prism-mcp-server 7.3.3 → 7.5.0

package/dist/dashboard/ui.js

@@ -625,6 +625,15 @@ export function renderDashboardHTML(version) {
           <ul class="todo-list" id="todos"></ul>
         </div>
 
+        <!-- Intent Health (Feature A) -->
+        <div class="card" id="intentHealthCard" style="display: none;">
+          <div class="card-title" style="display: flex; justify-content: space-between; align-items: center;">
+            <div><span class="dot" style="background:var(--accent-purple)"></span> Intent Health</div>
+            <span style="font-size: 11px; color: var(--text-muted); cursor: help; border-bottom: 1px dotted var(--text-muted); letter-spacing: normal; text-transform: none;" title="Intent debt limits how AI agents can evolve the system (Storey / Fowler)">What is this?</span>
+          </div>
+          <div id="intentHealthCardContent"></div>
+        </div>
+
         <!-- Git Metadata -->
         <div class="card">
           <div class="card-title"><span class="dot" style="background:var(--accent-green)"></span> Git Metadata</div>
@@ -1465,15 +1474,15 @@ function loadPipelines() {
             html += '<span style="font-weight:600;color:var(--text-primary)">' + emoji + ' ' + p.status + '</span>';
             html += '<span style="font-size:0.7rem;font-family:var(--font-mono);color:var(--text-muted)">' + p.id.slice(0, 8) + '…</span>';
             html += '</div>';
-            html += '<div style="font-size:0.82rem;color:var(--text-secondary);margin-bottom:0.35rem">' + objective + '</div>';
+            html += '<div style="font-size:0.82rem;color:var(--text-secondary);margin-bottom:0.35rem">' + escapeHtml(objective) + '</div>';
             html += '<div style="display:flex;gap:1rem;font-size:0.72rem;color:var(--text-muted);flex-wrap:wrap">';
-            html += '<span>📁 ' + (p.project || '?') + '</span>';
+            html += '<span>📁 ' + escapeHtml(p.project || '?') + '</span>';
             html += '<span>🔄 ' + p.iteration + ' / ' + maxIter + '</span>';
-            html += '<span>📍 ' + (p.current_step || '?') + '</span>';
+            html += '<span>📍 ' + escapeHtml(p.current_step || '?') + '</span>';
             html += '<span>🕐 ' + new Date(p.updated_at).toLocaleString() + '</span>';
             html += '</div>';
             if (p.error) {
-                html += '<div style="font-size:0.72rem;color:var(--accent-rose);margin-top:0.35rem;padding:0.3rem 0.5rem;background:rgba(244,63,94,0.08);border-radius:4px">⚠ ' + p.error.slice(0, 200) + '</div>';
+                html += '<div style="font-size:0.72rem;color:var(--accent-rose);margin-top:0.35rem;padding:0.3rem 0.5rem;background:rgba(244,63,94,0.08);border-radius:4px">⚠ ' + escapeHtml(p.error.slice(0, 200)) + '</div>';
             }
             if (isActive) {
                 html += '<div style="margin-top:0.5rem"><button onclick="abortPipeline(this.dataset.id)" data-id="' + p.id + '" class="cleanup-btn" style="font-size:0.72rem">🛑 Abort Pipeline</button></div>';
@@ -1495,7 +1504,7 @@ function loadPipelines() {
         }
     })
         .catch(function (err) {
-        document.getElementById('factoryList').innerHTML = '<div style="color:var(--accent-rose);padding:1rem">Failed to load pipelines: ' + err.message + '</div>';
+        document.getElementById('factoryList').innerHTML = '<div style="color:var(--accent-rose);padding:1rem">Failed to load pipelines: ' + escapeHtml(err.message) + '</div>';
     });
 }
 function abortPipeline(id) {
@@ -1672,11 +1681,36 @@ function loadIdentityChip() {
                     select = document.getElementById('projectSelect');
                     if (data.projects && data.projects.length > 0) {
                         select.innerHTML = '<option value="">— Select a project —</option>' +
-                            data.projects.map(function (p) { return '<option value="' + p + '">' + p + '</option>'; }).join('');
+                            data.projects.map(function (p) { return '<option value="' + escapeHtml(p) + '">' + escapeHtml(p) + '</option>'; }).join('');
+                        
+                        // v7.5.0: Background fetch intent health to add global traffic-light dots
+                        // Fetch sequentially to prevent SQLite WAL saturation with N concurrent loadContext calls
+                        var pIndex = 0;
+                        function fetchNextHealth() {
+                            if (pIndex >= data.projects.length) return;
+                            var p = data.projects[pIndex++];
+                            fetch('/api/intent-health?project=' + encodeURIComponent(p))
+                                .then(function (res) { return res.json(); })
+                                .then(function (hData) {
+                                    if (hData && typeof hData.score === 'number') {
+                                        var icon = hData.score >= 80 ? "🟢" : (hData.score >= 50 ? "🟡" : "🔴");
+                                        var opt = null;
