granttap-mcp 0.8.83 → 0.8.84

package/README.md

@@ -791,6 +791,14 @@ in the Apple apps. Use the support contact there for product issues. Report
 security vulnerabilities through [SECURITY.md](SECURITY.md); do not put pairing
 QR codes, credentials or private chat transcripts into public issues.
 
+## Node.js requirement
+
+Install the latest patched Node.js LTS release. GrantTap requires Node.js
+22.13.0 or newer; Node.js 18 and 20 are not supported. The CLI checks this
+before loading dependencies or changing local configuration. The npm `engines`
+field also reports this requirement, but npm may only warn unless engine checks
+are enforced by the installer.
+
 ## Development
 
 ```bash

package/apps/bridge/src/config/README.md

@@ -1,10 +1,14 @@
 # Bridge Configuration
 
 This module owns local runtime policy, exact-session capability controls, paths,
-and device pairing serialization. `../config.ts` is its public entry point.
+and device pairing serialization. `index.ts` is its public entry point.
 
 Behavior is covered by `tests/config.test.ts`, `tests/capabilities.test.ts`, and
 `tests/core.test.ts`.
 
 License: this module is distributed under the GrantTap Commercial Source License
 in the repository-root `LICENSE` file.
+
+Runtime startup and persistent OAuth share `runtime/node-requirement.mjs`, which
+reads the package Node minimum before loading TypeScript dependencies. Runtime
+compatibility regressions live in `runtime/tests/node-requirement.test.ts`.

package/apps/bridge/src/config/index.ts

@@ -4,6 +4,7 @@ export * from "./access/pairing";
 export { writePrivateFile } from "./access/write-private";
 export * from "./runtime/paths";
 export * from "./runtime";
+export { isSupportedNode, minimumNodeVersion } from "./runtime/node-requirement.mjs";
 export {
   classifyAction,
   isSafeReadonlyShell,

package/apps/bridge/src/config/runtime/node-requirement.d.mts

@@ -0,0 +1,2 @@
+export const minimumNodeVersion: string;
+export function isSupportedNode(version: string): boolean;

package/apps/bridge/src/config/runtime/node-requirement.mjs

@@ -0,0 +1,15 @@
+import { readFileSync } from "node:fs";
+
+const manifest = JSON.parse(readFileSync(new URL("../../../../../package.json", import.meta.url), "utf8"));
+export const minimumNodeVersion = manifest.engines.node.replace(/^>=/, "");
+
+/** Shared by the native launcher and persistent-service installer before loading tsx. */
+export function isSupportedNode(version) {
+  if (!/^v?\d+\.\d+\.\d+$/.test(version)) return false;
+  const actual = version.replace(/^v/, "").split(".").map(Number);
+  const minimum = minimumNodeVersion.split(".").map(Number);
+  for (let index = 0; index < 3; index += 1) {
+    if (actual[index] !== minimum[index]) return actual[index] > minimum[index];
+  }
+  return true;
+}

package/apps/bridge/src/install/monitor-helper.ts

@@ -209,13 +209,13 @@ export function installMonitorHelper(): InstallResult {
     const node = resolveMonitorNodeBin();
     return node && !isCursorHelperNode(node)
       ? installLinuxService("monitor", node, join(repoRoot, "bin", "granttap-mcp.mjs"), { forceReload: true })
-      : { status: "manual", detail: "A stable Node.js 20+ installation is required for Linux background sync." };
+      : { status: "manual", detail: "A stable Node.js 22.13.0+ installation is required for Linux background sync." };
   }
   if (process.platform === "win32") {
     const node = resolveMonitorNodeBin();
     return node && !isCursorHelperNode(node)
       ? installWindowsTask("monitor", node, join(repoRoot, "bin", "granttap-mcp.mjs"), true)
-      : { status: "manual", detail: "A stable Node.js 20+ installation is required for Windows background sync." };
+      : { status: "manual", detail: "A stable Node.js 22.13.0+ installation is required for Windows background sync." };
   }
   if (process.platform !== "darwin") {
     return { status: "manual", detail: "background task sync currently requires macOS" };

package/apps/mcp/src/http-service/installer.ts

@@ -4,7 +4,7 @@ import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileS
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { isCursorHelperNode, resolveMonitorNodeBin, type InstallResult } from "../../../bridge/src/install";
-import { configDir, normalizeRelayUrl, loadRuntimeConfig, verifiableEngine } from "../../../bridge/src/config";
+import { configDir, normalizeRelayUrl, loadRuntimeConfig, verifiableEngine, isSupportedNode, minimumNodeVersion } from "../../../bridge/src/config";
 import { installWindowsTask } from "../../../bridge/src/install/windows-service";
 import { installLinuxService } from "../../../bridge/src/install/linux-service";
 import { configuredCursorHttpMcpUrl } from "../cursor-config";
@@ -65,9 +65,8 @@ function validateInstallation(nodeBin: string, executable: string): InstallResul
     return { status: "manual", detail: "Authorization requires a stable granttap-mcp install; npm's temporary _npx cache is not durable." };
   }
   const version = spawnSync(nodeBin, ["--version"], { encoding: "utf8" });
-  const major = Number(/^v(\d+)/.exec(version.stdout.trim())?.[1]);
-  return version.status !== 0 || !Number.isInteger(major) || major < 20
-    ? { status: "manual", detail: `Persistent OAuth requires Node 20+ (${nodeBin}).` }
+  return version.status !== 0 || !isSupportedNode(version.stdout.trim())
+    ? { status: "manual", detail: `Persistent OAuth requires Node ${minimumNodeVersion}+ (${nodeBin}).` }
     : undefined;
 }
 

package/bin/granttap-mcp.mjs

@@ -5,6 +5,13 @@ import { createRequire } from "node:module";
 import { delimiter, dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
+import { isSupportedNode, minimumNodeVersion } from "../apps/bridge/src/config/runtime/node-requirement.mjs";
+
+if (!isSupportedNode(process.versions.node)) {
+  process.stderr.write(`[granttap-mcp] requires Node.js ${minimumNodeVersion} or newer; found ${process.versions.node}. Install the latest supported Node.js LTS release.\n`);
+  process.exit(1);
+}
+
 const root = join(dirname(fileURLToPath(import.meta.url)), "..");
 const [command = "mcp", ...commandArgs] = process.argv.slice(2);
 const argument = commandArgs[0];

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.83
+npm install -g granttap-mcp@0.8.84
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.83\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.84\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.83";
+const PACKAGE = "granttap-mcp@0.8.84";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;
@@ -31,7 +31,7 @@ function launch() {
   const npx = first(roots.map((root) =>
     join(root, "node_modules", "npm", "bin", "npx-cli.js")));
   if (npx) return { command: process.execPath, args: [npx, "-y", PACKAGE] };
-  throw new Error("Node.js/npm 20+ is required on this Windows device. Install npm and retry GrantTap.");
+  throw new Error("Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.");
 }
 
 let target;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.83",
+  "version": "0.8.84",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {
@@ -55,7 +55,7 @@
     "typescript": "^5.7.2"
   },
   "engines": {
-    "node": ">=20"
+    "node": ">=22.13.0"
   },
   "repository": {
     "type": "git",