granttap-mcp 0.8.97 → 0.8.98

package/apps/bridge/src/delivery/index.ts

@@ -12,6 +12,7 @@ type DeliveryRecord = {
   state: "processing" | "completed";
   updatedAt: number;
   processingAcknowledged?: boolean;
+  agentActivityAt?: number;
   rejectedError?: string;
   scope?: DeliveryScope;
 };
@@ -69,6 +70,22 @@ export function acknowledgeProcessingDelivery(messageId: string, now = Date.now(
   save(records, now);
 }
 
+/** Provider output, rather than process creation, confirms the original operation started. */
+export function acknowledgeAgentActivity(messageId: string, at = Date.now(), scope?: DeliveryScope): number | undefined {
+  const records = load();
+  const record = records[messageId] ?? (scope
+    ? { state: 'completed' as const, updatedAt: at, processingAcknowledged: true, scope } : undefined);
+  if (!record || record.rejectedError || !Number.isFinite(at) || at <= 0
+    || records[messageId] && scope && !record.scope
+    || scope && record.scope && (scope.room !== record.scope.room
+      || scope.peerPublicKey !== record.scope.peerPublicKey || scope.sessionId !== record.scope.sessionId)) return undefined;
+  if (record.agentActivityAt == null) {
+    records[messageId] = { ...record, agentActivityAt: at };
+    save(records, Date.now());
+  }
+  return records[messageId]?.agentActivityAt;
+}
+
 export function processingDeliveryAcknowledged(messageId: string): boolean {
   const record = load()[messageId];
   return record?.state === "processing" && record.processingAcknowledged === true;
@@ -114,7 +131,8 @@ export function deliveryReceiptStatus(messageId: string, scope: DeliveryScope, n
   if (!saved || saved.room !== scope.room || saved.peerPublicKey !== scope.peerPublicKey
     || saved.sessionId !== scope.sessionId || record.updatedAt < now - MAX_AGE_MS
     || record.updatedAt > now || record.state === 'processing' && !record.processingAcknowledged) return undefined;
-  return { status: record.rejectedError ? 'rejected' as const : 'accepted' as const, error: record.rejectedError };
+  return { status: record.rejectedError ? 'rejected' as const : 'accepted' as const,
+    error: record.rejectedError, agentActivityAt: record.agentActivityAt };
 }
 
 /** Release a failed attempt so a relay retry can safely try again. */

package/apps/bridge/src/monitor/handlers/receipts.ts

@@ -12,6 +12,7 @@ export async function sendDeliveryReceipt(
   error?: string,
   sessionId?: string,
   peerPublicKey?: string,
+  agentActivityAt?: number,
 ): Promise<void> {
   const payload = {
     type: "delivery.receipt" as const,
@@ -20,6 +21,7 @@ export async function sendDeliveryReceipt(
     status,
     error,
     receivedAt: Date.now(),
+    ...(agentActivityAt ? { agentActivityAt } : {}),
   };
   const options = { ttlMs: 24 * 60 * 60_000, peerPublicKey };
   // A controller receipt is control-plane state. It remains device-encrypted,

package/apps/bridge/src/monitor/handlers/user-message.ts

@@ -21,6 +21,7 @@ import { publishedSession } from "../../session-catalog";
 import { localTaskOrigins, type TaskOriginRegistry, type TaskOriginScope } from '../../task-origins';
 import { agentEventForUserMessage, sendDeliveryReceipt } from "./receipts";
 import { resolveMessageAttachments } from "./receipts";
+import { reportMessageAgentActivity } from '../message-delivery/activity';
 import { acceptWhenStarted, PHONE_RUN_LIMIT_MS } from "../message-delivery/acceptance";
 
 async function startNewAgentTask(input: {
@@ -172,6 +173,7 @@ export async function handleUserMessage(
   const startedAt = Date.now();
   const run = deliverToSession(target, message.text, PHONE_RUN_LIMIT_MS, attachments, {
     messageId: message.messageId,
+    onAgentActivity: () => reportMessageAgentActivity(client, message, peerPublicKey),
     preferredMcp: message.preferredMcp,
     skill: message.skill,
     model: message.model,

package/apps/bridge/src/monitor/message-delivery/README.md

@@ -22,3 +22,7 @@ message again. Only the original authenticated controller, room, and session
 may read it. Older unscoped records are not exposed through this query.
 Receipts to a known controller use its device encryption directly, so a missed
 task-key grant cannot hide a provider rejection or processing acknowledgement.
+
+A correlated `agentActivityAt` receipt is emitted only after provider stream output
+confirms activity. It is retained under the original controller, room and session
+scope, survives receipt refresh, and does not claim a final response.

package/apps/bridge/src/monitor/message-delivery/activity.ts

@@ -0,0 +1,14 @@
+import type { RelayClient } from '../../../../../packages/core/relay-client';
+import type { UserMessage } from '../../../../../packages/protocol/schema';
+import { acknowledgeAgentActivity } from '../../delivery';
+import { sendDeliveryReceipt } from '../handlers/receipts';
+
+/** The provider stream confirms activity for one authenticated original operation. */
+export function reportMessageAgentActivity(client: RelayClient, message: UserMessage, peerPublicKey?: string): void {
+  if (!message.messageId || !message.sessionId || !peerPublicKey) return;
+  const at = acknowledgeAgentActivity(message.messageId, Date.now(), {
+    room: client.room, sessionId: message.sessionId, peerPublicKey,
+  });
+  if (at) void sendDeliveryReceipt(client, message.messageId, 'accepted', undefined,
+    message.sessionId, peerPublicKey, at);
+}

package/apps/bridge/src/monitor/message-delivery/index.ts

@@ -1,7 +1,7 @@
 import type { Payload } from "../../../../../packages/protocol/schema";
 import type { RelayClient } from "../../../../../packages/core/relay-client";
 import { abandonDelivery, beginDelivery, completeDelivery,
-  acknowledgeProcessingDelivery, processingDeliveryAcknowledged, completedDeliveryFailure } from "../../delivery";
+  acknowledgeProcessingDelivery, processingDeliveryAcknowledged, completedDeliveryFailure, deliveryReceiptStatus } from "../../delivery";
 import { sendDeliveryReceipt } from "../handlers/receipts";
 import { handleUserMessage } from "../handlers/user-message";
 
@@ -20,7 +20,9 @@ export async function handleInboundUserMessage(
       if (state === "completed" || processingDeliveryAcknowledged(payload.messageId)) {
         const failure = completedDeliveryFailure(payload.messageId);
         await sendDeliveryReceipt(client, payload.messageId, failure ? 'rejected' : 'accepted',
-          failure, payload.sessionId, peerPublicKey);
+          failure, payload.sessionId, peerPublicKey, peerPublicKey && payload.sessionId
+            ? deliveryReceiptStatus(payload.messageId, { room: client.room, peerPublicKey,
+              sessionId: payload.sessionId })?.agentActivityAt : undefined);
       }
       return true;
     }

package/apps/bridge/src/monitor/message-delivery/status-query.ts

@@ -7,6 +7,6 @@ export async function handleDeliveryReceiptQuery(client: RelayClient, query: Del
   peerPublicKey?: string): Promise<boolean> {
   if (!peerPublicKey) return true;
   const receipt = deliveryReceiptStatus(query.messageId, { room: client.room, peerPublicKey, sessionId: query.sessionId });
-  if (receipt) await sendDeliveryReceipt(client, query.messageId, receipt.status, receipt.error, query.sessionId, peerPublicKey);
+  if (receipt) await sendDeliveryReceipt(client, query.messageId, receipt.status, receipt.error, query.sessionId, peerPublicKey, receipt.agentActivityAt);
   return true;
 }

