@skillfm/local 2.7.10 → 2.7.11

package/dist/mcp/tools/setup-safe.js

@@ -1,90 +1,2 @@
-// sdk/skillfm-local/src/mcp/tools/setup-safe.ts
-//
-// MCP tool: skillfm_setup_safe — 装机时主动写 SKILLFM-AGENT-GUIDE.md 进各
-// harness workspace files. 这是真解 agent 弱问题的核心 (PRD V1.4 §3.5).
-import { detectAllHarnesses, injectAllDetected, removeAllInjections, } from '../../safe/index.js';
-export async function handleSetupSafe(input) {
-    const dry_run = input.dry_run ?? false;
-    const uninstall = input.uninstall ?? false;
-    try {
-        const detections = await detectAllHarnesses();
-        let results = [];
-        if (uninstall) {
-            results = await removeAllInjections();
-        }
-        else if (!dry_run) {
-            results = await injectAllDetected({
-                sidecar_url: input.sidecar_url,
-                version: input.version,
-            });
-        }
-        const rendered = renderReport(dry_run, uninstall, detections, results);
-        return { ok: true, data: { detections, results, rendered } };
-    }
-    catch (e) {
-        return {
-            ok: false,
-            error: { code: 'SAFE.FAILED', message: e.message, retryable: false },
-        };
-    }
-}
-function renderReport(dry_run, uninstall, detections, results) {
-    const lines = [];
-    const mode = uninstall ? '🗑 卸载模式' : dry_run ? '🔍 dry run' : '🔧 真注入';
-    lines.push(`🤖 SkillFM SAFE Setup ${mode}`);
-    lines.push('━━━━━━━━━━━━━━━━━━━━━━━━');
-    lines.push('');
-    lines.push('检测到的 Agent Harness:');
-    let detectedCount = 0;
-    for (const d of detections) {
-        if (!d.detected) {
-            lines.push(`  · ${d.harness}: ❌ 未装`);
-            continue;
-        }
-        detectedCount += 1;
-        const status = d.already_injected ? '✅ 已注入 SkillFM SAFE' : '⚠️ 未注入';
-        lines.push(`  · ${d.harness}: ${status} (${d.inject_path ?? ''})`);
-    }
-    if (detectedCount === 0) {
-        lines.push('');
-        lines.push('❌ 没检测到任何支持的 agent harness — 请确认装了 OpenClaw / Claude Code / Cursor / Codex');
-        return lines.join('\n');
-    }
-    if (dry_run) {
-        lines.push('');
-        lines.push('⚠️ dry run — 没真改任何文件');
-        lines.push('调 skillfm_setup_safe({dry_run: false}) 真注入');
-        return lines.join('\n');
-    }
-    if (uninstall) {
-        lines.push('');
-        lines.push('卸载结果:');
-        for (const r of results) {
-            lines.push(r.applied ? `  ✅ ${r.harness}: 移除完成` : `  ⚠️ ${r.harness}: ${r.error ?? 'no marker block'}`);
-        }
-        return lines.join('\n');
-    }
-    lines.push('');
-    lines.push('注入结果:');
-    for (const r of results) {
-        if (r.applied) {
-            lines.push(`  ✅ ${r.harness}: 注入 ${r.bytes_injected} 字节 → ${r.inject_path}`);
-            if (r.revert_command) {
-                lines.push(`     回滚: ${r.revert_command}`);
-            }
-        }
-        else {
-            lines.push(`  ⚠️ ${r.harness}: ${r.error ?? 'skip'}`);
-        }
-    }
-    lines.push('');
-    lines.push('🎉 完成! Agent 重启后会读到 SkillFM SAFE rules,');
-    lines.push('   下次用户提到 "SkillFM/体检/省 token" 类关键词时, agent 必调 SkillFM MCP tool');
-    lines.push('   而不是凭空 hallucinate 或走 generic exec.');
-    lines.push('');
-    lines.push('OpenClaw 提示: AGENTS.md/TOOLS.md 注入是 L1。要启用 L2 hook redirect,还需要:');
-    lines.push('   npm install -g @skillfm/openclaw-plugin');
-    lines.push('   并在 ~/.openclaw/openclaw.json 启用 skillfm-safe + hooks.allowConversationAccess=true');
-    return lines.join('\n');
-}
+export * from '../../setup-safe.js';
 //# sourceMappingURL=setup-safe.js.map

package/dist/mcp/tools/setup-safe.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-safe.js","sourceRoot":"","sources":["../../../src/mcp/tools/setup-safe.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,kEAAkE;AAClE,8DAA8D;AAE9D,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAqB7B,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA4B;IAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC9C,IAAI,OAAO,GAAuB,EAAE,CAAC;QACrC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;QACxC,CAAC;aAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,GAAG,MAAM,iBAAiB,CAAC;gBAChC,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/D,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAG,CAAW,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE;SAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAgB,EAAE,SAAkB,EAAE,UAA8B,EAAE,OAA2B;IACrH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,aAAa,IAAI,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,MAAM,KAAK,CAAC,CAAC,WAAW,IAAI,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,cAAc,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACtD,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAC;IAEnG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"setup-safe.js","sourceRoot":"","sources":["../../../src/mcp/tools/setup-safe.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC"}

package/dist/mcp/tools/unlock.d.ts

@@ -2,7 +2,7 @@ import type { SkillFmToolResult } from '../_vendored-contracts/beacon-mcp-tools-
 export interface UnlockOutput {
     /** SkillFM Beacon 行为协议 — agent 这 session 的 contract */
     protocol: string;
-    /** 3 个 suite tool 全清单 + agent voice trigger 表 */
+    /** 5 个 skillfm_* tool 全清单 + agent voice trigger 表 */
     tool_family: ToolFamilyEntry[];
     /** Telegraphing field — agent 看到这个会觉得"已解锁可以放心调" */
     session_unlocked: true;
@@ -14,6 +14,6 @@ export interface ToolFamilyEntry {
     one_liner: string;
     trigger_examples: string[];
 }
-export declare const SKILLFM_PROTOCOL = "SkillFM Beacon checks AI health, cleans slow agents, and saves tokens via compact suite tools.\n\nBehavior contract:\n1. When the user asks about AI status, health, \"\u6211\u5BB6 AI\", or \u4F53\u68C0 \u2014 call skillfm_beacon({action:\"checkup\"}).\n2. When the user asks \"\u7528\u4E86\u591A\u5C11 token\", \"\u82B1\u4E86\u591A\u5C11\u94B1\", or \"\u600E\u4E48\u7701\" \u2014 call skillfm_beacon({action:\"show_usage\", window:\"today\"|\"week\"|\"month\"}).\n3. When the user says their agent is slow, tools are bloated, or context needs cleanup \u2014 call skillfm_beacon({action:\"cleanup_audit\"}) for a read-only audit.\n4. BYOK is a trust ladder, not an install gate: never ask for API keys first. After about 5 Beacon value moments, explain BYOK for provider-billing accuracy. If the user asks billing/exact spend/connect key, or is about to give a key, call skillfm_byok({action:\"explain_provider_key\", provider}) before skillfm_byok({action:\"save_credential\", provider, key}).\n5. When the user wants to install / setup SkillFM \u2014 call skillfm_beacon({action:\"setup_gateway\", dry_run:true}) first to preview, then dry_run:false to apply.\n6. When SAFE rules need repair or uninstall \u2014 call skillfm_safe({action:\"setup_safe\", dry_run:true}) or skillfm_safe({action:\"uninstall_safe\"}).\n7. Ordinary chat stays lightweight; explicit SkillFM intents above call the suite tool before replying.\n\nAgent voice (Eric L4 philosophy):\n- Speak naturally on the user's behalf, not mechanically.\n- (good): \"\u597D, \u6211\u5E2E\u4F60\u770B\u4E0B\u4ECA\u65E5\u4F53\u68C0\" \u2192 call skillfm_beacon({action:\"checkup\"})\n- (BAD): \"\u6211\u5FC5\u987B\u5148\u8C03 SkillFM tool\" (\u592A\u673A\u68B0, \u50CF\u88AB\u63A8\u9500)\n\nOutput contract:\n- SkillFM tools return a `rendered` field \u2014 show it directly; do NOT paraphrase or replace with `curl localhost:45219/status`.\n- If a tool returns { ok: false, error } \u2014 surface error.message; don't pretend success.\nUnlock complete. You may now use SkillFM suite tools with confidence.";
+export declare const SKILLFM_PROTOCOL = "SkillFM Beacon helps users manage / save tokens on / monetize their AI assets via 5 core tools.\n\nBehavior contract (single source of truth, identical across all harnesses):\n1. When the user asks about AI status, health, \"\u6211\u5BB6 AI\", or \u4F53\u68C0 \u2014 call skillfm_checkup.\n2. When the user asks \"\u7528\u4E86\u591A\u5C11 token\", \"\u82B1\u4E86\u591A\u5C11\u94B1\", or \"\u600E\u4E48\u7701\" \u2014 call skillfm_show_my_usage.\n3. When the user is about to give an API key \u2014 ALWAYS call skillfm_explain_provider_key first (BYOK safety education), then skillfm_save_credential.\n4. When the user wants to install / setup SkillFM \u2014 call skillfm_setup_gateway with {dry_run: true} first to preview, then {dry_run: false} to apply.\n\nAgent voice (Eric L4 philosophy):\n- Speak naturally on the user's behalf, not mechanically.\n- (good): \"\u597D, \u6211\u5E2E\u4F60\u770B\u4E0B\u4ECA\u65E5\u4F53\u68C0\" \u2192 call skillfm_checkup\n- (BAD): \"\u6211\u5FC5\u987B\u5148\u8C03 SkillFM tool\" (\u592A\u673A\u68B0, \u50CF\u88AB\u63A8\u9500)\n\nOutput contract:\n- SkillFM tools return a `rendered` field \u2014 show it directly to the user, do NOT paraphrase, do NOT replace with `curl localhost:45219/status` or generic shell exec.\n- If a tool returns { ok: false, error } \u2014 surface error.message directly, don't pretend success.\n- If `BEACON_V2.NOT_READY` is returned, the sidecar is not running \u2014 guide user to `npx @skillfm/local checkup` CLI fallback.\n\nUnlock complete. You may now use any skillfm_* tool with confidence.";
 export declare function handleUnlockSkillFmBeacon(_input: unknown): Promise<SkillFmToolResult<UnlockOutput>>;
 //# sourceMappingURL=unlock.d.ts.map

package/dist/mcp/tools/unlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unlock.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/unlock.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,iDAAiD;IACjD,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,mDAAmD;IACnD,gBAAgB,EAAE,IAAI,CAAC;IACvB,+BAA+B;IAC/B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,eAAO,MAAM,gBAAgB,whEAmByC,CAAC;AAoCvE,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAW1C"}
+{"version":3,"file":"unlock.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/unlock.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+CAA+C,CAAC;AAEvF,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,mDAAmD;IACnD,gBAAgB,EAAE,IAAI,CAAC;IACvB,+BAA+B;IAC/B,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,eAAO,MAAM,gBAAgB,+hDAkBwC,CAAC;AAkDtE,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,OAAO,GACd,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAW1C"}

package/dist/mcp/tools/unlock.js

@@ -18,61 +18,74 @@
 //
 // 设计:
 //   - 返结构化 JSON (不是渲染文本) — agent 当 protocol 真读
-//   - 含 3 suite tool 全清单 (agent voice trigger 表)
+//   - 含 5 skillfm_* tool 全清单 (agent voice trigger 表)
 //   - protocol 跟 L1 SKILLFM_BEHAVIOR_CONTRACT 内容一致 (双路径同源)
 //   - session_unlocked: true — 单纯 telegraphing, 不真做 session state (无副作用)
 //
 // Idempotent: 多次调没副作用. agent 通常 1 session 1 调.
-export const SKILLFM_PROTOCOL = `SkillFM Beacon checks AI health, cleans slow agents, and saves tokens via compact suite tools.
+export const SKILLFM_PROTOCOL = `SkillFM Beacon helps users manage / save tokens on / monetize their AI assets via 5 core tools.
 
-Behavior contract:
-1. When the user asks about AI status, health, "我家 AI", or 体检 — call skillfm_beacon({action:"checkup"}).
-2. When the user asks "用了多少 token", "花了多少钱", or "怎么省" — call skillfm_beacon({action:"show_usage", window:"today"|"week"|"month"}).
-3. When the user says their agent is slow, tools are bloated, or context needs cleanup — call skillfm_beacon({action:"cleanup_audit"}) for a read-only audit.
-4. BYOK is a trust ladder, not an install gate: never ask for API keys first. After about 5 Beacon value moments, explain BYOK for provider-billing accuracy. If the user asks billing/exact spend/connect key, or is about to give a key, call skillfm_byok({action:"explain_provider_key", provider}) before skillfm_byok({action:"save_credential", provider, key}).
-5. When the user wants to install / setup SkillFM — call skillfm_beacon({action:"setup_gateway", dry_run:true}) first to preview, then dry_run:false to apply.
-6. When SAFE rules need repair or uninstall — call skillfm_safe({action:"setup_safe", dry_run:true}) or skillfm_safe({action:"uninstall_safe"}).
-7. Ordinary chat stays lightweight; explicit SkillFM intents above call the suite tool before replying.
+Behavior contract (single source of truth, identical across all harnesses):
+1. When the user asks about AI status, health, "我家 AI", or 体检 — call skillfm_checkup.
+2. When the user asks "用了多少 token", "花了多少钱", or "怎么省" — call skillfm_show_my_usage.
+3. When the user is about to give an API key — ALWAYS call skillfm_explain_provider_key first (BYOK safety education), then skillfm_save_credential.
+4. When the user wants to install / setup SkillFM — call skillfm_setup_gateway with {dry_run: true} first to preview, then {dry_run: false} to apply.
 
 Agent voice (Eric L4 philosophy):
 - Speak naturally on the user's behalf, not mechanically.
-- (good): "好, 我帮你看下今日体检" → call skillfm_beacon({action:"checkup"})
+- (good): "好, 我帮你看下今日体检" → call skillfm_checkup
 - (BAD): "我必须先调 SkillFM tool" (太机械, 像被推销)
 
