prism-mcp-server 20.17.2 → 20.17.3

package/README.md

@@ -87,14 +87,14 @@ skill for you.
 
 ```bash
 /plugin marketplace add anthropics/claude-plugins-community
-/plugin install synalux-prism@claude-community
+/plugin install prism-coder@claude-community
 ```
 
 **Codex** — this repository is itself a plugin marketplace:
 
 ```bash
 codex plugin marketplace add dcostenco/prism-coder
-codex plugin add synalux-prism@prism
+codex plugin add prism-coder@prism
 ```
 
 The plugin registers `prism-mcp` via `npx -y prism-mcp-server`. If you already
@@ -138,6 +138,17 @@ or by re-enabling after each run.
 <details>
 <summary>Release history (optional)</summary>
 
+## What's New in v20.17.3
+
+- **A plugin install can no longer enable the prompt-routing hook.** The
+  package's maintenance paths (npm postinstall, server startup) now only
+  refresh a hook that an explicit `prism connect` previously installed —
+  a prism MCP registration in host config no longer counts as consent.
+  First install of the hook happens through `prism connect` or not at all.
+- **The Claude Code plugin launcher is fully deterministic.** It runs the
+  exact pinned server version with npm lifecycle scripts disabled, and
+  the plugin now documents its security posture in `plugins/prism/README.md`.
+
 ## What's New in v20.17.2
 
 - **Pasted logs can no longer falsely activate skills.** Symptom-triggered

package/dist/postinstall.js

@@ -1,9 +1,12 @@
 /**
- * npm postinstall — the upgrade path for the prism-route hook.
- *
- * `prism connect` is only typed once per machine, so an upgrade that adds or
- * fixes the hook would otherwise reach no one until they reconnect. Silent
- * and always-exit-0: a hook installer must never break `npm install`.
+ * npm postinstall — the UPGRADE path for the prism-route hook, never the
+ * install path. `prism connect` is typed once per machine and is the only
+ * consent that first-installs the hook; this script merely refreshes hosts
+ * that carry the managed marker from that explicit install (mode "auto" is
+ * marker-gated in ensurePromptRouteHook). On any machine without the marker
+ * — including every Claude Code plugin install, where npx runs this
+ * package's lifecycle scripts — it is a no-op that writes nothing. Silent
+ * and always-exit-0: a lifecycle script must never break `npm install`.
  */
 import { ensurePromptRouteHook } from "./promptRouteHostHook.js";
 try {

package/dist/promptRouteHostHook.js

@@ -205,21 +205,10 @@ if __name__ == "__main__":
         print(json.dumps({"continue": True, "suppressOutput": True}))
         sys.exit(0)
 `;
-/** Evidence that this host was already prism-integrated by explicit action. */
-function hostShowsPriorConsent(spec, homeDir) {
-    if (existsSync(join(spec.root, "hooks", HOOK_DIR, MARKER_FILE)))
-        return true;
-    const evidenceFiles = spec.host === "claude"
-        ? [join(homeDir, ".claude.json"), spec.configPath]
-        : [join(spec.root, "config.toml"), spec.configPath];
-    for (const file of evidenceFiles) {
-        try {
-            if (/prism/i.test(readFileSync(file, "utf8")))
-                return true;
-        }
-        catch { /* unreadable = no evidence */ }
-    }
-    return false;
+/** A prior EXPLICIT install left our managed marker; only that authorizes
+ *  the auto paths to touch this host again (refresh/upgrade). */
+function hostHasManagedHook(spec) {
+    return existsSync(join(spec.root, "hooks", HOOK_DIR, MARKER_FILE));
 }
 function hostSpecs(homeDir, env) {
     const codexHome = env.CODEX_HOME?.trim() ? resolve(env.CODEX_HOME.trim()) : join(homeDir, ".codex");
@@ -369,7 +358,7 @@ export function ensurePromptRouteHook(options = {}) {
             continue;
         if (onlyExisting && !existsSync(spec.root))
             continue;
-        if ((options.mode ?? "explicit") === "auto" && !hostShowsPriorConsent(spec, homeDir))
+        if ((options.mode ?? "explicit") === "auto" && !hostHasManagedHook(spec))
             continue;
         try {
             const hookDir = join(spec.root, "hooks", HOOK_DIR);

package/dist/server.js

@@ -265,9 +265,11 @@ let storageIsReady = false;
 // native host complies with the hook-free first-turn instruction.
 let contextLoadedByClient = false;
 // ─── prism-route hook self-heal ──────────────────────────────
-// The safety net of the three install paths (connect, postinstall, here):
-// covers installs that skipped npm scripts and machines that never re-ran
-// connect. Idempotent and version-marked, so the steady-state cost is two
+// REFRESH-ONLY safety net: repairs/upgrades a hook that a prior EXPLICIT
+// `prism connect` installed (managed marker present). It never performs a
+// first install — a machine that merely installed this package (or the
+// Claude Code plugin, which registers prism-mcp in host config) is not
+// touched. Idempotent and version-marked, so the steady-state cost is two
 // stat calls a few seconds after boot. Opt out: PRISM_DISABLE_HOOK_AUTOINSTALL=1.
 // Guarded against test runners: five suites import this module, and a
 // module-scope timer would otherwise rewrite the DEVELOPER'S real host

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "20.17.2",
+  "version": "20.17.3",
   "mcpName": "io.github.dcostenco/prism-coder",
   "description": "Persistent session memory for AI coding agents that never leaves your machine — including the on-device model that reasons over it. Restores your prior decisions, open TODOs, and changed files across sessions; adds associative recall of related past work, semantic drift detection, and local inference. Local-first by default. Works with Claude Code, Cursor, and Codex.",
   "module": "index.ts",