granttap-mcp 0.8.64 → 0.8.66

package/apps/bridge/src/bin/hooks/statusline/claude-statusline-hook.ts

@@ -0,0 +1,11 @@
+import { runClaudeStatusLine } from "../../../provider-account-status/claude-statusline";
+
+async function main() {
+  let raw = "";
+  for await (const chunk of process.stdin) {
+    raw += chunk.toString();
+    if (Buffer.byteLength(raw) > 64_000) return;
+  }
+  await runClaudeStatusLine(raw);
+}
+main().catch(() => undefined);

package/apps/bridge/src/install/hooks.ts

@@ -1,6 +1,7 @@
 /** Install the GrantTap-owned hooks without changing unrelated handlers.
  * Configuration alone does not establish Codex hook trust.
  */
+import { ensureClaudeUsageStatusLine } from "../provider-account-status/claude-statusline";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
@@ -61,7 +62,7 @@ export function installClaudeHook(): InstallResult {
   // The prompt hook rides along with the approval hook: what the chat could
   // not know by itself — background runs in it, the Mesh around it — is added
   // to each prompt. It never blocks; anything wrong, and it adds nothing.
-  const promptHookChanged = ensureClaudePromptHook(settings);
+  const promptHookChanged = [ensureClaudePromptHook(settings), ensureClaudeUsageStatusLine(settings, hookCommand("claude-statusline"))].some(Boolean);
   const entries: any[] = (((settings.hooks ??= {}).PreToolUse ??= []) as any[]);
   const currentCommand = hookCommand("claude");
   const presentEntry = entries.find((entry) =>

package/apps/bridge/src/install/inspect.ts

@@ -49,6 +49,7 @@ export { isCursorHelperNode, resolveMonitorNodeBin };
 const repoRoot = join(dirname(fileURLToPath(import.meta.url)), "..", "..", "..", "..");
 
 export type HookRoute =
+  | "claude-statusline"
   | "claude"
   | "claude-prompt"
   | "codex"

package/apps/bridge/src/mesh/catalog/models.ts

@@ -1,5 +1,5 @@
 import type { AdvertisedModel, EndpointModelCatalog, MeshProvider } from "../../../../../packages/protocol/schema";
-import { readCodexModelCatalog } from "../../provider-model-catalog";
+import { readProviderModelCatalog } from "../../provider-model-catalog";
 
 const PROVIDERS = new Set(["claude", "codex", "cursor", "grok"]);
 
@@ -54,9 +54,10 @@ export function catalogFromEndpoint(
   endpointId: string, sessions: Parameters<typeof catalogFromSessions>[1], now = Date.now(),
 ): EndpointModelCatalog {
   const observed = catalogFromSessions(endpointId, sessions, now);
-  const native = readCodexModelCatalog(endpointId, { now });
+  const native = readProviderModelCatalog(endpointId);
   const models = [...native.models, ...observed.models.filter(item => native.stale || item.provider !== "codex")];
-  return { endpointId, observedAt: now, models: models.slice(0, 64),
+  return { endpointId, observedAt: now, models: models.slice(0, 256),
+    accountUsage: native.accountUsage,
     ...(native.stale ? { stale: true, reason: native.reason } : {}),
   };
 }

package/apps/bridge/src/mesh/snapshot/scoped-view.ts

@@ -116,7 +116,7 @@ export function scopedMeshView(
     skills: snapshot.skills ?? [],
     mcpServers: snapshot.mcpServers ?? [],
     capabilityRequests: snapshot.capabilityRequests ?? [],
-    modelCatalog: snapshot.modelCatalog ?? [],
+    modelCatalog: snapshot.modelCatalog?.map(({ accountUsage: _usage, ...catalog }) => catalog) ?? [],
     executionPolicy: snapshot.execution,
     restrictions: snapshot.restrictions,
     environment: snapshot.environment,

package/apps/bridge/src/monitor/handlers/user-message.ts

@@ -67,7 +67,7 @@ async function startNewAgentTask(input: {
     grok: createGrokSession,
   }[agent];
   const result = await create(
-    message.text, requestedCwd, DELIVERY_TIMEOUT_MS, resolved.attachments, message.model,
+    message.text, requestedCwd, DELIVERY_TIMEOUT_MS, resolved.attachments, message.model, undefined, message.effort,
   );
   if (result.ok) {
     await say(result.text, result.sessionId, true);

package/apps/bridge/src/provider-account-status/README.md

@@ -0,0 +1,18 @@
+# Provider account status
+
+Public entry: `index.ts`. The catalog loop reads the installed, already signed-in
+Codex app-server's `model/list` and `account/rateLimits/read`. No conversation or
+turn is created, no authentication flow is started, and chat delivery never waits
+for the account request. Reads coalesce and are throttled to two minutes; reports
+expire after five minutes and changing the native auth file clears the cache.
+
+Only visible picker metadata and reported usage percentages, window durations,
+reset times and observation times cross the existing encrypted Mesh channel.
+Identity, credentials, credits, instructions and raw provider responses stay out.
+Missing windows remain unknown. Claude CLI aliases remain available. The GrantTap status-line wrapper observes
+Claude's documented `rate_limits` after a native response, preserves the prior
+status command/options, and stores only independently present 5h/7d windows.
+Cursor and Grok subscription limits remain unavailable when their installed
+interfaces do not report them; their session tokens and tools are still counted.
+
+Tests: `tests/status.test.ts`. Apache License 2.0, see root LICENSE.

