@ziggs-ai/api-client 0.24.0 → 0.26.0

package/dist/capabilities/chat.js

@@ -51,19 +51,22 @@ export const openConversationCapability = {
     names: { sdk: 'chat_open', mcp: 'ziggs_chat_open' },
     title: 'Start or reuse a conversation',
     descriptions: {
-        sdk: 'Open or reuse a chat with a user or agent participant. Calling it again for the same participant returns the SAME chat, so it is how you find the conversation you already have with someone — pass newChat only when this really is a separate subject. This is also how you reach the HUMAN who hired you when the work needs an answer only they have: pass their user id (context_snapshot lists it under users; on your agreement they are the payer/creator party), then chat_send in the chat it returns with no receiverId. Opening a room is issuing the other side access to it, so it needs something that authorizes that: they publish a listing, you share an org, you hold a live agreement with them (a link counts, so link_propose is how you get one with a peer in another org), or they claimed your invite. Someone else\'s agent is not opened directly, inside your org or outside it: open the chat with the person it answers for (their user id); which of their agents answers is theirs to decide, and an agent of theirs already in a room with you can be written to there. With none of those the call is refused and the refusal names the levers. When the person you cannot reach is somebody YOUR OWN PERSON already knows — their teammate, their partner, their customer — none of those levers is the right one: ask the person you work for to open a room with them and add you, in plain words in your conversation with them, then stop until you are in it. Claiming a listing or sending an invite is for a stranger you are doing business with, and using it on somebody your person could introduce you to in two clicks costs them a negotiation instead. To list chats you can already read, use grant_list scopeKind=chat.',
-        mcp: 'Open or reuse a chat with a user or agent participant. Calling it again for the same participant returns the SAME chat; pass newChat only when this really is a separate subject. Opening a room is issuing the other side access to it, so it needs something that authorizes that: they publish a listing, you share an org, you hold a live agreement with them (a link counts, so ziggs_link_propose is how you get one with a peer in another org), or they claimed your invite. Someone else\'s agent is not opened directly, inside your org or outside it: open the chat with the person it answers for (their user id); which of their agents answers is theirs to decide, and an agent of theirs already in a room with you can be written to there. With none of those the call is refused and names the levers. When the person you cannot reach is somebody your own person already knows — their teammate, their partner, their customer — ask that person to open a room with them and add you, rather than reaching for a listing or an invite: those are for strangers you are doing business with.',
+        sdk: 'Open a conversation or explicitly invite people to a room. participantId opens/reuses the acting agent’s pair conversation with one person or agent; newChat opens a separate subject. participantIds creates a separate group with the acting caller and those people; include a stable idempotencyKey for retries. chatId plus participantIds invites people into that exact room, requiring room access and admission authority. Every person needs a valid contact basis: shared organization membership, a link, or an applicable agreement. Each participant keeps their own agent and work relationships; opening a group selects no service agreement. Group creation never expands an existing private DM. Invited teammates read from admission onward. participantIds takes people only: another agent joins a room when a person adds it in the web app, where its approval rules apply, and your own missing seat is asked for with access_request. Reach another person through their user id, not an unpublished agent of theirs. If you cannot reach someone your person knows, ask your person to introduce you in a room. Opening does not send a message; chat_send must name its intended receiverId to guarantee a target. To list accessible rooms, use grant_list scopeKind=chat.',
+        mcp: 'Open a conversation or explicitly invite people to a room. participantId opens/reuses the acting agent’s pair conversation with one person or agent; newChat opens a separate subject. participantIds creates a separate group with the acting caller and those people; include a stable idempotencyKey for retries. chatId plus participantIds invites people into that exact room, requiring room access and admission authority. Every person needs a valid contact basis: shared organization membership, a link, or an applicable agreement. Each participant keeps their own agent and work relationships; opening a group selects no service agreement. Group creation never expands an existing private DM. Invited teammates read from admission onward. participantIds takes people only: another agent joins a room when a person adds it in the web app, where its approval rules apply, and your own missing seat is asked for with ziggs_access_request. Reach another person through their user id, not an unpublished agent of theirs. For missing access to a known room, use ziggs_access_request; opening another room does not recover its history. Opening does not send a message; ziggs_chat_send must name its intended receiverId to guarantee a target.',
     },
     annotation: 'write',
     params: {
         participantId: {
             type: 'string',
-            required: true,
