prism-mcp-server 2.1.2 → 2.3.1

package/README.md

@@ -2,7 +2,7 @@
 
 [![npm version](https://img.shields.io/npm/v/prism-mcp-server?color=cb0000&label=npm)](https://www.npmjs.com/package/prism-mcp-server)
 [![MCP Registry](https://img.shields.io/badge/MCP_Registry-listed-00ADD8?logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCI+PHBhdGggZmlsbD0id2hpdGUiIGQ9Ik0xMiAyTDIgN2wxMCA1IDEwLTUtMTAtNXpNMiAxN2wxMCA1IDEwLTV2LTJMMTI0djJMMiA5djh6Ii8+PC9zdmc+)](https://registry.modelcontextprotocol.io)
-[![Glama](https://img.shields.io/badge/Glama-listed-FF5601)](https://glama.ai/mcp/servers/@dcostenco/prism-mcp)
+[![Glama](https://img.shields.io/badge/Glama-listed-FF5601)](https://glama.ai/mcp/servers/dcostenco/BCBA)
 [![Smithery](https://img.shields.io/badge/Smithery-listed-6B4FBB)](https://smithery.ai/server/prism-mcp-server)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.0+-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
@@ -14,9 +14,26 @@
 
 ---
 
-## What's New in v2.0 "Mind Palace" 🧠
+## What's New in v2.3.0 — AI Reasoning Engine 🧠
 
-Prism MCP has been completely rebuilt from the ground up to support **local-first workflows**, **visual agent memory**, and **multi-client synchronization**.
+| Feature | Description |
+|---|---|
+| 🕸️ **Neural Graph** | Interactive knowledge graph on the Mind Palace Dashboard — visualize how projects connect through shared keywords and categories using Vis.js force-directed layout. |
+| 🛡️ **Prompt Injection Shield** | Gemini-powered security scan in `session_health_check` — detects system override attempts, jailbreaks, and data exfiltration hidden in agent memory. Tuned to avoid false positives on normal dev commands. |
+| 🧬 **Fact Merger** | Async LLM contradiction resolution on every handoff save — if old context says "Postgres" and new says "MySQL", Gemini silently merges the facts in the background. Zero latency impact (fire-and-forget). |
+
+<details>
+<summary><strong>What's in v2.2.0</strong></summary>
+
+| Feature | Description |
+|---|---|
+| 🩺 **Brain Health Check** | `session_health_check` — like Unix `fsck` for your agent's memory. Detects missing embeddings, duplicate entries, orphaned handoffs, and stale rollups. Use `auto_fix: true` to repair automatically. |
+| 📊 **Mind Palace Health** | Brain health indicator on the Mind Palace Dashboard — see your memory integrity at a glance. |
+
+</details>
+
+<details>
+<summary><strong>What's in v2.0 "Mind Palace"</strong></summary>
 
 | Feature | Description |
 |---|---|
@@ -29,6 +46,33 @@ Prism MCP has been completely rebuilt from the ground up to support **local-firs
 | 📝 **Code Mode Templates** | 8 pre-built QuickJS extraction templates for GitHub, Jira, OpenAPI, Slack, CSV, and DOM parsing — zero reasoning tokens. |
 | 🔍 **Reality Drift Detection** | Prism captures Git state on save and warns if files changed outside the agent's view. |
 
