hvip-mcp-server 0.5.0 → 0.6.1

package/dist/hub-server.js

@@ -3723,7 +3723,7 @@ var import_websocket_server = __toESM(require_websocket_server(), 1);
 // src/utils/logger.ts
 var LEVEL_EMOJI = {
   [0 /* DEBUG */]: "\u{1F50D}",
-  [1 /* INFO */]: "",
+  [1 /* INFO */]: "\u2139\uFE0F",
   [2 /* WARN */]: "\u26A0\uFE0F",
   [3 /* ERROR */]: "\u274C",
   [4 /* SILENT */]: ""
@@ -3778,7 +3778,11 @@ var AgentHub = class {
   rooms = /* @__PURE__ */ new Map();
   heartbeatTimer = null;
   version = "0.0.0";
+  startTime = 0;
   port = 0;
+  // public: updated after WS negotiate, read by hub for dashboard URL
+  registryCount = 0;
+  // set by hub-server after HubRegistry loads
   db = null;
   token = "";
   // PSK 鉴权令牌
@@ -3820,6 +3824,7 @@ var AgentHub = class {
   // ── 启动 ──
   start(port, host2 = "0.0.0.0", version = "0.0.0", token2 = "") {
     this.version = version;
+    this.startTime = Date.now();
     this.token = token2;
     const startWss = (p) => {
       return new Promise((resolve) => {
@@ -4415,7 +4420,7 @@ var AgentHub = class {
       branch: t.branch
     }));
     const rooms = this.getRooms();
-    return { agents, tasks, rooms, agentCount: agents.length, taskCount: tasks.length };
+    return { agents, tasks, rooms, agentCount: agents.length, taskCount: tasks.length, version: this.version, uptime: this.startTime ? Math.floor((Date.now() - this.startTime) / 1e3) : 0, registry: `${this.registryCount || 24} plugins` };
   }
   // ── 关闭 ──
   close() {
@@ -4986,9 +4991,11 @@ var HubCosts = class {
       const entries = all.filter((e) => e.timestamp.startsWith(slot));
       hourly.push({ hour: slot, calls: entries.length, cost: entries.reduce((s, e) => s + e.cost, 0) });
     }
+    const budget = parseFloat(process.env.HUB_DAILY_BUDGET || "5.00");
     return {
       today: sum(todayEntries),
       total: sum(all),
+      budget,
       byModel,
       byAgent,
       hourly
@@ -5005,11 +5012,29 @@ var HubCosts = class {
 var CircuitBreaker = class {
   circuits = /* @__PURE__ */ new Map();
   failureThreshold = 3;
-  cooldownMs = 6e4;
-  // 1 minute default
+  baseCooldownMs = 6e4;
+  // 1 minute base
+  maxCooldownMs = 3e5;
+  // 5 minutes max
+  listeners = /* @__PURE__ */ new Set();
   constructor(opts) {
     if (opts?.failureThreshold) this.failureThreshold = opts.failureThreshold;
-    if (opts?.cooldownMs) this.cooldownMs = opts.cooldownMs;
+    if (opts?.cooldownMs) this.baseCooldownMs = opts.cooldownMs;
+    if (opts?.maxCooldownMs) this.maxCooldownMs = opts.maxCooldownMs;
+  }
+  /** 注册状态变更监听 */
+  onStateChange(handler) {
+    this.listeners.add(handler);
+    return () => this.listeners.delete(handler);
+  }
+  /** 内部通知 */
+  notify(event, name, entry) {
+    for (const h of this.listeners) {
+      try {
+        h(event, name, entry);
+      } catch {
+      }
+    }
   }
   /** 获取或创建熔断器 */
   get(name) {
@@ -5024,7 +5049,8 @@ var CircuitBreaker = class {
         lastFailure: null,
         lastSuccess: null,
         openedAt: null,
-        cooldownMs: this.cooldownMs
+        cooldownMs: this.baseCooldownMs,
+        backoffMultiplier: 1
       };
       this.circuits.set(name, c);
     }
@@ -5039,6 +5065,7 @@ var CircuitBreaker = class {
       const elapsed = Date.now() - new Date(c.openedAt).getTime();
       if (elapsed >= c.cooldownMs) {
         c.state = "HALF_OPEN";
+        this.notify("half_open", name, c);
         return true;
       }
     }
@@ -5052,27 +5079,36 @@ var CircuitBreaker = class {
     if (c.state === "HALF_OPEN") {
       c.state = "CLOSED";
       c.failures = 0;
+      c.backoffMultiplier = 1;
+      this.notify("closed", name, c);
     }
     if (c.state === "CLOSED") {
       c.failures = 0;
     }
   }
-  /** 调用失败 */
+  /** 调用失败 — 带指数退避 */
   onFailure(name) {
     const c = this.get(name);
     c.failures++;
     c.failureCount++;
     c.lastFailure = (/* @__PURE__ */ new Date()).toISOString();
     if (c.failures >= this.failureThreshold) {
+      const backoffMs = Math.min(
+        this.baseCooldownMs * Math.pow(2, c.backoffMultiplier - 1),
+        this.maxCooldownMs
+      );
+      c.cooldownMs = backoffMs;
+      c.backoffMultiplier++;
       c.state = "OPEN";
       c.openedAt = (/* @__PURE__ */ new Date()).toISOString();
+      this.notify("opened", name, c);
     }
   }
-  /** 包裹一个异步函数 */
-  async wrap(name, fn, fallback) {
+  /** 包裹一个异步函数，支持重试和 fallback */
+  async wrap(name, fn, fallback, retries = 0) {
     if (!this.canCall(name)) {
       if (fallback) return fallback();
-      throw new Error(`Circuit OPEN: ${name}`);