             description: 'Known user or agent id from search, a directory, a chat, or an agreement. For a teammate or a linked person, their user id, not an agent of theirs. No existing chat is required; do not guess ids.',
         },
+        participantIds: { type: 'array', items: { type: 'string' }, description: '1–20 known user ids. Creates a separate group, or invites these people to chatId. Use instead of participantId. Each invitation is authorized separately.' },
+        chatId: { type: 'string', description: 'Existing room to invite participantIds into. Never creates another room. Omit creation options and agreementId.' },
+        idempotencyKey: { type: 'string', description: 'Required for group creation: a unique key for this conversation, reused unchanged on retries. A different participant set needs a new key.' },
+        createIfMissing: { type: 'boolean', description: 'Set false to reuse only an existing room for this acting agent and participant. A missing room is refused without creating a replacement.' },
         newChat: {
             type: 'boolean',
-            description: 'Open a separate chat even though one is already open with this participant. ' +
+            description: 'Open a separate chat even though one is already open with the named participants. ' +
                 'For when the conversation is genuinely its own subject and would confuse an ' +
                 'existing thread. The separate chat does not become the main one, so a later ' +
                 'call without this still returns the original. Leave unset to continue where ' +
@@ -77,14 +80,31 @@ export const openConversationCapability = {
     },
     needsAgentId: true,
     handler: async (args, env) => {
-        if (!args['participantId'])
-            throw new Error('participantId is required');
-        const { chatId, reused } = await openConversation(args['participantId'], fullCreds(env), {
-            newChat: args['newChat'] === true,
-            ...(typeof args['agreementId'] === 'string' && args['agreementId']
-                ? { agreementId: args['agreementId'] }
-                : {}),
-        });
+        if (!args.participantId && !Array.isArray(args.participantIds)) {
+            throw new Error('participantId is required, or use participantIds to invite people');
+        }
+        if (args.participantIds !== undefined) {
+            if (args.participantId !== undefined || !Array.isArray(args.participantIds) ||
+                args.participantIds.length < 1 || args.participantIds.length > 20 ||
+                args.participantIds.some(id => typeof id !== 'string' || !id.trim())) {
+                throw new Error('Use participantIds containing 1–20 people, without participantId');
+            }
+            if (!args.chatId && (typeof args.idempotencyKey !== 'string' || !args.idempotencyKey.trim())) {
+                throw new Error('Group creation requires an idempotencyKey; reuse it when retrying');
+            }
+        }
+        else if (args.chatId || args.idempotencyKey) {
+            throw new Error('chatId and idempotencyKey require participantIds');
+        }
+        const { chatId, reused } = await openConversation({
+            ...(typeof args.participantId === 'string' ? { participantId: args.participantId } : {}),
+            ...(Array.isArray(args.participantIds) ? { participantIds: args.participantIds } : {}),
+            ...(typeof args.chatId === 'string' ? { chatId: args.chatId } : {}),
+            ...(typeof args.idempotencyKey === 'string' ? { idempotencyKey: args.idempotencyKey } : {}),
+            ...(args.newChat === true ? { newChat: true } : {}),
+            ...(typeof args.createIfMissing === 'boolean' ? { createIfMissing: args.createIfMissing } : {}),
+            ...(typeof args.agreementId === 'string' && args.agreementId ? { agreementId: args.agreementId } : {}),
+        }, fullCreds(env));
         const lister = env.surface === 'mcp' ? 'ziggs_grant_list' : 'grant_list';
         const grantNote = `Use ${lister} scopeKind=chat to inspect your room grants. Opening a conversation does not send a message or confirm that anyone has read it.`;
         // word the note from the outcome instead of covering both cases.
@@ -92,13 +112,16 @@ export const openConversationCapability = {
         // withheld it — worse than silence, because the agent cannot even tell
         // there is something to look up. A backend too old to report it keeps the
         // old both-cases wording, and `reused` is simply absent from the result.
-        const outcomeNote = reused === true
-            ? 'Reused the conversation you already had with this participant, so it may already hold history — read it before you speak.'
-            : reused === false
-                ? 'Created a new conversation with this participant, so there is no history to catch up on.'
-                : 'Conversation is open (or reused).';
+        const outcomeNote = args.chatId
+            ? 'The named people can participate in this room. Their history access remains bounded by their grants.'
+            : reused === true
+                ? 'Reused the conversation you already had with the named participants, so it may already hold history — read it before you speak.'
+                : reused === false
+                    ? 'Created a new conversation with the named participants, so there is no history to catch up on.'
+                    : 'Conversation is open (or reused).';
         return {
             chatId,
+            actingAgentId: fullCreds(env).agentId,
             ...(typeof reused === 'boolean' ? { reused } : {}),
             note: `${outcomeNote} ${grantNote}`,
         };

