@prom.codes/saver 0.1.2 → 0.1.4

package/README.md

@@ -9,21 +9,16 @@ caveats and destructive sequences **verbatim**.
 It is the third prom.codes tool, alongside **prom.codes Context** (code retrieval)
 and **prom.codes Memory** (agent memory).
 
-## Quick start
-
-```jsonc
-// Claude Desktop / Cursor MCP config
-{
-  "mcpServers": {
-    "saver": {
-      "command": "npx",
-      "args": ["-y", "@prom.codes/saver@latest"],
-      "env": { "PROMETHEUS_WORKSPACE_ROOT": "/absolute/path/to/your/repo" }
-    }
-  }
-}
+## Quick start (Claude Code)
+
+```bash
+claude mcp add saver -- npx -y @prom.codes/saver@latest
 ```
 
+No key needed. `claude mcp add` defaults to local scope; add `--scope project`
+for a committable `.mcp.json`. Other hosts (Cursor, VS Code) use the same
+command/args in their own config.
+
 Then ask your agent to run `setup` once per workspace. Levels: `lite` (filler
 only), `balanced` (default — lean, not terse), `aggressive` (telegraphic, opt-in,
 never for code/destructive work). The rules keep code, caveats, destructive steps
@@ -31,8 +26,10 @@ and anything the agent needs later **verbatim** — it shapes phrasing, never wh
 agent does or remembers.
 
 No database and no native modules — `npx` works turnkey everywhere (Node ≥ 20.10).
-An API key is **optional**: Saver works fully without one, and accepts the same
-`PROMETHEUS_API_KEY` (`prom_live_…`) as prom.codes Context and Memory to tie the
-install to your account.
+The workspace is auto-detected (Claude Code `CLAUDE_PROJECT_DIR`); set
+`PROMETHEUS_WORKSPACE_ROOT` only to target a different folder. An API key is
+**optional**: the Saver works fully without one, and accepts the same
+`PROMETHEUS_API_KEY` (`prom_live_<tag>_<secret>`) as prom.codes Context and
+Memory to tie the install to your account.
 
-Docs: https://prom.codes/docs
+Docs: https://prom.codes/docs/mcp/saver

package/dist/bin.js

@@ -1,11 +1,10 @@
 #!/usr/bin/env node
 
 // dist/bin.js
-import { resolve } from "node:path";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
 // dist/key.js
-var KEY_PATTERN = /^prom_(live|test)_[A-Za-z0-9]{10,}$/;
+var KEY_PATTERN = /^prom_(live|test)_[A-Za-z0-9]{6,}(?:_[A-Za-z0-9]{6,})?$/;
 var API_KEY_ENV = "PROMETHEUS_API_KEY";
 function classifyKey(raw) {
   const key = raw?.trim();
@@ -14,8 +13,17 @@ function classifyKey(raw) {
   return KEY_PATTERN.test(key) ? "valid" : "malformed";
 }
 
-// dist/server.js
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+// dist/workspace.js
+import { resolve } from "node:path";
+function resolveWorkspaceRoot(env = process.env) {
+  const explicit = (env.PROMETHEUS_WORKSPACE_ROOT ?? "").trim();
+  if (explicit !== "")
+    return resolve(explicit);
+  const claude = (env.CLAUDE_PROJECT_DIR ?? "").trim();
+  if (claude !== "")
+    return resolve(claude);
+  return resolve(process.cwd());
+}
 
 // dist/tools.js
 import { z } from "zod";
@@ -112,6 +120,7 @@ async function installRuntime(workspaceRoot, runtime, level) {
 }
 
 // dist/tools.js
+var REQUIRE_KEY_ENV = "PROMETHEUS_SAVER_REQUIRE_KEY";
 function textResult(payload) {
   return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
 }
@@ -122,23 +131,47 @@ var setupInput = {
   runtimes: z.array(runtimeEnum).min(1).optional()
 };
 function registerTools(server, deps) {
-  const { workspaceRoot, apiKey } = deps;
+  const { workspaceRoot, apiKey, requireKey } = deps;
+  const keyState = deps.keyState ?? (apiKey !== void 0 ? "valid" : "absent");
   server.registerTool("setup", {
     title: "Install the prom.codes Saver efficient-output rules",