+      throw new Error(`Circuit OPEN: ${name} (\u51B7\u5374\u4E2D, ${this.get(name).cooldownMs}ms)`);
     }
     try {
       const result = await fn();
@@ -5080,6 +5116,11 @@ var CircuitBreaker = class {
       return result;
     } catch (e) {
       this.onFailure(name);
+      if (retries > 0) {
+        const wait = Math.min(1e3 * Math.pow(2, 3 - retries), 9e3);
+        await new Promise((r) => setTimeout(r, wait));
+        return this.wrap(name, fn, fallback, retries - 1);
+      }
       if (fallback) return fallback();
       throw e;
     }
@@ -5088,16 +5129,31 @@ var CircuitBreaker = class {
   status() {
     return [...this.circuits.values()];
   }
-  /** 重置指定熔断器 */
+  /** 重置指定熔断器 — 立即清除状态 */
   reset(name) {
-    this.circuits.delete(name);
+    const c = this.circuits.get(name);
+    if (c) {
+      this.notify("reset", name, c);
+      this.circuits.delete(name);
+    }
+  }
+  /** 重置所有熔断器 */
+  resetAll() {
+    for (const [name, c] of this.circuits) {
+      this.notify("reset", name, c);
+    }
+    this.circuits.clear();
   }
 };
-var circuitBreaker = new CircuitBreaker({ failureThreshold: 3, cooldownMs: 6e4 });
+var circuitBreaker = new CircuitBreaker({
+  failureThreshold: 3,
+  cooldownMs: 6e4,
+  maxCooldownMs: 3e5
+});
 
 // src/hub-server.ts
-var import_node_fs2 = require("node:fs");
-var import_node_path2 = require("node:path");
+var import_node_fs3 = require("node:fs");
+var import_node_path3 = require("node:path");
 
 // src/adapters/hub-templates.ts
 var TASK_TEMPLATES = [
@@ -5934,10 +5990,150 @@ NEXT: <\u540E\u7EED\u8DDF\u8FDB\u5EFA\u8BAE>
   }
 ];
 
+// src/adapters/api-credits.ts
+var import_node_sqlite = require("node:sqlite");
+var import_node_fs2 = require("node:fs");
+var import_node_path2 = require("node:path");
+var log5 = logger("Credits");
+var CREDIT_COST = {
+  READ: 1,
+  WRITE: 5,
+  FUND_TRANSFER: 10,
+  ADMIN: 20
+};
+var ApiCredits = class {
+  db;
+  cache = /* @__PURE__ */ new Map();
+  cacheLoaded = false;
+  constructor(dbPath2 = ".hub/api-credits.db") {
+    const dir = (0, import_node_path2.dirname)(dbPath2);
+    if (!(0, import_node_fs2.existsSync)(dir)) (0, import_node_fs2.mkdirSync)(dir, { recursive: true });
+    this.db = new import_node_sqlite.DatabaseSync(dbPath2);
+    this.db.exec("PRAGMA journal_mode=WAL");
+    this.init();
+  }
+  init() {
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS api_keys (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        key TEXT UNIQUE NOT NULL,
+        client_name TEXT NOT NULL,
+        credits REAL NOT NULL DEFAULT 0,
+        total_used INTEGER NOT NULL DEFAULT 0,
+        enabled INTEGER NOT NULL DEFAULT 1,
+        created_at TEXT NOT NULL DEFAULT (datetime('now')),
+        last_used_at TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_api_keys_key ON api_keys(key);
+    `);
+    this.loadCache();
+  }
+  loadCache() {
+    const rows = this.db.prepare("SELECT * FROM api_keys").all();
+    for (const r of rows) this.cache.set(r.key, r);
+    this.cacheLoaded = true;
+    log5.info(`\u5DF2\u52A0\u8F7D ${rows.length} \u4E2A API Key`);
+  }
+  /** 查找 Key — 缓存命中或直接查 DB */
+  lookup(key) {
+    if (!this.cacheLoaded) this.loadCache();
+    const cached = this.cache.get(key);
+    if (cached) return cached;
+    const row = this.db.prepare("SELECT * FROM api_keys WHERE key = ?").get(key);
+    if (row) {
+      this.cache.set(key, row);
+      return row;
+    }
+    return null;
+  }
+  /** 校验并扣费 */
+  deduct(key, riskLevel) {
+    const record = this.lookup(key);
+    if (!record) return { ok: false, error: "\u65E0\u6548\u7684 API Key" };
+    if (!record.enabled) return { ok: false, error: "API Key \u5DF2\u7981\u7528" };
+    const cost = CREDIT_COST[riskLevel] || 1;
+    if (record.credits < cost) return { ok: false, error: `\u79EF\u5206\u4E0D\u8DB3 (\u9700\u8981 ${cost}\uFF0C\u5269\u4F59 ${record.credits})` };
+    record.credits -= cost;
+    record.totalUsed++;
+    record.lastUsedAt = (/* @__PURE__ */ new Date()).toISOString();
+    this.db.prepare("UPDATE api_keys SET credits = ?, total_used = ?, last_used_at = ? WHERE id = ?").run(record.credits, record.totalUsed, record.lastUsedAt, record.id);
+    return { ok: true, remaining: record.credits };
+  }
+  /** 管理：创建 Key */
+  createKey(clientName, initialCredits = 1e3) {
+    const key = "hvip-" + Array.from(
+      { length: 32 },
+      () => "abcdefghijklmnopqrstuvwxyz0123456789"[Math.floor(Math.random() * 36)]
+    ).join("");
+    const result = this.db.prepare(
+      "INSERT INTO api_keys (key, client_name, credits) VALUES (?, ?, ?)"
