prism-mcp-server 20.9.1 → 20.9.3

package/dist/utils/skillBudget.js

@@ -80,14 +80,30 @@ export function assembleSkillBlock(entries, budgetChars) {
     const ordered = [...entries].sort(fillOrder);
     const unbudgeted = !Number.isFinite(budgetChars) || budgetChars <= 0;
     let block = "";
+    let unprotectedChars = 0;
     const inlined = [];
     const overflow = [];
     for (const e of ordered) {
         const piece = render(e);
-        // Protected always inline; others only while they fit.
-        if (unbudgeted || e.protected || block.length + piece.length <= budgetChars) {
+        // Protected always inline and NEVER debit the budget: the tranche is
+        // documented as ADDITIVE on top of the floor. The previous check
+        // compared block.length — which the floor had already filled — so with
+        // a ~46KB floor against 2-16KB tranches, NO unprotected skill ever
+        // inlined at any normal budget. Rank was irrelevant; the budget was
+        // pre-spent. Found 2026-08-11 tracing why a prompt-matched
+        // verified-shipping still sat in overflow while an agent shipped
+        // unverified UI claims; the 2026-08-03 note ("no unprotected universal
+        // was ever inlined") had recorded this symptom and it was treated by
+        // protecting one skill instead of fixing the accounting.
+        if (unbudgeted || e.protected) {
             block += piece;
             inlined.push(e.name);
+            continue;
+        }
+        if (unprotectedChars + piece.length <= budgetChars) {
+            block += piece;
+            unprotectedChars += piece.length;
+            inlined.push(e.name);
         }
         else {
             overflow.push(e.name);
@@ -97,7 +113,13 @@ export function assembleSkillBlock(entries, budgetChars) {
         block +=
             `\n\n[📦 SKILLS NOT INLINED — max_tokens budget reached]\n` +
                 `${overflow.join(", ")}\n` +
-                `To inline them, re-call session_load_context with a higher max_tokens.`;
+                `These are RULES YOU ARE BOUND BY, not optional reading — only their text ` +
+                `was withheld for budget. Before acting on work a listed skill governs ` +
+                `(e.g. verified-shipping before any completion claim, push, or PR), load ` +
+                `its body first: invoke it via the host's Skill tool, read it from the ` +
+                `skills directory, or re-call session_load_context with a higher ` +
+                `max_tokens. Claiming done without consulting the governing skill is the ` +
+                `exact failure this list exists to prevent.`;
     }
     return { block, inlined, overflow };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "20.9.1",
+  "version": "20.9.3",
   "mcpName": "io.github.dcostenco/prism-coder",
   "description": "Persistent session memory for AI coding agents that never leaves your machine \u2014 including the on-device model that reasons over it. Restores your prior decisions, open TODOs, and changed files across sessions; adds associative recall of related past work, semantic drift detection, and local inference. Local-first by default. Works with Claude Code, Cursor, and Codex.",
   "module": "index.ts",