+</details>
+
+---
+
+## How Prism Compares
+
+| Feature | **Prism MCP** | [MCP Memory](https://github.com/modelcontextprotocol/servers/tree/main/src/memory) | [Mem0](https://github.com/mem0ai/mem0) | [Mnemory](https://github.com/fpytloun/mnemory) | [Basic Memory](https://github.com/basicmachines-co/basic-memory) |
+|---|---|---|---|---|---|
+| **Storage** | SQLite (local) + Supabase (cloud) | JSON file | Postgres + Qdrant (hosted or self-hosted) | Qdrant + S3/MinIO | Markdown files |
+| **Zero Config** | ✅ `npx -y prism-mcp-server` | ✅ | ❌ Requires Qdrant/Postgres | ✅ `uvx mnemory` | ✅ `pip install basic-memory` |
+| **Semantic Search** | ✅ F32_BLOB vectors + FTS5 | ❌ | ✅ pgvector | ✅ Qdrant vectors | ❌ Text search only |
+| **Knowledge Graph** | ✅ Neural Graph (Vis.js dashboard) | ✅ Entity/Relation model | ❌ | ✅ Relationship graph | ✅ Markdown links |
+| **Time Travel** | ✅ `memory_history` / `memory_checkout` | ❌ | ❌ | ❌ | ❌ |
+| **Fact Merging** | ✅ Async Gemini (fire-and-forget) | ❌ | ✅ Built-in | ✅ Contradiction resolution | ❌ |
+| **Security Scan** | ✅ Prompt injection detection | ❌ | ❌ | ✅ Anti-injection in fsck | ❌ |
+| **Health Check** | ✅ `session_health_check` (fsck) | ❌ | ❌ | ✅ 3-phase fsck | ❌ |
+| **Visual Dashboard** | ✅ Mind Palace (localhost:3000) | ❌ | ✅ Cloud dashboard | ✅ Management UI | ❌ |
+| **Multi-Agent Sync** | ✅ Real-time cross-client | ❌ | ❌ | ❌ Per-user isolation | ❌ |
+| **Visual Memory** | ✅ Screenshot vault + auto-capture | ❌ | ❌ | ✅ Artifact store | ❌ |
+| **Auto-Compaction** | ✅ Gemini rollups | ❌ | ❌ | ❌ | ❌ |
+| **Morning Briefing** | ✅ Gemini synthesis | ❌ | ❌ | ❌ | ❌ |
+| **OCC (Concurrency)** | ✅ Version-based | ❌ | ❌ | ❌ | ❌ |
+| **MCP Native** | ✅ stdio (Claude Desktop, Cursor) | ✅ stdio | ❌ Python SDK / REST | ✅ HTTP + MCP | ✅ stdio |
+| **Language** | TypeScript | TypeScript | Python | Python | Python |
+
+> **When to choose Prism MCP:** You want MCP-native memory with zero infrastructure overhead, progressive context loading, and enterprise features (OCC, compaction, time travel, security scanning) that work directly in Claude Desktop — without running Qdrant, Postgres, or cloud services.
+
 ---
 
 ## Quick Start (Zero Config — Local Mode)
@@ -121,25 +165,6 @@ The dashboard auto-discovers all your projects and updates in real time.
 
 ---
 
-## How Prism MCP Compares
-
-| Capability | **Prism MCP** | **Mem0** | **Zep** | **Basic Memory** |
-|---|---|---|---|---|
-| **Architecture** | MCP-native (single npm package) | Standalone service + MCP adapter | Standalone service + API | MCP-native (local files) |
-| **Storage** | SQLite (local) or Supabase (cloud) | Hybrid (vector + graph DBs) | PostgreSQL + Neo4j | Local markdown files |
-| **Local-First** | ✅ Full SQLite mode, zero cloud | ❌ Requires cloud/Docker | ❌ Requires PostgreSQL | ✅ Local files |
-| **Visual Dashboard** | ✅ Mind Palace UI at localhost:3000 | ❌ No UI | ❌ No UI | ❌ No UI |
-| **Time Travel** | ✅ Version history + checkout | ❌ No versioning | ❌ No versioning | ❌ No versioning |
-| **Multi-Agent Sync** | ✅ Telepathy (realtime IPC/CDC) | ❌ Siloed | ❌ Siloed | ❌ Single user |
-| **Auto-Capture** | ✅ HTML snapshots of dev server | ❌ Text only | ❌ Text only | ❌ Text only |
-| **Cold Start Fix** | ✅ MCP Prompts + Resources | ❌ Requires tool call | ❌ Requires tool call | ❌ Requires tool call |
-| **Progressive Loading** | ✅ quick / standard / deep | ❌ All-or-nothing | ❌ Fixed window | ❌ All-or-nothing |
-| **Semantic Search** | ✅ F32_BLOB vectors (local) or pgvector (cloud) | ✅ Qdrant/Chroma | ✅ Built-in | ❌ None |
-| **Concurrency Control** | ✅ OCC with version tracking | ❌ Last write wins | ❌ Last write wins | ❌ Single user |
-| **Setup Complexity** | Zero config (local mode) | Docker + API keys + vector DB | Docker + PostgreSQL + Neo4j | No setup needed |
-
----
-
 ## Integration Examples
 