package/dist/capabilities/context.d.ts

@@ -22,5 +22,6 @@ export declare const contextDiscoverGrantableCapability: CapabilityDefinition;
 export declare const contextDelegateCapability: CapabilityDefinition;
 export declare const openCapability: CapabilityDefinition;
 export declare const accessExplainCapability: CapabilityDefinition;
-export declare const CONTEXT_CAPABILITIES: CapabilityDefinition[];
 export declare const contextRequestCapability: CapabilityDefinition;
+export declare const accessRequestCapability: CapabilityDefinition;
+export declare const CONTEXT_CAPABILITIES: CapabilityDefinition[];

package/dist/capabilities/context.js

@@ -160,8 +160,8 @@ export const contextDiscoverGrantableCapability = {
     names: { sdk: 'context_discover_grantable', mcp: 'ziggs_context_discover_grantable' },
     title: 'Find context you cannot read yet',
     descriptions: {
-        sdk: 'See what context EXISTS in orgs you actively work in that you CANNOT read yet — the inverse of grant_list. Covers chats, agreements, and connections (type is one of "chat" | "agreement" | "connection"; connection labels are the provider name only). Returns labels only ({ type, label, scopeRef, orgId } per item), never content, member names, tokens, or money. Bounded to orgs you hold an active WORK agreement in (hire/service; a link to a peer org does not open that org), and excludes anything you already hold a grant for. Use it to notice you may be missing context, then either ask your human to grant a scopeRef, or (if you hold a broader grant) context_delegate using that scopeRef. Pair with grant_list (what you hold) and context_expand_reach (what a held grant covers).',
-        mcp: 'See what context EXISTS in orgs you actively work in that you CANNOT read yet — so you can ask for it instead of failing blind. Covers chats, agreements, and connections (type is "chat" | "agreement" | "connection"; connection labels are the provider name only). Returns labels only: { type, label, scopeRef, orgId } per item, never content, member names, tokens, or money. Bounded to orgs you hold an active WORK agreement in (hire/service; a link to a peer org does not open that org). To act on one, ask your human to grant it, or (if you hold a broader grant of your own) delegate via ziggs_context_delegate using the scopeRef. Use ziggs_grant_list for what you already hold; this is what you lack.',
+        sdk: 'See what context EXISTS in orgs you actively work in that you CANNOT read yet — the inverse of grant_list. Covers chats, agreements, and connections (type is one of "chat" | "agreement" | "connection"; connection labels are the provider name only). Returns labels only ({ type, label, scopeRef, orgId } per item), never content, member names, tokens, or money. Bounded to orgs you hold an active WORK agreement in (hire/service; a link to a peer org does not open that org), and excludes context your current read access covers. For a missing chat or agreement use access_request with its scopeRef; for a connection ask your human to grant it, or (if you hold a broader grant) context_delegate using that scopeRef. Pair with grant_list (what you hold) and context_expand_reach (what a held grant covers).',
+        mcp: 'See what context EXISTS in orgs you actively work in that you CANNOT read yet — so you can ask for it instead of failing blind. Covers chats, agreements, and connections (type is "chat" | "agreement" | "connection"; connection labels are the provider name only). Returns labels only: { type, label, scopeRef, orgId } per item, never content, member names, tokens, or money. Bounded to orgs you hold an active WORK agreement in (hire/service; a link to a peer org does not open that org). To act on a chat or agreement, create a pending request with ziggs_access_request; for a connection ask your human to grant it, or (if you hold a broader grant of your own) delegate via ziggs_context_delegate using the scopeRef. Use ziggs_grant_list for what you already hold; this is what you lack.',
     },
     annotation: 'read-only',
     params: {},
@@ -169,7 +169,9 @@ export const contextDiscoverGrantableCapability = {
     handler: async (_args, env) => {
         const creds = fullCreds(env);
         const items = await new ContextDiscoveryClient(creds.operatorKey, creds.agentId).discoverGrantable();
-        return { count: items.length, items };
+        return { count: items.length, items: items.map((item) => ({ ...item,
+                actions: item.type === 'connection' ? [] : [requestAccessAction({ scopeKind: item.type, scopeId: item.scopeRef.id }, env)],
+            })) };
     },
 };
 export const contextDelegateCapability = {
@@ -289,15 +291,25 @@ function openBodyFromArgs(args) {
     return body;
 }
 function presentOpenResult(result, env) {
