granttap-mcp 0.8.81 → 0.8.82

package/THIRD_PARTY_LICENSES.txt

@@ -324,8 +324,8 @@ hasown 2.0.4 — MIT
 Source: https://www.npmjs.com/package/hasown/v/2.0.4
 Notices: bf9b0d665be2a689851eea667ca9f42066ea1d903b38349c51e6a44b2577680a
 
-hono 4.13.7 — MIT
-Source: https://www.npmjs.com/package/hono/v/4.13.7
+hono 4.13.13 — MIT
+Source: https://www.npmjs.com/package/hono/v/4.13.13
 Notices: a6ab98e5c77b9070c443eaff2ff81034a6f8cc05a7524d5098eb0f24defa0115
 
 http-errors 2.0.1 — MIT

package/apps/bridge/src/engine/runtime/repository-graph/README.md

@@ -0,0 +1,20 @@
+# Repository graph delivery
+
+[Runtime entry point](../engine-projects.ts) · [Wire fitting](fit.ts)
+
+The encrypted Mesh snapshot carries bounded, observed repository metadata.
+`fitRepositoryGraph` preserves file identities, measured LOC and source sections.
+When directed file links dominate the wire budget, it reduces those links before
+discarding source sections. The bounded sample keeps links reaching previously
+unrepresented files and external services, then fills in original report order.
+It never invents links, reverses their direction, or edits the engine report.
+
+Remaining reductions retain the existing wire limit and mark partial evidence.
+The persistent cache keeps a last successful bounded report through an MCP
+restart while the normal observation refresh obtains current engine evidence.
+
+Behavior tests live in `tests/`; runtime and cache integration scenarios remain
+under the repository's `tests/engine` harness.
+
+License: this module is distributed under the GrantTap Commercial Source License
+in the repository-root `LICENSE` file.

package/apps/bridge/src/engine/runtime/repository-graph/fit.ts

@@ -16,7 +16,12 @@ export function fitRepositoryGraph(
   }
   while (bytes() > maxBytes) {
     const map = bounded.codeMap;
-    if (map?.files.some((file) => file.symbols.length > 0)) {
+    // Dense import graphs must not consume the source-section budget. Keep
+    // observed directed links across the inventory before reducing symbols.
+    if (map && map.roads.length > 16
+      && Buffer.byteLength(JSON.stringify(map.roads), "utf8") > maxBytes / 3) {
+      bounded = { ...bounded, codeMap: trimRoads(map) };
+    } else if (map?.files.some((file) => file.symbols.length > 0)) {
       bounded = { ...bounded, codeMap: trimSymbols(map) };
     } else if (bounded.relations.length > 8) {
       bounded = { ...bounded, relations: strongestRelations(bounded.relations,
@@ -27,8 +32,7 @@ export function fitRepositoryGraph(
       bounded = { ...bounded, nodes, relations: bounded.relations.filter((edge) =>
         ids.has(edge.source) && ids.has(edge.target)), truncated: true };
     } else if (map && map.roads.length > 16) {
-      bounded = { ...bounded, codeMap: { ...map, truncated: true,
-        roads: map.roads.slice(0, Math.ceil(map.roads.length / 2)) } };
+      bounded = { ...bounded, codeMap: trimRoads(map) };
     } else if (map && map.files.length > 8) {
       bounded = { ...bounded, codeMap: trimFiles(map) };
     } else if (map) {
@@ -40,6 +44,20 @@ export function fitRepositoryGraph(
   return bounded;
 }
 
+function trimRoads(map: CodeMap): CodeMap {
+  const limit = Math.max(16, Math.ceil(map.roads.length / 2));
+  const kept = new Set<number>(), endpoints = new Set<string>();
+  for (const [index, road] of map.roads.entries()) {
+    if (kept.size === limit) break;
+    if (endpoints.has(road.source) && endpoints.has(road.target)) continue;
+    kept.add(index);
+    endpoints.add(road.source);
+    endpoints.add(road.target);
+  }
+  for (let index = 0; kept.size < limit; index++) kept.add(index);
+  return { ...map, truncated: true, roads: map.roads.filter((_, index) => kept.has(index)) };
+}
+
 function strongestRelations(relations: Relation[], limit: number): Relation[] {
   return relations.map((edge, index) => ({ edge, index }))
     .sort((left, right) => (right.edge.evidenceCount ?? 0) - (left.edge.evidenceCount ?? 0)

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.81
+npm install -g granttap-mcp@0.8.82
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.81\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.82\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.81";
+const PACKAGE = "granttap-mcp@0.8.82";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.81",
+  "version": "0.8.82",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {