granttap-mcp 0.8.15 → 0.8.17

package/LICENSE

@@ -1,86 +1,21 @@
-GrantTap Commercial Source License 1.0
-
-Copyright (c) 2026 Serhii Ziborov. All rights reserved.
-
-This license governs the source code and software distributed from the
-granttap-mcp repository and package (the "Software"), except for third-party
-components that identify their own license terms.
-
-1. Definitions
-
-"GrantTap" means Serhii Ziborov doing business as GrantTap.
-
-"Authorized Access" means an active paid GrantTap subscription, an official
-GrantTap trial, or a separate written commercial agreement with GrantTap.
-
-"Authorized User" means a person or legal entity covered by Authorized Access.
-
-2. Source inspection and contribution
-
-You may download, inspect, and make local modifications to the source solely to
-evaluate the Software, perform security review, or prepare a contribution to
-the official GrantTap repository. You may create a public fork solely for that
-contribution workflow if the fork retains this license and does not publish a
-release, binary, hosted service, or independently usable distribution.
-
-These rights do not permit production use, commercial use, or use to provide a
-service to another person.
-
-3. Authorized product use
-
-During Authorized Access, GrantTap grants the Authorized User a limited,
-non-exclusive, non-transferable, non-sublicensable license to install, execute,
-and internally modify the Software on devices the Authorized User owns or
-controls, solely to use the official GrantTap product and services.
-
-When Authorized Access ends, the Authorized User must stop using the Software
-except where a separate written agreement says otherwise.
-
-4. Restrictions
-
-Unless GrantTap gives prior written permission, you may not:
-
-- sell, sublicense, redistribute, or publish the Software or a derivative work;
-- offer the Software or a derivative work as a hosted or managed service;
-- use the Software to build or operate a competing product or service;
-- use the Software as a standalone general-purpose coding-agent runtime outside
-  the official GrantTap product;
-- bypass subscription, license, access-control, or entitlement checks;
-- remove or alter copyright, license, attribution, or proprietary notices; or
-- use GrantTap names or marks to imply endorsement of a modified distribution.
-
-5. Ownership
-
-The Software is licensed, not sold. GrantTap retains all right, title, and
-interest in the Software and its derivative works. No trademark, patent, or
-other rights are granted except the limited copyright rights stated here.
-
-6. Third-party components
-
-Third-party components remain governed by their respective licenses. Those
-licenses and notices are not replaced by this license. See
-THIRD_PARTY_NOTICES.md where distributed.
-
-7. Termination
-
-This license terminates automatically if you breach its terms. On termination,
-you must stop using and distributing the Software and delete copies that you
-are not legally required to retain. Sections 4 through 9 survive termination.
-
-8. Disclaimer of warranty
-
-THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF
-ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
-
-9. Limitation of liability
-
-TO THE MAXIMUM EXTENT PERMITTED BY LAW, GRANTTAP AND ITS CONTRIBUTORS WILL NOT
-BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR
-PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS, REVENUE, OR BUSINESS, ARISING
-FROM OR RELATED TO THE SOFTWARE OR THIS LICENSE.
-
-10. Commercial terms
-
-Authorized Access, pricing, and separate commercial licenses are available
-through https://granttap.com.
+MIT License
+
+Copyright (c) 2026 Serhii Ziborov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -2,7 +2,7 @@
 
 [![npm](https://img.shields.io/npm/v/granttap-mcp)](https://www.npmjs.com/package/granttap-mcp)
 [![CI](https://github.com/sergii-ziborov/granttap-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/sergii-ziborov/granttap-mcp/actions/workflows/ci.yml)
-[![License](https://img.shields.io/badge/license-GrantTap%20Commercial-7c3aed.svg)](LICENSE)
+[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 GrantTap is a Personal live control center for local coding agents.
 
@@ -13,9 +13,9 @@ hooks, local adapters, and TypeScript wire schemas. Agents and provider
 credentials stay on your computer. Native iPhone and Apple Watch traffic is
 end-to-end encrypted.
 
-The source is public for inspection and contribution, but GrantTap MCP is
-proprietary paid software rather than open source. Production use requires an
-active GrantTap subscription or a separate commercial agreement.
+The MCP runtime, plugins, and CLI are open source under the MIT License. The
+iPhone and Apple Watch app is a separate, proprietary product; use of GrantTap's
+hosted service is governed by its own terms.
 
 [Website](https://granttap.com) · [npm](https://www.npmjs.com/package/granttap-mcp) ·
 [Security model](SECURITY.md) ·
@@ -204,8 +204,8 @@ history stays on the device.
 
 ## Install
 
-Installation and production use require Authorized Access under the
-[GrantTap Commercial Source License](LICENSE).
+The local runtime and plugins are available under the [MIT License](LICENSE).
+The iPhone and Apple Watch app and hosted service have separate terms.
 
 Install the GrantTap plugin directly from this repository's marketplace:
 
@@ -223,7 +223,8 @@ grok plugin marketplace add sergii-ziborov/granttap-mcp
 grok plugin install granttap --trust
 ```
 
-Install **GrantTap** from the Cursor plugin marketplace, then open
+Import `sergii-ziborov/granttap-mcp` as a private Git plugin in Cursor. The
+MIT-licensed plugin is ready for Cursor's public review. Reload Cursor, then open
 **Cursor Customize → MCPs → GrantTap → Authenticate**. Complete authorization
 and any one-time QR pairing on `https://granttap.com/connect`.
 
@@ -520,9 +521,8 @@ typecheck, and release checks pass.
 
 ## License
 
-GrantTap MCP is distributed under the proprietary
-[GrantTap Commercial Source License 1.0](LICENSE). Public source access does not
-grant open-source, redistribution, hosted-service, or competing-product rights.
+GrantTap MCP, its CLI, and bundled plugins are distributed under the
+[MIT License](LICENSE). The iPhone and Apple Watch app is licensed separately.
 Third-party dependencies retain their own terms; see
 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
 

package/THIRD_PARTY_NOTICES.md

@@ -1,8 +1,8 @@
 # Third-party notices
 
-GrantTap MCP is proprietary software distributed under the GrantTap Commercial
-Source License. Third-party components retain their own licenses; the GrantTap
-license does not replace or restrict those terms.
+GrantTap MCP is distributed under the MIT License. Third-party components
+retain their own licenses; the GrantTap license does not replace or restrict
+those terms.
 
 The npm package declares, rather than vendors, these direct runtime
 dependencies. Their packages carry the applicable license texts:

package/apps/bridge/src/capabilities/README.md

@@ -2,4 +2,4 @@
 
 This module discovers provider-configured MCP servers and available skills. Metadata probing is isolated because it may start an MCP transport; local descriptors and skill discovery remain read-only.
 
-License: this module is distributed under the GrantTap Commercial Source License in the repository-root `LICENSE` file.
+License: this module is distributed under the MIT License in the repository-root `LICENSE` file.

package/apps/bridge/src/config/README.md

@@ -6,5 +6,5 @@ and device pairing serialization. `../config.ts` is its public entry point.
 Behavior is covered by `tests/config.test.ts`, `tests/capabilities.test.ts`, and
 `tests/core.test.ts`.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/engine/README.md

@@ -21,5 +21,5 @@ its 50 ms policy budget.
 
 The proprietary engine source and Project database do not live in this package.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/machine-load/README.md

@@ -6,5 +6,5 @@ catalogs. `index.ts` assembles and publishes the bounded wire payload,
 the latest provider discovery cost, and `loop.ts` runs the independent adaptive
 five-second active / thirty-second idle cadence from cached session status.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/mesh/README.md

@@ -62,5 +62,5 @@ installed provider, and periodically projects the canonical policy plus current
 coverage back to the phone. Engine or feature unavailability leaves existing
 GrantTap behavior intact; strict fail-closed decisions remain on the hook path.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/policy/README.md

@@ -19,5 +19,5 @@ forces the existing GrantTap approval path. Cursor evaluates Project policy
 directly in its shell and MCP hooks; MCP evidence contains only bounded names,
 transport, and a configuration SHA-256, never the descriptor or call arguments.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/reply/README.md

@@ -6,5 +6,5 @@ This module prepares phone attachments, routes selected MCP/skill intent, and ru
 handoff resumes the same Task on another agent or computer. Providers without an
 implemented remote-start path fail closed instead of reporting parity.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/sessions/cursor/README.md

@@ -5,5 +5,5 @@ summaries, visible activity, and capability observations. `../cursor.ts` is the
 public entry point. Characterization coverage lives in `tests/sessions.test.ts`,
 `tests/agentic-sessions.test.ts`, and the provider capability suites.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/sessions/telemetry/README.md

@@ -5,5 +5,5 @@ bounded context cost; and limits encrypted usage payloads. `../telemetry.ts` is
 the public entry point. Tests live in `tests/provider-capability-telemetry.test.ts`
 and `tests/provider-capability-bounds.test.ts`.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/bridge/src/windows-service.ts

@@ -1,6 +1,6 @@
 /** Per-user Windows Task Scheduler jobs for the loopback MCP and phone monitor. */
 import { spawnSync } from "node:child_process";