 Copy-paste configs for popular MCP clients. All configs use the `npx` method.
@@ -301,7 +326,7 @@ graph TB
 | `knowledge_search` | Semantic search across accumulated knowledge |
 | `knowledge_forget` | Prune outdated or incorrect memories (4 modes + dry_run) |
 | `session_search_memory` | Vector similarity search across all sessions |
-| `backfill_embeddings` | Retroactively generate embeddings for existing entries |
+| `session_compact_ledger` | Auto-compact old ledger entries via Gemini-powered summarization |
 
 ### v2.0 Advanced Memory Tools
 
@@ -312,6 +337,12 @@ graph TB
 | `session_save_image` | Save a screenshot/image to the visual memory vault |
 | `session_view_image` | Retrieve and display a saved image from the vault |
 
+### v2.2 Brain Health Tools
+
+| Tool | Purpose | Key Args | Returns |
+|------|---------|----------|---------|
+| `session_health_check` | Scan brain for integrity issues (`fsck`) | `auto_fix` (boolean) | Health report & auto-repairs |
+
 ### Code Mode Templates (v2.1)
 
 Instead of writing custom JavaScript, pass a `template` name for instant extraction:
@@ -560,6 +591,8 @@ See [`vertex-ai/`](vertex-ai/) for setup and benchmarks.
 │       ├── googleAi.ts                  # Gemini SDK wrapper
 │       ├── executor.ts                  # QuickJS sandbox executor
 │       ├── autoCapture.ts               # Dev server HTML snapshot utility
+│       ├── healthCheck.ts               # Brain integrity engine (v2.2.0) + security scanner (v2.3.0)
+│       ├── factMerger.ts                # Async LLM contradiction resolution (v2.3.0)
 │       ├── git.ts                       # Git state capture + drift detection
 │       ├── embeddingApi.ts              # Embedding generation (Gemini)
 │       └── keywordExtractor.ts          # Zero-dependency NLP keyword extraction

package/dist/config.js

@@ -22,13 +22,12 @@
 // multi-tenant Row Level Security (RLS) for production hosting.
 export const SERVER_CONFIG = {
     name: "prism-mcp",
-    version: "1.5.0",
+    version: "2.3.1",
 };
 // ─── Required: Brave Search API Key ───────────────────────────
 export const BRAVE_API_KEY = process.env.BRAVE_API_KEY;
 if (!BRAVE_API_KEY) {
-    console.error("Error: BRAVE_API_KEY environment variable is required");
-    process.exit(1);
+    console.error("Warning: BRAVE_API_KEY environment variable is missing. Search tools will return errors when called.");
 }
 // ─── Optional: Google Gemini API Key ──────────────────────────
 // Used by the gemini_research_paper_analysis tool.

