prism-mcp-server 20.2.2 → 20.2.4

package/README.md

@@ -18,6 +18,58 @@ A paid subscription adds cloud sync, higher model tiers, and team features throu
 
 ---
 
+## What Prism gives you
+
+- **Session memory that survives restarts** — resume projects with handoff notes,
+  recent work, open TODOs, and configurable quick, standard, or deep context.
+- **Local-first inference** — bounded work is routed through local Ollama models
+  first, with automatic 2B/4B/9B/27B selection based on installed models,
+  available RAM, context fit, and subscription entitlements.
+- **One setup for every agent** — `prism connect` configures Claude Code,
+  Claude Desktop, Cursor, Gemini CLI, and Codex while preserving unrelated
+  settings.
+- **Subscription-aware skills** — entitled skills are synchronized before the
+  host launches, with safe upgrades, downgrades, conflict preservation, and
+  offline last-good recovery.
+- **Hook-free startup** — MCP metadata and native instructions request Prism's
+  startup context without requiring lifecycle hooks or a Prism-owned launcher.
+- **Safe escalation and observability** — inference outcomes are explicit,
+  reserved content remains fail-closed, and local/cloud usage is recorded for
+  review.
+
+## Get started
+
+```bash
+npm install -g prism-mcp-server
+prism connect
+```
+
+Use `prism connect --dry-run` to preview changes, `prism connect --all` to
+configure every detected host, or `prism connect --refresh` to reconcile
+Prism-managed entries after an upgrade. Restart the host after connecting.
+
+Prism works locally without an account, API key, or cloud subscription. Add a
+Synalux subscription when you want cloud memory, paid-tier skills, or team
+features.
+
+---
+
+<details>
+<summary>Release history (optional)</summary>
+
+## What's New in v20.2.4
+
+### Reliable Session Memory That Shows Work, Not Greetings
+Greeting-only assistant replies are skipped before ledger writes. Existing
+greeting rows are filtered at read time across native startup, MCP context, and
+`prism load --json`, while entries containing decisions, TODOs, changed files,
+or non-session events remain visible. Historical rows are not destructively
+deleted. If Synalux has a transient startup failure, Prism displays one bounded
+local last-good snapshot and clearly labels it; permanent authorization or
+validation failures still fail loud, and later writes remain cloud-routed.
+
+---
+
 ## What's New in v20.2.2
 
 ### One Local-First Workflow Across Every Agent
@@ -186,6 +238,8 @@ External contributions now require signing the [Individual CLA](./CLA.md). The C
 
 ---
 
+</details>
+
 ## Quickstart
 
 The free tier needs no account, no API key, and no cloud. Install Prism, then
@@ -521,42 +575,44 @@ The quality gate detected repeated sentences (≥3 of the same sentence in ≥6
 
 ### vs AI coding assistants
 
-These tables are the maintainer's assessment as of June 2026. Verify claims that matter to you — products change fast.
-
-| Feature | Prism Coder | GitHub Copilot | Cursor | Windsurf | Amazon Q | Devin |
-|---|:---:|:---:|:---:|:---:|:---:|:---:|
-| Local inference (open-weight) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Works fully offline | ✅ (free tier) | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Persistent cross-session memory | ✅ | ✅ | ❌ | ❌ | ❌ | ❌ |
-| Session drift detection | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| L3 grounding verifier | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Behavioral verification (pre-edit) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| MCP server (tools + memory) | ✅ | ❌ | ❌ | ❌ | ❌ | ❌ |
-| Web IDE | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ |
-| VS Code extension | ✅ | ✅ | — | — | ✅ | ❌ |
-| Flat-rate team pricing | ✅ | ❌ (per-seat) | ❌ (per-seat) | ❌ | ❌ | ❌ |
-| HIPAA BAA available | ✅ (Enterprise) | ❌ | ❌ | ❌ | ❌ | ❌ |
+Product capabilities and plans change frequently. The comparison below is
+intentionally limited to publicly documented differences; it is not a claim
+that another product lacks an unlisted feature.
+
+Legend: ✅ documented, ◐ conditional or plan-dependent, — not compared, ? verify
+with the provider.
+
+| Capability | Prism Coder | GitHub Copilot | Cursor | Amazon Q Developer |
+|---|:---:|:---:|:---:|:---:|
+| Local/open-weight inference | ✅ | ◐ | ◐ | ◐ |
+| Offline workflow | ✅ | ◐ | ? | ? |
+| Cross-session memory | ✅ | ◐ ([docs](https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference)) | ◐ | ◐ |
+| MCP integration | ✅ | ✅ ([docs](https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference)) | ✅ ([pricing](https://cursor.com/en-US/pricing)) | ◐ |
+| Local-first model routing | ✅ | ◐ | ◐ | ◐ |
+| Session drift and grounding checks | ✅ | — | — | — |
+| Setup surface | ✅ five hosts | ✅ CLI/IDE | ✅ editor/agents | ✅ IDE/CLI ([overview](https://aws.amazon.com/q/developer/build/)) |
+| Pricing model | ✅ Synalux tiers | ◐ | ◐ ([pricing](https://cursor.com/en-US/pricing)) | ✅ free + $19 Pro ([pricing](https://aws.amazon.com/q/developer/pricing/)) |
+
+Prism-specific compliance, contractual, and pricing terms are documented in
+the Synalux service agreement. Do not infer a competitor's HIPAA, BAA, or data
+handling status from this table.
 
 ### vs local AI / memory tools
 
 | Feature | Prism Coder | Ollama | LM Studio | Mem0 | Zep |
 |---|:---:|:---:|:---:|:---:|:---:|
-| Local inference cascade | ✅ | ✅ | ✅ | ❌ | ❌ |
-| Cloud fallback | ✅ | ❌ | ❌ | ❌ | ❌ |
-| Persistent cross-session memory | ✅ | ❌ | ❌ | ✅ | ✅ |
-| Knowledge ingestion (MCP + webhook) | ✅ | ❌ | ❌ | ❌ | ❌ |
-| Cognitive routing (3-store) | ✅ | ❌ | ❌ | ❌ | ❌ |
-| Session drift detection | ✅ | ❌ | ❌ | ❌ | ❌ |
-| Native MCP server | ✅ | ❌ | ❌ | ❌ | ❌ |
-| Web IDE + VS Code extension | ✅ | ❌ | ❌ | ❌ | ❌ |
-
-### Pricing — flat-rate, not per-seat
-
-| | **Prism Coder** | GitHub Copilot | Cursor | Amazon Q |
-|---|:---:|:---:|:---:|:---:|
-| **Individual** | **$19/mo** | $10/mo | $20/mo | $19/mo |
-| **Team (5 devs)** | **$49/mo flat** | $95/mo | $200/mo | $95/mo |
-| **Enterprise (25 devs)** | **$99/mo flat** | $195/mo | $1,000/mo | Custom |
+| Local inference cascade | ✅ | ✅ runtime | ✅ app | — | — |
+| Cloud fallback | ✅ optional | — | ◐ provider-dependent | ◐ | ◐ |
+| Persistent memory | ✅ | — | ◐ project context | ✅ | ✅ |
+| Knowledge/tool integration | ✅ MCP + ingestion | ◐ APIs | ◐ integrations | ✅ SDK/API | ✅ SDK/API |
+| MCP server | ✅ native | — | ◐ client integration | ◐ client integration | ◐ client integration |
+
+### Pricing
+
+Prism's current published tiers are listed below. Competitor pricing is
+usage- and plan-dependent, so consult the provider directly: [GitHub
+Copilot](https://github.com/features/copilot/plans), [Cursor](https://cursor.com/en-US/pricing),
+and [Amazon Q Developer](https://aws.amazon.com/q/developer/pricing/).
 
 ---
 
@@ -686,10 +742,37 @@ prism save                # save ledger + handoff
 prism search <query>      # search code across repos (exact / regex / symbol / semantic)
 prism review <files...>   # AI code review — security, performance, style
 prism scan <files...>     # security scan — secrets, licenses, Dockerfile
+prism browser ...         # persistent local browser testing and structured automation
 prism push                # push local SQLite to the cloud backend
 prism register-models     # alias dcostenco/prism-coder:* -> prism-coder:*
 ```
 
+### `prism browser` — local browser testing
+
+The npm package includes Prism's Python/Playwright browser runner; no separate
+Prism Browser app or DMG is required. It adds a stable agent-facing CLI around
+Playwright with reusable named profiles, multi-action pipe/REPL sessions,
+redacted local audit logs, and guarded preload scripts for local apps. Use pipe
+or REPL mode when several actions must share one page session:
+
+```bash
+printf 'open http://127.0.0.1:3000\nwait-for #app\nread-dom #app\n' | \
+  prism browser --headless --local-only pipe
+```
+
+Local apps can load repeatable pre-navigation test helpers with
+`--inject ./tests/browser-init.js`. Custom injection requires `--local-only`;
+public navigation and non-loopback requests are rejected in that mode. Install
+the local runtime once with `pip3 install playwright playwright-stealth` and
+`python3 -m playwright install chromium`.
+
+Use raw Playwright for authored suites that need its full assertion, tracing,
+fixture, and parallel-worker APIs. Use `prism browser` when an AI agent needs a
+small, persistent, auditable local browser session through one consistent CLI.
+The compatibility patches are best effort; they are not a CAPTCHA-bypass
+guarantee. See [Prism Browser local testing](docs/prism-browser.md) for the
+command surface, safety model, and verified acceptance cases.
+
 ### `prism search` — semantic code search
 
 <p align="center">

package/dist/browserCli.js

@@ -0,0 +1,56 @@
+import { spawn, spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+export function resolveBundledBrowserScript() {
+    return fileURLToPath(new URL('../scripts/dev/browse.py', import.meta.url));
+}
+export function pythonCandidates(env = process.env, platform = process.platform) {
+    if (env.PRISM_PYTHON) {
+        return [{ executable: env.PRISM_PYTHON, prefixArgs: [] }];
+    }
+    return platform === 'win32'
+        ? [
+            { executable: 'py', prefixArgs: ['-3'] },
+            { executable: 'python', prefixArgs: [] },
+        ]
+        : [
+            { executable: 'python3', prefixArgs: [] },
+            { executable: 'python', prefixArgs: [] },
+        ];
+}
+export function resolvePythonCommand(env = process.env, platform = process.platform) {
+    for (const candidate of pythonCandidates(env, platform)) {
+        const result = spawnSync(candidate.executable, [...candidate.prefixArgs, '--version'], { env, encoding: 'utf8', shell: false });
+        if (!result.error && result.status === 0)
+            return candidate;
+    }
+    return null;
+}
+export function hasPlaywrightRuntime(python, env = process.env) {
+    const result = spawnSync(python.executable, [...python.prefixArgs, '-c', 'import playwright.sync_api'], { env, encoding: 'utf8', shell: false });
+    return !result.error && result.status === 0;
+}
+export async function runBrowserCli(args, env = process.env) {
+    const scriptPath = resolveBundledBrowserScript();
+    if (!existsSync(scriptPath)) {
+        throw new Error(`Bundled Prism Browser script is missing: ${scriptPath}`);
+    }
+    const python = resolvePythonCommand(env);
+    if (!python) {
+        throw new Error('Python 3 is required for Prism Browser. Set PRISM_PYTHON to a Python 3 executable.');
+    }
+    if (!args.includes('--help') && !args.includes('-h') && !hasPlaywrightRuntime(python, env)) {
+        throw new Error('Python Playwright is required. Run: pip3 install playwright playwright-stealth && python3 -m playwright install chromium');
+    }
+    return await new Promise((resolve, reject) => {
+        const child = spawn(python.executable, [...python.prefixArgs, scriptPath, ...args], { env, shell: false, stdio: 'inherit' });
+        child.once('error', reject);
+        child.once('exit', (code, signal) => {
+            if (signal) {
+                reject(new Error(`Prism Browser terminated by signal ${signal}`));
+                return;
+            }
+            resolve(code ?? 1);
+        });
+    });
+}

package/dist/cli.js

@@ -9,22 +9,26 @@ import { PRISM_USER_ID, SERVER_CONFIG } from './config.js';
 import { getCurrentGitState } from './utils/git.js';
 import { sessionBootstrapHandler, sessionLoadContextHandler, sessionSaveLedgerHandler, sessionSaveHandoffHandler, } from './tools/ledgerHandlers.js';
 import { configureClaudeAgentPolicy, configureClaudeNativeStartup, configureCodexAgentPolicy, configureCodexNativeStartup, configureGeminiAgentPolicy, configureGeminiNativeStartup, connectHosts, migrateLegacyClaudeHooks, migrateLegacyClaudeInstructions, migrateLegacyClaudeManagedStartup, migrateLegacyClaudeProjectMcp, normalizeHostName, } from './connect.js';
+import { runBrowserCli } from './browserCli.js';
+import { filterPrismMemoryContext } from './utils/memoryQuality.js';
+import { isRecoverableStartupStorageError } from './utils/startupRecovery.js';
 const program = new Command();
 /** Build the stable `prism load --json` envelope from depth-specific context. */
 export function buildLoadJsonOutput(project, data, level, metadata) {
+    const filteredData = filterPrismMemoryContext(data);
     let history = [];
     let historyLimit = 0;
     if (level === 'standard') {
-        history = Array.isArray(data.recent_sessions) ? data.recent_sessions : [];
+        history = Array.isArray(filteredData.recent_sessions) ? filteredData.recent_sessions : [];
         historyLimit = 5;
     }
     else if (level === 'deep') {
         // Canonical deep context uses session_history. Fall back only when that
         // field is absent so older portal responses remain consumable.
-        history = Array.isArray(data.session_history)
-            ? data.session_history
-            : Array.isArray(data.recent_sessions)
-                ? data.recent_sessions
+        history = Array.isArray(filteredData.session_history)
+            ? filteredData.session_history
+            : Array.isArray(filteredData.recent_sessions)
+                ? filteredData.recent_sessions
                 : [];
         historyLimit = 50;
     }
@@ -32,15 +36,15 @@ export function buildLoadJsonOutput(project, data, level, metadata) {
         agent_name: metadata.agentName || null,
         handoff: [{
                 project,
-                role: metadata.effectiveRole || data.role || 'global',
-                last_summary: data.last_summary || null,
-                pending_todo: data.pending_todo || null,
-                active_decisions: data.active_decisions || null,
-                keywords: data.keywords || null,
-                key_context: data.key_context || null,
-                active_branch: data.active_branch || null,
-                version: data.version ?? null,
-                updated_at: data.updated_at || null,
+                role: metadata.effectiveRole || filteredData.role || 'global',
+                last_summary: filteredData.last_summary || null,
+                pending_todo: filteredData.pending_todo || null,
+                active_decisions: filteredData.active_decisions || null,
+                keywords: filteredData.keywords || null,
+                key_context: filteredData.key_context || null,
+                active_branch: filteredData.active_branch || null,
+                version: filteredData.version ?? null,
+                updated_at: filteredData.updated_at || null,
             }],
         // Keep the established key for callers while sourcing the canonical field
         // for the requested depth.
@@ -60,21 +64,46 @@ program
     .description('Prism — The Mind Palace for AI Agents')
     .version(SERVER_CONFIG.version);
 /** Print the canonical hook-free first-turn display used by the MCP tool. */
+export const isRecoverableBootstrapStorageError = isRecoverableStartupStorageError;
+async function printBootstrapDisplay() {
+    const result = await sessionBootstrapHandler({});
+    const output = result.content?.map((part) => part?.text).filter(Boolean).join('\n') || '';
+    if (!output)
+        throw new Error('session_bootstrap returned no display content');
+    console.log(output);
+    if (result.isError)
+        process.exitCode = 1;
+}
 export async function runBootstrapCommand() {
+    const previousStorage = process.env.PRISM_STORAGE;
     try {
-        const result = await sessionBootstrapHandler({});
-        const output = result.content?.map((part) => part?.text).filter(Boolean).join('\n') || '';
-        if (!output)
-            throw new Error('session_bootstrap returned no display content');
-        console.log(output);
-        if (result.isError)
-            process.exitCode = 1;
+        try {
+            await printBootstrapDisplay();
+        }
+        catch (err) {
+            if (!isRecoverableBootstrapStorageError(err))
+                throw err;
+            // Startup is a read-only display. If paid cloud memory is temporarily
+            // unavailable, retry this one read against the local last-good database
+            // instead of blocking the host's entire first turn. Do not persist the
+            // override: normal saves still use the configured subscription backend.
+            await closeStorage().catch(() => { });
+            process.env.PRISM_STORAGE = 'local';
+            console.error('Prism cloud startup unavailable; using local last-good context for this startup.');
+            await printBootstrapDisplay();
+        }
     }
     catch (err) {
         console.error(`Bootstrap failed: ${err instanceof Error ? err.message : String(err)}`);
         process.exitCode = 1;
     }
     finally {
+        if (previousStorage === undefined) {
+            delete process.env.PRISM_STORAGE;
+        }
+        else {
+            process.env.PRISM_STORAGE = previousStorage;
+        }
         await closeStorage().catch(() => { });
     }
 }
@@ -82,6 +111,11 @@ program
     .command('bootstrap')
     .description('Print the canonical dashboard-configured first-turn Prism greeting')
     .action(runBootstrapCommand);
+// Parsed by the direct dispatch at the bottom so all Python CLI flags pass
+// through unchanged. Registering it here keeps the command visible in help.
+program
+    .command('browser')
+    .description('Run the packaged local Prism Browser automation CLI');
 // ─── prism connect ────────────────────────────────────────────
 // Registers this installed package with supported MCP hosts. The
 // merge is additive: an existing `prism` or `prism-mcp` entry is
@@ -834,4 +868,17 @@ program
     if (fail > 0)
         process.exit(1);
 });
-await program.parseAsync(process.argv);
+if (process.argv[2] === 'browser') {
+    try {
+        const exitCode = await runBrowserCli(process.argv.slice(3));
+        if (exitCode !== 0)
+            process.exitCode = exitCode;
+    }
+    catch (err) {
+        console.error(`Prism Browser failed: ${err instanceof Error ? err.message : String(err)}`);
+        process.exitCode = 1;
+    }
+}
+else {
+    await program.parseAsync(process.argv);
+}

package/dist/storage/synalux.js

@@ -47,12 +47,16 @@ function resolveKnowledgeScope(callerScope) {
 }
 /** Refresh JWT this many ms before expiry to avoid edge-case 401s. */
 const JWT_REFRESH_LEEWAY_MS = 60_000;
+function buildContextLoadKey(project, level, userId, role) {
+    return JSON.stringify({ project, level, userId, role: role ?? "" });
+}
 export class SynaluxStorage extends SupabaseStorage {
     baseUrl;
     refreshToken;
     cachedJwt = null;
     cachedJwtExpiresAt = 0;
     inflightExchange = null;
+    inflightContextLoads = new Map();
     constructor() {
         super();
         const url = process.env.PRISM_SYNALUX_BASE_URL || PRISM_SYNALUX_BASE_URL;
@@ -203,31 +207,46 @@ export class SynaluxStorage extends SupabaseStorage {
     }
     // ─── Context ─────────────────────────────────────────────────
     async loadContext(project, level, userId, role) {
-        const result = await this.portalPost("/api/v1/prism/memory", {
-            action: "load_context",
-            project,
-            level,
-            user_id: userId,
-            role,
-        });
-        // Current portals return the canonical flat `context`. Older deployed
-        // portals returned `{ handoff, recent_sessions }`; normalize that envelope
-        // here so the formatter can still see last_summary, TODOs, version, and
-        // session history during a rolling portal/client upgrade.
-        if (result.context === null)
-            return null;
-        if (result.context && typeof result.context === "object" && !Array.isArray(result.context)) {
-            return result.context;
+        const key = buildContextLoadKey(project, level, userId, role);
+        const existing = this.inflightContextLoads.get(key);
+        if (existing)
+            return existing;
+        const request = (async () => {
+            const result = await this.portalPost("/api/v1/prism/memory", {
+                action: "load_context",
+                project,
+                level,
+                user_id: userId,
+                role,
+            });
+            // Current portals return the canonical flat `context`. Older deployed
+            // portals returned `{ handoff, recent_sessions }`; normalize that envelope
+            // here so the formatter can still see last_summary, TODOs, version, and
+            // session history during a rolling portal/client upgrade.
+            if (result.context === null)
+                return null;
+            if (result.context && typeof result.context === "object" && !Array.isArray(result.context)) {
+                return result.context;
+            }
+            if (result.handoff === null)
+                return null;
+            if (result.handoff && typeof result.handoff === "object" && !Array.isArray(result.handoff)) {
+                return {
+                    ...result.handoff,
+                    recent_sessions: Array.isArray(result.recent_sessions) ? result.recent_sessions : [],
+                };
+            }
+            return result;