-import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { configDir } from "./config";
 import type { InstallResult } from "./install";
@@ -18,7 +18,7 @@ function xml(value: string): string {
     .replaceAll(">", ">").replaceAll('"', """).replaceAll("'", "'");
 }
 
-export function windowsTaskDefinition(job: WindowsJob, node: string, launcher: string, owner = "TestUser"): string {
+export function windowsTaskDefinition(job: WindowsJob, node: string, launcher: string, owner = "TestUser", version = "0.0.0"): string {
   const date = new Date(Date.now() - 60_000);
   const local = new Date(date.getTime() - date.getTimezoneOffset() * 60_000);
   const start = local.toISOString().slice(0, 19);
@@ -26,6 +26,7 @@ export function windowsTaskDefinition(job: WindowsJob, node: string, launcher: s
   return [
     '<?xml version="1.0" encoding="UTF-16"?>',
     '<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">',
+    `<RegistrationInfo><Description>GrantTap ${xml(version)} ${job}</Description></RegistrationInfo>`,
     "<Triggers><TimeTrigger>", `<StartBoundary>${start}</StartBoundary>`,
     "<Enabled>true</Enabled><Repetition><Interval>PT1M</Interval></Repetition>",
     "</TimeTrigger></Triggers>",
@@ -85,14 +86,22 @@ export function installWindowsTask(job: WindowsJob, node: string, launcher: stri
   }
   const owner = identity();
   if (!owner) return { status: "manual", detail: "Could not identify the current Windows user." };
+  let version: string;
+  try {
+    version = (JSON.parse(readFileSync(join(dirname(launcher), "..", "package.json"), "utf8")) as { version: string }).version;
+    if (!/^\d+\.\d+\.\d+$/.test(version)) throw new Error("invalid version");
+  } catch {
+    return { status: "manual", detail: "Installed GrantTap package version could not be read." };
+  }
   const path = taskFile(job);
-  const definition = windowsTaskDefinition(job, node, launcher, owner);
+  const definition = windowsTaskDefinition(job, node, launcher, owner, version);
   const previousCommand = previous?.match(/<Command>([^<]*)<\/Command>/)?.[1];
   const previousArgs = previous?.match(/<Arguments>([^<]*)<\/Arguments>/)?.[1];
   const normalizedArgs = previousArgs?.replaceAll("&quot;", '"').replaceAll("&amp;", "&");
   const already = previousCommand === xml(node)
     && normalizedArgs === `"${launcher}" internal ${job === "http" ? "serve" : "monitor"}`
-    && previous?.includes("<Interval>PT1M</Interval>") === true;
+    && previous?.includes("<Interval>PT1M</Interval>") === true
+    && previous.includes(`<Description>GrantTap ${version} ${job}</Description>`);
   if (already && !forceReload && inspectWindowsTask(job).running) return { status: "already", detail: names[job] };
   mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
   // Task Scheduler reads an XML file; keep it private to this user's config directory.
@@ -102,7 +111,9 @@ export function installWindowsTask(job: WindowsJob, node: string, launcher: stri
   });
   unlinkSync(path);
   if (created.status !== 0) return { status: "manual", detail: `${names[job]} could not be registered for this Windows user.` };
-  if (forceReload && previous) spawnSync("schtasks.exe", ["/End", "/TN", names[job]], { windowsHide: true });
+  if (previous && (forceReload || !already)) {
+    spawnSync("schtasks.exe", ["/End", "/TN", names[job]], { windowsHide: true });
+  }
   const started = spawnSync("schtasks.exe", ["/Run", "/TN", names[job]], { encoding: "utf8", windowsHide: true });
   return started.status === 0
     ? { status: already ? "already" : "installed", detail: names[job] }

package/apps/mcp/src/connection-center/README.md

@@ -30,5 +30,5 @@ or replace the local provider runtime.
 Tests in `tests/` exercise isolated keys, a loopback encrypted phone connection,
 expiry, non-mutating status, and actual DOM button/host-message behavior.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.

package/apps/mcp/src/http-service/README.md

@@ -2,4 +2,4 @@
 
 This module installs and verifies the optional macOS LaunchAgent that keeps Cursor's loopback OAuth MCP endpoint available. The installer validates every executable and restores the exact prior owned plist after a failed repair.
 
-License: this module is distributed under the GrantTap Commercial Source License in the repository-root `LICENSE` file.
+License: this module is distributed under the MIT License in the repository-root `LICENSE` file.

package/apps/mcp/src/mcp-tools/README.md

@@ -24,7 +24,7 @@ credential, policy revision, expiry, actor, Project scope, and operation on ever
 call, and can never create invites, expand scope, change the relay, or reach
 `setup`.
 
-License: this module is distributed under the GrantTap Commercial Source License
+License: this module is distributed under the MIT License
 in the repository-root `LICENSE` file.
 
 The connection center lives in `../connection-center`. Status requests are

package/apps/mcp/src/oauth/README.md

@@ -2,4 +2,4 @@
 
