@prismnetwork/mcp 0.8.0 → 0.8.2

package/README.md

@@ -13,10 +13,14 @@ claude mcp add prism -- npx -y @prismnetwork/mcp
 Then ask what you can rent. `prism_list_gpus` answers from live capacity with
 real prices. Leasing spends money, so those tools ask for a wallet and say so.
 
+Packaged for Claude Code and Codex as the [Prism plugin](https://plugins.prismnetwork.tech),
+which wires this server up and prompts for the wallet at install time.
+
 ## Tools
 
 | Tool | Wallet |
 | --- | --- |
+| `prism_budget` | no |
 | `prism_list_gpus` | no |
 | `prism_price_index` | no |
 | `prism_receipts` | no |
@@ -34,6 +38,8 @@ real prices. Leasing spends money, so those tools ask for a wallet and say so.
 | `prism_vault_delete` | yes |
 | `prism_vault_release` | yes |
 
+- `prism_budget`: the spending limits in force and what has already been spent
+  today, with the recent charges.
 - `prism_wallet`: the agent's address and USDG/ETH balances.
 - `prism_list_gpus`: GPUs available to lease, with price per second and per hour.
 - `prism_price_index`: sourced and settled pricing per GPU model, for cost estimates.
@@ -57,6 +63,29 @@ real prices. Leasing spends money, so those tools ask for a wallet and say so.
 - `prism_vault_delete`: permanently delete an item.
 - `prism_vault_release`: authorize an item into a lease that clears its trust floor.
 
+## Spending limits
+
+Two ceilings bound what this server can spend, and a refusal quotes both.
+
+| Variable | Default | What it bounds |
+| --- | --- | --- |
+| `PRISM_MAX_USDG` | 1 | Any single lease or generation. `max_usdg` on a call may lower it, never raise it past this. |
+| `PRISM_DAILY_BUDGET_USDG` | 5 | Everything in a rolling 24 hours. `0` removes the ceiling. |
+| `PRISM_LEDGER_PATH` | `~/.prism/spend.json` | Where the spend is recorded. |
+
+Spend is written before the money moves, so a crash between funding an escrow
+and answering is counted rather than forgiven, and a restart does not hand back
+a fresh day's allowance. Only an attempt that provably never reached the chain
+is reverted. Two clients pointed at one wallet share one ceiling, because they
+share the ledger file.
+
+None of this is the real limit. Fund a dedicated wallet with what you are
+willing to lose: that balance is what survives a bug in everything above.
+
+Tools that spend are annotated `destructiveHint` and carry
+`anthropic/requiresUserInteraction`, so Claude Code asks before every one of
+them even in modes that otherwise approve tools automatically.
+
 ## Vault
 
 An agent that handles a card, an identity document or a credential should not
@@ -82,7 +111,8 @@ Point your MCP client (Claude Desktop / Code) at the published server:
       "args": ["-y", "@prismnetwork/mcp"],
       "env": {
         "PRISM_AGENT_KEY": "0x<agent wallet private key>",
-        "PRISM_ESCROW": "0x62C042265991bEa17B07229322A01850974626dA"
+        "PRISM_MAX_USDG": "1",
+        "PRISM_DAILY_BUDGET_USDG": "5"
       }
     }
   }
@@ -95,11 +125,17 @@ Or add it to Claude Code in one line:
 
 ```sh
 claude mcp add prism \
-  --env PRISM_ESCROW=0x62C042265991bEa17B07229322A01850974626dA \
   --env PRISM_AGENT_KEY=0x<agent wallet private key> \
+  --env PRISM_DAILY_BUDGET_USDG=5 \
   -- npx -y @prismnetwork/mcp
 ```
 
+Codex takes the same server:
+
+```sh
+codex mcp add prism --env PRISM_AGENT_KEY=0x<agent wallet private key> -- npx -y @prismnetwork/mcp
+```
+
 ## Timing
 
 `prism_lease` and `prism_lease_and_run` block while a GPU provisions (usually one to four minutes, occasionally longer on a slow host). Configure your MCP client to allow long tool calls.

package/budget.mjs

@@ -1,16 +1,13 @@
 // What stands between a model deciding to rent a GPU and a wallet paying for it.
-//
-// The wallet balance is the real ceiling: fund the agent wallet with what you
-// are willing to lose, because nothing here can spend money that is not in the
-// account. This file is the second line, and it exists because the per-call cap
-// alone never was one. `max_usdg` bounds a single lease at 1 USDG by default and
-// says nothing about the fortieth lease in a row, which is the failure an
-// unattended agent actually produces.
+// The real ceiling is the balance; fund the agent wallet with what you are
+// willing to lose. This is the second line, and it exists because `max_usdg`
+// never was one: it bounds a single lease and says nothing about the fortieth in
+// a row, which is what an unattended agent actually does.
 //
 // Spend is written before the money moves and reverted only when the attempt
 // provably cost nothing, so a crash between funding and reply is counted rather
 // than forgiven. The file is shared across clients on purpose: one wallet gets
-// one daily ceiling whether Claude, Codex, or a script is holding it.
+// one daily ceiling whoever is holding it.
 import { mkdirSync, readFileSync, renameSync, writeFileSync, openSync, closeSync, unlinkSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prismnetwork/mcp",
-  "version": "0.8.0",
+  "version": "0.8.2",
   "description": "MCP server for leasing and running on Prism Network GPUs.",
   "mcpName": "io.github.prismnetwork-tech/mcp",
   "type": "module",

package/server.mjs

@@ -67,7 +67,7 @@ function requireWallet(tool, reason = "spends money") {
 
 function requireLedger(tool) {
   if (!ledger) {
-    throw new Error(`${tool} spends money and the spend limits are unusable: ${budgetProblem}`);
+    throw new Error(`${tool} needs the spend limits, and they are unusable: ${budgetProblem}`);
   }
   return ledger;
 }
@@ -79,14 +79,25 @@ function requireLedger(tool) {
 async function spending(tool, micros, run) {
   const book = requireLedger(tool);
   const id = book.commit({ tool, micros });
+  // Reconciling is bookkeeping and must never be the reason a caller loses a
+  // machine it paid for, or the reason a failure is reported as the wrong
+  // failure. A ledger that cannot be written says so on stderr and the
+  // committed figure stands, which errs towards counting the spend.
+  const reconcile = (action, ...args) => {
+    try {
+      book[action](id, ...args);
+    } catch (err) {
+      console.error(`prism mcp: could not ${action} the ledger entry for ${tool}: ${err?.message ?? err}`);
+    }
+  };
   try {
     const { value, settledMicros, reference } = await run();
-    book.settle(id, { micros: settledMicros, reference });
+    reconcile("settle", { micros: settledMicros, reference });
     return value;
   } catch (err) {
     const funded = err?.body?.funding_hash;
-    if (funded) book.settle(id, { reference: funded });
-    else book.revert(id);
+    if (funded) reconcile("settle", { reference: funded });
+    else reconcile("revert");
     throw err;
   }
 }
@@ -104,8 +115,8 @@ function requireCommand(value) {
 // The per-call ceiling is the operator's, not the model's: an omitted max_usdg
 // takes the configured cap rather than a hardcoded one, and a stated max_usdg
 // above it is refused when the ledger checks the commit.
-function maxDeposit(args) {
-  if (args.max_usdg === undefined) return requireLedger("this tool").maxPerCallMicros;
+function maxDeposit(tool, args) {
+  if (args.max_usdg === undefined) return requireLedger(tool).maxPerCallMicros;
   const cap = args.max_usdg;
   if (typeof cap !== "number" || !Number.isFinite(cap) || cap <= 0) {
     throw new Error("max_usdg must be a positive number of USDG.");
@@ -473,7 +484,7 @@ async function handle(name, args) {
   if (name === "prism_batch_run") {
     requireCommand(args.command);
     requireWallet(name);
-    const cap = maxDeposit(args);
+    const cap = maxDeposit(name, args);
     return spending(name, cap, async () => {
       const batch = await agent.lease({
         image: IMAGE,
@@ -571,7 +582,7 @@ async function handle(name, args) {
   if (name === "prism_lease_and_run" || name === "prism_lease") {
     if (name === "prism_lease_and_run") requireCommand(args.command);
     requireWallet(name);
-    const cap = maxDeposit(args);
+    const cap = maxDeposit(name, args);
     sweepExpiredLeases();
     const lease = await spending(name, cap, async () => {
       const funded = await agent.lease({
@@ -679,7 +690,7 @@ async function handleVault(name, args) {
   throw new Error(`unknown tool ${name}`);
 }
 
-const server = new Server({ name: "prism", version: "0.8.0" }, { capabilities: { tools: {} } });
+const server = new Server({ name: "prism", version: "0.8.2" }, { capabilities: { tools: {} } });
 server.setRequestHandler(ListToolsRequestSchema, async () => ({ tools: TOOLS }));
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
   try {