@prom.codes/saver 0.1.0 → 0.1.2

package/README.md

@@ -26,7 +26,13 @@ and **prom.codes Memory** (agent memory).
 
 Then ask your agent to run `setup` once per workspace. Levels: `lite` (filler
 only), `balanced` (default — lean, not terse), `aggressive` (telegraphic, opt-in,
-never for code/destructive work). No API key, no database, no native modules —
-`npx` works turnkey everywhere. Requires Node ≥ 20.10.
+never for code/destructive work). The rules keep code, caveats, destructive steps
+and anything the agent needs later **verbatim** — it shapes phrasing, never what the
+agent does or remembers.
+
+No database and no native modules — `npx` works turnkey everywhere (Node ≥ 20.10).
+An API key is **optional**: Saver works fully without one, and accepts the same
+`PROMETHEUS_API_KEY` (`prom_live_…`) as prom.codes Context and Memory to tie the
+install to your account.
 
 Docs: https://prom.codes/docs

package/dist/bin.js

@@ -4,6 +4,16 @@
 import { resolve } from "node:path";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
+// dist/key.js
+var KEY_PATTERN = /^prom_(live|test)_[A-Za-z0-9]{10,}$/;
+var API_KEY_ENV = "PROMETHEUS_API_KEY";
+function classifyKey(raw) {
+  const key = raw?.trim();
+  if (!key)
+    return "absent";
+  return KEY_PATTERN.test(key) ? "valid" : "malformed";
+}
+
 // dist/server.js
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
@@ -24,25 +34,26 @@ var SAVER_RUNTIMES = [
 ];
 var BLOCK_START = "<!-- prom-saver:start -->";
 var BLOCK_END = "<!-- prom-saver:end -->";
-var NEVER_COMPRESS = `**Never compress (all levels):**
+var NEVER_COMPRESS = `**Never cut substance (all levels) \u2014 these are never "filler":**
 - Code, diffs, commit messages, CLI commands, API names, file paths and exact error strings \u2014 verbatim.
-- Load-bearing caveats, trade-offs, warnings and negations ("not", "only", "unless", "before"). If it changes correctness or safety, keep it.
-- Destructive, irreversible or multi-step sequences \u2014 spell those out in full.`;
+- Load-bearing caveats, trade-offs, warnings, negations ("not"/"only"/"unless"/"before"), and \u2014 for risky or destructive work \u2014 safer alternatives, precautions, dependency/foreign-key checks and backup/rollback advice. If it changes correctness or safety, keep it.
+- Destructive, irreversible or multi-step sequences \u2014 spell those out in full, including every step the task needs to actually work (e.g. a "without downtime" procedure keeps the dual-running / grace-period steps).
+- **Anything you will need on a later turn \u2014 your own working context.** What you write IS your memory of this turn; condensing a recap is never a reason to drop a file path, value, decision, finding or error you may act on again. When unsure whether a detail matters later, keep it.`;
 var LEVEL_BODY = {
-  lite: `Trim only ceremony and filler from your own prose: skip greetings, apologies, restating the question, and "I will now\u2026" preamble. Otherwise write normally.`,
-  balanced: `Lead with the answer or the action. Skip preamble and the play-by-play narration of routine tool calls \u2014 act, then give a short result. Summarize long tool/command output instead of pasting it verbatim; quote only the lines that matter. Close a task with one concise summary, not running commentary. Keep substance over brevity \u2014 when in doubt, say the necessary thing. This is "lean", not "terse".`,
-  aggressive: `Telegraphic prose: drop articles and filler, minimal hedging, the shortest wording that stays unambiguous; summarize all tool output to the essential lines. Opt-in \u2014 more savings, more risk: the carve-outs below are hard limits, and you MUST fall back to "balanced" for any code-generation or destructive/irreversible work.`
+  lite: `Drop ceremony and filler from your prose: no greetings, apologies, sign-offs, restating the question, or "I will now\u2026" preamble. Otherwise write normally.`,
+  balanced: `Lead with the answer or the action; cut preamble, sign-offs and play-by-play self-narration. Don't restate the question or pad. When several examples would be near-duplicates, give one. When recapping long tool or command output, keep the lines that carry meaning (failures, errors, the decision) and drop the noise. But include every step, caveat and precaution the answer needs to be correct and safe \u2014 if removing something would let a competent reviewer call the answer wrong, incomplete or unsafe, it stays. Lean, not terse: shorter because there is less filler, never because there is less help.`,
+  aggressive: `Telegraphic prose: drop articles and filler, minimal hedging, the shortest unambiguous wording; recap tool output as the load-bearing lines only. Opt-in \u2014 more savings, more risk: the carve-outs below are hard limits, and you MUST fall back to "balanced" for any code-generation, debugging or destructive/irreversible work, where losing a single detail is costly.`
 };
 function ruleBlockFor(level) {
   return `## prom.codes Saver \u2014 efficient output (level: ${level})
 
-Cut token cost WITHOUT cutting quality. This shapes ONLY your own assistant prose \u2014 it never changes code, commands, tool inputs, or what you actually do.
+Cut token cost by writing less FILLER \u2014 without cutting quality or losing context. This shapes ONLY how you PHRASE your own messages: never code, commands, tool inputs, what you do, or what you need to remember. Trim ceremony, restating, padding and redundant examples; keep all substance.
 
 ${LEVEL_BODY[level]}
 
 ${NEVER_COMPRESS}
 
-The user asked for fewer wasted tokens, not a worse answer: preserve correctness, safety and completeness first, save tokens second.`;
+Correctness, safety, completeness and your own working context come FIRST; saving tokens comes second. If the two ever conflict, do not compress \u2014 cut filler, never substance.`;
 }
 function withMarkers(block) {
   return `${BLOCK_START}
@@ -111,7 +122,7 @@ var setupInput = {
   runtimes: z.array(runtimeEnum).min(1).optional()
 };
 function registerTools(server, deps) {
-  const { workspaceRoot } = deps;
+  const { workspaceRoot, apiKey } = deps;
   server.registerTool("setup", {
     title: "Install the prom.codes Saver efficient-output rules",
     description: "Idempotently install the prom.codes Saver efficient-output rule block into this workspace's agent runtime configs (CLAUDE.md / .cursor/rules / .augment/rules / AGENTS.md). The rules cut token cost by trimming the agent's own prose (preamble, narration, pasted tool output) while keeping code, caveats and destructive sequences verbatim. `level`: `lite` (filler only) | `balanced` (default \u2014 lean, not terse) | `aggressive` (telegraphic, opt-in, never for code/destructive). Without `runtimes` it auto-detects which are present (fallback: agents). Re-running updates the block in place. Run this once per workspace.",
@@ -123,7 +134,7 @@ function registerTools(server, deps) {
     for (const runtime of runtimes) {
       results.push(await installRuntime(workspaceRoot, runtime, level));
     }
-    return textResult({ workspaceRoot, level, results });
+    return textResult({ workspaceRoot, level, keyed: apiKey !== void 0, results });
   });
 }
 
@@ -148,9 +159,16 @@ function createServer(deps, options = {}) {
 // dist/bin.js
 async function main() {
   const workspaceRoot = resolve(process.env.PROMETHEUS_WORKSPACE_ROOT ?? process.cwd());
-  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot}
+  const rawKey = process.env[API_KEY_ENV];
+  const keyState = classifyKey(rawKey);
+  if (keyState === "malformed") {
+    process.stderr.write(`prom-codes-saver: ${API_KEY_ENV} is malformed (expected prom_live_\u2026 / prom_test_\u2026); continuing keyless.
+`);
+  }
+  const apiKey = keyState === "valid" ? rawKey.trim() : void 0;
+  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot} key=${keyState}
 `);
-  const server = createServer({ workspaceRoot });
+  const server = createServer({ workspaceRoot, ...apiKey !== void 0 ? { apiKey } : {} });
   const transport = new StdioServerTransport();
   const shutdown = async (signal) => {
     process.stderr.write(`prom-codes-saver: received ${signal}, shutting down

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prom.codes/saver",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "prom.codes Saver — cut token cost without cutting quality, as an MCP installer.",
   "type": "module",
   "bin": {