granttap-mcp 0.8.79 → 0.8.81

package/README.md

@@ -32,11 +32,11 @@ checkout. Received previews remain on the device for offline inspection.
 Messages sent to a chat open in Codex Desktop continue that same conversation,
 including while a turn is running. The runtime forwards them to the existing
 desktop owner and preserves the delivery ID across retries. **Pause** reaches
-that owner too. A confirmed receipt means Codex accepted the message; its answer
-then arrives through the existing chat history.
+that owner too. A provider acceptance receipt means Codex accepted the message; its answer
+then arrives through the existing chat history. Relay storage is a separate stage.
 
 The MCP runtime, plugins, and CLI use the GrantTap Commercial Source License.
-Product use requires authorized GrantTap account access; official TestFlight
+Managed service use requires authorized GrantTap account access; official TestFlight
 access remains free. Earlier releases through 0.8.75 retain their Apache-2.0
 permissions. The Apple apps, Engine, relay, and website have their own terms.
 
@@ -44,6 +44,76 @@ permissions. The Apple apps, Engine, relay, and website have their own terms.
 [Security model](SECURITY.md) ·
 [Relay source](https://github.com/sergii-ziborov/granttap-relay)
 
+## Start here
+
+- [Connect your computer and devices](#account-mesh-and-devices)
+- [Choose a connection mode and plan](#plans-and-what-you-pay-for)
+- [Provider support](#supported-providers)
+- [Install provider integrations](#install)
+- [Messages, queues and decisions](#messages-queues-and-decisions)
+- [Project Mesh and task transfer](#project-mesh-and-task-handoff)
+- [Approvals and questions](#decisions-and-claude-questions)
+- [Security and relay boundary](#relay-boundary)
+- [Troubleshooting and help](#troubleshooting-and-help)
+- [License](#license)
+
+## Plans and what you pay for
+
+Planned US prices for the first commercial release:
+
+| Plan | Monthly price | Managed publishing computers |
+| --- | ---: | ---: |
+| Personal | $4.99 | 2 |
+| Personal Plus | $7.99 | 5 |
+| Fleet | $13.99 | 15 |
+
+The same core GrantTap features are included in every monthly plan. A computer
+running several supported agents still uses one publishing-computer seat.
+iPhone, iPad, Apple Watch and Macs used only as controllers do not use additional
+execution-computer seats. Fleet is a larger personal allowance, without an
+enterprise SLA or a per-person license.
+
+An eligible new Apple subscription starts with **7 days free**, then renews
+monthly at the price shown by Apple. To avoid renewal, cancel at least 24 hours
+before the trial ends in Apple's subscription settings.
+A local cache is not deleted when managed access ends.
+
+**Official TestFlight builds include all features without a purchase or
+subscription.** A trial and TestFlight access are different forms of access.
+Paid products are still being prepared for commercial launch; the App Store
+purchase sheet determines availability, localized prices, eligibility and terms.
+Models, AI tokens and coding-provider plans are purchased separately.
+
+**Mac Local is a separate $39.99 one-time purchase** for local control and an
+own relay. Hosted managed delivery is not included in that purchase. An active
+Personal subscription already covers a managed Mac client; both purchases are
+not required for the same managed mode. npm distributes the computer runtime;
+it does not sell an independent subscription or unlock a hosted entitlement.
+
+See [current pricing](https://granttap.com/pricing),
+[terms](https://granttap.com/terms) and [Help / FAQ](https://granttap.com/support).
+
+## Messages, queues and decisions
+
+1. The controller encrypts the message or decision and submits it to the relay.
+2. A **relay storage receipt** confirms that the relay saved it durably. The
+   computer can be asleep or offline at this point.
+3. The computer receives the packet when connected, routes it to the intended
+   Task/execution and reports provider acceptance, failure or a required decision.
+4. The provider's answer returns through the existing conversation.
+
+A saved message does not mean the agent has started. Queue and delivery stages
+remain distinct; bounded storage, retention, access checks and service limits
+can reject a submission with an explicit error. A controller does not need to
+wait for the execution computer before showing a confirmed relay save.
+
+Use **Queue** to inspect waiting deliveries, **Send now** for an eligible queued
+entry, and the available cancel action to stop a pending delivery. Delivery IDs
+survive retries so a transport retry is not a request to run the prompt twice.
+An already accepted or completed provider operation cannot be undone by deleting
+its local queue card. Provider-wide deny rules always take precedence over a
+mobile approval, including workspace and native-tool restrictions.
+
 ## Account Mesh and devices
 
 The passkey Account Mesh is the person's relay space. It exists with zero
@@ -84,7 +154,7 @@ device pairing without a passkey account.
 ## Supported providers
 
 - Claude Code and Codex: primary local control and continuation paths.
-- Cursor: Task visibility and supported local controls, with narrower coverage.
+- Cursor (Beta): Task visibility and supported local controls, with narrower coverage.
 - Grok Build: observable work where the installed runtime exposes it.
 
