prism-mcp-server 20.21.19 → 20.21.21

package/dist/server.js

@@ -764,14 +764,8 @@ export function createServer() {
                         if (!SESSION_MEMORY_ENABLED)
                             throw new Error("Session memory not configured. Set SUPABASE_URL and SUPABASE_KEY.");
                         result = await sessionSaveLedgerHandler(args);
-                        // GATE 5: Reset drift timer — save_ledger counts as a drift checkpoint
-                        {
-                            const cid = args?.conversation_id;
-                            if (cid) {
-                                const { noteDriftCheck } = await import("./session/sessionContext.js");
-                                noteDriftCheck(cid);
-                            }
-                        }
+                        // GATE 5: the handler resets the drift timer itself, and only when
+                        // it wrote an entry (not on a refusal or the greeting-only skip).
                         // Savings sync (paid, opt-in, fail-soft): session end is the natural
                         // push point. pushSavings gates itself — disabled/free/no-jwt all
                         // return without a request, and nothing here awaits it.

package/dist/storage/portalContracts.js

@@ -17,6 +17,29 @@
  *   3. Add a schema-contract test in synalux-portal-contract.test.ts.
  */
 import { z } from "zod";
+import { ANALYTICS_DATE_PATTERN } from "../dashboard/readMessages.js";
+const AnalyticsCountSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const UTC_DAY_MS = 24 * 60 * 60 * 1000;
+export const ProjectAnalyticsSchema = z.object({
+    totalEntries: AnalyticsCountSchema,
+    totalRollups: AnalyticsCountSchema,
+    rollupSavings: AnalyticsCountSchema,
+    avgSummaryLength: z.number().nonnegative().finite(),
+    sessionsByDay: z.array(z.object({
+        date: z.string().regex(ANALYTICS_DATE_PATTERN), count: AnalyticsCountSchema,
+    })).length(14),
+}).refine(value => value.totalRollups <= value.totalEntries
+    && value.sessionsByDay.reduce((sum, day) => sum + day.count, 0) <= value.totalEntries - value.totalRollups
+    && value.sessionsByDay.every((day, index, days) => {
+        const time = Date.parse(day.date);
+        return Number.isFinite(time) && new Date(time).toISOString().slice(0, 10) === day.date
+            && (index === 0 || time - Date.parse(days[index - 1].date) === UTC_DAY_MS);
+    }));
+export const ProjectAnalyticsResponseSchema = z.object({
+    status: z.literal('success'),
+    project: z.string().min(1).max(100),
+    analytics: ProjectAnalyticsSchema,
+});
 // ─── knowledge_search ────────────────────────────────────────────
 export const KnowledgeSearchRequestSchema = z.object({
     action: z.literal("knowledge_search"),

package/dist/storage/sqlite.js

@@ -1824,6 +1824,7 @@ export class SqliteStorage {
         FROM session_ledger
         WHERE user_id = ?
           AND archived_at IS NULL
+          AND deleted_at IS NULL
           AND embedding IS NULL
       `,
             args: [userId], // bind user_id to the ? placeholder
@@ -1883,11 +1884,13 @@ export class SqliteStorage {
         FROM session_ledger r
         LEFT JOIN session_ledger a
           ON a.archived_at IS NOT NULL
+          AND a.deleted_at IS NULL
           AND a.project = r.project
           AND a.user_id = r.user_id
         WHERE r.user_id = ?
           AND r.is_rollup = 1
           AND r.archived_at IS NULL
+          AND r.deleted_at IS NULL
         GROUP BY r.id
         HAVING COUNT(a.id) = 0
       `,
@@ -1901,12 +1904,12 @@ export class SqliteStorage {
             sql: `
         SELECT
           (SELECT COUNT(*) FROM session_ledger
-            WHERE user_id = ? AND archived_at IS NULL) as active,
+            WHERE user_id = ? AND archived_at IS NULL AND deleted_at IS NULL) as active,
           (SELECT COUNT(*) FROM session_handoffs
             WHERE user_id = ?) as handoffs,
           (SELECT COUNT(*) FROM session_ledger
             WHERE user_id = ? AND is_rollup = 1
-            AND archived_at IS NULL) as rollups
+            AND archived_at IS NULL AND deleted_at IS NULL) as rollups
       `,
             args: [userId, userId, userId], // bind user_id 3x (one per subquery)
         });
@@ -2177,7 +2180,7 @@ export class SqliteStorage {
               COUNT(*) AS total_entries,
               SUM(CASE WHEN is_rollup = 1 THEN 1 ELSE 0 END) AS total_rollups,
               -- rollup_count tracks how many raw entries each rollup replaced,
-              -- so we can show "X entries saved by compaction" in the dashboard.
+              -- so the dashboard reports how many originals were consolidated.
               SUM(CASE WHEN is_rollup = 1 THEN COALESCE(rollup_count, 0) ELSE 0 END) AS rollup_savings,
               COALESCE(AVG(LENGTH(summary)), 0) AS avg_summary_length
             FROM session_ledger
@@ -2213,7 +2216,7 @@ export class SqliteStorage {
         const sessionsByDay = [];
         for (let i = 13; i >= 0; i--) {
             const date = new Date();
-            date.setDate(date.getDate() - i);
+            date.setUTCDate(date.getUTCDate() - i);
             const dateStr = date.toISOString().slice(0, 10);
             sessionsByDay.push({ date: dateStr, count: sparkMap.get(dateStr) || 0 });
         }

