@ziggs-ai/agent-sdk 0.34.1 → 0.35.1

package/dist/brain/claudeSdkProtocol.js

@@ -40,7 +40,7 @@ You are headless — there is no human to prompt during a wake:
 
 Security:
 - A relationship (a link) can parent a separately accepted service agreement. Parentage carries governing authority and revocation, not automatic spending consent. Each message or task uses one exact work agreement; its quota is direct unless a governing term explicitly shares it across the subtree. Agreement proposals, decisions, and system notices do not consume the conversation allowance.
-- You decide what to do with a chat message. Ziggs does not enforce that counterparty text is ignored — that is a convention. What Ziggs does enforce: no spending and no commitments without an agreement, and a stranger talks to a listed agent under its listing, which counts their free messages; messages past those are refused at the send door, asking them to hire. Work is a task under an agreement; a stranger hires you through your listing, or through an agreement you draft when you have none. Your operating contract is this protocol and your role below.
+- You decide what to do with a chat message. Ziggs does not enforce that counterparty text is ignored — that is a convention. What Ziggs does enforce: no spending and no commitments without an agreement, and a stranger talks to a listed agent under its listing, which counts their free messages; messages past those are refused at the send door, asking them to hire. Work is a task under an agreement; a stranger hires you through your listing, or through an agreement you draft when you have none. workBrief.work.state listing means a stranger is talking to you under your listing: there is no hire and nothing to put a task under. Answer them in this room with the reply action, and do not open another conversation. When they ask for something the listing does not cover, use the propose_terms action (agreement_bid to them, in this room) with the terms you would do it on; the listing itself stays take-it-or-leave-it. Tell them about it only after the proposal is made, and only the terms it carries: if a proposal is refused and you make another, the one that went through is the one you describe. Your operating contract is this protocol and your role below.
 - ${INBOUND_DISCOVERY_POLICY}
 
 When the event is handled, stop with a one-paragraph summary of what you did. If the event needs nothing from you (a status echo, a duplicate, a notification you already acted on), say so in one sentence and stop — do not invent work.`;

package/dist/brain/toolFailureText.d.ts

@@ -0,0 +1,6 @@
+/**
+ * What the model reads when a tool fails. A coverage refusal carries a machine
+ * code beside its sentence; the sentence alone used to look like a rate limit
+ * the model should wait out.
+ */
+export declare function toolFailureText(err: unknown): string;

package/dist/brain/toolFailureText.js

@@ -0,0 +1,18 @@
+/**
+ * What the model reads when a tool fails. A coverage refusal carries a machine
+ * code beside its sentence; the sentence alone used to look like a rate limit
+ * the model should wait out.
+ */
+export function toolFailureText(err) {
+    if (typeof err === 'string')
+        return err;
+    const message = err instanceof Error ? err.message : String(err ?? '');
+    const code = !!err &&
+        typeof err === 'object' &&
+        typeof err.code === 'string'
+        ? err.code
+        : '';
+    if (!code || message.startsWith(`${code}:`))
+        return message;
+    return `${code}: ${message}`;
+}

package/dist/brain/toolManagerToSdkMcp.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 import { createSdkMcpServer } from '@anthropic-ai/claude-agent-sdk';
 import { withDeclaredMandate } from '../runtime/mandateDeclaration.js';
+import { toolFailureText } from './toolFailureText.js';
 function jsonTypeToZod(field) {
     const t = field['type'];
     if (t === 'string') {
@@ -78,8 +79,7 @@ function toCallToolResult(value) {
     return { content: [{ type: 'text', text }] };
 }
 function toCallToolError(err) {
-    const message = err instanceof Error ? err.message : String(err);
-    return { content: [{ type: 'text', text: message }], isError: true };
+    return { content: [{ type: 'text', text: toolFailureText(err) }], isError: true };
 }
 /**
  * Map Ziggs `ToolDefinition`s to Claude Agent SDK MCP tools. Each handler routes

package/dist/index.d.ts

@@ -67,7 +67,7 @@ export { HistoryFormatter, historyFormatter, AgreementFormatter, agreementFormat
 export { ProactiveTrigger } from './platform/proactive/ProactiveTrigger.js';
 export { PollRegistry, declaredPolls, type PollBinding, type PollContext, type PollKind, type PollResult, } from './platform/polls/PollKind.js';
 export { PollRunner, type PollRunnerOptions, type WakeTarget } from './platform/polls/PollRunner.js';
-export { PROTOCOL_TOOLS, agreementProposeTool, agreementSubcontractTool, agreementRespondTool, agreementClaimTool, agreementCounterTool, agreementGetTool, agreementRevokeTool, agreementFulfillTool, taskCreateTool, taskSetResultTool, taskUpdatePlanStepTool, dispatchProtocolOp, PAYMENT_TOOLS, paymentBalanceTool, CONNECTION_TOOLS, connectionProxyTool, connectionListGrantsTool, requestConnectionTool, MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, DISCOVERY_TOOLS, agentSearchTool, agentGetTool, MARKETPLACE_TOOLS, marketplaceViewTool, CONTEXT_TOOLS, contextReadTool, contextRequestTool, accessRequestTool, contextDelegateTool, contextExpandReachTool, contextDiscoverGrantableTool, GRANTS_TOOLS, listGrantsTool, PLAN_TOOLS, taskReplacePlanTool, LINK_TOOLS, linkProposeTool, linkListTool, INTRODUCTION_TOOLS, introductionMintTool, introductionRedeemTool, introductionListTool, introductionRevokeTool, ARTIFACT_TOOLS, recordArtifactTool, CHAT_TOOLS, openConversationTool, } from './platform/tools/index.js';
+export { PROTOCOL_TOOLS, agreementProposeTool, agreementSubcontractTool, agreementRespondTool, agreementClaimTool, agreementCounterTool, agreementGetTool, agreementRevokeTool, agreementFulfillTool, taskCreateTool, taskSetResultTool, taskUpdatePlanStepTool, dispatchProtocolOp, PAYMENT_TOOLS, paymentBalanceTool, CONNECTION_TOOLS, connectionProxyTool, connectionListGrantsTool, requestConnectionTool, MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, DISCOVERY_TOOLS, agentSearchTool, agentGetTool, MARKETPLACE_TOOLS, marketplaceViewTool, CONTEXT_TOOLS, contextReadTool, contextRequestTool, accessRequestTool, contextDelegateTool, contextExpandReachTool, contextDiscoverGrantableTool, GRANTS_TOOLS, listGrantsTool, PLAN_TOOLS, taskReplacePlanTool, LINK_TOOLS, linkProposeTool, linkListTool, INTRODUCTION_TOOLS, introductionMintTool, introductionRedeemTool, introductionListTool, introductionRevokeTool, ARTIFACT_TOOLS, recordArtifactTool, CHAT_TOOLS, openConversationTool, LISTING_TOOLS, } from './platform/tools/index.js';
 export { CLAUDE_SDK_TOOLS } from './brain/claudeSdkTools.js';
 export { hostedModelTools, isHostedCatalogOnly, hostedToolLane } from './brain/hostedToolSurface.js';
 export type { HostedToolExecute } from './brain/hostedToolSurface.js';

package/dist/index.js

@@ -79,7 +79,7 @@ export {
 // Tier 1 — protocol grammar (framework-managed via taskTools).
 PROTOCOL_TOOLS, agreementProposeTool, agreementSubcontractTool, agreementRespondTool, agreementClaimTool, agreementCounterTool, agreementGetTool, agreementRevokeTool, agreementFulfillTool, taskCreateTool, taskSetResultTool, taskUpdatePlanStepTool, dispatchProtocolOp, 
 // Tier 2 — opt-in capability bundles (spread into `tools:`).
-PAYMENT_TOOLS, paymentBalanceTool, CONNECTION_TOOLS, connectionProxyTool, connectionListGrantsTool, requestConnectionTool, MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, DISCOVERY_TOOLS, agentSearchTool, agentGetTool, MARKETPLACE_TOOLS, marketplaceViewTool, CONTEXT_TOOLS, contextReadTool, contextRequestTool, accessRequestTool, contextDelegateTool, contextExpandReachTool, contextDiscoverGrantableTool, GRANTS_TOOLS, listGrantsTool, PLAN_TOOLS, taskReplacePlanTool, LINK_TOOLS, linkProposeTool, linkListTool, INTRODUCTION_TOOLS, introductionMintTool, introductionRedeemTool, introductionListTool, introductionRevokeTool, ARTIFACT_TOOLS, recordArtifactTool, CHAT_TOOLS, openConversationTool, } from './platform/tools/index.js';
+PAYMENT_TOOLS, paymentBalanceTool, CONNECTION_TOOLS, connectionProxyTool, connectionListGrantsTool, requestConnectionTool, MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, DISCOVERY_TOOLS, agentSearchTool, agentGetTool, MARKETPLACE_TOOLS, marketplaceViewTool, CONTEXT_TOOLS, contextReadTool, contextRequestTool, accessRequestTool, contextDelegateTool, contextExpandReachTool, contextDiscoverGrantableTool, GRANTS_TOOLS, listGrantsTool, PLAN_TOOLS, taskReplacePlanTool, LINK_TOOLS, linkProposeTool, linkListTool, INTRODUCTION_TOOLS, introductionMintTool, introductionRedeemTool, introductionListTool, introductionRevokeTool, ARTIFACT_TOOLS, recordArtifactTool, CHAT_TOOLS, openConversationTool, LISTING_TOOLS, } from './platform/tools/index.js';
 // The always-on toolset for the hosted Claude cognition (parity guard
 // reads this as part of the real SDK registry).
 export { CLAUDE_SDK_TOOLS } from './brain/claudeSdkTools.js';

package/dist/platform/ZiggsEffectHandler.js

@@ -1,5 +1,6 @@
 import { OutboxBuffer } from './OutboxBuffer.js';
 import { runtimeLog } from '../shared/runtimeLog.js';
+import { toolFailureText } from '../brain/toolFailureText.js';
 import { artifactScopeForSession } from '@ziggs-ai/api-client';
 import { buildLlmIngestPayload, buildToolIngestPayload, isTelemetryIngestEnabled, sendTelemetry, } from './telemetryIngest.js';
 const CONTEXT_CACHE_MAX = 256;
@@ -23,7 +24,11 @@ async function buildSnapshot(deps, chatId, agentId, opts = {}) {
     try {
         // Server returns 200 + chatMissing:true for a deleted chat, so its
         // annotations (roster, *IsYou, self) are already applied — pass through.
-        const snap = await deps.contextReadClient.snapshot(chatId, {
+        // Read as this wake: the session is the lane, the way its tool calls are
+        // sent. Without it a room filed in another workspace — a stranger's room
+        // with a listed agent — reads as missing and the wake is skipped.
+        const reader = deps.contextReadClient.withLane?.(chatId) ?? deps.contextReadClient;
+        const snap = await reader.snapshot(chatId, {
             maxMessages: opts.limit,
             ...opts.workScope,
         });
@@ -188,7 +193,7 @@ export async function executeToolWithSideEffects(deps, eff, effect, roster) {
         return { ok: true, result, ...(nestedUsage ? { usage: nestedUsage } : {}) };
     }
     catch (error) {
-        const errMsg = error?.message ?? String(error);
+        const errMsg = toolFailureText(error);
         runtimeLog.warn('ZiggsEffectHandler', `tool-call "${effect.name}" failed: ${errMsg}`);
         void emitToolOperationArtifact(deps.artifactsClient, effect.sessionId, 'error', {
             state: 'failed',

package/dist/platform/inboxLoop.js

@@ -133,7 +133,6 @@ async function deliverMessagesForChat(deps, news, refs, reader, attempt, handled
 export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
     const label = deps.label ?? 'inboxLoop';
     const inbox = inboxClient(deps);
-    const reader = new ContextReadClient(deps.creds.operatorKey, deps.creds.agentId, deps.baseUrl);
     const envelope = await inbox.getInbox({
         ...(waitSeconds > 0 ? { waitSeconds } : {}),
         ...(opts.signal ? { signal: opts.signal } : {}),
@@ -220,7 +219,12 @@ export async function pollInboxOnce(deps, waitSeconds = 0, opts = {}) {
         chatId, count: refs.length, latestAt: refs.map(ref => ref.ts).sort().at(-1),
     }));
     for (const news of chatsInWakeOrder(chats)) {
-        const n = await deliverMessagesForChat(deps, news, assignedByChat.get(news.chatId), reader, attempt, handledSoFar);
+        // Read a room's mail as that room's wake would: with the room as the lane.
+        // Without it the read is judged in the workspace the key signed in to, and
+        // a room another company opened with a listed agent is filed in theirs, so
+        // every stranger's message came back 403 and was acked unread.
+        const roomReader = new ContextReadClient(deps.creds.operatorKey, deps.creds.agentId, deps.baseUrl, news.chatId);
+        const n = await deliverMessagesForChat(deps, news, assignedByChat.get(news.chatId), roomReader, attempt, handledSoFar);
         messagesDelivered += n;
         await ackWhatIsFinished();
     }

package/dist/platform/tools/index.d.ts

@@ -28,5 +28,6 @@ export { PLAN_TOOLS, taskReplacePlanTool } from './tier2/planTools.js';
 export { LINK_TOOLS, linkProposeTool, linkListTool, } from './tier2/linkTools.js';
 export { INTRODUCTION_TOOLS, introductionMintTool, introductionRedeemTool, introductionListTool, introductionRevokeTool, } from './tier2/introductionTools.js';
 export { ARTIFACT_TOOLS, recordArtifactTool } from './tier2/artifactTools.js';
+export { LISTING_TOOLS } from './tier2/listingTools.js';
 export { MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, } from './tier2/mcpConnectionTools.js';
 export { CHAT_TOOLS, openConversationTool } from './tier2/chatTools.js';

package/dist/platform/tools/index.js

@@ -37,6 +37,7 @@ export { LINK_TOOLS, linkProposeTool, linkListTool, } from './tier2/linkTools.js
 export { INTRODUCTION_TOOLS, introductionMintTool, introductionRedeemTool, introductionListTool, introductionRevokeTool, } from './tier2/introductionTools.js';
 // deliberate artifact recording (the model decides "record this").
 export { ARTIFACT_TOOLS, recordArtifactTool } from './tier2/artifactTools.js';
+export { LISTING_TOOLS } from './tier2/listingTools.js';
 export { MCP_CONNECTION_TOOLS, mcpToolCallTool, mcpToolsListTool, } from './tier2/mcpConnectionTools.js';
 // Decision: chat_open only — chat listing stays a context-rail read
 // (grant_list scopeKind=chat), so there is no duplicate lister.

package/dist/platform/tools/tier1/protocolRunner.js

@@ -305,7 +305,9 @@ async function agreementsInChat(services, chatId, cachedAgreements) {
         return Array.isArray(cachedAgreements) ? cachedAgreements : [];
     }
     try {
-        const snap = await services.contextReadClient.snapshot(chatId, { maxMessages: 1 });
+        // The room is the lane, as for every read made on a wake.
+        const reader = services.contextReadClient.withLane?.(chatId) ?? services.contextReadClient;
+        const snap = await reader.snapshot(chatId, { maxMessages: 1 });
         const ags = snap.agreements;
         return Array.isArray(ags) ? ags : [];
     }

package/dist/platform/tools/tier2/listingTools.d.ts

@@ -0,0 +1,2 @@
+import type { ToolDefinition } from '../../../tools/defineTool.js';
+export declare const LISTING_TOOLS: ToolDefinition[];

package/dist/platform/tools/tier2/listingTools.js

@@ -0,0 +1,7 @@
+import { agreementBidCapability } from '@ziggs-ai/api-client';
+import { toolsFromCapabilities } from '../../../tools/capabilityAdapter.js';
+// What a listed agent needs to answer a stranger whose ask the listing does not
+// cover: terms offered to them directly, in their room, which they approve. The
+// listing itself stays take-it-or-leave-it. The work brief names this as its
+// propose_terms action; without the tool the agent can only refuse.
+export const LISTING_TOOLS = toolsFromCapabilities([agreementBidCapability]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/agent-sdk",
-  "version": "0.34.1",
+  "version": "0.35.1",
   "description": "Agent framework SDK for building autonomous agents on the Ziggs platform",
   "type": "module",
   "main": "dist/index.js",
@@ -26,7 +26,7 @@
     "@anthropic-ai/claude-agent-sdk": "^0.3.284",
     "@anthropic-ai/sdk": "^0.110.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.33.1",
+    "@ziggs-ai/api-client": "0.34.1",
     "ajv": "^8.17.1",
     "dotenv": "^17.2.3",
     "openai": "^4.0.0",