prism-mcp-server 9.2.6 → 9.2.7

package/README.md

@@ -503,6 +503,43 @@ A gorgeous glassmorphism UI at `localhost:3000` that lets you see exactly what y
 ### 🧬 10× Memory Compression
 Powered by a pure TypeScript port of Google's TurboQuant (inspired by Google's ICLR research), Prism compresses 768-dim embeddings from **3,072 bytes → ~400 bytes** — enabling decades of session history on a standard laptop. No native modules. No vector database required. To mitigate quantization degradation (where repeated compress/decompress cycles could smear subtle corrections after 10k+ memories), Prism leverages autonomous **ledger compaction** and **Deep Storage cleanup** to guarantee high-fidelity memory integrity over time.
 
+<details>
+<summary><strong>📊 1M-Vector Benchmark (d=768, 4-bit)</strong></summary>
+
+Validated on 1,000,000 synthetic unit vectors at production dimension (d=768), run on Apple M4 Max (36GB):
+
+| Metric | Value |
+|--------|-------|
+| **Compression ratio** | 7.7× (3,072 → 400 bytes) |
+| **Throughput** | 833 vectors/sec |
+| **Peak heap** | 329 MB |
+| **Total time** | 57.6 minutes |
+
+**Residual norm distribution** — the quantization error after Householder rotation + Lloyd-Max scalar quantization:
+
+| Statistic | Value |
+|-----------|-------|
+| Mean | 0.1855 |
+| CV (coefficient of variation) | **0.038** |
+| P99/P50 ratio | **1.11** |
+| P99.9/P50 ratio | 1.16 |
+| Max/Min ratio | 1.46 |
+| IQR | 0.009 |
+
+A CV of 0.038 means the residual norm barely varies across 1M vectors — **there is effectively no long tail**. The QJL correction term (which scales linearly with residualNorm) remains stable even for P99.9 outliers.
+
+**R@k retrieval accuracy** (global corpus, 30 trials):
+
+| Corpus Size | R@1 | R@5 |
+|-------------|-----|-----|
+| N=1,000 | 20.0% | 60.0% |
+| N=10,000 | 36.7% | 76.7% |
+| N=50,000 | 53.3% | **90.0%** |
+
+> **Note:** R@k on random high-dimensional vectors is inherently harder than on real embeddings (all vectors are near-equidistant in d=768). Real-world retrieval with clustered embeddings produces higher accuracy. See [tests/residual-distribution.test.ts](tests/residual-distribution.test.ts) and [tests/benchmarks/residual-1m.ts](tests/benchmarks/residual-1m.ts) for full methodology.
+
+</details>
+
 ### 🐝 Multi-Agent Hivemind & Enterprise Sync
 While local SQLite is amazing for solo developers, enterprise teams cannot share a local SQLite file. Prism breaks the "local-only" ceiling via **Supabase Sync** and the **Multi-Agent Hivemind**—scaling effortlessly to teams of 50+ developers using agents. Multiple agents (dev, QA, PM) can work on the same project with **role-isolated memory**, discover each other automatically, and share context in real-time via Telepathy sync to a shared Postgres backend. → [Multi-agent setup example](examples/multi-agent-hivemind/)
 

package/dist/darkfactory/safetyController.js

@@ -84,6 +84,12 @@ export class SafetyController {
             if (!action.targetPath || typeof action.targetPath !== 'string' || action.targetPath.trim() === '') {
                 return `Action[${i}]: targetPath is empty or missing`;
             }
+            // Null-byte injection guard: C-string truncation attack vector.
+            // A path like "src/\0../../etc/passwd" would be truncated at the null byte
+            // by native fs syscalls, potentially resolving to an unintended location.
+            if (action.targetPath.includes('\0')) {
+                return `Action[${i}]: targetPath contains null byte (injection attempt)`;
+            }
             // Resolve targetPath relative to workingDirectory for scope check
             const resolvedTarget = spec.workingDirectory
                 ? path.resolve(spec.workingDirectory, action.targetPath)

package/dist/utils/crdtMerge.js

@@ -40,13 +40,28 @@
 //
 // This is a zero-dependency, fast (~10ms for a typical handoff object)
 // solution appropriate for Prism's small merge surfaces.
+/**
+ * Typed error thrown when sanitizeForMerge() detects prototype pollution.
+ * Provides the offending key for forensic logging and distinct catch handling.
+ */
+export class PrototypePollutionError extends Error {
+    offendingKey;
+    constructor(key) {
+        super(`Security violation: prototype pollution attempt detected via key "${key}"`);
+        this.name = "PrototypePollutionError";
+        this.offendingKey = key;
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, PrototypePollutionError);
+        }
+    }
+}
 const FORBIDDEN_KEYS = new Set(["__proto__", "constructor", "prototype"]);
 function walkForForbiddenKeys(current) {
     if (!current || typeof current !== "object")
         return;
     for (const key of Object.keys(current)) {
         if (FORBIDDEN_KEYS.has(key)) {
-            throw new Error(`Security violation: prototype pollution attempt detected via key "${key}"`);
+            throw new PrototypePollutionError(key);
         }
         walkForForbiddenKeys(current[key]);
     }
@@ -63,18 +78,19 @@ export function sanitizeForMerge(obj) {
     walkForForbiddenKeys(obj);
     return JSON.parse(JSON.stringify(obj));
 }
-// ─── OR-Set Logic (Add-Wins) ────────────────────────────────────
+// ─── OR-Set Logic (Remove-Wins-from-Either) ────────────────────
 //
 // 3-way set merge:
 //   added_by_incoming = incoming - base
 //   removed_by_incoming = base - incoming
 //   added_by_current = current - base
 //   removed_by_current = base - current
-//   result = (base - removals) ∪ all_adds
+//   result = (base - all_removals) ∪ all_adds
 //
-// "Add-Wins" means: if Agent A removes "X" and Agent B adds "X",
-// the add wins. This is safe for TODOs (better to have a duplicate
-// than lose work) and keywords (idempotent).
+// SEMANTICS: Items removed by EITHER agent are dropped from the base.
+// Fresh additions from either agent are always preserved (union).
+// This means a removal by one agent wins over non-action by the other,
+// but cannot override a fresh add. Safe for TODOs and keywords.
 function mergeArray(b = [], i = [], c = []) {
     const bSet = new Set(b);
     const iSet = new Set(i);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "prism-mcp-server",
-  "version": "9.2.6",
+  "version": "9.2.7",
   "mcpName": "io.github.dcostenco/prism-mcp",
   "description": "The Mind Palace for AI Agents — a true Cognitive Architecture with Hebbian learning (episodic→semantic consolidation), ACT-R spreading activation (multi-hop causal reasoning), uncertainty-aware rejection gates (agents that know when they don't know), adversarial evaluation (anti-sycophancy), fail-closed Dark Factory pipelines, persistent memory (SQLite/Supabase), multi-agent Hivemind, time travel & visual dashboard. Zero-config local mode.",
   "module": "index.ts",