granttap-mcp 0.8.46 → 0.8.47

package/README.md

@@ -17,6 +17,12 @@ adapters, and wire contracts. It powers Project Mesh, Governance, and observed
 usage while agents and provider credentials stay on your computer. Controller
 traffic is end-to-end encrypted.
 
+Known chats are read from their published native identities, without another
+walk through every provider log. The local helper retains a private metadata
+index so a restart can send current heads of the saved Now chats before a fresh
+discovery scan. The Apple clients keep downloaded conversations, pictures, and
+Mesh data locally for offline use; clearing that cache preserves the account login.
+
 The MCP runtime, plugins, and CLI are open source under the MIT License.
 The Apple apps, Engine, relay, and website are separately licensed commercial
 products or source. Their licenses do not change this repository's MIT grant.

package/apps/bridge/src/config/index.ts

@@ -1,6 +1,7 @@
 /** Public entry point for local bridge configuration and pairing. */
 export * from "./access/capability-policy";
 export * from "./access/pairing";
+export { writePrivateFile } from "./access/write-private";
 export * from "./runtime/paths";
 export * from "./runtime";
 export {

package/apps/bridge/src/monitor/handlers/catalog.ts

@@ -3,6 +3,7 @@ import type { RelayClient } from "../../../../../packages/core/relay-client";
 import { sendSessionPayload } from "../../host/session-keys";
 import { cachedSessionActivity } from "../support/session-activity";
 import { readTranscriptHistory } from "../../transcript-history";
+import { publishedSession } from "../../session-catalog";
 import { activityWithImages } from '../../session-images';
 import {
   scanSessionHistory,
@@ -38,11 +39,13 @@ export function boundedCatalogHistory(
   return [...pinned, ...rest].sort((a, b) => b.lastActivityAt - a.lastActivityAt);
 }
 
-function resolveSession(sessionId: string, status?: SessionsStatus): SessionInfo | undefined {
+function resolveSession(client: RelayClient, sessionId: string, status?: SessionsStatus): SessionInfo | undefined {
   if (status) {
     return status.sessions.find((session) => session.sessionId === sessionId)
       ?? status.history?.find((session) => session.sessionId === sessionId);
   }
+  const known = publishedSession(client, sessionId);
+  if (known) return known;
   return scanSessions().sessions.find((session) => session.sessionId === sessionId)
     ?? scanSessionHistory().find((session) => session.sessionId === sessionId);
 }
@@ -55,7 +58,7 @@ export async function publishSessionEvents(
   threadId?: string,
   history?: { history?: boolean; historyCursor?: string },
 ): Promise<boolean> {
-  const session = resolveSession(sessionId, status);
+  const session = resolveSession(client, sessionId, status);
   if (!session) return false;
   const activity = threadId ? scanThreadActivity(session, threadId)
     : (history?.history ? readTranscriptHistory(session, history.historyCursor) : undefined)

package/apps/bridge/src/monitor/support/runtime.ts

@@ -21,6 +21,7 @@ import { confirmPendingController } from "../../pairing/controllers";
 import { recordControllerName } from "../../pairing/presence";
 import { startPublishLoop } from "./publish-loop";
 import { singleFlightPublisher } from "./single-flight";
+import { publishedCatalog, rememberPublishedCatalog, resumePublishedChats } from "../../session-catalog";
 import { createMachineLoadPublisher } from "../../machine-load";
 import { startMachineLoadLoop } from "../../machine-load/host/loop";
 import { publishProjectPolicyStatuses } from "../../project-policy/runtime";
@@ -121,8 +122,13 @@ async function publishMonitorTick(input: {
   if (!client.isConnected) return { lastHistoryPublishedAt, lastCapabilityPublishedAt };
   await publishHeartbeat(client).catch(() => {});
   if (!leadership.acquire()) return { lastHistoryPublishedAt, lastCapabilityPublishedAt };
+  if (lastHistoryPublishedAt === 0) {
+    await resumePublishedChats(client,
+      (session, status) => publishSessionEvents(client, session.sessionId, status));
+  }
   const includeHistory = forceHistory || Date.now() - lastHistoryPublishedAt >= HISTORY_INTERVAL_MS;
   const status = monitorSnapshot({ includeHistory, forceHistory, subscriptions, history });
+  rememberPublishedCatalog(client, status);
   await client.send(status, "phone", { ttlMs: INTERVAL_MS * 24, reliable: false });
   // Provider review is independent of task visibility; a hung hook RPC must
   // never hold the current catalog behind its discovery timeout.
@@ -182,6 +188,7 @@ export function startSessionMonitor(client: RelayClient): SessionMonitor {
   const subscriptions = new Set<string>();
   const leadership = monitorLeadership();
   primeSessionKeys(client);
+  publishedCatalog(client);
   let historyCache: { generatedAt: number; sessions: SessionsStatus["sessions"] } | undefined;
   let lastHistoryPublishedAt = 0;
   let lastCapabilityPublishedAt = 0;

