prism-mcp-server 20.0.8 → 20.2.0

package/README.md

@@ -18,6 +18,32 @@ A paid subscription adds cloud sync, higher model tiers, and team features throu
 
 ---
 
+## What's New in v20.2.0
+
+### One Command Connects Every Supported Host
+Install Prism globally and run `prism connect`. It detects Claude Code, Claude
+Desktop on macOS, Windows, and Linux (beta), Cursor, Gemini CLI, and Codex, then safely registers the
+server from the installed package. Existing custom entries are untouched;
+`--dry-run` previews changes and `--refresh` updates only Prism-managed entries.
+
+---
+
+## What's New in v20.1.0
+
+### Every Inference Outcome Is Now Observable
+`prism_infer` gains a failure contract: pass `escalation: "report"` and every call returns a structured `gate_outcome` — `success`, `degraded` (gate-failed output served anyway, explicitly flagged), or `refused` (typed, with reason, instead of a thrown error). Degraded output can no longer serve silently.
+
+### Big Prompts Work Locally
+Prompts over 4000 chars were blanket-refused when cloud was off. Now the full text gets a deterministic reserved-keyword scan plus a head+middle+tail excerpt classification — clean oversize prompts serve locally with a distinct `UNCERTAIN_LENGTH` audit marker. Clinical/reserved handling is unchanged (and its keyword floor got stronger).
+
+### No More Silent Truncation
+Tier context limits now match the live Modelfiles (27b/9b are 4096-token models; 4b/2b are 32768 — the old table had it backwards). Tiers that can't hold your prompt are skipped with a visible `ctx_insufficient` reason; if nothing fits, you get the full prompt on cloud or a loud error — never an answer computed from a silently-clipped prompt.
+
+### Know Which Plan You're Actually Running Under
+Entitlements carry a `source` field: `portal` (real), `unconfigured` (free by design), or `fallback_free` (portal unreachable — free limits ASSUMED). Pass `strict_entitlements: true` to fail loud instead of running degraded.
+
+---
+
 ## What's New in v20.0.8
 
 ### verify_behavior Works Again
@@ -81,20 +107,31 @@ External contributions now require signing the [Individual CLA](./CLA.md). The C
 