+    ).run(key, clientName, initialCredits);
+    const record = {
+      id: result.lastInsertRowid,
+      key,
+      clientName,
+      credits: initialCredits,
+      totalUsed: 0,
+      enabled: true,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      lastUsedAt: null
+    };
+    this.cache.set(key, record);
+    return record;
+  }
+  /** 管理：充值 */
+  topUp(key, amount) {
+    const record = this.lookup(key);
+    if (!record) return { ok: false, error: "Key \u4E0D\u5B58\u5728" };
+    if (amount <= 0) return { ok: false, error: "\u5145\u503C\u91D1\u989D\u5FC5\u987B > 0" };
+    record.credits += amount;
+    this.db.prepare("UPDATE api_keys SET credits = ? WHERE id = ?").run(record.credits, record.id);
+    return { ok: true, newBalance: record.credits };
+  }
+  /** 管理：启用/禁用 Key */
+  setEnabled(key, enabled) {
+    const record = this.lookup(key);
+    if (!record) return false;
+    record.enabled = enabled;
+    this.db.prepare("UPDATE api_keys SET enabled = ? WHERE id = ?").run(enabled ? 1 : 0, record.id);
+    return true;
+  }
+  /** 管理：列出所有 Key (含 Key 前缀，完整 Key 仅创建时返回) */
+  listAll() {
+    return [...this.cache.values()].map((r) => ({
+      id: r.id,
+      clientName: r.clientName,
+      credits: r.credits,
+      totalUsed: r.totalUsed,
+      enabled: r.enabled,
+      createdAt: r.createdAt,
+      lastUsedAt: r.lastUsedAt,
+      keyPrefix: r.key.slice(0, 12) + "..." + r.key.slice(-8)
+    }));
+  }
+  /** 客户端：查询余额 */
+  getBalance(key) {
+    const record = this.lookup(key);
+    if (!record) return null;
+    return { clientName: record.clientName, credits: record.credits, totalUsed: record.totalUsed };
+  }
+  close() {
+    try {
+      this.db.close();
+    } catch {
+    }
+  }
+};
+var instance = null;
+function getApiCredits(dbPath2) {
+  if (!instance) instance = new ApiCredits(dbPath2);
+  return instance;
+}
+
 // src/hub-server.ts
-var envPath = (0, import_node_path2.join)(process.cwd(), ".env");
-if ((0, import_node_fs2.existsSync)(envPath)) {
-  (0, import_node_fs2.readFileSync)(envPath, "utf-8").split(/\r?\n/).forEach((line) => {
+var envPath = (0, import_node_path3.join)(process.cwd(), ".env");
+if ((0, import_node_fs3.existsSync)(envPath)) {
+  (0, import_node_fs3.readFileSync)(envPath, "utf-8").split(/\r?\n/).forEach((line) => {
     const hashIdx = line.indexOf("#");
     if (hashIdx >= 0) line = line.substring(0, hashIdx);
     const m = line.match(/^\s*([^#\s=]+)\s*=\s*(.*)$/);
@@ -5951,11 +6147,11 @@ if ((0, import_node_fs2.existsSync)(envPath)) {
     }
   });
 }
-var VERSION = "0.4.3";
+var VERSION = "0.6.1";
 function getDashboardHtml(host2, port) {
-  const paths = [(0, import_node_path2.join)(__dirname, "web", "dashboard.html"), (0, import_node_path2.join)(__dirname, "..", "src", "web", "dashboard.html")];
+  const paths = [(0, import_node_path3.join)(__dirname, "web", "dashboard.html"), (0, import_node_path3.join)(__dirname, "..", "src", "web", "dashboard.html")];
   for (const p of paths) {
-    if ((0, import_node_fs2.existsSync)(p)) return (0, import_node_fs2.readFileSync)(p, "utf-8").replace("HUB_HOST", host2).replace("WS_PORT = 0", "WS_PORT = " + port);
+    if ((0, import_node_fs3.existsSync)(p)) return (0, import_node_fs3.readFileSync)(p, "utf-8").replace("HUB_HOST", host2).replace("WS_PORT = 0", "WS_PORT = " + port);
   }
   return "<html><body><h2>dashboard.html not found</h2></body></html>";
 }
@@ -5970,7 +6166,7 @@ var wsPort = parseInt(flag("port") || process.env.HUB_PORT || "9321", 10);
 var host = flag("host") || process.env.HUB_HOST || "127.0.0.1";
 var webPort = parseInt(flag("web-port") || process.env.HUB_WEB_PORT || "3000", 10);
 var dbPath = flag("db") || process.env.HUB_DB_PATH || ".hub/hub.db";
-var log5 = logger("Hub");
+var log6 = logger("Hub");
 var anthropicKey = process.env.ANTHROPIC_API_KEY || "";
 var openaiKey = process.env.OPENAI_API_KEY || "";
 var openaiBase = process.env.OPENAI_BASE_URL || "https://api.openai.com/v1";
@@ -5986,7 +6182,7 @@ var MAX_CONCURRENT_WORKERS = 3;
 function spawnWorker(taskId) {
   const activeWorkers = workers.filter((w) => w.exitCode === null && !w.killed).length;
   if (activeWorkers >= MAX_CONCURRENT_WORKERS) {
-    log5.warn(`Worker \u5E76\u53D1\u4E0A\u9650 (${MAX_CONCURRENT_WORKERS})\uFF0C${taskId} \u7B49\u5F85\u4E0B\u6B21\u8C03\u5EA6`);
+    log6.warn(`Worker \u5E76\u53D1\u4E0A\u9650 (${MAX_CONCURRENT_WORKERS})\uFF0C${taskId} \u7B49\u5F85\u4E0B\u6B21\u8C03\u5EA6`);
     return { ok: false, error: `\u5E76\u53D1\u4E0A\u9650 ${MAX_CONCURRENT_WORKERS}\uFF0C\u5F53\u524D ${activeWorkers} \u6D3B\u8DC3` };
