sigrank 0.0.181 → 0.0.183

package/presentation/cli.mjs

@@ -15,7 +15,7 @@
  *   npx sigrank watch --window 7d    watch one window only (optional filter)
  *
  * Color palette mirrors the SigRank web dark theme:
- *   gold = class TRANSMITTER headline + rank #1
+ *   gold = rank #1 headline
  *   cyan = active metrics / your row highlight
  *   dim  = secondary data, separators
  *   red  = negative movement / delta
@@ -23,9 +23,11 @@
  */
 
 import { callTool, DEFAULT_API_BASE, pullActivePlatforms } from "../tools.mjs";
-import { classify } from "../cascade.mjs";
+import { cascade, classify, CLASS_TIERS, UNCLASSED, tierOf } from "../cascade.mjs";
+import { ALL_PLATFORMS } from "../adapters.mjs";
 import { ensureIdentity, keystorePath } from "../keystore.mjs";
 import { submitSignedWindow } from "../submit.mjs";
+import { LEADERBOARD_METRIC } from "../lib/constants.mjs";
 import { execFile } from "child_process";
 import { existsSync, readFileSync } from "fs";
 import os from "os";
@@ -88,8 +90,10 @@ const green = (str) => paint(c.green, str);
 const red = (str) => paint(c.red, str);
 
 // ── Class tier → color ─────────────────────────────────────────────────────
+// Color is keyed on the BASE TIER (8 entries in CLASS_TIERS). classify() returns
+// a full sub-stage string (e.g. "REFINER II") — tierOf() extracts the base tier
+// for color lookup. TRANSMITTER is not a class. UNCLASSED for no-data.
 const CLASS_COLOR = {
-  TRANSMITTER: (s) => paint(c.boldGold, s),
   "ARCH+": (s) => paint(c.boldCyan, s),
   ARCH: (s) => paint(c.cyan, s),
   POWER: (s) => paint(c.boldWhite, s),
@@ -98,8 +102,16 @@ const CLASS_COLOR = {
   REFINER: (s) => paint(c.blue, s),
   BEARER: (s) => paint(c.dim, s),
   IGNITER: (s) => paint(c.dim, s),
+  [UNCLASSED]: (s) => paint(c.dim, s),
 };
-const colorClass = (cls) => (CLASS_COLOR[cls] ?? ((s) => s))(cls);
+const colorClass = (cls) => (CLASS_COLOR[tierOf(cls)] ?? CLASS_COLOR[UNCLASSED] ?? ((s) => s))(cls);
+// Guard: every canonical tier must have a color here.
+for (const t of CLASS_TIERS) {
+  if (!CLASS_COLOR[t]) {
+    // eslint-disable-next-line no-console
+    console.warn(`[cli] CLASS_COLOR map missing color for tier "${t}"`);
+  }
+}
 
 // ── Terminal utils ──────────────────────────────────────────────────────────
 const CLEAR_SCREEN = `${ESC}2J${ESC}H`;
@@ -234,7 +246,7 @@ function renderBoardHeader(window = "30d") {
 
 async function fetchBoard(window = "30d") {
   const res = await fetch(
-    `${DEFAULT_API_BASE}/api/v1/leaderboard?window=${window}&metric=yield_`,
+    `${DEFAULT_API_BASE}/api/v1/leaderboard?window=${window}&metric=${LEADERBOARD_METRIC}`,
     {
       headers: {
         accept: "application/json",
@@ -469,8 +481,10 @@ async function tokscalePillars(platform = "claude") {
 }
 
 function appPillars() {
-  // App numbers from screenshots — all-time, per model (no cache fields)
-  // Hard-coded from 2026-06-23 screenshot capture (update when re-screenshotted)
+  // ⚠ STALE HARDCODED DATA — App numbers from screenshots, all-time, per model
+  // (no cache fields). Captured 2026-06-23. NOT refreshed automatically. The
+  // compare view uses this only as a static reference point; it does NOT feed
+  // the ranked submit path. Update manually when a fresh screenshot is taken.
   return {
     all: {
       input: 6_378_000, // sum of all models: 5.6M + 102.1K + 92.9K + 130.3K + 418.9K + 33.5K
@@ -544,39 +558,32 @@ function fmtDelta(a, b) {
   return d > 0 ? green(label) : red(label);
 }
 
