sigrank 0.19.0 → 1.0.1

package/CHANGELOG.md

@@ -0,0 +1,158 @@
+# Changelog
+
+## [0.0.203](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.0.202...v0.0.203) (2026-08-12)
+
+### Chores
+
+* auto-publish version bump (github-actions bot)
+
+## [0.0.202](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.0.201...v0.0.202) (2026-08-12)
+
+### Docs
+
+* add bestuser-router-mcp + sigarena to ecosystem table in README — all 4 repos now have identical 7-repo ecosystem tables
+
+## [0.0.201](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.0.200...v0.0.201) (2026-08-12)
+
+### Chores
+
+* sync package.json + server.json + manifest.json to 0.0.201 (match npm published version)
+
+## [0.0.200](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.0.179...v0.0.200) (2026-07-27 — 2026-08-10)
+
+### Features
+
+* 24-sub-stage experience ladder — mirror server's RS05_CLASS_THRESHOLDS ([adbd6e2](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/adbd6e2))
+* oh-my-pi (omp) added as a native 4-pillar platform adapter (#32) ([c7ddb78](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/c7ddb78))
+* opt-in provider usage proxy for capturing real token counts from API responses ([410113f](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/410113f))
+* omp dashboard loading is now opt-in in the TUI ([23613ed](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/23613ed))
+* omp Stage 2 — incremental SQLite cache for omp scans ([ffdf67c](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/ffdf67c))
+* sync 10 build archetypes — new names, families, construction-before-reuse precedence ([120be0b](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/120be0b))
+
+### Bug Fixes
+
+* resolve 8-pass review + privacy — single source of truth for version, tiers, cascade, constants ([56653ab](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/56653ab))
+* npm audit fix — resolve 3 transitive dependency vulnerabilities ([3bb7a11](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/3bb7a11))
+* resolve package.json path in cli.mjs (./ → ../) ([4fe94cd](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/4fe94cd))
+* ARCH+ sub-stage thresholds — 7T/3T/1T split (was all 7T) ([da0f12e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/da0f12e))
+* add 9router to TOKSCALE_CLIENT_MAP — closes platform sync gap ([d4b35ad](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/d4b35ad))
+* dedup duplicate messages + estimate cacheCreate when NULL ([ff60117](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/ff60117))
+* read native cache_creation_tokens instead of estimating, then reverted back to ioRatio estimation ([fc83512](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/fc83512), [f310f49](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/f310f49))
+* replace legacy 3-tier references with canonical 8-tier ladder ([f37701b](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/f37701b))
+* harden publish push-back + wire 3 missing contract tests into CI ([cdaa511](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/cdaa511))
+* publish to npm BEFORE git commit (prevents drift on failed publish) ([083b066](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/083b066))
+
+### Performance
+
+* omp Stage 1 — bounded concurrency (c=8) + line guard ([9643c91](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/9643c91))
+
+### CI/Chores
+
+* auto-publish to npm on push to main + dispatch version-sync to app ([f6ebc35](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/f6ebc35))
+* remove cross-repo dispatch — app auto-syncs from npm directly ([d590885](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/d590885))
+* full repo cleanup — organize, dedupe, sync versions ([9992127](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/9992127))
+* add workflow_dispatch trigger to publish.yml ([6ec383b](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/6ec383b))
+* add .DS_Store to .gitignore ([fa78f50](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/fa78f50))
+* gitignore bun.lock ([adee455](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/adee455))
+* add bunx sigrank to README quickstart ([977b92e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/977b92e))
+* add Bun/bunx quick reference to AGENTS.md ([2c73d0c](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/2c73d0c))
+* sync server.json to 0.0.200 + publish to MCP Registry ([9c97b5f](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/9c97b5f))
+
+## [0.0.179](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.0.178...v0.0.179) (2026-07-27)
+
+### Features
+
+* consent acknowledgment in enroll + submit flows (D1) — `tools/enroll.mjs` sends `consent_acknowledged=true` + `terms_version` + `privacy_version`; `presentation/cli.mjs` prompts for explicit TTY consent; `submit/index.mjs` embeds consent fields in Schema 1.0 payloads; new `resources/data-policy.md` registered as `sigrank://data-policy` MCP resource ([6789952](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/6789952))
+
+### Bug Fixes
+
+* TUI input during startup — navigation/quit now accepted while startup data is still loading ([d2078ab](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/d2078ab))
+* CI failures — `client_rollup: []` + `detected_clients: []` added to empty-data early returns in `tokscale_analytics.mjs`; contract test pointed at `submit/index.mjs` (was `submit.mjs` re-export); `@hono/node-server ^2.0.5` override for fast-uri vuln GHSA-v2hh-gcrm-f6hx ([6b56419](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/6b56419), [a2ebe8e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/a2ebe8e))
+* regenerate `package-lock.json` from scratch — previous lock file had invalid package tree (`npm ci` failed in CI) ([81781ec](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/81781ec))
+
+### Refactor
+
+* observatory-spine restructure — `tools.mjs` split into 28 individual tool files under `tools/`; files moved to domain dirs (`adapters/`, `analytics/`, `identity/`, `presentation/`, `prompts/`, `resources/`, `submit/`); inline resources/prompts extracted; root `.mjs` files are now 1-line re-export shims; observatory spine synced from sigrank-app ([6c06fee](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/6c06fee), [dc66eff](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/dc66eff), [9c92223](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/9c92223))