   }
   const hubUrl = `ws://127.0.0.1:${wsPort}`;
@@ -6000,23 +6196,23 @@ function spawnWorker(taskId) {
       promptB64 = Buffer.from(p, "utf-8").toString("base64");
     }
   }
-  const workerArgs = ["dist/hub-worker.js", "--task", taskId, "--hub", hubUrl, "--repo", repoPath, "--web-port", String(webPort)];
+  const workerArgs = ["dist/hub-worker-v2.js", "--task", taskId, "--hub", hubUrl, "--repo", repoPath, "--web-port", String(webPort)];
   if (promptB64) workerArgs.push("--prompt-b64", promptB64);
   try {
     const worker = (0, import_node_child_process.spawn)("node", workerArgs, { cwd: repoPath, stdio: "pipe", detached: true, windowsHide: true });
     worker.stdout?.on("data", (d) => process.stderr.write(`[Worker-${taskId}] ${d}`));
     worker.stderr?.on("data", (d) => process.stderr.write(`[Worker-${taskId}] ${d}`));
-    worker.on("error", (e) => log5.error(`Worker \u542F\u52A8\u5931\u8D25: ${e.message}`));
+    worker.on("error", (e) => log6.error(`Worker \u542F\u52A8\u5931\u8D25: ${e.message}`));
     worker.on("close", (code) => {
-      log5.info(`Worker-${taskId} \u9000\u51FA (${code})`);
+      log6.info(`Worker-${taskId} \u9000\u51FA (${code})`);
       const idx = workers.indexOf(worker);
       if (idx >= 0) workers.splice(idx, 1);
     });
     workers.push(worker);
-    log5.info(`\u6D3B\u8DC3 Worker: ${workers.length}`);
+    log6.info(`\u6D3B\u8DC3 Worker: ${workers.length}`);
     return { ok: true, workerPid: worker.pid };
   } catch (e) {
-    log5.error(`Worker \u542F\u52A8\u5F02\u5E38: ${e.message}`);
+    log6.error(`Worker \u542F\u52A8\u5F02\u5E38: ${e.message}`);
     return { ok: false, error: e.message };
   }
 }
@@ -6049,21 +6245,21 @@ function startHttpServer() {
       return;
     }
     if (_req.method === "GET" && _req.url?.startsWith("/v2/")) {
-      const v2Dir = (0, import_node_path2.join)(__dirname, "..", "dashboard-v2", "dist");
+      const v2Dir = (0, import_node_path3.join)(__dirname, "..", "dashboard-v2", "dist");
       let filePath;
       if (_req.url === "/v2/") {
-        filePath = (0, import_node_path2.join)(v2Dir, "index.html");
+        filePath = (0, import_node_path3.join)(v2Dir, "index.html");
       } else {
-        filePath = (0, import_node_path2.join)(v2Dir, _req.url.replace(/^\/v2\//, ""));
+        filePath = (0, import_node_path3.join)(v2Dir, _req.url.replace(/^\/v2\//, ""));
       }
-      if (!(0, import_node_fs2.existsSync)(filePath) || !filePath.includes(".")) {
-        filePath = (0, import_node_path2.join)(v2Dir, "index.html");
+      if (!(0, import_node_fs3.existsSync)(filePath) || !filePath.includes(".")) {
+        filePath = (0, import_node_path3.join)(v2Dir, "index.html");
       }
-      if ((0, import_node_fs2.existsSync)(filePath)) {
+      if ((0, import_node_fs3.existsSync)(filePath)) {
         const ext = filePath.split(".").pop() || "html";
         const mime = { html: "text/html; charset=utf-8", js: "application/javascript", css: "text/css", svg: "image/svg+xml", png: "image/png", ico: "image/x-icon" };
         res.writeHead(200, { "Content-Type": mime[ext] || "application/octet-stream" });
-        res.end((0, import_node_fs2.readFileSync)(filePath));
+        res.end((0, import_node_fs3.readFileSync)(filePath));
       } else {
         res.writeHead(404);
         res.end("dashboard-v2 not found");
@@ -6071,11 +6267,11 @@ function startHttpServer() {
       return;
     }
     if (_req.method === "GET" && _req.url === "/chat") {
-      const paths = [(0, import_node_path2.join)(__dirname, "web", "index.html"), (0, import_node_path2.join)(__dirname, "..", "src", "web", "index.html")];
+      const paths = [(0, import_node_path3.join)(__dirname, "web", "index.html"), (0, import_node_path3.join)(__dirname, "..", "src", "web", "index.html")];
       for (const p of paths) {
-        if ((0, import_node_fs2.existsSync)(p)) {
+        if ((0, import_node_fs3.existsSync)(p)) {
           res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-          res.end((0, import_node_fs2.readFileSync)(p, "utf-8"));
+          res.end((0, import_node_fs3.readFileSync)(p, "utf-8"));
           return;
         }
       }
@@ -6117,11 +6313,9 @@ function startHttpServer() {
           }
           agentHub.registerTask(taskId, title || taskId, promptB64 || void 0);
           db?.saveTask({ taskId, status: "unassigned", title: title || taskId });
-          let spawned = false;
-          let workerPid = 0;
-          log5.info(`\u65B0\u4EFB\u52A1: ${taskId} "${title}"${spawned ? " \u{1F916} \u5DF2\u62C9\u8D77" : ""}`);