 GrantTap reports the depth each provider actually exposes. Visibility does not
@@ -542,8 +612,8 @@ is still plain `Shell`.
 
 The Mesh keys a computer by an identity written down once, on first use, in
 `computer.json` in the config directory — the hostname it had then — and
-keeps it. A Mac renamed by the network it joins ("Mac.lan" at home,
-"Serhiis-MacBook-Pro.local" elsewhere) used to become a second computer with
+keeps it. A Mac renamed by the network it joins ("workstation.home" on one network,
+"workstation.local" elsewhere) used to become a second computer with
 its own open executions and repository bindings; now every later hostname is
 remembered as a former name of the same machine, its leftover executions are
 closed and its bindings marked unavailable, and the current hostname stays
@@ -679,6 +749,38 @@ APNs carries a content-neutral wake only. It contains no prompt, task title,
 command, path, request ID, or ciphertext. See [SECURITY.md](SECURITY.md) for the
 complete boundary and reporting instructions.
 
+## Troubleshooting and help
+
+- **Computer not visible:** run `granttap status`, check the helper is running,
+  then check Devices in the controller. The same passkey links the same account;
+  a display name or IP address is not a computer identity.
+- **Mac asks for local access:** complete GrantTap's local consent flow for the
+  installed helper. A provider OAuth login and granting the Mac app local access
+  serve different purposes.
+- **Message saved while the computer is offline:** keep the queued entry. A
+  relay receipt confirms storage, while the agent can continue only when its
+  execution computer and provider become available.
+- **An approval cannot be completed:** open the exact Task and inspect its native
+  restriction or pending form. GrantTap cannot override a provider's global deny.
+- **History or Agents missing:** check that the execution is routed to the right
+  computer and update both the helper and controller. Nested agents stay inside
+  their parent Task; they are not separate root Tasks.
+- **Health has no current architecture:** check the reported checkout and Engine
+  on the publishing computer, then request a rebuild. An old or partial report
+  remains inspectable and must not be treated as verified current architecture.
+- **No purchase shown:** the product may not be released in that storefront.
+  TestFlight does not require a purchase. Use Restore Purchases for an existing
+  Apple purchase and the same GrantTap passkey for account access.
+
+Update the helper with `npm install -g granttap-mcp@latest`, then reopen the
+coding-provider integration if it still runs an older process. Keep existing
+pairings; resetting an account or removing local history is not an update step.
+
+[Help and connection pictures](https://granttap.com/support) are also available
+in the Apple apps. Use the support contact there for product issues. Report
+security vulnerabilities through [SECURITY.md](SECURITY.md); do not put pairing
+QR codes, credentials or private chat transcripts into public issues.
+
 ## Development
 
 ```bash

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.79
+npm install -g granttap-mcp@0.8.81
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.79\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.81\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.79";
+const PACKAGE = "granttap-mcp@0.8.81";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.79",
+  "version": "0.8.81",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {

package/packages/core/relay-client.ts

@@ -1,17 +1,16 @@
 /** Shared authenticated relay transport. See README.md for delivery and encryption boundaries. */
 import WebSocket from "ws";
-import { ManagedRelayLease, RelaySocketHealth, relayUpgradeHeaders } from "./socket-lifecycle";
+import { ManagedRelayLease, RelaySocketHealth, RelayReconnectBackoff, relayUpgradeHeaders } from "./socket-lifecycle";
 import { OutboundFrameQueue, sendEncryptedPayload } from "./outbound-scheduler";
 import { openRelayMessage } from "./relay-inbound";
 import { consumeTaskJobOffer, type TaskDispatchListener } from "./task-dispatch";
 import { Payload, type Role } from "../protocol/schema";
-import { peerPublicKeys, sealWithTransferKey } from "./crypto";
+import { peerPublicKeys } from "./crypto";
 import type { PeerConfig, RelayClientOptions, SendOptions } from "./relay-client-types";
 export type { PeerConfig, RelayClientOptions, SendOptions } from "./relay-client-types";
 import { RelayMessageAcceptance } from "./replay-store";