package/apps/bridge/src/provider-account-status/claude-statusline.ts

@@ -0,0 +1,63 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { spawn } from "node:child_process";
+import { configDir } from "../config/runtime/paths";
+import { writePrivateFile } from "../config/access/write-private";
+import { ProviderAccountUsage, type ProviderAccountUsage as Usage } from "../../../../packages/protocol/schema";
+
+const previousPath = () => join(configDir(), "claude-statusline-previous.json");
+const reportPath = () => join(configDir(), "claude-account-usage.json");
+
+export function projectClaudeUsage(input: any, now = Date.now()): Usage | undefined {
+  const windows = ([["five_hour", "primary", 300], ["seven_day", "secondary", 10_080]] as const)
+    .flatMap(([key, id, duration]) => {
+      const value = input?.rate_limits?.[key];
+      if (!Number.isFinite(value?.used_percentage) || value.used_percentage < 0 || value.used_percentage > 100
+        || !Number.isFinite(value?.resets_at) || value.resets_at * 1_000 <= now) return [];
+      return [{ id: id as "primary" | "secondary", usedPercent: value.used_percentage,
+        windowMinutes: Number(duration), resetsAt: value.resets_at * 1_000 }];
+    });
+  return windows.length ? { provider: "claude", limitId: "claude", observedAt: now, windows } : undefined;
+}
+
+export function readClaudeUsage(now = Date.now()): Usage[] {
+  try {
+    const text = readFileSync(reportPath(), "utf8");
+    if (text.length > 4_096) return [];
+    const value = ProviderAccountUsage.parse(JSON.parse(text));
+    return now - value.observedAt <= 5 * 60_000 && value.observedAt <= now + 60_000 ? [value] : [];
+  } catch { return []; }
+}
+
+/** Keep the person's existing status renderer and its options; never touch approval policy. */
+export function ensureClaudeUsageStatusLine(settings: any, command: string): boolean {
+  if (settings.statusLine?.command === command) return false;
+  if (typeof settings.statusLine?.command === "string" && settings.statusLine.command.includes("internal hook claude-statusline")) {
+    settings.statusLine.command = command;
+    return true;
+  }
+  if (settings.statusLine && settings.statusLine.type !== "command") return false;
+  writePrivateFile(previousPath(), JSON.stringify(settings.statusLine ?? null));
+  settings.statusLine = { ...settings.statusLine, type: "command", command };
+  return true;
+}
+
+export async function runClaudeStatusLine(raw: string): Promise<void> {
+  try {
+    const input = JSON.parse(raw);
+    const usage = projectClaudeUsage(input);
+    if (usage) writePrivateFile(reportPath(), JSON.stringify(usage));
+    const previous = existsSync(previousPath()) ? JSON.parse(readFileSync(previousPath(), "utf8")) : null;
+    if (typeof previous?.command !== "string" || !previous.command.trim()) {
+      if (usage) process.stdout.write(usage.windows.map(w => `${w.windowMinutes === 300 ? "5h" : "7d"} ${w.usedPercent}%`).join(" · "));
+      return;
+    }
+    await new Promise<void>(resolve => {
+      const child = spawn(previous.command, { shell: true, stdio: ["pipe", "inherit", "ignore"], timeout: 3_000 });
+      child.stdin.on("error", () => undefined);
+      child.on("error", () => resolve());
+      child.on("close", () => resolve());
+      child.stdin.end(raw);
+    });
+  } catch { /* A status renderer must never interfere with a provider conversation. */ }
+}

package/apps/bridge/src/provider-account-status/index.ts

@@ -0,0 +1,48 @@
+import { statSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import type { EndpointModelCatalog } from "../../../../packages/protocol/schema";
+import { codexHookRpc, type HookRpc } from "../codex-hook-trust";
+import { projectAccountModels, projectAccountUsage } from "./projection";
+
+export { projectAccountModels, projectAccountUsage } from "./projection";
+
+/** A bounded read of an already signed-in provider; no threads, turns or login. */
+export function createProviderAccountReader(rpc: HookRpc, clock = Date.now) {
+  let value: EndpointModelCatalog | undefined;
+  let pending: Promise<void> | undefined;
+  let attemptedAt = -Infinity;
+  return {
+    current(endpointId: string): EndpointModelCatalog | undefined {
+      return value && value.endpointId === endpointId && clock() - value.observedAt <= 5 * 60_000
+        ? value : undefined;
+    },
+    refresh(endpointId: string): Promise<void> {
+      if (pending) return pending;
+      if (clock() - attemptedAt < 120_000) return Promise.resolve();
+      attemptedAt = clock();
+      pending = Promise.allSettled([
+        rpc("model/list", { limit: 64, includeHidden: false }), rpc("account/rateLimits/read", {}),
+      ]).then(([models, usage]) => {
+        const now = clock();
+        const rows = models.status === "fulfilled" ? projectAccountModels(models.value, endpointId, now) : [];
+        value = { endpointId, observedAt: now, stale: rows.length === 0, models: rows,
+          accountUsage: usage.status === "fulfilled" ? projectAccountUsage(usage.value, now) : [] };
+      }).finally(() => { pending = undefined; });
+      return pending;
+    },
+  };
+}
+
+let scope = "";
+let reader = createProviderAccountReader(codexHookRpc());
+
+/** Catalog polling schedules account reads without delaying chat/catalog delivery. */
+export function cachedProviderAccount(endpointId: string, env = process.env): EndpointModelCatalog | undefined {
+  const root = env.GRANTTAP_CODEX_DIR ?? env.NODVOX_CODEX_DIR ?? env.CODEX_HOME ?? join(homedir(), ".codex");
+  let identity: string;
+  try { identity = `${root}:${statSync(join(root, "auth.json")).mtimeMs}`; } catch { return undefined; }
+  if (identity !== scope) { scope = identity; reader = createProviderAccountReader(codexHookRpc({ env })); }
+  void reader.refresh(endpointId);
+  return reader.current(endpointId);
+}

package/apps/bridge/src/provider-account-status/projection.ts

@@ -0,0 +1,42 @@
+import type { AdvertisedModel, ProviderAccountUsage } from "../../../../packages/protocol/schema";
+
+const EFFORTS = ["low", "medium", "high", "xhigh", "max", "ultra"] as const;
+type Effort = typeof EFFORTS[number];
+
+const ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159}$/;
+const text = (value: unknown) => typeof value === "string"
+  ? value.replace(/[\x00-\x1f\x7f]/g, " ").trim().slice(0, 240) || undefined : undefined;
+
+/** The account API's allowlist, never its identity, instructions or credits. */
+export function projectAccountModels(value: any, endpointId: string, now: number): AdvertisedModel[] {
+  if (!Array.isArray(value?.data)) return [];
+  const rows = new Map<string, AdvertisedModel>();
+  for (const item of value.data) {
+    if (item?.hidden === true || typeof item?.model !== "string" || !ID.test(item.model)) continue;
+    rows.set(item.model, { modelId: item.model, endpointId, provider: "codex", source: "advertised",
+      label: text(item.displayName), description: text(item.description), priority: rows.size, observedAt: now,
+      ...(Array.isArray(item.supportedReasoningEfforts) ? { supportedEfforts:
+        [...new Set<Effort>(item.supportedReasoningEfforts.map((x: any) => x?.reasoningEffort)
+          .filter((x: unknown): x is Effort => EFFORTS.includes(x as Effort)))] } : {}) });
+    if (rows.size === 64) break;
+  }
+  return [...rows.values()];
+}
+
+export function projectAccountUsage(value: any, now: number): ProviderAccountUsage[] {
+  const limits = value?.rateLimitsByLimitId && typeof value.rateLimitsByLimitId === "object"
+    ? Object.values(value.rateLimitsByLimitId) : value?.rateLimits ? [value.rateLimits] : [];
+  return limits.slice(0, 16).flatMap((item: any) => {
+    const limitId = text(item?.limitId) ?? "codex";
+    if (!ID.test(limitId)) return [];
+    const windows = (["primary", "secondary"] as const).flatMap(id => {
+      const row = item?.[id];
+      if (!Number.isFinite(row?.usedPercent) || row.usedPercent < 0 || row.usedPercent > 100
+        || !Number.isInteger(row?.windowDurationMins) || row.windowDurationMins <= 0
+        || !Number.isFinite(row?.resetsAt) || row.resetsAt <= 0) return [];
+      return [{ id, usedPercent: row.usedPercent, windowMinutes: row.windowDurationMins,
+        resetsAt: row.resetsAt * 1_000 }];
+    });
+    return windows.length ? [{ provider: "codex" as const, limitId, observedAt: now, windows }] : [];
+  });
+}

package/apps/bridge/src/provider-model-catalog/README.md

@@ -20,3 +20,16 @@ CLI aliases as aliases, whose resolved versions remain the provider's choice.
 Behavior tests: [`tests/catalog.test.ts`](tests/catalog.test.ts).
 
 Apache License 2.0. See [LICENSE](../../../../LICENSE).
+
+## All four providers
+
+`readProviderModelCatalog` is the shared endpoint entry point. Fresh Codex
+app-server picker metadata takes precedence over its disk cache. Cursor's native
+`models` and Grok's native `models` commands supply exact account model IDs;
+listing runs without a prompt, and failed/signed-out catalogs advertise nothing.
+The wire allows up to 256 models so Cursor's parameter variants are not silently
+cut to 64. Claude's supported CLI aliases remain aliases rather than a frozen
+list of version numbers. Client model choices use the existing resume flags.
+
+Account percentages travel separately as optional `accountUsage` observations.
+See [provider account status](../provider-account-status/README.md).

package/apps/bridge/src/provider-model-catalog/cli-models.ts

@@ -0,0 +1,52 @@
+import { execFile } from "node:child_process";
+import { existsSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import type { AdvertisedModel } from "../../../../packages/protocol/schema";
+import { resolveCursorAgentBin } from "../reply/process/cursor-agent-bin";
+
+export function parseCLIModels(output: string, provider: "cursor" | "grok", endpointId: string,
+  now: number): AdvertisedModel[] {
+  if (/not authenticated|please log in|login required/i.test(output)) return [];
+  const clean = output.replace(/\x1b\[[0-9;]*m/g, "");
+  return clean.split("\n").flatMap(line => {
+    const match = provider === "cursor"
+      ? /^([a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159})\s+-\s+(.+)$/.exec(line.trim())
+      : /^\s*[*-]\s+([a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159})(?:\s+\(([^)]+)\))?\s*$/.exec(line);
+    return match ? [{ modelId: match[1]!, label: (provider === "cursor" ? match[2]! : match[1]!).slice(0, 160),
+      provider, endpointId, observedAt: now, source: "advertised" as const }] : [];
+  }).slice(0, 240);
+}
+
+let report: AdvertisedModel[] = [];
+let checkedAt = 0;
+let pending = false;
+let scope = "";
+
+function read(binary: string, args: string[]): Promise<string> {
+  return new Promise(resolve => execFile(binary, args,
+    { cwd: homedir(), timeout: 10_000, maxBuffer: 128_000, windowsHide: true },
+    (error, stdout) => resolve(error ? "" : stdout)));
+}
+
+/** Only native listing commands; no prompt, session, login or auto-approval flags. */
+export function cachedCLIModels(endpointId: string, env = process.env): AdvertisedModel[] {
+  const currentScope = [homedir(), endpointId, env.GRANTTAP_CURSOR_AGENT_BIN,
+    env.GRANTTAP_GROK_BIN, env.GRANTTAP_GROK_DIR].join("\u001f");
+  if (scope !== currentScope) { scope = currentScope; report = []; checkedAt = 0; }
+  if (!pending && Date.now() - checkedAt > 120_000) {
+    checkedAt = Date.now();
+    pending = true;
+    const cursor = resolveCursorAgentBin(env);
+    const grokRoot = env.GRANTTAP_GROK_DIR ?? join(homedir(), ".grok");
+    const grok = env.GRANTTAP_GROK_BIN ?? join(grokRoot, "bin/grok");
+    void Promise.all([
+      existsSync(cursor) ? read(cursor, ["models"]) : "",
+      existsSync(join(grokRoot, "auth.json")) && existsSync(grok) ? read(grok, ["models"]) : "",
+    ]).then(([a, b]) => {
+      if (scope === currentScope) report = [...parseCLIModels(a, "cursor", endpointId, Date.now()),
+        ...parseCLIModels(b, "grok", endpointId, Date.now())];
+    }).finally(() => { pending = false; });
+  }
+  return report.filter(row => Date.now() - row.observedAt <= 5 * 60_000);
+}

package/apps/bridge/src/provider-model-catalog/index.ts

@@ -3,6 +3,10 @@ import { homedir } from "node:os";
 import { join } from "node:path";
 import type { AdvertisedModel, EndpointModelCatalog } from "../../../../packages/protocol/schema";
 
