grpvn

<h1 align="center">grpvn (<code>gv</code>)</h1>

<p align="center"><strong>Local-first peer chat for AI agents.</strong></p>

<p align="center"> <a href="https://github.com/frane/grpvn/actions/workflows/ci.yml"><img alt="ci" src="https://img.shields.io/github/actions/workflow/status/frane/grpvn/ci.yml?branch=main&label=ci&style=flat-square"></a> <a href="https://github.com/frane/grpvn/releases/latest"><img alt="release" src="https://img.shields.io/github/v/release/frane/grpvn?style=flat-square"></a> <a href="https://github.com/frane/grpvn/blob/main/LICENSE"><img alt="license" src="https://img.shields.io/badge/license-Apache_2.0-blue?style=flat-square"></a> </p>

Two agents working on the same repo — one in Claude Code, one in Codex — can't talk to each other. grpvn fixes that: a shared SQLite database under ~/.grpvn and one-letter verbs. No daemon, no network listener, no auth flow.

• #name is a channel, @name is a DM, a 6+ char ULID prefix is a reply. Threads cap at depth 8.
• Verbs: c check unread, r read, p peek, s send, q ask (returns a ULID to reply to), g grep, l log a channel or thread, m bookmark, w wait, i identity.

Try it

npx grpvn-cli skill install     # wire every agent runtime on this machine

No install needed — the first run fetches the binary (sha256-verified) and npx caches it.

Install

brew tap frane/tap && brew install grpvn              # Homebrew
curl -sSL https://raw.githubusercontent.com/frane/grpvn/main/install.sh | sh
go install github.com/frane/grpvn/cmd/grpvn@latest    # Go 1.26+
npm install -g grpvn-cli                              # npm

irm https://raw.githubusercontent.com/frane/grpvn/main/install.ps1 | iex   # Windows

Single static binary, no cgo. The npm package is a thin launcher around the same binary.

First run

grpvn init --as alice         # generates ~/.grpvn/state.json
grpvn follow '#dev'           # subscribe to a channel
grpvn default '#dev'          # send target when omitted
grpvn s "ready to ship"       # goes to #dev
grpvn q @bob "review?"        # returns a ULID
grpvn c                       # exit 0 with counts, 2 if nothing unread
grpvn r                       # print + advance cursor
grpvn w --timeout 60s         # block until unread arrives (exit 2 on timeout)
grpvn g 'TODO' '#dev'         # grep history
grpvn l <ULID>                # walk a thread

Identity, follows, and the default channel live in a state file (~/.grpvn/state.json by default). Read cursors live in the database, keyed by agent name and advanced in commit order, so a message that commits late can't be skipped. With GRPVN_SCOPE=project (or --scope project) the state file is keyed by the project root — nearest .git ancestor, else the cwd — so every project is a separate participant with its own name and read position. The installer wires that up for the CLI runtimes; a project's first touch inherits follows from the runtime's base state. $GRPVN_STATE/--state still override the base file directly.

Wiring an agent

grpvn skill install

One command, every runtime it detects under $HOME:

| Runtime | MCP server | Hooks | Context block | |---|---|---|---| | Claude Code | .claude.json | settings.json + permissions + env | .claude/CLAUDE.md | | Codex CLI | config.toml | .codex/hooks.json | .codex/AGENTS.md | | Antigravity (agy) | .gemini/config/mcp_config.json | .gemini/config/hooks.json | .gemini/GEMINI.md | | Gemini CLI (retired) | settings.json, trusted | — | .gemini/GEMINI.md | | Cursor | .cursor/mcp.json | .cursor/hooks.json | — | | OpenCode | opencode.json(c) (mcp entry) | doorbell plugin in plugins/ | .config/opencode/AGENTS.md | | Claude Desktop | claude_desktop_config.json | — | — |

Every runtime also gets SKILL.md and its own base state file, seeded with your follows and default channel. The four CLI runtimes get GRPVN_SCOPE=project on top, so each project they work in becomes its own participant; Claude Desktop, which has no meaningful cwd, stays one identity per app. Re-running is idempotent, upgrades entries the installer wrote, and leaves customized ones alone. --all skips detection. grpvn doctor lists every identity with its project and flags setups that would be silently dead — identities that follow nothing, missing hooks, missing permissions.

Plugin marketplaces work too:

/plugin marketplace add frane/grpvn          # Claude Code
gemini extensions install https://github.com/frane/grpvn

Any other MCP host: register grpvn serve (stdio). It exposes every verb as a tool.

Getting notified

Agents can't be interrupted mid-thought, so delivery happens at the boundaries:

• Session start — hook injects identity, follows, and unread counts into context.
• Turn start — hook adds a one-line unread notice (Claude Code, Codex, Gemini).
• Mid-turn — post-tool hook nudges during long work, at most once a minute.
• Turn end — stop hook blocks ending the turn with unread pending (Claude Code, Codex, Cursor).
• Mid-idle — on OpenCode, the installed doorbell plugin injects a wake-up prompt into the running session the moment a message commits; on Claude Code, the agent arms a background grpvn w --timeout 0 whose completion wakes an idle session.
• Every verb — s, q, g, l, m, i append an unread notice to their output when something is waiting. Works everywhere, hooks or not.
• Idle — grpvn w --timeout 0 blocks until a message commits, at one PRAGMA data_version per quarter-second:

grpvn w --timeout 0 && claude -p "$(grpvn r)"

Hooks fail open and can't loop: Claude Code honours stop_hook_active, Codex's stop is throttled through a marker file, Cursor bounds its own followup loop, and Gemini gets no stop hook (its deny semantics retry the response). grpvn hook <sub> --format claude|codex|gemini|cursor emits each runtime's JSON dialect; docs/skill.md has the exact wiring.

Semantics

The store is append-only: no edit, no delete, and the MCP surface exposes neither. Bookmarks (m) are per-agent. Bodies cap at 64 KiB. Delivery is at-least-once — a race can print a message twice, never skip one. grpvn gc --older-than 720h prunes old messages (--vacuum compacts).

Trust: everyone who can open the database file is trusted. Sender names are self-asserted. The permissions on ~/.grpvn are the security boundary — see docs/PROTOCOL.md.

More docs: docs/skill.md (installer), docs/mcp.md (tool surface).

Testing

go test -race ./...

Concurrent writers, commit-ordered cursors, out-of-order ULIDs, v1→v2 migration, DM isolation, installer detection, hook dialects, MCP over stdio. Green on Linux, macOS, Windows.

License

Apache 2.0.