granttap-mcp 0.8.54 → 0.8.55

package/apps/bridge/src/host/session-keys.ts

@@ -102,6 +102,6 @@ async function sendScopedPayload(input: {
     key,
     purpose,
     createdAt: Date.now(),
-  }, to, { ttlMs: options.ttlMs });
+  }, to, { ttlMs: options.ttlMs, peerPublicKey: options.peerPublicKey });
   await client.sendSession(payload, sessionId, to, options);
 }

package/apps/bridge/src/monitor/handlers/catalog.ts

@@ -56,7 +56,7 @@ export async function publishSessionEvents(
   sessionId: string,
   status?: SessionsStatus,
   threadId?: string,
-  history?: { history?: boolean; historyCursor?: string },
+  history?: { history?: boolean; historyCursor?: string; peerPublicKey?: string },
 ): Promise<boolean> {
   const session = resolveSession(client, sessionId, status);
   if (!session) return false;
@@ -66,6 +66,7 @@ export async function publishSessionEvents(
   await sendSessionPayload(client, activityWithImages(activity), sessionId, "phone", {
     ttlMs: INTERVAL_MS * 24,
     reliable: false,
+    peerPublicKey: history?.peerPublicKey,
   });
   return true;
 }

package/apps/bridge/src/monitor/handlers/inbound.ts

@@ -83,9 +83,9 @@ export async function handleMonitorMessage(
       void publish().catch(() => {});
       return true;
     } else if (payload.type === "session.subscribe") {
-      return handleInboundSubscription(client, payload, subscriptions, publish);
+      return handleInboundSubscription(client, payload, subscriptions, publish, input.peerPublicKey);
     } else if (payload.type === "session.events" || payload.type === "session.image.query") {
-      return handleSessionRead(client, payload);
+      return handleSessionRead(client, payload, input.peerPublicKey);
     } else if (payload.type === "sessions.refresh") {
       return handleInboundRefresh(client, payload, publish);
     } else if (payload.type === "sessions.history.query") {
@@ -266,9 +266,10 @@ async function handleInboundTaskCreate(
 function handleInboundSubscription(
   client: RelayClient, payload: Extract<Payload, { type: "session.subscribe" }>,
   subscriptions: Set<string>, publish: (forceHistory?: boolean) => Promise<void>,
+  peerPublicKey?: string,
 ): boolean {
   // The transcript goes first, before a potentially slow catalog rescan.
-  void publishSessionEvents(client, payload.sessionId).catch(() => false);
+  void publishSessionEvents(client, payload.sessionId, undefined, undefined, { peerPublicKey }).catch(() => false);
   if (handleSubscription(subscriptions, payload)) {
     void publish().catch(() => {});
   }
@@ -276,8 +277,10 @@ function handleInboundSubscription(
 }
 
 async function handleSessionRead(client: RelayClient,
-  payload: Extract<Payload, { type: 'session.events' | 'session.image.query' }>): Promise<boolean> {
-  if (payload.type === 'session.image.query') await publishSessionImage(client, payload);
-  else await publishSessionEvents(client, payload.sessionId, undefined, payload.threadId, payload).catch(() => false);
+  payload: Extract<Payload, { type: 'session.events' | 'session.image.query' }>,
+  peerPublicKey?: string): Promise<boolean> {
+  if (payload.type === 'session.image.query') await publishSessionImage(client, payload, peerPublicKey);
+  else await publishSessionEvents(client, payload.sessionId, undefined, payload.threadId,
+    { ...payload, peerPublicKey }).catch(() => false);
   return true;
 }

package/apps/bridge/src/session-catalog/README.md

@@ -21,3 +21,5 @@ Engine binding recovery waits for the first connected catalog publication before
 Codex discovery shares repeated checkout verification only within one synchronous scan. The next scan verifies repository identity again; no long-lived checkout cache can cross a repository change. This keeps startup catalog delivery ahead of repeated Git subprocesses.
 