+                                        for (var oi = 0; oi < select.options.length; oi++) {
+                                            if (select.options[oi].value === p) { opt = select.options[oi]; break; }
+                                        }
+                                        if (opt) opt.textContent = icon + " " + p;
+                                    }
+                                    fetchNextHealth();
+                                }).catch(function () { fetchNextHealth(); });
+                        }
+                        if (data.projects && data.projects.length > 0) {
+                            fetchNextHealth();
+                        }
+
                         gp = document.getElementById('graphProjectFilter');
                         if (gp) {
                             gp.innerHTML = '<option value="">All Projects</option>' +
-                                data.projects.map(function (p) { return '<option value="' + p + '">' + p + '</option>'; }).join('');
+                                data.projects.map(function (p) { return '<option value="' + escapeHtml(p) + '">' + escapeHtml(p) + '</option>'; }).join('');
                         }
                         // Restore last selected project from localStorage
                         var lastProject = localStorage.getItem('prism_last_project');
@@ -1708,8 +1742,15 @@ function loadProject() {
             switch (_a.label) {
                 case 0:
                     project = document.getElementById('projectSelect').value;
-                    if (!project)
+                    if (!project) {
+                        var hc = document.getElementById('intentHealthCard');
+                        if (hc) hc.style.display = 'none';
+                        var welcomeEl = document.getElementById('welcome');
+                        var contentEl = document.getElementById('content');
+                        if (contentEl) contentEl.style.display = 'none';
+                        if (welcomeEl) welcomeEl.style.display = 'flex';
                         return [2 /*return*/];
+                    }
                     // Persist last selected project
                     try { localStorage.setItem('prism_last_project', project); } catch(e) {}
                     document.getElementById('welcome').style.display = 'none';
@@ -1767,7 +1808,7 @@ function loadProject() {
                             var snap = h.snapshot || {};
                             var summary = snap.last_summary || snap.summary || 'Snapshot';
                             return '<div class="timeline-item history">' +
-                                '<div class="meta"><span class="badge badge-purple">v' + h.version + '</span>' +
+                                '<div class="meta"><span class="badge badge-purple">v' + escapeHtml(h.version) + '</span>' +
                                 '<span>' + formatDate(h.created_at) + '</span></div>' +
                                 escapeHtml(summary) + '</div>';
                         }).join('');
@@ -1785,7 +1826,7 @@ function loadProject() {
                                 try {
                                     var parsed = typeof decisions === 'string' ? JSON.parse(decisions) : decisions;
                                     if (Array.isArray(parsed) && parsed.length > 0) {
-                                        extra = '<div style="margin-top:0.3rem;font-size:0.75rem;color:var(--accent-cyan)">Decisions: ' + parsed.join(', ') + '</div>';
+                                        extra = '<div style="margin-top:0.3rem;font-size:0.75rem;color:var(--accent-cyan)">Decisions: ' + parsed.map(function(d) { return escapeHtml(d); }).join(', ') + '</div>';
                                     }
                                 }
                                 catch (e) { }
@@ -1851,6 +1892,10 @@ function loadProject() {
                     document.getElementById('content').className = 'grid grid-main fade-in';
                     document.getElementById('content').style.display = 'grid';
                     projectLoaded = true; // Fix 3: mark project as loaded for tab-switch restore
+                    
+                    // Feature A: Run Intent Health Fetch
+                    fetchIntentHealth(project);
+                    
                     // v3.1: Analytics + Lifecycle Controls + Import
                     document.getElementById('analyticsCard').style.display = 'block';
                     document.getElementById('lifecycleCard').style.display = 'block';
@@ -2393,7 +2438,7 @@ function showToast(msg, isErr) {
 function escapeHtml(str) {
     if (!str)
         return '';
-    return String(str).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+    return String(str).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#039;');
 }
 function formatDate(isoStr) {
     if (!isoStr)
@@ -4060,6 +4105,67 @@ if ('serviceWorker' in navigator) {
     });
 }
 
