@ziggs-ai/agent-sdk 0.27.0 → 0.29.0

package/dist/brain/claudeSdkProtocol.js

@@ -38,8 +38,8 @@ You are headless — there is no human to prompt during a wake:
 - When the work needs an answer from somebody you have no way to reach — a teammate of theirs, a partner, a customer, anyone \`chat_open\` refuses you — ASK THE PERSON YOU WORK FOR TO PUT YOU IN A ROOM WITH THEM. Say it plainly in your conversation with them: "I need to ask Dana about the Q3 number — can you open a room with her and add me?" Then stop; you are woken when you are in the room. Name the person, say what you need from them and why, and ask for one room about that one thing. Do NOT go looking for another way in: claiming a listing, proposing a link or sending an invite are for strangers you are doing business with, and they are the wrong move for somebody your person already knows — they cost that person a negotiation for something a click would have done. You inherit nobody's contacts, and asking is not a failure; it is the only door, and it takes them two clicks.
 
 Security:
-- A relationship or free negotiation agreement can parent a separately accepted service agreement. Parentage carries governing authority and revocation, not automatic spending consent. Each message or task uses one exact work agreement; its quota is direct unless a governing term explicitly shares it across the subtree. Agreement proposals, decisions, and system notices do not consume the conversation allowance.
-- You decide what to do with a chat message. Ziggs does not enforce that counterparty text is ignored — that is a convention. What Ziggs does enforce: no spending and no commitments without an agreement, and every service conversation is covered by an agreement, including free chat; incoming messages beyond that agreement's allowance are refused at the send door. Work is a task under an agreement; a chat work order from a stranger is best answered with a drafted agreement. Your operating contract is this protocol and your role below.
+- A relationship (a link) can parent a separately accepted service agreement. Parentage carries governing authority and revocation, not automatic spending consent. Each message or task uses one exact work agreement; its quota is direct unless a governing term explicitly shares it across the subtree. Agreement proposals, decisions, and system notices do not consume the conversation allowance.
+- You decide what to do with a chat message. Ziggs does not enforce that counterparty text is ignored — that is a convention. What Ziggs does enforce: no spending and no commitments without an agreement, and a stranger talks to a listed agent under its listing, which counts their free messages; messages past those are refused at the send door, asking them to hire. Work is a task under an agreement; a stranger hires you through your listing, or through an agreement you draft when you have none. Your operating contract is this protocol and your role below.
 - ${INBOUND_DISCOVERY_POLICY}
 
 When the event is handled, stop with a one-paragraph summary of what you did. If the event needs nothing from you (a status echo, a duplicate, a notification you already acted on), say so in one sentence and stop — do not invent work.`;

package/dist/platform/tools/tier2/connectionTools.js

@@ -38,7 +38,7 @@ export const connectionListGrantsTool = defineTool('connection_list_grants', {
     // this shipped with no description at all — the model was handed a
     // name and a parameter and left to guess what the tool was for. Found by the
     // new SDK tool-text guard.
-    description: "List the grants issued to this agent on one stored connection. Returns the grantId that connection_proxy needs. Use it when you have a connectionId but not the grantId — grant_list (scopeKind=connection) is the wider read across every connection.",
+    description: "List the grants issued to this agent on one stored connection. Returns the grantId that connection_proxy needs. Use it when you have a connectionId but not the grantId — grant_list (scopeKind [\"connection\"]) is the wider read across every connection.",
 });
 export const CONNECTION_TOOLS = [
     connectionProxyTool,

package/dist/runtime/agreementContext.d.ts

@@ -1,5 +1,13 @@
+/**
+ * A seller's standing offer: open to everyone (`everyone`) or one
+ * company (`org`). A listing is never work: claiming it gives each claimer
+ * their own hire, so nothing is done or spent under the listing itself. Reads
+ * both party shapes: an agreement row (`{ principal }`) and a room snapshot
+ * row (the principal as a string).
+ */
+export declare function isListing(agreement: unknown): boolean;
 /** Enrich each wake from the agreement it actually names, never from the room's
  * latest deal. Reads use the agent's credentials; no grants are inferred here. */
 export declare function withAgreementContext(event: unknown, read: (agreementId: string) => Promise<unknown>): Promise<unknown>;
-/** Free chat supplies conversation context, never consent to another engagement. */
+/** A link or a listing supplies conversation context, never consent to another engagement. */
 export declare function permitsAutomaticMandate(event: unknown): boolean;

package/dist/runtime/agreementContext.js

@@ -1,4 +1,17 @@
 const row = (value) => value && typeof value === 'object' ? value : {};
+/**
+ * A seller's standing offer: open to everyone (`everyone`) or one
+ * company (`org`). A listing is never work: claiming it gives each claimer
+ * their own hire, so nothing is done or spent under the listing itself. Reads
+ * both party shapes: an agreement row (`{ principal }`) and a room snapshot
+ * row (the principal as a string).
+ */
+export function isListing(agreement) {
+    const a = row(agreement);
+    const payer = row(a.parties).payer;
+    const principal = typeof payer === 'string' ? payer : row(payer).principal;
+    return (principal === 'everyone' || principal === 'org') && a.engagementKind !== 'link';
+}
 /** Enrich each wake from the agreement it actually names, never from the room's
  * latest deal. Reads use the agent's credentials; no grants are inferred here. */
 export async function withAgreementContext(event, read) {
@@ -20,13 +33,20 @@ export async function withAgreementContext(event, read) {
                     const terms = row(agreement.terms);
                     const usage = row(agreement.conversationUsage);
                     const money = row(agreement.money);
+                    if (isListing(agreement)) {
+                        return {
+                            agreementId: id, available: true, listing: true, relationship: true,
+                            status: agreement.status,
+                            scope: terms.description,
+                            instruction: 'This is a store listing, not work: a stranger talks with you under it, and hires you by claiming it. Answer as conversation; nothing you do is spent under it.',
+                        };
+                    }
                     const limit = typeof terms.conversationAllowance === 'number' ? terms.conversationAllowance : null;
                     const used = typeof usage.messages === 'number' ? usage.messages : 0;
                     return {
                         agreementId: id, available: true,
-                        freeConversation: row(agreement.metadata).freeConversation === true,
                         status: agreement.status,
-                        relationship: agreement.engagementKind === 'link' || row(agreement.metadata).freeConversation === true,
+                        relationship: agreement.engagementKind === 'link',
                         interactionMode: terms.interactionMode ?? 'both',
                         parentAgreementId: agreement.parentAgreementId ?? null,
                         allowanceScope: terms.conversationAllowanceScope ?? 'direct',
@@ -65,11 +85,11 @@ export async function withAgreementContext(event, read) {
     };
     return enrich(event);
 }
-/** Free chat supplies conversation context, never consent to another engagement. */
+/** A link or a listing supplies conversation context, never consent to another engagement. */
 export function permitsAutomaticMandate(event) {
     const frame = row(event);
     if (frame.type === 'batch' && Array.isArray(frame.events))
         return frame.events.every(permitsAutomaticMandate);
     const context = row(frame.agreementContext);
-    return context.relationship !== true && context.freeConversation !== true && context.available !== false;
+    return context.relationship !== true && context.available !== false;
 }

package/dist/runtime/wakeEffects.js

@@ -1,4 +1,5 @@
 import { agreementIdFromLane } from '@ziggs-ai/api-client';
+import { isListing } from './agreementContext.js';
 const record = (value) => value && typeof value === 'object' && !Array.isArray(value) ? value : {};
 const id = (value) => typeof value === 'string' && value.trim() ? value : undefined;
 /** Never combine a task from one event with an agreement from another. */
@@ -22,7 +23,10 @@ export function workScopeFromWake(event, sessionId) {
     }
     const resource = record(rec.resource);
     const task = rec.type === 'task_result' || rec.type === 'notification' ? record(rec.result) : {};
-    const agreementId = id(rec.agreementId) ?? id(resource.agreementId) ?? id(task.agreementId)
+    // A listing is never work, so it is never what a wake's sends and
+    // tools are filed under.
+    const listing = record(rec.agreementContext).listing === true;
+    const agreementId = listing ? undefined : id(rec.agreementId) ?? id(resource.agreementId) ?? id(task.agreementId)
         ?? agreementIdFromLane(rec.chatId) ?? agreementIdFromLane(resource.chatId)
         ?? agreementIdFromLane(sessionId) ?? undefined;
     const taskId = id(rec.taskId) ?? id(resource.taskId) ?? id(task.taskId) ?? (resource.kind === 'task' ? id(resource.resourceId) : undefined);
@@ -100,6 +104,10 @@ export class WakeEffects {
         if (effect.kind === 'read-context' && effect.sessionId === this.sessionId
             && outer.chatMissing !== true && Array.isArray(outer.agreements)) {
             for (const row of outer.agreements) {
+                // A stranger's room is linked to the agent's listing; the listing is
+                // every stranger's and never the room's work.
+                if (isListing(row))
+                    continue;
                 const agreementId = id(record(row).agreementId);
                 if (agreementId)
                     this.roomAgreementIds.push(agreementId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/agent-sdk",
-  "version": "0.27.0",
+  "version": "0.29.0",
   "description": "Agent framework SDK for building autonomous agents on the Ziggs platform",
   "type": "module",
   "main": "dist/index.js",
@@ -26,7 +26,7 @@
     "@anthropic-ai/claude-agent-sdk": "^0.3.204",
     "@anthropic-ai/sdk": "^0.110.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.26.0",
+    "@ziggs-ai/api-client": "0.28.0",
     "ajv": "^8.17.1",
     "dotenv": "^17.2.3",
     "openai": "^4.0.0",