package/apps/bridge/src/reply/index.ts

@@ -65,9 +65,15 @@ export function deliverToSession(
   if (/^transfer-[a-f0-9]{48}$/.test(session.sessionId)) {
     return queued(session.sessionId, async () => (await localTaskTransfers().deliver(
       session.sessionId, text, attachments, options, {
-        start: request => ({ claude: createClaudeSession, codex: createCodexSession,
-          cursor: createCursorSession, grok: createGrokSession }[request.provider])(
-          request.text, request.cwd, timeoutMs, request.attachments, request.model, request.operationKey, request.effort),
+        start: request => request.provider === "grok"
+          ? createGrokSession(request.text, request.cwd, timeoutMs, request.attachments,
+            request.model, request.operationKey, request.effort, nativeId => {
+              request.onNativeSession(nativeId);
+              options.onAgentActivity?.(nativeId);
+            })
+          : ({ claude: createClaudeSession, codex: createCodexSession,
+            cursor: createCursorSession }[request.provider])(request.text, request.cwd,
+            timeoutMs, request.attachments, request.model, request.operationKey, request.effort),
         resume: (native, body, images, settings) => withAttachments(images, body, prepared => runDelivery(native,
           native.agent === "codex" ? prepared.prompt : prepared.claudePrompt, timeoutMs, prepared.images, settings)),
       },
@@ -139,10 +145,11 @@ export function createGrokSession(
   model?: string,
   operationKey?: string,
   effort?: string,
+  onNativeSession?: (sessionId: string) => void,
 ): Promise<ReplyResult> {
   const workspace = resolveAgentWorkspace(cwd, "grok");
   return queued("__new_grok_task__", () => withAttachments(attachments, text, (prepared) =>
-    runGrokNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey, effort),
+    runGrokNew(prepared.claudePrompt, workspace, timeoutMs, model, operationKey, effort, onNativeSession),
   ));
 }
 

package/apps/bridge/src/reply/payload/types.ts

@@ -3,6 +3,8 @@ export type ReplyResult =
   | { ok: false; error: string; delivery?: 'native' };
 
 export type DeliveryOptions = {
+  /** Called only after provider output confirms this operation has started. */
+  onAgentActivity?: (nativeSessionId: string) => void;
   /** Stable controller delivery ID, also used by the provider's native admission. */
   messageId?: string;
   /** Computer-generated identity before temporary attachment paths are inserted. */

package/apps/bridge/src/reply/process/index.ts

@@ -74,6 +74,7 @@ export function runningProcessCount(key: string): number {
 
 export type ProviderAdmission = {
   confirmed: (stdout: string) => boolean;
+  onConfirmed?: () => void;
   withinMs: number;
   timeoutMessage: string;
 };
@@ -107,6 +108,7 @@ export function runProcess(
     let stdout = "";
     let stderr = "";
     let done = false;
+    let admissionReported = false;
     const finish = (result: ReplyResult): void => {
       if (done) return;
       done = true;
@@ -125,7 +127,17 @@ export function runProcess(
       signalOwnedProcess(child, "SIGKILL");
       finish({ ok: false, error: admission.timeoutMessage });
     }, admission.withinMs) : undefined;
-    child.stdout?.on("data", (chunk) => { stdout += chunk; });
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk;
+      if (done || admissionReported || !admission?.confirmed(stdout)) return;
+      admissionReported = true;
+      clearTimeout(startupTimer);
+      try { admission.onConfirmed?.(); }
+      catch {
+        signalOwnedProcess(child, "SIGTERM");
+        finish({ ok: false, error: "Provider activity could not be recorded safely.", delivery: "native" });
+      }
+    });
     child.stderr?.on("data", (chunk) => { stderr += chunk; });
     child.on("error", (error) => {
       finish({ ok: false, error: `${command}: ${error.message}` });