-    // Never attach a ready write. An unreadable row already carries
-    // access.continuation (owner-decision); this call must not execute it.
-    const requestTool = env.surface === 'mcp' ? 'ziggs_context_request' : 'context_request';
+    // Expose a request-only next action, never execute it as part of a read.
+    const requestTool = env.surface === 'mcp' ? 'ziggs_access_request' : 'access_request';
     const chatTool = env.surface === 'mcp' ? 'ziggs_chat_open' : 'chat_open';
+    const resumeActions = (result.outcome === 'ok' && result.ref.kind === 'agreement'
+        ? result.page?.items ?? [] : []).flatMap((item) => {
+        if (!item || typeof item !== 'object')
+            return [];
+        const row = item;
+        const ask = row.grantRequest;
+        if (row.status !== 'active' || ask?.primitive !== 'context' || ask.kind !== 'access-request' || ask.holderId !== fullCreds(env).agentId || !ask.scope?.id || !['artifact', 'chat', 'agreement', 'task'].includes(ask.scope.kind ?? ''))
+            return [];
+        return [{ kind: 'resume', tool: env.surface === 'mcp' ? 'ziggs_open' : 'open', args: { [`${ask.scope.kind}Id`]: ask.scope.id }, effect: 'read_only', note: 'Approval recorded. Open the original scope; the server rechecks expiry and revocation.' }];
+    });
     return {
         ...result,
-        actions: [],
+        actions: result.access.continuation?.request ? [requestAccessAction(result.access.continuation.request, env)] : result.ref.kind === 'artifact' && result.outcome === 'unreadable' ? [requestAccessAction({ scopeKind: 'artifact', scopeId: result.ref.id, permission: 'read', durationHours: 24 }, env)] : resumeActions,
+        actingAgentId: fullCreds(env).agentId,
         ...(result.ref.kind === 'artifact' && result.outcome !== 'ok' ? {
-            requestAccessHint: `If a source you already read supplied this artifact reference and its human owner, ${requestTool} can ask that owner for temporary read access without a prior grant. It needs a conversation with the owner; ${chatTool} can open or reuse one, subject to authorization. Discover the request tool's schema before calling it. This response does not confirm existence or ownership. A request grants no access until the human owner approves.`,
+            requestAccessHint: `If a source you already read supplied this artifact reference and its human owner, ${requestTool} scopeKind=artifact can ask that owner for temporary read access without a prior grant. It needs a conversation with the owner; ${chatTool} can open or reuse one, subject to authorization. Discover the request tool's schema before calling it. This response does not confirm existence or ownership. A request grants no access until the human owner approves.`,
         } : {}),
     };
 }
@@ -342,14 +354,6 @@ export const accessExplainCapability = {
         return presentOpenResult(result, env);
     },
 };
-export const CONTEXT_CAPABILITIES = [
-    contextReadCapability,
-    openCapability,
-    accessExplainCapability,
-    contextDelegateCapability,
-    contextExpandReachCapability,
-    contextDiscoverGrantableCapability,
-];
 export const contextRequestCapability = {
     key: 'context_request',
     names: { sdk: 'context_request', mcp: 'ziggs_context_request' },
@@ -381,3 +385,73 @@ export const contextRequestCapability = {
         return { ...result, outcome: 'pending', state: 'requested', appUrl: `${(env.webUrl ?? 'https://ziggsai.com').replace(/\/$/, '')}/app/agreements/${encodeURIComponent(result.agreementId)}`, note: 'Waiting for the artifact owner. No access granted yet; open the original artifact only after approval.' };
     },
 };
+/** A suggested request still needs a purpose; it is never a grant or an approval. */
+function requestAccessAction(args, env) {
+    return {
+        kind: 'request_access',
+        tool: env.surface === 'mcp' ? 'ziggs_access_request' : 'access_request',
+        args, requiredInput: args.scopeKind === 'artifact' ? ['reason', 'chatId', 'ownerId'] : ['reason'], effect: 'request_only',
+        requiresApproval: true,
+    };
+}
+export const accessRequestCapability = {
+    key: 'access_request',
+    names: { sdk: 'access_request', mcp: 'ziggs_access_request' },
+    title: 'Request access for yourself',
+    descriptions: {
+        sdk: 'Create a pending approval agreement for the calling agent to access one artifact, chat, agreement context, or task branch for 1–168 hours. This only requests permission: it never grants access, signs, or approves. After the authorized person approves, open the original resource. Artifact requests need a writable conversation with the named owner; other requests go to your accountable person, who must have authority over the scope. Read-only by default; permission=reply requests read and reply to one chat. No spending or work commitment. Reuse idempotencyKey for a retry.',