+          log6.info(`\u65B0\u4EFB\u52A1: ${taskId} "${title}"`);
           res.writeHead(201, { "Content-Type": "application/json; charset=utf-8" });
-          res.end(JSON.stringify({ ok: true, taskId, title, spawned, workerPid }));
+          res.end(JSON.stringify({ ok: true, taskId, title }));
         } catch {
           res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
           res.end(JSON.stringify({ error: "JSON \u89E3\u6790\u5931\u8D25" }));
@@ -6176,8 +6370,15 @@ function startHttpServer() {
       res.end(JSON.stringify(entries));
       return;
     }
-    if (_req.method === "GET" && _req.url === "/api/memory") {
-      const entries = memory.recent(30);
+    if (_req.method === "GET" && (_req.url === "/api/memory" || _req.url?.startsWith("/api/memory?"))) {
+      const url = _req.url.startsWith("/api/memory?") ? new import_node_url.URL(_req.url, `http://${host}:${webPort}`) : null;
+      const type = url?.searchParams.get("type") || "";
+      let entries;
+      if (type && type !== "all" && ["memory", "doc", "directive", "skill", "strategy"].includes(type)) {
+        entries = memory.byType(type, 30);
+      } else {
+        entries = memory.recent(30);
+      }
       res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
       res.end(JSON.stringify(entries));
       return;
@@ -6268,10 +6469,10 @@ function startHttpServer() {
       return;
     }
     if (_req.method === "GET" && _req.url === "/api/traders") {
-      const stateFile = (0, import_node_path2.join)(process.cwd(), ".hub", "trader-state.json");
-      if ((0, import_node_fs2.existsSync)(stateFile)) {
+      const stateFile = (0, import_node_path3.join)(process.cwd(), ".hub", "trader-state.json");
+      if ((0, import_node_fs3.existsSync)(stateFile)) {
         res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
-        res.end((0, import_node_fs2.readFileSync)(stateFile, "utf-8"));
+        res.end((0, import_node_fs3.readFileSync)(stateFile, "utf-8"));
       } else {
         res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
         res.end(JSON.stringify({ traders: {}, history: [], round: 0 }));
@@ -6279,22 +6480,39 @@ function startHttpServer() {
       return;
     }
     if (_req.method === "GET" && _req.url === "/api/traders/leaderboard") {
-      const stateFile = (0, import_node_path2.join)(process.cwd(), ".hub", "trader-state.json");
-      if ((0, import_node_fs2.existsSync)(stateFile)) {
-        const state = JSON.parse((0, import_node_fs2.readFileSync)(stateFile, "utf-8"));
-        const rankings = Object.values(state.traders || {}).map((t) => ({
-          id: t.id,
-          name: t.name,
-          emoji: t.emoji,
-          title: t.title,
-          style: t.style,
-          capital: t.capital,
-          totalPnl: t.totalPnl,
-          totalPnlPct: t.totalPnlPct,
-          tradeCount: t.tradeCount || 0,
-          winCount: t.winCount || 0,
-          openPositions: (t.openPositions || []).filter((p) => !p.closed).length
-        })).sort((a, b) => b.totalPnlPct - a.totalPnlPct);
+      const stateFile = (0, import_node_path3.join)(process.cwd(), ".hub", "trader-state.json");
+      if ((0, import_node_fs3.existsSync)(stateFile)) {
+        const state = JSON.parse((0, import_node_fs3.readFileSync)(stateFile, "utf-8"));
+        const rankings = Object.values(state.traders || {}).map((t) => {
+          const positions = (t.openPositions || []).filter((p) => !p.closed);
+          const initialCapital = 1e4;
+          return {
+            id: t.id,
+            name: t.name,
+            emoji: t.emoji,
+            capital: t.capital,
+            equity: t.equity || t.capital,
+            totalPnl: t.totalPnl,
+            totalPnlPct: t.totalPnlPct,
+            unrealizedPnl: t.unrealizedPnl || 0,
+            tradeCount: t.tradeCount || 0,
+            winCount: t.winCount || 0,
+            totalFees: t.totalFees || 0,
+            totalFunding: t.totalFunding || 0,
+            openPositions: positions.length,
+            positions: positions.map((p) => ({
+              symbol: p.symbol,
+              direction: p.direction,
+              leverage: p.leverage,
+              entryPrice: p.entryPrice,
+              currentPrice: p.currentPrice,
+              margin: p.margin,
+              liquidationPrice: p.liquidationPrice,
+              unrealizedPnl: p.unrealizedPnl,
+              unrealizedPnlPct: p.unrealizedPnlPct
+            }))
+          };
+        }).sort((a, b) => b.totalPnlPct - a.totalPnlPct);
