@skillfm/local 2.6.3 → 2.7.0

package/README.md

@@ -1,6 +1,55 @@
 # @skillfm/local
 
-Tiny localhost sidecar that lets any AI agent activate and use [SkillFM](https://skillfm.ai) **in the current conversation**, without restarting its MCP runtime.
+Single npm package for the SkillFM platform on user nodes. As of `2.7.0` it
+exposes **two top-level usages** via subcommand routing — pick the one that
+matches your goal:
+
+## Two usages
+
+### 1. Beacon MCP — your AI agent's cost optimizer (灯塔)
+
+A stdio MCP server that any agent harness (Cursor / Claude Code / OpenClaw /
+Cherry Studio) can plug into. Tracks API spend, suggests cheaper routes,
+flags expiring assets, surfaces monthly Pro picks. **BYOK** — only reads
+`SKILLFM_AGENT_TOKEN`; never touches your LLM API keys, cookies, or vault.
+
+```bash
+# Run the MCP server directly (the agent harness spawns this for you):
+npx -y @skillfm/local mcp
+```
+
+Cursor / Claude Code config (`mcp.servers`):
+
+```json
+{
+  "skillfm-beacon": {
+    "command": "npx",
+    "args": ["-y", "@skillfm/local", "mcp"],
+    "env": { "SKILLFM_AGENT_TOKEN": "sk_…" }
+  }
+}
+```
+
+This subsystem was originally `@skillfm/beacon-mcp`; merged into
+`@skillfm/local` 2.7.0 on 2026-05-01.
+
+### 2. Skill runtime — your AI's apprenticeship station (灶台学徒)
+
+The original `@skillfm/local` purpose: a tiny localhost sidecar that lets any
+AI agent activate and use [SkillFM](https://skillfm.ai) **in the current
+conversation**, without restarting its MCP runtime.
+
+```bash
+# Run a SkillFM skill bundle (auto-starts the sidecar):
+npx -y @skillfm/local skill <slug>
+
+# Or boot the sidecar directly + use the HTTP API:
+npx -y @skillfm/local start
+```
+
+---
+
+## Sidecar — the long-lived flavor
 
 ## Why this exists
 

package/dist/_signers/aliyun-v3.d.ts

@@ -0,0 +1,21 @@
+export interface AliyunV3SignInput {
+    method: string;
+    host: string;
+    path: string;
+    query: Record<string, string | number | boolean | undefined>;
+    headers: Record<string, string>;
+    payload: string;
+    ak_id: string;
+    ak_secret: string;
+    /** 自动注入 x-acs-signature-nonce / x-acs-action / x-acs-version 等 RPC 头(可选) */
+    rpc?: {
+        action: string;
+        version: string;
+    };
+}
+export interface AliyunV3SignResult {
+    authorization: string;
+    signed_headers_with_signature: Record<string, string>;
+}
+export declare function signAliyunV3(input: AliyunV3SignInput): AliyunV3SignResult;
+//# sourceMappingURL=aliyun-v3.d.ts.map

package/dist/_signers/aliyun-v3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliyun-v3.d.ts","sourceRoot":"","sources":["../../src/_signers/aliyun-v3.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,GAAG,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvD;AAUD,wBAAgB,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,kBAAkB,CAiCzE"}