+        mcp: 'Ask for missing access through a pending approval agreement. Use this when open/access_explain reports an unreadable resource, or discovery/inbox names a scope you need. It requests access ONLY for this MCP agent; never grants access or approves anything. Scope is one artifact, chat, agreement context, or task branch (including subtasks), for 1–168 hours (default 24). Read-only by default; permission=reply requests read and reply in one chat. For earlier chat messages explicitly set temporal=from-start. Artifact requests require chatId of your existing writable conversation with the owner and that ownerId; other requests route to your accountable person, who must be allowed to share the resource. Surface appUrl, wait for the decision when asked, then open the original resource and resume. Pending grants no access. Never use issue_grant, change identity, create another room, or form a generic work agreement to recover missing access.',
+    },
+    annotation: 'write', needsAgentId: true,
+    params: {
+        scopeKind: { type: 'string', required: true, enum: ['artifact', 'chat', 'agreement', 'task'] },
+        scopeId: { type: 'string', required: true, description: 'Original returned resource id; this request does not open a new resource' },
+        reason: { type: 'string', required: true, description: 'Why access is needed and who will receive the reply or summary' },
+        permission: { type: 'string', enum: ['read', 'reply'], description: 'read by default; reply is read and reply and is only valid for a chat' },
+        temporal: { type: 'string', enum: ['from-now', 'from-start'], description: 'Chat history requested; default from-now. Earlier messages need from-start. Other resources use from-start.' },
+        durationHours: { type: 'number', description: 'Integer 1–168 hours after approval; default 24' },
+        chatId: { type: 'string', description: 'Artifact requests only: existing conversation with the owner' },
+        ownerId: { type: 'string', description: 'Artifact requests only: human account or participant reference in that conversation' },
+        idempotencyKey: { type: 'string', description: 'Reuse for the same logical request' },
+    },
+    handler: async (args, env) => {
+        for (const key of ['scopeKind', 'scopeId', 'reason']) {
+            if (typeof args[key] !== 'string' || !String(args[key]).trim())
+                throw new Error(`${key} is required`);
+        }
+        const scopeKind = args.scopeKind;
+        if (!['artifact', 'chat', 'agreement', 'task'].includes(scopeKind))
+            throw new Error('Unsupported scopeKind');
+        const permission = args.permission ?? 'read';
+        if (!['read', 'reply'].includes(String(permission)) || (permission === 'reply' && scopeKind !== 'chat'))
+            throw new Error('Only chat access may request reply permission');
+        if (args.temporal !== undefined && (!['from-now', 'from-start'].includes(String(args.temporal)) || (scopeKind !== 'chat' && args.temporal === 'from-now')))
+            throw new Error('Only chats support from-now access');
+        const durationHours = args.durationHours ?? 24;
+        if (typeof durationHours !== 'number' || !Number.isInteger(durationHours) || durationHours < 1 || durationHours > 168)
+            throw new Error('durationHours must be an integer between 1 and 168');
+        const creds = fullCreds(env);
+        const result = await new ContextGrantsClient(creds.operatorKey, creds.agentId, env.baseUrl).requestAccess({
+            scopeKind, scopeId: String(args.scopeId).trim(), reason: String(args.reason).trim(),
+            permission: permission, temporal: args.temporal,
+            durationHours, chatId: args.chatId, ownerId: args.ownerId,
+        }, { idempotencyKey: args.idempotencyKey, laneId: creds.laneId });
+        return {
+            ...result, outcome: 'pending', state: 'requested', actingAgentId: creds.agentId,
+            scope: { kind: scopeKind, id: args.scopeId },
+            appUrl: `${(env.webUrl ?? 'https://ziggsai.com').replace(/\/$/, '')}/app/agreements/${encodeURIComponent(result.agreementId)}`,
+            resumeAfterApproval: { tool: env.surface === 'mcp' ? 'ziggs_open' : 'open', args: { [`${scopeKind}Id`]: args.scopeId } },
+            note: 'No access granted. The authorized person must approve; then open the original resource using the same agent identity.',
+        };
+    },
+};
+export const CONTEXT_CAPABILITIES = [
+    contextReadCapability,
+    openCapability,
+    accessExplainCapability,
+    accessRequestCapability,
+    contextRequestCapability,
+    contextDelegateCapability,
+    contextExpandReachCapability,
+    contextDiscoverGrantableCapability,
+];

package/dist/capabilities/index.d.ts

@@ -11,7 +11,7 @@ export { TASK_CAPABILITIES, listTasksCapability, cancelTaskCapability, presentTa
 export { AGREEMENT_PROPOSE_PROVIDER_ID_DESCRIPTION } from './proposeProviderId.js';
 export { MARKETPLACE_CAPABILITIES, marketplaceViewCapability } from './marketplace.js';
 export { GRANTS_CAPABILITIES, listGrantsCapability } from './grants.js';
-export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, contextRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, } from './context.js';
+export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, contextRequestCapability, accessRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, } from './context.js';
 export { CONNECTION_CAPABILITIES, connectionProxyCapability, requestConnectionCapability, } from './connections.js';
 export { DISCOVERY_CAPABILITIES, agentSearchCapability, agentGetCapability, } from './discovery.js';
 export { ARTIFACT_CAPABILITIES, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, type UnsearchedContext, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, reextractArtifactCapability, } from './artifacts.js';

package/dist/capabilities/index.js

@@ -11,7 +11,7 @@ export { TASK_CAPABILITIES, listTasksCapability, cancelTaskCapability, presentTa
 export { AGREEMENT_PROPOSE_PROVIDER_ID_DESCRIPTION } from './proposeProviderId.js';
 export { MARKETPLACE_CAPABILITIES, marketplaceViewCapability } from './marketplace.js';
 export { GRANTS_CAPABILITIES, listGrantsCapability } from './grants.js';
-export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, contextRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, } from './context.js';
+export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, contextRequestCapability, accessRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, } from './context.js';
 export { CONNECTION_CAPABILITIES, connectionProxyCapability, requestConnectionCapability, } from './connections.js';
 export { DISCOVERY_CAPABILITIES, agentSearchCapability, agentGetCapability, } from './discovery.js';
 export { ARTIFACT_CAPABILITIES, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, reextractArtifactCapability, } from './artifacts.js';

package/dist/capabilities/nextCall.js

@@ -216,6 +216,11 @@ export function nextCall(env, capabilityKey, args, why, opts) {
     for (const [key, value] of Object.entries(args ?? {})) {
         if (!isFilled(value))
             continue;
+        if (key === 'participantIds' && Array.isArray(value) && value.some(isPersonaFace)) {
+            missing.push(key);
+            strippedFaces.push(key);
+            continue;
+        }
         if (ADDRESS_FIELDS.includes(key) &&
             isPersonaFace(value)) {
             missing.push(key);
@@ -225,11 +230,20 @@ export function nextCall(env, capabilityKey, args, why, opts) {
         filled[key] = value;
     }
     for (const name of requiredArgNames(capabilityKey, opts?.definition)) {
+        if (capabilityKey === 'chat_open' && name === 'participantId' && Array.isArray(filled.participantIds) && filled.participantIds.length > 0)
+            continue;
         if (!isFilled(filled[name])) {
             if (!missing.includes(name))
                 missing.push(name);
         }
     }
+    if (capabilityKey === 'chat_open' && (!opts?.definition || 'participantIds' in opts.definition.params)) {
+        if (!filled.participantId && !(Array.isArray(filled.participantIds) && filled.participantIds.length > 0) && !missing.includes('participantId')) {
+            missing.push('participantId');
+        }
+        if (Array.isArray(filled.participantIds) && !filled.chatId && !filled.idempotencyKey)
+            missing.push('idempotencyKey');
+    }
     const hold = opts?.hold;
     const ready = missing.length === 0 && !hold;
     const outcome = opts?.outcome ??

package/dist/http/ChatClient.d.ts

@@ -13,9 +13,19 @@ import { type Creds } from '../types.js';
  * with without a second call.
  */
 export type ChatSummary = ChatReadDto;
-export declare function openConversation(participantId: string, creds: Creds, { newChat, agreementId }?: {
+export interface OpenConversationInput {
+    participantId?: string;
+    participantIds?: string[];
+    chatId?: string;
+    idempotencyKey?: string;
+    newChat?: boolean;
+    agreementId?: string;
+    createIfMissing?: boolean;
+}
+export declare function openConversation(participant: string | OpenConversationInput, creds: Creds, { newChat, agreementId, createIfMissing }?: {
     newChat?: boolean;
     agreementId?: string;
+    createIfMissing?: boolean;
 }): Promise<{
     chatId: string;
     reused?: boolean;
@@ -33,10 +43,10 @@ export interface SendChatMessageInput {
      */
     to?: string;
     /**
-     * Recipient id. Optional: when omitted, the backend infers the
-     * receiver if the chat has exactly one other member (one agent, or one
-     * other human). Provide it explicitly in chats with multiple members.
-     * Sent on the wire as `{ id }`; the SDK still takes a string.
+     * Recipient id. Optional: when omitted, the one other participant in the
+     * room is the receiver; with several, the backend infers one when Jev is
+     * confident. Otherwise it stores room context without a specific wake.
+     * Explicit addressing is required for a guaranteed target.
      */
     receiverId?: string;
     text: string;
@@ -47,7 +57,6 @@ export interface SendChatMessageInput {
     /** Governing service agreement; independent of representation. */
     conversationAgreementId?: string;
     taskId?: string;
-    replyToMessageId?: string;
 }
 /**
  * Where the server says a send landed.
@@ -119,9 +128,10 @@ export declare class ChatClient {
      * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
      */
     constructor(operatorKey: string, agentId?: string);
-    open(participantId: string, opts?: {
+    open(participant: string | OpenConversationInput, opts?: {
         newChat?: boolean;
         agreementId?: string;
+        createIfMissing?: boolean;
     }): Promise<{
         chatId: string;
         reused?: boolean;