     description: "Idempotently install the prom.codes Saver efficient-output rule block into this workspace's agent runtime configs (CLAUDE.md / .cursor/rules / .augment/rules / AGENTS.md). The rules cut token cost by trimming the agent's own prose (preamble, narration, pasted tool output) while keeping code, caveats and destructive sequences verbatim. `level`: `lite` (filler only) | `balanced` (default \u2014 lean, not terse) | `aggressive` (telegraphic, opt-in, never for code/destructive). Without `runtimes` it auto-detects which are present (fallback: agents). Re-running updates the block in place. Run this once per workspace.",
     inputSchema: setupInput
   }, async (args) => {
+    if (requireKey === true && keyState !== "valid") {
+      return {
+        isError: true,
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify({
+              ok: false,
+              installed: false,
+              keyState,
+              error: `prom.codes Saver: a valid ${API_KEY_ENV} (prom_live_\u2026 / prom_test_\u2026) is required to install because ${REQUIRE_KEY_ENV} is enabled (key is "${keyState}"). Set the key in this server's env block, or unset ${REQUIRE_KEY_ENV} to install keyless.`
+            }, null, 2)
+          }
+        ]
+      };
+    }
     const level = args.level ?? DEFAULT_LEVEL;
     const runtimes = args.runtimes ?? detectRuntimes(workspaceRoot);
     const results = [];
     for (const runtime of runtimes) {
       results.push(await installRuntime(workspaceRoot, runtime, level));
     }
-    return textResult({ workspaceRoot, level, keyed: apiKey !== void 0, results });
+    return textResult({
+      workspaceRoot,
+      level,
+      keyed: apiKey !== void 0,
+      keyState,
+      results
+    });
   });
 }
 
 // dist/server.js
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 var SERVER_IDENTITY = {
   name: "prom-codes-saver",
   version: "0.1.0",
@@ -158,17 +191,27 @@ function createServer(deps, options = {}) {
 
 // dist/bin.js
 async function main() {
-  const workspaceRoot = resolve(process.env.PROMETHEUS_WORKSPACE_ROOT ?? process.cwd());
+  const workspaceRoot = resolveWorkspaceRoot(process.env);
   const rawKey = process.env[API_KEY_ENV];
   const keyState = classifyKey(rawKey);
+  const requireKey = /^(1|true|yes|on)$/i.test(process.env[REQUIRE_KEY_ENV] ?? "");
   if (keyState === "malformed") {
     process.stderr.write(`prom-codes-saver: ${API_KEY_ENV} is malformed (expected prom_live_\u2026 / prom_test_\u2026); continuing keyless.
+`);
+  }
+  if (requireKey && keyState !== "valid") {
+    process.stderr.write(`prom-codes-saver: ${REQUIRE_KEY_ENV} is on but ${API_KEY_ENV} is ${keyState}; setup will refuse to install until a valid prom_ key is provided.
 `);
   }
   const apiKey = keyState === "valid" ? rawKey.trim() : void 0;
-  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot} key=${keyState}
+  process.stderr.write(`prom-codes-saver: workspace=${workspaceRoot} key=${keyState} requireKey=${requireKey}
 `);
-  const server = createServer({ workspaceRoot, ...apiKey !== void 0 ? { apiKey } : {} });
+  const server = createServer({
+    workspaceRoot,
+    keyState,
+    requireKey,
+    ...apiKey !== void 0 ? { apiKey } : {}
+  });
   const transport = new StdioServerTransport();
   const shutdown = async (signal) => {
     process.stderr.write(`prom-codes-saver: received ${signal}, shutting down

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@prom.codes/saver",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "prom.codes Saver — cut token cost without cutting quality, as an MCP installer.",
   "type": "module",
   "bin": {