prism-mcp-server 6.5.0 → 6.5.2

package/README.md

@@ -6,7 +6,7 @@
 [![Smithery](https://img.shields.io/badge/Smithery-listed-6B4FBB)](https://smithery.ai)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![TypeScript](https://img.shields.io/badge/TypeScript-5.0+-3178C6?logo=typescript&logoColor=white)](https://www.typescriptlang.org/)
-[![Node.js](https://img.shields.io/badge/Node.js-18+-339933?logo=node.js&logoColor=white)](https://nodejs.org/)
+[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](CONTRIBUTING.md)
 
 **Your AI agent forgets everything between sessions. Prism fixes that.**
 
@@ -33,7 +33,7 @@ Works with **Claude Desktop · Claude Code · Cursor · Windsurf · Cline · Gem
 - [Architecture](#architecture)
 - [Scientific Foundation](#-scientific-foundation)
 - [Product Roadmap](#-product-roadmap)
-- [Limitations](#limitations)
+- [Troubleshooting FAQ](#-troubleshooting-faq)
 
 ---
 
@@ -395,6 +395,10 @@ Soft/hard delete (Art. 17), full export in JSON, Markdown, or Obsidian vault `.z
 
 ## 🆕 What's New
 
+### v6.5.1 — Dashboard Project-Load Hotfix ✅
+- 🩹 **Project Selector Recovery** — Fixed a startup path where the dashboard selector could stay stuck on "Loading projects..." when Supabase env vars were unresolved placeholders.
+- 🔄 **Safe Backend Fallback** — If Supabase is requested but env is invalid/unresolved, Prism now auto-falls back to local SQLite so `/api/projects` and dashboard boot remain operational.
+
 ### v6.5 — HDC Cognitive Routing ✅
 > **Current stable release.** The Mind Palace gains a brain-inspired routing engine.
 
@@ -743,9 +747,21 @@ Full Superposed Memory (SDM) + Hyperdimensional Computing (HDC/VSA) becomes the
 - **v7.x: Affect-Tagged Memory** — Recall prioritization improves by weighting memories with affective/contextual valence, making surfaced context more behaviorally useful.
 - **v8+: Zero-Search Retrieval** — Direct vector-addressed recall (“just ask the vector”) reduces retrieval indirection and moves Prism toward truly native associative memory.
 
----
 
-## Limitations
+## ❓ Troubleshooting FAQ
+
+**Q: Why is the dashboard project selector stuck on "Loading projects..."?**
+A: This usually means Supabase env values are unresolved placeholders (for example `${SUPABASE_URL}`) or invalid. As of v6.5.1 Prism auto-falls back to local SQLite, but you should still fix env values for cloud mode.
+
+**Q: Why is semantic search quality weak or inconsistent?**
+A: Check embedding provider configuration and key availability. Missing embedding credentials reduce semantic recall quality and can shift behavior toward keyword-heavy matches.
+
+**Q: How do I delete a bad memory entry?**
+A: Use `session_forget_memory` for targeted soft/hard deletion. For manual cleanup and merge workflows, use the dashboard graph editor.
+
+**Q: How do I verify the install quickly?**
+A: Run `npm run build && npm test`, then open the Mind Palace dashboard (`localhost:3000`) and confirm projects load plus Graph Health renders.
+
 
 - **LLM-dependent features require an API key.** Semantic search, Morning Briefings, auto-compaction, and VLM captioning need a `GOOGLE_API_KEY` (Gemini) or equivalent provider key. Without one, Prism falls back to keyword-only search (FTS5).
 - **Auto-load is model- and client-dependent.** Session auto-loading relies on both the LLM following system prompt instructions *and* the MCP client completing tool registration before the model's first turn. Prism provides platform-specific [Setup Guides](#-setup-guides) and a server-side fallback (v5.2.1) that auto-pushes context after 10 seconds.