+        })();
+        this.inflightContextLoads.set(key, request);
+        try {
+            return await request;
         }
-        if (result.handoff === null)
-            return null;
-        if (result.handoff && typeof result.handoff === "object" && !Array.isArray(result.handoff)) {
-            return {
-                ...result.handoff,
-                recent_sessions: Array.isArray(result.recent_sessions) ? result.recent_sessions : [],
-            };
+        finally {
+            if (this.inflightContextLoads.get(key) === request) {
+                this.inflightContextLoads.delete(key);
+            }
         }
-        return result;
     }
     // ─── Forget memory (GDPR surgical deletion) ──────────────────
     // Phase 3 Tier A: route both soft and hard delete through the

package/dist/tools/ledgerHandlers.js

@@ -31,6 +31,7 @@ import { getCurrentGitState, getGitDrift } from "../utils/git.js";
 import { getSetting, getAllSettings, refreshConfigStorageCache } from "../storage/configStorage.js";
 import { mergeHandoff, dbToHandoffSchema, sanitizeForMerge } from "../utils/crdtMerge.js";
 import { resolveProject } from "../utils/projectResolver.js";
+import { isRecoverableStartupStorageError, LOCAL_STARTUP_FALLBACK_NOTICE, } from "../utils/startupRecovery.js";
 import { PRISM_USER_ID, PRISM_AUTO_CAPTURE, PRISM_CAPTURE_PORTS } from "../config.js";
 import { captureLocalEnvironment } from "../utils/autoCapture.js";
 import { fireCaptionAsync } from "../utils/imageCaptioner.js";
@@ -264,6 +265,7 @@ function compactWithOmissionCount(value, maxChars) {
  */
 import { computeEffectiveImportance, recordMemoryAccess } from "../utils/cognitiveMemory.js";
 import { formatInferenceMetrics, resetInferenceMetrics, getInferenceSnapshot } from "../utils/inferenceMetrics.js";
+import { filterPrismMemoryContext, isGreetingOnlyMemoryEntry } from "../utils/memoryQuality.js";
 export async function sessionSaveLedgerHandler(args) {
     if (!isSessionSaveLedgerArgs(args)) {
         throw new Error("Invalid arguments for session_save_ledger");
@@ -289,6 +291,16 @@ export async function sessionSaveLedgerHandler(args) {
     const files_changed = args.files_changed ? sanitizeArray(args.files_changed) : undefined;
     const decisions = args.decisions ? sanitizeArray(args.decisions) : undefined;
     const role = args.role;
+    if (isGreetingOnlyMemoryEntry({ summary, todos, files_changed, decisions })) {
+        return {
+            content: [{
+                    type: "text",
+                    text: (_saveLedgerGateWarning ? `⚠️ ${_saveLedgerGateWarning}\n\n` : "") +
+                        "ℹ️ Greeting-only turn skipped; no ledger entry was written.",
+                }],
+            isError: false,
+        };
+    }
     const storage = await getStorage();
     // ─── Project mismatch validation (v13 — hard-rejects on mismatch) ───
     // Replaces the old soft-warning behavior that allowed cross-project
@@ -817,7 +829,7 @@ export async function sessionLoadContextHandler(args, options = {}) {
     const protectedFallbackNames = new Set(protectedFallbackEntries.map((entry) => entry.name));
     const manifestSnapshot = await resolveNativeSkillManifestSnapshot(skillSyncResult);
     const entitledSkillNames = new Set(manifestSnapshot.names);
-    const storage = await getStorage();
+    const storage = options.storageOverride ?? await getStorage();
     const effectiveRole = role || await getSetting("default_role", "") || undefined;
     const loadEntitledRoleSkill = async () => {
         if (!effectiveRole)
@@ -830,11 +842,11 @@ export async function sessionLoadContextHandler(args, options = {}) {
         }
         return await getSetting(`user_skill:${effectiveRole}`, "");
     };
-    const data = await storage.loadContext(project, level, PRISM_USER_ID, effectiveRole); // v3.0: role with dashboard fallback
+    const loadedData = await storage.loadContext(project, level, PRISM_USER_ID, effectiveRole); // v3.0: role with dashboard fallback
     // F4 fix: inject protected skills even for fresh projects.
     // Previously this returned before skill injection, leaving new projects with zero
     // behavioral guardrails for the entire session. Now protected skills always load.
-    if (!data) {
+    if (!loadedData) {
         let freshSkillBlock = "";
         const freshLoadedSkills = new Set();
         if (includeSkillContent) {
@@ -896,6 +908,7 @@ export async function sessionLoadContextHandler(args, options = {}) {
             isError: false,
         };
     }
+    const data = filterPrismMemoryContext(loadedData);
     const version = data?.version;
     const versionNote = version
         ? `\n\n🔑 Session version: ${version}. Pass expected_version: ${version} when saving handoff.`
@@ -1416,11 +1429,13 @@ export async function sessionLoadContextHandler(args, options = {}) {
