI;IAIb,yBAAyB;IACnB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAY3B,wBAAwB;IACxB,YAAY,IAAI,IAAI;IAQpB,OAAO,CAAC,oBAAoB;IAY5B,IAAI,OAAO,IAAI,MAAM,CAEpB;CACF"}

package/dist/skill-tunnel/heartbeat.js

@@ -0,0 +1,86 @@
+// M2 SkillTunnelClient — Heartbeat 调度
+//
+// 行为 (DELTA §5 + TUNNEL_CONSTANTS):
+//   - 每 HEARTBEAT_INTERVAL_MS (25s) 主动发 tunnel.heartbeat JSON-RPC request
+//   - 记录 lastHeartbeatAckAt
+//   - 若 (now - lastHeartbeatAckAt) > HEARTBEAT_TIMEOUT_MS (60s) → 触发 onTimeout 回调
+//   - local_skill_status 快照从外部注入（来自 registry + isAlive）
+import { TUNNEL_CONSTANTS } from '@skillfm/contracts/skill-tunnel';
+export class HeartbeatLoop {
+    opts;
+    interval = null;
+    timeoutTimer = null;
+    lastAckAt;
+    started = false;
+    constructor(opts) {
+        this.opts = opts;
+        this.lastAckAt = (opts.nowMs ?? Date.now)();
+    }
+    start() {
+        if (this.started)
+            return;
+        this.started = true;
+        this.lastAckAt = (this.opts.nowMs ?? Date.now)();
+        const intervalMs = this.opts.intervalMs ?? TUNNEL_CONSTANTS.HEARTBEAT_INTERVAL_MS;
+        // 立即触发一次（可选，这里延到 intervalMs 后，避免 connect 瞬间抢跑）
+        this.interval = setInterval(() => {
+            void this.tick();
+        }, intervalMs);
+        if (typeof this.interval.unref === 'function') {
+            this.interval.unref();
+        }
+        // 启动 timeout 巡检
+        this.scheduleTimeoutCheck();
+    }
+    stop() {
+        this.started = false;
+        if (this.interval) {
+            clearInterval(this.interval);
+            this.interval = null;
+        }
+        if (this.timeoutTimer) {
+            clearTimeout(this.timeoutTimer);
+            this.timeoutTimer = null;
+        }
+    }
+    /** 收到 heartbeat ack (JSON-RPC success response) —— 上层 client 调用 */
+    onAck() {
+        this.lastAckAt = (this.opts.nowMs ?? Date.now)();
+    }
+    /** 暴露给测试: 手动触发一次 tick */
+    async tick() {
+        try {
+            const now = (this.opts.nowMs ?? Date.now)();
+            await this.opts.sendHeartbeat({
+                ts: now,
+                local_skill_status: this.opts.buildStatusSnapshot(),
+            });
+        }
+        catch {
+            // 发送失败不打爆,让 timeout 检测兜底
+        }
+    }
+    /** 暴露给测试: 手动触发一次超时检查 */
+    checkTimeout() {
+        const now = (this.opts.nowMs ?? Date.now)();
+        const timeoutMs = this.opts.timeoutMs ?? TUNNEL_CONSTANTS.HEARTBEAT_TIMEOUT_MS;
+        if (now - this.lastAckAt > timeoutMs) {
+            this.opts.onTimeout();
+        }
+    }
+    scheduleTimeoutCheck() {
+        const timeoutMs = this.opts.timeoutMs ?? TUNNEL_CONSTANTS.HEARTBEAT_TIMEOUT_MS;
+        // 每 (timeoutMs / 4) 检查一次
+        const pollMs = Math.max(1_000, Math.floor(timeoutMs / 4));
+        this.timeoutTimer = setInterval(() => {
+            this.checkTimeout();
+        }, pollMs);
+        if (typeof this.timeoutTimer.unref === 'function') {
+            this.timeoutTimer.unref();
+        }
+    }
+    get lastAck() {
+        return this.lastAckAt;
+    }
+}
+//# sourceMappingURL=heartbeat.js.map

package/dist/skill-tunnel/heartbeat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.js","sourceRoot":"","sources":["../../src/skill-tunnel/heartbeat.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,oCAAoC;AACpC,0EAA0E;AAC1E,4BAA4B;AAC5B,kFAAkF;AAClF,wDAAwD;AAExD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAkBnE,MAAM,OAAO,aAAa;IACP,IAAI,CAAmB;IAChC,QAAQ,GAA0B,IAAI,CAAC;IACvC,YAAY,GAA0B,IAAI,CAAC;IAC3C,SAAS,CAAS;IAClB,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,IAAsB;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,gBAAgB,CAAC,qBAAqB,CAAC;QAClF,+CAA+C;QAC/C,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;YAC/B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,IAAI,OAAQ,IAAI,CAAC,QAA8C,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACpF,IAAI,CAAC,QAA6C,CAAC,KAAK,EAAE,CAAC;QAC9D,CAAC;QACD,gBAAgB;QAChB,IAAI,CAAC,oBAAoB,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI;QACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK;QACH,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC5B,EAAE,EAAE,GAAG;gBACP,kBAAkB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;aACpD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,YAAY;QACV,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,oBAAoB,CAAC;QAC/E,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,oBAAoB;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,oBAAoB,CAAC;QAC/E,yBAAyB;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,IAAI,OAAQ,IAAI,CAAC,YAAkD,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACxF,IAAI,CAAC,YAAiD,CAAC,KAAK,EAAE,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;CACF"}

package/dist/skill-tunnel/local-bridge.d.ts

@@ -0,0 +1,30 @@
+import type { JsonRpcErrorResponse, JsonRpcSuccessResponse } from '@skillfm/contracts/skill-tunnel';
+export interface LocalBridgeDeps {
+    /** 通过 slug 查本地 endpoint */
+    resolveEndpoint: (slug: string) => string | null;
+    /** 与本地 skill daemon 共享的 HMAC secret（§3 auth）。
+     *  若给定,则在发往 127.0.0.1 的 HTTP 请求上加 X-Skill-Auth header。*/
+    skillAuthSecret?: string;
+    /** 单次 HTTP 请求超时（ms），默认 30s */
+    fetchTimeoutMs?: number;
+    /** 可注入,方便测试（默认 globalThis.fetch）*/
+    fetch?: typeof fetch;
+}
+export declare class LocalBridge {
+    private readonly deps;
+    constructor(deps: LocalBridgeDeps);
+    /**
+     * 把 server→agent 的 JSON-RPC request 转发到本地 skill daemon。
+     * 返回 JsonRpcSuccessResponse 或 JsonRpcErrorResponse(本地不可达等)。
+     * 异常不抛出,一律封装成 error response —— 上层 client 按 id 回传。
+     */
+    dispatch(id: string, method: string, params: unknown): Promise<JsonRpcSuccessResponse | JsonRpcErrorResponse>;
+    private isKnownServerMethod;
+    private handleSkillRun;
+    private handleToolInvoke;
+    private handleSkillPost;
+    private handleSkillGet;
+    private httpJson;
+    private errorResponse;
+}
+//# sourceMappingURL=local-bridge.d.ts.map

package/dist/skill-tunnel/local-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-bridge.d.ts","sourceRoot":"","sources":["../../src/skill-tunnel/local-bridge.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EAIvB,MAAM,iCAAiC,CAAC;AAIzC,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACjD;6DACyD;IACzD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mCAAmC;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkB;gBAE3B,IAAI,EAAE,eAAe;IAIjC;;;;OAIG;IACG,QAAQ,CACZ,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,sBAAsB,GAAG,oBAAoB,CAAC;IAyDzD,OAAO,CAAC,mBAAmB;YAYb,cAAc;YAkBd,gBAAgB;YA2BhB,eAAe;YAmBf,cAAc;YAmBd,QAAQ;IAsEtB,OAAO,CAAC,aAAa;CAYtB"}