@ziggs-ai/agent-sdk 0.10.7 → 0.11.0

package/dist/runtime/taskBookkeeping.js

@@ -1,7 +1,7 @@
 /**
  * Reserved key for coordinator-side pending/collected state when the lane has
  * an active agreement but no assigned parent task yet (kickoff → spawn).
- * Never deleted by task-closed of a real taskId (ZIG-977).
+ * Never deleted by task-closed of a real taskId.
  */
 export const LANE_BOOK_KEY = '__lane__';
 export function emptyTaskBook(agreementId = null) {
@@ -101,9 +101,9 @@ export function removeTaskBook(ctx, taskId) {
     }
 }
 /**
- * Migrate a pre-ZIG-977 persisted ctx (lane-level pendingSubtasks /
+ * Migrate a pre- persisted ctx (lane-level pendingSubtasks /
  * collectedResults / delegatedAgreementIds) into the tasks map.
- * ZIG-1057: the deprecated lane aggregates are no longer auto-synced —
+ * the deprecated lane aggregates are no longer auto-synced —
  * readers use allPendingSubtasks / allCollectedResults / allDelegatedAgreementIds.
  * This migrator stays so a session persisted before the tasks map still boots.
  */

package/dist/runtime/taskIntake.js

@@ -49,7 +49,7 @@ export function buildTaskIntakeState(initial) {
                 // Function form so a failed task_set_result surfaces as an error outcome
                 // (→ dflt error transition) instead of a phantom task-closed.
                 produces: (result) => {
-                    // `state` only — ZIG-1057 cut `status` from the wire (ZIG-1128).
+                    // `state` only cut `status` from the wire.
                     const r = result;
                     const state = r?.task?.state ?? r?.state;
                     return state === 'completed' || state === 'failed' ? 'task-closed' : 'error';
@@ -64,7 +64,7 @@ export function buildTaskIntakeState(initial) {
                 },
                 tool: 'task_set_result',
                 produces: (result) => {
-                    // `state` only — ZIG-1057 cut `status` from the wire (ZIG-1128).
+                    // `state` only cut `status` from the wire.
                     const r = result;
                     const state = r?.task?.state ?? r?.state;
                     return state === 'completed' || state === 'failed' ? 'task-closed' : 'error';

package/dist/server/ConnectionPool.js

@@ -2,7 +2,7 @@
  * ConnectionPool — the agents this launcher process hosts.
  *
  * Holds N `AgentHostOptions` configs and connects every one of them at boot
- * (ZIG-1108). Each host long-polls its own inbox for the life of the process —
+ *. Each host long-polls its own inbox for the life of the process —
  * there is no agent socket. There is no subset, no cap and no lifecycle policy:
  * a write releasing that poll is the only signal anything needs.
  *

package/dist/server/EventQueue.d.ts

@@ -8,7 +8,7 @@ export interface EventQueueOptions {
  * per laneKey at a time; multiple events arriving while busy are merged
  * into a single { type: 'batch', events: [...] } frame on the next pass.
  *
- * ZIG-1191: `enqueue` REJECTS when the dispatch failed. It used to log the error
+ * `enqueue` REJECTS when the dispatch failed. It used to log the error
  * and resolve, which made every caller — including the inbox loop, whose next
  * statement is the ack — unable to tell a handled event from a lost one. A
  * caller that has nothing to do with a failure should say so with `.catch()`;

package/dist/server/EventQueue.js

@@ -5,7 +5,7 @@ import { runtimeLog } from '../shared/runtimeLog.js';
  * per laneKey at a time; multiple events arriving while busy are merged
  * into a single { type: 'batch', events: [...] } frame on the next pass.
  *
- * ZIG-1191: `enqueue` REJECTS when the dispatch failed. It used to log the error
+ * `enqueue` REJECTS when the dispatch failed. It used to log the error
  * and resolve, which made every caller — including the inbox loop, whose next
  * statement is the ack — unable to tell a handled event from a lost one. A
  * caller that has nothing to do with a failure should say so with `.catch()`;

package/dist/server/SeenMessages.d.ts

@@ -1,6 +1,6 @@
 /**
  * Dedupes delivery across push (WS flush) and pull (inbox catch-up).
- * ZIG-434 / ZIG-454: inbox is reconciliation source; stable message ids
+ * inbox is reconciliation source; stable message ids
  * prevent double-processing when both paths fire for the same row.
  */
 export declare class SeenMessages {
@@ -12,7 +12,7 @@ export declare class SeenMessages {
     mark(messageId: string | null | undefined): void;
     /**
      * Forget a mark, so the next delivery of the same id is processed rather than
-     * skipped. ZIG-1191: marking happens BEFORE the work, to hold the door against
+     * skipped. marking happens BEFORE the work, to hold the door against
      * a concurrent duplicate — which means a failure has to take the mark back, or
      * the redelivery that a held ack buys is silently dropped as a duplicate.
      */

package/dist/server/SeenMessages.js

@@ -1,6 +1,6 @@
 /**
  * Dedupes delivery across push (WS flush) and pull (inbox catch-up).
- * ZIG-434 / ZIG-454: inbox is reconciliation source; stable message ids
+ * inbox is reconciliation source; stable message ids
  * prevent double-processing when both paths fire for the same row.
  */
 export class SeenMessages {
@@ -30,7 +30,7 @@ export class SeenMessages {
     }
     /**
      * Forget a mark, so the next delivery of the same id is processed rather than
-     * skipped. ZIG-1191: marking happens BEFORE the work, to hold the door against
+     * skipped. marking happens BEFORE the work, to hold the door against
      * a concurrent duplicate — which means a failure has to take the mark back, or
      * the redelivery that a held ack buys is silently dropped as a duplicate.
      */

package/dist/server/ZiggsEffectHandler.d.ts

@@ -47,7 +47,7 @@ export interface ZiggsEffectDeps {
     effectTap?: (effect: Effect, response: unknown) => void;
 }
 /**
- * The single tool-execution path for BOTH cognitions (ZIG-775).
+ * The single tool-execution path for BOTH cognitions.
  *
  * Executing a tool is more than calling its handler: it emits the operation
  * timeline artifacts (started / completed / error) and tool telemetry, and
@@ -55,7 +55,7 @@ export interface ZiggsEffectDeps {
  * `eff({ kind: 'tool-call' })` inside `runTurn`; the Claude Agent SDK bridge
  * (`toolManagerToSdkMcp`) emits the SAME effect — so a hosted Claude-brain
  * agent's tool activity is as observable as an FSM agent's (needed for
- * hired-agent visibility, ZIG-535). A caller cannot run a tool and skip these
+ * hired-agent visibility). A caller cannot run a tool and skip these
  * side effects — that is the whole point of funneling both paths here.
  *
  * `eff` is threaded into the tool context so eff-backed tools

package/dist/server/ZiggsEffectHandler.js

@@ -5,7 +5,7 @@ import { buildLlmIngestPayload, buildToolIngestPayload, isTelemetryIngestEnabled
 const CONTEXT_CACHE_MAX = 256;
 /**
  * Compose a `ContextSnapshot` for a chatId via the grant-fenced aggregate read
- * (`GET /context/snapshot`, ZIG-775 follow-up). The backend assembles history +
+ * (`GET /context/snapshot`, follow-up). The backend assembles history +
  * agreements + roster through the same `assertScopeAccess` + temporal fence as
  * the per-type context reads, and annotates `*IsYou` / self server-side against
  * the acting agent. This function only preserves the never-throw/degrade
@@ -75,7 +75,7 @@ async function emitToolOperationArtifact(client, sessionId, phase, payload, idem
     const text = `${prefix}:${JSON.stringify(payload)}`;
     try {
         await client.write({
-            // ZIG-1032: an agreement lane (`agrn-…`) is a routing key, not a chat —
+            // an agreement lane (`agrn-…`) is a routing key, not a chat —
             // passing it as chatId asked the backend to write into a chat that does
             // not exist and 403'd every breadcrumb on agreement-lane work.
             ...artifactScopeForSession(sessionId),
@@ -90,7 +90,7 @@ async function emitToolOperationArtifact(client, sessionId, phase, payload, idem
     }
 }
 /**
- * The single tool-execution path for BOTH cognitions (ZIG-775).
+ * The single tool-execution path for BOTH cognitions.
  *
  * Executing a tool is more than calling its handler: it emits the operation
  * timeline artifacts (started / completed / error) and tool telemetry, and
@@ -98,7 +98,7 @@ async function emitToolOperationArtifact(client, sessionId, phase, payload, idem
  * `eff({ kind: 'tool-call' })` inside `runTurn`; the Claude Agent SDK bridge
  * (`toolManagerToSdkMcp`) emits the SAME effect — so a hosted Claude-brain
  * agent's tool activity is as observable as an FSM agent's (needed for
- * hired-agent visibility, ZIG-535). A caller cannot run a tool and skip these
+ * hired-agent visibility). A caller cannot run a tool and skip these
  * side effects — that is the whole point of funneling both paths here.
  *
  * `eff` is threaded into the tool context so eff-backed tools
@@ -109,7 +109,7 @@ export async function executeToolWithSideEffects(deps, eff, effect, roster) {
     const toolT0 = Date.now();
     const args = effect.args || {};
     const argsPreview = previewToolArgs(args);
-    // ZIG-1120 #6 — breadcrumbs are best-effort. Awaiting them bracketed every
+    // #6 — breadcrumbs are best-effort. Awaiting them bracketed every
     // tool call; a slow/wedged artifacts backend stalled the whole wake. Match
     // ClaudeSdkAgent thought writes (fire-and-forget).
     void emitToolOperationArtifact(deps.artifactsClient, effect.sessionId, 'started', {
@@ -120,7 +120,7 @@ export async function executeToolWithSideEffects(deps, eff, effect, roster) {
     try {
         const lastUser = roster.users.find((u) => u.userId || u.id);
         // Accumulate token usage from any nested LLM call the tool makes (llmTool),
-        // so it can be folded into the turn's authoritative token count (ZIG-813).
+        // so it can be folded into the turn's authoritative token count.
         let nestedUsage;
         const reportUsage = (u) => {
             if (!u)
@@ -145,7 +145,7 @@ export async function executeToolWithSideEffects(deps, eff, effect, roster) {
             eff,
             agents: roster.agents,
             users: roster.users,
-            // ZIG-1120 #8 — session snapshot already has agreements; protocolRunner
+            // #8 — session snapshot already has agreements; protocolRunner
             // used to re-fetch them over HTTP on every spawn/subcontract.
             agreements: roster.agreements ?? [],
             senderId: effect.senderId ?? lastUser?.userId ?? lastUser?.id,
@@ -286,7 +286,7 @@ export function createZiggsEffectHandler(deps) {
                 // Roster + agreements come from the cached snapshot (populated by
                 // read-context). Both cognitions land here — the FSM via runTurn's
                 // executeTool, the Claude Agent SDK via the toolManagerToSdkMcp bridge —
-                // so tool side effects are emitted exactly once, in one place (ZIG-775).
+                // so tool side effects are emitted exactly once, in one place.
                 const cached = cacheGet(effect.sessionId);
                 return executeToolWithSideEffects(deps, handler, effect, {
                     agents: cached?.agents || [],

package/dist/server/agreements/AgreementService.d.ts

@@ -20,7 +20,7 @@ export declare class AgreementService {
     delegate(payload: DelegateAgreementData): Promise<Agreement>;
     respond(agreementId: string, action: 'approve' | 'reject'): Promise<Agreement>;
     /**
-     * ZIG-1021 — claim any open broadcast (quest, standing offer, hand-off,
+     * claim any open broadcast (quest, standing offer, hand-off,
      * link invite). Routing (offer vs agreement claim endpoint) is decided in
      * the shared flow; `kind` is the api-client ClaimedKind so this signature
      * can't drift from the flow again (a 'hand-off' addition broke the build).
@@ -30,7 +30,7 @@ export declare class AgreementService {
         kind: ClaimedKind;
     }>;
     /**
-     * ZIG-1022 — a link proposal is an agreement (engagementKind 'link') to one
+     * a link proposal is an agreement (engagementKind 'link') to one
      * agent; the target owner approves. Folds the old request_link tool.
      */
     requestLink(providerId: string, description?: string): Promise<Agreement>;
@@ -38,7 +38,7 @@ export declare class AgreementService {
     getStatus(agreementId: string): Promise<unknown | null>;
     list(filters?: ListAgreementsFilters): Promise<Agreement[]>;
     /**
-     * ZIG-942: despite the name, the default returns every agreement the
+     * despite the name, the default returns every agreement the
      * caller's grant can read in the active org — including ones the caller is
      * not a party to (`isYou` all-false). Pass `{ partyOnly: true }` for only
      * agreements where the caller is a party.
@@ -59,11 +59,6 @@ export declare class AgreementService {
     }>;
     linkToChat(agreementId: string, chatId: string, linkType?: ChatLinkType): Promise<unknown | null>;
     getChats(agreementId: string): Promise<unknown[]>;
-    join(agreementId: string): Promise<{
-        chatId: string;
-        agentId: string | null;
-        isNew: boolean;
-    }>;
     linkArtifact(agreementId: string, artifactId: string, linkType?: ArtifactLinkType): Promise<unknown | null>;
     getArtifacts(agreementId: string): Promise<unknown[]>;
     linkUser(agreementId: string, userId: string, role: UserRole): Promise<unknown | null>;

package/dist/server/agreements/AgreementService.js

@@ -1,4 +1,4 @@
-import { proposeAgreement, proposeBroadcast as proposeBroadcastApi, delegateAgreement, respondToAgreement, counterAgreement, claimOpenAgreement, getAgreementStatus, listAgreements, getMyAgreements, getAgreement, publishOffer as publishOfferApi, createAgreement, revokeAgreement, fulfillAgreement, linkAgreementToChat, getChatsForAgreement, joinAgreement, linkArtifactToAgreement, getArtifactsForAgreement, linkUserToAgreement, getUsersForAgreement, } from '@ziggs-ai/api-client';
+import { proposeAgreement, proposeBroadcast as proposeBroadcastApi, delegateAgreement, respondToAgreement, counterAgreement, claimOpenAgreement, getAgreementStatus, listAgreements, getMyAgreements, getAgreement, publishOffer as publishOfferApi, createAgreement, revokeAgreement, fulfillAgreement, linkAgreementToChat, getChatsForAgreement, linkArtifactToAgreement, getArtifactsForAgreement, linkUserToAgreement, getUsersForAgreement, } from '@ziggs-ai/api-client';
 export class AgreementService {
     creds;
     constructor(operatorKey, agentId) {
@@ -38,7 +38,7 @@ export class AgreementService {
         return respondToAgreement(agreementId, action, this.creds);
     }
     /**
-     * ZIG-1021 — claim any open broadcast (quest, standing offer, hand-off,
+     * claim any open broadcast (quest, standing offer, hand-off,
      * link invite). Routing (offer vs agreement claim endpoint) is decided in
      * the shared flow; `kind` is the api-client ClaimedKind so this signature
      * can't drift from the flow again (a 'hand-off' addition broke the build).
@@ -47,7 +47,7 @@ export class AgreementService {
         return claimOpenAgreement(agreementId, this.creds);
     }
     /**
-     * ZIG-1022 — a link proposal is an agreement (engagementKind 'link') to one
+     * a link proposal is an agreement (engagementKind 'link') to one
      * agent; the target owner approves. Folds the old request_link tool.
      */
     async requestLink(providerId, description) {
@@ -64,7 +64,7 @@ export class AgreementService {
         return listAgreements(filters, this.creds);
     }
     /**
-     * ZIG-942: despite the name, the default returns every agreement the
+     * despite the name, the default returns every agreement the
      * caller's grant can read in the active org — including ones the caller is
      * not a party to (`isYou` all-false). Pass `{ partyOnly: true }` for only
      * agreements where the caller is a party.
@@ -90,9 +90,6 @@ export class AgreementService {
     getChats(agreementId) {
         return getChatsForAgreement(agreementId, this.creds);
     }
-    join(agreementId) {
-        return joinAgreement(agreementId, this.creds);
-    }
     linkArtifact(agreementId, artifactId, linkType = 'produced') {
         return linkArtifactToAgreement(agreementId, artifactId, linkType, this.creds);
     }

package/dist/server/inboxLoop.d.ts

@@ -21,13 +21,13 @@ export interface InboxLoopDeps {
     onMessage: (text: string, metadata: Record<string, unknown>) => Promise<void>;
     onResourceEvent: (event: Record<string, unknown>) => Promise<void>;
     /**
-     * An open task assigned to this agent (ZIG-973). Delivered from the inbox's
+     * An open task assigned to this agent. Delivered from the inbox's
      * own task channel, so work reaches the agent even when no chat row exists
      * for it (chat-less agreement, self-assigned task).
      */
     onTask?: (task: InboxTaskRef) => Promise<void>;
     /**
-     * A marketplace quest doorbell (ZIG-1185). The host MUST triage with a plain
+     * A marketplace quest doorbell. The host MUST triage with a plain
      * string compare and return without an LLM wake on miss — otherwise every
      * public quest burns a full Claude turn per published supplier.
      */
@@ -39,16 +39,16 @@ export interface InboxPassResult {
     deliveries: number;
     messagesDelivered: number;
     resourceEvents: number;
-    /** Assigned open tasks delivered this pass (ZIG-973). */
+    /** Assigned open tasks delivered this pass. */
     tasksDelivered: number;
-    /** Quest refs triaged this pass (ZIG-1185) — includes misses that only ack. */
+    /** Quest refs triaged this pass — includes misses that only ack. */
     questsTriaged: number;
     /** True when the watermark advanced this pass. */
     acked: boolean;
     /** True when there was more mail than one envelope carries. */
     truncated: boolean;
     /**
-     * Handovers into the host that failed this pass (ZIG-1191). Non-zero means the
+     * Handovers into the host that failed this pass. Non-zero means the
      * watermark was deliberately held, so the same window arrives again.
      */
     failures: number;

package/dist/server/inboxLoop.js

@@ -85,7 +85,7 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
     let tasksDelivered = 0;
     let questsTriaged = 0;
     let failures = 0;
-    // ZIG-1191: a handover that failed must not be acked, and must not be
+    // a handover that failed must not be acked, and must not be
     // remembered as seen — otherwise the redelivery the held watermark buys is
     // dropped as a duplicate. One failure does not abandon the rest of the
     // envelope: the others are still delivered, and the watermark waits for all.
@@ -126,7 +126,7 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
     // Everything that is not chat text is handed over as a resource event, from
     // the delivery itself — the reference already carries the ids the host needs,
     // so nothing has to be re-derived to name what changed.
-    // Quests must never take this path (ZIG-1185) — even if a pre-cut server
+    // Quests must never take this path — even if a pre-cut server
     // left them in `deliveries`, skip so they cannot wake the LLM before triage.
     for (const d of envelope.deliveries) {
         if (d.kind === 'message' || d.kind === 'quest')
@@ -142,7 +142,7 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
             ...(d.chatId ? { chatId: d.chatId } : {}),
             ...(d.agreementId ? { agreementId: d.agreementId } : {}),
             ...(d.taskId ? { taskId: d.taskId } : {}),
-            // ZIG-1278 — claim/listing wakes carry reason + claimer; host needs
+            // claim/listing wakes carry reason + claimer; host needs
             // both for agrn lane routing, claim kickoff, and chat_open buyer id.
             ...(d.reason != null && d.reason !== '' ? { reason: d.reason } : {}),
             ...(d.actorId ? { actorId: d.actorId } : {}),
@@ -151,7 +151,7 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
         if (handled)
             resourceEvents++;
     }
-    // ZIG-973: the work channel. An open assigned task is redelivered on every
+    // the work channel. An open assigned task is redelivered on every
     // pass until it closes (that IS the durable-wait contract), so dedup on
     // taskId+updatedAt — a genuinely touched task wakes again, an untouched one
     // doesn't storm the lane every long-poll.
@@ -169,7 +169,7 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
     if (envelope.truncatedTasks) {
         warn(label, `inbox truncatedTasks=${envelope.truncatedTasks} (more assigned tasks than one pass surfaces — they appear as earlier ones close)`);
     }
-    // ZIG-1185: quest channel. Triage is the host's job (exact string compare);
+    // quest channel. Triage is the host's job (exact string compare);
     // a miss must still count as handled so the watermark can advance with 0 tokens.
     for (const quest of envelope.questsAwaitingMe ?? []) {
         const key = `quest:${quest.agreementId}:${quest.ts}`;
@@ -211,17 +211,28 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
     // Act, then ack: everything above has been handed to the host, so the
     // watermark may now move past it. A crash before this point redelivers.
     //
-    // ZIG-1191: "act" now means acted, not attempted. A pass with failures holds
+    // "act" now means acted, not attempted. A pass with failures holds
     // the watermark so the server redelivers the window — unless `forceAck` says
     // this window has failed too many times in a row and is now poison, in which
     // case it is dropped loudly rather than wedging the agent forever.
     let acked = false;
-    if (envelope.ackTo && (failures === 0 || opts.forceAck)) {
+    // ZIG-1305 — a capped envelope has unlisted older deliveries behind ackTo;
+    // acking would refuse or bury them. Hold until a later uncapped pass.
+    if (envelope.deliveriesCapped && envelope.ackTo) {
+        warn(label, `holding the watermark at ${envelope.ackTo} — deliveriesCapped; ack would not cover the unlisted tail (ZIG-1305)`);
+    }
+    else if (envelope.ackTo && (failures === 0 || opts.forceAck)) {
         if (failures > 0) {
             runtimeLog.error(label, `acking a window that failed ${failures} handover(s) — giving up on redelivery to keep the ` +
                 `agent alive; this mail is lost (ackTo=${envelope.ackTo})`);
         }
-        await inbox.ack(envelope.ackTo);
+        const handledResourceIds = [
+            ...new Set([
+                ...envelope.deliveries.map((d) => d.resourceId),
+                ...(envelope.questsAwaitingMe ?? []).map((q) => q.agreementId),
+            ]),
+        ].filter((id) => typeof id === 'string' && id.length > 0);
+        await inbox.ack(envelope.ackTo, { handledResourceIds });
         acked = true;
         log(label, `acked up to ${envelope.ackTo}`);
     }
@@ -245,7 +256,7 @@ const ERROR_BACKOFF_BASE_MS = 1_000;
 const ERROR_BACKOFF_MAX_MS = 30_000;
 /**
  * How many passes in a row may hold the watermark before the window is treated
- * as poison and acked away (ZIG-1191). Three is enough for the failures we have
+ * as poison and acked away. Three is enough for the failures we have
  * actually seen — a redeployed container, a wedged backend, a transient throw —
  * and short enough that a frame the host can never handle costs three wakes
  * rather than an unbounded loop.
@@ -289,7 +300,7 @@ export function runInboxLoop(deps, opts = {}) {
                 if (!running)
                     break;
                 consecutiveErrors++;
-                // ZIG-1019: a 429 already told us how long to wait, and every refused
+                // a 429 already told us how long to wait, and every refused
                 // call still counts against the cap — so the exponential ladder digs
                 // the hole deeper (1s, 2s, 4s… of pure refusals). Wait the server's
                 // number instead, and do not let a throttle inflate the ladder for the

package/dist/server/questMatch.d.ts

@@ -1,5 +1,5 @@
 /**
- * ZIG-1185 — exact-match triage for marketplace quests.
+ * exact-match triage for marketplace quests.
  * Empty match never hits (token-safe default). Comparison is exact after trim.
  */
 export declare function questExactMatch(match: string, tags: ReadonlyArray<string | null | undefined>): boolean;

package/dist/server/questMatch.js

@@ -1,5 +1,5 @@
 /**
- * ZIG-1185 — exact-match triage for marketplace quests.
+ * exact-match triage for marketplace quests.
  * Empty match never hits (token-safe default). Comparison is exact after trim.
  */
 export function questExactMatch(match, tags) {

package/dist/server/runLauncher.js

@@ -85,7 +85,7 @@ async function runFleet(configs, { operatorKey, port = process.env.PORT || 8080,
     }
     const controlKey = effectiveKey ?? configs.find(c => c.operatorKey)?.operatorKey ?? resolvedPrimaryConfig?.operatorKey;
     if (controlKey) {
-        // ZIG-911: an agent-bound key half-works in a confusing way — say the big
+        // an agent-bound key half-works in a confusing way — say the big
         // thing once at startup instead of letting N-1 per-agent loops 403.
         const boundWarning = boundKeyFleetWarning(controlKey, pool.size);
         if (boundWarning)
@@ -104,7 +104,7 @@ async function runFleet(configs, { operatorKey, port = process.env.PORT || 8080,
             runtimeLog.warn(label, `Primary agent "${resolvedPrimaryConfig.name || resolvedPrimaryConfig.ownAgentId || 'primary'}" failed to connect at startup: ${err.message} — will retry`);
         }
     }
-    // Every registered agent connects (ZIG-1108). There is no roster to consult
+    // Every registered agent connects. There is no roster to consult
     // and no reason to defer: an agent this launcher was handed is an agent it
     // hosts, and each host's own inbox long-poll is the only wake signal needed.
     await pool.connectAll();
@@ -112,7 +112,7 @@ async function runFleet(configs, { operatorKey, port = process.env.PORT || 8080,
     if (connected < pool.size) {
         // Say it loudly and with the number. A launcher that silently hosts fewer
         // agents than it was given is exactly how three published, hireable agents
-        // ran with no host and nothing noticed (ZIG-1107).
+        // ran with no host and nothing noticed.
         runtimeLog.warn(label, `Only ${connected}/${pool.size} agent(s) connected — the rest are registered but unhosted`);
     }
     runtimeLog.info(label, `Ready — ${connected}/${pool.size} agent(s) connected`);

package/dist/server/tools/index.d.ts

@@ -25,4 +25,5 @@ export { CONTEXT_TOOLS, contextReadTool, contextDelegateTool, contextExpandReach
 export { GRANTS_TOOLS, listGrantsTool } from './tier2/grantsTools.js';
 export { LINK_TOOLS, linkCreateInviteTool, linkListTool, } from './tier2/linkTools.js';
 export { ARTIFACT_TOOLS, recordArtifactTool } from './tier2/artifactTools.js';
+export { MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, } from './tier2/mcpConnectionTools.js';
 export { CHAT_TOOLS, openConversationTool } from './tier2/chatTools.js';

package/dist/server/tools/index.js

@@ -24,15 +24,16 @@ export { MARKETPLACE_TOOLS, marketplaceViewTool } from './tier2/marketplaceTools
 export { PAYMENT_TOOLS, paymentBalanceTool, paymentTransferTool, paymentWaitForApprovalTool, paymentHoldTool, paymentReleaseTool, paymentResolveWalletTool, paymentIssueGrantTool, paymentAttenuateGrantTool, paymentRevokeGrantTool, } from './tier2/paymentTools.js';
 export { CONNECTION_TOOLS, connectionProxyTool, connectionListGrantsTool, requestConnectionTool, } from './tier2/connectionTools.js';
 export { CONTEXT_TOOLS, contextReadTool, contextDelegateTool, contextExpandReachTool, contextDiscoverGrantableTool, } from './tier2/contextTools.js';
-// ZIG-893: one grant lister across every rail (retires context_discover +
+// one grant lister across every rail (retires context_discover +
 // payment_list_grants). Always-available on the hosted agent — see CLAUDE_SDK_TOOLS.
 export { GRANTS_TOOLS, listGrantsTool } from './tier2/grantsTools.js';
-// ZIG-898: links (agreements with engagementKind 'link') — cross-org reach.
-// ZIG-1021/1022: the rail is two tools; propose/claim/revoke ride the
+// links (agreements with engagementKind 'link') — cross-org reach.
+///1022: the rail is two tools; propose/claim/revoke ride the
 // agreement grammar.
 export { LINK_TOOLS, linkCreateInviteTool, linkListTool, } from './tier2/linkTools.js';
-// ZIG-899: deliberate artifact recording (the model decides "record this").
+// deliberate artifact recording (the model decides "record this").
 export { ARTIFACT_TOOLS, recordArtifactTool } from './tier2/artifactTools.js';
-// ZIG-900 decision: chat_open only — chat listing stays a context-rail
-// read (grant_list scopeKind=chat), no duplicate lister (ZIG-626 rule).
+export { MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, } from './tier2/mcpConnectionTools.js';
+// Decision: chat_open only — chat listing stays a context-rail read
+// (grant_list scopeKind=chat), so there is no duplicate lister.
 export { CHAT_TOOLS, openConversationTool } from './tier2/chatTools.js';

package/dist/server/tools/tier1/protocolRunner.d.ts

@@ -37,6 +37,6 @@ interface ProtocolPayload {
     [key: string]: unknown;
 }
 export declare function dispatchProtocolOp(services: Services, payload: ProtocolPayload, chatId: string | null, agents?: unknown[], actingAgentId?: string | null, writeKeys?: DeliveryWriteKeys | null, 
-/** ZIG-1120 #8 — prefer the cached session snapshot over a fresh HTTP read. */
+/** #8 — prefer the cached session snapshot over a fresh HTTP read. */
 cachedAgreements?: unknown[]): Promise<unknown>;
 export {};