+import { readClaudeUsage } from "../provider-account-status/claude-statusline";
+import { cachedCLIModels } from "./cli-models";
+import { cachedProviderAccount } from "../provider-account-status";
+
 const MAX_BYTES = 2_000_000;
 const MAX_AGE = 24 * 60 * 60_000;
 const MODEL_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159}$/;
@@ -36,7 +40,7 @@ function readCache(path: string): Record<string, unknown> {
 }
 
 /** Project only picker metadata from Codex's account-scoped cache, never prompts or identity. */
-export function readCodexModelCatalog(
+function readCachedCodexModels(
   endpointId: string, options: { path?: string; now?: number; env?: NodeJS.ProcessEnv } = {},
 ): EndpointModelCatalog {
   const now = options.now ?? Date.now();
@@ -61,3 +65,23 @@ export function readCodexModelCatalog(
     };
   } catch { return missing; }
 }
+
+/** Fresh native account metadata takes precedence over an expired on-disk cache. */
+export function readCodexModelCatalog(
+  endpointId: string, options: Parameters<typeof readCachedCodexModels>[1] = {},
+): EndpointModelCatalog {
+  const cached = readCachedCodexModels(endpointId, options);
+  if (options.path) return cached;
+  const live = cachedProviderAccount(endpointId, options.env);
+  if (!live) return cached;
+  return live.models.length ? live : { ...cached, accountUsage: live.accountUsage };
+}
+
+/** A shared endpoint catalog for all four existing coding providers. */
+export function readProviderModelCatalog(endpointId: string): EndpointModelCatalog {
+  const codex = readCodexModelCatalog(endpointId);
+  const cli = cachedCLIModels(endpointId);
+  return { ...codex, observedAt: Math.max(codex.observedAt, ...cli.map(row => row.observedAt)),
+    accountUsage: [...(codex.accountUsage ?? []), ...readClaudeUsage()],
+    stale: codex.stale === true && cli.length === 0, models: [...codex.models, ...cli].slice(0, 256) };
+}

package/apps/bridge/src/reply/README.md

@@ -14,3 +14,7 @@ resources that outlive the agent process need their own cancellation receipts.
 
 License: this module is distributed under the Apache License 2.0
 in the repository-root `LICENSE` file.
+
+Model reasoning effort reaches resumed and new provider turns as native arguments.
+Codex uses `model_reasoning_effort`; Claude uses `--effort`; Grok uses
+`--reasoning-effort`. Cursor effort variants are native model IDs.

package/apps/bridge/src/reply/index.ts

@@ -4,7 +4,8 @@ import { join } from "node:path";
 import type { SessionInfo, UserAttachment } from "../../../../packages/protocol/schema";
 import type { CodingAgent } from "../../../../packages/protocol/schema";
 import { explainClaudeFailure, resolveClaudeBinary } from "../providers/claude-bin";
-import { resolveCodexBinary } from "../providers/codex-bin";
+import { runCodex, runCodexNew } from "./process/codex-headless";
+import { providerEffortArgs } from "./process/provider-effort";
 import { configDir, isSessionPaused, loadRuntimeConfig, PAUSED_SESSION_REASON } from "../config";
 import { withAttachments } from "./payload/attachments";
 import { abortProcesses, runProcess } from "./process";
@@ -65,10 +66,11 @@ export function createCodexSession(
   attachments: UserAttachment[] = [],
   model?: string,
   operationKey?: string,
+  effort?: string,
 ): Promise<ReplyResult> {
   const workspace = resolveAgentWorkspace(cwd, "codex");
   return queued("__new_codex_task__", () => withAttachments(attachments, text, (prepared) =>
-    runCodexNew(prepared.prompt, workspace, timeoutMs, prepared.images, model, operationKey),
+    runCodexNew(prepared.prompt, workspace, timeoutMs, prepared.images, model, operationKey, effort),
   ));
 }
 
@@ -80,10 +82,11 @@ export function createClaudeSession(
   attachments: UserAttachment[] = [],
   model?: string,
   operationKey?: string,
+  effort?: string,
 ): Promise<ReplyResult> {
   const workspace = resolveAgentWorkspace(cwd, "claude");
   return queued("__new_claude_task__", () => withAttachments(attachments, text, (prepared) =>
-    runClaudeNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey),
+    runClaudeNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey, effort),
   ));
 }
 
@@ -94,10 +97,11 @@ export function createCursorSession(
   attachments: UserAttachment[] = [],
   model?: string,
   operationKey?: string,
+  effort?: string,
 ): Promise<ReplyResult> {
   const workspace = resolveAgentWorkspace(cwd, "cursor");
   return queued("__new_cursor_task__", () => withAttachments(attachments, text, (prepared) =>
-    runCursorNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey),
+    runCursorNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey, effort),
   ));
 }
 
@@ -108,10 +112,11 @@ export function createGrokSession(
   attachments: UserAttachment[] = [],
   model?: string,
   operationKey?: string,
+  effort?: string,
 ): Promise<ReplyResult> {
   const workspace = resolveAgentWorkspace(cwd, "grok");
   return queued("__new_grok_task__", () => withAttachments(attachments, text, (prepared) =>
-    runGrokNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey),
+    runGrokNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey, effort),
   ));
 }
 