         res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
         res.end(JSON.stringify(rankings));
       } else {
@@ -6303,11 +6521,48 @@ function startHttpServer() {
       }
       return;
     }
+    if (_req.method === "GET" && _req.url?.startsWith("/api/traders/history")) {
+      const url = new import_node_url.URL(_req.url, `http://${host}:${webPort}`);
+      const traderId = url.searchParams.get("trader") || "";
+      const limit = parseInt(url.searchParams.get("limit") || "50");
+      const histFile = (0, import_node_path3.join)(process.cwd(), ".hub", "trade-history.jsonl");
+      if ((0, import_node_fs3.existsSync)(histFile)) {
+        try {
+          const lines = (0, import_node_fs3.readFileSync)(histFile, "utf-8").trim().split("\n");
+          let entries = lines.map((l) => {
+            try {
+              return JSON.parse(l);
+            } catch {
+              return null;
+            }
+          }).filter(Boolean);
+          if (traderId) entries = entries.filter((e) => e.traderId === traderId);
+          entries = entries.slice(-limit);
+          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify(entries));
+        } catch {
+          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify([]));
+        }
+      } else {
+        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify([]));
+      }
+      return;
+    }
+    if (_req.method === "GET" && _req.url === "/api/traders/risk") {
+      const mode = process.env.AI_TRADER_MODE || "simulate";
+      const maxOrder = parseFloat(process.env.TRADER_MAX_ORDER_USD || "100");
+      const dailyLimit = parseFloat(process.env.TRADER_DAILY_LOSS_LIMIT || "500");
+      res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+      res.end(JSON.stringify({ mode, maxOrderUsd: maxOrder, dailyLossLimit: dailyLimit }));
+      return;
+    }
     if (_req.method === "GET" && _req.url === "/api/signals") {
-      const sigFile = (0, import_node_path2.join)(process.cwd(), ".hub", "signals.json");
-      if ((0, import_node_fs2.existsSync)(sigFile)) {
+      const sigFile = (0, import_node_path3.join)(process.cwd(), ".hub", "signals.json");
+      if ((0, import_node_fs3.existsSync)(sigFile)) {
         res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
-        res.end((0, import_node_fs2.readFileSync)(sigFile, "utf-8"));
+        res.end((0, import_node_fs3.readFileSync)(sigFile, "utf-8"));
       } else {
         res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
         res.end(JSON.stringify({ signals: [], lastRun: null }));
@@ -6392,6 +6647,86 @@ function startHttpServer() {
       res.end(JSON.stringify({ circuits, openCount, healthy: openCount === 0 }));
       return;
     }
+    const apiCredits = getApiCredits();
+    if (_req.method === "GET" && _req.url === "/api/credits/balance") {
+      const key = _req.headers["authorization"]?.replace(/^Bearer\s+/i, "") || "";
+      const balance = apiCredits.getBalance(key);
+      if (!balance) {
+        res.writeHead(401, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify({ error: "\u65E0\u6548\u7684 API Key" }));
+      } else {
+        res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify(balance));
+      }
+      return;
+    }
+    if (_req.method === "GET" && _req.url === "/api/admin/keys") {
+      if (token && _req.headers["authorization"]?.replace(/^Bearer\s+/i, "") !== token) {
+        res.writeHead(401, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify({ error: "\u9700\u8981\u7BA1\u7406\u5458\u6743\u9650" }));
+        return;
+      }
+      res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+      res.end(JSON.stringify(apiCredits.listAll()));
+      return;
+    }
+    if (_req.method === "POST" && _req.url === "/api/admin/keys") {
+      if (token && _req.headers["authorization"]?.replace(/^Bearer\s+/i, "") !== token) {
+        res.writeHead(401, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify({ error: "\u9700\u8981\u7BA1\u7406\u5458\u6743\u9650" }));
+        return;
+      }
+      const chunks = [];
+      _req.on("data", (c) => chunks.push(c));
+      _req.on("end", () => {
+        try {
+          const { clientName, initialCredits } = JSON.parse(Buffer.concat(chunks).toString("utf-8"));
+          if (!clientName) {
+            res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
+            res.end(JSON.stringify({ error: "\u7F3A\u5C11 clientName" }));
+            return;
+          }
+          const record = apiCredits.createKey(clientName, initialCredits || 1e3);