package/apps/bridge/src/reply/process/provider-headless.ts

@@ -29,6 +29,7 @@ export async function runCursorResume(
 
 export function runGrokNew(
   text: string, cwd: string, timeoutMs: number, model?: string, operationKey?: string, effort?: string,
+  onNativeSession?: (sessionId: string) => void,
 ): Promise<ReplyResult> {
   const sessionId = randomUUID();
   const args = [
@@ -37,7 +38,7 @@ export function runGrokNew(
     "-p", text, "--output-format", "streaming-json",
   ];
   return runProcess(grokBin(), args, cwd, timeoutMs, (stdout) => parseGrok(stdout, sessionId),
-    undefined, operationKey, grokAdmission);
+    undefined, operationKey, { ...grokAdmission, onConfirmed: () => onNativeSession?.(sessionId) });
 }
 
 export function runGrokResume(
@@ -58,6 +59,7 @@ export function runGrokResume(
   return runProcess(
     grokBin(), args, session.cwd, timeoutMs,
     (stdout) => parseGrok(stdout, session.sessionId),
-    undefined, session.sessionId, grokAdmission,
+    undefined, session.sessionId, { ...grokAdmission,
+      onConfirmed: () => options.onAgentActivity?.(session.sessionId) },
   );
 }

package/apps/bridge/src/task-transfer/README.md

@@ -21,3 +21,7 @@ Tests: `tests/prepared.test.ts` covers preparation, restart, model/effort forwar
 context persistence, stable catalog identity and ambiguous first submissions.
 
 Licensed under the GrantTap Commercial Source License. See LICENSE and NOTICE.
+
+The first Grok turn binds its confirmed native session before the final answer,
+so the transferred Task can publish live native history while the turn runs.
+The durable launch remains in progress and cannot start another execution.

package/apps/bridge/src/task-transfer/index.ts

@@ -7,7 +7,7 @@ export type { PreparedTransfer, TransferPreparation } from './records';
 
 type TransferProvider = {
   start: (request: { provider: CodingAgent; text: string; cwd: string; attachments: UserAttachment[];
-    model?: string; effort?: string; operationKey: string }) => Promise<ReplyResult>;
+    model?: string; effort?: string; operationKey: string; onNativeSession: (sessionId: string) => void }) => Promise<ReplyResult>;
   resume: (session: SessionInfo, text: string, attachments: UserAttachment[], options: DeliveryOptions) => Promise<ReplyResult>;
 };
 const interrupted = (): ReplyResult => ({ ok: false,
@@ -68,7 +68,17 @@ export class PreparedTaskTransfers extends TransferPersistence {
       ownsLaunch = true;
       const result = await provider.start({ provider: row.capsule.targetProvider as CodingAgent,
         text: this.prompt(row, context, text), cwd: row.workspace, attachments,
-        model: options.model ?? row.capsule.targetModel, effort: options.effort, operationKey: id });
+        model: options.model ?? row.capsule.targetModel, effort: options.effort, operationKey: id,
+        onNativeSession: nativeId => {
+          if (!/^[a-zA-Z0-9_-]{1,256}$/.test(nativeId)) throw new Error('Invalid native session identity');
+          this.update(id, current => {
+            if (current.phase !== 'starting' || current.ownerPid !== process.pid
+              || current.nativeSessionId && current.nativeSessionId !== nativeId) {
+              throw new Error('The transfer no longer owns this provider launch');
+            }
+            return { ...current, nativeSessionId: nativeId, updatedAt: Date.now() };
+          });
+        } });
       if (!result.ok || !result.sessionId) {
         this.update(id, current => ({ ...current, phase: 'uncertain', updatedAt: Date.now() }));
         return result.ok ? interrupted() : result;

package/cursor-plugin/README.md

@@ -10,7 +10,7 @@ keeps each phone response tied to the exact originating chat and prompt.
 Install the supported CLI on this computer, then run:
 
 ```bash
-npm install -g granttap-mcp@0.8.97
+npm install -g granttap-mcp@0.8.98
 granttap setup
 granttap status
 ```

package/cursor-plugin/mcp.json

@@ -4,7 +4,7 @@
       "command": "node",
       "args": [
         "-e",
-        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.97\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
+        "\"use strict\";\n\n// Cursor may start this MCP from any cwd. Execute JavaScript entry points with\n// Node itself: Windows batch shims require shell quoting that differs by host.\nconst { spawn } = require(\"node:child_process\");\nconst { existsSync } = require(\"node:fs\");\nconst { delimiter, dirname, join } = require(\"node:path\");\n\nconst PACKAGE = \"granttap-mcp@0.8.98\";\nconst dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === \"1\";\nconst platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM\n  ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;\nconst nodeRoot = dryRun && process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT\n  ? process.env.GRANTTAP_BOOTSTRAP_NODE_ROOT : dirname(process.execPath);\nconst pathRoots = (process.env.PATH || \"\").split(delimiter).filter(Boolean);\nconst appData = process.env.APPDATA;\nconst roots = [nodeRoot, ...pathRoots, ...(appData ? [join(appData, \"npm\")] : [])];\nconst first = (paths) => paths.find((path) => existsSync(path));\n\nfunction launch() {\n  if (platform !== \"win32\") {\n    const installed = first(roots.map((root) => join(root, \"granttap-mcp\")));\n    if (installed) return { command: installed, args: [] };\n    const npx = first(roots.map((root) => join(root, \"npx\"))) || \"npx\";\n    return { command: npx, args: [\"-y\", PACKAGE] };\n  }\n  const installed = first(roots.map((root) =>\n    join(root, \"node_modules\", \"granttap-mcp\", \"bin\", \"granttap-mcp.mjs\")));\n  if (installed) return { command: process.execPath, args: [installed] };\n  const npx = first(roots.map((root) =>\n    join(root, \"node_modules\", \"npm\", \"bin\", \"npx-cli.js\")));\n  if (npx) return { command: process.execPath, args: [npx, \"-y\", PACKAGE] };\n  throw new Error(\"Node.js/npm 22.13.0+ is required on this Windows device. Install npm and retry GrantTap.\");\n}\n\nlet target;\ntry { target = launch(); }\ncatch (error) {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n}\n\nif (dryRun) {\n  process.stdout.write(JSON.stringify(target));\n  process.exit(0);\n}\n\nconst child = spawn(target.command, target.args, { stdio: \"inherit\", windowsHide: true });\nchild.on(\"error\", (error) => {\n  process.stderr.write(`[granttap] ${error.message}\\n`);\n  process.exit(1);\n});\nchild.on(\"exit\", (code, signal) => {\n  if (signal && platform !== \"win32\") {\n    try { process.kill(process.pid, signal); } catch { process.exit(code ?? 1); }\n    return;\n  }\n  process.exit(code ?? 1);\n});\n"
       ]
     }
   }

package/cursor-plugin/stdio-bootstrap.cjs

@@ -7,7 +7,7 @@ const { spawn } = require("node:child_process");
 const { existsSync } = require("node:fs");
 const { delimiter, dirname, join } = require("node:path");
 
-const PACKAGE = "granttap-mcp@0.8.97";
+const PACKAGE = "granttap-mcp@0.8.98";
 const dryRun = process.env.GRANTTAP_BOOTSTRAP_DRY_RUN === "1";
 const platform = dryRun && process.env.GRANTTAP_BOOTSTRAP_PLATFORM
   ? process.env.GRANTTAP_BOOTSTRAP_PLATFORM : process.platform;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "granttap-mcp",
-  "version": "0.8.97",
+  "version": "0.8.98",
   "description": "Commercial computer runtime connecting local coding agents to GrantTap on Mac, iPhone, iPad and Apple Watch.",
   "type": "module",
   "bin": {