package/dist/_signers/aliyun-v3.js

@@ -0,0 +1,47 @@
+// sdk/skillfm-local/src/_signers/aliyun-v3.ts
+//
+// 阿里云 V3 签名 (ACS3-HMAC-SHA256, RPC 风格)
+// Doc: https://help.aliyun.com/document_detail/315526.html
+//
+// StringToSign = ACS3-HMAC-SHA256\n<hex(SHA256(canonical_request))>
+// signature = hex(HMAC(<sk>, StringToSign))
+// Authorization: ACS3-HMAC-SHA256 Credential=<ak>,SignedHeaders=<...>,Signature=<...>
+import { hmacSha256, sha256Hex, buildCanonicalRequest } from './canonical.js';
+const ALGORITHM = 'ACS3-HMAC-SHA256';
+function randomNonce() {
+    const bytes = new Uint8Array(16);
+    for (let i = 0; i < 16; i++)
+        bytes[i] = Math.floor(Math.random() * 256);
+    return Buffer.from(bytes).toString('hex');
+}
+export function signAliyunV3(input) {
+    const date = new Date();
+    // 阿里云 V3 用 RFC 3339 (e.g. "2026-05-01T12:00:00Z")
+    const iso = date.toISOString().replace(/\.\d{3}Z$/, 'Z');
+    const headers = {
+        ...input.headers,
+        host: input.host,
+        'x-acs-date': iso,
+        'x-acs-content-sha256': sha256Hex(input.payload),
+        'x-acs-signature-nonce': randomNonce(),
+    };
+    if (input.rpc) {
+        headers['x-acs-action'] = input.rpc.action;
+        headers['x-acs-version'] = input.rpc.version;
+    }
+    const cr = buildCanonicalRequest({
+        method: input.method,
+        uri: input.path,
+        query: input.query,
+        headers,
+        payload: input.payload,
+    });
+    const string_to_sign = `${ALGORITHM}\n${sha256Hex(cr.request)}`;
+    const signature = hmacSha256(input.ak_secret, string_to_sign).toString('hex');
+    const authorization = `${ALGORITHM} Credential=${input.ak_id},SignedHeaders=${cr.signed_headers},Signature=${signature}`;
+    return {
+        authorization,
+        signed_headers_with_signature: { ...headers, authorization },
+    };
+}
+//# sourceMappingURL=aliyun-v3.js.map

package/dist/_signers/aliyun-v3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliyun-v3.js","sourceRoot":"","sources":["../../src/_signers/aliyun-v3.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,uCAAuC;AACvC,2DAA2D;AAC3D,EAAE;AACF,oEAAoE;AACpE,4CAA4C;AAC5C,sFAAsF;AAEtF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAoB9E,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAwB;IACnD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IACxB,kDAAkD;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAEzD,MAAM,OAAO,GAA2B;QACtC,GAAG,KAAK,CAAC,OAAO;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,GAAG;QACjB,sBAAsB,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;QAChD,uBAAuB,EAAE,WAAW,EAAE;KACvC,CAAC;IACF,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3C,OAAO,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;IAC/C,CAAC;IAED,MAAM,EAAE,GAAG,qBAAqB,CAAC;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,GAAG,SAAS,KAAK,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,GAAG,SAAS,eAAe,KAAK,CAAC,KAAK,kBAAkB,EAAE,CAAC,cAAc,cAAc,SAAS,EAAE,CAAC;IAEzH,OAAO;QACL,aAAa;QACb,6BAA6B,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE;KAC7D,CAAC;AACJ,CAAC"}

package/dist/_signers/canonical.d.ts

@@ -0,0 +1,29 @@
+export declare function sha256Hex(input: string | Buffer): string;
+export declare function hmacSha256(key: Buffer | string, data: string): Buffer;
+/** 按 RFC 3986 encode, 比 encodeURIComponent 更严格 */
+export declare function rfc3986Encode(s: string): string;
+/** Canonical query string: 字典序 sort + RFC 3986 encode */
+export declare function canonicalizeQuery(params: Record<string, string | number | boolean | undefined>): string;
+/** Canonical headers (lowercase + trim + sort) */
+export declare function canonicalizeHeaders(headers: Record<string, string>): {
+    canonical: string;
+    signed: string;
+};
+export interface CanonicalRequestInput {
+    method: string;
+    uri: string;
+    query: Record<string, string | number | boolean | undefined>;
+    headers: Record<string, string>;
+    payload: string;
+}
+export interface CanonicalRequest {
+    request: string;
+    signed_headers: string;
+    payload_hash: string;
+}
+export declare function buildCanonicalRequest(input: CanonicalRequestInput): CanonicalRequest;
+/** ISO 8601 时间, 阿里云/火山要的格式 (e.g. "20260501T120000Z") */
+export declare function basicIso8601(date?: Date): string;
+/** YYYYMMDD (用于 credential scope) */
+export declare function dateYYYYMMDD(date?: Date): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/_signers/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/_signers/canonical.ts"],"names":[],"mappings":"AAWA,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAExD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAErE;AAED,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED,yDAAyD;AACzD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,GAAG,MAAM,CAMvG;AAED,kDAAkD;AAClD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAOA;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,qBAAqB,GAAG,gBAAgB,CAapF;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,IAAI,GAAE,IAAiB,GAAG,MAAM,CAE5D;AAED,qCAAqC;AACrC,wBAAgB,YAAY,CAAC,IAAI,GAAE,IAAiB,GAAG,MAAM,CAE5D"}