package/dist/storage/supabase.js

@@ -15,6 +15,8 @@
 import { supabasePost, supabaseGet, supabaseRpc, supabasePatch, supabaseDelete, } from "../utils/supabaseApi.js";
 import { gzipSync, gunzipSync } from "node:zlib";
 import { debugLog } from "../utils/logger.js";
+import { ProjectAnalyticsSchema } from './portalContracts.js';
+import { DASHBOARD_READ_MESSAGES } from "../dashboard/readMessages.js";
 import { PRISM_USER_ID } from "../config.js";
 import { getSetting as cfgGet, setSetting as cfgSet, getAllSettings as cfgGetAll } from "./configStorage.js";
 import { runAutoMigrations } from "./supabaseMigrations.js";
@@ -154,11 +156,11 @@ export class SupabaseStorage {
             };
         }
         catch (e) {
-            debugLog("[SupabaseStorage] saveHandoff RPC failed: " + (e instanceof Error ? e.message : String(e)));
-            return {
-                status: "updated",
-                version: handoff.version ?? 1,
-            };
+            // The write failed. Reporting "updated" here told the agent its handoff
+            // was saved when nothing was; the caller turns this into an error reply.
+            const message = e instanceof Error ? e.message : String(e);
+            debugLog("[SupabaseStorage] saveHandoff RPC failed: " + message);
+            throw new Error(`Handoff for project "${handoff.project}" was not saved: ${message}`);
         }
     }
     async patchHandoff(project, userId, data) {
@@ -441,12 +443,14 @@ export class SupabaseStorage {
             user_id: `eq.${userId}`,
             archived_at: "is.null",
             embedding: "is.null",
+            deleted_at: "is.null",
         });
         const missingEmbeddings = Array.isArray(missingData) ? missingData.length : 0;
         const summData = await supabaseGet("session_ledger", {
             select: "id,project,summary",
             user_id: `eq.${userId}`,
             archived_at: "is.null",
+            deleted_at: "is.null",
         });
         const activeLedgerSummaries = (Array.isArray(summData) ? summData : []).map((r) => ({
             id: r.id,
@@ -463,6 +467,7 @@ export class SupabaseStorage {
             select: "project",
             user_id: `eq.${userId}`,
             archived_at: "is.null",
+            deleted_at: "is.null",
         });
         const ledgerProjects = new Set((Array.isArray(ledgerData) ? ledgerData : [])
             .map((r) => r.project));
@@ -474,11 +479,13 @@ export class SupabaseStorage {
             user_id: `eq.${userId}`,
             is_rollup: "eq.true",
             archived_at: "is.null",
+            deleted_at: "is.null",
         });
         const archivedData = await supabaseGet("session_ledger", {
             select: "project",
             user_id: `eq.${userId}`,
             "archived_at": "not.is.null",
+            deleted_at: "is.null",
         });
         const archivedProjects = new Set((Array.isArray(archivedData) ? archivedData : [])
             .map((r) => r.project));
@@ -633,32 +640,33 @@ export class SupabaseStorage {
     }
     // ─── v3.1: Memory Analytics ──────────────────────────────────
     async getAnalytics(project, userId) {
-        // Attempt to call a Supabase RPC. Falls back to zeroed struct if the RPC
-        // doesn't exist yet (avoids breaking users who haven't run the migration).
-        try {
-            const result = await supabaseRpc("get_project_analytics", {
-                p_project: project,
-                p_user_id: userId,
-            });
-            const data = Array.isArray(result) ? result[0] : result;
-            if (data) {
-                return {
-                    totalEntries: data.total_entries || 0,
-                    totalRollups: data.total_rollups || 0,
-                    rollupSavings: data.rollup_savings || 0,
-                    avgSummaryLength: data.avg_summary_length || 0,
-                    sessionsByDay: data.sessions_by_day || [],
-                };
-            }
-        }
-        catch {
-            debugLog("[SupabaseStorage] getAnalytics RPC unavailable — returning zeroed struct");
+        // An unavailable read must not look like a genuinely empty project.
+        const result = await supabaseRpc("get_project_analytics", {
+            p_project: project,
+            p_user_id: userId,
+        });
+        const data = Array.isArray(result) ? result[0] : result;
+        if (!data) {
+            throw new Error(DASHBOARD_READ_MESSAGES.analyticsUnavailable);
         }
-        // Graceful degradation: return zeroed struct so dashboard doesn't crash
-        return {
-            totalEntries: 0, totalRollups: 0, rollupSavings: 0,
-            avgSummaryLength: 0, sessionsByDay: [],
+        const analytics = {
+            totalEntries: data.total_entries, totalRollups: data.total_rollups,
+            rollupSavings: data.rollup_savings, avgSummaryLength: data.avg_summary_length,
+            sessionsByDay: data.sessions_by_day,
         };
+        if (analytics.totalEntries === 0 && analytics.totalRollups === 0 && analytics.rollupSavings === 0
+            && analytics.avgSummaryLength === 0 && Array.isArray(analytics.sessionsByDay) && analytics.sessionsByDay.length === 0) {
+            const now = new Date();
+            analytics.sessionsByDay = Array.from({ length: 14 }, (_, index) => {
+                const date = new Date(now);
+                date.setUTCDate(now.getUTCDate() - (13 - index));
+                return { date: date.toISOString().slice(0, 10), count: 0 };
+            });
+        }
+        const parsed = ProjectAnalyticsSchema.safeParse(analytics);
+        if (!parsed.success)
+            throw new Error(DASHBOARD_READ_MESSAGES.analyticsUnavailable);
+        return parsed.data;
     }
     // ─── v3.1: TTL / Automated Data Retention ────────────────────
     async expireByTTL(project, ttlDays, userId) {