package/dist/dashboard/server.js

@@ -68,6 +68,90 @@ export async function startDashboardServer() {
                 res.writeHead(200, { "Content-Type": "application/json" });
                 return res.end(JSON.stringify({ context, ledger, history }));
             }
+            // ─── API: Brain Health Check (v2.2.0) ───
+            if (url.pathname === "/api/health") {
+                try {
+                    const { runHealthCheck } = await import("../utils/healthCheck.js");
+                    const stats = await storage.getHealthStats(PRISM_USER_ID);
+                    const report = runHealthCheck(stats);
+                    res.writeHead(200, { "Content-Type": "application/json" });
+                    return res.end(JSON.stringify(report));
+                }
+                catch (err) {
+                    console.error("[Dashboard] Health check error:", err);
+                    res.writeHead(200, { "Content-Type": "application/json" });
+                    return res.end(JSON.stringify({
+                        status: "unknown",
+                        summary: "Health check unavailable",
+                        issues: [],
+                        counts: { errors: 0, warnings: 0, infos: 0 },
+                        totals: { activeEntries: 0, handoffs: 0, rollups: 0 },
+                        timestamp: new Date().toISOString(),
+                    }));
+                }
+            }
+            // ─── API: Knowledge Graph Data (v2.3.0) ───
+            if (url.pathname === "/api/graph") {
+                // Fetch recent ledger entries to build the graph
+                // We look at the last 100 entries to keep the graph relevant but performant
+                const entries = await storage.getLedgerEntries({
+                    limit: "100",
+                    order: "created_at.desc",
+                    select: "project,keywords",
+                });
+                // Deduplication sets for nodes and edges
+                const nodes = [];
+                const edges = [];
+                const nodeIds = new Set(); // track unique node IDs
+                const edgeIds = new Set(); // track unique edges
+                // Helper: add a node only if it doesn't already exist
+                const addNode = (id, group, label) => {
+                    if (!nodeIds.has(id)) {
+                        nodes.push({ id, label: label || id, group });
+                        nodeIds.add(id);
+                    }
+                };
+                // Helper: add an edge only if it doesn't already exist
+                const addEdge = (from, to) => {
+                    const id = `${from}-${to}`; // deterministic edge ID
+                    if (!edgeIds.has(id)) {
+                        edges.push({ from, to });
+                        edgeIds.add(id);
+                    }
+                };
+                // Transform relational data into graph nodes & edges
+                entries.forEach(row => {
+                    if (!row.project)
+                        return; // skip rows without project
+                    // 1. Project node (hub — large purple dot)
+                    addNode(row.project, "project");
+                    // 2. Keyword nodes (spokes — small dots)
+                    let keywords = [];
+                    // Handle SQLite (JSON string) vs Supabase (native array)
+                    if (Array.isArray(row.keywords)) {
+                        keywords = row.keywords;
+                    }
+                    else if (typeof row.keywords === "string") {
+                        try {
+                            keywords = JSON.parse(row.keywords);
+                        }
+                        catch { /* skip malformed */ }
+                    }
+                    // Create nodes + edges for each keyword
+                    keywords.forEach((kw) => {
+                        if (kw.length < 3)
+                            return; // skip noise like "a", "is"
+                        // Handle categories (cat:debugging) vs raw keywords
+                        const isCat = kw.startsWith("cat:");
+                        const group = isCat ? "category" : "keyword";
+                        const label = isCat ? kw.replace("cat:", "") : kw;
+                        addNode(kw, group, label); // keyword/category node
+                        addEdge(row.project, kw); // edge: project → keyword
+                    });
+                });
+                res.writeHead(200, { "Content-Type": "application/json" });
+                return res.end(JSON.stringify({ nodes, edges }));
+            }
             // ─── 404 ───
             res.writeHead(404, { "Content-Type": "text/plain" });
             res.end("Not found");

package/dist/dashboard/ui.js

@@ -1,5 +1,5 @@
 /**
- * Mind Palace Dashboard — UI Renderer (v2.0 — Step 8)
+ * Mind Palace Dashboard — UI Renderer (v2.3.1)
  *
  * Pure CSS + Vanilla JS single-page dashboard.
  * No build step, no Tailwind, no framework — served as a template literal.
@@ -22,6 +22,8 @@ export function renderDashboardHTML() {
   <title>Prism MCP — Mind Palace</title>
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet">
+  <!-- Vis.js for Neural Graph (v2.3.0) -->
+  <script type="text/javascript" src="https://unpkg.com/vis-network/standalone/umd/vis-network.min.js"></script>
   <style>
     *, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
 
