@skillfm/local 2.6.4 → 2.7.0

package/dist/scheduler/poll.js

@@ -0,0 +1,170 @@
+// sdk/skillfm-local/src/scheduler/poll.ts
+//
+// 单次轮询逻辑 — 按 connector 类型遍历, 失败隔离
+import { listRealConnectors } from '../connectors/index.js';
+import { listRealAssetConnectors } from '../asset-connectors/index.js';
+import { listRealSaasConnectors } from '../saas-connectors/index.js';
+const DEFAULT_TIMEOUT = 30000; // 30s
+function withTimeout(p, ms, tag) {
+    return Promise.race([
+        p,
+        new Promise((_, reject) => setTimeout(() => reject(new Error(`timeout ${tag} after ${ms}ms`)), ms)),
+    ]);
+}
+export async function pollOnce(vault, brain, cfg) {
+    const started = Date.now();
+    const t = cfg.per_connector_timeout_ms ?? DEFAULT_TIMEOUT;
+    const results = [];
+    const usage_records = [];
+    const asset_records = [];
+    // ─── LLM connectors ───
+    for (const c of listRealConnectors()) {
+        const t0 = Date.now();
+        try {
+            const key = await vault.get(c.id);
+            if (!key) {
+                results.push({
+                    provider: c.id,
+                    service: 'llm',
+                    ok: false,
+                    records_count: 0,
+                    error: 'no key in vault',
+                    duration_ms: Date.now() - t0,
+                });
+                continue;
+            }
+            const end_date = new Date();
+            const start_date = new Date(end_date.getTime() - 86400_000); // 近 24h
+            const recs = await withTimeout(c.fetchUsage(key, { start_date, end_date }), t, c.id);
+            usage_records.push(...recs);
+            results.push({
+                provider: c.id,
+                service: 'llm',
+                ok: true,
+                records_count: recs.length,
+                duration_ms: Date.now() - t0,
+            });
+        }
+        catch (e) {
+            results.push({
+                provider: c.id,
+                service: 'llm',
+                ok: false,
+                records_count: 0,
+                error: e instanceof Error ? e.message : String(e),
+                duration_ms: Date.now() - t0,
+            });
+        }
+    }
+    // ─── Asset connectors (域名/SSL/VPS) ───
+    if (cfg.poll_assets !== false) {
+        for (const c of listRealAssetConnectors()) {
+            const t0 = Date.now();
+            try {
+                // SSL Labs 用 byok_key 字段实际是逗号分隔域名列表
+                // vault 存 'ssl_labs_domains' = "example.com,api.example.com"
+                const key = await vault.get(c.id) ?? (c.id === 'ssl_labs' ? await vault.get('ssl_labs_domains') : null);
+                if (!key) {
+                    results.push({
+                        provider: c.id,
+                        service: 'asset',
+                        ok: false,
+                        records_count: 0,
+                        error: 'no key in vault',
+                        duration_ms: Date.now() - t0,
+                    });
+                    continue;
+                }
+                const recs = await withTimeout(c.fetchAssets(key, { limit: 50 }), t, c.id);
+                asset_records.push(...recs);
+                results.push({
+                    provider: c.id,
+                    service: 'asset',
+                    ok: true,
+                    records_count: recs.length,
+                    duration_ms: Date.now() - t0,
+                });
+            }
+            catch (e) {
+                results.push({
+                    provider: c.id,
+                    service: 'asset',
+                    ok: false,
+                    records_count: 0,
+                    error: e instanceof Error ? e.message : String(e),
+                    duration_ms: Date.now() - t0,
+                });
+            }
+        }
+    }
+    // ─── SaaS connectors ───
+    if (cfg.poll_saas !== false) {
+        for (const c of listRealSaasConnectors()) {
+            const t0 = Date.now();
+            try {
+                const key = await vault.get(c.id);
+                if (!key) {
+                    results.push({
+                        provider: c.id,
+                        service: 'saas',
+                        ok: false,
+                        records_count: 0,
+                        error: 'no key in vault',
+                        duration_ms: Date.now() - t0,
+                    });
+                    continue;
+                }
+                const rec = await withTimeout(c.fetchUsage(key), t, c.id);
+                usage_records.push(rec);
+                results.push({
+                    provider: c.id,
+                    service: 'saas',
+                    ok: true,
+                    records_count: 1,
+                    duration_ms: Date.now() - t0,
+                });
+            }
+            catch (e) {
+                results.push({
+                    provider: c.id,
+                    service: 'saas',
+                    ok: false,
+                    records_count: 0,
+                    error: e instanceof Error ? e.message : String(e),
+                    duration_ms: Date.now() - t0,
+                });
+            }
+        }
+    }
+    // ─── Brain push ───
+    let pushed_to_brain = false;
+    let brain_error;
+    if (usage_records.length > 0 || asset_records.length > 0) {
+        try {
+            if (usage_records.length > 0) {
+                const r = await withTimeout(brain.pushUsageSnapshot(usage_records), t, 'brain-usage');
+                if (!r.ok)
+                    brain_error = r.error ?? 'brain push failed';
+            }
+            if (asset_records.length > 0) {
+                const r = await withTimeout(brain.pushAssetRegistry(asset_records), t, 'brain-assets');
+                if (!r.ok)
+                    brain_error = (brain_error ? brain_error + ' | ' : '') + (r.error ?? 'brain assets push failed');
+            }
+            pushed_to_brain = !brain_error;
+        }
+        catch (e) {
+            brain_error = e instanceof Error ? e.message : String(e);
+        }
+    }
+    const ended = Date.now();
+    return {
+        started_at: new Date(started).toISOString(),
+        ended_at: new Date(ended).toISOString(),
+        duration_ms: ended - started,
+        results,
+        pushed_to_brain,
+        brain_error,
+    };
+}
+//# sourceMappingURL=poll.js.map

package/dist/scheduler/poll.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll.js","sourceRoot":"","sources":["../../src/scheduler/poll.ts"],"names":[],"mappings":"AAAA,0CAA0C;AAC1C,EAAE;AACF,kCAAkC;AAElC,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAIrE,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,MAAM;AAErC,SAAS,WAAW,CAAI,CAAa,EAAE,EAAU,EAAE,GAAW;IAC5D,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAC3B,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,GAAG,UAAU,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CACxE;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,KAAY,EACZ,KAAsB,EACtB,GAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,wBAAwB,IAAI,eAAe,CAAC;IAC1D,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,aAAa,GAAc,EAAE,CAAC;IACpC,MAAM,aAAa,GAAc,EAAE,CAAC;IAEpC,yBAAyB;IACzB,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;oBACd,OAAO,EAAE,KAAK;oBACd,EAAE,EAAE,KAAK;oBACT,aAAa,EAAE,CAAC;oBAChB,KAAK,EAAE,iBAAiB;oBACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;iBAC7B,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,QAAQ;YACrE,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAC3C,CAAC,EACD,CAAC,CAAC,EAAE,CACL,CAAC;YACF,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;gBACd,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,IAAI;gBACR,aAAa,EAAE,IAAI,CAAC,MAAM;gBAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;gBACd,OAAO,EAAE,KAAK;gBACd,EAAE,EAAE,KAAK;gBACT,aAAa,EAAE,CAAC;gBAChB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBACjD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,GAAG,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,uBAAuB,EAAE,EAAE,CAAC;YAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,oCAAoC;gBACpC,6DAA6D;gBAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACxG,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;wBACd,OAAO,EAAE,OAAO;wBAChB,EAAE,EAAE,KAAK;wBACT,aAAa,EAAE,CAAC;wBAChB,KAAK,EAAE,iBAAiB;wBACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;qBAC7B,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC3E,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;oBACd,OAAO,EAAE,OAAO;oBAChB,EAAE,EAAE,IAAI;oBACR,aAAa,EAAE,IAAI,CAAC,MAAM;oBAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;oBACd,OAAO,EAAE,OAAO;oBAChB,EAAE,EAAE,KAAK;oBACT,aAAa,EAAE,CAAC;oBAChB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;oBACjD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,IAAI,GAAG,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC5B,KAAK,MAAM,CAAC,IAAI,sBAAsB,EAAE,EAAE,CAAC;YACzC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAClC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACT,OAAO,CAAC,IAAI,CAAC;wBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;wBACd,OAAO,EAAE,MAAM;wBACf,EAAE,EAAE,KAAK;wBACT,aAAa,EAAE,CAAC;wBAChB,KAAK,EAAE,iBAAiB;wBACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;qBAC7B,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1D,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;oBACd,OAAO,EAAE,MAAM;oBACf,EAAE,EAAE,IAAI;oBACR,aAAa,EAAE,CAAC;oBAChB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,CAAC,CAAC,EAAE;oBACd,OAAO,EAAE,MAAM;oBACf,EAAE,EAAE,KAAK;oBACT,aAAa,EAAE,CAAC;oBAChB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;oBACjD,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,WAA+B,CAAC;IACpC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;gBACtF,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,WAAW,GAAG,CAAC,CAAC,KAAK,IAAI,mBAAmB,CAAC;YAC1D,CAAC;YACD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;gBACvF,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,WAAW,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,0BAA0B,CAAC,CAAC;YAC9G,CAAC;YACD,eAAe,GAAG,CAAC,WAAW,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,WAAW,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO;QACL,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;QAC3C,QAAQ,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;QACvC,WAAW,EAAE,KAAK,GAAG,OAAO;QAC5B,OAAO;QACP,eAAe;QACf,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/scheduler/scheduler.d.ts

@@ -0,0 +1,18 @@
+import type { BrainPushClient, PollSummary, SchedulerConfig } from './types.js';
+import type { Vault } from '../vault/index.js';
+export declare class BeaconScheduler {
+    private vault;
+    private brain;
+    private cfg;
+    private timer;
+    private last_summary;
+    private running;
+    constructor(vault: Vault, brain: BrainPushClient, cfg: SchedulerConfig);
+    start(): void;
+    stop(): void;
+    /** 触发一次轮询 (测试用 / 手动 trigger) */
+    tick(): Promise<PollSummary>;
+    getLastSummary(): PollSummary | null;
+    private emptySummary;
+}
+//# sourceMappingURL=scheduler.d.ts.map

package/dist/scheduler/scheduler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.d.ts","sourceRoot":"","sources":["../../src/scheduler/scheduler.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAoB,eAAe,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAS/C,qBAAa,eAAe;IAMxB,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,KAAK;IACb,OAAO,CAAC,GAAG;IAPb,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,YAAY,CAA4B;IAChD,OAAO,CAAC,OAAO,CAAS;gBAGd,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,eAAe;IAG9B,KAAK,IAAI,IAAI;IAWb,IAAI,IAAI,IAAI;IAOZ,gCAAgC;IAC1B,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAelC,cAAc,IAAI,WAAW,GAAG,IAAI;IAIpC,OAAO,CAAC,YAAY;CAIrB"}

package/dist/scheduler/scheduler.js

@@ -0,0 +1,67 @@
+// sdk/skillfm-local/src/scheduler/scheduler.ts
+//
+// 调度器主入口 — 启动 / 停止 / 触发单次轮询
+// Day 4 加 node-cron 接入 (cron expr 支持), Day 3 用 setInterval
+import { pollOnce } from './poll.js';
+function intervalToMs(s) {
+    if (s.kind === 'minutes')
+        return s.n * 60_000;
+    if (s.kind === 'hours')
+        return s.n * 3600_000;
+    // cron 表达式 Day 4 接 node-cron, Day 3 退化为 30 min
+    return 30 * 60_000;
+}
+export class BeaconScheduler {
+    vault;
+    brain;
+    cfg;
+    timer = null;
+    last_summary = null;
+    running = false;
+    constructor(vault, brain, cfg) {
+        this.vault = vault;
+        this.brain = brain;
+        this.cfg = cfg;
+    }
+    start() {
+        if (this.timer)
+            return;
+        const ms = intervalToMs(this.cfg.interval);
+        // 立即跑一次, 然后定时
+        void this.tick();
+        this.timer = setInterval(() => void this.tick(), ms);
+        if (typeof this.timer.unref === 'function') {
+            this.timer.unref();
+        }
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    /** 触发一次轮询 (测试用 / 手动 trigger) */
+    async tick() {
+        if (this.running) {
+            // 防止 overlap
+            return this.last_summary ?? this.emptySummary();
+        }
+        this.running = true;
+        try {
+            const s = await pollOnce(this.vault, this.brain, this.cfg);
+            this.last_summary = s;
+            return s;
+        }
+        finally {
+            this.running = false;
+        }
+    }
+    getLastSummary() {
+        return this.last_summary;
+    }
+    emptySummary() {
+        const now = new Date().toISOString();
+        return { started_at: now, ended_at: now, duration_ms: 0, results: [], pushed_to_brain: false };
+    }
+}
+//# sourceMappingURL=scheduler.js.map

package/dist/scheduler/scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler.js","sourceRoot":"","sources":["../../src/scheduler/scheduler.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,EAAE;AACF,4BAA4B;AAC5B,2DAA2D;AAE3D,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAIrC,SAAS,YAAY,CAAC,CAAmB;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;IAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;IAC9C,+CAA+C;IAC/C,OAAO,EAAE,GAAG,MAAM,CAAC;AACrB,CAAC;AAED,MAAM,OAAO,eAAe;IAMhB;IACA;IACA;IAPF,KAAK,GAA0B,IAAI,CAAC;IACpC,YAAY,GAAuB,IAAI,CAAC;IACxC,OAAO,GAAG,KAAK,CAAC;IAExB,YACU,KAAY,EACZ,KAAsB,EACtB,GAAoB;QAFpB,UAAK,GAAL,KAAK,CAAO;QACZ,UAAK,GAAL,KAAK,CAAiB;QACtB,QAAG,GAAH,GAAG,CAAiB;IAC3B,CAAC;IAEJ,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,cAAc;QACd,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,aAAa;YACb,OAAO,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,OAAO,CAAC,CAAC;QACX,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IACjG,CAAC;CACF"}

package/dist/scheduler/types.d.ts

@@ -0,0 +1,49 @@
+export type ScheduleInterval = {
+    kind: 'minutes';
+    n: number;
+} | {
+    kind: 'hours';
+    n: number;
+} | {
+    kind: 'cron';
+    expr: string;
+};
+export interface PollResult {
+    provider: string;
+    service: 'llm' | 'asset' | 'saas';
+    ok: boolean;
+    records_count: number;
+    error?: string;
+    duration_ms: number;
+}
+export interface PollSummary {
+    started_at: string;
+    ended_at: string;
+    duration_ms: number;
+    results: PollResult[];
+    pushed_to_brain: boolean;
+    brain_error?: string;
+}
+export interface BrainPushClient {
+    /** push usage snapshot 到 brain /v1/beacon/usage/snapshot */
+    pushUsageSnapshot(records: unknown[]): Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    /** push asset registry 到 brain /v1/beacon/assets/registry */
+    pushAssetRegistry(assets: unknown[]): Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+}
+export interface SchedulerConfig {
+    /** 每次轮询间隔 (default: 30 min) */
+    interval: ScheduleInterval;
+    /** 单 connector 超时 (default: 30s) */
+    per_connector_timeout_ms?: number;
+    /** 是否每次轮询都 push asset registry (default: true) */
+    poll_assets?: boolean;
+    /** 是否每次轮询都 push saas usage (default: true) */
+    poll_saas?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/scheduler/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/scheduler/types.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChF,6DAA6D;IAC7D,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChF;AAED,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,oCAAoC;IACpC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,kDAAkD;IAClD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/scheduler/types.js

@@ -0,0 +1,14 @@
+// sdk/skillfm-local/src/scheduler/types.ts
+//
+// Beacon sidecar scheduler — Day 3 D3-B2
+// 职责: cron 调度 connector poll → brain push (PRD §6.2 sidecar 数据底座)
+//
+// 架构 (BYOK 真实链路):
+//   1. scheduler 启动, 加载 vault (master key 节点本地)
+//   2. cron 触发 (e.g. 每 30 min)
+//   3. 遍历 connector registry, 用 vault.get(provider) 取 key
+//   4. connector.fetchUsage(key, period) → UsageRecord[]
+//   5. 聚合 + push 到 brain /v1/beacon/usage/snapshot (经 reverse tunnel)
+//   6. 失败重试 + 单条 connector 失败不影响其他
+export {};
+//# sourceMappingURL=types.js.map

package/dist/scheduler/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/scheduler/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,EAAE;AACF,yCAAyC;AACzC,kEAAkE;AAClE,EAAE;AACF,kBAAkB;AAClB,gDAAgD;AAChD,+BAA+B;AAC/B,0DAA0D;AAC1D,yDAAyD;AACzD,sEAAsE;AACtE,mCAAmC"}

package/dist/vault/cli.d.ts

@@ -0,0 +1,2 @@
+export declare function cmdVault(): Promise<void>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/vault/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/vault/cli.ts"],"names":[],"mappings":"AA+EA,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA0F9C"}

package/dist/vault/cli.js

@@ -0,0 +1,170 @@
+// sdk/skillfm-local/src/vault/cli.ts
+//
+// Vault subcommand CLI (Day 5 B1)
+// 入口: `npx -y @skillfm/local vault <action> [args]`
+// 用法:
+//   skillfm-local vault put <provider> [key]    # key 省略则 stdin 读 (避免 shell history 留 key)
+//   skillfm-local vault get <provider>           # 显示 fingerprint, 不显示 key 全文
+//   skillfm-local vault list
+//   skillfm-local vault delete <provider>
+//   skillfm-local vault rotate
+//   skillfm-local vault health
+import * as readline from 'node:readline';
+import { Vault } from './vault.js';
+import { maskKey } from '../connectors/types.js';
+async function readStdinHidden(prompt) {
+    // 简易 hidden input — 关闭 echo
+    process.stdout.write(prompt);
+    const stdin = process.stdin;
+    return new Promise((resolve, reject) => {
+        if (!stdin.isTTY) {
+            // 非 TTY (e.g. piped input) — 直接 readline 不 hide
+            const rl = readline.createInterface({ input: stdin, output: process.stderr });
+            rl.question('', (answer) => {
+                rl.close();
+                resolve(answer.trim());
+            });
+            return;
+        }
+        stdin.setRawMode?.(true);
+        stdin.resume();
+        stdin.setEncoding('utf8');
+        let buf = '';
+        const onData = (ch) => {
+            const c = ch.toString();
+            if (c === '\n' || c === '\r' || c === '') {
+                stdin.setRawMode?.(false);
+                stdin.pause();
+                stdin.removeListener('data', onData);
+                process.stdout.write('\n');
+                resolve(buf.trim());
+            }
+            else if (c === '') {
+                // Ctrl+C
+                stdin.setRawMode?.(false);
+                process.exit(130);
+            }
+            else if (c === '' || c === '\b') {
+                // Backspace
+                if (buf.length > 0) {
+                    buf = buf.slice(0, -1);
+                    process.stdout.write('\b \b');
+                }
+            }
+            else {
+                buf += c;
+                process.stdout.write('*');
+            }
+        };
+        stdin.on('data', onData);
+        stdin.on('error', reject);
+    });
+}
+const VALID_PROVIDERS = new Set([
+    // LLM
+    'anthropic', 'openai', 'deepseek', 'kimi', 'qwen', 'doubao',
+    // Asset (域名 / SSL / VPS)
+    'cloudflare', 'godaddy', 'namecheap', 'ssl_labs', 'ssl_labs_domains',
+    'hetzner', 'digitalocean', 'vultr', 'aliyun_ecs', 'tencent_cvm',
+    // SaaS
+    'brave_search', 'serper', 'replicate', 'fal',
+]);
+function validateProvider(p) {
+    if (!VALID_PROVIDERS.has(p)) {
+        console.error(`[vault] unknown provider "${p}". Valid: ${[...VALID_PROVIDERS].join(', ')}`);
+        process.exit(2);
+    }
+}
+export async function cmdVault() {
+    const action = process.argv[3];
+    const args = process.argv.slice(4);
+    if (!action) {
+        console.error('Usage: skillfm-local vault <put|get|list|delete|rotate|health> [args]');
+        process.exit(2);
+    }
+    const v = new Vault();
+    switch (action) {
+        case 'put': {
+            const provider = args[0];
+            if (!provider) {
+                console.error('Usage: skillfm-local vault put <provider> [key]');
+                process.exit(2);
+            }
+            validateProvider(provider);
+            let key = args[1];
+            if (!key) {
+                // 不在命令行传 key (避免 shell history 留痕), 走 hidden stdin
+                key = await readStdinHidden(`[vault] enter ${provider} key (input hidden): `);
+            }
+            if (!key || key.length < 8) {
+                console.error('[vault] key 太短 (≥8 chars)');
+                process.exit(2);
+            }
+            await v.put(provider, key);
+            console.log(`[vault] ✓ saved ${provider} (${maskKey(key)})`);
+            break;
+        }
+        case 'get': {
+            const provider = args[0];
+            if (!provider) {
+                console.error('Usage: skillfm-local vault get <provider>');
+                process.exit(2);
+            }
+            const k = await v.get(provider);
+            if (!k) {
+                console.error(`[vault] no key for ${provider}`);
+                process.exit(1);
+            }
+            console.log(`[vault] ${provider}: ${maskKey(k)}`);
+            break;
+        }
+        case 'list': {
+            const providers = await v.list();
+            if (providers.length === 0) {
+                console.log('[vault] (empty)');
+            }
+            else {
+                console.log('[vault] saved providers:');
+                for (const p of providers)
+                    console.log(`  - ${p}`);
+            }
+            break;
+        }
+        case 'delete': {
+            const provider = args[0];
+            if (!provider) {
+                console.error('Usage: skillfm-local vault delete <provider>');
+                process.exit(2);
+            }
+            const did = await v.delete(provider);
+            if (did)
+                console.log(`[vault] ✓ deleted ${provider}`);
+            else {
+                console.error(`[vault] ${provider} not found`);
+                process.exit(1);
+            }
+            break;
+        }
+        case 'rotate': {
+            await v.rotate();
+            console.log('[vault] ✓ master key rotated, all entries re-encrypted');
+            break;
+        }
+        case 'health': {
+            const h = await v.health();
+            if (h.ok) {
+                console.log(`[vault] ✓ healthy (${h.entry_count} entries)`);
+            }
+            else {
+                console.error(`[vault] ✗ unhealthy: ${h.error}`);
+                process.exit(1);
+            }
+            break;
+        }
+        default:
+            console.error(`[vault] unknown action: ${action}`);
+            console.error('Valid: put | get | list | delete | rotate | health');
+            process.exit(2);
+    }
+}
+//# sourceMappingURL=cli.js.map

package/dist/vault/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/vault/cli.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,kCAAkC;AAClC,oDAAoD;AACpD,MAAM;AACN,2FAA2F;AAC3F,8EAA8E;AAC9E,6BAA6B;AAC7B,0CAA0C;AAC1C,+BAA+B;AAC/B,+BAA+B;AAE/B,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEjD,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,gDAAgD;YAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9E,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;gBACzB,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;QACzB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC1C,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC1B,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACtB,CAAC;iBAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACrB,SAAS;gBACT,KAAK,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACnC,YAAY;gBACZ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnB,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,CAAC,CAAC;gBACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,MAAM;IACN,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ;IAC3D,yBAAyB;IACzB,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,kBAAkB;IACpE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa;IAC/D,OAAO;IACP,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK;CAC7C,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,CAAS;IACjC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,6BAA6B,CAAC,aAAa,CAAC,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;IAEtB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;gBACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,mDAAmD;gBACnD,GAAG,GAAG,MAAM,eAAe,CAAC,iBAAiB,QAAQ,uBAAuB,CAAC,CAAC;YAChF,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,mBAAmB,QAAQ,KAAK,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM;QACR,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAClD,MAAM;QACR,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;gBACxC,KAAK,MAAM,CAAC,IAAI,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,IAAI,GAAG;gBAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,QAAQ,EAAE,CAAC,CAAC;iBACjD,CAAC;gBACJ,OAAO,CAAC,KAAK,CAAC,WAAW,QAAQ,YAAY,CAAC,CAAC;gBAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACtE,MAAM;QACR,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACT,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,WAAW,WAAW,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM;QACR,CAAC;QACD;YACE,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/vault/crypto.d.ts

@@ -0,0 +1,9 @@
+export interface EncryptResult {
+    iv_b64: string;
+    auth_tag_b64: string;
+    ciphertext_b64: string;
+}
+export declare function generateMasterKey(): Buffer;
+export declare function encrypt(plaintext: string, key: Buffer): EncryptResult;
+export declare function decrypt(blob: EncryptResult, key: Buffer): string;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/vault/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/vault/crypto.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,CAgBrE;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAqBhE"}

package/dist/vault/crypto.js

@@ -0,0 +1,54 @@
+// sdk/skillfm-local/src/vault/crypto.ts
+//
+// AES-256-GCM 加密原语
+// IV 12 bytes (GCM 推荐) / Auth tag 16 bytes / Key 32 bytes
+import { randomBytes, createCipheriv, createDecipheriv } from 'node:crypto';
+import { VaultError, VAULT_ERROR_CODES } from './types.js';
+const ALGO = 'aes-256-gcm';
+const KEY_BYTES = 32;
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+export function generateMasterKey() {
+    return randomBytes(KEY_BYTES);
+}
+export function encrypt(plaintext, key) {
+    if (key.length !== KEY_BYTES) {
+        throw new VaultError(VAULT_ERROR_CODES.MASTER_KEY_INVALID, `master key must be ${KEY_BYTES} bytes, got ${key.length}`);
+    }
+    const iv = randomBytes(IV_BYTES);
+    const cipher = createCipheriv(ALGO, key, iv);
+    const encrypted = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    if (tag.length !== TAG_BYTES) {
+        throw new VaultError(VAULT_ERROR_CODES.DECRYPT_FAILED, `unexpected auth tag length ${tag.length}`);
+    }
+    return {
+        iv_b64: iv.toString('base64'),
+        auth_tag_b64: tag.toString('base64'),
+        ciphertext_b64: encrypted.toString('base64'),
+    };
+}
+export function decrypt(blob, key) {
+    if (key.length !== KEY_BYTES) {
+        throw new VaultError(VAULT_ERROR_CODES.MASTER_KEY_INVALID, `master key must be ${KEY_BYTES} bytes`);
+    }
+    const iv = Buffer.from(blob.iv_b64, 'base64');
+    const tag = Buffer.from(blob.auth_tag_b64, 'base64');
+    const cipher_buf = Buffer.from(blob.ciphertext_b64, 'base64');
+    if (iv.length !== IV_BYTES) {
+        throw new VaultError(VAULT_ERROR_CODES.VAULT_FILE_CORRUPTED, `iv length ${iv.length} != ${IV_BYTES}`);
+    }
+    if (tag.length !== TAG_BYTES) {
+        throw new VaultError(VAULT_ERROR_CODES.VAULT_FILE_CORRUPTED, `tag length ${tag.length} != ${TAG_BYTES}`);
+    }
+    try {
+        const decipher = createDecipheriv(ALGO, key, iv);
+        decipher.setAuthTag(tag);
+        const decrypted = Buffer.concat([decipher.update(cipher_buf), decipher.final()]);
+        return decrypted.toString('utf8');
+    }
+    catch (e) {
+        throw new VaultError(VAULT_ERROR_CODES.DECRYPT_FAILED, `AES-GCM auth failed: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+//# sourceMappingURL=crypto.js.map

package/dist/vault/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/vault/crypto.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,mBAAmB;AACnB,0DAA0D;AAE1D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,IAAI,GAAG,aAAa,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AAQrB,MAAM,UAAU,iBAAiB;IAC/B,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,GAAW;IACpD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,sBAAsB,SAAS,eAAe,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACzH,CAAC;IACD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,cAAc,EAAE,8BAA8B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC7B,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACpC,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,IAAmB,EAAE,GAAW;IACtD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,sBAAsB,SAAS,QAAQ,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,EAAE,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,aAAa,EAAE,CAAC,MAAM,OAAO,QAAQ,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,oBAAoB,EAAE,cAAc,GAAG,CAAC,MAAM,OAAO,SAAS,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACjD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,UAAU,CAAC,iBAAiB,CAAC,cAAc,EAAE,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC"}

package/dist/vault/index.d.ts

@@ -0,0 +1,6 @@
+export type { VaultConfig } from './vault.js';
+export { Vault } from './vault.js';
+export type { VaultEntries, VaultFileV1, VaultProviderId } from './types.js';
+export { VaultError, VAULT_ERROR_CODES } from './types.js';
+export { encrypt, decrypt, generateMasterKey } from './crypto.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/vault/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vault/index.ts"],"names":[],"mappings":"AAEA,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}

package/dist/vault/index.js

@@ -0,0 +1,5 @@
+// sdk/skillfm-local/src/vault/index.ts
+export { Vault } from './vault.js';
+export { VaultError, VAULT_ERROR_CODES } from './types.js';
+export { encrypt, decrypt, generateMasterKey } from './crypto.js';
+//# sourceMappingURL=index.js.map

package/dist/vault/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/vault/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AAGvC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC"}