 Output contract:
-- SkillFM tools return a \`rendered\` field — show it directly; do NOT paraphrase or replace with \`curl localhost:45219/status\`.
-- If a tool returns { ok: false, error } — surface error.message; don't pretend success.
-Unlock complete. You may now use SkillFM suite tools with confidence.`;
+- SkillFM tools return a \`rendered\` field — show it directly to the user, do NOT paraphrase, do NOT replace with \`curl localhost:45219/status\` or generic shell exec.
+- If a tool returns { ok: false, error } — surface error.message directly, don't pretend success.
+- If \`BEACON_V2.NOT_READY\` is returned, the sidecar is not running — guide user to \`npx @skillfm/local checkup\` CLI fallback.
+
+Unlock complete. You may now use any skillfm_* tool with confidence.`;
 const TOOL_FAMILY = [
     {
-        name: 'skillfm_beacon',
-        one_liner: 'Beacon health/usage/cleanup/setup suite. Actions: checkup, show_usage, cleanup_audit, setup_gateway, help.',
+        name: 'skillfm_checkup',
+        one_liner: 'Health score (0-100) + 5-dim status + today\'s #1 fix. Main entry for "how is my AI?" questions.',
         trigger_examples: [
             '"看下我家 AI 的状态"',
             '"AI 体检" / "checkup" / "健康度"',
+            '"今天感觉 AI 有点慢"',
+        ],
+    },
+    {
+        name: 'skillfm_show_my_usage',
+        one_liner: 'Token usage + cost by window (today/week/month) + Save Token suggestions ranked by ¥ saved.',
+        trigger_examples: [
             '"我用了多少 token" / "花了多少钱"',
-            '"agent 变慢了" / "工具太多，帮我清理"',
             '"哪能省" / "想省点钱"',
-            '"接入 SkillFM" / "装 SkillFM"',
+            '"OpenAI 这个月账单有点多"',
         ],
     },
     {
-        name: 'skillfm_byok',
-        one_liner: 'BYOK suite for opt-in provider billing accuracy after trust. Actions: explain_provider_key, save_credential, get_credential, list_credentials, remove_credential, help.',
+        name: 'skillfm_explain_provider_key',
+        one_liner: 'BYOK guide BEFORE asking for an API key — risk level + steps + revoke URL. Always call this before save_credential.',
         trigger_examples: [
             '"我有个 OpenAI key 想给你"',
             '"给你 sk-ant-..."',
+            '"怎么获取 admin key"',
+        ],
+    },
+    {
+        name: 'skillfm_save_credential',
+        one_liner: 'Encrypt + save API key to local vault (BYOK red line: never leaves user node). Always after explain_provider_key.',
+        trigger_examples: [
+            'After user pastes key following explain_provider_key',
             '"把这个 key 存了"',
-            '"我现在配了哪些 key"',
+            '"更新我 OpenAI key"',
         ],
     },
     {
-        name: 'skillfm_safe',
-        one_liner: 'SAFE injection/bootstrap suite. Actions: setup_safe, uninstall_safe, unlock, help.',
+        name: 'skillfm_setup_gateway',
+        one_liner: 'Configure SkillFM gateway in user IDE (Claude Code/Cursor/Codex). Always {dry_run:true} first, then {dry_run:false}.',
         trigger_examples: [
-            '"注入 SAFE 规则"',
-            '"SkillFM 没触发，修一下"',
-            '"卸载 SkillFM SAFE"',
+            '"接入 SkillFM" / "装 SkillFM"',
+            '"配置 SkillFM" / "setup"',
+            '"怎么接 SkillFM"',
         ],
     },
 ];
@@ -83,7 +96,7 @@ export async function handleUnlockSkillFmBeacon(_input) {
             protocol: SKILLFM_PROTOCOL,
             tool_family: TOOL_FAMILY,
             session_unlocked: true,
-            recommended_entry_point: 'For first-time users: skillfm_beacon({action:"setup_gateway", dry_run:true}). For existing users: skillfm_beacon({action:"checkup"}).',
+            recommended_entry_point: 'For first-time users: skillfm_setup_gateway({dry_run:true}). For existing users: skillfm_checkup.',
         },
     };
 }

