granttap-mcp 0.8.92 → 0.8.94

package/apps/bridge/src/mesh/admin/capsule.ts

@@ -86,7 +86,7 @@ export function buildTaskCapsule(
   const capsule = {
     taskId: request.taskId,
     goal: task.goal,
-    currentStatus: session.summary ?? session.title ?? task.title,
+    currentStatus: (session.summary?.trim() || session.title?.trim() || task.title).slice(0, 1_000),
     sourceProvider: session.agent,
     sourceComputer: computerId,
     targetProvider: request.targetProvider,

package/apps/bridge/src/mesh/catalog/index.ts

@@ -166,8 +166,17 @@ function linkSession(input: {
   const agent = provider(session.agent);
   const cwd = session.cwd?.trim();
   if (!agent || !cwd) return session;
-  const repository = inspect(session.worktree ?? cwd);
   const knownTaskId = store.taskForExecution(computerId, agent, session.sessionId);
+  const knownProjectId = knownTaskId ? store.task(knownTaskId)?.projectId : undefined;
+  const previous = knownProjectId ? store.snapshot(knownProjectId)?.executions.find(row =>
+    row.taskId === knownTaskId && row.provider === agent && row.sessionId === session.sessionId
+      && row.computerId === computerId && row.workspace === cwd) : undefined;
+  let repository = inspect(session.worktree ?? cwd);
+  if (!repository.worktree && previous?.worktree) {
+    const retained = inspect(previous.worktree);
+    if (retained.worktree && retained.revision
+      && retained.canonicalRepositoryId === previous.repositoryId) repository = retained;
+  }
   const projectId = (knownTaskId ? store.task(knownTaskId)?.projectId : undefined)
     ?? store.projectIdForRepository(repository.canonicalRepositoryId, computerId)
     ?? projectIdentity(repository.canonicalRepositoryId);
@@ -229,13 +238,14 @@ function linkSession(input: {
     provider: agent,
     computerId,
     workspace: cwd,
-    repositoryId: repository.canonicalRepositoryId,
+    repositoryId: repository.worktree ? repository.canonicalRepositoryId
+      : previous?.repositoryId ?? repository.canonicalRepositoryId,
     activeAt: session.lastActivityAt,
     state: session.state, continuedAt: session.transfer?.continuedAt,
     branch: repository.branch ?? session.branch,
-    worktree: repository.worktree,
+    worktree: repository.worktree ?? previous?.worktree,
     uncommitted: input.inspectWorkingTree(repository.worktree ?? cwd),
     startedAt: session.startedAt,
   });
-  return { ...session, projectId, taskId, computerId, worktree: repository.worktree };
+  return { ...session, projectId, taskId, computerId, worktree: repository.worktree ?? previous?.worktree };
 }

package/apps/bridge/src/mesh/runtime/prepared-transfer/README.md

@@ -12,13 +12,20 @@ Catalog batches share a working-tree probe for chats in the same checkout.
 The next batch reads it again, including unknown results, so this never hides
 new uncommitted work behind a persistent cache.
 
-For a chat started above its repositories, `source-binding.ts` resolves an
-explicit `sourceBindingId` only within the owning endpoint's available Project
-bindings. It verifies the actual Git root and identity before capturing context.
+For a chat started above its repositories, `source-binding.ts` first uses the
+Task's own execution, current resource claim, Project repository, or sole owned
+checkout. Multiple unresolved choices require an explicit `sourceBindingId`.
+Both paths stay within the owning endpoint's available Project bindings and
+verify the actual Git root and identity before capturing context. A catalog
+refresh preserves an established checkout when the native chat still reports
+the same parent folder; missing known checkouts never select another repository.
 An exact repository binding takes precedence over a Project's parent execution
 folder. Preparing keeps the native source folder unchanged and launches no
 provider. Rejected preparations also publish their retained Project state.
 
+Capsule status is bounded independently from the complete conversation capture;
+a long native summary cannot invalidate an otherwise transferable Git Task.
+
 Tests: `tests/metadata.test.ts`, `tests/source-checkout.test.ts`,
 `tests/mesh/mesh-handoff-safety.test.ts`, and catalog
 `tests/working-tree-batch.test.ts`.

package/apps/bridge/src/mesh/runtime/prepared-transfer/source-binding.ts

@@ -1,16 +1,27 @@
 import { realpathSync } from 'node:fs';
-import type { MeshHandoffPrepare, SessionInfo } from '../../../../../../packages/protocol/schema';
+import type { MeshHandoffPrepare, MeshSnapshot, ProjectBindingSummary, SessionInfo } from '../../../../../../packages/protocol/schema';
 import { inspectRepository } from '../../catalog';
 import type { MeshStore } from '../../store';
 import { matchesLocalCheckout } from '../graph/checkout-identity';
 
