granttap-mcp 0.8.104 → 0.8.106

package/apps/bridge/src/codex-desktop/README.md

@@ -29,3 +29,8 @@ consumed them. Tests exercise native delivery, framing, socket trust, durable
 deduplication, and refusal without launching the CLI.
 
 License: GrantTap Commercial Source License in the repository-root `LICENSE`.
+
+Document staging for a native-only question keeps the file note inside its
+original answer envelope. The host's native question and all paired controllers
+therefore observe the same question item as answered; document paths remain
+available to the admitted turn. Ordinary chat text is unchanged.

package/apps/bridge/src/codex-desktop/index.ts

@@ -1,3 +1,4 @@
+import { nativeQuestionAttachmentEnvelope } from './question-attachment-envelope';
 import { createHash, randomUUID } from 'node:crypto';
 import { readFileSync } from 'node:fs';
 import type { SessionInfo } from '../../../../packages/protocol/schema';
@@ -72,7 +73,7 @@ function turnRequest(input: { session: SessionInfo; text: string; images: string
       networkAccess: false, excludeTmpdirEnvVar: false, excludeSlashTmp: false }
     : access === 'full' ? { type: 'dangerFullAccess' } : undefined;
   return { threadId: session.sessionId, clientUserMessageId: options.messageId ?? randomUUID(),
-    input: [{ type: 'text', text, text_elements: [] }, ...images.map(path => ({ type: 'localImage', path }))],
+    input: [{ type: 'text', text: options.nativeOnly ? nativeQuestionAttachmentEnvelope(text) : text, text_elements: [] }, ...images.map(path => ({ type: 'localImage', path }))],
     ...(options.model ? { model: options.model } : {}), ...(effort ? { effort } : {}),
     ...(sandboxPolicy ? { sandboxPolicy } : {}) };
 }

package/apps/bridge/src/codex-desktop/question-attachment-envelope.ts

@@ -0,0 +1,23 @@
+/** Preserve the native question envelope after document staging appends its local file note. */
+export function nativeQuestionAttachmentEnvelope(text: string): string {
+  const opening = '<send_user_message_question_reply>';
+  const closing = '</send_user_message_question_reply>';
+  const boundary = text.lastIndexOf(closing);
+  if (!text.startsWith(opening) || boundary < opening.length) return text;
+  const note = text.slice(boundary + closing.length);
+  const header = '\n\nAttached files available locally:\n';
+  if (!note.startsWith(header)) return text;
+  const files = note.slice(header.length).split('\n');
+  if (!files.length || files.some(line => !/^- .+: .+$/.test(line))) return text;
+  try {
+    const rows = JSON.parse(text.slice(opening.length, boundary));
+    if (!Array.isArray(rows) || rows.length !== 1 || typeof rows[0]?.questionItemId !== 'string'
+      || typeof rows[0]?.answer !== 'string') return text;
+    const identity = JSON.parse(rows[0].questionItemId);
+    if (!Array.isArray(identity) || identity.length !== 3 || identity[0] !== 'request_user_input_async'
+      || typeof identity[1] !== 'string' || !/^[a-zA-Z0-9_-]{1,180}$/.test(identity[1])
+      || !Number.isInteger(identity[2]) || identity[2] < 0 || identity[2] > 3) return text;
+    rows[0].answer += note;
+    return opening + '\n' + JSON.stringify(rows) + '\n' + closing;
+  } catch { return text; }
+}

package/apps/bridge/src/codex-questions/README.md

@@ -25,3 +25,10 @@ Tests under `tests/` cover publication, reconnect replay, native acknowledgement
 scope rejection, expiry and delivery through an isolated native IPC fixture.
 
 License: GrantTap Commercial Source License in the repository-root `LICENSE`.
+
+Attachment-capable controllers opt in using the advertised
+`questionReplyFormat: attachments-v1`. The original question item owns the
+answer, image and file payload together; ordinary encrypted attachment transport,
+Task policy, native-owner admission and stable question idempotency still apply.
+Legacy text-only replies keep their existing contract. Files remain available
+for the admitted native turn; another phone cannot start a second answer.