-import { sealEnvelope } from "./relay-envelope";
+import { sealEnvelope, sealSessionPayload } from "./relay-envelope";
 export { sealEnvelope } from "./relay-envelope";
-
 /** Return true only after this consumer has durably accepted the payload. */
 type Listener = (p: Payload, peerPublicKey: string) => boolean | void | Promise<boolean | void>;
 
@@ -25,7 +24,7 @@ export class RelayClient {
   private intentionalClose = false;
   private connectPromise?: Promise<void>;
   private reconnectTimer?: NodeJS.Timeout;
-  private reconnectDelay: number;
+  private readonly reconnect: RelayReconnectBackoff;
   private readonly socketHealth = new RelaySocketHealth();
   private readonly admissionLease = new ManagedRelayLease();
   private readonly sessionKeys = new Map<string, string>();
@@ -35,7 +34,7 @@ export class RelayClient {
     private readonly cfg: PeerConfig,
     private readonly opts: RelayClientOptions = {},
   ) {
-    this.reconnectDelay = opts.minReconnectMs ?? 1_000;
+    this.reconnect = new RelayReconnectBackoff(opts.minReconnectMs, opts.maxReconnectMs);
     if (opts.onTaskDispatch) this.taskDispatchListeners.add(opts.onTaskDispatch);
     this.replay = new RelayMessageAcceptance(opts.replayPath);
   }
@@ -57,6 +56,7 @@ export class RelayClient {
   connect(timeoutMs = 10_000): Promise<void> {
     if (this.isConnected) return Promise.resolve();
     if (this.connectPromise) return this.connectPromise;
+    if (this.reconnectTimer) return Promise.reject(new Error('Relay reconnect is waiting for its retry window.'));
 
     this.intentionalClose = false;
     this.recipientRouting = false;
@@ -76,7 +76,7 @@ export class RelayClient {
         ws.send(frame, error => error ? reject(error) : resolve());
       }));
       this.frames = frames;
-      let opened = false;
+      let opened = false, openedAt: number | undefined;
       const timer = setTimeout(() => {
         ws.terminate();
         reject(new Error(`relay connect timeout (${this.cfg.relayUrl})`));
@@ -85,7 +85,7 @@ export class RelayClient {
       ws.on("open", () => {
         opened = true;
         clearTimeout(timer);
-        this.reconnectDelay = this.opts.minReconnectMs ?? 1_000;
+        openedAt = Date.now();
         this.socketHealth.start(ws, this.opts.pingIntervalMs ?? 20_000);
         this.admissionLease.start(ws, this.opts);
         // Announce ourselves. The envelope's cleartext (room, from) is what the
@@ -99,16 +99,21 @@ export class RelayClient {
         resolve();
       });
       ws.on("message", (data: WebSocket.RawData) => void this.onRaw(data.toString()));
+      ws.on('unexpected-response', (_request, response) => {
+        this.reconnect.defer(response.headers['retry-after']);
+        response.resume(); ws.terminate();
+        clearTimeout(timer); reject(new Error('Relay upgrade was not accepted.'));
+      });
       ws.on("error", (err) => {
         clearTimeout(timer);
         if (!opened) reject(err);
       });
-      ws.on("close", () => {
+      ws.on("close", (code, reason) => {
         frames.cancel();
         clearTimeout(timer);
         this.socketHealth.stop(ws);
         this.admissionLease.stop(ws);
-        if (this.ws === ws) this.ws = undefined;
+        if (this.ws === ws) { this.reconnect.closed(openedAt, code, reason.toString()); this.ws = undefined; }
         if (!opened) reject(new Error(`relay connection closed (${this.cfg.relayUrl})`));
         this.scheduleReconnect();
       });
@@ -219,16 +224,7 @@ export class RelayClient {
     to: Role | "all" = this.otherRole(),
     options: SendOptions = {},
   ): Promise<void> {
-    const key = this.sessionKeys.get(sessionId);
-    if (!key) throw new Error(`no encryption key for task ${sessionId}`);
-    const sealed = sealWithTransferKey(payload, key);
-    await this.send({
-      type: "session.sealed",
-      sessionId,
-      nonce: sealed.nonce,
-      box: sealed.box,
-      createdAt: Date.now(),
-    }, to, options);
+    await this.send(sealSessionPayload(payload, sessionId, this.sessionKeys.get(sessionId)), to, options);
   }
 
   /** Register before connect so only durable receivers advertise task-job support. */
@@ -284,9 +280,7 @@ export class RelayClient {
 
   private scheduleReconnect(): void {
     if (!this.opts.autoReconnect || this.intentionalClose || this.reconnectTimer) return;
-    const delay = this.reconnectDelay;
-    const max = this.opts.maxReconnectMs ?? 15_000;
-    this.reconnectDelay = Math.min(max, delay * 2);
+    const delay = this.reconnect.delay();
     this.reconnectTimer = setTimeout(() => {