+/* --- INTENT HEALTH COMPONENT (ES5 Safe) --- */
+
+function fetchIntentHealth(project) {
+    var container = document.getElementById('intentHealthCardContent');
+    var card = document.getElementById('intentHealthCard');
+    if (!container || !card) return;
+
+    card.style.display = 'block';
+    container.innerHTML = '<div style="color: #8b949e; padding: 16px;">Computing intent debt...</div>';
+
+    fetch('/api/intent-health?project=' + encodeURIComponent(project))
+        .then(function(res) { return res.json(); })
+        .then(function(data) {
+            if (data.error) {
+                container.innerHTML = '<div style="color: #ff7b72; padding: 16px;">Error: ' + escapeHtml(data.error) + '</div>';
+                return;
+            }
+            renderIntentHealthCard(data);
+        })
+        .catch(function(err) {
+            container.innerHTML = '<div style="color: #ff7b72; padding: 16px;">Failed to load intent health.</div>';
+        });
+}
+
+function renderIntentHealthCard(data) {
+    var container = document.getElementById('intentHealthCardContent');
+    if (!container) return;
+
+    // Determine Gauge Color
+    var scoreColor = '#2ea043'; // Green
+    if (data.score < 50) {
+        scoreColor = '#ff7b72'; // Red
+    } else if (data.score < 80) {
+        scoreColor = '#d29922'; // Yellow
+    }
+
+    // Render Signals
+    var signalsHtml = '';
+    for (var i = 0; i < data.signals.length; i++) {
+        var sig = data.signals[i];
+        var icon = '🟢';
+        if (sig.severity === 'warn') icon = '🟡';
+        if (sig.severity === 'critical') icon = '🔴';
+        signalsHtml += '<div style="margin-bottom: 8px; font-size: 13px;">' + icon + ' ' + escapeHtml(sig.message) + '</div>';
+    }
+
+    // Render Layout
+    var html = '' +
+        '<div style="display: flex; gap: 24px; align-items: center; padding: 16px;">' +
+            '<div style="text-align: center; flex-shrink: 0; min-width: 80px;">' +
+                '<div style="font-size: 42px; font-weight: bold; color: ' + scoreColor + '; line-height: 1;">' + (typeof data.score === 'number' ? data.score : '—') + '</div>' +
+                '<div style="font-size: 10px; color: #8b949e; text-transform: uppercase; letter-spacing: 1px; margin-top: 8px;">Health Score</div>' +
+            '</div>' +
+            '<div style="flex-grow: 1; border-left: 1px solid var(--border-glass); padding-left: 24px;">' +
+                signalsHtml +
+            '</div>' +
+        '</div>';
+
+    container.innerHTML = html;
+}
+
 </script>
 </body>
 </html>`;

package/dist/server.js

@@ -1184,6 +1184,25 @@ export async function startServer() {
             console.error(`[DarkFactory] Startup failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
         });
     }
+    // ─── v7.4: TurboQuant Compressor Async Warmup ────────────
+    // The first call to getDefaultCompressor() triggers construction of a
+    // 768×768 rotation matrix (~15ms of synchronous CPU). Pre-warm via
+    // setImmediate so it runs after the current event-loop tick completes,
+    // preventing the stdio handshake from being blocked during startup.
+    // Fire-and-forget — non-critical; subsequent calls hit the singleton cache.
+    setImmediate(() => {
+        try {
+            // Dynamic import avoids loading turboquant.ts at module-parse time
+            // (the construction side-effects run only when actually needed).
+            import("./utils/turboquant.js").then(({ getDefaultCompressor }) => {
+                getDefaultCompressor();
+                console.error("[Prism] TurboQuant compressor pre-warmed (rotation matrix ready)");
+            }).catch(err => {
+                console.error(`[TurboQuant] Warmup failed (non-fatal): ${err instanceof Error ? err.message : String(err)}`);
+            });
+        }
+        catch { /* warmup is a best-effort optimization */ }
+    });
     // Keep the process alive — without this, Node.js would exit
     // because there are no active event loop handles after the
     // synchronous setup completes.