-// Compute cascade metrics from raw pillars (mirrors bridge.ts computeCascadeMetrics)
+// Compute cascade metrics from raw pillars. Fix 3: this was a third copy of
+// the cascade math with its own divide-by-zero policy (safeI = max(i,1) clamp),
+// which let the CLI's Υ drift from the MCP tools' Υ for the same tokens. It now
+// forwards to the single shared cascade() from analytics/cascade.mjs (null-guard
+// policy, identical to rank_paste / submit_verified) and only adds the
+// CLI-display-only `efficiency` + `total` fields the compare view renders.
 function cascadeFromPillars(p) {
   if (!p) return null;
+  const c = cascade(p);
   const i = p.input ?? 0;
   const o = p.output ?? 0;
   const cw = p.cacheCreate ?? 0;
   const cr = p.cacheRead ?? 0;
-  if (i === 0 && o === 0) return null;
-  const safeI = Math.max(i, 1);
   const total = i + o + cw + cr;
-  const velocity = o / safeI;
-  const leverage = cr / safeI;
-  const yield_ = leverage * velocity;
-  const snr = i + o > 0 ? o / (i + o) : 0;
-  // dev10x = log10(T × C × R) — only when all four pillars present
-  let dev10x = null;
-  if (cw > 0 && o > 0 && i > 0 && cr > 0) {
-    const T = o / i,
-      C = cw / o,
-      R = cr / cw;
-    dev10x = Math.log10(T * C * R);
-  }
-  // efficiency = ((cr+cw+o)/i) / 4.0
-  const efficiency = (cr + cw + o) / safeI / 4.0;
-  const cls = classify(yield_, dev10x);
+  // efficiency = ((cr+cw+o)/i)/4.0 — display-only derived metric (not in the
+  // canonical cascade). Null when input is 0 (matches the old safeI→0 behavior
+  // would have been div-by-zero; the shared cascade already nulls yield there).
+  const efficiency = i > 0 ? (cr + cw + o) / i / 4.0 : null;
   return {
-    yield: yield_,
-    velocity,
-    leverage,
-    snr,
-    dev10x,
+    yield: c.yield,
+    velocity: c.velocity,
+    leverage: c.leverage,
+    snr: c.snr,
+    dev10x: c.dev10x,
     efficiency,
-    class: cls,
+    class: c.class,
     total,
   };
 }
@@ -868,11 +875,18 @@ async function runWatch({
               id,
               { platform: plat },
             );
+            // Pass 6: gate the ✓ on r.ranked (verified + persisted), NOT on
+            // r.status === "received". An unenrolled/revoked device gets HTTP
+            // 202 "received" but is NEVER ranked — gating on "received" would
+            // show a green ✓ to an operator who didn't actually make the board.
+            // Mirrors the isRankedAck() predicate used by every submit path.
             lastSubmitMsg.set(
               key,
-              r.status === "received"
-                ? green(`✓ tier=${r.verification_tier || "—"}`)
-                : red(`✗ ${r.reason || r.status}`),
+              r.ranked
+                ? green(`✓ tier=${r.verification_tier || "—"} (ranked)`)
+                : red(
+                    `✗ ${r.reason || r.status || "not ranked"}${r.verification_tier ? ` (tier=${r.verification_tier})` : ""}`,
+                  ),
             );
           } catch (e) {
             lastSubmitMsg.set(key, red(`✗ ${e.message}`));
@@ -934,25 +948,9 @@ async function runWatch({
 //   - live board position
 //   - [S] submit  [B] board  [Q] quit
 
-const ALL_PLATFORMS = [
-  "claude",
-  "codex",
-  "devin",
-  "amp",
-  "gemini",
-  "kimi",
-  "qwen",
-  "goose",
-  "kilo",
-  "hermes",
-  "droid",
-  "codebuff",
-  "copilot",
-  "opencode",
-  "openclaw",
-  "pi",
-  "other",
-];
+// ALL_PLATFORMS is imported from ../adapters.mjs (single source of truth —
+// was redefined inline here, which drifted from the adapter registry whenever
+// a platform was added there but not in this list).
 
 async function runSigRank() {
   write(HIDE_CURSOR);

package/presentation/tui.mjs

@@ -14,6 +14,7 @@
 
 import { callTool, DEFAULT_API_BASE, pullActivePlatforms } from "../tools.mjs";
 import { ALL_PLATFORMS } from "../adapters.mjs";
+import { cascade, CLASS_TIERS, UNCLASSED, tierOf } from "../cascade.mjs";
 import { freshVerifierPillars } from "../tokenpull.mjs";
 import { isSignedIn, isCodeChar } from "../connect.mjs";
 import { loadIdentity, clearIdentity } from "../keystore.mjs";
@@ -21,17 +22,12 @@ import { execFile } from "child_process";
 import { existsSync, readFileSync } from "fs";
 import os from "os";
 import path from "path";
-import { createRequire } from "module";
+import { pkgVersion } from "../lib/pkg-version.mjs";
+import { LEADERBOARD_METRIC } from "../lib/constants.mjs";
 
-// Version read from package.json (single source of truth — matches cli.mjs;
-// never hardcode, that's what caused the version drift).
-const VERSION = (() => {
-  try {
-    return createRequire(import.meta.url)("./package.json").version;
-  } catch {
-    return "?";
-  }
-})();
+// Version read from the shared pkg-version helper (single source of truth —
+// matches cli.mjs; never hardcode, that's what caused the version drift).
+const VERSION = pkgVersion();
 
 // ── ANSI ───────────────────────────────────────────────────────────────────
 const ESC = "\x1b[";
@@ -205,8 +201,10 @@ const fmtMov = (n) =>
   n == null || n === 0 ? dim("—") : n > 0 ? green(`+${n}`) : red(`${n}`);
 
 // ── Class tier colors ────────────────────────────────────────────────────────
+// Color is keyed on the BASE TIER (8 entries in CLASS_TIERS). classify() returns
+// a full sub-stage string (e.g. "REFINER II") — tierOf() extracts the base tier
+// for color lookup. TRANSMITTER is not a class — it's a temporary peak badge.
 const CLS = {
-  TRANSMITTER: (s) => paint(c.boldGold, s),
   "ARCH+": (s) => paint(c.boldCyan, s),
   ARCH: (s) => paint(c.cyan, s),
   POWER: (s) => paint(c.boldWhite, s),
@@ -215,35 +213,29 @@ const CLS = {
   REFINER: (s) => paint(c.blue, s),
   BEARER: (s) => paint(c.dim, s),
   IGNITER: (s) => paint(c.dim, s),
+  [UNCLASSED]: (s) => paint(c.dim, s),
 };
-const colorCls = (cls) => (CLS[cls] ?? ((s) => s))(cls);
+const colorCls = (cls) => (CLS[tierOf(cls)] ?? CLS[UNCLASSED] ?? ((s) => s))(cls);
+
+// Guard: every canonical tier must have a color, so a new tier added in
+// analytics/cascade.mjs can't silently render uncolored here.
+for (const t of CLASS_TIERS) {
+  if (!CLS[t]) {
+    // eslint-disable-next-line no-console
+    console.warn(`[tui] CLS map missing color for tier "${t}"`);
+  }
+}
 