@@ -224,6 +226,50 @@ export function renderDashboardHTML() {
     /* ─── Fade in animation ─── */
     @keyframes fadeIn { from { opacity: 0; transform: translateY(10px); } to { opacity: 1; transform: translateY(0); } }
     .fade-in { animation: fadeIn 0.4s ease-out forwards; }
+
+    /* ─── Brain Health Indicator (v2.2.0) ─── */
+    .health-status {
+      display: flex; align-items: center; gap: 0.75rem;
+      padding: 0.75rem 1rem; border-radius: var(--radius-sm);
+      background: rgba(15,23,42,0.6); margin-bottom: 1rem;
+    }
+    .health-dot {
+      width: 12px; height: 12px; border-radius: 50%;
+      flex-shrink: 0; position: relative;
+    }
+    .health-dot::after {
+      content: ''; position: absolute; inset: -3px;
+      border-radius: 50%; animation: healthPulse 2s ease-in-out infinite;
+    }
+    .health-dot.healthy { background: var(--accent-green); }
+    .health-dot.healthy::after { border: 2px solid rgba(16,185,129,0.3); }
+    .health-dot.degraded { background: var(--accent-amber); }
+    .health-dot.degraded::after { border: 2px solid rgba(245,158,11,0.3); }
+    .health-dot.unhealthy { background: var(--accent-rose); }
+    .health-dot.unhealthy::after { border: 2px solid rgba(244,63,94,0.3); }
+    .health-dot.unknown { background: var(--text-muted); }
+    .health-dot.unknown::after { border: 2px solid rgba(100,116,139,0.3); }
+    @keyframes healthPulse { 0%,100% { opacity: 1; } 50% { opacity: 0.4; } }
+    .health-label { font-size: 0.8rem; font-weight: 500; }
+    .health-summary { font-size: 0.75rem; color: var(--text-muted); }
+    .health-issues { font-size: 0.8rem; color: var(--text-secondary); margin-top: 0.5rem; }
+    .health-issues .issue-row {
+      padding: 0.3rem 0; display: flex; gap: 0.5rem; align-items: flex-start;
+    }
+
+    /* ─── Neural Graph (v2.3.0) ─── */
+    #network-container {
+      width: 100%; height: 300px;
+      border-radius: var(--radius);
+      background: rgba(0,0,0,0.2);
+      border: 1px solid var(--border-glass);
+    }
+    .refresh-btn {
+      margin-left: auto; background: none; border: none;
+      color: var(--text-muted); cursor: pointer; font-size: 0.85rem;
+      transition: color 0.2s;
+    }
+    .refresh-btn:hover { color: var(--accent-purple); }
   </style>
 </head>
 <body>
@@ -233,7 +279,7 @@ export function renderDashboardHTML() {
       <div class="logo">
         <span class="logo-icon">🧠</span>
         Prism Mind Palace
-        <span class="version-badge">v2.0</span>
+        <span class="version-badge">v2.3.1</span>
       </div>
       <div class="selector">
         <select id="projectSelect">
@@ -271,6 +317,19 @@ export function renderDashboardHTML() {
           <div class="git-row"><span class="git-label">Key Context</span><span class="git-value" id="keyContext" style="font-family:var(--font-sans);max-width:200px;text-align:right">—</span></div>
         </div>
 
+        <!-- Brain Health (v2.2.0) -->
+        <div class="card" id="healthCard" style="display:none">
+          <div class="card-title"><span class="dot" style="background:var(--accent-green)"></span> Brain Health 🩺</div>
+          <div class="health-status">
+            <div class="health-dot unknown" id="healthDot"></div>
+            <div>
+              <div class="health-label" id="healthLabel">Scanning...</div>
+              <div class="health-summary" id="healthSummary"></div>
+            </div>
+          </div>
+          <div class="health-issues" id="healthIssues"></div>
+        </div>
+
         <!-- Morning Briefing -->
         <div class="card" id="briefingCard" style="display:none">
           <div class="card-title"><span class="dot" style="background:var(--accent-amber)"></span> Morning Briefing 🌅</div>
@@ -286,6 +345,17 @@ export function renderDashboardHTML() {
 
       <!-- Right Column -->
       <div class="grid" style="align-content: start;">
+
+        <!-- Neural Graph (v2.3.0) -->
+        <div class="card">
+          <div class="card-title">
+            <span class="dot" style="background:var(--accent-blue)"></span>
+            Neural Graph 🕸️
+            <button onclick="loadGraph()" class="refresh-btn">↻</button>
+          </div>
+          <div id="network-container">Loading nodes...</div>
+        </div>
+
         <!-- Time Travel -->
         <div class="card">
           <div class="card-title"><span class="dot" style="background:var(--accent-purple)"></span> Time Travel History 🕰️</div>
@@ -413,6 +483,49 @@ export function renderDashboardHTML() {
           ledgerEl.innerHTML = '<div style="color:var(--text-muted);font-size:0.85rem;padding:1rem;text-align:center">No ledger entries yet.</div>';
         }
 