-/** The controller chooses an already admitted binding, never an arbitrary path. */
+/** Resolve the Task's admitted checkout; an explicit choice can replace that default. */
 export function resolveHandoffSource(store: MeshStore, session: SessionInfo,
   request: MeshHandoffPrepare, computer: string): SessionInfo {
-  if (!request.sourceBindingId) return session;
-  const binding = store.snapshot(request.projectId)?.bindings?.find(row =>
-    row.bindingId === request.sourceBindingId && row.projectId === request.projectId
-      && row.endpointId === computer && row.available);
+  const snapshot = store.snapshot(request.projectId);
+  if (!request.sourceBindingId) {
+    const cwd = session.worktree ?? session.cwd;
+    if (cwd) {
+      const native = inspectRepository(cwd);
+      if (native.worktree && native.revision) {
+        return { ...session, worktree: native.root, branch: session.branch ?? native.branch };
+      }
+    }
+  }
+  const binding = request.sourceBindingId
+    ? snapshot?.bindings?.find(row => row.bindingId === request.sourceBindingId
+      && row.projectId === request.projectId && row.endpointId === computer && row.available)
+    : inferBinding(snapshot, session, request, computer);
+  if (!binding && !request.sourceBindingId) return session;
   if (binding?.localPathHint) {
     const facts = inspectRepository(binding.localPathHint);
     try {
@@ -22,3 +33,50 @@ export function resolveHandoffSource(store: MeshStore, session: SessionInfo,
   }
   throw new Error('The selected repository is not available on this computer. Refresh the Project and choose its checkout again.');
 }
+
+function samePath(left: string | undefined, right: string | undefined): boolean {
+  if (!left || !right) return false;
+  try { return realpathSync(left) === realpathSync(right); } catch { return false; }
+}
+
+function inferBinding(snapshot: MeshSnapshot | undefined, session: SessionInfo,
+  request: MeshHandoffPrepare, computer: string): ProjectBindingSummary | undefined {
+  const paths = new Set<string>();
+  const bindings = (snapshot?.bindings ?? []).filter(row => {
+    if (row.projectId !== request.projectId || row.endpointId !== computer
+      || !row.available || !row.revision || !row.localPathHint) return false;
+    try {
+      const path = realpathSync(row.localPathHint);
+      if (paths.has(path)) return false;
+      paths.add(path);
+      return true;
+    } catch { return false; }
+  });
+  if (!bindings.length) return undefined;
+  const execution = snapshot?.executions.find(row => row.taskId === request.taskId
+    && row.provider === session.agent && row.sessionId === session.sessionId
+    && row.computerId === computer && row.endedAt == null);
+  if (execution?.worktree) {
+    const exact = bindings.find(row => samePath(row.localPathHint, execution.worktree));
+    if (exact) return exact;
+    throw new Error('This Task\'s source checkout is unavailable. Refresh its computer before transferring.');
+  }
+  const byExecution = execution?.repositoryId
+    ? bindings.filter(row => row.repositoryId === execution.repositoryId) : [];
+  if (byExecution.length === 1) return byExecution[0];
+  const parent = snapshot?.bindings?.some(row => row.repositoryId === execution?.repositoryId
+    && row.endpointId === computer && !row.revision && samePath(row.localPathHint, session.cwd));
+  if (execution?.repositoryId && !parent) {
+    throw new Error('This Task\'s source repository is unavailable. Refresh its computer before transferring.');
+  }
+  const claims = snapshot?.claims.filter(row => row.taskId === request.taskId
+    && row.ownerSessionId === session.sessionId && row.expiresAt > Date.now()
+    && (!row.endpointId || row.endpointId === computer)) ?? [];
+  const byClaim = bindings.filter(row => claims.some(claim =>
+    claim.repositoryId === row.repositoryId && (!claim.worktree || samePath(claim.worktree, row.localPathHint))));
+  if (byClaim.length === 1) return byClaim[0];
+  const byProject = bindings.filter(row => row.repositoryId === snapshot?.project.canonicalRepositoryId);
+  if (byProject.length === 1) return byProject[0];
+  if (bindings.length === 1) return bindings[0];
+  throw new Error('Multiple Project checkouts are available. Choose the repository this Task should continue in.');
+}

package/apps/bridge/src/sessions/README.md

@@ -9,6 +9,12 @@ so discovery cannot monopolize relay callbacks. Synchronous CLI readers use the
 same parsers. Published native bindings stay readable until a complete scan
 replaces them; checkout verification caches belong to one scan across its yields.
 
+Claude root records update the current working folder and branch as the native
+conversation moves. Its launch directory is not a permanent repository binding.
+Sidechain folders and tool observations cannot replace the root conversation's
+checkout. Catalog linking verifies the current Git root while preserving the
+existing Task and Project identities.
+
 Claude child reads use only the requested owned log and its bounded recent
 window. Native `agentId` remains authoritative when it differs from the filename;
 the scanner records that mapping. Parent and sibling logs are not reparsed for

package/apps/bridge/src/sessions/scan/claude/parse.ts

@@ -47,11 +47,13 @@ function noteTurnBoundary(d: any, state: ClaudeParseState): void {
 
 function applyClaudeLine(d: any, state: ClaudeParseState): void {
   noteTurnBoundary(d, state);
-  state.repositoryPaths.push(...claudeRepositoryPaths(d));
+  if (d.isSidechain !== true) state.repositoryPaths.push(...claudeRepositoryPaths(d));
   state.repositoryPaths = state.repositoryPaths.slice(-64);
   if (d.sessionId && !state.sessionId) state.sessionId = String(d.sessionId);
-  if (d.cwd && !state.cwd) state.cwd = String(d.cwd);
-  if (d.gitBranch && !state.branch) state.branch = String(d.gitBranch);
+  if (d.isSidechain !== true) {
+    if (typeof d.cwd === "string" && d.cwd.trim()) state.cwd = d.cwd;
+    if (typeof d.gitBranch === "string" && d.gitBranch.trim()) state.branch = d.gitBranch;
+  }
   if (d.type === "ai-title" && typeof d.content === "string" && !state.title) state.title = d.content;
   if (!state.title && (d.type === "user" || d.message?.role === "user")) {
     const raw =

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.92
+npm install -g granttap-mcp@0.8.94
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.92\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.94\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.92";
+const PACKAGE = "granttap-mcp@0.8.94";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.92",
+  "version": "0.8.94",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {