@skillfm/local 2.6.4 → 2.7.1

package/dist/mcp/config.d.ts

@@ -0,0 +1,29 @@
+/**
+ * src/config.ts — Read agent token + API base URL.
+ *
+ * Resolution order:
+ *   1. process.env.SKILLFM_AGENT_TOKEN
+ *   2. ~/.skillfm/beacon-mcp/config.json `{ agentToken, apiBaseUrl }`
+ *   3. Fallback → degraded=true (no token, public/cached endpoints only)
+ *
+ * `degraded` propagates to the MCP server: every tool can still run but
+ * brain-backed paths fall back to local cache or NOT_IMPLEMENTED.
+ *
+ * TODO Week 5:
+ *   - Replace ad-hoc JSON config with the same `~/.skillfm/config.json` schema
+ *     that `@skillfm/local` writes (already vault-protected). Currently the two
+ *     packages each own a slice of the homedir.
+ *   - Add `SKILLFM_DRY_RUN=1` knob so smoke tests never call brain-client.
+ *   - Plug into `skillfm-beacon-mcp bind` CLI subcommand (bin.ts) for
+ *     OAuth device-flow binding (mirror @skillfm/local activate flow).
+ */
+export declare const DEFAULT_API_BASE_URL = "https://api.skillfm.ai";
+export interface BeaconConfig {
+    agentToken: string | null;
+    apiBaseUrl: string;
+    degraded: boolean;
+}
+export declare function loadConfig(): BeaconConfig;
+/** Used by tests to assert resolution precedence; not exported for runtime. */
+export declare function _resolveHomePath(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/mcp/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/mcp/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AAE7D,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAwBD,wBAAgB,UAAU,IAAI,YAAY,CAwBzC;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/mcp/config.js

@@ -0,0 +1,69 @@
+/**
+ * src/config.ts — Read agent token + API base URL.
+ *
+ * Resolution order:
+ *   1. process.env.SKILLFM_AGENT_TOKEN
+ *   2. ~/.skillfm/beacon-mcp/config.json `{ agentToken, apiBaseUrl }`
+ *   3. Fallback → degraded=true (no token, public/cached endpoints only)
+ *
+ * `degraded` propagates to the MCP server: every tool can still run but
+ * brain-backed paths fall back to local cache or NOT_IMPLEMENTED.
+ *
+ * TODO Week 5:
+ *   - Replace ad-hoc JSON config with the same `~/.skillfm/config.json` schema
+ *     that `@skillfm/local` writes (already vault-protected). Currently the two
+ *     packages each own a slice of the homedir.
+ *   - Add `SKILLFM_DRY_RUN=1` knob so smoke tests never call brain-client.
+ *   - Plug into `skillfm-beacon-mcp bind` CLI subcommand (bin.ts) for
+ *     OAuth device-flow binding (mirror @skillfm/local activate flow).
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { BEACON_HOME } from './cache.js';
+export const DEFAULT_API_BASE_URL = 'https://api.skillfm.ai';
+function readConfigFile() {
+    const path = join(BEACON_HOME, 'config.json');
+    if (!existsSync(path))
+        return null;
+    try {
+        const raw = readFileSync(path, 'utf8');
+        const parsed = JSON.parse(raw);
+        if (parsed && typeof parsed === 'object') {
+            return parsed;
+        }
+        return null;
+    }
+    catch (err) {
+        // never throw from config loader — log to stderr (stdout is MCP transport)
+        console.error('[skillfm-beacon-mcp] config.json read failed:', err.message);
+        return null;
+    }
+}
+export function loadConfig() {
+    const envToken = process.env.SKILLFM_AGENT_TOKEN?.trim();
+    const envBase = process.env.SKILLFM_API_BASE_URL?.trim();
+    let token = envToken && envToken.length > 0 ? envToken : null;
+    let baseUrl = envBase && envBase.length > 0 ? envBase : DEFAULT_API_BASE_URL;
+    if (!token || !envBase) {
+        const file = readConfigFile();
+        if (file) {
+            if (!token && typeof file.agentToken === 'string' && file.agentToken.length > 0) {
+                token = file.agentToken;
+            }
+            if (!envBase && typeof file.apiBaseUrl === 'string' && file.apiBaseUrl.length > 0) {
+                baseUrl = file.apiBaseUrl;
+            }
+        }
+    }
+    return {
+        agentToken: token,
+        apiBaseUrl: baseUrl,
+        degraded: token === null,
+    };
+}
+/** Used by tests to assert resolution precedence; not exported for runtime. */
+export function _resolveHomePath() {
+    return join(homedir(), '.skillfm', 'beacon-mcp');
+}
+//# sourceMappingURL=config.js.map

package/dist/mcp/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/mcp/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAa7D,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAyB,CAAC;QACnC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,2EAA2E;QAC3E,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAEzD,IAAI,KAAK,GAAkB,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,IAAI,OAAO,GAAW,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAErF,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;QAC9B,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChF,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC;YAC1B,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClF,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK;QACjB,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,KAAK,KAAK,IAAI;KACzB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AACnD,CAAC"}

package/dist/mcp/decision-engine.d.ts

@@ -0,0 +1,54 @@
+/**
+ * src/decision-engine.ts — Client-side decision tree (PRD-MCP-SKILL §5.3).
+ *
+ * Decides whether to surface a suggestion to the user, *before* hitting brain.
+ * This is the layer that protects users from Clippy-style spam:
+ *
+ *   1. Frequency limit       — `userPrefs.maxPerSession` / `maxPerDay`
+ *   2. Quiet hours           — `userPrefs.quietHours`
+ *   3. Disabled category     — `userPrefs.disabledCategories[A..H]`
+ *   4. Duplicate suggestion  — same trigger key inside dedupe window
+ *   5. Brain rule fetch      — only after the above 4 pass
+ *
+ * Phase 0 implements 1–4 as real logic (these are 100% client invariants and
+ * don't depend on brain). Step 5 calls BrainClient.fetchRule which currently
+ * returns mock data — fine, the wiring is already correct.
+ *
+ * TODO Week 5:
+ *   - Wire real per-day counter into session-cache.db (Phase 0 only counts per
+ *     session — restart of MCP server resets the per-day counter).
+ *   - Honor `forceShow` override for high-severity expiry alerts (PRD §5.4).
+ *   - Plug A/B-test bucket id into context hash so brain can split-test rules.
+ *   - Emit OpenTelemetry span for every decision — saves debug time when
+ *     users complain "SkillFM never suggests anything".
+ */
+import { type TriggerType, type UserPreferences } from './_vendored-contracts/beacon-mcp-tools-v1.js';
+import type { BrainClient } from './brain-client.js';
+import type { SessionCacheHandle } from './cache.js';
+export interface SuggestionDecision {
+    /** True if the agent should surface this to the user. */
+    shouldSuggest: boolean;
+    /** Human-readable reason if shouldSuggest=false. */
+    reason?: string;
+    /** Domain code if shouldSuggest=false (matches SKILLFM_ERROR_CODES). */
+    reasonCode?: string;
+    /** Brain-issued rule id (only present when shouldSuggest=true). */
+    ruleId?: string;
+    /** Opaque rule payload for the agent to render. */
+    rulePayload?: Record<string, unknown>;
+}
+export interface EvaluateOpts {
+    triggerType: TriggerType;
+    triggerContext: Record<string, unknown>;
+    userPrefs: UserPreferences;
+    sessionCache: SessionCacheHandle;
+    brain: BrainClient;
+    /** ISO weekday + HH:mm for quiet-hours check; defaults to `new Date()`. */
+    now?: Date;
+}
+/**
+ * Phase 0 decision tree — runs locally, calls brain only on the happy path.
+ * Returns a `SuggestionDecision` envelope every time (never throws).
+ */
+export declare function evaluateSuggestion(opts: EvaluateOpts): Promise<SuggestionDecision>;
+//# sourceMappingURL=decision-engine.d.ts.map

package/dist/mcp/decision-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-engine.d.ts","sourceRoot":"","sources":["../../src/mcp/decision-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAEL,KAAK,WAAW,EAChB,KAAK,eAAe,EAErB,MAAM,8CAA8C,CAAC;AAEtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAKrD,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,aAAa,EAAE,OAAO,CAAC;IACvB,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,SAAS,EAAE,eAAe,CAAC;IAC3B,YAAY,EAAE,kBAAkB,CAAC;IACjC,KAAK,EAAE,WAAW,CAAC;IACnB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,IAAI,CAAC;CACZ;AAuBD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA2DxF"}

package/dist/mcp/decision-engine.js

@@ -0,0 +1,107 @@
+/**
+ * src/decision-engine.ts — Client-side decision tree (PRD-MCP-SKILL §5.3).
+ *
+ * Decides whether to surface a suggestion to the user, *before* hitting brain.
+ * This is the layer that protects users from Clippy-style spam:
+ *
+ *   1. Frequency limit       — `userPrefs.maxPerSession` / `maxPerDay`
+ *   2. Quiet hours           — `userPrefs.quietHours`
+ *   3. Disabled category     — `userPrefs.disabledCategories[A..H]`
+ *   4. Duplicate suggestion  — same trigger key inside dedupe window
+ *   5. Brain rule fetch      — only after the above 4 pass
+ *
+ * Phase 0 implements 1–4 as real logic (these are 100% client invariants and
+ * don't depend on brain). Step 5 calls BrainClient.fetchRule which currently
+ * returns mock data — fine, the wiring is already correct.
+ *
+ * TODO Week 5:
+ *   - Wire real per-day counter into session-cache.db (Phase 0 only counts per
+ *     session — restart of MCP server resets the per-day counter).
+ *   - Honor `forceShow` override for high-severity expiry alerts (PRD §5.4).
+ *   - Plug A/B-test bucket id into context hash so brain can split-test rules.
+ *   - Emit OpenTelemetry span for every decision — saves debug time when
+ *     users complain "SkillFM never suggests anything".
+ */
+import { getCategoryFromTriggerType, } from './_vendored-contracts/beacon-mcp-tools-v1.js';
+import { SKILLFM_ERROR_CODES } from './errors.js';
+const DEFAULT_DEDUPE_WINDOW_MS = 30 * 60_000; // 30 minutes
+function _isInQuietHours(prefs, now) {
+    if (!prefs.quietHours.enabled)
+        return false;
+    // NOTE Phase 0 ignores timezone — uses local clock. Week 5 will use Intl.
+    const hh = String(now.getHours()).padStart(2, '0');
+    const mm = String(now.getMinutes()).padStart(2, '0');
+    const cur = `${hh}:${mm}`;
+    const { start, end } = prefs.quietHours;
+    // Wrap-around (22:00 → 08:00): inside if cur >= start OR cur < end
+    if (start > end)
+        return cur >= start || cur < end;
+    return cur >= start && cur < end;
+}
+function _dedupeKey(triggerType, ctx) {
+    // Stable key: trigger + sorted-keys signature (cheap, no full hash needed Phase 0)
+    const sig = Object.keys(ctx)
+        .sort()
+        .map((k) => `${k}=${String(ctx[k] ?? '')}`)
+        .join('&');
+    return `${triggerType}::${sig}`;
+}
+/**
+ * Phase 0 decision tree — runs locally, calls brain only on the happy path.
+ * Returns a `SuggestionDecision` envelope every time (never throws).
+ */
+export async function evaluateSuggestion(opts) {
+    const { triggerType, triggerContext, userPrefs, sessionCache, brain } = opts;
+    const now = opts.now ?? new Date();
+    // 1. Disabled-category check
+    const cat = getCategoryFromTriggerType(triggerType);
+    if (cat !== null && userPrefs.disabledCategories.includes(cat)) {
+        return {
+            shouldSuggest: false,
+            reason: `User disabled suggestion category ${cat}.`,
+            reasonCode: SKILLFM_ERROR_CODES.DECISION_USER_OPTED_OUT,
+        };
+    }
+    // 2. Quiet hours
+    if (_isInQuietHours(userPrefs, now)) {
+        return {
+            shouldSuggest: false,
+            reason: 'Inside user-configured quiet hours.',
+            reasonCode: SKILLFM_ERROR_CODES.DECISION_USER_OPTED_OUT,
+        };
+    }
+    // 3. Frequency limit (per-session)
+    if (sessionCache.sessionCount() >= userPrefs.maxPerSession) {
+        return {
+            shouldSuggest: false,
+            reason: `Reached maxPerSession=${userPrefs.maxPerSession}.`,
+            reasonCode: SKILLFM_ERROR_CODES.DECISION_FREQUENCY_LIMITED,
+        };
+    }
+    // 4. Duplicate suggestion within dedupe window
+    const key = _dedupeKey(triggerType, triggerContext);
+    if (sessionCache.hasRecentSuggestion(key, DEFAULT_DEDUPE_WINDOW_MS)) {
+        return {
+            shouldSuggest: false,
+            reason: 'Duplicate suggestion within 30-min window.',
+            reasonCode: SKILLFM_ERROR_CODES.DECISION_DUPLICATE_SUGGESTION,
+        };
+    }
+    // 5. Brain rule fetch (with implicit fallback to local cache via BrainClient)
+    const ruleResult = await brain.fetchRule(triggerType, triggerContext, {});
+    if (!ruleResult.ok) {
+        return {
+            shouldSuggest: false,
+            reason: ruleResult.message,
+            reasonCode: ruleResult.code,
+        };
+    }
+    // Happy path — record + return
+    sessionCache.recordSuggestion(key);
+    return {
+        shouldSuggest: true,
+        ruleId: ruleResult.data.ruleId,
+        rulePayload: ruleResult.data.payload,
+    };
+}
+//# sourceMappingURL=decision-engine.js.map

package/dist/mcp/decision-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-engine.js","sourceRoot":"","sources":["../../src/mcp/decision-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAIL,0BAA0B,GAC3B,MAAM,8CAA8C,CAAC;AAItD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,wBAAwB,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,aAAa;AAyB3D,SAAS,eAAe,CAAC,KAAsB,EAAE,GAAS;IACxD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC5C,0EAA0E;IAC1E,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;IAC1B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;IACxC,mEAAmE;IACnE,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,GAAG,IAAI,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC;IAClD,OAAO,GAAG,IAAI,KAAK,IAAI,GAAG,GAAG,GAAG,CAAC;AACnC,CAAC;AAED,SAAS,UAAU,CAAC,WAAwB,EAAE,GAA4B;IACxE,mFAAmF;IACnF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SACzB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,WAAW,KAAK,GAAG,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAkB;IACzD,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IAEnC,6BAA6B;IAC7B,MAAM,GAAG,GAA8B,0BAA0B,CAAC,WAAW,CAAC,CAAC;IAC/E,IAAI,GAAG,KAAK,IAAI,IAAI,SAAS,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,qCAAqC,GAAG,GAAG;YACnD,UAAU,EAAE,mBAAmB,CAAC,uBAAuB;SACxD,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,IAAI,eAAe,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,qCAAqC;YAC7C,UAAU,EAAE,mBAAmB,CAAC,uBAAuB;SACxD,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,IAAI,YAAY,CAAC,YAAY,EAAE,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;QAC3D,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,yBAAyB,SAAS,CAAC,aAAa,GAAG;YAC3D,UAAU,EAAE,mBAAmB,CAAC,0BAA0B;SAC3D,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,YAAY,CAAC,mBAAmB,CAAC,GAAG,EAAE,wBAAwB,CAAC,EAAE,CAAC;QACpE,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,4CAA4C;YACpD,UAAU,EAAE,mBAAmB,CAAC,6BAA6B;SAC9D,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,MAAM,EAAE,UAAU,CAAC,OAAO;YAC1B,UAAU,EAAE,UAAU,CAAC,IAAI;SAC5B,CAAC;IACJ,CAAC;IAED,+BAA+B;IAC/B,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;QAC9B,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO;KACrC,CAAC;AACJ,CAAC"}

package/dist/mcp/errors.d.ts

@@ -0,0 +1,66 @@
+/**
+ * src/errors.ts — Error factory + domain error code constants.
+ *
+ * All MCP tool handlers in this package return either
+ *   { ok: true, data, degraded? }
+ * or
+ *   { ok: false, error: SkillFmToolError }
+ * (shape defined in the vendored contract `beacon-mcp-tools-v1.ts`).
+ *
+ * This file owns the canonical list of error codes. Codes are domain-prefixed
+ * `'SKILLFM.<DOMAIN>.<REASON>'` to make grep + log filtering reliable.
+ *
+ * TODO Week 5:
+ *   - Wire codes into the brain-client retry classifier (retryable=true vs false)
+ *   - Add i18n table for `userHint` (currently each handler ad-hoc fills en/zh)
+ *   - Add a structured `cause` field (preserving original Error) once we have
+ *     real network/io failures to surface — Phase 0 returns mocks, no real cause.
+ */
+import type { SkillFmToolError } from './_vendored-contracts/beacon-mcp-tools-v1.js';
+export declare const SKILLFM_ERROR_CODES: {
+    readonly AUTH_NOT_BOUND: "SKILLFM.AUTH.NOT_BOUND";
+    readonly AUTH_INVALID_TOKEN: "SKILLFM.AUTH.INVALID_TOKEN";
+    readonly AUTH_PRO_REQUIRED: "SKILLFM.AUTH.PRO_REQUIRED";
+    readonly NETWORK_UNREACHABLE: "SKILLFM.NETWORK.UNREACHABLE";
+    readonly NETWORK_TIMEOUT: "SKILLFM.NETWORK.TIMEOUT";
+    readonly BRAIN_RATE_LIMITED: "SKILLFM.BRAIN.RATE_LIMITED";
+    readonly BRAIN_INTERNAL: "SKILLFM.BRAIN.INTERNAL";
+    readonly BRAIN_CONTRACT_MISMATCH: "SKILLFM.BRAIN.CONTRACT_MISMATCH";
+    readonly TOOL_NOT_IMPLEMENTED: "SKILLFM.TOOL.NOT_IMPLEMENTED";
+    readonly TOOL_INVALID_INPUT: "SKILLFM.TOOL.INVALID_INPUT";
+    readonly CACHE_READ_FAILED: "SKILLFM.CACHE.READ_FAILED";
+    readonly CACHE_WRITE_FAILED: "SKILLFM.CACHE.WRITE_FAILED";
+    readonly DECISION_FREQUENCY_LIMITED: "SKILLFM.DECISION.FREQUENCY_LIMITED";
+    readonly DECISION_USER_OPTED_OUT: "SKILLFM.DECISION.USER_OPTED_OUT";
+    readonly DECISION_DUPLICATE_SUGGESTION: "SKILLFM.DECISION.DUPLICATE_SUGGESTION";
+};
+export type SkillFmErrorCode = (typeof SKILLFM_ERROR_CODES)[keyof typeof SKILLFM_ERROR_CODES];
+/**
+ * Throwable error class. Tool handlers can `throw new SkillFmError(...)`
+ * and the MCP server boundary will convert into `SkillFmToolError` envelope.
+ */
+export declare class SkillFmError extends Error {
+    readonly code: string;
+    readonly userHint?: {
+        en: string;
+        zh: string;
+    };
+    readonly retryable: boolean;
+    constructor(opts: {
+        code: string;
+        message: string;
+        userHint?: {
+            en: string;
+            zh: string;
+        };
+        retryable?: boolean;
+    });
+    /** Convert to the wire-shape error returned inside `SkillFmToolResult.error`. */
+    toToolError(): SkillFmToolError;
+}
+export declare function notImplemented(toolName: string): SkillFmError;
+export declare function authNotBound(): SkillFmError;
+export declare function networkUnreachable(detail: string): SkillFmError;
+export declare function proRequired(featureName: string): SkillFmError;
+export declare function invalidInput(reason: string): SkillFmError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/mcp/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/mcp/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8CAA8C,CAAC;AAMrF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;CA2BtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAC1B,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAMjE;;;GAGG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,QAAQ,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,SAAgB,SAAS,EAAE,OAAO,CAAC;gBAEvB,IAAI,EAAE;QAChB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACtC,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB;IAQD,iFAAiF;IACjF,WAAW,IAAI,gBAAgB;CAQhC;AAMD,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAU7D;AAED,wBAAgB,YAAY,IAAI,YAAY,CAU3C;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAU/D;AAED,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAU7D;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,YAAY,CAMzD"}

package/dist/mcp/errors.js

@@ -0,0 +1,127 @@
+/**
+ * src/errors.ts — Error factory + domain error code constants.
+ *
+ * All MCP tool handlers in this package return either
+ *   { ok: true, data, degraded? }
+ * or
+ *   { ok: false, error: SkillFmToolError }
+ * (shape defined in the vendored contract `beacon-mcp-tools-v1.ts`).
+ *
+ * This file owns the canonical list of error codes. Codes are domain-prefixed
+ * `'SKILLFM.<DOMAIN>.<REASON>'` to make grep + log filtering reliable.
+ *
+ * TODO Week 5:
+ *   - Wire codes into the brain-client retry classifier (retryable=true vs false)
+ *   - Add i18n table for `userHint` (currently each handler ad-hoc fills en/zh)
+ *   - Add a structured `cause` field (preserving original Error) once we have
+ *     real network/io failures to surface — Phase 0 returns mocks, no real cause.
+ */
+// ============================================================================
+// Domain error code constants — keep alphabetized by domain
+// ============================================================================
+export const SKILLFM_ERROR_CODES = {
+    // AUTH — agent token / Pro tier / device binding
+    AUTH_NOT_BOUND: 'SKILLFM.AUTH.NOT_BOUND',
+    AUTH_INVALID_TOKEN: 'SKILLFM.AUTH.INVALID_TOKEN',
+    AUTH_PRO_REQUIRED: 'SKILLFM.AUTH.PRO_REQUIRED',
+    // NETWORK — brain endpoint reachability
+    NETWORK_UNREACHABLE: 'SKILLFM.NETWORK.UNREACHABLE',
+    NETWORK_TIMEOUT: 'SKILLFM.NETWORK.TIMEOUT',
+    // BRAIN — server-side responses (5xx, rate limit, contract drift)
+    BRAIN_RATE_LIMITED: 'SKILLFM.BRAIN.RATE_LIMITED',
+    BRAIN_INTERNAL: 'SKILLFM.BRAIN.INTERNAL',
+    BRAIN_CONTRACT_MISMATCH: 'SKILLFM.BRAIN.CONTRACT_MISMATCH',
+    // TOOL — local tool dispatch / NOT_IMPLEMENTED placeholders
+    TOOL_NOT_IMPLEMENTED: 'SKILLFM.TOOL.NOT_IMPLEMENTED',
+    TOOL_INVALID_INPUT: 'SKILLFM.TOOL.INVALID_INPUT',
+    // CACHE — local file persistence
+    CACHE_READ_FAILED: 'SKILLFM.CACHE.READ_FAILED',
+    CACHE_WRITE_FAILED: 'SKILLFM.CACHE.WRITE_FAILED',
+    // DECISION — client-side decision-engine rejections (frequency / pref / dedupe)
+    DECISION_FREQUENCY_LIMITED: 'SKILLFM.DECISION.FREQUENCY_LIMITED',
+    DECISION_USER_OPTED_OUT: 'SKILLFM.DECISION.USER_OPTED_OUT',
+    DECISION_DUPLICATE_SUGGESTION: 'SKILLFM.DECISION.DUPLICATE_SUGGESTION',
+};
+// ============================================================================
+// SkillFmError — throwable Error subclass
+// ============================================================================
+/**
+ * Throwable error class. Tool handlers can `throw new SkillFmError(...)`
+ * and the MCP server boundary will convert into `SkillFmToolError` envelope.
+ */
+export class SkillFmError extends Error {
+    code;
+    userHint;
+    retryable;
+    constructor(opts) {
+        super(opts.message);
+        this.name = 'SkillFmError';
+        this.code = opts.code;
+        this.userHint = opts.userHint;
+        this.retryable = opts.retryable ?? false;
+    }
+    /** Convert to the wire-shape error returned inside `SkillFmToolResult.error`. */
+    toToolError() {
+        return {
+            code: this.code,
+            message: this.message,
+            userHint: this.userHint,
+            retryable: this.retryable,
+        };
+    }
+}
+// ============================================================================
+// Factory helpers — common errors handlers throw
+// ============================================================================
+export function notImplemented(toolName) {
+    return new SkillFmError({
+        code: SKILLFM_ERROR_CODES.TOOL_NOT_IMPLEMENTED,
+        message: `Tool '${toolName}' is reserved in Phase 0 but not yet implemented.`,
+        userHint: {
+            en: `This SkillFM feature ships in Week 5 of Phase 1. Try one of the live tools instead.`,
+            zh: `这个 SkillFM 能力将在 Phase 1 第 5 周上线,先试其他已上线工具。`,
+        },
+        retryable: false,
+    });
+}
+export function authNotBound() {
+    return new SkillFmError({
+        code: SKILLFM_ERROR_CODES.AUTH_NOT_BOUND,
+        message: 'No SKILLFM_AGENT_TOKEN configured. Run `skillfm-beacon-mcp bind` or set the env var.',
+        userHint: {
+            en: 'SkillFM is in degraded (offline) mode. Bind your agent token to enable cost-saving features.',
+            zh: 'SkillFM 当前是离线降级模式。绑定 agent token 以启用省钱功能。',
+        },
+        retryable: false,
+    });
+}
+export function networkUnreachable(detail) {
+    return new SkillFmError({
+        code: SKILLFM_ERROR_CODES.NETWORK_UNREACHABLE,
+        message: `Cannot reach SkillFM brain: ${detail}`,
+        userHint: {
+            en: 'SkillFM cloud is unreachable. Falling back to cached rules.',
+            zh: 'SkillFM 云端不可达,回退到本地缓存规则。',
+        },
+        retryable: true,
+    });
+}
+export function proRequired(featureName) {
+    return new SkillFmError({
+        code: SKILLFM_ERROR_CODES.AUTH_PRO_REQUIRED,
+        message: `Feature '${featureName}' requires SkillFM Pro.`,
+        userHint: {
+            en: `Upgrade to SkillFM Pro to unlock '${featureName}'.`,
+            zh: `升级 SkillFM Pro 解锁 '${featureName}'。`,
+        },
+        retryable: false,
+    });
+}
+export function invalidInput(reason) {
+    return new SkillFmError({
+        code: SKILLFM_ERROR_CODES.TOOL_INVALID_INPUT,
+        message: `Invalid tool input: ${reason}`,
+        retryable: false,
+    });
+}
+//# sourceMappingURL=errors.js.map

package/dist/mcp/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/mcp/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,+EAA+E;AAC/E,4DAA4D;AAC5D,+EAA+E;AAE/E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,iDAAiD;IACjD,cAAc,EAAE,wBAAwB;IACxC,kBAAkB,EAAE,4BAA4B;IAChD,iBAAiB,EAAE,2BAA2B;IAE9C,wCAAwC;IACxC,mBAAmB,EAAE,6BAA6B;IAClD,eAAe,EAAE,yBAAyB;IAE1C,kEAAkE;IAClE,kBAAkB,EAAE,4BAA4B;IAChD,cAAc,EAAE,wBAAwB;IACxC,uBAAuB,EAAE,iCAAiC;IAE1D,4DAA4D;IAC5D,oBAAoB,EAAE,8BAA8B;IACpD,kBAAkB,EAAE,4BAA4B;IAEhD,iCAAiC;IACjC,iBAAiB,EAAE,2BAA2B;IAC9C,kBAAkB,EAAE,4BAA4B;IAEhD,gFAAgF;IAChF,0BAA0B,EAAE,oCAAoC;IAChE,uBAAuB,EAAE,iCAAiC;IAC1D,6BAA6B,EAAE,uCAAuC;CAC9D,CAAC;AAKX,+EAA+E;AAC/E,0CAA0C;AAC1C,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrB,IAAI,CAAS;IACb,QAAQ,CAA8B;IACtC,SAAS,CAAU;IAEnC,YAAY,IAKX;QACC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,CAAC;IAED,iFAAiF;IACjF,WAAW;QACT,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,iDAAiD;AACjD,+EAA+E;AAE/E,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,mBAAmB,CAAC,oBAAoB;QAC9C,OAAO,EAAE,SAAS,QAAQ,mDAAmD;QAC7E,QAAQ,EAAE;YACR,EAAE,EAAE,qFAAqF;YACzF,EAAE,EAAE,4CAA4C;SACjD;QACD,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,mBAAmB,CAAC,cAAc;QACxC,OAAO,EAAE,sFAAsF;QAC/F,QAAQ,EAAE;YACR,EAAE,EAAE,8FAA8F;YAClG,EAAE,EAAE,2CAA2C;SAChD;QACD,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,mBAAmB,CAAC,mBAAmB;QAC7C,OAAO,EAAE,+BAA+B,MAAM,EAAE;QAChD,QAAQ,EAAE;YACR,EAAE,EAAE,6DAA6D;YACjE,EAAE,EAAE,0BAA0B;SAC/B;QACD,SAAS,EAAE,IAAI;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAAmB;IAC7C,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,mBAAmB,CAAC,iBAAiB;QAC3C,OAAO,EAAE,YAAY,WAAW,yBAAyB;QACzD,QAAQ,EAAE;YACR,EAAE,EAAE,qCAAqC,WAAW,IAAI;YACxD,EAAE,EAAE,sBAAsB,WAAW,IAAI;SAC1C;QACD,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,mBAAmB,CAAC,kBAAkB;QAC5C,OAAO,EAAE,uBAAuB,MAAM,EAAE;QACxC,SAAS,EAAE,KAAK;KACjB,CAAC,CAAC;AACL,CAAC"}

package/dist/mcp/index.d.ts

@@ -0,0 +1,40 @@
+/**
+ * src/mcp/index.ts — Beacon MCP subsystem entry. Boots a stdio MCP server.
+ *
+ * Originally `@skillfm/beacon-mcp` (PR #190), merged into `@skillfm/local` 2.7.0
+ * as a subcommand on Day 1 (2026-05-01). Invoked via:
+ *
+ *   npx -y @skillfm/local mcp
+ *
+ * Lifecycle:
+ *   1. loadConfig() — env > config.json > degraded fallback
+ *   2. instantiate BrainClient + McpServer(name='skillfm-beacon', v=PKG_VERSION)
+ *   3. registerAllTools(server, deps) — 8 real + 25+ placeholder
+ *   4. install global error guards (stderr ONLY — stdout is MCP transport)
+ *   5. start StdioServerTransport
+ *
+ * BYOK red line: this file MUST NOT touch the user's LLM API keys, cookies,
+ * or vault secrets. The only credential read is SKILLFM_AGENT_TOKEN (an
+ * opaque token issued by SkillFM brain).
+ *
+ * MCP protocol invariant: stdout is reserved for JSON-RPC frames. Any debug
+ * output goes through `console.error` (stderr). Calling `console.log` from
+ * any imported module corrupts the transport — see exhaustive grep in CI.
+ *
+ * TODO Week 5:
+ *   - HTTP transport mode (via env SKILLFM_BEACON_MCP_HTTP_PORT) — mirrors
+ *     skillfm-local's dual transport setup for multi-tenant cloud agents.
+ *   - Health-check endpoint exposed via local UDS for the Beacon GUI.
+ *   - Self-upgrade probe (npm view + warn if a newer minor is out).
+ *   - Structured request log → ~/.skillfm/beacon-mcp/server.log (rotating).
+ */
+/**
+ * Boot the server. Awaits transport.start(); resolves when stdin closes.
+ */
+export declare function startServer(): Promise<void>;
+export { BrainClient } from './brain-client.js';
+export { loadConfig } from './config.js';
+export { evaluateSuggestion } from './decision-engine.js';
+export { loadPrefs, savePrefs, loadRules, saveRules, openSessionCache, BEACON_HOME, } from './cache.js';
+export { SkillFmError, SKILLFM_ERROR_CODES } from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/mcp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAwCH;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAuCjD;AAKD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcp/index.js

@@ -0,0 +1,104 @@
+/**
+ * src/mcp/index.ts — Beacon MCP subsystem entry. Boots a stdio MCP server.
+ *
+ * Originally `@skillfm/beacon-mcp` (PR #190), merged into `@skillfm/local` 2.7.0
+ * as a subcommand on Day 1 (2026-05-01). Invoked via:
+ *
+ *   npx -y @skillfm/local mcp
+ *
+ * Lifecycle:
+ *   1. loadConfig() — env > config.json > degraded fallback
+ *   2. instantiate BrainClient + McpServer(name='skillfm-beacon', v=PKG_VERSION)
+ *   3. registerAllTools(server, deps) — 8 real + 25+ placeholder
+ *   4. install global error guards (stderr ONLY — stdout is MCP transport)
+ *   5. start StdioServerTransport
+ *
+ * BYOK red line: this file MUST NOT touch the user's LLM API keys, cookies,
+ * or vault secrets. The only credential read is SKILLFM_AGENT_TOKEN (an
+ * opaque token issued by SkillFM brain).
+ *
+ * MCP protocol invariant: stdout is reserved for JSON-RPC frames. Any debug
+ * output goes through `console.error` (stderr). Calling `console.log` from
+ * any imported module corrupts the transport — see exhaustive grep in CI.
+ *
+ * TODO Week 5:
+ *   - HTTP transport mode (via env SKILLFM_BEACON_MCP_HTTP_PORT) — mirrors
+ *     skillfm-local's dual transport setup for multi-tenant cloud agents.
+ *   - Health-check endpoint exposed via local UDS for the Beacon GUI.
+ *   - Self-upgrade probe (npm view + warn if a newer minor is out).
+ *   - Structured request log → ~/.skillfm/beacon-mcp/server.log (rotating).
+ */
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { loadConfig } from './config.js';
+import { BrainClient } from './brain-client.js';
+import { registerAllTools } from './tools/index.js';
+import { Vault } from '../vault/index.js';
+const PACKAGE_NAME = '@skillfm/local';
+// Resolve version from the host package.json so the MCP server reports the
+// same version as `skillfm-local --version`. dist/mcp/index.js sits two
+// levels deep relative to package.json.
+const PACKAGE_VERSION = (() => {
+    try {
+        const here = dirname(fileURLToPath(import.meta.url));
+        const pkg = JSON.parse(readFileSync(join(here, '..', '..', 'package.json'), 'utf-8'));
+        return typeof pkg.version === 'string' ? pkg.version : 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+})();
+/** Install process-wide guards so a bug in any handler can't tear down the
+ *  MCP transport. All output → stderr. */
+function installGlobalGuards() {
+    process.on('unhandledRejection', (reason) => {
+        console.error('[skillfm-local mcp] unhandledRejection:', reason);
+    });
+    process.on('uncaughtException', (err) => {
+        console.error('[skillfm-local mcp] uncaughtException:', err);
+    });
+}
+/**
+ * Boot the server. Awaits transport.start(); resolves when stdin closes.
+ */
+export async function startServer() {
+    installGlobalGuards();
+    const cfg = loadConfig();
+    if (cfg.degraded) {
+        console.error(`[skillfm-local mcp] WARNING: no SKILLFM_AGENT_TOKEN — running in degraded (offline) mode. ` +
+            `Brain-backed tools will return cached / mock data only.`);
+    }
+    const brain = new BrainClient({
+        agentToken: cfg.agentToken,
+        baseUrl: cfg.apiBaseUrl,
+    });
+    // Vault — credential MCP tools (skillfm_save/get/list/remove_credential) 用
+    // BYOK 红线: keys 加密存 ~/.skillfm/vault.{key,enc}, 不出节点
+    // lazy init (vault.put/get 内部 ensureInitialized)
+    const vault = new Vault();
+    const server = new McpServer({
+        name: 'skillfm-beacon',
+        version: PACKAGE_VERSION,
+    });
+    registerAllTools(server, {
+        brain,
+        vault,
+        // Phase 0 stub: any token = Pro. Week 5 will read tier from token claims.
+        isProTier: !cfg.degraded,
+    });
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    console.error(`[skillfm-local mcp] ${PACKAGE_NAME}@${PACKAGE_VERSION} ready on stdio (degraded=${cfg.degraded})`);
+}
+// Re-exports for downstream consumers that want to embed the server
+// (e.g. Beacon GUI hosting the MCP server in-process). Surface kept
+// intentionally narrow.
+export { BrainClient } from './brain-client.js';
+export { loadConfig } from './config.js';
+export { evaluateSuggestion } from './decision-engine.js';
+export { loadPrefs, savePrefs, loadRules, saveRules, openSessionCache, BEACON_HOME, } from './cache.js';
+export { SkillFmError, SKILLFM_ERROR_CODES } from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/mcp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mcp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,MAAM,YAAY,GAAG,gBAAgB,CAAC;AACtC,2EAA2E;AAC3E,wEAAwE;AACxE,wCAAwC;AACxC,MAAM,eAAe,GAAW,CAAC,GAAG,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAEnF,CAAC;QACF,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC,EAAE,CAAC;AAEL;0CAC0C;AAC1C,SAAS,mBAAmB;IAC1B,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;QACtC,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,mBAAmB,EAAE,CAAC;IAEtB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CACX,4FAA4F;YAC1F,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,UAAU;KACxB,CAAC,CAAC;IAEH,2EAA2E;IAC3E,qDAAqD;IACrD,iDAAiD;IACjD,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,CAAC;IAE1B,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;QAC3B,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,eAAe;KACzB,CAAC,CAAC;IAEH,gBAAgB,CAAC,MAAM,EAAE;QACvB,KAAK;QACL,KAAK;QACL,0EAA0E;QAC1E,SAAS,EAAE,CAAC,GAAG,CAAC,QAAQ;KACzB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,KAAK,CACX,uBAAuB,YAAY,IAAI,eAAe,6BAA6B,GAAG,CAAC,QAAQ,GAAG,CACnG,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,oEAAoE;AACpE,wBAAwB;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EACL,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC"}