+        // ─── Brain Health (v2.2.0) ───
+        try {
+          var healthRes = await fetch('/api/health');
+          var healthData = await healthRes.json();
+          var healthCard = document.getElementById('healthCard');
+          var healthDot = document.getElementById('healthDot');
+          var healthLabel = document.getElementById('healthLabel');
+          var healthSummary = document.getElementById('healthSummary');
+          var healthIssues = document.getElementById('healthIssues');
+
+          // Set the dot color based on status
+          healthDot.className = 'health-dot ' + (healthData.status || 'unknown');
+
+          // Map status to emoji + label
+          var statusMap = { healthy: '✅ Healthy', degraded: '⚠️ Degraded', unhealthy: '🔴 Unhealthy' };
+          healthLabel.textContent = statusMap[healthData.status] || '❓ Unknown';
+
+          // Stats summary line
+          var t = healthData.totals || {};
+          healthSummary.textContent = (t.activeEntries || 0) + ' entries · ' +
+            (t.handoffs || 0) + ' handoffs · ' +
+            (t.rollups || 0) + ' rollups';
+
+          // Issue rows
+          var issues = healthData.issues || [];
+          if (issues.length > 0) {
+            var sevIcons = { error: '🔴', warning: '🟡', info: '🔵' };
+            healthIssues.innerHTML = issues.map(function(i) {
+              return '<div class="issue-row">' +
+                '<span>' + (sevIcons[i.severity] || '❓') + '</span>' +
+                '<span>' + escapeHtml(i.message) + '</span>' +
+                '</div>';
+            }).join('');
+          } else {
+            healthIssues.innerHTML = '<div style="color:var(--accent-green);font-size:0.8rem">🎉 No issues found</div>';
+          }
+
+          healthCard.style.display = 'block';
+        } catch(he) {
+          // Health check not available — silently skip
+          console.warn('Health check unavailable:', he);
+        }
+
         document.getElementById('content').className = 'grid grid-main fade-in';
         document.getElementById('content').style.display = 'grid';
       } catch(e) {
@@ -438,6 +551,73 @@ export function renderDashboardHTML() {
 
     // Allow Enter key in select to trigger load
     document.getElementById('projectSelect').addEventListener('change', loadProject);
+
+    // ─── Neural Graph (v2.3.0) ───
+    // Renders a force-directed graph of projects ↔ keywords ↔ categories
+    async function loadGraph() {
+      var container = document.getElementById('network-container');
+      if (!container) return;
+
+      try {
+        var res = await fetch('/api/graph');
+        var data = await res.json();
+
+        // Empty state — no ledger entries yet
+        if (data.nodes.length === 0) {
+          container.innerHTML = '<div style="display:flex;align-items:center;justify-content:center;height:100%;color:var(--text-muted);font-size:0.85rem">No knowledge associations found yet.</div>';
+          return;
+        }
+
+        // Vis.js dark-theme config matching the glassmorphism palette
+        var options = {
+          nodes: {
+            shape: 'dot',           // all nodes are circles
+            borderWidth: 0,         // no borders for clean look
+            font: { color: '#94a3b8', face: 'Inter', size: 12 }
+          },
+          edges: {
+            width: 1,               // thin edges for subtlety
+            color: { color: 'rgba(139,92,246,0.15)', highlight: '#8b5cf6' },
+            smooth: { type: 'continuous' }  // smooth curves
+          },
+          groups: {
+            project: {              // Hub nodes — large purple
+              color: { background: '#8b5cf6', border: '#7c3aed' },
+              size: 20,
+              font: { size: 14, color: '#f1f5f9', face: 'Inter' }
+            },
+            category: {             // Category nodes — cyan diamonds
+              color: { background: '#06b6d4', border: '#0891b2' },
+              size: 10,
+              shape: 'diamond'
+            },
+            keyword: {              // Keyword nodes — small dark dots
+              color: { background: '#1e293b', border: '#334155' },
+              size: 6,
+              font: { size: 10, color: '#64748b' }
+            }
+          },
+          physics: {
+            stabilization: false,   // animate on load for visual pop
+            barnesHut: {
+              gravitationalConstant: -3000,  // spread nodes apart
+              springConstant: 0.04,          // gentle spring force
+              springLength: 80               // default edge length
+            }
+          },
+          interaction: { hover: true }  // highlight on hover
+        };
+
+        // Create the network visualization
+        new vis.Network(container, data, options);
+      } catch (e) {
+        console.error('Graph error', e);
+        container.innerHTML = '<div style="padding:1rem;color:var(--accent-rose)">Graph failed to load</div>';
+      }
+    }
+
+    // Initialize the graph on page load
+    loadGraph();
   </script>
 </body>
 </html>`;