       this.reconnectTimer = undefined;
       void this.connect().catch(() => {

package/packages/core/relay-envelope.ts

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { Envelope, PROTOCOL_VERSION, type Payload, type Role } from "../protocol/schema";
 import { publicKeyIdentifier } from "./ciphertext-recipient";
-import { seal } from "./crypto";
+import { seal, sealWithTransferKey } from "./crypto";
 import type { PeerConfig, SendOptions } from "./relay-client-types";
 
 /**
@@ -37,3 +37,10 @@ export function sealEnvelope(
   };
   return JSON.stringify(envelope);
 }
+
+/** Apply the independent task encryption layer before transport encryption. */
+export function sealSessionPayload(payload: Payload, sessionId: string, key: string | undefined): Payload {
+  if (!key) throw new Error(`no encryption key for task ${sessionId}`);
+  const { nonce, box } = sealWithTransferKey(payload, key);
+  return { type: 'session.sealed', sessionId, nonce, box, createdAt: Date.now() };
+}

package/packages/core/socket-lifecycle/README.md

@@ -6,6 +6,15 @@ socket and does not rotate task keys or reload transcript state. A failed lookup
 cannot extend the server's signed expiry. Closing or replacing a socket cancels
 only its own timers.
 
+Reconnect pacing resets only after a non-policy connection lived at least 30
+seconds. Short handshakes keep exponential backoff and jitter. WebSocket
+`retry-after` reasons and HTTP `Retry-After` are lower bounds even when they
+exceed the ordinary retry cap. Foreground polling cannot bypass a scheduled
+retry. None of these waits delay a submission already persisted on the relay.
+Every endpoint advertises its public-key digest before the upgrade, including
+transient machine hooks, so a server can refuse a cooled identity before it
+receives any ciphertext. This digest grants no permissions or decryption rights.
+
 The real WebSocket integration is in `tests/core/managed-relay-renewal.test.ts`.
 
 Licensed under the GrantTap Commercial Source License in the repository root.

package/packages/core/socket-lifecycle/index.ts

@@ -1,4 +1,5 @@
 export { ManagedRelayLease } from "./managed-relay-lease";
 export { RelaySocketHealth } from "./relay-socket-health";
+export { RelayReconnectBackoff } from "./reconnect-backoff";
 
 export { relayUpgradeHeaders } from "./upgrade-headers";

package/packages/core/socket-lifecycle/reconnect-backoff.ts

@@ -0,0 +1,29 @@
+/** Retry pacing survives refused handshakes and short-lived WebSockets. */
+export class RelayReconnectBackoff {
+  private next: number;
+  private notBefore = 0;
+
+  constructor(private readonly minimum = 1_000, private readonly maximum = 15_000,
+    private readonly now = Date.now, private readonly random = Math.random) {
+    this.next = minimum;
+  }
+
+  closed(openedAt: number | undefined, code: number, reason: string): void {
+    const policy = code === 1008 || code === 1009 || (code >= 4400 && code <= 4499);
+    if (!policy && openedAt !== undefined && this.now() - openedAt >= 30_000) this.next = this.minimum;
+    this.defer(/(?:^|;\s*)retry-after=(\d{1,5})(?:;|$)/.exec(reason)?.[1]);
+    if (policy) this.notBefore = Math.max(this.notBefore, this.now() + Math.min(60_000, this.maximum));
+  }
+
+  /** Server Retry-After is a floor, independent of the ordinary reconnect cap. */
+  defer(value: string | string[] | undefined): void {
+    if (typeof value !== 'string' || !/^\d{1,5}$/.test(value)) return;
+    this.notBefore = Math.max(this.notBefore, this.now() + Number(value) * 1_000);
+  }
+
+  delay(): number {
+    const jittered = Math.round(Math.max(this.minimum, Math.min(this.maximum, this.next * (0.8 + this.random() * 0.4))));
+    this.next = Math.min(this.maximum, this.next * 2);
+    return Math.max(jittered, this.notBefore - this.now());
+  }
+}

package/packages/core/socket-lifecycle/upgrade-headers.ts

@@ -4,8 +4,7 @@ import { publicKeyIdentifier } from '../ciphertext-recipient';
 /** Bind optional mailbox routing to this endpoint's real encryption identity. */
 export function relayUpgradeHeaders(cfg: PeerConfig, admission: Record<string, string>, durableReceiver: boolean) {
   return { ...admission, 'X-GrantTap-Recipient-Routing': '1',
-    ...((cfg.role === 'phone' || durableReceiver)
-      ? { 'X-GrantTap-Recipient-Key-Id': publicKeyIdentifier(cfg.myPublicKey) } : {}),
+    'X-GrantTap-Recipient-Key-Id': publicKeyIdentifier(cfg.myPublicKey),
     ...(durableReceiver ? { 'X-GrantTap-Task-Dispatch': '1' } : {}),
     ...(cfg.pushAuth ? { Authorization: `Bearer ${cfg.pushAuth}` } : {}) };
 }