@ziggs-ai/api-client 0.32.0 → 0.32.1

package/dist/capabilities/context.js

@@ -293,6 +293,10 @@ function openBodyFromArgs(args) {
     return body;
 }
 function presentOpenResult(result, env) {
+    // Resource-routed OAuth calls let the backend select the assistant. Their
+    // local credentials have no agent id, so only the response can name it.
+    const actingAgentId = result.actingAgentId !== undefined
+        ? result.actingAgentId : fullCreds(env).agentId || undefined;
     // Expose a request-only next action, never execute it as part of a read.
     const requestTool = env.surface === 'mcp' ? 'ziggs_access_request' : 'access_request';
     const chatTool = env.surface === 'mcp' ? 'ziggs_chat_open' : 'chat_open';
@@ -302,7 +306,7 @@ function presentOpenResult(result, env) {
             return [];
         const row = item;
         const ask = row.grantRequest;
-        if (row.status !== 'active' || !isContextAccessRequest(ask) || ask.holderId !== fullCreds(env).agentId || !ask.scope?.id || !['artifact', 'chat', 'agreement', 'task'].includes(ask.scope.kind ?? ''))
+        if (row.status !== 'active' || !isContextAccessRequest(ask) || !actingAgentId || ask.holderId !== actingAgentId || !ask.scope?.id || !['artifact', 'chat', 'agreement', 'task'].includes(ask.scope.kind ?? ''))
             return [];
         return [{ kind: 'resume', tool: env.surface === 'mcp' ? 'ziggs_open' : 'open', args: { [`${ask.scope.kind}Id`]: ask.scope.id }, effect: 'read_only', note: 'Approval recorded. Open the original scope; the server rechecks expiry and revocation.' }];
     });
@@ -316,7 +320,7 @@ function presentOpenResult(result, env) {
                 : result.ref.kind === 'artifact' && result.outcome === 'unreadable'
                     ? [requestAccessAction({ scopeKind: 'artifact', scopeId: result.ref.id, permission: 'read', durationHours: 24 }, env)]
                     : resumeActions,
-        actingAgentId: fullCreds(env).agentId,
+        ...(actingAgentId !== undefined ? { actingAgentId } : {}),
         ...(!result.actions && result.ref.kind === 'artifact' && result.outcome !== 'ok' ? {
             requestAccessHint: `If a source you already read supplied this artifact reference and its human owner, ${requestTool} scopeKind=artifact can ask that owner for temporary read access without a prior grant. It needs a conversation with the owner; ${chatTool} can open or reuse one, subject to authorization. Discover the request tool's schema before calling it. This response does not confirm existence or ownership. A request grants no access until the human owner approves.`,
         } : {}),
@@ -451,8 +455,10 @@ export const accessRequestCapability = {
             durationHours, chatId: args.chatId,
             recipientId: typeof args.recipientId === 'string' ? args.recipientId.trim() : undefined,
         }, { idempotencyKey: args.idempotencyKey, laneId: creds.laneId });
+        const actingAgentId = result.actingAgentId ?? (creds.agentId || undefined);
         return {
-            ...result, outcome: 'pending', state: 'requested', actingAgentId: creds.agentId,
+            ...result, outcome: 'pending', state: 'requested',
+            ...(actingAgentId ? { actingAgentId } : {}),
             scope: result.scope ?? { kind: scopeKind, id: scopeId },
             appUrl: `${(env.webUrl ?? 'https://ziggsai.com').replace(/\/$/, '')}/app/agreements/${encodeURIComponent(result.agreementId)}`,
             resumeAfterApproval: { tool: env.surface === 'mcp' ? 'ziggs_open' : 'open', args: result.scope ? { [`${result.scope.kind}Id`]: result.scope.id } : { [`${scopeKind}Id`]: scopeId } },

package/dist/http/ContextGrantsClient.d.ts

@@ -116,6 +116,7 @@ export declare class ContextGrantsClient {
         status: 'pending_approval';
         agreementId: string;
         accessGranted: false;
+        actingAgentId?: string;
         scope?: {
             kind: string;
             id: string;

package/dist/http/ContextGrantsClient.js

@@ -80,7 +80,7 @@ export class ContextGrantsClient {
         if (result.status !== 'pending_approval' || !result.agreementId || result.accessGranted !== false) {
             throw new Error('Expected a pending access request with accessGranted=false');
         }
-        return { status: 'pending_approval', agreementId: result.agreementId, accessGranted: false, ...(result.scope ? { scope: result.scope } : {}), ...sentToOf(result) };
+        return { status: 'pending_approval', agreementId: result.agreementId, accessGranted: false, ...(typeof result.actingAgentId === 'string' && result.actingAgentId ? { actingAgentId: result.actingAgentId } : {}), ...(result.scope ? { scope: result.scope } : {}), ...sentToOf(result) };
     }
     async requestArtifactAccess(artifactId, input, opts) {
         const res = await fetch(`${this.baseUrl}/context/artifacts/${encodeURIComponent(artifactId)}/access-requests`, {

package/dist/http/ContextOpenClient.d.ts

@@ -51,6 +51,8 @@ export interface ContextOpenAccess {
     };
 }
 export interface ContextOpenResult {
+    /** Server-resolved caller; absent on older servers, null for human callers. */
+    actingAgentId?: string | null;
     /** Optional for servers predating resource action projections. */
     actions?: ResourceAction[];
     outcome: ContextOpenOutcome;

package/dist/http/InboxClient.d.ts

@@ -20,7 +20,9 @@ export declare class InboxClient {
     constructor(operatorKey: string, agentId?: string, baseUrl?: string, instanceId?: string);
     private headers;
     private inboxUrl;
-    getInbox(opts?: InboxReadOptions): Promise<InboxEnvelope>;
+    getInbox(opts?: InboxReadOptions & {
+        signal?: AbortSignal;
+    }): Promise<InboxEnvelope>;
     /**
      * Wait for assigned mail without taking the host lease.
      * Still sends X-Ziggs-Instance; the server ignores it on this route.

package/dist/http/InboxClient.js

@@ -50,6 +50,7 @@ export class InboxClient {
     async getInbox(opts = {}) {
         const res = await fetch(this.inboxUrl('/inbox', opts), {
             headers: this.headers(),
+            ...(opts.signal ? { signal: opts.signal } : {}),
         });
         const body = await res.text().catch(() => '');
         if (!res.ok) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/api-client",
-  "version": "0.32.0",
+  "version": "0.32.1",
   "description": "HTTP and WebSocket client for the Ziggs backend API",
   "type": "module",
   "main": "dist/index.js",