package/dist/server.js

@@ -72,17 +72,21 @@ import { WEB_SEARCH_TOOL, BRAVE_WEB_SEARCH_CODE_MODE_TOOL, LOCAL_SEARCH_TOOL, BR
 // Session memory tools — only used if Supabase is configured
 import { SESSION_SAVE_LEDGER_TOOL, SESSION_SAVE_HANDOFF_TOOL, SESSION_LOAD_CONTEXT_TOOL, KNOWLEDGE_SEARCH_TOOL, KNOWLEDGE_FORGET_TOOL, 
 // ─── v0.4.0: New tool definitions (Enhancements #2 and #4) ───
-SESSION_COMPACT_LEDGER_TOOL, SESSION_SEARCH_MEMORY_TOOL, SESSION_BACKFILL_EMBEDDINGS_TOOL, 
+SESSION_COMPACT_LEDGER_TOOL, SESSION_SEARCH_MEMORY_TOOL, 
 // ─── v2.0: Time Travel tool definitions ───
 MEMORY_HISTORY_TOOL, MEMORY_CHECKOUT_TOOL, 
 // ─── v2.0: Visual Memory tool definitions ───
-SESSION_SAVE_IMAGE_TOOL, SESSION_VIEW_IMAGE_TOOL, sessionSaveLedgerHandler, sessionSaveHandoffHandler, sessionLoadContextHandler, knowledgeSearchHandler, knowledgeForgetHandler, 
+SESSION_SAVE_IMAGE_TOOL, SESSION_VIEW_IMAGE_TOOL, 
+// ─── v2.2.0: Health Check tool definition ───
+SESSION_HEALTH_CHECK_TOOL, sessionSaveLedgerHandler, sessionSaveHandoffHandler, sessionLoadContextHandler, knowledgeSearchHandler, knowledgeForgetHandler, 
 // ─── v0.4.0: New tool handlers ───
-compactLedgerHandler, sessionSearchMemoryHandler, backfillEmbeddingsHandler, 
+compactLedgerHandler, sessionSearchMemoryHandler, 
 // ─── v2.0: Time Travel handlers ───
 memoryHistoryHandler, memoryCheckoutHandler, 
 // ─── v2.0: Visual Memory handlers ───
-sessionSaveImageHandler, sessionViewImageHandler, } from "./tools/index.js";
+sessionSaveImageHandler, sessionViewImageHandler, 
+// ─── v2.2.0: Health Check handler ───
+sessionHealthCheckHandler, } from "./tools/index.js";
 // ─── Dynamic Tool Registration ───────────────────────────────────
 // Base tools: always available regardless of configuration
 const BASE_TOOLS = [
@@ -106,12 +110,13 @@ const SESSION_MEMORY_TOOLS = [
     KNOWLEDGE_FORGET_TOOL, // knowledge_forget — prune bad/old memories
     SESSION_COMPACT_LEDGER_TOOL, // session_compact_ledger — auto-compact old ledger entries (v0.4.0)
     SESSION_SEARCH_MEMORY_TOOL, // session_search_memory — semantic search via embeddings (v0.4.0)
-    SESSION_BACKFILL_EMBEDDINGS_TOOL, // session_backfill_embeddings — repair missing embeddings
     MEMORY_HISTORY_TOOL, // memory_history — view version timeline (v2.0)
     MEMORY_CHECKOUT_TOOL, // memory_checkout — revert to past version (v2.0)
     // ─── v2.0: Visual Memory tools ───
     SESSION_SAVE_IMAGE_TOOL, // session_save_image — save image to media vault (v2.0)
     SESSION_VIEW_IMAGE_TOOL, // session_view_image — retrieve image from vault (v2.0)
+    // ─── v2.2.0: Health Check tool ───
+    SESSION_HEALTH_CHECK_TOOL, // session_health_check — brain integrity checker (v2.2.0)
 ];
 // Combine: if session memory is enabled, add those tools too
 const ALL_TOOLS = [
@@ -477,10 +482,6 @@ export function createServer() {
                     if (!SESSION_MEMORY_ENABLED)
                         throw new Error("Session memory not configured. Set SUPABASE_URL and SUPABASE_KEY.");
                     return await sessionSearchMemoryHandler(args);
-                case "session_backfill_embeddings":
-                    if (!SESSION_MEMORY_ENABLED)
-                        throw new Error("Session memory not configured. Set SUPABASE_URL and SUPABASE_KEY.");
-                    return await backfillEmbeddingsHandler(args);
                 // ─── v2.0: Time Travel Tools ───
                 case "memory_history":
                     if (!SESSION_MEMORY_ENABLED)
@@ -499,6 +500,11 @@ export function createServer() {
                     if (!SESSION_MEMORY_ENABLED)
                         throw new Error("Session memory not configured. Set SUPABASE_URL and SUPABASE_KEY.");