package/apps/bridge/src/session-catalog/README.md

@@ -0,0 +1,15 @@
+# Session catalog
+
+`index.ts` keeps the native identities of the latest published catalog. Requests
+for a chat already shown on the phone use that identity instead of walking every
+provider directory again. A new discovery window cannot make a known chat
+unreadable merely because hundreds of newer logs appeared.
+
+The private `session-catalog-cache.json` contains metadata and validated native
+source locations. It excludes messages, capability descriptions, and credentials.
+The room and provider roots bind its scope. On restart the primary monitor sends
+the saved Now chats' current native heads under their independent task keys before
+performing an expensive fresh discovery scan. It does not republish an old catalog
+as fresh. The phone continues its durable historical backfill independently.
+
+Tests live in `tests/`. This runtime module uses the repository MIT License.

package/apps/bridge/src/session-catalog/index.ts

@@ -0,0 +1,68 @@
+import { createHash } from "node:crypto";
+import { readFileSync, statSync } from "node:fs";
+import { join } from "node:path";
+import type { RelayClient } from "../../../../packages/core/relay-client";
+import { SessionsStatus, type SessionInfo } from "../../../../packages/protocol/schema";
+import { configDir, writePrivateFile } from "../config";
+import { nativeTranscriptRoots, nativeTranscriptSource, restoreNativeTranscriptSource } from "../sessions";
+
+const catalogs = new WeakMap<RelayClient, SessionsStatus | undefined>();
+const cachePath = () => join(configDir(), "session-catalog-cache.json");
+const scope = (client: RelayClient) => createHash("sha256")
+  .update([client.room, ...Object.values(nativeTranscriptRoots())].join("\0")).digest("hex");
+
+function metadata(session: SessionInfo): SessionInfo {
+  const { sessionId, agent, state, startedAt, lastActivityAt, tokensSession, tokensLastTurn,
+    cwd, model, projectId, taskId, computerId } = session;
+  return { sessionId, agent, state, startedAt, lastActivityAt, tokensSession, tokensLastTurn,
+    cwd, model, projectId, taskId, computerId };
+}
+
+/** Keep native identity, not capability descriptors or message contents. */
+export function rememberPublishedCatalog(client: RelayClient, status: SessionsStatus): void {
+  const compact: SessionsStatus = { type: "sessions.status", machine: status.machine,
+    sessions: status.sessions.map(metadata), history: status.history?.map(metadata),
+    generatedAt: status.generatedAt };
+  catalogs.set(client, compact);
+  const paths = Object.fromEntries([...compact.sessions, ...(compact.history ?? [])]
+    .flatMap(session => { const path = nativeTranscriptSource(session);
+      return path ? [[session.sessionId, path]] : []; }));
+  try { writePrivateFile(cachePath(), JSON.stringify({ scope: scope(client), status: compact, paths })); }
+  catch { /* The current in-memory catalog remains readable on a full disk. */ }
+}
+
+export function publishedCatalog(client: RelayClient): SessionsStatus | undefined {
+  if (catalogs.has(client)) return catalogs.get(client);
+  let catalog: SessionsStatus | undefined;
+  try {
+    if (statSync(cachePath()).size > 1024 * 1024) throw new Error("catalog cache exceeds limit");
+    const record = JSON.parse(readFileSync(cachePath(), "utf8"));
+    const parsed = SessionsStatus.safeParse(record.status);
+    if (record.scope === scope(client) && parsed.success) {
+      catalog = parsed.data;
+      for (const session of [...catalog.sessions, ...(catalog.history ?? [])]) {
+        const path = record.paths?.[session.sessionId];
+        if (typeof path === "string") restoreNativeTranscriptSource(session, path);
+      }
+    }
+  } catch { /* Missing, malformed, or foreign catalogs fall back to discovery. */ }
+  catalogs.set(client, catalog);
+  return catalog;
+}
+
+export function publishedSession(client: RelayClient, sessionId: string): SessionInfo | undefined {
+  const status = publishedCatalog(client);
+  return status?.sessions.find(session => session.sessionId === sessionId)
+    ?? status?.history?.find(session => session.sessionId === sessionId);
+}
+
+/** Send saved Now heads under their task keys before an expensive fresh scan. */
+export async function resumePublishedChats(client: RelayClient,
+  publish: (session: SessionInfo, status: SessionsStatus) => Promise<unknown>): Promise<void> {
+  const status = publishedCatalog(client);
+  if (!status) return;
+  for (const session of status.sessions) {
+    if (session.agent !== "codex" && session.agent !== "claude") continue;
+    try { await publish(session, status); } catch { /* Retry on the regular tick. */ }
+  }
+}