 ## Quickstart
 
-The free tier needs no account, no API key, and no cloud. Add the server to your MCP client:
-
-```json
-{
-  "mcpServers": {
-    "prism": {
-      "command": "npx",
-      "args": ["-y", "prism-mcp-server"]
-    }
-  }
-}
+The free tier needs no account, no API key, and no cloud. Install Prism, then
+register it with every supported MCP host already installed on your machine:
+
+```bash
+npm install --global prism-mcp-server
+prism connect
 ```
 
-Open Claude Desktop or Cursor and your agent now has memory backed by a local SQLite database (`~/.prism-mcp/data.db`).
+`prism connect` detects Claude Code, Claude Desktop (macOS/Windows/Linux), Cursor,
+Gemini CLI, and Codex.
+Use `prism connect --all` to target all five, `--host <name>` for one host, or
+`--dry-run` to preview the files that would change. Existing `prism` and
+`prism-mcp` entries are never overwritten by default. `--refresh` updates only
+an entry previously created by Prism; custom entries remain untouched.
+Close the target MCP hosts before a non-dry-run registration so they cannot
+edit their configuration at the same time.
+
+Codex registration preserves `~/.codex/config.toml` and appends only a marked
+Prism-managed block. `CODEX_HOME` is respected when set and must already exist,
+matching Codex's own contract. Restart Codex CLI, the
+IDE extension, or the ChatGPT desktop app after connecting.
+
+Restart the connected host and your agent now has memory backed by a local
+SQLite database (`~/.prism-mcp/data.db`). See [IDE setup](docs/IDE_SETUP.md)
+for manual configuration and host-specific paths.
 
 **Optional — local model fleet** for offline tool-routing. Pull whichever fits your hardware:
 

package/dist/boundaries/boundaries.js

@@ -17,12 +17,12 @@
  * BOUNDARIES_VERSION is still used by markContextLoaded for session
  * drift detection — bump it when the safety contract changes.
  */
-export const BOUNDARIES_VERSION = "3";
+export const BOUNDARIES_VERSION = "4";
 export const BOUNDARIES_TEXT = `
 Safety boundaries are enforced in code — shown so hosts avoid wasted round-trips.
 
 - **Crisis/self-harm** inputs are intercepted before reaching any model.
-- **BCBA reserved categories** (restraint, seclusion, physical management, dosing) are classified by Layer 1. RESERVED and UNCERTAIN prompts escalate to cloud or are refused. On classifier failure, a keyword backstop blocks reserved vocabulary before local generation.
+- **BCBA reserved categories** (restraint, seclusion, physical management, dosing): Layer 1 classifies; RESERVED/UNCERTAIN escalate to cloud or are refused. A keyword backstop covers classifier failure; oversize prompts get a full-text keyword scan + excerpt classification.
 - **Dangerous output** (restraint instructions, overdose methods, self-harm guidance) is blocked regardless of host.
 - AAC access is never restricted as a consequence.
 `.trim();

package/dist/cli.js

@@ -8,11 +8,73 @@ import { getSetting } from './storage/configStorage.js';
 import { PRISM_USER_ID, SERVER_CONFIG } from './config.js';
 import { getCurrentGitState } from './utils/git.js';
 import { sessionLoadContextHandler, sessionSaveLedgerHandler, sessionSaveHandoffHandler } from './tools/ledgerHandlers.js';
+import { connectHosts, normalizeHostName } from './connect.js';
 const program = new Command();
 program
     .name('prism')
     .description('Prism — The Mind Palace for AI Agents')
     .version(SERVER_CONFIG.version);
+// ─── prism connect ────────────────────────────────────────────
+// Registers this installed package with supported MCP hosts. The
+// merge is additive: an existing `prism` or `prism-mcp` entry is
+// reported and left byte-for-byte untouched.
+program
+    .command('connect')
+    .description('Register Prism with installed MCP hosts (close hosts before writing)')
+    .option('--host <name>', 'Target one host: claude-code, claude-desktop, cursor, gemini, or codex')
+    .option('--all', 'Target all supported hosts instead of auto-detecting installed hosts')
+    .option('--dry-run', 'Preview configuration changes without writing files')
+    .option('--refresh', 'Refresh only entries previously created by Prism; custom entries stay untouched')
+    .action((options) => {
+    try {
+        if (!options.dryRun) {
+            console.log('Close target MCP hosts before registration so they cannot edit configuration concurrently.');
+        }
+        const hosts = options.host ? [normalizeHostName(options.host)] : undefined;
+        const summary = connectHosts({
+            all: !!options.all,
+            dryRun: !!options.dryRun,
+            refresh: !!options.refresh,
+            hosts,
+        });
+        if (summary.results.length === 0) {
+            console.error('No supported MCP hosts detected. Use --host <name> or --all to target one explicitly.');
+            process.exitCode = 1;
+            return;
+        }
+        for (const result of summary.results) {
+            if (result.status === 'registered') {
+                console.log(`✓ ${result.label}: registered (${result.path})`);
+            }
+            else if (result.status === 'would-register') {
+                console.log(`• ${result.label}: would register (${result.path})`);
+            }
+            else if (result.status === 'refreshed') {
+                console.log(`✓ ${result.label}: Prism-managed entry refreshed (${result.path})`);
+            }
+            else if (result.status === 'would-refresh') {
+                console.log(`• ${result.label}: would refresh Prism-managed entry (${result.path})`);
+            }
+            else if (result.status === 'existing') {
+                console.log(`− ${result.label}: already registered — untouched (${result.path})`);
+            }
+            else {
+                console.error(`✗ ${result.label}: ${result.message || 'registration failed'} (${result.path})`);
+                process.exitCode = 1;
+            }
+        }
+        if (options.dryRun) {
+            console.log('\nDry run complete — no files changed.');
+        }
+        if (!summary.usedApiKey) {
+            console.log('PRISM_SYNALUX_API_KEY is not set; new registrations use local/free mode.');
+        }
+    }
+    catch (err) {
+        console.error(`Connect failed: ${err instanceof Error ? err.message : String(err)}`);
+        process.exitCode = 1;
+    }
+});
 // ─── prism load <project> ─────────────────────────────────────
 // Loads session context using the same storage layer as the MCP
 // session_load_context tool. Works with both SQLite and Supabase.