package/dist/storage/synalux.js

@@ -30,6 +30,7 @@
  *     - patchLedger       → POST /api/v1/prism/memory  action=save_embedding
  *     - getEntriesMissingEmbeddings → POST /api/v1/prism/memory  action=list_missing_embeddings
  *     - listProjects      → POST /api/v1/prism/memory  action=list_projects
+ *     - getAnalytics      → GET /api/v1/prism/analytics  view=project
  *     - exportLedger      → POST /api/v1/prism/memory  action=export_memory (paginated)
  *
  *   Methods still falling through to SupabaseStorage (Phase 3 Tier B+):
@@ -51,7 +52,7 @@ import { SupabaseStorage } from "./supabase.js";
 import { debugLog } from "../utils/logger.js";
 import { PRISM_SYNALUX_BASE_URL, PRISM_SYNALUX_API_KEY } from "../config.js";
 import { isSynaluxSignedOut } from "../utils/synaluxCredentialState.js";
-import { KnowledgeSearchRequestSchema, KnowledgeSearchResponseSchema } from "./portalContracts.js";
+import { KnowledgeSearchRequestSchema, KnowledgeSearchResponseSchema, ProjectAnalyticsResponseSchema } from "./portalContracts.js";
 function resolveKnowledgeScope(callerScope) {
     if (callerScope === "user" || callerScope === "workspace") {
         return callerScope;
@@ -758,6 +759,14 @@ export class SynaluxStorage extends SupabaseStorage {
         }));
     }
     // ─── Health Check ─────────────────────────────────────────────
+    async getAnalytics(project, _userId) {
+        const query = new URLSearchParams({ view: 'project', project });
+        const result = ProjectAnalyticsResponseSchema.safeParse(await this.portalGet('/api/v1/prism/analytics?' + query));
+        if (!result.success || result.data.project !== project) {
+            throw new Error('Project analytics unavailable');
+        }
+        return result.data.analytics;
+    }
     // Phase 3 Tier B: route health_check through portal. The portal
     // returns summary counts only (no per-entry duplicate scan), so
     // activeLedgerSummaries is returned empty — the hygiene handler
@@ -769,6 +778,10 @@ export class SynaluxStorage extends SupabaseStorage {
                 project: "prism-mcp",
             });
             const inventory = result.inventory;
+            if (!inventory || !['ledger_entries', 'active_projects', 'ledger_missing_embeddings'].every(field => Number.isSafeInteger(inventory[field]) && inventory[field] >= 0)
+                || inventory.ledger_missing_embeddings > inventory.ledger_entries) {
+                throw new Error('Health inventory unavailable');
+            }
             const totalActiveEntries = typeof inventory?.ledger_entries === "number" ? inventory.ledger_entries : 0;
             const totalHandoffs = typeof inventory?.active_projects === "number" ? inventory.active_projects : 0;
             // Hardcoding 0 here certified a 100%-missing-embeddings outage as

package/dist/tools/hygieneHandlers.js

@@ -16,6 +16,10 @@
  * ═══════════════════════════════════════════════════════════════════
  */
 import { debugLog } from "../utils/logger.js";
+const BACKFILL_SCOPE_MESSAGES = {
+    empty: '✅ No eligible entries with missing embeddings found in the requested scope.',
+    complete: 'All scanned entries now have embeddings for semantic search.',
+};
 import { activeStorageBackend, getStorage } from "../storage/index.js";
 import { getEmbeddingProvider } from "../utils/llm/factory.js";
 import { PRISM_USER_ID } from "../config.js";
@@ -78,6 +82,7 @@ export async function backfillEmbeddingsHandler(args) {
         const params = {
             "embedding": "is.null",
             "archived_at": "is.null",
+            "deleted_at": "is.null",
             user_id: `eq.${PRISM_USER_ID}`,
             order: "id.asc",
             limit: String(safeLimit),
@@ -95,7 +100,7 @@ export async function backfillEmbeddingsHandler(args) {
         return {
             content: [{
                     type: "text",
-                    text: "✅ No entries with missing embeddings found. All ledger entries have embeddings.",
+                    text: BACKFILL_SCOPE_MESSAGES.empty,
                 }],
             isError: false,
         };
@@ -165,7 +170,7 @@ export async function backfillEmbeddingsHandler(args) {
                     `• Total scanned: ${entries.length}\n\n` +
                     (failed > 0
                         ? `⚠️ ${failed} entries could not be repaired. Check server logs for details.`
-                        : `All entries now have embeddings for semantic search.`),
+                        : BACKFILL_SCOPE_MESSAGES.complete),
             }],
         isError: false,
         _stats: { repaired, failed, last_id: entries[entries.length - 1]?.id },