                     return await sessionViewImageHandler(args);
+                // ─── v2.2.0: Health Check Tool ───
+                case "session_health_check":
+                    if (!SESSION_MEMORY_ENABLED)
+                        throw new Error("Session memory not configured. Set SUPABASE_URL and SUPABASE_KEY.");
+                    return await sessionHealthCheckHandler(args);
                 default:
                     return {
                         content: [{ type: "text", text: `Unknown tool: ${name}` }],
@@ -521,11 +527,65 @@ export function createServer() {
     });
     return server;
 }
-// ─── Smithery Sandbox Export ─────────────────────────────────────
-// Smithery uses this to scan capabilities (tools, prompts, resources)
-// without requiring real credentials or starting a transport.
+// ─── Smithery/Glama Sandbox Export ───────────────────────────────
+// Scanners (Smithery, Glama) use this to enumerate capabilities
+// (tools, prompts, resources) without requiring real credentials.
+// Unlike createServer(), this always exposes ALL capabilities
+// regardless of whether SESSION_MEMORY_ENABLED is true.
 export function createSandboxServer() {
-    return createServer();
+    const server = new Server({
+        name: SERVER_CONFIG.name,
+        version: SERVER_CONFIG.version,
+    }, {
+        capabilities: {
+            tools: {
+                tools: [...BASE_TOOLS, ...SESSION_MEMORY_TOOLS],
+            },
+            prompts: {},
+            resources: { subscribe: true },
+        },
+    });
+    // Register all tool listings unconditionally
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+        tools: [...BASE_TOOLS, ...SESSION_MEMORY_TOOLS],
+    }));
+    // Register prompts listing so scanners see resume_session
+    server.setRequestHandler(ListPromptsRequestSchema, async () => ({
+        prompts: [{
+                name: "resume_session",
+                description: "Load previous session context for a project. " +
+                    "Automatically fetches handoff state and injects it before " +
+                    "the LLM starts thinking — no tool call needed. " +
+                    "Includes version tracking for concurrency control.",
+                arguments: [
+                    {
+                        name: "project",
+                        description: "Project identifier to resume (e.g., 'prism-mcp')",
+                        required: true,
+                    },
+                    {
+                        name: "level",
+                        description: "Context depth: 'quick' (~50 tokens), " +
+                            "'standard' (~200 tokens, recommended), " +
+                            "'deep' (full history, ~1000+ tokens)",
+                        required: false,
+                    },
+                ],
+            }],
+    }));
+    // Register resource templates so scanners see memory://{project}/handoff
+    server.setRequestHandler(ListResourceTemplatesRequestSchema, async () => ({
+        resourceTemplates: [{
+                uriTemplate: "memory://{project}/handoff",
+                name: "Session Handoff State",
+                description: "Current handoff state for a project — includes " +
+                    "last summary, pending TODOs, active decisions, keywords, " +
+                    "and version number for concurrency control. " +
+                    "Attach this to inject session context without a tool call.",
+                mimeType: "application/json",
+            }],
+    }));
+    return server;
 }
 // ─── Server Startup ─────────────────────────────────────────────
 /**