@prom.codes/saver 0.1.2 → 0.1.3

package/dist/bin.js

@@ -5,7 +5,7 @@ import { resolve } from "node:path";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
 // dist/key.js
-var KEY_PATTERN = /^prom_(live|test)_[A-Za-z0-9]{10,}$/;
+var KEY_PATTERN = /^prom_(live|test)_[A-Za-z0-9]{6,}(?:_[A-Za-z0-9]{6,})?$/;
 var API_KEY_ENV = "PROMETHEUS_API_KEY";
 function classifyKey(raw) {
   const key = raw?.trim();
@@ -14,9 +14,6 @@ function classifyKey(raw) {
   return KEY_PATTERN.test(key) ? "valid" : "malformed";
 }
 
-// dist/server.js
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-
 // dist/tools.js
 import { z } from "zod";
 
@@ -112,6 +109,7 @@ async function installRuntime(workspaceRoot, runtime, level) {
 }
 
 // dist/tools.js
+var REQUIRE_KEY_ENV = "PROMETHEUS_SAVER_REQUIRE_KEY";
 function textResult(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
 }
@@ -122,23 +120,47 @@ var setupInput = {
   runtimes: z.array(runtimeEnum).min(1).optional()
 };
 function registerTools(server, deps) {
-  const { workspaceRoot, apiKey } = deps;
+  const { workspaceRoot, apiKey, requireKey } = deps;
+  const keyState = deps.keyState ?? (apiKey !== void 0 ? "valid" : "absent");
   server.registerTool("setup", {
     title: "Install the prom.codes Saver efficient-output rules",
     description: "Idempotently install the prom.codes Saver efficient-output rule block into this workspace's agent runtime configs (CLAUDE.md / .cursor/rules / .augment/rules / AGENTS.md). The rules cut token cost by trimming the agent's own prose (preamble, narration, pasted tool output) while keeping code, caveats and destructive sequences verbatim. `level`: `lite` (filler only) | `balanced` (default \u2014 lean, not terse) | `aggressive` (telegraphic, opt-in, never for code/destructive). Without `runtimes` it auto-detects which are present (fallback: agents). Re-running updates the block in place. Run this once per workspace.",
     inputSchema: setupInput
   }, async (args) => {
+    if (requireKey === true && keyState !== "valid") {
+      return {
+        isError: true,
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify({
+              ok: false,
+              installed: false,
+              keyState,
+              error: `prom.codes Saver: a valid ${API_KEY_ENV} (prom_live_\u2026 / prom_test_\u2026) is required to install because ${REQUIRE_KEY_ENV} is enabled (key is "${keyState}"). Set the key in this server's env block, or unset ${REQUIRE_KEY_ENV} to install keyless.`
+            }, null, 2)
+          }
+        ]
+      };
+    }
     const level = args.level ?? DEFAULT_LEVEL;
     const runtimes = args.runtimes ?? detectRuntimes(workspaceRoot);
     const results = [];
     for (const runtime of runtimes) {
       results.push(await installRuntime(workspaceRoot, runtime, level));
     }
-    return textResult({ workspaceRoot, level, keyed: apiKey !== void 0, results });
+    return textResult({
+      workspaceRoot,
+      level,
+      keyed: apiKey !== void 0,
+      keyState,
+      results
+    });
   });
 }
 
 // dist/server.js
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 var SERVER_IDENTITY = {
   name: "prom-codes-saver",
   version: "0.1.0",
@@ -161,14 +183,24 @@ async function main() {
   const workspaceRoot = resolve(process.env.PROMETHEUS_WORKSPACE_ROOT ?? process.cwd());
   const rawKey = process.env[API_KEY_ENV];
   const keyState = classifyKey(rawKey);
+  const requireKey = /^(1|true|yes|on)$/i.test(process.env[REQUIRE_KEY_ENV] ?? "");
   if (keyState === "malformed") {
     process.stderr.write(`prom-codes-saver: ${API_KEY_ENV} is malformed (expected prom_live_\u2026 / prom_test_\u2026); continuing keyless.
+`);
+  }
+  if (requireKey && keyState !== "valid") {
+    process.stderr.write(`prom-codes-saver: ${REQUIRE_KEY_ENV} is on but ${API_KEY_ENV} is ${keyState}; setup will refuse to install until a valid prom_ key is provided.
 `);
   }
   const apiKey = keyState === "valid" ? rawKey.trim() : void 0;
-  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot} key=${keyState}
+  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot} key=${keyState} requireKey=${requireKey}
 `);
-  const server = createServer({ workspaceRoot, ...apiKey !== void 0 ? { apiKey } : {} });
+  const server = createServer({
+    workspaceRoot,
+    keyState,
+    requireKey,
+    ...apiKey !== void 0 ? { apiKey } : {}
+  });
   const transport = new StdioServerTransport();
   const shutdown = async (signal) => {
     process.stderr.write(`prom-codes-saver: received ${signal}, shutting down

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prom.codes/saver",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "prom.codes Saver — cut token cost without cutting quality, as an MCP installer.",
   "type": "module",
   "bin": {