package/dist/config.js

@@ -73,38 +73,39 @@ export const PRISM_STORAGE = process.env.PRISM_STORAGE || "supabase";
 // When both SUPABASE_URL and SUPABASE_KEY are set, session memory tools
 // are registered. These tools allow AI agents to persist and recover
 // context between sessions.
-export const SUPABASE_URL = process.env.SUPABASE_URL;
-export const SUPABASE_KEY = process.env.SUPABASE_KEY;
-/**
- * SESSION_MEMORY_ENABLED — Master toggle for session persistence tools.
- *
- * Hardcoded to `true` since v3.0. This flag was originally used to gate
- * session memory tools when Supabase credentials were optional. Now that
- * session memory is a core feature (both SQLite and Supabase backends),
- * it is always enabled.
- *
- * The flag is kept (rather than removed) because several modules import
- * it for conditional registration of MCP tools. Removing it would require
- * a broader refactor with no functional benefit.
- */
-export const SESSION_MEMORY_ENABLED = true;
-// Note: debug() is defined at the bottom of this file; these lines
-// execute at import time after the full module is loaded by Node.
-if (!SESSION_MEMORY_ENABLED) {
-    console.error("Info: Session memory disabled (set PRISM_STORAGE=local or configure Supabase)");
+function sanitizeEnv(value) {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    // Treat unresolved template placeholders as unset (e.g. "${SUPABASE_URL}")
+    if (!trimmed || trimmed.includes("${"))
+        return undefined;
+    return trimmed;
 }
-// ─── Optional: Multi-Tenant User ID ──────────────────────────
-// REVIEWER NOTE: When multiple users share the same Supabase instance,
-// PRISM_USER_ID isolates their data. Each user sets a unique ID in their
-// Claude Desktop config. All queries are scoped to this user_id.
-//
-// Defaults to "default" for backward compatibility — existing single-user
-// installations work without any config changes.
-//
-// For enterprise: use a stable unique identifier (UUID, email hash, etc.)
-// For personal use: any unique string works (e.g., "alice", "bob")
+function isHttpUrl(value) {
+    try {
+        const parsed = new URL(value);
+        return parsed.protocol === "http:" || parsed.protocol === "https:";
+    }
+    catch {
+        return false;
+    }
+}
+export const SUPABASE_URL = sanitizeEnv(process.env.SUPABASE_URL);
+export const SUPABASE_KEY = sanitizeEnv(process.env.SUPABASE_KEY);
+export const SUPABASE_CONFIGURED = !!SUPABASE_URL &&
+    !!SUPABASE_KEY &&
+    isHttpUrl(SUPABASE_URL);
+if (process.env.SUPABASE_URL && !SUPABASE_URL) {
+    console.error("Warning: SUPABASE_URL appears unresolved/empty (e.g. template placeholder). Falling back to local storage unless explicitly fixed.");
+}
+if (SUPABASE_URL && !isHttpUrl(SUPABASE_URL)) {
+    console.error("Warning: SUPABASE_URL is not a valid http(s) URL. Falling back to local storage.");
+}
+// Session memory remains core-enabled in both local and Supabase modes.
+export const SESSION_MEMORY_ENABLED = true;
+// Optional multi-tenant scope ID (used by storage queries and handoffs).
 export const PRISM_USER_ID = process.env.PRISM_USER_ID || "default";
-// Multi-tenant info logged at debug level in startServer()
 // ─── v2.1: Auto-Capture Feature ─────────────────────────────
 // REVIEWER NOTE: Automatically captures HTML snapshots of local dev servers
 // when handoffs are saved. Prevents UI context loss between sessions.

package/dist/dashboard/ui.js

@@ -841,12 +841,7 @@ export function renderDashboardHTML(version) {
               <span style="font-size:0.75rem; color:var(--text-muted); font-weight:600;">Active Recall</span>
               <button id="testMeBtn" onclick="triggerTestMe()" class="btn-modern" style="padding:0.3rem 0.6rem; font-size:0.75rem; background:var(--accent-teal); border-color:var(--accent-teal);" title="Generate 3 quiz questions using AI">📝 Test Me</button>
             </div>
-            <div style="display:flex; justify-content:space-between; align-items:center; margin-top:0.8rem;">
-              <span style="font-size:0.75rem; color:var(--text-muted); font-weight:600;">Cognitive Route (v6.5)</span>
-              <button id="cognitiveRouteBtn" onclick="triggerCognitiveRoute()" class="btn-modern" style="padding:0.3rem 0.6rem; font-size:0.75rem; background:var(--accent-blue); border-color:var(--accent-blue);" title="Resolve concept route and explain why it surfaced">🧭 Route</button>
-            </div>
             <div id="testMeContainer" style="margin-top:0.8rem; display:flex; flex-direction:column; gap:0.5rem;"></div>
-
             <div style="display:flex; justify-content:space-between; align-items:center; margin-top:0.8rem;">
               <span style="font-size:0.75rem; color:var(--text-muted); font-weight:600;">Cognitive Route (v6.5)</span>
               <button id="cognitiveRouteBtn" onclick="triggerCognitiveRoute()" class="btn-modern" style="padding:0.3rem 0.6rem; font-size:0.75rem; background:var(--accent-blue); border-color:var(--accent-blue);" title="Resolve concept route and explain why it surfaced">🧭 Route</button>
@@ -2443,6 +2438,7 @@ Example:\n## Dev Rules\n- Always write tests first\n- Use TypeScript strict mode
       }
     }
 
+    async function triggerTestMe() {
       var input = document.getElementById('nodeEditorInput');
       var oldId = input.dataset.oldId;
       var _gpf = document.getElementById('graphProjectFilter');

package/dist/storage/index.js

@@ -1,15 +1,4 @@
-/**
- * Storage Factory (v2.0 — Step 1)
- *
- * Unified entry point for storage initialization.
- * Routes between Supabase (cloud) and SQLite (local) based on
- * the PRISM_STORAGE environment variable.
- *
- * Usage in server.ts:
- *   const storage = await getStorage();
- *   // Pass `storage` to all session memory handlers
- */
-import { PRISM_STORAGE as ENV_PRISM_STORAGE } from "../config.js";
+import { PRISM_STORAGE as ENV_PRISM_STORAGE, SUPABASE_CONFIGURED } from "../config.js";
 import { debugLog } from "../utils/logger.js";
 import { SupabaseStorage } from "./supabase.js";
 import { getSetting } from "./configStorage.js";
@@ -20,16 +9,22 @@ export let activeStorageBackend = "local";
  *
  * On first call: creates and initializes the appropriate backend.
  * On subsequent calls: returns the cached instance.
- *
- * @throws Error if PRISM_STORAGE=local (not yet implemented in Step 1)
- * @throws Error if PRISM_STORAGE=supabase but Supabase is not configured
  */
 export async function getStorage() {
     if (storageInstance)
         return storageInstance;
     // Use environment variable if explicitly set, otherwise fall back to db config
     const envStorage = process.env.PRISM_STORAGE;
-    activeStorageBackend = envStorage || await getSetting("PRISM_STORAGE", ENV_PRISM_STORAGE);
+    const requestedBackend = (envStorage || await getSetting("PRISM_STORAGE", ENV_PRISM_STORAGE));
+    // Guardrail: if Supabase is requested but credentials are unresolved/invalid,
+    // transparently fall back to local mode to keep dashboard + core tools usable.
+    if (requestedBackend === "supabase" && !SUPABASE_CONFIGURED) {
+        activeStorageBackend = "local";
+        console.error("[Prism Storage] Supabase backend requested but SUPABASE_URL/SUPABASE_KEY are invalid or unresolved. Falling back to local storage.");
+    }
+    else {
+        activeStorageBackend = requestedBackend;
+    }
     debugLog(`[Prism Storage] Initializing backend: ${activeStorageBackend}`);
     if (activeStorageBackend === "local") {
         const { SqliteStorage } = await import("./sqlite.js");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "6.5.0",
+  "version": "6.5.2",
   "mcpName": "io.github.dcostenco/prism-mcp",
   "description": "The Mind Palace for AI Agents — persistent memory (SQLite/Supabase), behavioral learning & IDE rules sync, multimodal VLM image captioning, pluggable LLM providers (OpenAI/Anthropic/Gemini/Ollama), OpenTelemetry distributed tracing, GDPR export, multi-agent Hivemind sync, time travel, visual Mind Palace dashboard. Zero-config local mode.",
   "module": "index.ts",