package/dist/_signers/canonical.js

@@ -0,0 +1,59 @@
+// sdk/skillfm-local/src/_signers/canonical.ts
+//
+// AWS SigV4-style canonical request 共用原语 (Day 4 B1)
+// 阿里云 / 腾讯云 / 火山引擎 V3+V4 签名都基于这个 pattern, 仅 algorithm name + 派生 key 不同
+// 文档:
+//   - 阿里云: https://help.aliyun.com/document_detail/315526.html
+//   - 腾讯云: https://cloud.tencent.com/document/api/213/30654
+//   - 火山引擎: https://www.volcengine.com/docs/6369/67269
+import { createHash, createHmac } from 'node:crypto';
+export function sha256Hex(input) {
+    return createHash('sha256').update(input).digest('hex');
+}
+export function hmacSha256(key, data) {
+    return createHmac('sha256', key).update(data, 'utf8').digest();
+}
+/** 按 RFC 3986 encode, 比 encodeURIComponent 更严格 */
+export function rfc3986Encode(s) {
+    return encodeURIComponent(s).replace(/[!'()*]/g, (c) => '%' + c.charCodeAt(0).toString(16).toUpperCase());
+}
+/** Canonical query string: 字典序 sort + RFC 3986 encode */
+export function canonicalizeQuery(params) {
+    const entries = Object.entries(params)
+        .filter(([, v]) => v !== undefined && v !== null && v !== '')
+        .map(([k, v]) => [k, String(v)])
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return entries.map(([k, v]) => `${rfc3986Encode(k)}=${rfc3986Encode(v)}`).join('&');
+}
+/** Canonical headers (lowercase + trim + sort) */
+export function canonicalizeHeaders(headers) {
+    const sorted = Object.entries(headers)
+        .map(([k, v]) => [k.toLowerCase().trim(), String(v).trim().replace(/\s+/g, ' ')])
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    const canonical = sorted.map(([k, v]) => `${k}:${v}`).join('\n') + '\n';
+    const signed = sorted.map(([k]) => k).join(';');
+    return { canonical, signed };
+}
+export function buildCanonicalRequest(input) {
+    const canonical_query = canonicalizeQuery(input.query);
+    const { canonical, signed } = canonicalizeHeaders(input.headers);
+    const payload_hash = sha256Hex(input.payload);
+    const request = [
+        input.method.toUpperCase(),
+        input.uri || '/',
+        canonical_query,
+        canonical,
+        signed,
+        payload_hash,
+    ].join('\n');
+    return { request, signed_headers: signed, payload_hash };
+}
+/** ISO 8601 时间, 阿里云/火山要的格式 (e.g. "20260501T120000Z") */
+export function basicIso8601(date = new Date()) {
+    return date.toISOString().replace(/[-:]/g, '').replace(/\.\d{3}/, '');
+}
+/** YYYYMMDD (用于 credential scope) */
+export function dateYYYYMMDD(date = new Date()) {
+    return date.toISOString().slice(0, 10).replace(/-/g, '');
+}
+//# sourceMappingURL=canonical.js.map

package/dist/_signers/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/_signers/canonical.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,oDAAoD;AACpD,uEAAuE;AACvE,MAAM;AACN,+DAA+D;AAC/D,4DAA4D;AAC5D,uDAAuD;AAEvD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,UAAU,SAAS,CAAC,KAAsB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAoB,EAAE,IAAY;IAC3D,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAClC,UAAU,EACV,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CACxD,CAAC;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,iBAAiB,CAAC,MAA6D;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;SAC5D,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAqB,CAAC;SACnD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,mBAAmB,CAAC,OAA+B;IAIjE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAqB,CAAC;SACpG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAgBD,MAAM,UAAU,qBAAqB,CAAC,KAA4B;IAChE,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG;QACd,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;QAC1B,KAAK,CAAC,GAAG,IAAI,GAAG;QAChB,eAAe;QACf,SAAS;QACT,MAAM;QACN,YAAY;KACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC3D,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,YAAY,CAAC,OAAa,IAAI,IAAI,EAAE;IAClD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,YAAY,CAAC,OAAa,IAAI,IAAI,EAAE;IAClD,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC"}

package/dist/_signers/index.d.ts

@@ -0,0 +1,9 @@
+export { sha256Hex, hmacSha256, rfc3986Encode, canonicalizeQuery, canonicalizeHeaders, buildCanonicalRequest, basicIso8601, dateYYYYMMDD, } from './canonical.js';
+export type { CanonicalRequestInput, CanonicalRequest } from './canonical.js';
+export { signAliyunV3 } from './aliyun-v3.js';
+export type { AliyunV3SignInput, AliyunV3SignResult } from './aliyun-v3.js';
+export { signTencentTC3 } from './tencent-tc3.js';
+export type { TencentTC3SignInput, TencentTC3SignResult } from './tencent-tc3.js';
+export { signVolcV4 } from './volc-v4.js';
+export type { VolcV4SignInput, VolcV4SignResult } from './volc-v4.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/_signers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/_signers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,SAAS,EACT,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAElF,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/_signers/index.js

@@ -0,0 +1,6 @@
+// sdk/skillfm-local/src/_signers/index.ts
+export { sha256Hex, hmacSha256, rfc3986Encode, canonicalizeQuery, canonicalizeHeaders, buildCanonicalRequest, basicIso8601, dateYYYYMMDD, } from './canonical.js';
+export { signAliyunV3 } from './aliyun-v3.js';
+export { signTencentTC3 } from './tencent-tc3.js';
+export { signVolcV4 } from './volc-v4.js';
+//# sourceMappingURL=index.js.map

package/dist/_signers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/_signers/index.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAE1C,OAAO,EACL,SAAS,EACT,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,EACZ,YAAY,GACb,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGlD,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC"}

package/dist/_signers/tencent-tc3.d.ts

@@ -0,0 +1,21 @@
+export interface TencentTC3SignInput {
+    method: string;
+    host: string;
+    path: string;
+    query: Record<string, string | number | boolean | undefined>;
+    headers: Record<string, string>;
+    payload: string;
+    ak_id: string;
+    ak_secret: string;
+    service: string;
+    region?: string;
+    action: string;
+    version: string;
+}
+export interface TencentTC3SignResult {
+    authorization: string;
+    signed_headers_with_signature: Record<string, string>;
+    timestamp: number;
+}
+export declare function signTencentTC3(input: TencentTC3SignInput): TencentTC3SignResult;
+//# sourceMappingURL=tencent-tc3.d.ts.map

package/dist/_signers/tencent-tc3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tencent-tc3.d.ts","sourceRoot":"","sources":["../../src/_signers/tencent-tc3.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtD,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,oBAAoB,CAuC/E"}

package/dist/_signers/tencent-tc3.js

@@ -0,0 +1,48 @@
+// sdk/skillfm-local/src/_signers/tencent-tc3.ts
+//
+// 腾讯云 TC3-HMAC-SHA256 签名 (类 AWS SigV4)
+// Doc: https://cloud.tencent.com/document/api/213/30654
+//
+// StringToSign = TC3-HMAC-SHA256\n<timestamp>\n<credential_scope>\n<hex(SHA256(canonical_request))>
+// signing_key = HMAC(HMAC(HMAC("TC3" + sk, date), service), "tc3_request")
+// signature = hex(HMAC(signing_key, StringToSign))
+// Authorization: TC3-HMAC-SHA256 Credential=<sid>/<scope>, SignedHeaders=<list>, Signature=<sig>
+import { hmacSha256, sha256Hex, buildCanonicalRequest, dateYYYYMMDD } from './canonical.js';
+const ALGORITHM = 'TC3-HMAC-SHA256';
+const REQUEST_SUFFIX = 'tc3_request';
+export function signTencentTC3(input) {
+    const now = new Date();
+    const timestamp = Math.floor(now.getTime() / 1000);
+    const date_str = dateYYYYMMDD(now);
+    const headers = {
+        ...input.headers,
+        'content-type': input.headers['content-type'] ?? 'application/json',
+        host: input.host,
+        'x-tc-action': input.action,
+        'x-tc-timestamp': String(timestamp),
+        'x-tc-version': input.version,
+    };
+    if (input.region)
+        headers['x-tc-region'] = input.region;
+    const cr = buildCanonicalRequest({
+        method: input.method,
+        uri: input.path,
+        query: input.query,
+        headers,
+        payload: input.payload,
+    });
+    const credential_scope = `${date_str}/${input.service}/${REQUEST_SUFFIX}`;
+    const string_to_sign = [ALGORITHM, String(timestamp), credential_scope, sha256Hex(cr.request)].join('\n');
+    // signing_key = HMAC(HMAC(HMAC("TC3" + sk, date), service), "tc3_request")
+    const k_date = hmacSha256(`TC3${input.ak_secret}`, date_str);
+    const k_service = hmacSha256(k_date, input.service);
+    const k_signing = hmacSha256(k_service, REQUEST_SUFFIX);
+    const signature = hmacSha256(k_signing, string_to_sign).toString('hex');
+    const authorization = `${ALGORITHM} Credential=${input.ak_id}/${credential_scope}, SignedHeaders=${cr.signed_headers}, Signature=${signature}`;
+    return {
+        authorization,
+        signed_headers_with_signature: { ...headers, authorization },
+        timestamp,
+    };
+}
+//# sourceMappingURL=tencent-tc3.js.map

package/dist/_signers/tencent-tc3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tencent-tc3.js","sourceRoot":"","sources":["../../src/_signers/tencent-tc3.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,uCAAuC;AACvC,wDAAwD;AACxD,EAAE;AACF,oGAAoG;AACpG,2EAA2E;AAC3E,mDAAmD;AACnD,iGAAiG;AAEjG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAuB5F,MAAM,SAAS,GAAG,iBAAiB,CAAC;AACpC,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC,MAAM,UAAU,cAAc,CAAC,KAA0B;IACvD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,OAAO,GAA2B;QACtC,GAAG,KAAK,CAAC,OAAO;QAChB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,kBAAkB;QACnE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,aAAa,EAAE,KAAK,CAAC,MAAM;QAC3B,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC;QACnC,cAAc,EAAE,KAAK,CAAC,OAAO;KAC9B,CAAC;IACF,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAExD,MAAM,EAAE,GAAG,qBAAqB,CAAC;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IAC1E,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE1G,2EAA2E;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAExD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,GAAG,SAAS,eAAe,KAAK,CAAC,KAAK,IAAI,gBAAgB,mBAAmB,EAAE,CAAC,cAAc,eAAe,SAAS,EAAE,CAAC;IAE/I,OAAO;QACL,aAAa;QACb,6BAA6B,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE;QAC5D,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/_signers/volc-v4.d.ts

@@ -0,0 +1,18 @@
+export interface VolcV4SignInput {
+    method: string;
+    host: string;
+    path: string;
+    query: Record<string, string | number | boolean | undefined>;
+    headers: Record<string, string>;
+    payload: string;
+    ak_id: string;
+    ak_secret: string;
+    service: string;
+    region: string;
+}
+export interface VolcV4SignResult {
+    authorization: string;
+    signed_headers_with_signature: Record<string, string>;
+}
+export declare function signVolcV4(input: VolcV4SignInput): VolcV4SignResult;
+//# sourceMappingURL=volc-v4.d.ts.map

package/dist/_signers/volc-v4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"volc-v4.d.ts","sourceRoot":"","sources":["../../src/_signers/volc-v4.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvD;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,gBAAgB,CAoCnE"}

package/dist/_signers/volc-v4.js

@@ -0,0 +1,43 @@
+// sdk/skillfm-local/src/_signers/volc-v4.ts
+//
+// 火山引擎 V4 签名 (HMAC-SHA256, AWS SigV4 风格)
+// Doc: https://www.volcengine.com/docs/6369/67269
+//
+// StringToSign = HMAC-SHA256\n<timestamp>\n<credential_scope>\n<hex(SHA256(canonical_request))>
+// signing_key = HMAC(HMAC(HMAC(HMAC(<sk>, date), region), service), "request")
+// Authorization: HMAC-SHA256 Credential=<ak>/<scope>, SignedHeaders=<list>, Signature=<sig>
+import { hmacSha256, sha256Hex, buildCanonicalRequest, basicIso8601, dateYYYYMMDD } from './canonical.js';
+const ALGORITHM = 'HMAC-SHA256';
+const REQUEST_SUFFIX = 'request';
+export function signVolcV4(input) {
+    const now = new Date();
+    const ts = basicIso8601(now); // "20260501T120000Z"
+    const date_str = dateYYYYMMDD(now);
+    const headers = {
+        ...input.headers,
+        'content-type': input.headers['content-type'] ?? 'application/json',
+        host: input.host,
+        'x-date': ts,
+        'x-content-sha256': sha256Hex(input.payload),
+    };
+    const cr = buildCanonicalRequest({
+        method: input.method,
+        uri: input.path,
+        query: input.query,
+        headers,
+        payload: input.payload,
+    });
+    const credential_scope = `${date_str}/${input.region}/${input.service}/${REQUEST_SUFFIX}`;
+    const string_to_sign = [ALGORITHM, ts, credential_scope, sha256Hex(cr.request)].join('\n');
+    const k_date = hmacSha256(input.ak_secret, date_str);
+    const k_region = hmacSha256(k_date, input.region);
+    const k_service = hmacSha256(k_region, input.service);
+    const k_signing = hmacSha256(k_service, REQUEST_SUFFIX);
+    const signature = hmacSha256(k_signing, string_to_sign).toString('hex');
+    const authorization = `${ALGORITHM} Credential=${input.ak_id}/${credential_scope}, SignedHeaders=${cr.signed_headers}, Signature=${signature}`;
+    return {
+        authorization,
+        signed_headers_with_signature: { ...headers, authorization },
+    };
+}
+//# sourceMappingURL=volc-v4.js.map