         isError: false,
     };
 }
-/**
- * Hook-free first-turn entrypoint used by the native prism-startup skill.
- * Configuration, rather than the host model, owns project and depth selection.
- */
-export async function sessionBootstrapHandler(args = {}) {
+async function createLocalStartupStorage() {
+    const { SqliteStorage } = await import("../storage/sqlite.js");
+    const storage = new SqliteStorage();
+    await storage.initialize(true);
+    return storage;
+}
+export async function sessionBootstrapHandler(args = {}, options = {}) {
     if (typeof args !== "object" || args === null || Array.isArray(args)) {
         throw new Error("Invalid arguments for session_bootstrap");
     }
@@ -1487,39 +1502,76 @@ export async function sessionBootstrapHandler(args = {}) {
             : "";
         const omissionLength = omittedProjectsText ? omittedProjectsText.length + 2 : 0;
         const separatorsLength = Math.max(0, renderedProjectCount - 1) * 2;
-        perProjectMaxChars = Math.floor((startupMaxChars - startupHeader.length - systemReadyBlock.length - 4 - omissionLength - separatorsLength) /
+        perProjectMaxChars = Math.floor((startupMaxChars - startupHeader.length - systemReadyBlock.length - LOCAL_STARTUP_FALLBACK_NOTICE.length -
+            6 - omissionLength - separatorsLength) /
             renderedProjectCount);
         if (perProjectMaxChars >= 512 || renderedProjectCount === 1)
             break;
         renderedProjectCount -= 1;
     }
-    const loaded = [];
-    let hadError = false;
-    for (const project of projects.slice(0, renderedProjectCount)) {
-        const result = await sessionLoadContextHandler({
-            project,
-            level: depth,
-            role: defaultRole || undefined,
-            conversation_id: conversationId,
-            prompt: input.prompt,
-        }, { includeSkillContent: false, nativeMaxChars: perProjectMaxChars, skillSyncResult });
-        const text = result.content?.map((part) => part?.text).filter(Boolean).join("\n") ||
-            `No session context found for project "${project}".`;
-        loaded.push(text);
-        hadError ||= result.isError === true;
+    const renderedProjects = projects.slice(0, renderedProjectCount);
+    const loadProjects = async (storageOverride) => {
+        const loaded = [];
+        let hadError = false;
+        for (const project of renderedProjects) {
+            const result = await sessionLoadContextHandler({
+                project,
+                level: depth,
+                role: defaultRole || undefined,
+                conversation_id: conversationId,
+                prompt: input.prompt,
+            }, {
+                includeSkillContent: false,
+                nativeMaxChars: perProjectMaxChars,
+                skillSyncResult,
+                storageOverride,
+            });
+            const text = result.content?.map((part) => part?.text).filter(Boolean).join("\n") ||
+                `No session context found for project "${project}".`;
+            loaded.push(text);
+            hadError ||= result.isError === true;
+        }
+        return { loaded, hadError };
+    };
+    let localStorage = null;
+    let usedLocalFallback = false;
+    let startupContext;
+    try {
+        try {
+            startupContext = await loadProjects();
+        }
+        catch (error) {
+            if (!isRecoverableStartupStorageError(error))
+                throw error;
+            localStorage = await (options.localStorageFactory ?? createLocalStartupStorage)();
+            usedLocalFallback = true;
+            startupContext = await loadProjects(localStorage);
+        }
+    }
+    finally {
+        if (localStorage) {
+            try {
+                await localStorage.close();
+            }
+            catch (error) {
+                debugLog(`[session_bootstrap] Local fallback close failed: ${error instanceof Error ? error.message : String(error)}`);
+            }
+        }
     }
+    const fallbackNotice = usedLocalFallback ? `${LOCAL_STARTUP_FALLBACK_NOTICE}\n\n` : "";
     return {
         content: [{
                 type: "text",
-                text: `${startupHeader}\n\n${loaded.join("\n\n")}` +
+                text: `${startupHeader}\n\n${fallbackNotice}${startupContext.loaded.join("\n\n")}` +
                     (omittedProjectsText ? `\n\n${omittedProjectsText}` : "") +
                     `\n\n${systemReadyBlock}`,
             }],
-        isError: hadError,
+        isError: startupContext.hadError,
         structuredContent: {
             conversation_id: conversationId,
-            projects: projects.slice(0, renderedProjectCount),
+            projects: renderedProjects,
             depth,
+            context_source: usedLocalFallback ? "local-last-good" : activeStorageBackend,
         },
     };
 }