package/dist/storage/sqlite.js

@@ -566,13 +566,37 @@ export class SqliteStorage {
         status TEXT NOT NULL,
         current_step TEXT NOT NULL,
         iteration INTEGER NOT NULL,
+        eval_revisions INTEGER DEFAULT 0,
         started_at TEXT NOT NULL,
         updated_at TEXT NOT NULL,
         spec TEXT NOT NULL,
         error TEXT,
-        last_heartbeat TEXT
+        last_heartbeat TEXT,
+        contract_payload TEXT,
+        notes TEXT
       )
     `);
+        // ─── v7.4.0 Migration: Adversarial Eval Revisions ─────────
+        try {
+            await this.db.execute(`ALTER TABLE dark_factory_pipelines ADD COLUMN eval_revisions INTEGER DEFAULT 0`);
+            debugLog("[SqliteStorage] v7.4.0 migration: added eval_revisions column");
+            // Backfill existing rows — ALTER TABLE DEFAULT only applies to new inserts;
+            // rows that existed before the migration will have NULL until explicitly set.
+            await this.db.execute(`UPDATE dark_factory_pipelines SET eval_revisions = 0 WHERE eval_revisions IS NULL`);
+            debugLog("[SqliteStorage] v7.4.0 migration: backfilled eval_revisions = 0");
+        }
+        catch (e) {
+            if (!e.message?.includes("duplicate column name"))
+                throw e;
+        }
+        try {
+            await this.db.execute(`ALTER TABLE dark_factory_pipelines ADD COLUMN contract_payload TEXT`);
+            await this.db.execute(`ALTER TABLE dark_factory_pipelines ADD COLUMN notes TEXT`);
+        }
+        catch (e) {
+            if (!e.message?.includes("duplicate column name"))
+                throw e;
+        }
         await this.db.execute(`CREATE INDEX IF NOT EXISTS idx_pipelines_status ON dark_factory_pipelines(user_id, project, status)`);
         // ─── v7.2.0 Migration: Verification Harness ────────────────
         await this.db.execute(`
@@ -1160,6 +1184,30 @@ export class SqliteStorage {
                 importance: r.importance,
             }));
         }
+        // ─── v7.5.0: Validation Pulse (Standard & Deep) ─────────────
+        context.recent_validations = []; // Default empty
+        try {
+            const validationResult = await this.db.execute({
+                sql: `SELECT run_at, passed, pass_rate, gate_action, critical_failures
+              FROM verification_runs
+              WHERE project = ? AND user_id = ?
+              ORDER BY run_at DESC
+              LIMIT 3`,
+                args: [project, userId],
+            });
+            if (validationResult.rows.length > 0) {
+                context.recent_validations = validationResult.rows.map(r => ({
+                    run_at: r.run_at,
+                    passed: Boolean(r.passed),
+                    pass_rate: r.pass_rate,
+                    gate_action: r.gate_action,
+                    critical_failures: Number(r.critical_failures) || 0,
+                }));
+            }
+        }
+        catch (e) {
+            // Graceful degradation if verification_runs table hasn't been migrated yet
+        }
         if (level === "standard") {
             // Add recent ledger entries (role-scoped)
             const recentLedger = await this.db.execute({
@@ -2888,16 +2936,19 @@ export class SqliteStorage {
         }
         await this.db.execute({
             sql: `
-        INSERT INTO dark_factory_pipelines (id, project, user_id, status, current_step, iteration, started_at, updated_at, spec, error, last_heartbeat)
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        INSERT INTO dark_factory_pipelines (id, project, user_id, status, current_step, iteration, eval_revisions, started_at, updated_at, spec, error, last_heartbeat, contract_payload, notes)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
         ON CONFLICT(id) DO UPDATE SET
           status = excluded.status,
           current_step = excluded.current_step,
           iteration = excluded.iteration,
+          eval_revisions = excluded.eval_revisions,
           updated_at = excluded.updated_at,
           spec = excluded.spec,
           error = excluded.error,
-          last_heartbeat = excluded.last_heartbeat
+          last_heartbeat = excluded.last_heartbeat,
+          contract_payload = excluded.contract_payload,
+          notes = excluded.notes
       `,
             args: [
                 updatedState.id,
@@ -2906,11 +2957,14 @@ export class SqliteStorage {
                 updatedState.status,
                 updatedState.current_step,
                 updatedState.iteration,
+                updatedState.eval_revisions ?? 0,
                 updatedState.started_at,
                 updatedState.updated_at,
                 updatedState.spec,
                 updatedState.error || null,
-                updatedState.last_heartbeat || null
+                updatedState.last_heartbeat || null,
+                updatedState.contract_payload ? JSON.stringify(updatedState.contract_payload) : null,
+                updatedState.notes || null
             ]
         });
     }
@@ -2921,7 +2975,11 @@ export class SqliteStorage {
         });
         if (result.rows.length === 0)
             return null;
-        return result.rows[0];
+        const row = result.rows[0];
+        return {
+            ...row,
+            contract_payload: row.contract_payload ? JSON.parse(row.contract_payload) : undefined
+        };
     }
     async listPipelines(project, status, userId) {
         const conditions = ['user_id = ?'];
@@ -2937,7 +2995,10 @@ export class SqliteStorage {
         const where = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
         const sql = `SELECT * FROM dark_factory_pipelines ${where} ORDER BY updated_at DESC`;
         const result = await this.db.execute({ sql, args });
-        return result.rows;
+        return result.rows.map((row) => ({
+            ...row,
+            contract_payload: row.contract_payload ? JSON.parse(row.contract_payload) : undefined
+        }));
     }
     // ─── Verification Harness (v7.2.0) ───────────────────────────
     async saveVerificationHarness(harness, userId) {