 Subscribed transcript heads use a separate, single-flight transfer loop. A stalled head never occupies the current catalog publication slot; stopping the monitor cancels further queued reads. The iPhone keeps its historical backfill independent of both loops.
+
+Authenticated subscription and transcript requests pass the verified requester key to the encrypted reply. A requested page does not wait for copies addressed to other paired controllers. Shared catalogue and chat updates remain available to passive controllers.

package/apps/bridge/src/session-images/README.md

@@ -17,3 +17,9 @@ Native image identities remain readable after the chat head advances. Codex
 attachments are located by timestamp and content block together, so a caption
 with the same timestamp cannot hide the picture. Original bytes are delivered in
 bounded encrypted chunks and the Apple client retains them for offline use.
+
+An authenticated image query returns its key grant and chunk only to the requesting controller. Shared chat publication still retains every authorized controller, including one receiving passively.
+
+Saved native picture identities remain addressable after newer transcript pages append. Lookup walks bounded windows toward the original row, verifies the exact conversation and block identity, and stops at the file start or a non-advancing cursor. There is no page-count expiry for a previously advertised attachment.
+
+Workspace screenshots in older replies resolve the original native row and its exact advertised image identity before applying the existing Task, Execution and workspace access checks. A request never supplies a filesystem path, and looking up an older reply does not widen access outside its authorized workspace.

package/apps/bridge/src/session-images/index.ts

@@ -22,7 +22,8 @@ export function readSessionImage(query: SessionImageQuery, session: SessionInfo,
   return sessionImageChunk(session, activity, query.imageId, query.offset, query.historyCursor);
 }
 
-export async function publishSessionImage(client: RelayClient, query: SessionImageQuery): Promise<boolean> {
+export async function publishSessionImage(client: RelayClient, query: SessionImageQuery,
+  peerPublicKey?: string): Promise<boolean> {
   const session = publishedSession(client, query.sessionId)
     ?? scanSessions().sessions.find(s => s.sessionId === query.sessionId)
     ?? scanSessionHistory().find(s => s.sessionId === query.sessionId);
@@ -33,6 +34,6 @@ export async function publishSessionImage(client: RelayClient, query: SessionIma
     requestId: query.requestId, imageId: query.imageId, offset: query.offset,
     ...(chunk ? { mimeType: chunk.mime_type, totalBytes: chunk.total_bytes,
       dataBase64: chunk.data_base64 } : { unavailable: true }) }), query.sessionId,
-    'phone', { ttlMs: 20_000, reliable: false });
+    'phone', { ttlMs: 20_000, reliable: false, peerPublicKey });
   return chunk !== undefined;
 }

package/apps/bridge/src/transcript-history/images/advertised-entry.ts

@@ -0,0 +1,43 @@
+import type { ActivityEntry, SessionInfo } from "../../../../../packages/protocol/schema";
+import { appendCodexActivity } from "../../sessions/scan/codex/activity";
+import { codexLogPathForSession } from "../../sessions/scan/codex/shared";
+import { appendClaudeActivity, claudeLogPath } from "../../sessions/scan/claude";
+import { safeParse, ts } from "../../sessions/support/common";
+import { previousNativeLines } from "../native-lines";
+
+/** Recover only the exact previously advertised row in this native conversation. */
+export function nativeTranscriptEntry(session: SessionInfo, entryId: string,
+  cursor?: string): ActivityEntry | undefined {
+  if (!entryId.startsWith(`${session.sessionId}:`)) return undefined;
+  const path = session.agent === "codex" ? codexLogPathForSession(session.sessionId, session.startedAt)
+    : session.agent === "claude" ? claudeLogPath(session.sessionId) : undefined;
+  if (!path) return undefined;
+  const stamp = session.agent === "codex" ? Number(entryId.slice(session.sessionId.length + 1).split(":")[0]) : undefined;
+  if (stamp != null && !Number.isFinite(stamp)) return undefined;
+  let pageCursor = cursor;
+  try {
+    while (true) {
+      const window = previousNativeLines(path, session.sessionId, pageCursor);
+      if (!window) return undefined;
+      let earliest = Infinity;
+      for (const line of window.lines) {
+        const row = safeParse(line.text), at = ts(row?.timestamp);
+        if (at) earliest = Math.min(earliest, at);
+        if (stamp != null && at !== stamp) continue;
+        const out: ActivityEntry[] = [], seen = new Set<string>(), observations = new Map();
+        if (session.agent === "codex") {
+          appendCodexActivity({ out, seen, session, lines: [line.text], observations,
+            changes: new Map(), details: new Map(), fullText: true });
+        } else {
+          appendClaudeActivity({ out, seen, session, lines: [line.text], observations, fullText: true });
+        }
+        const found = out.find(entry => entry.id === entryId);
+        if (found) return found;
+      }
+      if (window.start === 0 || (stamp != null && earliest < stamp)) return undefined;
+      const next = window.lines[0]?.offset ?? window.start;
+      if (next >= window.end) return undefined;
+      pageCursor = window.cursorAt(next);
+    }
+  } catch { return undefined; }
+}

package/apps/bridge/src/transcript-history/images/native.ts

@@ -22,7 +22,8 @@ export function nativeTranscriptImage(session: SessionInfo, imageId: string, off
   if (!path || !['claude', 'codex'].includes(session.agent)) return undefined;
   try {
     let pageCursor = cursor;
-    for (let page = 0; page < 32; page++) {
+    // Old advertised pictures remain readable as the conversation grows.
+    while (true) {
       const window = previousNativeLines(path, session.sessionId, pageCursor);
       if (!window) return undefined;
       const lines = window.lines.map(line => line.text);
@@ -49,7 +50,9 @@ export function nativeTranscriptImage(session: SessionInfo, imageId: string, off
       }
     }
       if (window.start === 0) break;
-      pageCursor = window.cursorAt(window.lines[0]?.offset ?? window.start);
+      const next = window.lines[0]?.offset ?? window.start;
+      if (next >= window.end) break;
+      pageCursor = window.cursorAt(next);
     }
   } catch { return undefined; }
   return undefined;

package/apps/bridge/src/transcript-history/images.ts

@@ -11,7 +11,9 @@ export function nativeImageLines(sessionId: string, entryId: string): string[] |
   if (!path || !Number.isFinite(stamp) || !Number.isSafeInteger(blockIndex) || blockIndex < 0) return undefined;
   let cursor: string | undefined;
   try {
-    for (let page = 0; page < 32; page++) {
+    // A saved attachment does not expire when newer transcript windows append.
+    // Each window stays bounded and its cursor must move toward the file start.
+    while (true) {
       const window = previousNativeLines(path, sessionId, cursor);
       if (!window) return undefined;
       let earliest = Infinity;
@@ -24,7 +26,9 @@ export function nativeImageLines(sessionId: string, entryId: string): string[] |
           && p.content[blockIndex]?.type === "input_image") return [line.text];
       }
       if (window.start === 0 || earliest < stamp) return undefined;
-      cursor = window.cursorAt(window.lines[0]?.offset ?? window.start);
+      const next = window.lines[0]?.offset ?? window.start;
+      if (next >= window.end) return undefined;
+      cursor = window.cursorAt(next);
     }
   } catch { return undefined; }
   return undefined;

package/apps/bridge/src/transcript-history/index.ts

@@ -8,6 +8,7 @@ import { recordedToolDetails } from "./tool-details";
 import { completedTurnChanges } from "./turn-changes";
 export { nativeImageLines } from "./images";
 export { nativeTranscriptImage } from './images/native';
+export { nativeTranscriptEntry } from './images/advertised-entry';
 
 function boundedEntry(entry: ActivityEntry): ActivityEntry {
   const result = { ...entry };

package/apps/mcp/src/desktop/image/index.ts

@@ -1,7 +1,7 @@
 import { artifactImages, artifactImageChunk } from "./artifacts";
 import { desktopTaskActivity } from "../task-activity";
 import type { ActivityEntry, SessionInfo, SessionActivity } from '../../../../../packages/protocol/schema';
-import { nativeTranscriptImage } from '../../../../bridge/src/transcript-history';
+import { nativeTranscriptImage, nativeTranscriptEntry } from '../../../../bridge/src/transcript-history';
 import { readStoreState } from '../../../../bridge/src/mesh/store/state';
 import { configDir } from '../../../../bridge/src/config';
 import { join } from 'node:path';
@@ -10,16 +10,25 @@ export function transcriptImages(entry: ActivityEntry) {
   return artifactImages(entry).map(({ id, name, markdown }) => ({ id, name, markdown }));
 }
 
+function sessionArtifact(session: SessionInfo, activity: { entries: Array<Parameters<typeof artifactImages>[0]> },
+  imageId: string, cursor?: string) {
+  const current = activity.entries.flatMap(artifactImages).find(image => image.id === imageId);
+  if (current) return current;
+  const entryId = imageId.match(/^(.*):image:[a-f0-9]{24}$/)?.[1];
+  const saved = entryId ? nativeTranscriptEntry(session, entryId, cursor) : undefined;
+  return saved ? artifactImages(saved).find(image => image.id === imageId) : undefined;
+}
+
 export function sessionImageChunk(session: SessionInfo, activity: SessionActivity,
   imageId: string, offset: number, cursor?: string, storePath?: string) {
   if (activity.sessionId !== session.sessionId) return undefined;
   const native = activity.entries.some(entry => entry.id === imageId && entry.kind === 'user'
     && entry.attachments?.includes('Image'));
-  if (native || imageId.startsWith(`${session.sessionId}:`)) {
+  if (!imageId.includes(':image:') && (native || imageId.startsWith(`${session.sessionId}:`))) {
     const picture = nativeTranscriptImage(session, imageId, offset, cursor);
     if (picture) return picture;
   }
-  const artifact = activity.entries.flatMap(artifactImages).find(image => image.id === imageId);
+  const artifact = sessionArtifact(session, activity, imageId, cursor);
   if (!artifact) return undefined;
   const loaded = readStoreState(storePath ?? join(configDir(), 'project-mesh.json'));
   if (loaded.status !== 'ok') return undefined;
@@ -46,7 +55,11 @@ export function desktopTaskImage(input: unknown, storePath?: string,
   const activity = cachedActivity ?? desktopTaskActivity(query, storePath);
   if (!activity?.session_id || !activity.agent
     || activity.project_id !== query.project_id || activity.task_id !== query.task_id) return undefined;
-  const artifact = activity.entries.flatMap(artifactImages).find((image) => image.id === imageId);
+  const session: SessionInfo = { sessionId: activity.session_id, agent: activity.agent,
+    state: "idle", startedAt: 0, lastActivityAt: 0, tokensSession: 0, tokensLastTurn: 0 };
+  const cursor = query.history_cursor;
+  if (cursor !== undefined && (typeof cursor !== "string" || cursor.length > 512)) return undefined;
+  const artifact = sessionArtifact(session, activity, imageId, cursor as string | undefined);
   if (artifact) {
     const chunk = artifactImageChunk({ projectId: activity.project_id, taskId: activity.task_id,
       sessionId: activity.session_id, provider: activity.agent, image: artifact, offset, storePath });
@@ -55,10 +68,6 @@ export function desktopTaskImage(input: unknown, storePath?: string,
   if (!["codex", "claude"].includes(activity.agent)
     || !activity.entries.some((entry) => entry.id === imageId
       && entry.kind === "user" && entry.attachments?.includes("Image"))) return undefined;
-  const cursor = query.history_cursor;
-  if (cursor !== undefined && (typeof cursor !== "string" || cursor.length > 512)) return undefined;
-  const session: SessionInfo = { sessionId: activity.session_id, agent: activity.agent,
-    state: "idle", startedAt: 0, lastActivityAt: 0, tokensSession: 0, tokensLastTurn: 0 };
   const chunk = nativeTranscriptImage(session, imageId, offset, cursor as string | undefined);
   return chunk ? { operation: "desktop.task_image", image_id: imageId, ...chunk } : undefined;
 }

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.54
+npm install -g granttap-mcp@0.8.55
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.54\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.55\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.54";
+const PACKAGE = "granttap-mcp@0.8.55";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.54",
+  "version": "0.8.55",
   "description": "Personal live control center runtime for local coding agents on iPhone and Apple Watch.",
   "type": "module",
   "bin": {

package/packages/core/outbound-scheduler/README.md

@@ -11,11 +11,13 @@ Tests live in `tests/`; they include an actual WebSocket server with the relay's
 rate limit. A socket write is transport evidence, never an approval receipt.
 
 MIT License; see the repository LICENSE.
-# Active controllers
+# Controller delivery
 
-Authenticated incoming phone traffic marks that controller active for 90 seconds.
-Large replaceable encrypted task/project data targets recent controllers while
-catalogs, liveness, approval status and reliable messages retain every authorized
-recipient. Current catalogs and liveness pass queued bulk frames. A transport with no recent controller falls back to
-the complete authorized set for legacy clients and reconnection. Routing never
-deletes a pairing or replaces the controller authorization gate.
+Catalogs, liveness and shared conversation updates reach every authorized
+controller, including a phone receiving passively. Silence never removes access
+to its local replica. Authenticated history, subscription and image requests
+return their independent key grant and encrypted result only to the requesting
+controller, with priority over queued periodic snapshots. Older callers without
+a requester retain the complete authorized recipient set. Every explicit target
+passes the pairing and controller authorization checks. Routing never deletes a
+pairing or changes approval policy.

package/packages/core/outbound-scheduler/index.ts

@@ -3,7 +3,6 @@ import type { PeerConfig, SendOptions } from "../relay-client-types";
 import type { Payload, Role } from "../../protocol/schema";
 import { peerPublicKeys } from "../crypto";
 import { sealEnvelope } from "../relay-envelope";
-export { ActiveControllerRecipients } from "./active-controllers";
 
 type Job = { frame: string; bytes: number; resolve: () => void; reject: (error: Error) => void };
 const CLOSED = () => new Error("relay connection closed before delivery");

package/packages/core/relay-client-types.ts

@@ -41,6 +41,8 @@ export type RelayClientOptions = {
 };
 
 export type SendOptions = {
+  /** Reply only to the authenticated requester; absent means all authorized peers. */
+  peerPublicKey?: string;
   /** Delivery lifetime for relay hold queues. Omit only for non-expiring hello packets. */
   ttlMs?: number;
   deliveryId?: string;

package/packages/core/relay-client.ts

@@ -10,7 +10,7 @@
  * the Cloudflare Durable Object deployment.
  */
 import WebSocket from "ws";
-import { OutboundFrameQueue, sendEncryptedPayload, ActiveControllerRecipients } from "./outbound-scheduler";
+import { OutboundFrameQueue, sendEncryptedPayload } from "./outbound-scheduler";
 import { createHash } from "node:crypto";
 import { Envelope, Payload, type Role } from "../protocol/schema";
 import { openFromPeersWithIdentity, openWithTransferKey, peerPublicKeys, seal, sealWithTransferKey } from "./crypto";
@@ -34,7 +34,6 @@ export class RelayClient {
   private livenessTimer?: NodeJS.Timeout;
   private awaitingPong = false;
   private readonly sessionKeys = new Map<string, string>();
-  private readonly activeControllers = new ActiveControllerRecipients();
   /**
    * Delivery ids are relay-controlled metadata, so replay protection is bound
    * to the authenticated ciphertext itself. Keep a bounded process-local set:
@@ -200,9 +199,6 @@ export class RelayClient {
       this.sessionKeys.set(payload.sessionId, payload.key);
     }
     if (this.processingCiphertexts.has(fingerprint)) return;
-    if (this.cfg.role === "machine" && (payload.type !== "hello" || payload.role === "phone")) {
-      this.activeControllers.observe(peerPublicKey);
-    }
     this.processingCiphertexts.add(fingerprint);
     try {
       const results = await Promise.all([...this.listeners].map(async (listener) => {
@@ -238,10 +234,11 @@ export class RelayClient {
     const ws = this.ws;
     if (!ws || ws.readyState !== WebSocket.OPEN) throw new Error("relay not connected");
     if (!this.frames) throw new Error("relay not connected");
-    const replaceable = this.cfg.role === "machine" && to === "phone"
-      && options.reliable === false && payload.type === "session.sealed";
-    await sendEncryptedPayload(this.frames, this.cfg,
-      key => this.peerIsAllowed(key) && this.activeControllers.allows(key, replaceable),
+    if (options.peerPublicKey) {
+      await this.sendToPeer(payload, options.peerPublicKey, options);
+      return;
+    }
+    await sendEncryptedPayload(this.frames, this.cfg, key => this.peerIsAllowed(key),
       { payload, to, options });
   }
 

package/packages/core/outbound-scheduler/active-controllers.ts

@@ -1,15 +0,0 @@
-/** Activity routes replaceable traffic; authorization remains a separate check. */
-export class ActiveControllerRecipients {
-  private readonly seen = new Map<string, number>();
-
-  observe(peer: string, now = Date.now()): void {
-    this.seen.set(peer, now);
-  }
-
-  allows(peer: string, replaceable: boolean, now = Date.now()): boolean {
-    if (!replaceable) return true;
-    const active = [...this.seen].filter(([, at]) => now >= at && now - at <= 90_000);
-    // A newly connected transport has not heard its controllers yet.
-    return active.length === 0 || active.some(([key]) => key === peer);
-  }
-}