-// ── Cascade math (inline, no dep) ───────────────────────────────────────────
+// ── Cascade math ───────────────────────────────────────────────────────────
+// Fix 3: the inline cascadeFrom() (a third copy of the cascade math with its
+// own null-guard policy) is replaced by the single shared cascade() from
+// analytics/cascade.mjs. CLI, TUI, and MCP tools now report identical Υ for
+// identical tokens. cascadeFrom() keeps the old name as a thin alias so the
+// many call sites below don't need rewriting; it forwards to the shared
+// implementation and returns null only when there are no pillars at all.
 function cascadeFrom(p) {
   if (!p) return null;
-  const i = p.input ?? 0,
-    o = p.output ?? 0,
-    cr = p.cacheRead ?? 0;
-  if (i === 0 || o === 0) return null;
-  const leverage = cr / i;
-  const velocity = o / i;
-  const yld = leverage * velocity;
-  const dev10x =
-    i > 0 && o > 0 && (p.cacheCreate ?? 0) > 0 && cr > 0
-      ? Math.log10(cr / i)
-      : null;
-  const snr = o / (i + o);
-
-  let cls = "IGNITER";
-  if (yld >= 1000 || dev10x >= 3) cls = "TRANSMITTER";
-  else if (dev10x != null && dev10x >= 1.45) cls = "ARCH+";
-  else if (dev10x != null && dev10x >= 1.35) cls = "ARCH";
-  else if (dev10x != null && dev10x >= 1.2) cls = "POWER";
-  else if (dev10x != null && dev10x >= 1.0) cls = "BASE";
-  else if (dev10x != null && dev10x >= 0) cls = "SEEKER";
-  else if (dev10x != null && dev10x >= -0.3) cls = "REFINER";
-
-  return { yield: yld, snr, leverage, velocity, dev10x, class: cls };
+  return cascade(p);
 }
 
 // ── Unicode bar chart (no dep) ───────────────────────────────────────────────
@@ -309,7 +301,7 @@ function sparkline(values) {
 
 async function loadDashboardData() {
   const boardPromise = Promise.race([
-    fetch(`${DEFAULT_API_BASE}/api/v1/leaderboard?window=30d&metric=yield_`, {
+    fetch(`${DEFAULT_API_BASE}/api/v1/leaderboard?window=30d&metric=${LEADERBOARD_METRIC}`, {
       headers: { accept: "application/json" },
     })
       .then((r) => (r.ok ? r.json() : null))
@@ -386,7 +378,7 @@ async function loadBoardData(window = "30d") {
   // Primary: submissions endpoint (ranked submission rows).
   try {
     const res = await fetch(
-      `${DEFAULT_API_BASE}/api/v1/submissions?window=${window}&metric=yield_`,
+      `${DEFAULT_API_BASE}/api/v1/submissions?window=${window}&metric=${LEADERBOARD_METRIC}`,
       {
         headers: { accept: "application/json" },
       },
@@ -401,7 +393,7 @@ async function loadBoardData(window = "30d") {
   // Fallback: existing leaderboard endpoint + current render (pre-deploy safety).
   try {
     const res = await fetch(
-      `${DEFAULT_API_BASE}/api/v1/leaderboard?window=${window}&metric=yield_`,
+      `${DEFAULT_API_BASE}/api/v1/leaderboard?window=${window}&metric=${LEADERBOARD_METRIC}`,
       {
         headers: { accept: "application/json" },
       },
@@ -796,7 +788,12 @@ function renderDashboard(data, status = "", scrollOffset = 0) {
       const wk = firstWin[d.platform];
       const wd = d.windows?.find((x) => x.window === wk);
       const cas = wd && cascadeFrom(wd.pillars);
-      if (cas) return cas; // cascadeFrom already returns null for non-compounding rows
+      // cascadeFrom returns null only when wd.pillars is falsy; otherwise it
+      // forwards to cascade() which always returns an object (degenerate input
+      // surfaces as null fields + warnings[], not a null return). The guard
+      // below skips rows with no pillars at all; downstream `chk(val == null)`
+      // guards handle degenerate-but-present pillars.
+      if (cas) return cas;
     }
     return null;
   })();