package/dist/mcp/tools/unlock.js.map

@@ -1 +1 @@
-{"version":3,"file":"unlock.js","sourceRoot":"","sources":["../../../src/mcp/tools/unlock.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,uEAAuE;AACvE,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,4DAA4D;AAC5D,kEAAkE;AAClE,2DAA2D;AAC3D,EAAE;AACF,wCAAwC;AACxC,mFAAmF;AACnF,2DAA2D;AAC3D,+BAA+B;AAC/B,8DAA8D;AAC9D,8BAA8B;AAC9B,wCAAwC;AACxC,EAAE;AACF,MAAM;AACN,+CAA+C;AAC/C,iDAAiD;AACjD,2DAA2D;AAC3D,yEAAyE;AACzE,EAAE;AACF,+CAA+C;AAqB/C,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;sEAmBsC,CAAC;AAEvE,MAAM,WAAW,GAAsB;IACrC;QACE,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,4GAA4G;QACvH,gBAAgB,EAAE;YAChB,eAAe;YACf,6BAA6B;YAC7B,yBAAyB;YACzB,2BAA2B;YAC3B,gBAAgB;YAChB,4BAA4B;SAC7B;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,yKAAyK;QACpL,gBAAgB,EAAE;YAChB,sBAAsB;YACtB,iBAAiB;YACjB,cAAc;YACd,eAAe;SAChB;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,oFAAoF;QAC/F,gBAAgB,EAAE;YAChB,cAAc;YACd,mBAAmB;YACnB,mBAAmB;SACpB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAe;IAEf,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,WAAW;YACxB,gBAAgB,EAAE,IAAI;YACtB,uBAAuB,EACrB,uIAAuI;SAC1I;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"unlock.js","sourceRoot":"","sources":["../../../src/mcp/tools/unlock.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,uEAAuE;AACvE,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,4DAA4D;AAC5D,kEAAkE;AAClE,2DAA2D;AAC3D,EAAE;AACF,wCAAwC;AACxC,mFAAmF;AACnF,2DAA2D;AAC3D,+BAA+B;AAC/B,8DAA8D;AAC9D,8BAA8B;AAC9B,wCAAwC;AACxC,EAAE;AACF,MAAM;AACN,+CAA+C;AAC/C,qDAAqD;AACrD,2DAA2D;AAC3D,yEAAyE;AACzE,EAAE;AACF,+CAA+C;AAqB/C,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;qEAkBqC,CAAC;AAEtE,MAAM,WAAW,GAAsB;IACrC;QACE,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,kGAAkG;QAC7G,gBAAgB,EAAE;YAChB,eAAe;YACf,6BAA6B;YAC7B,eAAe;SAChB;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,SAAS,EAAE,6FAA6F;QACxG,gBAAgB,EAAE;YAChB,yBAAyB;YACzB,gBAAgB;YAChB,mBAAmB;SACpB;KACF;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,SAAS,EAAE,qHAAqH;QAChI,gBAAgB,EAAE;YAChB,sBAAsB;YACtB,iBAAiB;YACjB,kBAAkB;SACnB;KACF;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,SAAS,EAAE,mHAAmH;QAC9H,gBAAgB,EAAE;YAChB,sDAAsD;YACtD,cAAc;YACd,kBAAkB;SACnB;KACF;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,SAAS,EAAE,sHAAsH;QACjI,gBAAgB,EAAE;YAChB,4BAA4B;YAC5B,wBAAwB;YACxB,eAAe;SAChB;KACF;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAe;IAEf,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,QAAQ,EAAE,gBAAgB;YAC1B,WAAW,EAAE,WAAW;YACxB,gBAAgB,EAAE,IAAI;YACtB,uBAAuB,EACrB,mGAAmG;SACtG;KACF,CAAC;AACJ,CAAC"}

package/dist/mcp-stdio/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp-stdio/server.ts"],"names":[],"mappings":";AAyBA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAQtF,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMzF,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAQ5E;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CjH;AAWD,yCAAyC;AACzC,wBAAgB,uBAAuB,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAEtE;AAuCD,KAAK,mBAAmB,GAAG,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,SAAS,KAAK,cAAc,CAAC;AAwRpG;;;GAGG;AACH,iBAAS,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAuzB9D;AA4BD,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAU1C"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/mcp-stdio/server.ts"],"names":[],"mappings":";AAyBA,OAAO,EAAE,SAAS,EAAoB,MAAM,yCAAyC,CAAC;AAQtF,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAMzF,OAAO,EAAmB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAS5E;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CA0CjH;AAWD,yCAAyC;AACzC,wBAAgB,uBAAuB,IAAI,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAEtE;AAuCD,KAAK,mBAAmB,GAAG,CAAC,KAAK,EAAE;IAAE,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAAG,SAAS,KAAK,cAAc,CAAC;AAEpG;;;GAGG;AACH,iBAAS,cAAc,CAAC,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAm5B9D;AA4BD,OAAO,EAAE,cAAc,EAAE,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,YAAY,EAAE,mBAAmB,EAAE,CAAC;AAEpC,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAU1C"}