+          res.writeHead(201, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify(record));
+        } catch {
+          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify({ error: "JSON \u89E3\u6790\u5931\u8D25" }));
+        }
+      });
+      return;
+    }
+    if (_req.method === "POST" && _req.url === "/api/admin/keys/topup") {
+      if (token && _req.headers["authorization"]?.replace(/^Bearer\s+/i, "") !== token) {
+        res.writeHead(401, { "Content-Type": "application/json; charset=utf-8" });
+        res.end(JSON.stringify({ error: "\u9700\u8981\u7BA1\u7406\u5458\u6743\u9650" }));
+        return;
+      }
+      const chunks = [];
+      _req.on("data", (c) => chunks.push(c));
+      _req.on("end", () => {
+        try {
+          const { key, amount } = JSON.parse(Buffer.concat(chunks).toString("utf-8"));
+          if (!key || !amount) {
+            res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
+            res.end(JSON.stringify({ error: "\u7F3A\u5C11 key \u6216 amount" }));
+            return;
+          }
+          const result = apiCredits.topUp(key, amount);
+          if (!result.ok) {
+            res.writeHead(404, { "Content-Type": "application/json; charset=utf-8" });
+            res.end(JSON.stringify({ error: result.error }));
+            return;
+          }
+          res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify({ ok: true, newBalance: result.newBalance }));
+        } catch {
+          res.writeHead(400, { "Content-Type": "application/json; charset=utf-8" });
+          res.end(JSON.stringify({ error: "JSON \u89E3\u6790\u5931\u8D25" }));
+        }
+      });
+      return;
+    }
     if (_req.method === "POST" && _req.url === "/mcp") {
       const chunks = [];
       _req.on("data", (c) => chunks.push(c));
@@ -6422,6 +6757,7 @@ function startHttpServer() {
               }
               result = JSON.stringify(parsed);
             } catch {
+              log6.warn("MCP \u54CD\u5E94\u683C\u5F0F\u89E3\u6790\u5931\u8D25");
             }
           }
           res.writeHead(200, { "Content-Type": "application/json; charset=utf-8" });
@@ -6516,8 +6852,15 @@ function startHttpServer() {
     res.writeHead(404, { "Content-Type": "application/json; charset=utf-8" });
     res.end(JSON.stringify({ error: "Not Found" }));
   });
+  httpServer.on("error", (err) => {
+    if (err.code === "EADDRINUSE") {
+      log6.error(`\u7AEF\u53E3 ${webPort} \u88AB\u5360\u7528\uFF0C\u5C1D\u8BD5 ${webPort + 1}`);
+    } else {
+      log6.error(`HTTP Server \u9519\u8BEF: ${err.message}`);
+    }
+  });
   httpServer.listen(webPort, host, () => {
-    log5.info(`\u{1F310} \u4EEA\u8868\u76D8 \u2192 http://${host}:${webPort}`);
+    log6.info(`\u{1F310} \u4EEA\u8868\u76D8 \u2192 http://${host}:${webPort}`);
   });
 }
 var schedules = [
@@ -6565,6 +6908,17 @@ var schedules = [
     failCount: 0,
     timer: null
   },
+  {
+    id: "sched-signals",
+    name: "\u{1F6A6} VBT\u4FE1\u53F7\u5237\u65B0",
+    interval: 4 * 36e5,
+    template: "vbt-signal-refresh",
+    params: { script: "scripts/refresh-signals.mjs" },
+    lastRun: 0,
+    count: 0,
+    failCount: 0,
+    timer: null
+  },
   // ════════ 24x7 守护岗 ════════
   {
     id: "guard-dashboard",
@@ -6650,7 +7004,7 @@ function runScheduledJob(job) {
     (t) => t.status === "assigned"
   ).filter((t) => t.taskId.startsWith(job.id + "-"));
   if (prevTasks.length > 0) {
-    log5.warn(`Scheduler: \u23ED\uFE0F  ${job.name} \u4E0A\u6B21\u4EFB\u52A1\u672A\u5B8C\u6210 (${prevTasks.map((t) => t.taskId).join(",")})\uFF0C\u8DF3\u8FC7`);
+    log6.warn(`Scheduler: \u23ED\uFE0F  ${job.name} \u4E0A\u6B21\u4EFB\u52A1\u672A\u5B8C\u6210 (${prevTasks.map((t) => t.taskId).join(",")})\uFF0C\u8DF3\u8FC7`);
     scheduleNext(job);
     return;
   }
@@ -6659,17 +7013,33 @@ function runScheduledJob(job) {
   ).filter((t) => t.taskId.startsWith(job.id + "-"));
   for (const o of orphans) {
     db?.saveTask({ taskId: o.taskId, status: "done", result: "[Scheduler] \u81EA\u52A8\u6E05\u7406\u5B64\u513F\u4EFB\u52A1" });
-    log5.warn(`Scheduler: \u{1F9F9} \u6E05\u7406\u5B64\u513F: ${o.taskId}`);
+    log6.warn(`Scheduler: \u{1F9F9} \u6E05\u7406\u5B64\u513F: ${o.taskId}`);
   }
   const taskId = `${job.id}-${Date.now().toString(36)}`;
   const title = `[\u5B9A\u65F6] ${job.name} #${job.count + 1}`;
-  log5.info(`Scheduler: \u23F0 ${job.name} \u2192 ${taskId}`);
+  if (job.template === "vbt-signal-refresh") {
+    log6.info(`Scheduler: \u{1F504} ${job.name}`);
+    try {
+      const { execSync: execSync2 } = require("node:child_process");
+      const out = execSync2(`node scripts/refresh-signals.mjs`, { cwd: process.cwd(), encoding: "utf-8", timeout: 6e4, windowsHide: true, maxBuffer: 2e5 });
+      log6.info(`Scheduler: ${job.name} \u5B8C\u6210 \u2014 ${out.trim().split("\n").length} \u884C\u8F93\u51FA`);
+    } catch (e) {
+      log6.error(`Scheduler: ${job.name} \u5931\u8D25: ${e.message}`);
+      job.failCount++;
+    }
+    job.count++;
+    job.lastRun = Date.now();
+    scheduleNext(job);
+    return;
+  }
+  log6.info(`Scheduler: \u23F0 ${job.name} \u2192 ${taskId}`);
   const tpl = TASK_TEMPLATES.find((t) => t.id === job.template);
   let promptB64 = "";
   if (tpl) {
     try {
       promptB64 = Buffer.from(tpl.buildPrompt(job.params), "utf-8").toString("base64");
     } catch {
+      log6.warn(`promptB64 \u6784\u5EFA\u5931\u8D25: ${job.taskId}`);
     }
   }
   taskMeta.set(taskId, { templateId: job.template, params: job.params });
@@ -6686,7 +7056,7 @@ function scheduleNext(job) {
 }
 function startScheduler() {
   for (const job of schedules) scheduleNext(job);
-  log5.info(`Scheduler: ${schedules.length} \u4E2A\u5B9A\u65F6\u4EFB\u52A1 (\u9996\u6B2130s\u540E\u89E6\u53D1\uFF0CChronos \u2192 V2 Worker \u96F6\u5F39\u7A97)`);
+  log6.info(`Scheduler: ${schedules.length} \u4E2A\u5B9A\u65F6\u4EFB\u52A1 (\u9996\u6B2130s\u540E\u89E6\u53D1\uFF0CChronos \u2192 V2 Worker \u96F6\u5F39\u7A97)`);
 }
 var banner = [
   `\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557`,
@@ -6701,38 +7071,47 @@ var db = new HubDB(dbPath);
 if (db.open()) {
   agentHub.setDB(db);
   const stats = db.stats();
-  log5.info(`DB \u72B6\u6001: ${stats.taskCount} tasks, ${stats.messageCount} messages`);
+  log6.info(`DB \u72B6\u6001: ${stats.taskCount} tasks, ${stats.messageCount} messages`);
 }
 var memoryPath = flag("memory-db") || process.env.HUB_MEMORY_DB || ".hub/memory.db";
 var memory = new HubMemory(memoryPath);
 var memOk = memory.open();
 if (memOk) {
   const ms = memory.stats();
-  log5.info(`\u{1F9E0} \u8BB0\u5FC6: ${ms.total} \u6761 (doc:${ms.byType.doc || 0} directive:${ms.byType.directive || 0} memory:${ms.byType.memory || 0} skill:${ms.byType.skill || 0})`);
+  log6.info(`\u{1F9E0} \u8BB0\u5FC6: ${ms.total} \u6761 (doc:${ms.byType.doc || 0} directive:${ms.byType.directive || 0} memory:${ms.byType.memory || 0} skill:${ms.byType.skill || 0})`);
 }
 var registryPath = flag("registry-db") || process.env.HUB_REGISTRY_DB || ".hub/registry.db";
 var registry = new HubRegistry(registryPath);
 var regOk = registry.open();
-if (!regOk) {
-  log5.warn(`\u26A0\uFE0F Registry \u6253\u5F00\u5931\u8D25\uFF0C\u5546\u5E97\u529F\u80FD\u4E0D\u53EF\u7528`);
+if (regOk) {
+  agentHub.registryCount = registry.all().length;
+} else {
+  log6.warn(`\u26A0\uFE0F Registry \u6253\u5F00\u5931\u8D25\uFF0C\u5546\u5E97\u529F\u80FD\u4E0D\u53EF\u7528`);
 }
 var costsPath = flag("costs-db") || process.env.HUB_COSTS_DB || ".hub/llm-costs.jsonl";
 var costTracker = new HubCosts(costsPath);
 agentHub.setCostTracker(costTracker);
-log5.info(`\u{1F4B0} \u6210\u672C\u8FFD\u8E2A: ${costsPath}`);
+log6.info(`\u{1F4B0} \u6210\u672C\u8FFD\u8E2A: ${costsPath}`);
 startHttpServer();
 startScheduler();
 var mcpProcess = null;
-try {
-  mcpProcess = (0, import_node_child_process.spawn)("node", ["dist/index.js", "start:http"], { cwd: process.cwd(), stdio: "pipe", detached: true, env: { ...process.env, PORT: "9222" } });
-  mcpProcess.stderr?.on("data", (d) => process.stderr.write(d));
-  log5.info("\u{1F6E0} MCP Server \u542F\u52A8\u4E2D \u2192 http://127.0.0.1:9222");
-} catch {
-  log5.warn("\u26A0\uFE0F MCP Server \u542F\u52A8\u5931\u8D25");
+if (process.env.HUB_SPAWN_MCP === "1") {
+  try {
+    mcpProcess = (0, import_node_child_process.spawn)("node", ["dist/index.js", "start:http"], { cwd: process.cwd(), stdio: "pipe", detached: true, windowsHide: true, env: { ...process.env, PORT: "9222" } });
+    mcpProcess.stderr?.on("data", (d) => process.stderr.write(d));
+    log6.info("\u{1F6E0} MCP Server \u542F\u52A8\u4E2D \u2192 http://127.0.0.1:9222");
+  } catch {
+    log6.warn("\u26A0\uFE0F MCP Server \u542F\u52A8\u5931\u8D25");
+  }
+} else {
+  log6.info("\u{1F6E0} MCP Server \u7531 PM2 \u72EC\u7ACB\u7BA1\u7406 (hvip-mcp :9222)\uFF0C\u8DF3\u8FC7\u5B50\u8FDB\u7A0B\u6D3E\u751F");
 }
 agentHub.start(wsPort, host, VERSION, token);
+setTimeout(() => {
+  wsPort = agentHub.port || wsPort;
+}, 2e3);
 function shutdown() {
-  log5.info("\u6B63\u5728\u5173\u95ED...");
+  log6.info("\u6B63\u5728\u5173\u95ED...");
   for (const w of workers) {
     try {
       w.kill();