granttap-mcp 0.8.60 → 0.8.62

package/apps/bridge/src/managed-admission/README.md

@@ -6,6 +6,10 @@ chooses the stable computer identity and enforces Personal seats; QR rooms and
 native agent sessions do not take additional seats. Own-relay connections never
 call billing. Tickets are transport headers and are not prompt content.
 
+The background monitor, MCP tool connection, desktop Task handoff, agent hooks
+and machine-role Mesh connections all use this entry point. Their leases renew
+on the existing socket; the provider conversation and task keys remain intact.
+
 Legacy free beta servers may not issue leases. Commercial relay mode requires
 a valid signed lease independently, including when a modified client omits it.
 Expiry/refund stops hosted delivery; local provider approval remains available,

package/apps/bridge/src/monitor/handlers/inbound.ts

@@ -55,7 +55,7 @@ export async function handleMonitorMessage(
     if (payload.type === "pairing.join") {
       return handleInboundPairingJoin(payload);
     }
-    recordPhoneSeen();
+    recordPhoneSeen(Date.now(), input.peerPublicKey);
     // Codex may start one MCP server per open task. Exactly one instance owns
     // phone routing, so a single phone message can never create duplicate tasks.
     if (!leadership.acquire()) return false;

package/apps/mcp/src/desktop/delivery/task-handoff.ts

@@ -7,12 +7,14 @@ import { observedComputerId } from "../../../../bridge/src/mesh/identity/compute
 import { prepareMeshHandoff } from "../../../../bridge/src/mesh/runtime";
 import { readStoreState } from "../../../../bridge/src/mesh/store/state";
 import { controllerPeerGate } from "../../../../bridge/src/pairing/controllers";
+import { managedAdmissionOptions } from "../../../../bridge/src/managed-admission";
 
 type Prepare = (request: HandoffRequest) => Promise<boolean>;
 
 async function prepareThroughRelay(request: HandoffRequest): Promise<boolean> {
   const config = applyNetworkRoute(loadConfig(machineConfigPath()));
-  const client = new RelayClient(config, { peerAllowed: controllerPeerGate(config) });
+  const client = new RelayClient(config, { ...managedAdmissionOptions(config),
+    peerAllowed: controllerPeerGate(config) });
   try {
     await client.connect();
     return await prepareMeshHandoff(client, request);

package/apps/mcp/src/mcp-tools/connect/relay.ts

@@ -14,6 +14,7 @@ import { completeEnrollment } from "../../connection-center/enrollment";
 import { confirmPendingController, controllerPeerGate } from "../../../../bridge/src/pairing/controllers";
 import { applyNetworkRoute } from "../../../../bridge/src/device-network/settings";
 import { startEndpointPublisher } from "../../../../bridge/src/device-network/directory";
+import { managedAdmissionOptions } from "../../../../bridge/src/managed-admission";
 
 const ASK_TIMEOUT_MS = Number(
   process.env.GRANTTAP_ASK_TIMEOUT_MS ?? process.env.NODVOX_ASK_TIMEOUT_MS ?? 180_000,
@@ -35,7 +36,8 @@ export async function relay(): Promise<RelayClient | null> {
   try {
     if (!client) {
       const config = applyNetworkRoute(loadConfig(machineConfigPath()));
-      client = new RelayClient(config, { autoReconnect: true, peerAllowed: controllerPeerGate(config) });
+      client = new RelayClient(config, { ...managedAdmissionOptions(config),
+        autoReconnect: true, peerAllowed: controllerPeerGate(config) });
       client.onMessage((payload, peerPublicKey) => {
         if (payload.type === "pairing.join") {
           const result = applyPairingJoin(payload);

package/apps/mcp/src/mcp-tools/mesh/relay.ts

@@ -6,6 +6,7 @@ import {
   loadGrokBotEndpoint,
 } from "../../../../bridge/src/mesh/identity/endpoint";
 import { localMeshStore } from "../../../../bridge/src/mesh/local-remote/local";
+import { managedAdmissionOptions } from "../../../../bridge/src/managed-admission";
 
 let client: RelayClient | null = null;
 let credentialId: string | null = null;
@@ -43,7 +44,7 @@ export async function grokBotRelay(): Promise<RelayClient> {
   });
   if (!client || credentialId !== bundle.credential.credentialId) {
     client?.close();
-    client = new RelayClient(bundle.pairing, { autoReconnect: true });
+    client = new RelayClient(bundle.pairing, { ...managedAdmissionOptions(bundle.pairing), autoReconnect: true });
     credentialId = bundle.credential.credentialId;
     client.onMessage(receive);
   }

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.60
+npm install -g granttap-mcp@0.8.62
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.60\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.62\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.60";
+const PACKAGE = "granttap-mcp@0.8.62";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.60",
+  "version": "0.8.62",
   "description": "Personal live control center runtime for local coding agents on iPhone and Apple Watch.",
   "type": "module",
   "bin": {