 This module owns local MCP OAuth client persistence and token issuance. The OAuth authorization endpoint immediately redirects to `https://granttap.com/connect`; the website reads a short-lived request through the loopback helper, while pairing keys remain on the computer and phone. The local service never renders a user-facing consent page.
 
-License: this module is distributed under the GrantTap Commercial Source License in the repository-root `LICENSE` file.
+License: this module is distributed under the MIT License in the repository-root `LICENSE` file.

package/cursor-plugin/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "granttap",
   "displayName": "GrantTap",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Connect Cursor to GrantTap through granttap.com/connect, pair your phone with a one-time QR, and keep approvals in the originating chat.",
   "author": {
     "name": "GrantTap",
@@ -11,7 +11,7 @@
   "publisher": "GrantTap",
   "homepage": "https://granttap.com",
   "repository": "https://github.com/sergii-ziborov/granttap-mcp",
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "MIT",
   "category": "integrations",
   "keywords": [
     "granttap",

package/cursor-plugin/LICENSE

@@ -1,86 +1,21 @@
-GrantTap Commercial Source License 1.0
-
-Copyright (c) 2026 Serhii Ziborov. All rights reserved.
-
-This license governs the source code and software distributed from the
-granttap-mcp repository and package (the "Software"), except for third-party
-components that identify their own license terms.
-
-1. Definitions
-
-"GrantTap" means Serhii Ziborov doing business as GrantTap.
-
-"Authorized Access" means an active paid GrantTap subscription, an official
-GrantTap trial, or a separate written commercial agreement with GrantTap.
-
-"Authorized User" means a person or legal entity covered by Authorized Access.
-
-2. Source inspection and contribution
-
-You may download, inspect, and make local modifications to the source solely to
-evaluate the Software, perform security review, or prepare a contribution to
-the official GrantTap repository. You may create a public fork solely for that
-contribution workflow if the fork retains this license and does not publish a
-release, binary, hosted service, or independently usable distribution.
-
-These rights do not permit production use, commercial use, or use to provide a
-service to another person.
-
-3. Authorized product use
-
-During Authorized Access, GrantTap grants the Authorized User a limited,
-non-exclusive, non-transferable, non-sublicensable license to install, execute,
-and internally modify the Software on devices the Authorized User owns or
-controls, solely to use the official GrantTap product and services.
-
-When Authorized Access ends, the Authorized User must stop using the Software
-except where a separate written agreement says otherwise.
-
-4. Restrictions
-
-Unless GrantTap gives prior written permission, you may not:
-
-- sell, sublicense, redistribute, or publish the Software or a derivative work;
-- offer the Software or a derivative work as a hosted or managed service;
-- use the Software to build or operate a competing product or service;
-- use the Software as a standalone general-purpose coding-agent runtime outside
-  the official GrantTap product;
-- bypass subscription, license, access-control, or entitlement checks;
-- remove or alter copyright, license, attribution, or proprietary notices; or
-- use GrantTap names or marks to imply endorsement of a modified distribution.
-
-5. Ownership
-
-The Software is licensed, not sold. GrantTap retains all right, title, and
-interest in the Software and its derivative works. No trademark, patent, or
-other rights are granted except the limited copyright rights stated here.
-
-6. Third-party components
-
-Third-party components remain governed by their respective licenses. Those
-licenses and notices are not replaced by this license. See
-THIRD_PARTY_NOTICES.md where distributed.
-
-7. Termination
-
-This license terminates automatically if you breach its terms. On termination,
-you must stop using and distributing the Software and delete copies that you
-are not legally required to retain. Sections 4 through 9 survive termination.
-
-8. Disclaimer of warranty
-
-THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF
-ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
-
-9. Limitation of liability
-
-TO THE MAXIMUM EXTENT PERMITTED BY LAW, GRANTTAP AND ITS CONTRIBUTORS WILL NOT
-BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR
-PUNITIVE DAMAGES, OR FOR LOSS OF DATA, PROFITS, REVENUE, OR BUSINESS, ARISING
-FROM OR RELATED TO THE SOFTWARE OR THIS LICENSE.
-
-10. Commercial terms
-
-Authorized Access, pricing, and separate commercial licenses are available
-through https://granttap.com.
+MIT License
+
+Copyright (c) 2026 Serhii Ziborov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/cursor-plugin/README.md

@@ -6,8 +6,7 @@ each phone response tied to the exact originating chat and prompt.
 
 ## Connect Cursor
 
-Install the supported CLI and the GrantTap plugin from Cursor's marketplace,
-then run:
+Install the supported CLI on this computer, then run:
 
 ```bash
 npm install -g granttap-mcp
@@ -39,12 +38,26 @@ The OAuth service listens only at `http://127.0.0.1:17342/mcp`. Cursor cannot
 show **Authenticate** for a stdio (`command`/`args`) MCP entry, so do not replace the
 plugin's HTTP configuration with stdio.
 
-## Install from the Cursor marketplace
-
-Install **GrantTap** from Cursor's plugin marketplace, then reload Cursor.
-The plugin adds the `/connect` command, a connect skill, and the
-exact-correlation rule; `granttap setup` still configures the MCP endpoint
-itself.
+## Install the Cursor plugin
+
+The plugin is MIT-licensed and available as a private Git import:
+`sergii-ziborov/granttap-mcp`. A public Cursor Marketplace listing requires
+manual review. Reload Cursor after import.
+The private listing is tied to the version imported on that computer; re-import
+it to pick up the current orange icon and plugin changes. If a public listing
+is later approved, install **GrantTap** from Cursor's marketplace to receive
+its reviewed updates. The plugin adds the `/connect` command, a connect
+skill, and the exact-correlation rule; `granttap setup` configures the local
+MCP endpoint separately.
+
+If Customize shows both a lowercase **granttap** entry with a generic cube and
+an older green **GrantTap** entry, those are saved imports from earlier versions.
+Remove both old imports in Cursor, import `sergii-ziborov/granttap-mcp` once at
+the user scope, and reload Cursor. Keep the single **GrantTap** entry with the
+orange check-and-wave icon. On the same computer, rerun `granttap setup` and
+`granttap status` so the MCP service and hooks point to the permanent npm install
+instead of an old temporary path. A workspace-scoped import is not needed when
+the user-scoped plugin is already installed.
 
 ## Exact dual-channel behavior
 
@@ -58,7 +71,6 @@ prompt must never resolve the current request.
 | Path | Purpose |
 | --- | --- |
 | `.cursor-plugin/plugin.json` | Cursor plugin manifest |
-| `.cursor-plugin/marketplace.json` | Plugin-local marketplace metadata |
 | `../.cursor-plugin/marketplace.json` | Repository marketplace index Cursor publishes |
 | `mcp.json` | Loopback Streamable HTTP MCP endpoint |
 | `assets/logo.svg` | Plugin logo |
@@ -71,5 +83,5 @@ Troubleshooting details live in
 
 ## License
 
-The plugin is distributed under the GrantTap Commercial Source License included
-in this directory. Production use requires Authorized Access to GrantTap.
+The plugin is distributed under the [MIT License](LICENSE). The GrantTap iPhone
+and Apple Watch app and hosted service have separate terms.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.15",
+  "version": "0.8.17",
   "description": "Personal live control center runtime for local coding agents on iPhone and Apple Watch.",
   "type": "module",
   "bin": {
@@ -73,7 +73,7 @@
     "e2ee",
     "approvals"
   ],
-  "license": "SEE LICENSE IN LICENSE",
+  "license": "MIT",
   "publishConfig": {
     "access": "public"
   },

package/packages/protocol/messages/README.md

@@ -22,4 +22,4 @@ claim a provider can block an action when it cannot.
 
 Tests are discoverable in `tests/core.test.ts` and the feature-level bridge and MCP suites.
 
-License: this module is distributed under the GrantTap Commercial Source License in the repository-root `LICENSE` file.
+License: this module is distributed under the MIT License in the repository-root `LICENSE` file.

package/cursor-plugin/.cursor-plugin/marketplace.json

@@ -1,18 +0,0 @@
-{
-  "name": "granttap",
-  "owner": {
-    "name": "GrantTap",
-    "email": "support@granttap.com"
-  },
-  "metadata": {
-    "description": "GrantTap for Cursor — authorize on granttap.com/connect and approve local tasks from your phone",
-    "version": "0.1.6"
-  },
-  "plugins": [
-    {
-      "name": "granttap",
-      "source": "./",
-      "description": "Authorize Cursor on granttap.com/connect, pair by QR, and keep each approval in its originating chat"
-    }
-  ]
-}