midnight-mcp 0.2.19 → 0.2.21

package/README.md

@@ -183,7 +183,7 @@ Quick references available offline:
 
 ## Indexed Repositories
 
-The API indexes **102+ Midnight repositories** from the entire Midnight ecosystem:
+The API indexes **115+ Midnight repositories** from the entire Midnight ecosystem:
 
 | Category                 | Count | Key Repositories                                                                 |
 | ------------------------ | ----- | -------------------------------------------------------------------------------- |
@@ -192,15 +192,15 @@ The API indexes **102+ Midnight repositories** from the entire Midnight ecosyste
 | **Core Infrastructure**  | 9     | `midnight-node`, `midnight-indexer`, `midnight-ledger`, `midnight-zk`            |
 | **ZK & Cryptography**    | 6     | `midnight-trusted-setup`, `fri`, `galois_recursion`, `pluto_eris`                |
 | **Documentation**        | 5     | `midnight-docs`, `midnight-improvement-proposals`, `midnight-architecture`       |
-| **Examples & Templates** | 8     | `example-counter`, `example-bboard`, `example-dex`, `example-DAO`                |
+| **Examples & Templates** | 18    | `example-counter`, `example-bboard`, `example-kitties`, `example-zkloan`         |
 | **Identity**             | 5     | `midnight-did`, `midnight-did-resolver`, `midnight-verifiable-credentials`       |
-| **Developer Tools**      | 4     | `setup-compact-action`, `upload-sarif-github-action`, `midnight-dev-utils`       |
+| **Developer Tools**      | 5     | `setup-compact-action`, `midnight-dev-utils`, `midnight-local-dev`               |
 | **Solutions & Apps**     | 7     | `midnight-solutions`, `midnight-website-next`, `nightcap`, `ocp`                 |
 | **Glacier Drop**         | 15    | `midnight-glacier-drop-tools`, `gd-claim-api`, `gd-claim-portal`                 |
-| **Partners**             | 14    | OpenZeppelin, BrickTowers, MeshJS, PaimaStudios, hackathon winners               |
+| **Partners & Community** | 20    | OpenZeppelin, BrickTowers, MeshJS, PaimaStudios, hackathon winners, Olanetsoft   |
 | **Other**                | 18+   | Contracts, bridges, token distribution, monitoring, QA tools, community projects |
 
-All **non-archived** repositories from the `midnightntwrk` organization plus community partners. See [api/README.md](api/README.md#indexed-repositories-102) for the complete list.
+All **non-archived** repositories from the `midnightntwrk` organization plus community partners. See [api/README.md](api/README.md#indexed-repositories-115) for the complete list.
 
 ---
 

package/dist/bin.js

@@ -2,10 +2,10 @@
 import {
   startHttpServer,
   startServer
-} from "./chunk-4CUN6SQZ.js";
+} from "./chunk-T2CXHJAO.js";
 import {
   setOutputFormat
-} from "./chunk-OYH7MAIC.js";
+} from "./chunk-YDH6CRK3.js";
 
 // src/bin.ts
 import { config } from "dotenv";
@@ -13,7 +13,7 @@ import { resolve } from "path";
 import yargs from "yargs";
 import { hideBin } from "yargs/helpers";
 config({ path: resolve(process.cwd(), ".env") });
-var CURRENT_VERSION = "0.2.19";
+var CURRENT_VERSION = "0.2.21";
 process.on("uncaughtException", (error) => {
   console.error("Uncaught exception:", error);
   process.exit(1);

package/dist/{chunk-4CUN6SQZ.js → chunk-T2CXHJAO.js}

@@ -5,7 +5,6 @@ import {
   createCacheKey,
   fileCache,
   formatErrorResponse,
-  formatRateLimitStatus,
   getHealthStatus,
   getQuickHealthStatus,
   getRateLimitStatus,
@@ -25,7 +24,7 @@ import {
   validateNumber,
   validateQuery,
   vectorStore
-} from "./chunk-OYH7MAIC.js";
+} from "./chunk-YDH6CRK3.js";
 
