@starreel/mcp 0.1.140 → 0.1.141

package/dist/client.js

@@ -23,7 +23,9 @@ const MIME_BY_EXT = {
     '.ogg': 'audio/ogg', '.flac': 'audio/flac',
 };
 const AUTH_BASE = process.env.STARREEL_AUTH_BASE ?? 'https://api.shortreelai.com';
-const LOC_BASE = process.env.STARREEL_LOC_BASE ?? 'https://translator.starreel.ai';
+// 本地化服务没有默认地址(2026-10-13)：原域名 translator.starreel.ai 的 DNS 曾悬空指向他人主机,
+// 而 loc() 会带 Bearer token 发请求——默认值指向不受控主机 = 把客户令牌送出去。必须显式配置。
+const LOC_BASE = process.env.STARREEL_LOC_BASE?.trim() || '';
 export class StarReelClient {
     apiKey;
     token = null;
@@ -66,8 +68,12 @@ export class StarReelClient {
         }
         return res;
     }
-    /** 本地化服务(translator.starreel.ai)的 JSON 调用。 */
+    /** 本地化服务(STARREEL_LOC_BASE)的 JSON 调用。未配置则直接拒绝,不发任何请求。 */
     async loc(path, init = {}) {
+        if (!LOC_BASE) {
+            throw new Error('StarReel localization service is not configured (STARREEL_LOC_BASE is unset). ' +
+                'This service is currently offline — check with StarReel before using localization tools.');
+        }
         // 网络层失败(DNS/TLS/超时)与业务 4xx/5xx 分开报——agent 拿到 "fetch failed"
         // 无从行动;点名服务与建议,它才能正确转述/重试/放弃。
         let res;

package/openapi.json

@@ -2,8 +2,8 @@
   "openapi": "3.1.0",
   "info": {
     "title": "StarReel Production API",
-    "version": "0.1.140",
-    "description": "Turn a script into a finished, downloadable short-drama episode over REST.\n\nPipeline: script → AI rewrite → cast/scenes/props extraction → storyboards → portraits & sheets + scene plates → keyframes → video shots → TTS → final cut (.mp4).\n\n**Billing is prepaid and agent-safe**: big-ticket stages are quote-then-generate (`quote_*` returns a `quote_id`). For video, quote == actual charge. For images the quote is a *range* — models billed per reference image are priced before those are assembled, so `estimated_points` is the upper bound (size the balance by it and a run never dies half-way) and `typical_points` is the usual cost; fixed-price models return the two equal. Insufficient balance returns 402 — nothing half-runs and the account never goes negative.\n\nAuth: exchange your API key at `POST /v1/agent/token` for a 15-minute bearer token.\n\nGenerated from the @starreel/mcp v0.1.140 tool surface (operationIds match MCP tool names 1:1)."
+    "version": "0.1.141",
+    "description": "Turn a script into a finished, downloadable short-drama episode over REST.\n\nPipeline: script → AI rewrite → cast/scenes/props extraction → storyboards → portraits & sheets + scene plates → keyframes → video shots → TTS → final cut (.mp4).\n\n**Billing is prepaid and agent-safe**: big-ticket stages are quote-then-generate (`quote_*` returns a `quote_id`). For video, quote == actual charge. For images the quote is a *range* — models billed per reference image are priced before those are assembled, so `estimated_points` is the upper bound (size the balance by it and a run never dies half-way) and `typical_points` is the usual cost; fixed-price models return the two equal. Insufficient balance returns 402 — nothing half-runs and the account never goes negative.\n\nAuth: exchange your API key at `POST /v1/agent/token` for a 15-minute bearer token.\n\nGenerated from the @starreel/mcp v0.1.141 tool surface (operationIds match MCP tool names 1:1)."
   },
   "servers": [
     {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@starreel/mcp",
-  "version": "0.1.140",
+  "version": "0.1.141",
   "mcpName": "ai.starreel/starreel",
   "description": "StarReel MCP server — drive the AI short-drama production pipeline (script → storyboards → frames → video → final cut) from Claude, Cursor, or any MCP client",
   "license": "MIT",

package/server.json

@@ -2,13 +2,13 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
   "name": "ai.starreel/starreel",
   "description": "Turn a script into a finished, downloadable short-drama episode — via MCP or REST.",
-  "version": "0.1.140",
+  "version": "0.1.141",
   "websiteUrl": "https://starreel.ai",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "@starreel/mcp",
-      "version": "0.1.140",
+      "version": "0.1.141",
       "transport": {
         "type": "stdio"
       },