package/resources/class-tiers.md

@@ -1,23 +1,81 @@
 # SigRank Class Tiers
 
-Every operator is classified into one of three tiers based on their Yield (Υ = Cache Reads × Output / Input²).
-
-## Burner (Υ < 1.0)
-- **Profile:** Raw volume operators. High input tokens, low cache reuse.
-- **Behavior:** Brute-force — lots of context fed in, relatively little output back.
-- **Typical:** New AI users, verbose prompters, no session continuity.
-- **Fix:** Build cache across sessions. Stop re-explaining context. Use --continue.
-
-## Builder (1.0 ≤ Υ < 10.0)
-- **Profile:** Balanced operators. Moderate cache, decent output efficiency.
-- **Behavior:** Productive — reasonable input-to-output ratio, some cache leverage.
-- **Typical:** Experienced AI coders who use CLAUDE.md, project context, and session continuity.
-- **Fix:** Increase cache reads by reusing sessions. Reduce input by trimming unnecessary context.
-
-## 10xer (Υ ≥ 10.0)
-- **Profile:** Cascade-optimized operators. High cache reads, minimal input, efficient output.
-- **Behavior:** Surgical — minimal new input, maximum cache reuse, high-yield output.
-- **Typical:** Power users with long-running sessions, tight context windows, and aggressive cache strategies.
-- **Maintain:** Keep cache hit rate high. Avoid context bloat. Monitor with watch_tokenpull.
-
-Tiers are recalculated on every submission. Your tier can change between windows (7d, 30d, 90d, all-time).
+Every operator is classified into one of **24 experience stages** — 8 tiers ×
+3 sub-stages (I/II/III) — based on their **total tokens** (input + output +
+cacheCreate + cacheRead). The ladder mirrors the server's
+`RS05_CLASS_THRESHOLDS` (`lib/analytics/ruleset.ts` in sigrank-app) — the
+client's `classify()` in `analytics/cascade.mjs` is the canonical local source
+of truth. The TUI, CLI, MCP output schemas, and this doc all read from that
+one list.
+
+The class is an **experience** axis — it measures how much volume the operator
+has accumulated. It is separate from the **cascade archetype** (the operator's
+token-flow shape: kinetic loop, archival sponge, volatile ingestor, etc.) and
+from the **TRANSMITTER peak badge** (a temporary state — see below).
+
+A 25th value, **UNCLASSED**, is returned when total tokens are null or
+non-finite (empty / all-zero session). It is distinct from IGNITER III so
+callers can tell "no data" from "bottom tier".
+
+## The 8 base tiers (K.01–K.08)
+
+Each tier has 3 sub-stages (I/II/III) split by total-token thresholds. The
+sub-stage is the granular experience level; the base tier is the display
+grouping (color, glyph, meaning).
+
+### ARCH+ (K.01) — total ≥ 7.07T
+- **Sub-stages:** ARCH+ I (≥ 7.07T), ARCH+ II (≥ 7.07T), ARCH+ III (≥ 7.07T)
+- **Profile:** Deepest field experience. Volume that became architecture.
+- **Note:** Aspirational — currently 1 operator in the static board.
+
+### ARCH (K.02) — total ≥ 68.8B
+- **Sub-stages:** ARCH I (≥ 186B), ARCH II (≥ 98.5B), ARCH III (≥ 68.8B)
+- **Profile:** System builders. Sustained volume, coherent output.
+
+### POWER (K.03) — total ≥ 19.1B
+- **Sub-stages:** POWER I (≥ 40.0B), POWER II (≥ 27.0B), POWER III (≥ 19.1B)
+- **Profile:** Above the center. Volume compounding.
+
+### BASE (K.04) — total ≥ 7.7B
+- **Sub-stages:** BASE I (≥ 14.0B), BASE II (≥ 10.2B), BASE III (≥ 7.7B)
+- **Profile:** The center of the field. The average operator's experience.
+
+### SEEKER (K.05) — total ≥ 3.0B
+- **Sub-stages:** SEEKER I (≥ 5.4B), SEEKER II (≥ 4.0B), SEEKER III (≥ 3.0B)
+- **Profile:** Approaching the center. Experience accumulating.
+
+### REFINER (K.06) — total ≥ 1.3B
+- **Sub-stages:** REFINER I (≥ 2.4B), REFINER II (≥ 1.8B), REFINER III (≥ 1.3B)
+- **Profile:** Practicing with purpose. Early sustained volume.
+
+### BEARER (K.07) — total ≥ 432M
+- **Sub-stages:** BEARER I (≥ 984M), BEARER II (≥ 715M), BEARER III (≥ 432M)
+- **Profile:** Quiet accumulation. The first real volume.
+
+### IGNITER (K.08) — total ≥ 0
+- **Sub-stages:** IGNITER I (≥ 216M), IGNITER II (≥ 89.0M), IGNITER III (≥ 0)
+- **Profile:** Dormant potential. The still soul. Waiting.
+
+## UNCLASSED (no data)
+- **Profile:** Empty session — all four pillars are zero.
+- **Fix:** Run some sessions; the stage will resolve once there is data.
+
+## TRANSMITTER (peak badge, not a class)
+
+TRANSMITTER is **not** on the experience ladder. It is a temporary peak badge
+(RS.08) that any experience tier can earn during a high-frequency,
+high-resonance window. An operator "transmits" when they hit both:
+
+- **High frequency:** token throughput (total tokens in window) ≥ 1B
+- **High resonance:** SIGNA RATE (composite signal quality) ≥ 85
+
+The badge is per-window (daily/weekly) and lapses when frequency or resonance
+drops. The server evaluates it via `evaluateTransmitterBadge()` in
+`lib/analytics/transmitter-badge.ts`; the client does not evaluate the badge
+locally (the owner is still calibrating the thresholds). The server is the
+authority.
+
+---
+
+Tiers are recalculated on every submission. Your stage can change between
+windows (7d, 30d, 90d, all-time) as total tokens accumulate.