package/dist/_signers/volc-v4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"volc-v4.js","sourceRoot":"","sources":["../../src/_signers/volc-v4.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,yCAAyC;AACzC,kDAAkD;AAClD,EAAE;AACF,gGAAgG;AAChG,+EAA+E;AAC/E,4FAA4F;AAE5F,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAoB1G,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC,MAAM,UAAU,UAAU,CAAC,KAAsB;IAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB;IACnD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEnC,MAAM,OAAO,GAA2B;QACtC,GAAG,KAAK,CAAC,OAAO;QAChB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,kBAAkB;QACnE,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,EAAE;QACZ,kBAAkB,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;KAC7C,CAAC;IAEF,MAAM,EAAE,GAAG,qBAAqB,CAAC;QAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,EAAE,KAAK,CAAC,IAAI;QACf,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,GAAG,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IAC1F,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE3F,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAExD,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,GAAG,SAAS,eAAe,KAAK,CAAC,KAAK,IAAI,gBAAgB,mBAAmB,EAAE,CAAC,cAAc,eAAe,SAAS,EAAE,CAAC;IAE/I,OAAO;QACL,aAAa;QACb,6BAA6B,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE;KAC7D,CAAC;AACJ,CAAC"}

package/dist/asset-connectors/aliyun-ecs.d.ts

@@ -0,0 +1,18 @@
+import { AssetBaseConnector } from './base.js';
+import type { AssetExpiry, AssetProviderId, FetchAssetsOptions } from './types.js';
+export declare class AliyunECSConnector extends AssetBaseConnector {
+    id: AssetProviderId;
+    name: string;
+    is_real: boolean;
+    fetchAssets(byok_key: string, opts?: FetchAssetsOptions): Promise<AssetExpiry[]>;
+    ping(byok_key: string): Promise<{
+        ok: boolean;
+        key_fingerprint: string;
+        error?: undefined;
+    } | {
+        ok: boolean;
+        error: string;
+        key_fingerprint: string;
+    }>;
+}
+//# sourceMappingURL=aliyun-ecs.d.ts.map

package/dist/asset-connectors/aliyun-ecs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliyun-ecs.d.ts","sourceRoot":"","sources":["../../src/asset-connectors/aliyun-ecs.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA8BnF,qBAAa,kBAAmB,SAAQ,kBAAkB;IACxD,EAAE,EAAE,eAAe,CAAgB;IACnC,IAAI,SAAa;IACjB,OAAO,UAAQ;IAET,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAiDhF,IAAI,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;CAkC5B"}

package/dist/asset-connectors/aliyun-ecs.js

@@ -0,0 +1,99 @@
+// sdk/skillfm-local/src/asset-connectors/aliyun-ecs.ts
+//
+// 阿里云 ECS connector — Day 4 真实现 (V3 SignerV4)
+// Doc: https://help.aliyun.com/zh/ecs/developer-reference/api-ecs-2014-05-26-describeinstances
+// Auth: AccessKey ID + Secret + 阿里云 V3 SignerV4 (ACS3-HMAC-SHA256)
+//
+// byok_key 格式: "<ak_id>:<ak_secret>" (用户在 vault 存这个 colon-separated 串)
+import { AssetBaseConnector } from './base.js';
+import { sanitizeError } from '../connectors/types.js';
+import { signAliyunV3 } from '../_signers/index.js';
+const HOST = 'ecs.aliyuncs.com';
+const BASE_URL = `https://${HOST}`;
+function splitKey(byok_key) {
+    const idx = byok_key.indexOf(':');
+    if (idx <= 0 || idx === byok_key.length - 1) {
+        throw new Error('阿里云 byok_key 格式应为 "<ak_id>:<ak_secret>" (colon 分隔)');
+    }
+    return { ak_id: byok_key.slice(0, idx), ak_secret: byok_key.slice(idx + 1) };
+}
+export class AliyunECSConnector extends AssetBaseConnector {
+    id = 'aliyun_ecs';
+    name = '阿里云 ECS';
+    is_real = true;
+    async fetchAssets(byok_key, opts) {
+        let ak;
+        try {
+            ak = splitKey(byok_key);
+        }
+        catch (e) {
+            throw new Error(sanitizeError(e, byok_key));
+        }
+        const query = {
+            RegionId: 'cn-hangzhou', // 默认 region, Day 5+ 多 region 遍历
+            PageSize: String(opts?.limit ?? 50),
+            PageNumber: '1',
+        };
+        const signed = signAliyunV3({
+            method: 'POST',
+            host: HOST,
+            path: '/',
+            query,
+            headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            payload: '',
+            ak_id: ak.ak_id,
+            ak_secret: ak.ak_secret,
+            rpc: { action: 'DescribeInstances', version: '2014-05-26' },
+        });
+        const search = new URLSearchParams(query).toString();
+        const r = await this.safeFetch(`${BASE_URL}/?${search}`, { method: 'POST', headers: signed.signed_headers_with_signature, body: '' }, byok_key);
+        if (!r.ok) {
+            const text = await r.text().catch(() => '');
+            throw new Error(sanitizeError(`阿里云 ECS ${r.status}: ${text}`, byok_key));
+        }
+        const data = (await r.json());
+        return (data.Instances?.Instance ?? []).map((i) => ({
+            asset_type: 'vps',
+            identifier: i.InstanceId,
+            display_name: i.InstanceName || i.InstanceId,
+            expires_at: null,
+            days_left: null,
+            provider: this.id,
+            status: i.Status,
+            raw: { region: i.RegionId, instance_type: i.InstanceType, zone: i.ZoneId },
+        }));
+    }
+    async ping(byok_key) {
+        const fp = this.fingerprint(byok_key);
+        try {
+            // 拉 1 条 instance 验签 + 鉴权
+            const ak = splitKey(byok_key);
+            const query = { RegionId: 'cn-hangzhou', PageSize: '1', PageNumber: '1' };
+            const signed = signAliyunV3({
+                method: 'POST',
+                host: HOST,
+                path: '/',
+                query,
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+                payload: '',
+                ak_id: ak.ak_id,
+                ak_secret: ak.ak_secret,
+                rpc: { action: 'DescribeRegions', version: '2014-05-26' },
+            });
+            const search = new URLSearchParams(query).toString();
+            const r = await this.safeFetch(`${BASE_URL}/?${search}`, { method: 'POST', headers: signed.signed_headers_with_signature, body: '' }, byok_key);
+            if (r.ok)
+                return { ok: true, key_fingerprint: fp };
+            const text = await r.text().catch(() => '');
+            return {
+                ok: false,
+                error: `HTTP ${r.status}: ${sanitizeError(text, byok_key)}`,
+                key_fingerprint: fp,
+            };
+        }
+        catch (e) {
+            return { ok: false, error: sanitizeError(e, byok_key), key_fingerprint: fp };
+        }
+    }
+}
+//# sourceMappingURL=aliyun-ecs.js.map

package/dist/asset-connectors/aliyun-ecs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aliyun-ecs.js","sourceRoot":"","sources":["../../src/asset-connectors/aliyun-ecs.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,8CAA8C;AAC9C,+FAA+F;AAC/F,mEAAmE;AACnE,EAAE;AACF,uEAAuE;AAEvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,IAAI,GAAG,kBAAkB,CAAC;AAChC,MAAM,QAAQ,GAAG,WAAW,IAAI,EAAE,CAAC;AAiBnC,SAAS,QAAQ,CAAC,QAAgB;IAChC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,kBAAkB;IACxD,EAAE,GAAoB,YAAY,CAAC;IACnC,IAAI,GAAG,SAAS,CAAC;IACjB,OAAO,GAAG,IAAI,CAAC;IAEf,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAyB;QAC3D,IAAI,EAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,aAAa,EAAE,gCAAgC;YACzD,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YACnC,UAAU,EAAE,GAAG;SAChB,CAAC;QAEF,MAAM,MAAM,GAAG,YAAY,CAAC;YAC1B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,GAAG;YACT,KAAK;YACL,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,OAAO,EAAE,EAAE;YACX,KAAK,EAAE,EAAE,CAAC,KAAK;YACf,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,GAAG,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE;SAC5D,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAC5B,GAAG,QAAQ,KAAK,MAAM,EAAE,EACxB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,6BAA6B,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3E,QAAQ,CACT,CAAC;QACF,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAA8B,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,UAAU,EAAE,KAAc;YAC1B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU;YAC5C,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,EAAE;YACjB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;SAC3E,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAgB;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,yBAAyB;YACzB,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAG,YAAY,CAAC;gBAC1B,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI;gBACV,IAAI,EAAE,GAAG;gBACT,KAAK;gBACL,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,EAAE,CAAC,KAAK;gBACf,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,GAAG,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE;aAC1D,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAA+B,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC/E,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAC5B,GAAG,QAAQ,KAAK,MAAM,EAAE,EACxB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,6BAA6B,EAAE,IAAI,EAAE,EAAE,EAAE,EAC3E,QAAQ,CACT,CAAC;YACF,IAAI,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,QAAQ,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;gBAC3D,eAAe,EAAE,EAAE;aACpB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QAC/E,CAAC;IACH,CAAC;CACF"}