package/packages/core/outbound-scheduler/index.ts

@@ -71,9 +71,9 @@ export class OutboundFrameQueue {
   }
 }
 
-const control = (type: Payload["type"]) => type === "hello" || type.startsWith("approval.")
+export const priorityControlPayload = (type: Payload["type"]) => type === "hello" || type.startsWith("approval.")
   || type.startsWith("config.") || type.startsWith("pairing.") || type === "session.key.grant"
-  || type === "sessions.status" || type === "machine.heartbeat" || type === "approvals.status";
+  || type === "delivery.receipt" || type === "sessions.status" || type === "machine.heartbeat" || type === "approvals.status";
 
 export async function sendEncryptedPayload(queue: OutboundFrameQueue, config: PeerConfig,
   allowed: (key: string) => boolean,
@@ -83,6 +83,6 @@ export async function sendEncryptedPayload(queue: OutboundFrameQueue, config: Pe
   if (!peers.length) throw new Error("no authorized pairing peers");
   for (const peerPublicKey of peers) {
     await queue.send(sealEnvelope({ ...config, peerPublicKey }, payload, to,
-      peers.length === 1 ? options : { ...options, deliveryId: undefined }), control(payload.type) || options.wake === true);
+      peers.length === 1 ? options : { ...options, deliveryId: undefined }), priorityControlPayload(payload.type) || options.wake === true);
   }
 }

package/packages/core/relay-client.ts

@@ -2,7 +2,7 @@ import { retainedPayloadOptions } from "./retained-state";
 /** Shared authenticated relay transport. See README.md for delivery and encryption boundaries. */
 import WebSocket from "ws";
 import { ManagedRelayLease, RelaySocketHealth, RelayReconnectBackoff, RelayConnectionNotifications, relayUpgradeHeaders } from "./socket-lifecycle";
-import { OutboundFrameQueue, sendEncryptedPayload } from "./outbound-scheduler";
+import { OutboundFrameQueue, sendEncryptedPayload, priorityControlPayload } from "./outbound-scheduler";
 import { openRelayMessage, parseRelayControl, waitForRelayPayload } from "./relay-inbound";
 import { consumeTaskJobOffer, type TaskDispatchListener } from "./task-dispatch";
 import { Payload, type Role } from "../protocol/schema";
@@ -213,7 +213,8 @@ export class RelayClient {
     if (!peerPublicKeys(this.cfg.peerPublicKey, this.cfg.extraPeerPublicKeys).includes(peerPublicKey)
       || !this.peerIsAllowed(peerPublicKey)) throw new Error("controller peer is not authorized");
     if (!this.frames) throw new Error("relay not connected");
-    await this.frames.send(sealEnvelope({ ...this.cfg, peerPublicKey }, payload, this.otherRole(), { ...retainedPayloadOptions(payload), ...options, retainedState: this.retainedState, recipientRouting: this.recipientRouting }), true);
+    await this.frames.send(sealEnvelope({ ...this.cfg, peerPublicKey }, payload, this.otherRole(), { ...retainedPayloadOptions(payload), ...options, retainedState: this.retainedState, recipientRouting: this.recipientRouting }),
+      priorityControlPayload(payload.type) || options.wake === true);
   }
 
   setSessionKey(sessionId: string, key: string): void {

package/packages/core/socket-lifecycle/README.md

@@ -21,3 +21,7 @@ Consumers can immediately replace stale snapshots; notification failures cannot
 interrupt the transport, and unsubscribing prevents later callbacks.
 
 Licensed under the GrantTap Commercial Source License in the repository root.
+
+Controller-addressed history uses the snapshot queue. Delivery receipts and
+heartbeats use the control queue, so a history download cannot put them behind
+its pending frames. An in-flight WebSocket frame is allowed to finish.

package/packages/protocol/messages/interaction/index.ts

@@ -107,6 +107,7 @@ export const DeliveryReceipt = z.object({
   status: z.enum(["accepted", "rejected"]),
   error: z.string().max(500).optional(),
   receivedAt: z.number(),
+  agentActivityAt: z.number().finite().positive().optional(),
 });
 export type DeliveryReceipt = z.infer<typeof DeliveryReceipt>;