 // src/tools/search/schemas.ts
 import { z } from "zod";
@@ -1605,8 +1604,55 @@ var REPO_ALIASES = {
   bboard: { owner: "midnightntwrk", repo: "example-bboard" },
   "example-dex": { owner: "midnightntwrk", repo: "example-dex" },
   dex: { owner: "midnightntwrk", repo: "example-dex" },
+  "example-hello-world": {
+    owner: "midnightntwrk",
+    repo: "example-hello-world"
+  },
+  "hello-world": { owner: "midnightntwrk", repo: "example-hello-world" },
+  "example-kitties": { owner: "midnightntwrk", repo: "example-kitties" },
+  kitties: { owner: "midnightntwrk", repo: "example-kitties" },
+  cryptokitties: { owner: "midnightntwrk", repo: "example-kitties" },
+  "example-nft-contracts": {
+    owner: "midnightntwrk",
+    repo: "example-nft-contracts"
+  },
+  "nft-contracts": { owner: "midnightntwrk", repo: "example-nft-contracts" },
+  nft: { owner: "midnightntwrk", repo: "example-nft-contracts" },
+  "example-locker": { owner: "midnightntwrk", repo: "example-locker" },
+  locker: { owner: "midnightntwrk", repo: "example-locker" },
+  "example-zkloan": { owner: "midnightntwrk", repo: "example-zkloan" },
+  zkloan: { owner: "midnightntwrk", repo: "example-zkloan" },
+  "example-battleship": {
+    owner: "midnightntwrk",
+    repo: "example-battleship"
+  },
+  "example-private-party": {
+    owner: "midnightntwrk",
+    repo: "example-private-party"
+  },
+  "private-party": { owner: "midnightntwrk", repo: "example-private-party" },
+  "midnight-dust-generator": {
+    owner: "midnightntwrk",
+    repo: "midnight-dust-generator"
+  },
+  "dust-generator": {
+    owner: "midnightntwrk",
+    repo: "midnight-dust-generator"
+  },
+  "midnight-tip-jar": { owner: "midnightntwrk", repo: "midnight-tip-jar" },
+  "tip-jar": { owner: "midnightntwrk", repo: "midnight-tip-jar" },
+  "midnight-leaderboard": {
+    owner: "midnightntwrk",
+    repo: "midnight-leaderboard"
+  },
+  leaderboard: { owner: "midnightntwrk", repo: "midnight-leaderboard" },
   // Developer Tools
   "create-mn-app": { owner: "midnightntwrk", repo: "create-mn-app" },
+  "midnight-local-dev": {
+    owner: "midnightntwrk",
+    repo: "midnight-local-dev"
+  },
+  "local-dev": { owner: "midnightntwrk", repo: "midnight-local-dev" },
   "midnight-wallet": { owner: "midnightntwrk", repo: "midnight-wallet" },
   wallet: { owner: "midnightntwrk", repo: "midnight-wallet" },
   // Infrastructure
@@ -1698,7 +1744,29 @@ var REPO_ALIASES = {
   lucentlabs: { owner: "statera-protocol", repo: "statera-protocol-midnight" },
   stablecoin: { owner: "statera-protocol", repo: "statera-protocol-midnight" },
   "midnight-bank": { owner: "nel349", repo: "midnight-bank" },
-  bank: { owner: "nel349", repo: "midnight-bank" }
+  bank: { owner: "nel349", repo: "midnight-bank" },
+  // Third-Party / Community (NOT official Midnight, not in midnight-awesome-dapps)
+  // effectstream is a multi-chain Web3 engine (EVM, Midnight, Bitcoin, Cardano,
+  // Avail, Celestia, NEAR). Only its Midnight pieces are relevant here:
+  // @effectstream/midnight-contracts and the evm-midnight-v2 / zswap-da templates.
+  // NOTE: repo currently has NO LICENSE — treat indexed content as reference only.
+  effectstream: { owner: "effectstream", repo: "effectstream" },
+  "effect-stream": { owner: "effectstream", repo: "effectstream" },
+  // Community Examples & Learning Resources (Olanetsoft)
+  "midnight-mcp": { owner: "Olanetsoft", repo: "midnight-mcp" },
+  mcp: { owner: "Olanetsoft", repo: "midnight-mcp" },
+  "compact-playground": { owner: "Olanetsoft", repo: "compact-playground" },
+  playground: { owner: "Olanetsoft", repo: "compact-playground" },
+  "compact-by-example": { owner: "Olanetsoft", repo: "compact-by-example" },
+  "learn-compact": { owner: "Olanetsoft", repo: "learn-compact" },
+  "example-dust-sponsorship": {
+    owner: "Olanetsoft",
+    repo: "example-dust-sponsorship"
+  },
+  "dust-sponsorship": {
+    owner: "Olanetsoft",
+    repo: "example-dust-sponsorship"
+  }
 };
 var EXAMPLES = [
   {
@@ -6930,6 +6998,19 @@ var transports = {
   streamable: {},
   sse: {}
 };
+function buildAllowlist(port) {
+  const hosts = [`127.0.0.1:${port}`, `localhost:${port}`];
+  const origins = hosts.flatMap((host) => [
+    `http://${host}`,
+    `https://${host}`
+  ]);
+  return { allowedHosts: hosts, allowedOrigins: origins };
+}
+function isRebindingBlocked(host, origin, allowedHosts, allowedOrigins) {
+  if (host && !allowedHosts.includes(host)) return true;
+  if (origin && !allowedOrigins.includes(origin)) return true;
+  return false;
+}
 async function closeTransports(transportMap) {
   const closePromises = Object.values(transportMap).map(
     (transport) => transport.close?.().catch(() => {
@@ -6940,6 +7021,7 @@ async function closeTransports(transportMap) {
 async function startHttpServer(port = 3e3) {
   const mcpServer = await initializeServer();
   const app = express();
+  const { allowedHosts, allowedOrigins } = buildAllowlist(port);
   app.use("/mcp", express.json());
   app.get("/health", (_req, res) => {
     res.json({
@@ -6956,6 +7038,10 @@ async function startHttpServer(port = 3e3) {
     } else if (!sessionId && isInitializeRequest(req.body)) {
       transport = new StreamableHTTPServerTransport({
         sessionIdGenerator: () => randomUUID(),
+        // Block DNS-rebinding attacks from browser pages (loopback allowlist).
+        enableDnsRebindingProtection: true,
+        allowedHosts,
+        allowedOrigins,
         onsessioninitialized: (newSessionId) => {
           transports.streamable[newSessionId] = transport;
           logger.debug(`New streamable session: ${newSessionId}`);
@@ -6993,9 +7079,20 @@ async function startHttpServer(port = 3e3) {
     }
     await transport.handleRequest(req, res, req.body);
   });
-  app.get("/sse", async (_req, res) => {
+  app.get("/sse", async (req, res) => {
+    const host = req.headers.host;
+    const origin = req.headers.origin;
+    if (isRebindingBlocked(host, origin, allowedHosts, allowedOrigins)) {
+      logger.warn(`Rejected SSE connection`, { host, origin });
+      res.status(403).send("Forbidden: invalid Host or Origin");
+      return;
+    }
     logger.debug("New SSE connection");
-    const transport = new SSEServerTransport("/messages", res);
+    const transport = new SSEServerTransport("/messages", res, {
+      enableDnsRebindingProtection: true,
+      allowedHosts,
+      allowedOrigins
+    });
     transports.sse[transport.sessionId] = transport;
     res.on("close", () => {
       delete transports.sse[transport.sessionId];
@@ -9321,7 +9418,9 @@ async function healthCheck(input) {
     const status = await getHealthStatus();
     return {
       ...status,
-      rateLimit: formatRateLimitStatus(),
+      // Return the structured object (not a formatted string) so the value
+      // conforms to the tool's outputSchema, which declares rateLimit as an object.
+      rateLimit: getRateLimitStatus(),
       cacheStats: {
         search: searchCache.getStats(),
         file: fileCache.getStats(),
@@ -9331,7 +9430,7 @@ async function healthCheck(input) {
   }
   return {
     ...getQuickHealthStatus(),
-    rateLimit: formatRateLimitStatus()
+    rateLimit: getRateLimitStatus()
   };
 }
 async function getStatus(_input) {
@@ -9371,23 +9470,26 @@ async function checkVersion(_input) {
     const data = await response.json();
     const latestVersion = data.version;
     const isUpToDate = CURRENT_VERSION === latestVersion;
-    return {
+    const result = {
       currentVersion: CURRENT_VERSION,
       latestVersion,
       isUpToDate,
-      message: isUpToDate ? "\u2705 You are running the latest version!" : `\u26A0\uFE0F UPDATE AVAILABLE: v${latestVersion} (you have v${CURRENT_VERSION})`,
-      updateInstructions: isUpToDate ? null : {
+      message: isUpToDate ? "\u2705 You are running the latest version!" : `\u26A0\uFE0F UPDATE AVAILABLE: v${latestVersion} (you have v${CURRENT_VERSION})`
+    };
+    if (!isUpToDate) {
+      result.updateInstructions = {
         step1: "Clear npx cache: rm -rf ~/.npm/_npx (macOS/Linux) or del /s /q %LocalAppData%\\npm-cache\\_npx (Windows)",
         step2: "Restart Claude Desktop completely (Cmd+Q / Alt+F4, then reopen)",
         step3: "Or update config to use: npx -y midnight-mcp@latest (forces latest)",
         alternative: "You can also install globally: npm install -g midnight-mcp@latest"
-      },
-      newFeatures: isUpToDate ? null : [
+      };
+      result.newFeatures = [
         "Auto-update config tool - AI agents update your config automatically",
         "midnight-extract-contract-structure - Static analysis with 10 pre-compilation checks",
         "MCP Logging, Progress, Completions capabilities"
-      ]
-    };
+      ];
+    }
+    return result;
   } catch (error) {
     return {
       currentVersion: CURRENT_VERSION,
@@ -11253,4 +11355,4 @@ export {
   startServer,
   startHttpServer
 };
-//# sourceMappingURL=chunk-4CUN6SQZ.js.map
+//# sourceMappingURL=chunk-T2CXHJAO.js.map

package/dist/{chunk-OYH7MAIC.js → chunk-YDH6CRK3.js}

@@ -1624,7 +1624,7 @@ var releaseTracker = new ReleaseTracker();
 
 // src/utils/health.ts
 var startTime = Date.now();
-var VERSION = "0.2.19";
+var VERSION = "0.2.21";
 async function checkGitHubAPI() {
   const start = Date.now();
   try {
@@ -1652,7 +1652,7 @@ async function checkGitHubAPI() {
 }
 async function checkVectorStore() {
   try {
-    const { vectorStore: vectorStore2 } = await import("./db-3CCKZDB7.js");
+    const { vectorStore: vectorStore2 } = await import("./db-5GTR4PCW.js");
     if (vectorStore2) {
       return {
         status: "pass",
@@ -1790,16 +1790,6 @@ function shouldProceedWithRequest() {
   }
   return { proceed: true };
 }
-function formatRateLimitStatus() {
-  const status = getRateLimitStatus();
-  if (status.isLimited) {
-    return `\u26D4 ${status.message}`;
-  } else if (status.isWarning) {
-    return `\u26A0\uFE0F ${status.message}`;
-  } else {
-    return `\u2705 ${status.message}`;
-  }
-}
 
 // src/utils/cache.ts
 var Cache = class {
@@ -2128,7 +2118,7 @@ function serialize(data) {
 }
 
 // src/utils/version.ts
-var CURRENT_VERSION = "0.2.19";
+var CURRENT_VERSION = "0.2.21";
 
 // src/db/vectorStore.ts
 var VectorStore = class {
@@ -2338,7 +2328,6 @@ export {
   getHealthStatus,
   getQuickHealthStatus,
   getRateLimitStatus,
-  formatRateLimitStatus,
   createCacheKey,
   searchCache,
   fileCache,
@@ -2351,4 +2340,4 @@ export {
   serialize,
   CURRENT_VERSION
 };
-//# sourceMappingURL=chunk-OYH7MAIC.js.map
+//# sourceMappingURL=chunk-YDH6CRK3.js.map

package/dist/db-5GTR4PCW.js

@@ -0,0 +1,7 @@
+import {
+  vectorStore
+} from "./chunk-YDH6CRK3.js";
+export {
+  vectorStore
+};
+//# sourceMappingURL=db-5GTR4PCW.js.map

package/dist/index.js

@@ -9,10 +9,10 @@ import {
   promptDefinitions,
   startHttpServer,
   startServer
-} from "./chunk-4CUN6SQZ.js";
+} from "./chunk-T2CXHJAO.js";
 import {
   logger
-} from "./chunk-OYH7MAIC.js";
+} from "./chunk-YDH6CRK3.js";
 export {
   allResources,
   allTools,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "midnight-mcp",
-  "version": "0.2.19",
+  "version": "0.2.21",
   "description": "Model Context Protocol Server for Midnight Blockchain Development",
   "type": "module",
   "main": "dist/index.js",
@@ -10,7 +10,7 @@
   "scripts": {
     "build": "tsup",
     "typecheck": "tsc --noEmit",
-    "start": "node dist/bin.js --stdio",
+    "start": "node dist/bin.js",
     "start:http": "node dist/bin.js --http",
     "dev": "NODE_ENV=development tsup --watch",
     "test": "vitest",

package/dist/db-3CCKZDB7.js

@@ -1,7 +0,0 @@
-import {
-  vectorStore
-} from "./chunk-OYH7MAIC.js";
-export {
-  vectorStore
-};
-//# sourceMappingURL=db-3CCKZDB7.js.map