package/dist/http/ChatClient.js

@@ -10,20 +10,20 @@ function assertCreds(creds, op) {
     if (!creds?.agentId)
         throw new Error(`agentId is required for ${op}`);
 }
-export async function openConversation(participantId, creds, { newChat = false, agreementId } = {}) {
-    if (!participantId)
-        throw new Error('participantId is required for openConversation');
+export async function openConversation(participant, creds, { newChat = false, agreementId, createIfMissing } = {}) {
+    const input = typeof participant === 'string'
+        ? { participantId: participant, ...(newChat ? { newChat } : {}), ...(agreementId ? { agreementId } : {}), ...(createIfMissing !== undefined ? { createIfMissing } : {}) }
+        : participant;
+    if (!input || (!input.participantId && !input.participantIds?.length)) {
+        throw new Error('participantId is required, or use participantIds to invite people');
+    }
     assertCreds(creds, 'open conversation');
     const res = await fetch(`${getBackendUrl()}/chats`, {
         method: 'POST',
         headers: buildHeaders(creds),
         // Only sent when asked for: an older backend ignores the field, so a
         // caller that never wants a separate room behaves identically either way.
-        body: JSON.stringify({
-            participantId,
-            ...(newChat ? { newChat: true } : {}),
-            ...(agreementId ? { agreementId } : {}),
-        }),
+        body: JSON.stringify(input),
     });
     if (!res.ok) {
         const body = await res.text().catch(() => '');
@@ -107,7 +107,6 @@ export async function sendChatMessage(input, creds) {
             underAgreementId: input.underAgreementId,
             conversationAgreementId: input.conversationAgreementId,
             taskId: input.taskId,
-            replyToMessageId: input.replyToMessageId,
         }),
     });
     if (!res.ok) {
@@ -166,7 +165,7 @@ export class ChatClient {
         // standalone functions still assert it per call.
         this.creds = { operatorKey, agentId };
     }
-    open(participantId, opts) { return openConversation(participantId, this.creds, opts); }
+    open(participant, opts) { return openConversation(participant, this.creds, opts); }
     addMember(input) { return addChatMember(input, this.creds); }
     sendMessage(input) { return sendChatMessage(input, this.creds); }
     listMine() { return listMyChats(this.creds); }

package/dist/http/ContextGrantsClient.d.ts

@@ -96,6 +96,24 @@ export declare class ContextGrantsClient {
      */
     constructor(operatorKey: string, agentId?: string, baseUrl?: string);
     issueGrant(input: IssueContextGrantInput): Promise<GrantView>;
+    /** Request-only endpoint: a successful call must still have granted no access. */
+    requestAccess(input: {
+        scopeKind: 'artifact' | 'chat' | 'agreement' | 'task';
+        scopeId: string;
+        reason: string;
+        permission?: 'read' | 'reply';
+        temporal?: 'from-now' | 'from-start';
+        durationHours?: number;
+        chatId?: string;
+        ownerId?: string;
+    }, opts?: {
+        idempotencyKey?: string;
+        laneId?: string;
+    }): Promise<{
+        status: 'pending_approval';
+        agreementId: string;
+        accessGranted: false;
+    }>;
     requestArtifactAccess(artifactId: string, input: {
         chatId: string;
         ownerId: string;

package/dist/http/ContextGrantsClient.js

@@ -63,6 +63,25 @@ export class ContextGrantsClient {
         }
         return parsed.grant;
     }
+    /** Request-only endpoint: a successful call must still have granted no access. */
+    async requestAccess(input, opts) {
+        const res = await fetch(`${this.baseUrl}/context/access/requests`, {
+            method: 'POST',
+            headers: buildOperatorHeaders(this.operatorKey, this.agentId, {
+                'content-type': 'application/json',
+                ...(opts?.idempotencyKey ? { 'Idempotency-Key': opts.idempotencyKey } : {}),
+            }, opts?.laneId),
+            body: JSON.stringify(input),
+        });
+        const body = await res.text().catch(() => '');
+        if (!res.ok)
+            throwApiError(res, body, `requestAccess failed: ${res.status}`);
+        const result = JSON.parse(body);
+        if (result.status !== 'pending_approval' || !result.agreementId || result.accessGranted !== false) {
+            throw new Error('Expected a pending access request with accessGranted=false');
+        }
+        return { status: 'pending_approval', agreementId: result.agreementId, accessGranted: false };
+    }
     async requestArtifactAccess(artifactId, input, opts) {
         const res = await fetch(`${this.baseUrl}/context/artifacts/${encodeURIComponent(artifactId)}/access-requests`, {
             method: 'POST',

package/dist/http/ContextOpenClient.d.ts

@@ -32,6 +32,13 @@ export interface ContextOpenAccess {
     continuation?: {
         kind: 'owner_decision';
         summary: string;
+        request?: {
+            scopeKind: 'chat' | 'agreement' | 'task';
+            scopeId: string;
+            permission: 'read' | 'reply';
+            temporal: 'from-now' | 'from-start';
+            durationHours: number;
+        };
     };
 }
 export interface ContextOpenResult {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/api-client",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "HTTP and WebSocket client for the Ziggs backend API",
   "type": "module",
   "main": "dist/index.js",