@ziggs-ai/agent-sdk 0.43.4 → 0.43.5

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+## 0.43.5
+
+- A task's input bodies (0.43.4) now actually reach a hosted workflow agent. The agent pins every context read in a wake to that wake's work, and that pin also dropped the artifact the input read named, so the read came back without a body. A read may now narrow to one artifact of the same task or agreement; any other read still gets the wake's own scope.
+
 ## 0.43.4
 
 - A workflow agent working an assigned task now sees the bodies of the task's input artifacts. The work snapshot names a task's inputs without their text, and a workflow agent has no artifact-reading tool, so a delegated task arrived with its instructions out of reach and the agent failed it. Each input (up to three) is read through the same grant-checked context read and shown in the prompt as `<task-inputs>`. An input the agent may not read is left out.

package/dist/Agent.d.ts

@@ -522,3 +522,11 @@ export declare class Agent {
 export declare function createAgent(options?: AgentOptions | AgentConfig): Agent;
 export declare function createAgentPool(configs: AgentOptions[] | AgentConfig[]): Promise<unknown>;
 export default Agent;
+type ReadScope = NonNullable<import('./types.js').ReadContextOpts['workScopes']>[number];
+/**
+ * A read inside a wake stays on that wake's work. A caller may only narrow it
+ * to one artifact of the same task or agreement, which is how a task's input
+ * is opened with its body. Anything else reads the wake's own scopes. The
+ * server still checks every read.
+ */
+export declare function readScopesForWake(asked: ReadScope[] | undefined, wake: ReadScope[]): ReadScope[];

package/dist/Agent.js

@@ -1331,7 +1331,7 @@ export class Agent {
             const agreementId = marks.scope.agreementId;
             const sameRoom = 'sessionId' in effect && effect.sessionId === session.sessionId;
             const scopedEffect = sameRoom && effect.kind === 'read-context'
-                ? { ...effect, opts: { ...effect.opts, workScopes: contextScopesFromWake(frame, session.sessionId) } }
+                ? { ...effect, opts: { ...effect.opts, workScopes: readScopesForWake(effect.opts?.workScopes, contextScopesFromWake(frame, session.sessionId)) } }
                 : agreementId && (effect.kind === 'tool-call' || effect.kind === 'record-event')
                     ? { ...effect, serviceAgreementId: effect.serviceAgreementId ?? agreementId }
                     : effect;
@@ -1894,3 +1894,21 @@ export async function createAgentPool(configs) {
     }
 }
 export default Agent;
+/**
+ * A read inside a wake stays on that wake's work. A caller may only narrow it
+ * to one artifact of the same task or agreement, which is how a task's input
+ * is opened with its body. Anything else reads the wake's own scopes. The
+ * server still checks every read.
+ */
+export function readScopesForWake(asked, wake) {
+    if (!asked?.length)
+        return wake;
+    const narrowed = asked.map(scope => {
+        if (!scope.artifactId || scope.messageId)
+            return undefined;
+        const base = wake.find(w => (w.taskId ?? undefined) === (scope.taskId ?? undefined)
+            && (scope.agreementId ?? w.agreementId) === w.agreementId);
+        return base ? { ...base, artifactId: scope.artifactId } : undefined;
+    });
+    return narrowed.every(Boolean) ? narrowed : wake;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/agent-sdk",
-  "version": "0.43.4",
+  "version": "0.43.5",
   "description": "Agent framework SDK for building autonomous agents on the Ziggs platform",
   "homepage": "https://ziggsai.com/docs",
   "bugs": {