package/resources/privacy-model.md

@@ -2,20 +2,23 @@
 
 ## What leaves your machine
 
-**Only four numbers per submission:**
+**Every submission path sends only four numbers:**
 - Input tokens
 - Output tokens
 - Cache create tokens
 - Cache read tokens
 
-**That's it.** No prompts, no code, no file contents, no conversation text.
+That's the entire payload — no prompts, no code, no file contents, no conversation text. The MCP parses your input locally and sends only the four token counts to the server, which re-parses and re-scores them authoritatively.
+
+- **Signed path** (`submit_verified`, `watch_tokenpull` with `submit:true`): the four numbers travel with the device's public key, codename, window, and an ed25519 signature. The board verifies the signature without seeing your data.
+- **Paste path** (`submit_paste`, `tokenpull_submit`): the MCP parses your pasted token counts locally, then sends only the four canonical numbers to the server's web-paste endpoint. Even if you paste mixed text (prose + numbers), only the extracted token counts are transmitted — the raw text never leaves your machine.
 
 ## How it works
 
 1. **Local-first:** All token pulling happens on your machine. SigRank reads session logs from ~/.claude, ~/.codex, ~/.local/share/amp, etc.
-2. **Token counts only:** The MCP tools extract integer counts from log metadata. The actual content of your conversations is never read, parsed, or transmitted.
-3. **Signed submission:** Submissions are ed25519-signed. The board verifies authenticity without seeing your data.
-4. **No auth required:** No API keys, no OAuth, no account needed to read the leaderboard. Enrollment only requires a codename.
+2. **Token counts only:** The MCP tools extract integer counts from log metadata. The actual content of your conversations is never read, parsed, or transmitted. On the paste path, the MCP parses the paste locally and sends only the four extracted numbers — the raw paste text stays on your machine.
+3. **Signed submission:** Ranked submissions (`submit_verified`, `watch_tokenpull` with `submit:true`) are ed25519-signed with a device-bound key generated locally at enrollment. The board verifies the signature without seeing your data. Paste submissions (`submit_paste`, `tokenpull_submit`) are unsigned and go through the web-paste endpoint with a codename only — but still send only the four token counts, not the raw paste.
+4. **Read tools need no auth:** No API keys, no OAuth, no account needed to read the leaderboard or operator profiles. **Enrollment requires a connect code** from signalaf.com → Settings → New key (the code binds your device's public key to your operator server-side); a codename alone is not enough for the signed/ranked path.
 