package/dist/storage/supabase.js

@@ -170,7 +170,36 @@ export class SupabaseStorage {
                 p_role: role || "global", // v3.0: pass role to RPC
             });
             const data = Array.isArray(result) ? result[0] : result;
-            return data ?? null;
+            const context = data ?? null;
+            if (!context)
+                return null;
+            // ─── v7.5.0: Validation Pulse (Standard & Deep) ─────────────
+            if (level === "standard" || level === "deep") {
+                context.recent_validations = [];
+                try {
+                    const valData = await supabaseGet("verification_runs", {
+                        project: `eq.${project}`,
+                        user_id: `eq.${userId}`,
+                        select: "run_at,passed,pass_rate,gate_action,critical_failures",
+                        order: "run_at.desc",
+                        limit: "3"
+                    });
+                    const validations = Array.isArray(valData) ? valData : [];
+                    if (validations.length > 0) {
+                        context.recent_validations = validations.map((r) => ({
+                            run_at: r.run_at,
+                            passed: Boolean(r.passed),
+                            pass_rate: r.pass_rate,
+                            gate_action: r.gate_action,
+                            critical_failures: Number(r.critical_failures) || 0,
+                        }));
+                    }
+                }
+                catch (e) {
+                    // Graceful degradation if table doesn't exist yet
+                }
+            }
+            return context;
         }
         catch (e) {
             debugLog("[SupabaseStorage] loadContext RPC failed: " + (e instanceof Error ? e.message : String(e)));
@@ -1222,7 +1251,13 @@ export class SupabaseStorage {
                 updated_at: updatedState.updated_at,
                 spec: updatedState.spec,
                 error: updatedState.error || null,
-                last_heartbeat: updatedState.last_heartbeat || null
+                last_heartbeat: updatedState.last_heartbeat || null,
+                // ─── v7.4: Adversarial Evaluation fields ───
+                eval_revisions: updatedState.eval_revisions ?? 0,
+                contract_payload: updatedState.contract_payload
+                    ? JSON.stringify(updatedState.contract_payload)
+                    : null,
+                notes: updatedState.notes || null,
             }, { on_conflict: "id" }, { Prefer: "return=minimal,resolution=merge-duplicates" });
         }
         catch (e) {
@@ -1244,7 +1279,15 @@ export class SupabaseStorage {
             const rows = Array.isArray(result) ? result : [];
             if (rows.length === 0)
                 return null;
-            return rows[0];
+            const row = rows[0];
+            // ─── v7.4: Deserialize contract_payload from JSON TEXT ───
+            if (row.contract_payload && typeof row.contract_payload === "string") {
+                try {
+                    row.contract_payload = JSON.parse(row.contract_payload);
+                }
+                catch { /* leave as-is */ }
+            }
+            return row;
         }
         catch (e) {
             if (e.message?.includes("PGRST202") || e.message?.includes("Could not find the relation"))
@@ -1263,7 +1306,17 @@ export class SupabaseStorage {
             if (status)
                 query.status = `eq.${status}`;
             const result = await supabaseGet("dark_factory_pipelines", query);
-            return (Array.isArray(result) ? result : []);
+            const rows = (Array.isArray(result) ? result : []);
+            // ─── v7.4: Deserialize contract_payload from JSON TEXT ───
+            return rows.map(row => {
+                if (row.contract_payload && typeof row.contract_payload === "string") {
+                    try {
+                        row.contract_payload = JSON.parse(row.contract_payload);
+                    }
+                    catch { /* leave as-is */ }
+                }
+                return row;
+            });
         }
         catch (e) {
             if (e.message?.includes("PGRST202") || e.message?.includes("Could not find the relation"))

package/dist/tools/ledgerHandlers.js

@@ -657,6 +657,19 @@ export async function sessionLoadContextHandler(args) {
     if (d.session_history?.length) {
         formattedContext += `\n📂 Session History (${d.session_history.length} entries):\n` + d.session_history.map((s) => `  [${s.session_date?.split("T")[0]}] ${s.summary}`).join("\n") + `\n`;
     }
+    if (d.recent_validations?.length) {
+        formattedContext += `\n🔬 Recent Validations:\n` + d.recent_validations.map((v) => {
+            const passStr = v.passed ? "✅ PASS" : "❌ FAIL";
+            const icon = v.gate_action ? (v.passed ? "🚀" : "🛑") : "ℹ️";
+            const dateStr = (v.run_at || "unknown").split("T")[0];
+            const rateStr = Math.round((Number(v.pass_rate) || 0) * 100);
+            let out = `  ${icon} [${dateStr}] ${passStr} (${rateStr}%)`;
+            if (v.critical_failures > 0) {
+                out += ` -> Critical Blockers: ${v.critical_failures}`;
+            }
+            return out;
+        }).join("\n") + `\n`;
+    }
     // ─── Role-Scoped Skill Injection ─────────────────────────────
     // If the active role has a skill document stored, append it so the
     // agent loads its rules/conventions automatically at session start.

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "prism-mcp-server",
-  "version": "7.3.3",
+  "version": "7.5.0",
   "mcpName": "io.github.dcostenco/prism-mcp",
-  "description": "The Mind Palace for AI Agents — fail-closed Dark Factory autonomous pipelines (3-gate parse→type→scope validation), persistent memory (SQLite/Supabase), ACT-R cognitive retrieval, behavioral learning & IDE rules sync, multi-agent Hivemind, time travel, visual dashboard. Zero-config local mode.",
+  "description": "The Mind Palace for AI Agents — adversarial evaluation (PLAN_CONTRACT→EVALUATE anti-sycophancy), fail-closed Dark Factory autonomous pipelines (3-gate parse→type→scope), persistent memory (SQLite/Supabase), ACT-R cognitive retrieval, behavioral learning & IDE rules sync, multi-agent Hivemind, time travel, visual dashboard. Zero-config local mode.",
   "module": "index.ts",
   "type": "module",
   "main": "dist/server.js",