granttap-mcp 0.8.116 → 0.8.117

package/apps/bridge/src/codex-questions/README.md

@@ -32,3 +32,9 @@ answer, image and file payload together; ordinary encrypted attachment transport
 Task policy, native-owner admission and stable question idempotency still apply.
 Legacy text-only replies keep their existing contract. Files remain available
 for the admitted native turn; another phone cannot start a second answer.
+
+Notification refresh can name one request through `sessions.refresh.notificationRequestId`.
+Recovery checks the private request's owning room, restores a discovered source only
+inside the native Codex sessions root, and sends that exact question or its terminal
+state through the priority device channel. It does not require an admitted catalog,
+start a provider turn, send another wake notification, or schedule a full scan.

package/apps/bridge/src/codex-questions/index.ts

@@ -1,6 +1,6 @@
 import type { RelayClient } from '../../../../packages/core/relay-client';
 import type { SessionInfo, UserMessage } from '../../../../packages/protocol/schema';
-import { nativeTranscriptSource } from '../sessions';
+import { nativeTranscriptSource, restoreNativeTranscriptSource } from '../sessions';
 import { handleInboundUserMessage } from '../monitor/message-delivery';
 import { sendDeliveryReceipt } from '../monitor/handlers/receipts';
 import { nativeAnswerEnvelope } from './observations';
@@ -12,7 +12,7 @@ const RETENTION_MS = 24 * 60 * 60_000;
 
 /** Phone questions travel as device-encrypted control events, independently of task-key grants. */
 export async function publishCodexQuestions(client: RelayClient, sessions: SessionInfo[],
-  options: { replay?: boolean; peerPublicKey?: string } = {}): Promise<void> {
+  options: { replay?: boolean; peerPublicKey?: string; requestId?: string } = {}): Promise<void> {
   for (const session of sessions.filter(s => s.agent === 'codex')) {
     const path = nativeTranscriptSource(session);
     if (!path) continue;
@@ -22,9 +22,11 @@ export async function publishCodexQuestions(client: RelayClient, sessions: Sessi
     for (const question of observed.questions) {
       if (Date.now() - question.createdAt > RETENTION_MS) continue;
       const existing = readQuestion(question.requestId);
-      if (!existing) saveQuestion({ ...question, room: client.room });
+      if (!existing) saveQuestion({ ...question, room: client.room, sourcePath: path });
+      else if (existing.room === client.room && existing.sourcePath !== path) saveQuestion({ ...existing, sourcePath: path });
     }
-    const records = storedQuestions().filter(q => q.room === client.room && q.sessionId === session.sessionId)
+    const records = storedQuestions().filter(q => q.room === client.room && q.sessionId === session.sessionId
+      && (!options.requestId || q.requestId === options.requestId))
       .sort((a, b) => a.createdAt - b.createdAt || a.index - b.index);
     for (const record of records) {
       const expired = Date.now() - record.createdAt > RETENTION_MS;
@@ -44,7 +46,7 @@ export async function publishCodexQuestions(client: RelayClient, sessions: Sessi
           sessionId: session.sessionId, agent: 'codex', projectId: session.projectId,
           taskId: session.taskId, computerId: session.computerId, text, createdAt: record.createdAt },
         'phone', { ttlMs: Math.max(1, record.createdAt + RETENTION_MS - Date.now()),
-          wake: !record.announced, peerPublicKey: options.peerPublicKey,
+          wake: !record.announced, urgent: true, peerPublicKey: options.peerPublicKey,
           deliveryId: 'native-question-' + record.requestId });
         saveQuestion({ ...record, announced: true });
       }
@@ -52,6 +54,20 @@ export async function publishCodexQuestions(client: RelayClient, sessions: Sessi
   }
 }
 
+/** Restore one notification from private owned records; catalog discovery is not a prerequisite. */
+export async function replayCodexQuestion(client: RelayClient, requestId: string, peerPublicKey?: string): Promise<boolean> {
+  if (!peerPublicKey) return false;
+  const record = readQuestion(requestId);
+  if (!record || record.room !== client.room) return false;
+  const identity = { sessionId: record.sessionId, agent: 'codex' as const };
+  if (!nativeTranscriptSource(identity)
+    && (!record.sourcePath || !restoreNativeTranscriptSource(identity, record.sourcePath))) return false;
+  const session: SessionInfo = { ...identity, state: 'idle', startedAt: record.createdAt,
+    lastActivityAt: record.createdAt, tokensSession: 0, tokensLastTurn: 0 };
+  await publishCodexQuestions(client, [session], { replay: true, peerPublicKey, requestId });
+  return true;
+}
+
 /** Reuse ordinary scoped delivery, policy and receipts; only the human's explicit answer is wrapped. */
 export async function handleCodexQuestionReply(client: RelayClient, message: UserMessage,
   publish: () => Promise<void>, peerPublicKey?: string,

package/apps/bridge/src/codex-questions/records.ts

@@ -7,6 +7,7 @@ import { questionId } from './observations';
 const Record = z.object({ requestId: z.string(), sessionId: z.string(), callId: z.string(),
   index: z.number().int().min(0).max(3), question: z.string().max(2_000),
   options: z.array(z.string().max(512)).max(8), createdAt: z.number(), room: z.string(),
+  sourcePath: z.string().min(1).max(4096).optional(),
   announced: z.boolean().optional(), answered: z.boolean().optional(), resolvedSent: z.boolean().optional() });
 export type QuestionRecord = z.infer<typeof Record>;
 const directory = () => join(configDir(), 'codex-question-records');

package/apps/bridge/src/monitor/handlers/inbound.ts

@@ -47,7 +47,7 @@ import { handleControllerPairRequest, handleInboundKnowledgeWrite } from "../con
 import { acceptPhoneAccountLink } from "../../account-recovery/phone-link";
 import { approvalsStatus } from '../../approvals/state';
 import { handleDeliveryReceiptQuery } from '../message-delivery/status-query';
-import { handleCodexQuestionReply, publishCodexQuestions } from '../../codex-questions';
+import { handleCodexQuestionReply, publishCodexQuestions, replayCodexQuestion } from '../../codex-questions';
 import { publishedCatalog } from '../../session-catalog';
 
 export async function handleMonitorMessage(
@@ -205,6 +205,10 @@ async function handleInboundRefresh(
   // Notification actions must not wait behind provider scans or graph analysis.
   await client.send(approvalsStatus(), 'phone', { peerPublicKey, reliable: false, ttlMs: 90_000 })
     .catch(() => {});
+  if (payload.notificationRequestId) {
+    await replayCodexQuestion(client, payload.notificationRequestId, peerPublicKey).catch(() => false);
+    return true;
+  }
   const known = publishedCatalog(client);
   if (known) await publishCodexQuestions(client, [...known.sessions, ...(known.history ?? [])],
     { replay: true, peerPublicKey }).catch(() => {});

package/apps/bridge/src/sessions/native-source.ts

@@ -17,7 +17,7 @@ export function nativeTranscriptSource(session: Pick<SessionInfo, 'agent' | 'ses
 }
 
 /** Restore an owned native source without walking every provider's logs. */
-export function restoreNativeTranscriptSource(session: SessionInfo, path: string): boolean {
+export function restoreNativeTranscriptSource(session: Pick<SessionInfo, 'agent' | 'sessionId'>, path: string): boolean {
   if (!["claude", "codex"].includes(session.agent)
     || !/^[a-zA-Z0-9-]{1,128}$/.test(session.sessionId)) return false;
   const name = basename(path);

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.116
+npm install -g granttap-mcp@0.8.117
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.116\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.117\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.116";
+const PACKAGE = "granttap-mcp@0.8.117";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.116",
+  "version": "0.8.117",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {

package/packages/protocol/messages/interaction/index.ts

@@ -161,5 +161,6 @@ export const SessionsRefresh = z.object({
   createdAt: z.number(),
   graphProjectId: z.string().min(1).max(128).optional(),
   graphAnalysisRequestId: z.string().min(1).max(128).optional(),
+  notificationRequestId: z.string().min(1).max(256).optional(),
 });
 export type SessionsRefresh = z.infer<typeof SessionsRefresh>;