sigrank 1.0.31 → 1.0.33

package/index.mjs

@@ -56,13 +56,14 @@ function serverVersion() {
 // than hanging on a broken connection.
 process.on("uncaughtException", (err) => {
   process.stderr.write(
-    `[sigrank-mcp] uncaughtException: ${err?.stack || err}\n`,
+    `[sigrank-mcp] uncaughtException: ${err?.message || err}\n`,
   );
   process.exit(1);
 });
 process.on("unhandledRejection", (reason) => {
+  const msg = reason instanceof Error ? reason.message : String(reason);
   process.stderr.write(
-    `[sigrank-mcp] unhandledRejection: ${reason?.stack || reason}\n`,
+    `[sigrank-mcp] unhandledRejection: ${msg}\n`,
   );
   process.exit(1);
 });

package/manifest.json

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/anthropics/mcpb/main/schemas/mcpb-manifest-v0.4.schema.json",
   "manifest_version": "0.4",
   "name": "sigrank",
-  "version": "1.0.30",
+  "version": "1.0.32",
   "description": "Ranks AI coding operators by token cascade efficiency (Yield = cache_read \u00d7 output / input\u00b2). 25 tools including SigRank Standard record, yield calculation, local token usage pulls, signed submission, and tokscale-powered analytics (market share, developer profiles, model trends, cost analysis, device profiles, MCP usage, competitive intelligence). Privacy-first: runs locally, only four token counts leave the machine.",
   "author": {
     "name": "SunrisesIllNeverSee",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigrank",
-  "version": "1.0.31",
+  "version": "1.0.33",
   "author": "SunrisesIllNeverSee (https://github.com/SunrisesIllNeverSee)",
   "description": "Upsilon measurement engine distributed through the sigrank CLI/MCP compatibility package, with SigRank public leaderboard tools.",
   "mcpName": "io.github.SunrisesIllNeverSee/sigrank-mcp",
@@ -87,12 +87,12 @@
     "@modelcontextprotocol/sdk": "^1.0.0",
     "token-cascade": "^0.2.1",
     "ccusage": "^20.0.19",
-    "tokscale": "^4.7.0",
-    "tteop-spec": "0.1.5-draft"
+    "tokscale": "^4.7.0"
   },
   "devDependencies": {
     "@resvg/resvg-js": "^2.6.2",
-    "gifenc": "^1.0.3"
+    "gifenc": "^1.0.3",
+    "tteop-spec": "0.1.5-draft"
   },
   "overrides": {
     "@hono/node-server": "^2.0.5"

package/submit/index.mjs

@@ -12,6 +12,7 @@
 import { snapshotHash, signPayload } from "../identity/sign.mjs";
 import { preflight } from "./preflight.mjs";
 import { pkgVersion } from "../lib/pkg-version.mjs";
+import { validateApiBase } from "../tools/_helpers.mjs";
 import {
   TERMS_VERSION,
   PRIVACY_VERSION,
@@ -179,8 +180,9 @@ export async function submitSignedWindow(
     };
   }
 
-  const apiBase =
-    opts.apiBase || process.env.SIGRANK_API_BASE || "https://signalaf.com";
+  const apiBase = validateApiBase(
+    opts.apiBase || process.env.SIGRANK_API_BASE || "https://signalaf.com",
+  );
   // FIX M: default a 15s AbortController timeout when the caller doesn't inject a
   // fetchImpl. The TUI path already wraps fetch (callTool → doFetch, 10s), but the
   // legacy CLI `watch --submit` + the CLI default-view [S] call submitSignedWindow

package/tools/_helpers.mjs

@@ -25,6 +25,32 @@ const _envPath = `${_localBin}${process.env.PATH ? ":" + process.env.PATH : ""}`
 
 export const DEFAULT_API_BASE =
   process.env.SIGRANK_API_BASE || "https://signalaf.com";
+
+/** Allowed API hosts — prevents SSRF via SIGRANK_API_BASE override. */
+const ALLOWED_API_HOSTS = new Set([
+  "signalaf.com",
+  "sigeconomy.com",
+  "localhost",
+  "127.0.0.1",
+  "test.local", // test fixtures only
+]);
+
+/** Validate that a URL points to an allowed API host. */
+export function validateApiBase(urlStr) {
+  try {
+    const u = new URL(urlStr);
+    if (!ALLOWED_API_HOSTS.has(u.hostname)) {
+      throw new Error(`Blocked: API host '${u.hostname}' is not in the allowlist`);
+    }
+    return urlStr;
+  } catch (e) {
+    if (e.message.startsWith("Blocked:")) throw e;
+    throw new Error(`Invalid API base URL: ${urlStr}`);
+  }
+}
+
+// Validate at load time so a misconfigured env var fails fast.
+validateApiBase(DEFAULT_API_BASE);
 /** Default network timeout in ms (override via opts.fetchTimeout or SIGRANK_FETCH_TIMEOUT). */
 export const DEFAULT_FETCH_TIMEOUT =
   Number(process.env.SIGRANK_FETCH_TIMEOUT) || 10_000;

package/tools/submit-paste.mjs

@@ -16,9 +16,8 @@ export const TOOL_DEF = {
     "Ranks a paste of token counts locally and shows the cascade result (yield, leverage, velocity, class, card). This is a PREVIEW-ONLY tool — it does not publish to the board. The board's /api/v1/ingest-paste endpoint now requires an authenticated Supabase session, which MCP tools do not carry. To publish to the leaderboard, use submit_verified (which signs and posts to /api/v1/snapshots via the enrolled-device path) or submit directly through the signalaf.com web UI. Use this when you have token counts from ccusage or a dashboard and want to see your score instantly. Do NOT use this if you want to pull your local usage automatically — use tokenpull_submit for the zero-paste flow. Do NOT use this for multi-window dashboard pastes — use rank_windows to rank them first.",
   annotations: {
     title: "Preview paste ranking",
-    ...ANNOTATIONS.destructiveHint,
+    ...ANNOTATIONS.readOnlyHint,
     ...ANNOTATIONS.idempotentHint,
-    ...ANNOTATIONS.openWorldHint,
   },
   inputSchema: {
     type: "object",

package/tools/tokenpull-submit.mjs

@@ -16,9 +16,8 @@ export const TOOL_DEF = {
     "Pull your LOCAL token usage from session logs and compute the cascade per window — the zero-paste preview flow. Reads the four canonical pillars (input, output, cacheCreate, cacheRead) per window from your local logs and computes yield, leverage, velocity, class, and card. This is a PREVIEW-ONLY tool — it does not publish to the board. The board's /api/v1/ingest-paste endpoint now requires an authenticated Supabase session, which MCP tools do not carry. To publish to the leaderboard, use submit_verified (which signs and posts to /api/v1/snapshots via the enrolled-device path) or submit directly through the signalaf.com web UI. Token-only — no prompt content is read or transmitted.",
   annotations: {
     title: "Pull and preview tokens",
-    ...ANNOTATIONS.destructiveHint,
+    ...ANNOTATIONS.readOnlyHint,
     ...ANNOTATIONS.idempotentHint,
-    ...ANNOTATIONS.openWorldHint,
   },
   inputSchema: {
     type: "object",