@@ -154,7 +159,7 @@ function runClaude(
   const modeArgs = options.permissionMode
     ? ["--permission-mode", options.permissionMode]
     : [];
-  const effortArgs = options.effort ? ["--effort", options.effort] : [];
+  const effortArgs = providerEffortArgs("claude", options.effort);
   const args = [
     "-p", "--resume", session.sessionId, ...mcpArgs, ...modelArgs,
     ...modeArgs, ...effortArgs,
@@ -180,9 +185,9 @@ function runClaude(
 }
 
 function runClaudeNew(
-  text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string,
+  text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string, effort?: string,
 ): Promise<ReplyResult> {
-  const args = ["-p", ...(model ? ["--model", model] : []), "--output-format", "json", text];
+  const args = ["-p", ...(model ? ["--model", model] : []), ...providerEffortArgs("claude", effort), "--output-format", "json", text];
   const claude = resolveClaudeBinary();
   return runProcess(claude.path, args, cwd, timeoutMs, (stdout) => {
     try {
@@ -202,100 +207,3 @@ function runClaudeNew(
       : { ok: false, error: "Claude returned an empty response." };
   }, undefined, operationKey);
 }
-
-function parseCodexJsonl(stdout: string, fallbackSessionId?: string): ReplyResult {
-  let lastMessage = "";
-  let sessionId = fallbackSessionId;
-  let structured = false;
-  let failure = "";
-  for (const line of stdout.split("\n")) {
-    if (!line.trim()) continue;
-    try {
-      const event = JSON.parse(line) as {
-        type?: string;
-        thread_id?: string;
-        session_id?: string;
-        item?: { type?: string; text?: string; message?: string };
-        error?: { message?: string } | string;
-      };
-      structured = true;
-      if (event.type === "thread.started") {
-        sessionId = event.thread_id ?? event.session_id ?? sessionId;
-      }
-      if (event.item?.type === "agent_message" && typeof event.item.text === "string") {
-        lastMessage = event.item.text;
-      }
-      if (event.type === "error" || event.type === "turn.failed" || event.item?.type === "error") {
-        failure = (typeof event.error === "string" ? event.error : event.error?.message)
-          ?? event.item?.message ?? "Codex reported an error.";
-      }
-    } catch {
-      // Ignore non-JSON diagnostic lines.
-    }
-  }
-  if (failure) return { ok: false, error: failure.slice(0, 500) };
-  if (lastMessage) return { ok: true, text: lastMessage.slice(0, 4000), sessionId };
-  if (structured) return { ok: false, error: "Codex returned no agent message." };
-  const trimmed = stdout.trim();
-  return trimmed
-    ? { ok: true, text: trimmed.slice(0, 4000), sessionId }
-    : { ok: false, error: "Codex returned an empty response." };
-}
-
-function runCodex(
-  session: SessionInfo,
-  text: string,
-  timeoutMs: number,
-  images: string[] = [],
-  options: DeliveryOptions = {},
-): Promise<ReplyResult> {
-  const configured = loadRuntimeConfig().sessionAccess[session.sessionId];
-  const disabledMcp = loadRuntimeConfig().sessionMcpDisabled[session.sessionId] ?? [];
-  const sandbox = configured === "read-only"
-    ? "read-only"
-    : configured === "workspace"
-      ? "workspace-write"
-      : configured === "full"
-        ? "danger-full-access"
-        : null;
-  const accessArgs = sandbox ? ["-c", `sandbox_mode="${sandbox}"`] : [];
-  const mcpArgs = disabledMcp.flatMap((name) => [
-    "-c",
-    `mcp_servers.${tomlKey(name)}.enabled=false`,
-  ]);
-  const modelArgs = options.model ? ["-m", options.model] : [];
-  const imageArgs = images.flatMap((path) => ["-i", path]);
-  const args = [
-    "exec", "resume", ...accessArgs, ...mcpArgs, ...modelArgs, ...imageArgs,
-    session.sessionId, "--json", "-",
-  ];
-  return runProcess(
-    resolveCodexBinary(),
-    args,
-    session.cwd,
-    timeoutMs,
-    (stdout) => parseCodexJsonl(stdout, session.sessionId),
-    text,
-    session.sessionId,
-  );
-}
-
-function tomlKey(value: string): string {
-  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
-}
-
-function runCodexNew(
-  text: string,
-  cwd: string,
-  timeoutMs: number,
-  images: string[] = [],
-  model?: string,
-  operationKey?: string,
-): Promise<ReplyResult> {
-  // This is the supported non-interactive Codex path. It preserves the user's
-  // normal sandbox, approval, hooks, model, and auth configuration.
-  const imageArgs = images.flatMap((path) => ["-i", path]);
-  const args = ["exec", ...(model ? ["-m", model] : []), ...imageArgs,
-    "--json", "--skip-git-repo-check", "-"];
-  return runProcess(resolveCodexBinary(), args, cwd, timeoutMs, parseCodexJsonl, text, operationKey);
-}

package/apps/bridge/src/reply/process/codex-headless.ts

@@ -0,0 +1,104 @@
+import type { SessionInfo } from "../../../../../packages/protocol/schema";
+import { loadRuntimeConfig } from "../../config";
+import { resolveCodexBinary } from "../../providers/codex-bin";
+import { runProcess } from ".";
+import { providerEffortArgs } from "./provider-effort";
+import type { DeliveryOptions, ReplyResult } from "../payload/types";
+
+function parseCodexJsonl(stdout: string, fallbackSessionId?: string): ReplyResult {
+  let lastMessage = "";
+  let sessionId = fallbackSessionId;
+  let structured = false;
+  let failure = "";
+  for (const line of stdout.split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const event = JSON.parse(line) as {
+        type?: string;
+        thread_id?: string;
+        session_id?: string;
+        item?: { type?: string; text?: string; message?: string };
+        error?: { message?: string } | string;
+      };
+      structured = true;
+      if (event.type === "thread.started") {
+        sessionId = event.thread_id ?? event.session_id ?? sessionId;
+      }
+      if (event.item?.type === "agent_message" && typeof event.item.text === "string") {
+        lastMessage = event.item.text;
+      }
+      if (event.type === "error" || event.type === "turn.failed" || event.item?.type === "error") {
+        failure = (typeof event.error === "string" ? event.error : event.error?.message)
+          ?? event.item?.message ?? "Codex reported an error.";
+      }
+    } catch {
+      // Ignore non-JSON diagnostic lines.
+    }
+  }
+  if (failure) return { ok: false, error: failure.slice(0, 500) };
+  if (lastMessage) return { ok: true, text: lastMessage.slice(0, 4000), sessionId };
+  if (structured) return { ok: false, error: "Codex returned no agent message." };
+  const trimmed = stdout.trim();
+  return trimmed
+    ? { ok: true, text: trimmed.slice(0, 4000), sessionId }
+    : { ok: false, error: "Codex returned an empty response." };
+}
+
+export function runCodex(
+  session: SessionInfo,
+  text: string,
+  timeoutMs: number,
+  images: string[] = [],
+  options: DeliveryOptions = {},
+): Promise<ReplyResult> {
+  const configured = loadRuntimeConfig().sessionAccess[session.sessionId];
+  const disabledMcp = loadRuntimeConfig().sessionMcpDisabled[session.sessionId] ?? [];
+  const sandbox = configured === "read-only"
+    ? "read-only"
+    : configured === "workspace"
+      ? "workspace-write"
+      : configured === "full"
+        ? "danger-full-access"
+        : null;
+  const accessArgs = sandbox ? ["-c", `sandbox_mode="${sandbox}"`] : [];
+  const mcpArgs = disabledMcp.flatMap((name) => [
+    "-c",
+    `mcp_servers.${tomlKey(name)}.enabled=false`,
+  ]);
+  const modelArgs = options.model ? ["-m", options.model] : [];
+  const imageArgs = images.flatMap((path) => ["-i", path]);
+  const args = [
+    "exec", "resume", ...accessArgs, ...mcpArgs, ...modelArgs, ...providerEffortArgs("codex", options.effort), ...imageArgs,
+    session.sessionId, "--json", "-",
+  ];
+  return runProcess(
+    resolveCodexBinary(),
+    args,
+    session.cwd,
+    timeoutMs,
+    (stdout) => parseCodexJsonl(stdout, session.sessionId),
+    text,
+    session.sessionId,
+  );
+}
+
+function tomlKey(value: string): string {
+  return `"${value.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`;
+}
+
+export function runCodexNew(
+  text: string,
+  cwd: string,
+  timeoutMs: number,
+  images: string[] = [],
+  model?: string,
+  operationKey?: string,
+  effort?: string,
+): Promise<ReplyResult> {
+  // This is the supported non-interactive Codex path. It preserves the user's
+  // normal sandbox, approval, hooks, model, and auth configuration.
+  const imageArgs = images.flatMap((path) => ["-i", path]);
+  const args = ["exec", ...(model ? ["-m", model] : []), ...providerEffortArgs("codex", effort), ...imageArgs,
+    "--json", "--skip-git-repo-check", "-"];
+  return runProcess(resolveCodexBinary(), args, cwd, timeoutMs, parseCodexJsonl, text, operationKey);
+}

package/apps/bridge/src/reply/process/provider-effort.ts

@@ -0,0 +1,10 @@
+/** Provider-native controls, never interpolated into a prompt or shell. */
+export function providerEffortArgs(provider: string, effort?: string): string[] {
+  if (!effort) return [];
+  const supported = provider === "codex" ? ["low", "medium", "high", "xhigh", "max", "ultra"]
+    : provider === "claude" ? ["low", "medium", "high", "xhigh", "max"]
+    : provider === "grok" ? ["low", "medium", "high"] : [];
+  if (!supported.includes(effort)) return [];
+  return provider === "codex" ? ["-c", `model_reasoning_effort="${effort}"`]
+    : [provider === "grok" ? "--reasoning-effort" : "--effort", effort];
+}

package/apps/bridge/src/reply/process/provider-headless.ts

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import type { SessionInfo } from "../../../../../packages/protocol/schema";
 import { runProcess } from ".";
+import { providerEffortArgs } from "./provider-effort";
 import type { ReplyResult } from "../payload/types";
 import type { DeliveryOptions } from "../payload/types";
 import { resolveCursorAgentBin } from "./cursor-agent-bin";
@@ -61,7 +62,7 @@ function parseGrok(stdout: string, fallback: string): ReplyResult {
 }
 
 export function runCursorNew(
-  text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string,
+  text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string, effort?: string,
 ): Promise<ReplyResult> {
   return runProcess(
     cursorBin(), ["-p", ...(model ? ["--model", model] : []),
@@ -81,12 +82,12 @@ export function runCursorResume(
 }
 
 export function runGrokNew(
-  text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string,
+  text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string, effort?: string,
 ): Promise<ReplyResult> {
   const sessionId = randomUUID();
   const args = [
     "--no-auto-update", "--cwd", cwd, "--session-id", sessionId,
-    ...(model ? ["--model", model] : []),
+    ...(model ? ["--model", model] : []), ...providerEffortArgs("grok", effort),
     "-p", text, "--output-format", "streaming-json",
   ];
   return runProcess(grokBin(), args, cwd, timeoutMs, (stdout) => parseGrok(stdout, sessionId),
@@ -101,7 +102,7 @@ export function runGrokResume(
     "--no-auto-update", ...(session.cwd ? ["--cwd", session.cwd] : []),
     ...(options.model ? ["--model", options.model] : []),
     ...(permission ? ["--permission-mode", permission] : []),
-    ...(options.effort ? ["--reasoning-effort", options.effort] : []),
+    ...providerEffortArgs("grok", options.effort),
     "--resume", session.sessionId, "-p", text, "--output-format", "streaming-json",
   ];
   return runProcess(

package/apps/mcp/src/desktop/delivery/task-create.ts

@@ -31,7 +31,7 @@ export function desktopTaskCreate(
   const query = input as Record<string, unknown>;
   const projectId = query.project_id, bindingId = query.binding_id;
   const operationId = query.operation_id, text = query.text;
-  const provider = query.provider, model = query.model;
+  const provider = query.provider, model = query.model, effort = query.effort;
   if (typeof projectId !== "string" || !projectId || projectId.length > 128
     || typeof bindingId !== "string" || !bindingId || bindingId.length > 128
     || query.endpoint_id !== endpoint
@@ -42,6 +42,9 @@ export function desktopTaskCreate(
     || model !== undefined && (typeof model !== "string" || model.length > 128)) {
     return Promise.resolve(undefined);
   }
+  if (effort !== undefined && !["low", "medium", "high", "xhigh", "max", "ultra"].includes(effort as string)) {
+    return Promise.resolve(undefined);
+  }
   const loaded = readStoreState(storePath);
   const binding = loaded.status === "ok"
     ? loaded.state.bindings.find((row) => row.bindingId === bindingId
@@ -86,7 +89,7 @@ export function desktopTaskCreate(
   if (!attachments || !text.trim() && attachments.length === 0) return Promise.resolve(undefined);
   const start = create ?? providers[agent];
   const result = start(text.trim(), workspace, 240_000, attachments, model as string | undefined,
-    operationId).then((reply) => ({
+    operationId, effort as string | undefined).then((reply) => ({
       operation: "desktop.task_create", created: reply.ok,
       session_id: reply.ok ? reply.sessionId ?? null : null,
       error: reply.ok ? null : reply.error.slice(0, 500),

package/apps/mcp/src/desktop/delivery/task-send.ts

@@ -15,7 +15,7 @@ export function desktopTaskSend(input: unknown,
   if (!input || typeof input !== "object" || Array.isArray(input)) return Promise.resolve(undefined);
   const query = input as Record<string, unknown>;
   const { project_id: projectId, task_id: taskId, session_id: sessionId,
-    delivery_id: deliveryId, text, model } = query;
+    delivery_id: deliveryId, text, model, effort } = query;
   if (typeof projectId !== "string" || !projectId || projectId.length > 128
     || typeof taskId !== "string" || !taskId || taskId.length > 128
     || typeof sessionId !== "string" || !sessionId || sessionId.length > 128
@@ -25,6 +25,9 @@ export function desktopTaskSend(input: unknown,
     || model !== undefined && (typeof model !== "string" || !/^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159}$/.test(model))) {
     return Promise.resolve(undefined);
   }
+  if (effort !== undefined && !["low", "medium", "high", "xhigh", "max", "ultra"].includes(effort as string)) {
+    return Promise.resolve(undefined);
+  }
   const loaded = readStoreState(storePath);
   if (loaded.status !== "ok") return Promise.resolve(undefined);
   const task = loaded.state.tasks.find((item) => item.taskId === taskId);
@@ -51,7 +54,8 @@ export function desktopTaskSend(input: unknown,
     lastActivityAt: execution.activeAt ?? execution.updatedAt ?? execution.startedAt,
     tokensSession: 0, tokensLastTurn: 0,
   };
-  const options = model === undefined ? {} : { model: model as string };
+  const options = { ...(model === undefined ? {} : { model: model as string }),
+    ...(effort === undefined ? {} : { effort: effort as string }) };
   const operation = deliver(session, text.trim(), 240_000, attachments, options).then((result) => ({
     operation: "desktop.task_send", accepted: result.ok,
     error: result.ok ? null : result.error.slice(0, 500),

package/apps/mcp/src/desktop/mesh-project.ts

@@ -84,7 +84,7 @@ export function desktopMeshSnapshots(storePath = join(configDir(), "project-mesh
     operation: "desktop.mesh_snapshots" as const,
     snapshots: (desktopWorkspace(storePath)?.projects ?? []).flatMap((project) =>
       desktopFixtureSnapshot({ project_id: project.project_id }, storePath) ?? [])
-      .map((snapshot) => withDesktopModels(snapshot, models)),
+      .map((snapshot, index) => withDesktopModels(snapshot, models, index === 0)),
   };
 }
 

package/apps/mcp/src/desktop/models/index.ts

@@ -1,13 +1,13 @@
 import type { EndpointModelCatalog, MeshSnapshot } from "../../../../../packages/protocol/schema";
 import { computerId } from "../../../../bridge/src/mesh/identity/computer";
-import { readCodexModelCatalog } from "../../../../bridge/src/provider-model-catalog";
+import { readProviderModelCatalog } from "../../../../bridge/src/provider-model-catalog";
 
 /** Native picker metadata is local to this Mac; discovering it never starts an agent. */
 export function desktopModelCatalog(): EndpointModelCatalog {
-  return readCodexModelCatalog(computerId());
+  return readProviderModelCatalog(computerId());
 }
 
 export function withDesktopModels(snapshot: MeshSnapshot,
-  catalog = desktopModelCatalog()): MeshSnapshot {
-  return { ...snapshot, publisherEndpointId: catalog.endpointId, modelCatalog: [catalog] };
+  catalog = desktopModelCatalog(), includeModels = true): MeshSnapshot {
+  return { ...snapshot, publisherEndpointId: catalog.endpointId, modelCatalog: includeModels ? [catalog] : undefined };
 }

package/bin/granttap-mcp.mjs

@@ -59,11 +59,11 @@ if (command === "mcp") {
 } else if (command === "internal" && argument === "monitor") {
   entry = join(root, "apps", "bridge", "src", "bin", "runtime", "monitor.ts");
 } else if (command === "internal" && argument === "hook" && [
-  "claude", "claude-prompt", "codex", "codex-policy", "cursor", "cursor-after", "cursor-mcp",
+  "claude", "claude-prompt", "claude-statusline", "codex", "codex-policy", "cursor", "cursor-after", "cursor-mcp",
 ].includes(commandArgs[1])) {
   const route = commandArgs[1];
   const hookDir = route === "cursor-mcp" ? "runtime" : "hooks";
-  const hookEntry = route === "codex-policy"
+  const hookEntry = route === "claude-statusline" ? "statusline/claude-statusline-hook.ts" : route === "codex-policy"
     ? "codex-policy-hook.ts"
     : route === "cursor-after"
       ? "cursor-after-shell.ts"

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.64
+npm install -g granttap-mcp@0.8.66
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.64\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.66\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.64";
+const PACKAGE = "granttap-mcp@0.8.66";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.64",
+  "version": "0.8.66",
   "description": "Personal live control center runtime for local coding agents on iPhone and Apple Watch.",
   "type": "module",
   "bin": {

package/packages/protocol/messages/interaction/index.ts

@@ -61,7 +61,7 @@ export const UserMessage = z.object({
   permissionMode: z.enum([
     "acceptEdits", "auto", "bypassPermissions", "manual", "dontAsk", "plan",
   ]).optional(),
-  effort: z.enum(["low", "medium", "high", "xhigh", "max"]).optional(),
+  effort: z.enum(["low", "medium", "high", "xhigh", "max", "ultra"]).optional(),
   createdAt: z.number(),
 });
 export type UserMessage = z.infer<typeof UserMessage>;

package/packages/protocol/messages/mesh/catalog/provider.ts

@@ -0,0 +1,56 @@
+import { z } from "zod";
+import { Identifier, Label, MeshProvider } from "../endpoint";
+
+/**
+ * One SKILL.md the Project catalog published. Presence is not permission;
+ * Governance is the only authority for what may run.
+ */
+export const SharedSkillState = z.enum(["discovered", "installed", "available", "used", "conflict", "unknown"]);
+export type SharedSkillState = z.infer<typeof SharedSkillState>;
+export const SharedSkill = z.object({
+  name: z.string().trim().min(1).max(160),
+  endpointId: Identifier.optional(),
+  description: z.string().trim().min(1).max(500).optional(),
+  version: z.string().trim().min(1).max(64).optional(),
+  digest: z.string().trim().min(1).max(128).optional(),
+  source: z.string().trim().min(1).max(240).optional(),
+  state: SharedSkillState.optional(),
+}).strict();
+export type SharedSkill = z.infer<typeof SharedSkill>;
+
+export const ProviderAccountUsage = z.object({
+  provider: MeshProvider,
+  limitId: z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._:/-]{0,159}$/),
+  observedAt: z.number().nonnegative(),
+  windows: z.array(z.object({
+    id: z.enum(["primary", "secondary"]),
+    usedPercent: z.number().min(0).max(100),
+    windowMinutes: z.number().int().positive(),
+    resetsAt: z.number().positive(),
+  }).strict()).max(2),
+}).strict();
+export type ProviderAccountUsage = z.infer<typeof ProviderAccountUsage>;
+
+export const AdvertisedModel = z.object({
+  modelId: z.string().trim().min(1).max(160),
+  provider: MeshProvider,
+  endpointId: Identifier,
+  source: z.enum(["observed", "advertised"]),
+  label: Label.optional(),
+  description: z.string().trim().min(1).max(240).optional(),
+  priority: z.number().int().nonnegative().max(10_000).optional(),
+  observedAt: z.number().nonnegative(),
+  supportedEfforts: z.array(z.enum(["low", "medium", "high", "xhigh", "max", "ultra"])).max(6).optional(),
+}).strict();
+export type AdvertisedModel = z.infer<typeof AdvertisedModel>;
+
+export const EndpointModelCatalog = z.object({
+  endpointId: Identifier,
+  observedAt: z.number().nonnegative(),
+  stale: z.boolean().optional(),
+  models: z.array(AdvertisedModel).max(256),
+  reason: z.string().trim().min(1).max(240).optional(),
+  accountUsage: z.array(ProviderAccountUsage).max(16).optional(),
+}).strict();
+export type EndpointModelCatalog = z.infer<typeof EndpointModelCatalog>;
+

package/packages/protocol/messages/mesh/snapshot.ts

@@ -1,4 +1,6 @@
 import { z } from "zod";
+import { SharedSkill, EndpointModelCatalog } from "./catalog/provider";
+export * from "./catalog/provider";
 import { ProjectCodeMap } from "./graph/code-map";
 import { Identifier, Label, MeshProvider } from "./endpoint";
 import {
@@ -38,23 +40,6 @@ export const IntegrationPeer = z.object({
 }).strict();
 export type IntegrationPeer = z.infer<typeof IntegrationPeer>;
 
-/**
- * One SKILL.md the Project catalog published. Presence is not permission;
- * Governance is the only authority for what may run.
- */
-export const SharedSkillState = z.enum(["discovered", "installed", "available", "used", "conflict", "unknown"]);
-export type SharedSkillState = z.infer<typeof SharedSkillState>;
-export const SharedSkill = z.object({
-  name: z.string().trim().min(1).max(160),
-  endpointId: Identifier.optional(),
-  description: z.string().trim().min(1).max(500).optional(),
-  version: z.string().trim().min(1).max(64).optional(),
-  digest: z.string().trim().min(1).max(128).optional(),
-  source: z.string().trim().min(1).max(240).optional(),
-  state: SharedSkillState.optional(),
-}).strict();
-export type SharedSkill = z.infer<typeof SharedSkill>;
-
 /** One MCP server actually advertised by a Project execution. */
 export const ProjectMcpServer = z.object({
   name: Label,
@@ -110,27 +95,6 @@ export const ProjectCapabilityObservation = z.object({
 }).strict();
 export type ProjectCapabilityObservation = z.infer<typeof ProjectCapabilityObservation>;
 
-export const AdvertisedModel = z.object({
-  modelId: z.string().trim().min(1).max(160),
-  provider: MeshProvider,
-  endpointId: Identifier,
-  source: z.enum(["observed", "advertised"]),
-  label: Label.optional(),
-  description: z.string().trim().min(1).max(240).optional(),
-  priority: z.number().int().nonnegative().max(10_000).optional(),
-  observedAt: z.number().nonnegative(),
-}).strict();
-export type AdvertisedModel = z.infer<typeof AdvertisedModel>;
-
-export const EndpointModelCatalog = z.object({
-  endpointId: Identifier,
-  observedAt: z.number().nonnegative(),
-  stale: z.boolean().optional(),
-  models: z.array(AdvertisedModel).max(64),
-  reason: z.string().trim().min(1).max(240).optional(),
-}).strict();
-export type EndpointModelCatalog = z.infer<typeof EndpointModelCatalog>;
-
 export const ProjectBackbone = z.object({
   projectId: Identifier,
   head: z.string().trim().min(1).max(128).optional(),