 ## What SigRank can NOT see
 

package/submit/index.mjs

@@ -11,22 +11,15 @@
 
 import { snapshotHash, signPayload } from "../identity/sign.mjs";
 import { preflight } from "./preflight.mjs";
-import { readFileSync } from "node:fs";
+import { pkgVersion } from "../lib/pkg-version.mjs";
+import {
+  TERMS_VERSION,
+  PRIVACY_VERSION,
+  isRankedAck,
+} from "../lib/constants.mjs";
 
 const WINDOW_TYPE = { "7d": "7d", "30d": "30d", "90d": "90d", all: "all_time" };
 const WINDOW_SPAN_DAYS = { "7d": 7, "30d": 30, "90d": 90, all_time: 3650 };
-
-/** Resolve this package's version for the User-Agent stamp (best-effort). */
-function _pkgVersion() {
-  try {
-    const pkg = JSON.parse(
-      readFileSync(new URL("./package.json", import.meta.url), "utf-8"),
-    );
-    return pkg.version;
-  } catch {
-    return "unknown";
-  }
-}
 const PLATFORM_ENUM = new Set([
   "claude",
   "chatgpt",
@@ -38,8 +31,6 @@ const PLATFORM_ENUM = new Set([
 ]);
 // Provenance tag only — the board ranks by Υ (no RS.xx weights, §0.1).
 const RULESET_VERSION = "sigrank-token-1";
-const TERMS_VERSION = "2026-07-21";
-const PRIVACY_VERSION = "2026-07-21";
 const DAY_MS = 86_400_000;
 
 const clamp = (x, lo, hi) => Math.max(lo, Math.min(hi, x));
@@ -200,7 +191,7 @@ export async function submitSignedWindow(
       const ctrl = new AbortController();
       const timer = setTimeout(() => ctrl.abort(), 15_000);
       const headers = {
-        "user-agent": `node/${process.version} sigrank-mcp/${_pkgVersion()}`,
+        "user-agent": `node/${process.version} sigrank-mcp/${pkgVersion()}`,
         ...(init.headers || {}),
       };
       return fetch(url, {
@@ -296,11 +287,7 @@ export async function submitSignedWindow(
     persisted: ack.persisted ?? null,
     // ranked = actually on the board (verified + written), not just "received".
     // An unenrolled/revoked device gets HTTP 202 received but is NEVER ranked.
-    ranked: !!(
-      res.ok &&
-      ack.verification_tier === "verified" &&
-      ack.persisted === true
-    ),
+    ranked: isRankedAck(res, ack),
     snapshot_hash: payload.agent.snapshot_hash,
     reason: res.ok ? null : ack.reason || ack.status || `http_${res.status}`,
     detail: ack.detail ?? null,

package/tokscale_analytics.mjs

@@ -33,6 +33,7 @@ import { existsSync, readFileSync } from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { TOKSCALE_CLIENT_MAP } from "./lib/constants.mjs";
 
 // Resolve local node_modules/.bin for the bundled tokscale binary.
 const _pkgRoot = path.dirname(fileURLToPath(import.meta.url));
@@ -85,23 +86,11 @@ export function num(x) {
   return Number.isFinite(n) ? n : 0;
 }
 
-// Map tokscale's client slugs to canonical platform names (mirrors tools.mjs).
+// Map tokscale's client slugs to canonical platform names.
+// TOKSCALE_CLIENT_MAP is imported from lib/constants.mjs (single source of
+// truth — was duplicated here and in tools/index.mjs +
+// tools/tokscale-breakdown.mjs, and the copies had started to drift).
 // `synthetic` → null (filtered). unmapped slugs → "other".
-const TOKSCALE_CLIENT_MAP = {
-  claude: "claude", codex: "codex", "devin-cli": "devin",
-  "devin-desktop": "devin", gemini: "gemini", amp: "amp",
-  kimi: "kimi", qwen: "qwen", goose: "goose", kilo: "kilo",
-  kilocode: "kilo", hermes: "hermes", droid: "droid",
-  codebuff: "codebuff", copilot: "copilot", opencode: "opencode",
-  openclaw: "openclaw", pi: "pi",
-  cursor: "other", roocode: "other", mux: "other", crush: "other",
-  antigravity: "other", "antigravity-cli": "other", zed: "other",
-  kiro: "other", trae: "other", warp: "other", cline: "other",
-  gjc: "other", grok: "other", jcode: "other", commandcode: "other",
-  micode: "other", junie: "other", zcode: "other",
-  opencodereview: "other", codebuddy: "other", workbuddy: "other",
-  synthetic: null,
-};
 
 /** Human-readable label for a tokscale client slug. */
 const CLIENT_LABELS = {