granttap-mcp 0.8.87 → 0.8.88

package/README.md

@@ -155,7 +155,8 @@ device pairing without a passkey account.
 
 - Claude Code and Codex: primary local control and continuation paths.
 - Cursor (Beta): Task visibility and supported local controls, with narrower coverage.
-- Grok Build: observable work where the installed runtime exposes it.
+- Grok Build: local history and headless follow-ups through an installed,
+  authenticated CLI; provider hook and scoped Mesh coverage remain narrower.
 
 GrantTap reports the depth each provider actually exposes. Visibility does not
 imply deterministic remote blocking or full mobile continuation.
@@ -477,6 +478,13 @@ grok plugin marketplace add sergii-ziborov/granttap-mcp
 grok plugin install granttap --trust
 ```
 
+In Grok, open `/mcps` and authenticate the GrantTap server, then run
+`/granttap-connect`. GrantTap's phone pairing and Grok's permission to use that
+MCP server are separate. An existing pairing does not authorize a new MCP client.
+If a Grok session does not start responding within one minute, GrantTap asks you
+to inspect the original task before retrying. A turn that has started can keep
+running; its later failure does not mean that the message was never delivered.
+
 For Cursor, use the reviewed **GrantTap** Marketplace listing when it is visible
 to your account. Reload Cursor. On this computer, run `granttap setup`. Pair
 and change settings on [granttap.com/connect](https://granttap.com/connect)

package/apps/bridge/src/monitor/handlers/user-message.ts

@@ -98,20 +98,20 @@ async function startNewAgentTask(input: {
   }
   const settle = async (result: ReplyResult, late: boolean) => {
     input.origin?.registry.complete(input.origin.scope,
-      { ok: result.ok, sessionId: result.ok ? result.sessionId : undefined });
-    if (!result.ok && message.messageId) {
+      { ok: result.ok || result.delivery === 'native', sessionId: result.ok ? result.sessionId : undefined });
+    if (!result.ok && message.messageId && result.delivery !== 'native') {
       if (late) rejectCompletedDelivery(message.messageId, result.error);
       await sendDeliveryReceipt(client, message.messageId, 'rejected', result.error,
         undefined, input.peerPublicKey);
     }
     return result.ok ? say(result.text, result.sessionId, true)
-      : say(late ? `The ${displayName} task stopped: ${result.error}`
+      : say(late || result.delivery === 'native' ? `The ${displayName} task stopped: ${result.error}`
         : `Could not create a ${displayName} task: ${result.error}`, undefined, true);
   };
   const early = await acceptWhenStarted(run, (result) => settle(result, true));
   if (early === "started") return "accepted";
   await settle(early, false);
-  return early.ok ? "accepted" : "rejected";
+  return early.ok || early.delivery === 'native' ? "accepted" : "rejected";
 }
 
 export async function handleUserMessage(
@@ -196,15 +196,18 @@ export async function handleUserMessage(
     }
     if (result.ok) await say(result.text, result.sessionId ?? target.sessionId, true);
     else {
-      if (late && message.messageId) rejectCompletedDelivery(message.messageId, result.error);
-      if (message.messageId) await sendDeliveryReceipt(client, message.messageId, 'rejected',
-        result.error, target.sessionId, peerPublicKey);
-      await say(late ? `The run stopped: ${result.error}` : `Could not deliver the message: ${result.error}`,
+      if (result.delivery !== 'native') {
+        if (late && message.messageId) rejectCompletedDelivery(message.messageId, result.error);
+        if (message.messageId) await sendDeliveryReceipt(client, message.messageId, 'rejected',
+          result.error, target.sessionId, peerPublicKey);
+      }
+      await say(late || result.delivery === 'native' ? `The run stopped: ${result.error}`
+        : `Could not deliver the message: ${result.error}`,
         target.sessionId, true);
     }
   };
   const early = await acceptWhenStarted(run, (result) => settle(result, true));
   if (early === "started") return "accepted";
   await settle(early, false);
-  return early.ok ? "accepted" : "rejected";
+  return early.ok || early.delivery === 'native' ? "accepted" : "rejected";
 }

package/apps/bridge/src/reply/grok-response/README.md

@@ -0,0 +1,20 @@
+# Grok response admission
+
+[`index.ts`](index.ts) reads Grok Build's `streaming-json` response contract.