+
+### Chores
+
+* remove release-please workflow — versioning is now manual per VERSIONING_RULESET.md; release-please was causing version jumps (0.0.178 → 0.11.4 → 0.19.0) despite `bump-patch-only` ([adeeb65](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/adeeb65))
+* owner-only tools (ops-review + retire-operator) moved to sigadmin MCP ([0c9564b](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/0c9564b))
+* add OKF frontmatter to all spine docs (30 files) ([a6c722e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/a6c722e))
+* remove fake DRS environment.yaml ([71d3d60](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/71d3d60))
+* remove restructure planning docs (restructure complete) ([a8ae8cc](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/a8ae8cc))
+* CI: bump actions/checkout 4→7, setup-node 4→7, upload-artifact 4→7, github-script 7→9 ([9063b5e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/9063b5e), [e7f5039](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/e7f5039), [e897921](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/e897921), [c4dcf16](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/c4dcf16))
+* deps: bump tokscale in the patch-updates group ([b204b40](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/b204b40))
+
+## [0.19.1](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.19.0...v0.19.1) (2026-07-17)
+
+
+### Bug Fixes
+
+* revert to 3-digit versioning (0.0.178) + enforce in CI ([40aa9a6](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/40aa9a6d1c51ca299974e6fdfc4b36f24369635f))
+
+## [0.19.0](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.18.1...v0.19.0) (2026-07-14)
+
+
+### Features
+
+* add 'other' platform adapter for user-supplied token data ([0e6af8e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/0e6af8e36620df88c13822e292499b003442f645))
+* auto-detect platforms via tokscale instead of brute-force all adapters ([e72d2d9](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/e72d2d9f5615832cd58eaeff7e17ab961dc6fa49))
+* complete tokscale client map (40 clients) + model breakdown tool ([657b87a](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/657b87a690576ad81396e219c61447198ada67d8))
+* platform sync automation script + weekly CI check ([29096aa](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/29096aad1b2f3c0bce6dad15d8c4fa59871793e4))
+
+
+### Bug Fixes
+
+* unescaped backticks in index.mjs template literal + add devin/opencode to CLI platform list ([24cfdfe](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/24cfdfe956f4776fe8d88f2108a6dd644f7269d8))
+
+## [0.18.1](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.18.0...v0.18.1) (2026-07-14)
+
+
+### Bug Fixes
+
+* **test:** ALL_PLATFORMS count 15→16 + accept records() for devin adapter ([8d7f0f5](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/8d7f0f56cea3686e046a407732233f9bbd7d4916))
+
+## [0.18.0](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.17.2...v0.18.0) (2026-07-14)
+
+
+### Features
+
+* Lane 3 — intent schema files + competitive layer + eval benchmark ([42b9607](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/42b9607ba4cec8aa5f169b1caf74aa05017c4856))
+* multi-platform support in tokenpull + tokenpull_submit ([c2d1458](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/c2d1458d1f899034e9826d2100b8ec60b421ddd4))
+
+
+### Bug Fixes
+
+* align manifest.json version to 0.17.2 (matches package.json + server.json) ([30c3a37](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/30c3a372b3ac212bc99fd64535687cf6789922f2))
+* auto-clear code buffer on sign-in failure (0.17.5) ([72caa9a](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/72caa9a246c85e38663989981cd233ae98c3b03f))
+* curl fallback for Vercel bot protection 403 (0.0.177) ([abc8610](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/abc861041a3db14497383caecb39550667ec3b93))
+* Devin adapter reads from sessions.db (real per-message telemetry) ([a5aaaf2](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/a5aaaf275516e793aec0e58c13c09d985e68d05c))
+* Devin tokens now readable via tokenpull (tokscale fallback) ([abfb1eb](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/abfb1eb93fd92f669d742ce8b383dffc35ef094f))
+* Esc/arrow-key race condition in TUI (0.17.4) ([555e6bd](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/555e6bd3dd5e45963eff2ff95d85b02955d40e2b))
+* resolve CodeQL url-substring-sanitization alert (0.0.176) ([babf863](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/babf86379a2d97869738a1c8b01269c1d8c149bf))
+* route Devin through Codex-style ioRatio split ([08d4441](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/08d4441437ce38bdfacc8936d1771d654999ac28))
+* unblock sign-in deadlock + keystore resilience (0.17.3) ([569fc94](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/569fc948cd0f74fdf930113074c562724927ffe8))
+
+## [0.17.0](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.16.1...v0.17.0) (2026-07-10)
+
+
+### Features
+
+* add 4 MCP resources (scoring formula, class tiers, install guide, privacy model) ([1227828](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/1227828159c299bd1a5e0ebf3bb47aece3d3583d))
+
+
+### Bug Fixes
+
+* add .mcpbignore + fix manifest.json repository object for MCPB bundle ([eb1046f](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/eb1046f6e291db8681e01aa06593091a9b94447d))
+* add title annotations to all 15 MCP tools (Anthropic directory requirement E) ([36e7d5d](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/36e7d5d793fe25d4dd9d780422309594a4118311))
+* bump manifest.json to 0.16.1 + update description ([abd19b0](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/abd19b0a6a713389c1f0b4eb6b17ccc41c9825bd))
+* Smithery bundle + metadata fixes ([d2a3a10](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/d2a3a10d5106c506ea2a57ac3f6ccc36ee9a55f6))
+* update server.json — add registryBaseUrl, _meta, better description ([a929a6e](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/a929a6e4052b9edb9d549434f803a85f5d4fc572))
+
+## [0.16.1](https://github.com/SunrisesIllNeverSee/sigrank-mcp/compare/v0.16.0...v0.16.1) (2026-07-09)
+
+
+### Bug Fixes
+
+* remove readOnlyHint from watch_tokenpull ([c867eed](https://github.com/SunrisesIllNeverSee/sigrank-mcp/commit/c867eedc9de1f4f37e0a9db08bc41aa0d426be33))

package/MCP_SERVER_DESCRIPTION.md

@@ -0,0 +1,172 @@
+# SigRank MCP Server
+
+> Operator leaderboard measuring users, not models — 24 tools, TUI, signed submit, privacy-first.
+
+SigRank is the first leaderboard that ranks **AI operators** — the humans — by token cascade efficiency, not the models. The yield metric (Υ = cache_read × output / input²) turns raw token telemetry into a competitive ranking on [signalaf.com](https://signalaf.com).
+
+## Install
+
+```bash
+npx sigrank
+```
+
+Or add to your MCP client config:
+
+```json
+{
+  "mcpServers": {
+    "sigrank": {
+      "command": "npx",
+      "args": ["sigrank"],
+      "env": {
+        "SIGRANK_API_BASE": "https://signalaf.com"
+      }
+    }
+  }
+}
+```
+
+**No API key required** for read tools (leaderboard, operator profiles, ranking). Submit tools need a Supabase anon key (free, set during `sigrank enroll`).
+
+## Privacy
+
+The scanner runs **locally**. Only four token counts leave the machine:
+- `input` — tokens sent to the model
+- `output` — tokens generated by the model
+- `cacheCreate` — tokens written to cache
+- `cacheRead` — tokens read from cache
+
+**Never** prompts. **Never** code. **Never** outputs. Submissions are ed25519-signed and server-verifiable.
+
+## TUI
+
+SigRank ships with a full terminal UI (`sigrank tui`) — a live dashboard for your token cascade:
+
+```bash
+npx sigrank tui
+```
+
+Features:
+- Live cascade metrics (Υ Yield, SNR, Leverage, Velocity, 10xDEV)
+- Real-time leaderboard feed from signalaf.com
+- Operator class tier display (8-tier experience ladder: ARCH+ to IGNITER)
+- Per-window breakdowns (7d / 30d / 90d / all-time)
+- Keyboard-driven — no mouse needed
+
+## CLI Commands
+
+```bash
+npx sigrank enroll              # Register as an operator (generates ed25519 keypair)
+npx sigrank submit              # Submit token telemetry to the board
+npx sigrank tui                 # Launch the terminal UI dashboard
+npx sigrank rank                # Quick local rank check (no submit)
+npx sigrank diagnose            # Diagnose cascade inefficiencies
+npx sigrank improve             # Get improvement suggestions
+```
+
+## The 24 MCP Tools
+
+### Read-only — pure math (no auth, no filesystem)
+
+| # | Tool | What it does |
+|---|------|-------------|
+| 1 | `rank_paste` | Paste token counts, get projected SigRank rank instantly. Computes the full yield cascade locally (Υ, SNR, Leverage, Velocity, 10xDEV, class tier). No network calls. |
+| 2 | `rank_windows` | Rank all four time windows (7d/30d/90d/all-time) in one call from a dashboard paste. Paste the full table from ccusage, tokscale, or Claude Max dashboard. |
+| 3 | `simulate_change` | "What if I changed my token mix?" — takes your current pillars + proposed changes, runs the cascade on both, returns exact Υ delta, class change, and per-metric diffs. Pure local math. |
+| 4 | `diagnose_cascade` | Analyzes your token cascade and diagnoses where you're leaking efficiency. Returns ranked list of leaks with severity, findings, recommendations, and estimated Υ impact per fix. |
+| 5 | `suggest_improvements` | Generates ranked, simulated improvement suggestions. Tests multiple strategies (increase cache reads, reduce input, increase output, optimize cache creation), simulates each, returns ranked by Υ impact. |
+| 6 | `self_improve` | One-click optimize — runs the full cycle in one call: tokenpull → diagnose → suggest → simulate. Returns diagnosis + suggestions + simulated impact of the best change. Supports scope modes (daily/weekly/trend). |
+
+### Read-only — calls signalaf.com API (no auth)
+
+| # | Tool | What it does |
+|---|------|-------------|
+| 7 | `get_leaderboard` | Fetch the live public leaderboard from signalaf.com. Returns all ranked operators sorted by yield, with codename, Υ, leverage, velocity, class, and rank position. |
+| 8 | `get_operator` | Get any operator's full profile by codename. Returns detailed metrics + per-window breakdowns (7d/30d/90d/all-time) with the four token pillars per window. |
+| 9 | `discover_peers` | Find mentors, peers, and complementary operators for your operator on the leaderboard. |
+
+### Read-only — local filesystem (no auth, no network)
+
+| # | Tool | What it does |
+|---|------|-------------|
+| 10 | `tokenpull` | Pull your LOCAL token usage from session logs and rank it across all four windows — zero paste. Reads token counts, not message content. Numbers stay on your machine. 17 platform adapters. |
+| 11 | `tokenpull_compare` | Pull token usage from ALL four local sources in parallel (JSONL canon, ccusage CLI, token-dashboard SQLite, tokscale) and compare side-by-side with delta % vs baseline. |
+| 12 | `watch_tokenpull` | One poll per call — pulls local token logs and returns current cascade for the watched window. Re-call at your desired cadence to monitor. With `submit:true`, signs + publishes (rate-limited to once per 5 min). |
+
+### Write — submit to board (needs enrolled identity)
+
+| # | Tool | What it does |
+|---|------|-------------|
+| 13 | `submit_paste` | Ranks a paste of token counts AND publishes to the live board in one call. Computes local preview, then submits to server for authoritative scoring. Returns both local + server results. |
+| 14 | `tokenpull_submit` | Pull your LOCAL token usage AND publish to the board in one call — the zero-paste flow. Reads pillars per window, computes cascade, submits each window server-side. Token-only, no prompt content. |
+| 15 | `submit_verified` | Publish your LOCAL token runs as a VERIFIED operator — the enrolled, signed path. Reads pillars, builds Schema 1.0 snapshot, ed25519-signs with your device key, POSTs to board. Requires `enroll` first. |
+| 16 | `enroll` | Bind THIS device to your SigRank operator. Paste the key from signalaf.com → Settings → "New key". Generates + stores a local ed25519 keypair. Only the PUBLIC key is ever sent. |
+
+### Tokscale analytics — local tokscale data (no auth, no network)
+
+| # | Tool | What it does |
+|---|------|-------------|
+| 17 | `tokscale_breakdown` | Per-model token breakdown across platforms (models under threshold → "other"). |
+| 18 | `tokscale_market_share` | AI tool market share: each tool's % of tokens/cost/messages, ranked. From local tokscale data. |
+| 19 | `tokscale_developer_profile` | Per-developer usage profile across all detected tools: model mix, pillars, sessions, workspaces. Paths redacted. |
+| 20 | `tokscale_model_trends` | Model adoption over time: per-model first/last seen, active days, month-by-month adoption curve. |
+| 21 | `tokscale_cost_analysis` | Cost per developer per model: cost_per_million_tokens, cost_per_message, share_cost, client rollup. |
+| 22 | `tokscale_device_profile` | Device fingerprinting: installed tools, session counts, active days, day-of-week distribution, concurrency. Paths redacted. |
+| 23 | `tokscale_mcp_usage` | MCP server usage: detected servers, detection window, active days. |
+| 24 | `tokscale_competitive_intel` | Competitive intelligence for any AI tool: rank, model mix, cost efficiency, share vs all competitors. |
+
+### Moved to bestuser-router-mcp (5 intent tools)
+
+The following 5 tools were moved to [bestuser-router-mcp](https://github.com/SunrisesIllNeverSee/bestuser-router-mcp) to keep sigrank-mcp focused as a measurement instrument. They are available as a separate npm package (`npx bestuser-router-mcp`):
+
+| Tool | Intent | Trigger |
+|------|--------|---------|
+| `get_best_operator` | BEST_OPERATOR | "who is the best AI user?" |
+| `compare_self` | COMPARE_SELF | "how do I measure up?" |
+| `compare_operators` | COMPARE_OPERATORS | "compare X vs Y" |
+| `describe_power_user` | DESCRIBE_POWER_USER | "what is a power user?" |
+| `optimize_efficiency` | OPTIMIZE_EFFICIENCY | "how can I use AI more efficiently?" |
+
+## Intent Taxonomy
+
+The intent-based tools (in bestuser-router-mcp) are designed to map natural-language queries to the right MCP call. Calling agents and LLMs can use these intent mappings to route user questions:
+
+| Intent | Trigger phrases | Tool |
+|--------|----------------|------|
+| `BEST_OPERATOR` | "who is the best AI user?", "AI user leaderboard", "AI champions", "top AI operator" | `get_best_operator` |
+| `COMPARE_SELF` | "how do I measure up?", "am I a power user?", "compare me to others", "am I using AI well?" | `compare_self` |
+| `COMPARE_OPERATORS` | "compare operator X vs Y", "who is more efficient?", "how do two AI users compare?" | `compare_operators` |
+| `DESCRIBE_POWER_USER` | "what is an AI power user?", "what makes a good AI user?", "describe advanced AI user behavior" | `describe_power_user` |
+| `OPTIMIZE_EFFICIENCY` | "optimize token usage", "reduce token burn", "use AI efficiently", "stop tokenmaxxing" | `optimize_efficiency` |
+
+### Example prompt → tool mappings
+
+- "Who is the best AI user right now?" → `get_best_operator`
+- "How do I measure up to other AI users?" → `compare_self`
+- "Am I an AI power user?" → `compare_self`
+- "Compare operator X vs Y" → `compare_operators`
+- "What is an AI power user?" → `describe_power_user`
+- "How can I use AI more efficiently?" → `optimize_efficiency`
+- "Show me the AI user leaderboard" → `get_best_operator` (or `get_leaderboard` for raw data)
+
+## Key Facts
+
+| Field | Value |
+|-------|-------|
+| npm package | `sigrank` |
+| GitHub | https://github.com/SunrisesIllNeverSee/sigrank-mcp |
+| Website | https://signalaf.com |
+| License | MIT |
+| Transport | stdio |
+| Platform | Cross-platform (Node.js) |
+| Language | JavaScript |
+| Tools | 24 |
+| Auth | None for reads; Supabase anon key for submits |
+| Category | Developer Tools |
+
+## Registries
+
+- [Official MCP Registry](https://registry.modelcontextprotocol.io)
+- [Smithery](https://smithery.ai)
+- [Glama](https://glama.ai)
+- [npm](https://www.npmjs.com/package/sigrank)

package/README.md

@@ -1,16 +1,17 @@
-# SigRank MCP
+# SigRank SignalAF MCP
 
-> **🏆 SigRank is live: [signalaf.com](https://signalaf.com)** — the leaderboard for how
-> efficiently you use AI, not how much. Run `npx sigrank` to see your cascade now.
-> _Token counts only. Never your prompts._
+> **🏆 SigRank SignalAF is live: [signalaf.com](https://signalaf.com)** — the AI operator
+> evaluation leaderboard. Ranks how efficiently you use AI by token cascade
+> efficiency (Υ = cache_read × output / input²), not how much. Run `npx sigrank`
+> to see your cascade now. _Token counts only. Never your prompts._
 
 <div align="center">
 
-<p><img src="./.github/assets/og-card.png" alt="SigRank — the new standard in AI evaluation &amp; benchmarks" width="800"></p>
+<p><img src="./.github/assets/og-card.png" alt="SigRank SignalAF — AI operator evaluation and token cascade efficiency leaderboard" width="800"></p>
 
 **The yield cascade + live leaderboard as MCP tools any agent can call.**
 
-For all builders, burners and 10xers.
+SigRank evaluates the human using the AI — not the AI model itself.
 
 [![npm version](https://img.shields.io/npm/v/sigrank.svg?style=flat-square&color=gold)](https://www.npmjs.com/package/sigrank)
 [![CI](https://github.com/SunrisesIllNeverSee/sigrank-mcp/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/SunrisesIllNeverSee/sigrank-mcp/actions/workflows/ci.yml)
@@ -31,7 +32,7 @@ For all builders, burners and 10xers.
 
 ## Table of Contents
 
-- [The SigRank ecosystem](#the-sigrank-ecosystem)
+- [The SigRank SignalAF ecosystem](#the-sigrank-signalaf-ecosystem)
 - [Quickstart](#quickstart--3-steps-to-the-board)
 - [Install from GitHub](#install-from-github)
 - [Install via Smithery](#install-via-smithery)
@@ -49,19 +50,21 @@ For all builders, burners and 10xers.
 
 |                                       The board                                       |                               Your operator profile                               |
 | :-----------------------------------------------------------------------------------: | :-------------------------------------------------------------------------------: |
-| [![SigRank leaderboard](./.github/assets/board.png)](https://signalaf.com/board/all)  | [![SigRank operator profile](./.github/assets/profile.png)](https://signalaf.com) |
+| [![SigRank SignalAF leaderboard](./.github/assets/board.png)](https://signalaf.com/board/all)  | [![SigRank SignalAF operator profile](./.github/assets/profile.png)](https://signalaf.com) |
 | Every operator ranked by **Υ Yield** — the architecture of the cascade, not raw spend |      Cascade layer, class, and fingerprint — derived from four token counts       |
 
 > **Run [`sigrank enroll`](#sign-in--submit) then [`sigrank submit`](#sign-in--submit) to get ranked and claim your public profile at [signalaf.com](https://signalaf.com).**
 
 ---
 
-## The SigRank ecosystem
+## The SigRank SignalAF ecosystem
 
 | Repo | What it is | Install |
 |------|-----------|---------|
 | **[sigrank-mcp](https://github.com/SunrisesIllNeverSee/sigrank-mcp)** (this repo) | The instrument — extracts 4 token pillars, computes the cascade, submits to the leaderboard. MCP server + TUI dashboard. | `npx sigrank` |
 | **[sigrank-app](https://github.com/SunrisesIllNeverSee/sigrank-app)** | The leaderboard — signalaf.com. Privacy-preserving operator profiles, class tiers, board rankings. | [signalaf.com](https://signalaf.com) |
+| **[bestuser-router-mcp](https://github.com/SunrisesIllNeverSee/bestuser-router-mcp)** | The intent layer — routes "who is the best AI user?" queries to SigRank SignalAF's leaderboard. MCP server for AI assistants. | `npx bestuser-router-mcp` |
+| **[sigarena](https://github.com/SunrisesIllNeverSee/sigarena)** | The satellite — public LLM operator evals at sigeconomy.com. Read-only leaderboard, SEO/AEO surface. | [sigeconomy.com](https://sigeconomy.com) |
 | **[signaf](https://github.com/SunrisesIllNeverSee/signa)** | The coach — reads your session logs, builds a taste profile, measures ASI, coaches you on token efficiency. | `npx @burnmydays/signaf` |
 | **[sigrank-vscode](https://github.com/SunrisesIllNeverSee/sigrank-vscode)** | The IDE extension — see your cascade metrics inline in VS Code. | `code --install-extension sigrank.sigrank` |
 | **[fundscore](https://github.com/SunrisesIllNeverSee/fundscore)** | The repo scorer — investor-readiness scoring for GitHub repos. CLI + MCP server. | `npx fundscore` |
@@ -71,7 +74,7 @@ For all builders, burners and 10xers.
 | Site | What it is |
 | ---- | ---------- |
 | **[SIGNOMY](https://signomy.xyz)** | Governed AI agent marketplace where ranked agents form teams, fill slots, run missions, and earn revenue under constitutional protocol. Agents are free. Operators pay. |
-| **[MO§ES](https://mos2es.com)** | The governance framework that underpins SigRank, SIGNOMY, and all governed agent operations. Structural accountability for agentic systems. |
+| **[MO§ES](https://mos2es.com)** | The governance framework that underpins SigRank SignalAF, SIGNOMY, and all governed agent operations. Structural accountability for agentic systems. |
 
 ## Quickstart — 3 steps to the board
 
@@ -96,6 +99,7 @@ Or just explore without signing in:
 ```bash
 sigrank          # launches the full tabbed TUI (dashboard, compare, board, watch)
 npx sigrank board --once    # print the live leaderboard once
+bunx sigrank board --once   # same, via Bun (faster startup if you have it)
 ```
 
 ## Install from GitHub
@@ -124,7 +128,7 @@ sigrank
 
 ## Install via Smithery
 
-SigRank is available on [Smithery](https://smithery.ai/servers/burnmydays/sigrank) as a stdio MCP bundle — one-click install for Claude Desktop, Cursor, and other MCP clients.
+SigRank SignalAF is available on [Smithery](https://smithery.ai/servers/burnmydays/sigrank) as a stdio MCP bundle — one-click install for Claude Desktop, Cursor, and other MCP clients.
 
 ### Smithery CLI
 
@@ -132,7 +136,7 @@ SigRank is available on [Smithery](https://smithery.ai/servers/burnmydays/sigran
 # Install Smithery CLI
 npm install -g smithery
 
-# Connect to SigRank (downloads the MCPB bundle locally)
+# Connect to SigRank SignalAF (downloads the MCPB bundle locally)
 smithery mcp add burnmydays/sigrank --id sigrank
 
 # List available tools
@@ -154,7 +158,7 @@ smithery tool call sigrank rank_paste '{"text": "1000000 500000 50000 800000"}'
 ## Commands
 
 ```
-⊙ SigRank CLI  v0.0.177
+⊙ SigRank SignalAF CLI  v0.0.177
 
 Default (no args)
   sigrank              unified dashboard: cascade + token pillars + board
@@ -172,12 +176,15 @@ Commands
   watch                    live tune meter — ALL active platforms × all windows, every 30s
   watch --platform codex   watch only one platform (optional filter)
   watch --window 7d        watch only one window (optional filter)
+  proxy                    opt-in local Anthropic/OpenAI usage proxy
+  proxy --port 9000        run the proxy on a custom loopback port
 
 Options
   --window    7d · 30d · 90d · all  (default: 30d for board; all windows for watch)
   --platform  claude · codex · amp · gemini · opencode · goose · …
   --refresh   poll interval in seconds (default: 30)
   --once      print once and exit (board only)
+  --port      proxy port (default: 8787)
 
 For AI clients (not typeable)
   In a piped/non-TTY context, sigrank is an MCP stdio server.
@@ -193,6 +200,34 @@ Examples
   sigrank board --window all --once
 ```
 
+### Optional API usage proxy
+
+Some desktop coding agents receive provider usage in API responses but do not
+persist it in their local session files. SigRank SignalAF can capture those
+provider-reported counts through a manually started loopback proxy:
+
+```bash
+sigrank proxy              # http://localhost:8787
+sigrank proxy --port 9000  # custom port
+```
+
+Then point a compatible tool's API base URL at the displayed local URL. The
+first release supports Anthropic Messages (`/v1/messages`), OpenAI Chat
+Completions (`/v1/chat/completions`), and OpenAI Responses (`/v1/responses`).
+The tool must support a custom API base URL; this is not guaranteed for every
+desktop client.
+
+The proxy is **off by default**: it opens no port and observes no traffic unless
+you explicitly run `sigrank proxy`. It binds only to loopback and stops when the
+command exits. Request and response content, API keys, and tool calls are
+forwarded transiently but never written to disk. Only usage metadata is appended
+to `~/.sigrank-mcp/proxy-sessions.jsonl` (directory `0700`, file `0600`).
+
+Anthropic and OpenAI calls are currently grouped under one `proxy` platform row.
+For streamed Chat Completions, SigRank SignalAF sets OpenAI's
+`stream_options.include_usage=true` so the provider includes the final usage
+chunk; response chunks are still forwarded immediately.
+
 ### The TUI is the whole app
 
 Launch it and sign in inside it:
@@ -277,6 +312,14 @@ Or if installed globally:
 | `compare_operators(a, b)`             | `{codename_a, codename_b}`                                                       | Side-by-side comparison with behavioral verdict. Intent: "compare operator X vs Y"                                                                                         |
 | `describe_power_user()`               | `{}`                                                                             | Static explanation of AI power user archetype + metrics explained. Intent: "what is an AI power user?"                                                                     |
 | `optimize_efficiency(codename? \| text?)` | `{codename?}` or `{text?}`                                                   | Ranked efficiency suggestions tied to your cascade shape. Intent: "how can I use AI more efficiently?"                                                                     |
+| `tokscale_breakdown(threshold?)`       | `{threshold?}`                                                                   | Per-model token breakdown across platforms (models under threshold → "other")                                                                                              |
+| `tokscale_market_share()`              | `{}`                                                                             | AI tool market share: each tool's % of tokens/cost/messages, ranked. From local tokscale data                                                                              |
+| `tokscale_developer_profile()`         | `{}`                                                                             | Per-developer usage profile across all detected tools: model mix, pillars, sessions, workspaces. Paths redacted                             |
+| `tokscale_model_trends()`              | `{}`                                                                             | Model adoption over time: per-model first/last seen, active days, month-by-month adoption curve                                                                            |
+| `tokscale_cost_analysis()`             | `{}`                                                                             | Cost per developer per model: cost_per_million_tokens, cost_per_message, share_cost, client rollup                                                                        |
+| `tokscale_device_profile()`            | `{}`                                                                             | Device fingerprinting: installed tools, session counts, active days, day-of-week distribution, concurrency. Paths redacted                  |
+| `tokscale_mcp_usage()`                 | `{}`                                                                             | MCP server usage: detected servers, detection window, active days                                                                                                         |
+| `tokscale_competitive_intel(target)`   | `{target}`                                                                       | Competitive intelligence for any AI tool: rank, model mix, cost efficiency, share vs all competitors                                                                      |
 
 ---
 
@@ -324,28 +367,31 @@ Verifier numbers (ccusage/tokscale for codex) show **raw uncached input** (`inpu
 
 ## Platform adapters
 
-All adapters are token-only (no message content, no cost fields, no credentials).
-
-| Platform           | Path                                           | Notes                                                           |
-| ------------------ | ---------------------------------------------- | --------------------------------------------------------------- |
-| Claude Code        | ✅ `~/.claude/projects`                        | Native; dedup by `(session_id, message_id)`; subagents included |
-| Codex              | ✅ `~/.codex/sessions`                         | Estimated input via `io_ratio`; verified vs ccusage             |
-| Devin CLI          | ✅ `~/.local/share/devin/cli/sessions.db`      | Estimated input via `io_ratio`; SQLite; same split as Codex     |
-| Amp                | ✅ `~/.local/share/amp/threads`                | Full 4-pillar; per-message                                      |
-| Kimi               | ✅ `~/.kimi/sessions`                          | Full 4-pillar; `StatusUpdate` lines only                        |
-| pi-agent           | ✅ `~/.pi/agent/sessions`                      | Full 4-pillar; per-message JSONL                                |
-| OpenClaw           | ✅ `~/.openclaw`                               | Full 4-pillar; per-message JSONL                                |
-| Droid              | ✅ `~/.factory/sessions/*.settings.json`       | Full 4-pillar; thinking→output                                  |
-| Codebuff           | ✅ `~/.config/manicode`                        | Full 4-pillar; `chat-messages.json`                             |
-| Hermes             | ✅ `~/.hermes/state.db`                        | Full 4-pillar; SQLite; reasoning→output                         |
-| Kilo               | ✅ `~/.local/share/kilo/kilo.db`               | Full 4-pillar; SQLite                                           |
-| Qwen               | ✅ `~/.qwen/projects`                          | `cacheCreate=0` estimated; thought→output                       |
-| Goose              | ✅ `~/.local/share/goose/sessions/sessions.db` | `cacheCreate=cacheRead=0` estimated; SQLite                     |
-| Gemini CLI         | ✅ `~/.gemini/tmp`                             | `cacheCreate=0` estimated; cache extracted from input field     |
-| GitHub Copilot CLI | ✅ `~/.copilot/otel`                           | OTel JSONL; requires `COPILOT_OTEL_ENABLED=true`                |
-| OpenCode           | ⚠️ `~/.local/share/opencode`                   | Raw token counts not persisted in log format                    |
-| Cursor             | 🔜                                             | Chat log path TBD                                               |
-| Windsurf           | 🔜                                             | Session logs at `~/.codeium/windsurf/`                          |
+All adapters are token-only (no message content, no cost fields, no credentials). The table below is regenerated from the adapter file headers in `adapters/index.mjs` + `adapters/tokenpull.mjs` so the path, pillar shape, and notes match the actual code (a prior revision had drifted on Qwen/Codex/Copilot).
+
+| Platform           | Path                                           | Pillar shape & notes                                                                                              |
+| ------------------ | ---------------------------------------------- | ----------------------------------------------------------------------------------------------------------------- |
+| Claude Code        | ✅ `~/.claude/projects` (recursive, incl. `subagents/`) | Native 4-pillar; dedup by `(session_id, message_id)` — final snapshot wins                                  |
+| Codex              | ✅ `~/.codex/sessions` (+ `archived_sessions`) | `input_tokens` incl. cached → `input` + `cacheCreate` split window-level via `io_ratio`; `cacheRead` native (`cached_input_tokens`); `reasoning_output`→output; verified vs ccusage (~1%) |
+| Devin CLI          | ✅ `~/.local/share/devin/cli/sessions.db`      | SQLite; native 4-pillar from `metadata.metrics` (`input_tokens`, `output_tokens`, `cache_read_tokens`, `cache_creation_tokens`); `input_tokens` is fresh (excludes cache)                                   |
+| Amp                | ✅ `~/.local/share/amp/threads`                | Native 4-pillar; per-message                                                                                      |
+| Kimi               | ✅ `~/.kimi/sessions`                          | Native 4-pillar; `StatusUpdate` lines only                                                                        |
+| pi-agent           | ✅ `~/.pi/agent/sessions`                      | Native 4-pillar; per-message JSONL                                                                                |
+| oh-my-pi (`omp`)   | ✅ `~/.omp/agent/sessions` (recursive, incl. nested subagent transcripts) | Native 4-pillar from `.message.usage` on `type:"message"` entries (`cacheWrite`→`cacheCreate`); **`reasoningTokens` is already inside `output`** — never added, or it double-counts; `usage.cost` reuses the same four key names for USD floats and is dropped; dedup by (session header `id`, entry `id`). Separate harness from pi-agent |
+| OpenClaw           | ✅ `~/.openclaw`                               | Native 4-pillar; per-message JSONL                                                                                |
+| Droid              | ✅ `~/.factory/sessions/*.settings.json`       | Native 4-pillar; `thinking_tokens`→output                                                                         |
+| Codebuff           | ✅ `~/.config/manicode`                        | Native 4-pillar; `chat-messages.json`                                                                             |
+| Hermes             | ✅ `~/.hermes/state.db`                        | Native 4-pillar; SQLite; `reasoning_tokens`→output                                                                |
+| Kilo               | ✅ `~/.local/share/kilo/kilo.db`               | Native 4-pillar; SQLite                                                                                            |
+| Qwen               | ✅ `~/.qwen/projects`                          | Estimated (`cacheCreate=0` — no field in logs); `cacheRead` from `cachedContentTokenCount`; `thoughtsTokenCount`→output |
+| Goose              | ✅ `~/.local/share/goose/sessions/sessions.db` (or `$GOOSE_PATH_ROOT/data/sessions/sessions.db`) | Estimated (`cacheCreate=cacheRead=0` — no cache fields); reasoning = `total−input−output`→output; cumulative-column dedup by session id |
+| Gemini CLI         | ✅ `~/.gemini/tmp`                             | Estimated (`cacheCreate=0`); `cacheRead` from `cached` field; `thought`→output; `input` = `input−cached` (fresh)  |
+| GitHub Copilot CLI | ✅ `~/.copilot/otel`                           | Native 4-pillar (OTel spans: `llm.token_count.{prompt,completion,cache_creation,cache_read}`); requires `COPILOT_OTEL_ENABLED=true` + `COPILOT_OTEL_EXPORTER_TYPE=file` set **before** session start |
+| OpenCode           | ⚠️ `~/.local/share/opencode`                   | Data gap — logs store `cost:0` and derive tokens via LiteLLM at runtime; raw token counts not persisted. No pillars readable with current format |
+| SigRank SignalAF proxy      | ✅ `~/.sigrank-mcp/proxy-sessions.jsonl`       | Opt-in native 4-pillar usage reported by Anthropic/OpenAI; same-timestamp records keep the last call; OpenAI cached input is separated from fresh input |
+| Other (user JSON)  | ✅ `$SIGRANK_OTHER_PATH`                       | User-supplied JSON `{ "windows": { "all": {input,output,cacheCreate,cacheRead} } }`; all-time only (no timestamps) |
+| Cursor             | 🔜                                             | Chat log path TBD                                                                                                 |
+| Windsurf           | 🔜                                             | Session logs at `~/.codeium/windsurf/`                                                                            |
 
 `estimated=true` means one or more pillars are derived, not native. The server re-scores all submitted pillars authoritatively; local preview Υ is indicative only.
 
@@ -353,7 +399,7 @@ All adapters are token-only (no message content, no cost fields, no credentials)
 
 ## Privacy
 
-- **Token-only, always.** No message content is ever read, logged, or transmitted — only token counts (`input`, `output`, `cache_creation`, `cache_read`), message IDs, and timestamps.
+- **Token-only persistence and submission.** Local-log adapters read usage metadata only. The optional proxy necessarily handles provider-bound request and response bytes in memory, but never persists their content; it writes only token counts, model/backend metadata, and timestamps. Only token telemetry is submitted to SigRank SignalAF.
 - **Local by default.** `tokenpull` reads only `~/.claude/projects` (Claude) or `~/.codex` (Codex) on your device. Numbers stay on your machine unless you explicitly submit with a codename.
 - **Background tooling excluded.** Memory plugins, observers, summarizers (e.g. `claude-mem`, `mem0`, `observer-sessions`) are filtered from both Claude and Codex reads. `subagents/` are kept — they represent real operator work.
 - **Board reads are anonymous.** No account needed to browse, compare, or watch.
@@ -373,19 +419,20 @@ All adapters are token-only (no message content, no cost fields, no credentials)
 ## Dev / test
 
 ```bash
-node test.mjs          # 13 test groups, 200 assertions (no network, no fs writes)
+node test.mjs          # 313-assertion baseline + proxy tests (local mocks only; temp filesystem)
 node sign.test.mjs     # ed25519 signing + canon parity
 node index.mjs         # stdio MCP server directly (pipe to MCP client)
 ```
 
-Tests verify (13 groups, 200 assertions):
+Tests verify (14 groups, 313 assertions):
 
 - `rank_paste` canon: MO§ES `(1251211, 11296121, 128196310, 2555179769)` → Υ 18436.98 · TRANSMITTER
 - `submit_paste` preview (no codename) + POST shape (injected fetch, no live writes)
 - `tokenpull` dedup, window slicing, 4-window pillars (mock adapter)
 - `tokenpull_submit` all 4 windows POST, sha256 hash, ddmmyy stamp
 - `tokenpullCodex` io_ratio conversion per-window
-- Adapter registry (15 platforms) + per-adapter shape contracts
+- Adapter registry (17 platforms) + per-adapter shape contracts
+- Local proxy: Anthropic/OpenAI JSON + fragmented SSE, live pass-through, secure JSONL, error forwarding
 - `rank_windows` 4-window paste scoring, partial input, no-network
 - `watch_tokenpull` cascade snapshot, interval_s, submit path
 - `enroll` posts identity (public key only), maps 201 enrolled + 410 code_invalid
@@ -401,11 +448,12 @@ Tests verify (13 groups, 200 assertions):
 | File            | Responsibility                                                          |
 | --------------- | ----------------------------------------------------------------------- |
 | `index.mjs`     | Entry point — TTY detection, routes to CLI or MCP server                |
+| `proxy.mjs`     | Opt-in loopback Anthropic/OpenAI proxy and usage capture                |
 | `cli.mjs`       | CLI commands: board, compare, watch, enroll, submit, help               |
 | `tui.mjs`       | Full tabbed TUI: Dashboard / Trends / Compare / Board / Watch / Connect |
 | `cascade.mjs`   | Pure cascade math (Υ, SNR, leverage, velocity, 10xDEV, class)           |
 | `tokenpull.mjs` | On-device log scanner — Claude, Codex, multi-platform                   |
-| `adapters.mjs`  | Platform adapter registry (15+ platforms)                               |
+| `adapters.mjs`  | Platform adapter registry (16+ platforms)                               |
 | `tools.mjs`     | MCP tool table + dispatcher                                             |
 | `connect.mjs`   | Connect-code enrollment + device identity                               |
 | `keystore.mjs`  | Local key management (paste-keys, not API keys)                         |
@@ -420,7 +468,7 @@ Tests verify (13 groups, 200 assertions):
 
 ## Contributing
 
-Contributions welcome. SigRank MCP is built in the open.
+Contributions welcome. SigRank SignalAF MCP is built in the open.
 
 - [Contributing guide](./.github/CONTRIBUTING.md)
 - [Security policy](https://github.com/SunrisesIllNeverSee/sigrank-mcp/security/policy)