@prom.codes/saver 0.1.0 → 0.1.1

package/README.md

@@ -26,7 +26,13 @@ and **prom.codes Memory** (agent memory).
 
 Then ask your agent to run `setup` once per workspace. Levels: `lite` (filler
 only), `balanced` (default — lean, not terse), `aggressive` (telegraphic, opt-in,
-never for code/destructive work). No API key, no database, no native modules —
-`npx` works turnkey everywhere. Requires Node ≥ 20.10.
+never for code/destructive work). The rules keep code, caveats, destructive steps
+and anything the agent needs later **verbatim** — it shapes phrasing, never what the
+agent does or remembers.
+
+No database and no native modules — `npx` works turnkey everywhere (Node ≥ 20.10).
+An API key is **optional**: Saver works fully without one, and accepts the same
+`PROMETHEUS_API_KEY` (`prom_live_…`) as prom.codes Context and Memory to tie the
+install to your account.
 
 Docs: https://prom.codes/docs

package/dist/bin.js

@@ -4,6 +4,16 @@
 import { resolve } from "node:path";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
+// dist/key.js
+var KEY_PATTERN = /^prom_(live|test)_[A-Za-z0-9]{10,}$/;
+var API_KEY_ENV = "PROMETHEUS_API_KEY";
+function classifyKey(raw) {
+  const key = raw?.trim();
+  if (!key)
+    return "absent";
+  return KEY_PATTERN.test(key) ? "valid" : "malformed";
+}
+
 // dist/server.js
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
@@ -27,22 +37,23 @@ var BLOCK_END = "<!-- prom-saver:end -->";
 var NEVER_COMPRESS = `**Never compress (all levels):**
 - Code, diffs, commit messages, CLI commands, API names, file paths and exact error strings \u2014 verbatim.
 - Load-bearing caveats, trade-offs, warnings and negations ("not", "only", "unless", "before"). If it changes correctness or safety, keep it.
-- Destructive, irreversible or multi-step sequences \u2014 spell those out in full.`;
+- Destructive, irreversible or multi-step sequences \u2014 spell those out in full.
+- **Anything you will need on a later turn \u2014 your own working context.** What you write IS your memory of this turn; condensing a recap for the reader is never a reason to drop a file path, value, decision, finding or error you may act on again. When unsure whether a detail matters later, keep it. This is the rule that prevents context loss \u2014 it overrides any urge to be brief.`;
 var LEVEL_BODY = {
   lite: `Trim only ceremony and filler from your own prose: skip greetings, apologies, restating the question, and "I will now\u2026" preamble. Otherwise write normally.`,
-  balanced: `Lead with the answer or the action. Skip preamble and the play-by-play narration of routine tool calls \u2014 act, then give a short result. Summarize long tool/command output instead of pasting it verbatim; quote only the lines that matter. Close a task with one concise summary, not running commentary. Keep substance over brevity \u2014 when in doubt, say the necessary thing. This is "lean", not "terse".`,
-  aggressive: `Telegraphic prose: drop articles and filler, minimal hedging, the shortest wording that stays unambiguous; summarize all tool output to the essential lines. Opt-in \u2014 more savings, more risk: the carve-outs below are hard limits, and you MUST fall back to "balanced" for any code-generation or destructive/irreversible work.`
+  balanced: `Lead with the answer or the action. Skip preamble and the play-by-play narration of routine tool calls \u2014 act, then give a short result. When you recap a long tool or command output for the reader, quote the lines that matter rather than pasting all of it \u2014 but keep every detail you might act on later. Close a task with one concise summary, not running commentary. Substance over brevity \u2014 when in doubt, say the necessary thing. This is "lean", not "terse".`,
+  aggressive: `Telegraphic prose: drop articles and filler, minimal hedging, the shortest wording that stays unambiguous; recap tool output as the essential lines only. Opt-in \u2014 more savings, more risk: the carve-outs below are hard limits, and you MUST fall back to "balanced" for any code-generation, debugging or destructive/irreversible work, where losing a single detail is costly.`
 };
 function ruleBlockFor(level) {
   return `## prom.codes Saver \u2014 efficient output (level: ${level})
 
-Cut token cost WITHOUT cutting quality. This shapes ONLY your own assistant prose \u2014 it never changes code, commands, tool inputs, or what you actually do.
+Cut token cost WITHOUT cutting quality or losing context. This shapes ONLY how you PHRASE your own assistant messages \u2014 it never changes code, commands, tool inputs, what you do, or what you need to remember.
 
 ${LEVEL_BODY[level]}
 
 ${NEVER_COMPRESS}
 
-The user asked for fewer wasted tokens, not a worse answer: preserve correctness, safety and completeness first, save tokens second.`;
+Correctness, safety, completeness and your own working context come FIRST; saving tokens comes second. If the two ever conflict, do not compress.`;
 }
 function withMarkers(block) {
   return `${BLOCK_START}
@@ -111,7 +122,7 @@ var setupInput = {
   runtimes: z.array(runtimeEnum).min(1).optional()
 };
 function registerTools(server, deps) {
-  const { workspaceRoot } = deps;
+  const { workspaceRoot, apiKey } = deps;
   server.registerTool("setup", {
     title: "Install the prom.codes Saver efficient-output rules",
     description: "Idempotently install the prom.codes Saver efficient-output rule block into this workspace's agent runtime configs (CLAUDE.md / .cursor/rules / .augment/rules / AGENTS.md). The rules cut token cost by trimming the agent's own prose (preamble, narration, pasted tool output) while keeping code, caveats and destructive sequences verbatim. `level`: `lite` (filler only) | `balanced` (default \u2014 lean, not terse) | `aggressive` (telegraphic, opt-in, never for code/destructive). Without `runtimes` it auto-detects which are present (fallback: agents). Re-running updates the block in place. Run this once per workspace.",
@@ -123,7 +134,7 @@ function registerTools(server, deps) {
     for (const runtime of runtimes) {
       results.push(await installRuntime(workspaceRoot, runtime, level));
     }
-    return textResult({ workspaceRoot, level, results });
+    return textResult({ workspaceRoot, level, keyed: apiKey !== void 0, results });
   });
 }
 
@@ -148,9 +159,16 @@ function createServer(deps, options = {}) {
 // dist/bin.js
 async function main() {
   const workspaceRoot = resolve(process.env.PROMETHEUS_WORKSPACE_ROOT ?? process.cwd());
-  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot}
+  const rawKey = process.env[API_KEY_ENV];
+  const keyState = classifyKey(rawKey);
+  if (keyState === "malformed") {
+    process.stderr.write(`prom-codes-saver: ${API_KEY_ENV} is malformed (expected prom_live_\u2026 / prom_test_\u2026); continuing keyless.
+`);
+  }
+  const apiKey = keyState === "valid" ? rawKey.trim() : void 0;
+  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot} key=${keyState}
 `);
-  const server = createServer({ workspaceRoot });
+  const server = createServer({ workspaceRoot, ...apiKey !== void 0 ? { apiKey } : {} });
   const transport = new StdioServerTransport();
   const shutdown = async (signal) => {
     process.stderr.write(`prom-codes-saver: received ${signal}, shutting down

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prom.codes/saver",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "prom.codes Saver — cut token cost without cutting quality, as an MCP installer.",
   "type": "module",
   "bin": {