package/apps/bridge/src/codex-questions/index.ts

@@ -40,6 +40,7 @@ export async function publishCodexQuestions(client: RelayClient, sessions: Sessi
       } else if (!record.announced || options.replay) {
         const text = [record.question, ...record.options.map(value => '• ' + value)].join('\n');
         await client.send({ type: 'agent.event', kind: 'question', requestId: record.requestId,
+          questionReplyFormat: 'attachments-v1',
           sessionId: session.sessionId, agent: 'codex', projectId: session.projectId,
           taskId: session.taskId, computerId: session.computerId, text, createdAt: record.createdAt },
         'phone', { ttlMs: Math.max(1, record.createdAt + RETENTION_MS - Date.now()),
@@ -73,8 +74,9 @@ export async function handleCodexQuestionReply(client: RelayClient, message: Use
     await resolveQuestion(client, record, peerPublicKey, !record.answered);
     return true;
   }
-  if (!message.text.trim() || message.text.length > 4_000 || message.attachments?.length
-    || message.attachmentRefs?.length) return false;
+  const hasAttachments = !!(message.attachments?.length || message.attachmentRefs?.length);
+  if (!message.text.trim() || message.text.length > 4_000
+    || (hasAttachments && message.questionReplyFormat !== 'attachments-v1')) return false;
   return deliver(client, { ...message, requestId: undefined,
     messageId: message.messageId ?? 'codex-answer-' + record.requestId,
     text: nativeAnswerEnvelope(record, message.text) }, publish, peerPublicKey,

package/apps/bridge/src/engine/README.md

@@ -29,7 +29,7 @@ Explicit Graph builds also invoke the Engine's `graph.analyze_project` for two
 to eight admitted local repositories. The projection labels these shared static
 contracts and keeps their runtime destination unverified. They do not become
 verified Backbone dependencies or merge Project grants. The Apple Silicon
-artifact pins Engine 0.1.3 with Weavatrix 2.17.5; unsupported Engine operations
+artifact pins Engine 0.1.4 with Weavatrix 2.17.5 and injective package import identities; unsupported Engine operations
 leave this analysis unavailable. See `runtime/project-relationships/README.md`.
 
 Claude, Codex, and Cursor hooks can evaluate the engine's local Project
@@ -62,7 +62,7 @@ on macOS, Linux and Windows rather than relying on a LaunchAgent environment.
 Explicit disablement and a complete explicit executable/checksum pair win over
 the saved declaration. Partial environment overrides are never mixed with a
 different file's checksum. The supervisor still verifies the executable's bytes
-before launch. Windows clients derive a local named pipe from the normalized
+before launch. Its child process receives a minimum 32 MiB Rust worker stack: the default stack aborts the native parser on long, valid Rust syntax trees. Larger explicit reserves are retained. The parent process environment, Engine enablement and project policy settings are unchanged. This is a worker stack reserve, not a scan timeout or a guarantee that arbitrary inputs cannot exhaust resources. Windows clients derive a local named pipe from the normalized
 configuration path; remote shares never become Engine endpoints.
 The paired monitor installs the pinned managed Engine in the background when
 needed. Catalog delivery does not await that download. Failed preparation retries

package/apps/bridge/src/engine/distribution/artifacts.ts

@@ -8,8 +8,8 @@ export type EngineArtifact = {
 
 /** Release hashes are part of the reviewed MCP, never supplied by a remote manifest. */
 export const ENGINE_ARTIFACTS: readonly EngineArtifact[] = [
-  { version: "0.1.3", platform: "darwin", arch: "arm64",
-    sha256: "d948b6cfc572fa062af602c72d7b0e14bedcc5b48ecb8fb8d7af5b6fc33e9920", bytes: 12185568 },
+  { version: "0.1.4", platform: "darwin", arch: "arm64",
+    sha256: "0eda3a158b84305802342cff77af7a7c24fecd5eafb25fad394e61edad53fbec", bytes: 12202064 },
   { version: "0.1.2", platform: "darwin", arch: "x64",
     sha256: "b3235a15936a77ec323d5ecbc54a0bc19994fe6e5a36044da964b68524b4c1dd", bytes: 13944984 },
   { version: "0.1.2", platform: "linux", arch: "x64",

package/apps/bridge/src/engine/runtime/engine-supervisor.ts

@@ -8,7 +8,7 @@ import { configDir } from "../../config/runtime/paths";
 import { EngineClient } from "./engine-client";
 import { engineHealth, type EngineHealth } from "./engine-health";
 import { EngineProtocolError } from "../protocol/engine-protocol";
-import { engineSocketEndpoint } from "../startup";
+import { engineLaunchEnvironment } from "./launch";
 
 export type VerifiedEngineBinary = { path: string; sha256: string };
 
@@ -133,8 +133,7 @@ function configuredBinary(env: NodeJS.ProcessEnv): VerifiedEngineBinary | undefi
 
 function launchEngine(path: string, socketPath: string, env: NodeJS.ProcessEnv): ChildProcess {
   const child = spawn(path, [], {
-    env: { ...env, GRANTTAP_ENGINE_SOCKET: engineSocketEndpoint(socketPath),
-      ...(process.platform === "win32" ? { GRANTTAP_ENGINE_STATE_DIR: join(configDir(), "engine", "state") } : {}) },
+    env: engineLaunchEnvironment(env, socketPath),
     stdio: "ignore",
     shell: false,
   });

package/apps/bridge/src/engine/runtime/launch/README.md

@@ -0,0 +1,18 @@
+# Engine process launch
+
+`index.ts` prepares the verified Engine child's environment. Rust parser workers
+receive a minimum 32 MiB stack reserve; larger explicit reserves remain intact.
+This prevents the reproduced daemon abort on long Rust expression trees. It does
+not change the parent environment, enablement, policy, or provider settings.
+Windows keeps its private Engine state directory and local endpoint mapping.
+
+The native regression analyzes a real synthetic Rust checkout through
+`EngineSupervisor` and confirms Graph data plus a subsequent control ping.
+Environment tests cover disablement, invalid and larger reserves, parent
+immutability and Windows state placement. Set `GRANTTAP_ENGINE_TEST_BINARY` to
+an exact verified native binary to run the native case.
+
+This is a fixed worker reserve, not a guarantee against arbitrary resource
+exhaustion. [Engine bridge](../../README.md) owns the public runtime boundary.
+
+License: GrantTap Commercial Source License; see the repository-root `LICENSE`.

package/apps/bridge/src/engine/runtime/launch/index.ts

@@ -0,0 +1,21 @@
+import { join } from "node:path";
+import { configDir } from "../../../config/runtime/paths";
+import { engineSocketEndpoint } from "../../startup";
+
+const MINIMUM_PARSER_STACK_BYTES = 32 * 1_024 * 1_024;
+
+/** Native syntax parsing runs on Rust worker threads, outside the JS stack. */
+export function engineLaunchEnvironment(
+  env: NodeJS.ProcessEnv, socketPath: string, platform: NodeJS.Platform = process.platform,
+): NodeJS.ProcessEnv {
+  const requestedStack = Number(env.RUST_MIN_STACK);
+  return {
+    ...env,
+    GRANTTAP_ENGINE_SOCKET: engineSocketEndpoint(socketPath),
+    // Rust's default worker stack aborts the daemon on ordinary long ASTs.
+    // Scope this reserve to the verified Engine child; keep larger explicit reserves.
+    RUST_MIN_STACK: String(Number.isSafeInteger(requestedStack)
+      ? Math.max(MINIMUM_PARSER_STACK_BYTES, requestedStack) : MINIMUM_PARSER_STACK_BYTES),
+    ...(platform === "win32" ? { GRANTTAP_ENGINE_STATE_DIR: join(configDir(), "engine", "state") } : {}),
+  };
+}

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.104
+npm install -g granttap-mcp@0.8.106
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.104\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.106\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.104";
+const PACKAGE = "granttap-mcp@0.8.106";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.104",
+  "version": "0.8.106",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {

package/packages/protocol/messages/interaction/index.ts

@@ -49,6 +49,8 @@ export const UserMessage = z.object({
   agent: CodingAgent.optional(),
   cwd: z.string().max(4_096).optional(),
   requestId: z.string().optional(),
+  /** Explicit compatible opt-in for native question file/image replies. */
+  questionReplyFormat: z.literal("attachments-v1").optional(),
   sessionId: z.string().optional(),
   attachments: z.array(UserAttachment).max(MAX_USER_ATTACHMENTS).optional(),
   /** Attachments that came ahead of this message, by id. */
@@ -122,6 +124,8 @@ export const AgentEvent = z.object({
   type: z.literal("agent.event"),
   text: z.string(),
   requestId: z.string().optional(),
+  /** Explicit compatible opt-in for native question file/image replies. */
+  questionReplyFormat: z.literal("attachments-v1").optional(),
   kind: z.enum(["question", "status", "response"]).optional(),
   sessionId: z.string().optional(),
   agent: CodingAgent.optional(),