package/apps/bridge/src/sessions/index.ts

@@ -50,6 +50,7 @@ import { loadRuntimeConfig } from "../config";
 import { timedProviderScan } from "../machine-load/mcp/scan-cost";
 
 export { MAX_ACTIVITY_ENTRIES, MAX_ACTIVITY_TEXT, TOKEN_WINDOW_HOURS };
+export { nativeTranscriptRoots, nativeTranscriptSource, restoreNativeTranscriptSource } from "./native-source";
 
 type ProviderScan = ReturnType<typeof scanClaude>;
 

package/apps/bridge/src/sessions/native-source.ts

@@ -0,0 +1,35 @@
+import { lstatSync, realpathSync } from "node:fs";
+import { basename, isAbsolute, relative } from "node:path";
+import type { SessionInfo } from "../../../../packages/protocol/schema";
+import { claudeLogPathBySession } from "./scan/claude/shared";
+import { codexLogPathBySession } from "./scan/codex/shared";
+import { claudeProjectsRoot, codexSessionsRoot } from "./support/common";
+
+export function nativeTranscriptRoots(): { claude: string; codex: string } {
+  return { claude: claudeProjectsRoot(), codex: codexSessionsRoot() };
+}
+
+/** Native paths come only from discovery; a phone never supplies one. */
+export function nativeTranscriptSource(session: SessionInfo): string | undefined {
+  if (session.agent === "claude") return claudeLogPathBySession.get(session.sessionId);
+  if (session.agent === "codex") return codexLogPathBySession.get(session.sessionId);
+  return undefined;
+}
+
+/** Restore an owned native source without walking every provider's logs. */
+export function restoreNativeTranscriptSource(session: SessionInfo, path: string): boolean {
+  if (!["claude", "codex"].includes(session.agent)
+    || !/^[a-zA-Z0-9-]{1,128}$/.test(session.sessionId)) return false;
+  const name = basename(path);
+  if (session.agent === "claude" ? name !== `${session.sessionId}.jsonl`
+    : !name.startsWith("rollout-") || !name.endsWith(`-${session.sessionId}.jsonl`)) return false;
+  try {
+    if (!lstatSync(path).isFile()) return false;
+    const root = session.agent === "claude" ? claudeProjectsRoot() : codexSessionsRoot();
+    const inside = relative(realpathSync(root), realpathSync(path));
+    if (!inside || inside.startsWith("..") || isAbsolute(inside)) return false;
+    const index = session.agent === "claude" ? claudeLogPathBySession : codexLogPathBySession;
+    index.set(session.sessionId, path);
+    return true;
+  } catch { return false; }
+}

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.46
+npm install -g granttap-mcp@0.8.47
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.46\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.47\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.46";
+const PACKAGE = "granttap-mcp@0.8.47";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.46",
+  "version": "0.8.47",
   "description": "Personal live control center runtime for local coding agents on iPhone and Apple Watch.",
   "type": "module",
   "bin": {