package/dist/asset-connectors/base.d.ts

@@ -0,0 +1,15 @@
+import type { AssetConnector, AssetExpiry, AssetProviderId, FetchAssetsOptions } from './types.js';
+export declare abstract class AssetBaseConnector implements AssetConnector {
+    abstract id: AssetProviderId;
+    abstract name: string;
+    abstract is_real: boolean;
+    protected safeFetch(url: string, init: RequestInit, byok_key: string): Promise<Response>;
+    protected fingerprint(key: string): string;
+    abstract fetchAssets(byok_key: string, opts?: FetchAssetsOptions): Promise<AssetExpiry[]>;
+    abstract ping(byok_key: string): Promise<{
+        ok: boolean;
+        error?: string;
+        key_fingerprint?: string;
+    }>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/asset-connectors/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/asset-connectors/base.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGnG,8BAAsB,kBAAmB,YAAW,cAAc;IAChE,QAAQ,CAAC,EAAE,EAAE,eAAe,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;cAEV,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAQ9F,SAAS,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM;IAI1C,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzF,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpG"}

package/dist/asset-connectors/base.js

@@ -0,0 +1,19 @@
+// sdk/skillfm-local/src/asset-connectors/base.ts
+//
+// AssetBaseConnector — 共用 fetch / 错误脱敏 / fingerprint
+// 复用 connectors/types.ts 的 maskKey + sanitizeError
+import { maskKey, sanitizeError } from '../connectors/types.js';
+export class AssetBaseConnector {
+    async safeFetch(url, init, byok_key) {
+        try {
+            return await fetch(url, init);
+        }
+        catch (e) {
+            throw new Error(sanitizeError(e, byok_key));
+        }
+    }
+    fingerprint(key) {
+        return maskKey(key);
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/asset-connectors/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/asset-connectors/base.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,EAAE;AACF,qDAAqD;AACrD,mDAAmD;AAGnD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAEhE,MAAM,OAAgB,kBAAkB;IAK5B,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,IAAiB,EAAE,QAAgB;QACxE,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAES,WAAW,CAAC,GAAW;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;CAIF"}

package/dist/asset-connectors/cloudflare.d.ts

@@ -0,0 +1,18 @@
+import { AssetBaseConnector } from './base.js';
+import type { AssetExpiry, AssetProviderId, FetchAssetsOptions } from './types.js';
+export declare class CloudflareConnector extends AssetBaseConnector {
+    id: AssetProviderId;
+    name: string;
+    is_real: boolean;
+    fetchAssets(byok_key: string, opts?: FetchAssetsOptions): Promise<AssetExpiry[]>;
+    ping(byok_key: string): Promise<{
+        ok: boolean;
+        key_fingerprint: string;
+        error?: undefined;
+    } | {
+        ok: boolean;
+        error: string;
+        key_fingerprint: string;
+    }>;
+}
+//# sourceMappingURL=cloudflare.d.ts.map

package/dist/asset-connectors/cloudflare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/asset-connectors/cloudflare.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAmCnF,qBAAa,mBAAoB,SAAQ,kBAAkB;IACzD,EAAE,EAAE,eAAe,CAAgB;IACnC,IAAI,SAAgB;IACpB,OAAO,UAAQ;IAET,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IA6EhF,IAAI,CAAC,QAAQ,EAAE,MAAM;;;;;;;;;CAe5B"}