package/dist/tools/ledgerHandlers.js

@@ -810,6 +810,22 @@ export async function sessionSaveLedgerHandler(args) {
         keywords,
         role: effectiveRole, // v3.0: Hivemind role scoping (dashboard fallback)
     });
+    // SQLite skips an identical (project, conversation_id, summary) saved in the
+    // last 5 minutes and returns { id, deduplicated: true } without writing.
+    // Nothing new was saved, so this is not a drift checkpoint and must not read
+    // as one: no timer reset, no "saved" line, no handoff nudge, and no second
+    // embedding or auto-link pass over the existing row.
+    if (result?.deduplicated === true) {
+        return {
+            content: [{
+                    type: "text",
+                    text: (_saveLedgerGateWarning ? `⚠️ ${_saveLedgerGateWarning}\n\n` : "") +
+                        `ℹ️ An identical ledger entry for project "${project}" was already saved in the last 5 minutes; nothing new was written.` +
+                        resolverNote,
+                }],
+            isError: false,
+        };
+    }
     // ─── Fire-and-forget embedding generation ───
     let embeddingQueued = false;
     if (result) {
@@ -908,6 +924,14 @@ export async function sessionSaveLedgerHandler(args) {
         debugLog(`[session_save_ledger] Background decay failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
     });
     const metricsBlock = formatInferenceMetrics();
+    // GATE 5: a ledger entry that was WRITTEN is a drift checkpoint. Reset the
+    // timer here, on the write path only. It used to be reset by the server
+    // after every returned result, so a context_not_loaded refusal or the
+    // greeting-only skip silenced the hourly reminder without saving anything.
+    {
+        const { noteDriftCheck } = await import("../session/sessionContext.js");
+        noteDriftCheck(conversation_id);
+    }
     return {
         content: [{
                 type: "text",
@@ -920,6 +944,9 @@ export async function sessionSaveLedgerHandler(args) {
                     (embeddingQueued
                         ? `📊 Embedding generation queued for semantic search.`
                         : `📊 Primary history saved; optional semantic indexing was not queued.`) +
+                    // The ledger logs what happened; the next session starts from the
+                    // handoff. Only a written entry asks, never the skip or a refusal.
+                    `\n💾 If this checkpoint ends a unit of work, also save the handoff with session_save_handoff.` +
                     metricsBlock +
                     resolverNote,
             }],

package/docs/prism-browser.md

@@ -99,11 +99,13 @@ size alone. Emulate the device instead:
   `viewport-fit=cover`; without it an iPhone 17 reports 0. Chromium applies
   them either way, so check that your page sets it.
 
-Flags given explicitly override the preset, so a phone turned sideways is
-`--device iphone-17 --viewport 874x402 --safe-area 0,62,21,62`. Landscape
-insets are not part of the presets. The engine stays Chromium, and the user
-agent stays the desktop one, so pages that branch on the user-agent string
-still take their desktop path.
+Flags given explicitly override the preset, so
+`--device iphone-17 --viewport 874x402 --safe-area T,R,B,L` is the same phone
+turned sideways. Landscape insets were not measured and are not part of the
+presets: put the values your device reports in place of `T,R,B,L`, because
+without `--safe-area` the portrait insets still apply. The engine stays
+Chromium, and the user agent stays the desktop one, so pages that branch on the
+user-agent string still take their desktop path.
 
 ```bash
 printf '%s\n' \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "20.21.19",
+  "version": "20.21.21",
   "mcpName": "io.github.dcostenco/prism-coder",
   "description": "Persistent session memory for AI coding agents that never leaves your machine — including the on-device model that reasons over it. Restores your prior decisions, open TODOs, and changed files across sessions; adds associative recall of related past work, semantic drift detection, and local inference. Local-first by default. Works with Claude Code, Cursor, and Codex.",
   "module": "index.ts",
@@ -83,7 +83,7 @@
     "hono": "^4.13.5",
     "ip-address": "^10.2.0",
     "protobufjs": "^7.6.5",
-    "sharp": "^0.35.4",
+    "sharp": "^0.35.5",
     "tar": "^7.5.19",
     "nanoid": "^3.3.17"
   },