+Actual text, thinking, or a started tool call confirms that the prompt reached
+execution. Startup metadata alone does not establish admission. Native error
+messages remain failures and metadata is never returned as answer text.
+
+Opening a session has a 60-second response-activity deadline, separate from the
+long execution budget. A stalled opening stops only the process group GrantTap
+started and asks the person to inspect the native task before retrying. Once
+response activity is witnessed, a later timeout or run failure cannot rewrite
+the accepted message as a rejected delivery. Execution failure still reaches
+the chat. This does not grant tools, authenticate MCP, or alter Grok policy.
+
+Behavior tests live in `../tests/grok-response.test.ts` and
+`../tests/admission-deadline.test.ts`; durable receipt tests live in
+`../../monitor/message-delivery/tests/run-outcome.test.ts`.
+
+License: this module is distributed under the GrantTap Commercial Source License
+in the repository-root `LICENSE` file.

package/apps/bridge/src/reply/grok-response/index.ts

@@ -0,0 +1,48 @@
+import type { ReplyResult } from '../payload/types';
+import type { ProviderAdmission } from '../process';
+
+function events(stdout: string): Record<string, unknown>[] {
+  return stdout.split('\n').flatMap(line => {
+    try {
+      const value: unknown = JSON.parse(line);
+      return value && typeof value === 'object' && !Array.isArray(value)
+        ? [value as Record<string, unknown>] : [];
+    } catch { return []; }
+  });
+}
+
+/** Response activity proves admission; startup lists and diagnostic text do not. */
+export function grokAccepted(stdout: string): boolean {
+  return events(stdout).some(event => {
+    if (['text', 'thought'].includes(String(event.type))) {
+      return typeof event.data === 'string' && !!event.data.trim();
+    }
+    if (event.type === 'result') return typeof event.result === 'string' && !!event.result.trim();
+    return event.type === 'tool_call' && event.status === 'in_progress'
+      && typeof event.toolCallId === 'string' && !!event.toolCallId;
+  });
+}
+
+/** Opening a native session has a separate limit from executing its long turn. */
+export const grokAdmission: ProviderAdmission = {
+  confirmed: grokAccepted,
+  withinMs: 60_000,
+  timeoutMessage: 'Grok did not confirm receipt within 60s. Open the task before retrying.',
+};
+
+export function parseGrok(stdout: string, fallback: string): ReplyResult {
+  let text = '';
+  let sessionId = fallback;
+  for (const event of events(stdout)) {
+    if (event.type === 'text' && typeof event.data === 'string') text += event.data;
+    if (event.type === 'result' && typeof event.result === 'string') text = event.result;
+    if (typeof event.sessionId === 'string') sessionId = event.sessionId;
+    if (typeof event.session_id === 'string') sessionId = event.session_id;
+    const error = typeof event.message === 'string' ? event.message : event.error;
+    if (event.type === 'error' && typeof error === 'string') {
+      return { ok: false, error: error.slice(0, 500) };
+    }
+  }
+  return text.trim() ? { ok: true, text: text.trim().slice(0, 4_000), sessionId }
+    : { ok: false, error: 'Grok Build returned an empty response.' };
+}

package/apps/bridge/src/reply/process/index.ts

@@ -72,6 +72,12 @@ export function runningProcessCount(key: string): number {
   return running.get(key)?.size ?? 0;
 }
 
+export type ProviderAdmission = {
+  confirmed: (stdout: string) => boolean;
+  withinMs: number;
+  timeoutMessage: string;
+};
+
 export function runProcess(
   command: string,
   args: string[],
@@ -80,6 +86,7 @@ export function runProcess(
   parse: (stdout: string) => ReplyResult,
   stdin?: string,
   key?: string,
+  admission?: ProviderAdmission,
 ): Promise<ReplyResult> {
   return new Promise((resolve) => {
     let child: ChildProcess;
@@ -104,14 +111,20 @@ export function runProcess(
       if (done) return;
       done = true;
       clearTimeout(timer);
+      clearTimeout(startupTimer);
       untrack();
-      resolve(result);
+      resolve(!result.ok && admission?.confirmed(stdout) ? { ...result, delivery: 'native' } : result);
     };
     const timer = setTimeout(() => {
       if (done) return;
       signalOwnedProcess(child, "SIGKILL");
       finish({ ok: false, error: `${command} did not respond within ${Math.round(timeoutMs / 1000)}s.` });
     }, timeoutMs);
+    const startupTimer = admission ? setTimeout(() => {
+      if (done || admission.confirmed(stdout)) return;
+      signalOwnedProcess(child, "SIGKILL");
+      finish({ ok: false, error: admission.timeoutMessage });
+    }, admission.withinMs) : undefined;
     child.stdout?.on("data", (chunk) => { stdout += chunk; });
     child.stderr?.on("data", (chunk) => { stderr += chunk; });
     child.on("error", (error) => {

package/apps/bridge/src/reply/process/provider-headless.ts

@@ -1,3 +1,4 @@
+import { grokAdmission, parseGrok } from "../grok-response";
 import { randomUUID } from "node:crypto";
 import type { SessionInfo } from "../../../../../packages/protocol/schema";
 import { runProcess } from ".";
@@ -11,33 +12,6 @@ function grokBin(): string {
   return resolveGrokBinary();
 }
 
-function parseGrok(stdout: string, fallback: string): ReplyResult {
-  let text = "";
-  let sessionId = fallback;
-  for (const line of stdout.split("\n")) {
-    if (!line.trim()) continue;
-    try {
-      const value = JSON.parse(line) as {
-        type?: string; data?: unknown; sessionId?: unknown; session_id?: unknown;
-        result?: unknown; error?: unknown;
-      };
-      if (value.type === "text" && typeof value.data === "string") text += value.data;
-      if (value.type === "result" && typeof value.result === "string") text = value.result;
-      if (typeof value.sessionId === "string") sessionId = value.sessionId;
-      if (typeof value.session_id === "string") sessionId = value.session_id;
-      if (value.type === "error" && typeof value.error === "string") {
-        return { ok: false, error: value.error.slice(0, 500) };
-      }
-    } catch {
-      // Ignore diagnostic lines outside Grok's streaming JSON contract.
-    }
-  }
-  const visible = text.trim() || stdout.trim();
-  return visible
-    ? { ok: true, text: visible.slice(0, 4_000), sessionId }
-    : { ok: false, error: "Grok Build returned an empty response." };
-}
-
 export function runCursorNew(
   text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string, effort?: string,
 ): Promise<ReplyResult> {
@@ -62,7 +36,7 @@ export function runGrokNew(
     "-p", text, "--output-format", "streaming-json",
   ];
   return runProcess(grokBin(), args, cwd, timeoutMs, (stdout) => parseGrok(stdout, sessionId),
-    undefined, operationKey);
+    undefined, operationKey, grokAdmission);
 }
 
 export function runGrokResume(
@@ -79,6 +53,6 @@ export function runGrokResume(
   return runProcess(
     grokBin(), args, session.cwd, timeoutMs,
     (stdout) => parseGrok(stdout, session.sessionId),
-    undefined, session.sessionId,
+    undefined, session.sessionId, grokAdmission,
   );
 }

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.87
+npm install -g granttap-mcp@0.8.88
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.87\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.88\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.87";
+const PACKAGE = "granttap-mcp@0.8.88";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.87",
+  "version": "0.8.88",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {