@ziggs-ai/api-client 0.37.28 → 0.38.0

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## 0.38.0
+
+- `respondToAgreement` and `approveAgreementAsParty` accept `mandateAgreementId`: the hire whose setting lets an agent answer without a person. It is sent in the request body and never inferred from the selected execution.
+- Clarify that connection work consent applies to every selected execution, including personal work.
+- Document owner-approved `work_context` consent for connection discovery and proxy calls during a selected execution.
+
 ## 0.37.28
 
 - `SessionsClient` lists sibling assistant windows and holds a chat in this window (`GET/POST /agents/:id/sessions`). Used by MCP `ziggs_session_list` / `ziggs_session_hold`. Not on the directory connector surface.

package/dist/capabilities/artifacts.js

@@ -92,7 +92,7 @@ async function recordFileArtifact(args, env, visibility) {
     // can be tens of megabytes.
     const bytes = decodeFileBytes(contentBase64);
     const creds = fullCreds(env);
-    const client = new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId);
+    const client = new ArtifactsClient(creds.operatorKey, creds.agentId);
     const taskId = args['taskId'];
     const byteSize = bytes.byteLength;
     const uploaded = await client.uploadUrl({
@@ -255,7 +255,7 @@ export const recordArtifactCapability = {
         const taskId = args['taskId'];
         const externalRef = parseExternalRef(args['externalRef']);
         const creds = fullCreds(env);
-        const { artifactId } = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).writeStrict({
+        const { artifactId } = await new ArtifactsClient(creds.operatorKey, creds.agentId).writeStrict({
             text,
             name: args['name']?.trim() || undefined,
             visibility,
@@ -305,7 +305,7 @@ export const listArtifactsCapability = {
     needsAgentId: true,
     handler: async (args, env) => {
         const creds = fullCreds(env);
-        const listed = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).list({ authoredBy: 'me' }, {
+        const listed = await new ArtifactsClient(creds.operatorKey, creds.agentId).list({ authoredBy: 'me' }, {
             after: args['after'],
             limit: typeof args['limit'] === 'number' ? args['limit'] : undefined,
         });
@@ -429,7 +429,7 @@ export const findArtifactsCapability = {
     needsAgentId: true,
     handler: async (args, env) => {
         const creds = fullCreds(env);
-        const found = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).find(args['q'], {
+        const found = await new ArtifactsClient(creds.operatorKey, creds.agentId).find(args['q'], {
             limit: typeof args['limit'] === 'number' ? args['limit'] : undefined,
             before: args['before'],
         });
@@ -568,7 +568,7 @@ export const attachArtifactCapability = {
             throw new Error('role must be input or output');
         }
         const creds = fullCreds(env);
-        const client = new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId);
+        const client = new ArtifactsClient(creds.operatorKey, creds.agentId);
         if (chatId) {
             await client.attachToChat(artifactId, chatId);
             return {
@@ -672,7 +672,7 @@ export const uploadArtifactUrlCapability = {
             throw new Error('visibility must be chat or agent-private');
         }
         const creds = fullCreds(env);
-        const result = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).uploadUrl({
+        const result = await new ArtifactsClient(creds.operatorKey, creds.agentId).uploadUrl({
             filename,
             mime,
             byteSize: Math.trunc(byteSize),
@@ -722,7 +722,7 @@ export const completeArtifactFileCapability = {
         if (!checksum)
             throw new Error('checksum is required');
         const creds = fullCreds(env);
-        const artifact = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).completeFile(artifactId, checksum);
+        const artifact = await new ArtifactsClient(creds.operatorKey, creds.agentId).completeFile(artifactId, checksum);
         return {
             ok: true,
             artifact,
@@ -749,7 +749,7 @@ export const downloadArtifactCapability = {
         if (!artifactId)
             throw new Error('artifactId is required');
         const creds = fullCreds(env);
-        const out = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).download(artifactId);
+        const out = await new ArtifactsClient(creds.operatorKey, creds.agentId).download(artifactId);
         return { ok: true, ...out };
     },
 };
@@ -771,7 +771,7 @@ export const reextractArtifactCapability = {
         if (!artifactId)
             throw new Error('artifactId is required');
         const creds = fullCreds(env);
-        const artifact = await new ArtifactsClient(creds.operatorKey, creds.agentId, creds.laneId).reExtract(artifactId);
+        const artifact = await new ArtifactsClient(creds.operatorKey, creds.agentId).reExtract(artifactId);
         return { ok: true, artifact };
     },
 };

package/dist/capabilities/connections.js

@@ -1,15 +1,10 @@
 import { ConnectionsClient } from "../http/ConnectionsClient.js";
 import { rethrowWithContext, } from "./types.js";
 function client(env) {
-    // laneId, not just the key and the agent. The lane is which hire this wake is
-    // in, and the broker reads off it who the agent is acting for — which is what
-    // tells one hirer's grant from another's: an agent that serves several hirers
-    // is the holder of every grant it has been given, so the holder check alone
-    // cannot separate them. Every other Creds-based client already carries it.
-    const { operatorKey, agentId, laneId } = env.creds;
+    const { operatorKey, agentId } = env.creds;
     if (!operatorKey)
         throw new Error("operatorKey missing from tool context");
-    return new ConnectionsClient(operatorKey, agentId, env.baseUrl, laneId);
+    return new ConnectionsClient(operatorKey, agentId, env.baseUrl);
 }
 export const connectionProxyCapability = {
     key: "connection_proxy",
@@ -17,7 +12,7 @@ export const connectionProxyCapability = {
     title: "Use a stored connection",
     descriptions: {
         sdk: "Use a named-connector stored connection (e.g. the owner's GitHub/Jira) without ever seeing the credential. " +
-            "Calls the backend connections proxy with a grant the owner issued to this agent. " +
+            "Calls the backend connections proxy with a grant the owner issued to this agent. In selected work, the grant must also carry owner-approved work_context consent for that work and its readers, or be the grant the hire itself minted for it. Keep the execution context on discovery and calls. " +
             'Not for remote MCP servers (provider "mcp") — those use mcp_tool_call / mcp_tools_list; proxy refuses them with "Unknown provider: mcp". ' +
             "Don't know connectionId/grantId yet? Use grant_list (scopeKind [\"connection\"]) or connection_list_grants first.",
     },

package/dist/capabilities/context.js

@@ -119,7 +119,7 @@ export const contextReadCapability = {
         if (direction !== undefined && direction !== 'forward' && direction !== 'backward') {
             throw new Error('direction must be "forward" or "backward"');
         }
-        return new ContextReadClient(creds.operatorKey, creds.agentId, undefined, creds.laneId).read(type, {
+        return new ContextReadClient(creds.operatorKey, creds.agentId, undefined).read(type, {
             via,
             agreementId: args['agreementId'],
             cursor: args['cursor'],
@@ -307,7 +307,7 @@ export async function explainRefusedRead(kind, id, env) {
     const creds = fullCreds(env);
     let presented;
     try {
-        const client = new ContextOpenClient(creds.operatorKey, creds.agentId, env.baseUrl, creds.laneId);
+        const client = new ContextOpenClient(creds.operatorKey, creds.agentId, env.baseUrl);
         presented = presentOpenResult(await client.explain({ [`${kind}Id`]: id }), env);
     }
     catch {
@@ -348,7 +348,7 @@ export const openCapability = {
     needsAgentId: true,
     handler: async (args, env) => {
         const creds = fullCreds(env);
-        const client = new ContextOpenClient(creds.operatorKey, creds.agentId, env.baseUrl, creds.laneId);
+        const client = new ContextOpenClient(creds.operatorKey, creds.agentId, env.baseUrl);
         return presentOpenResult(await client.open(args), env);
     },
 };
@@ -364,7 +364,7 @@ export const accessExplainCapability = {
     needsAgentId: true,
     handler: async (args, env) => {
         const creds = fullCreds(env);
-        const client = new ContextOpenClient(creds.operatorKey, creds.agentId, env.baseUrl, creds.laneId);
+        const client = new ContextOpenClient(creds.operatorKey, creds.agentId, env.baseUrl);
         const result = await client.explain(args);
         return presentOpenResult(result, env);
     },
@@ -418,6 +418,9 @@ export const accessRequestCapability = {
         // comes back refused with the people this agent may ask. Required in the
         // schema, a host refused the call before that list could arrive.
         recipientId: { type: 'string', description: 'Who to ask: workBrief.actingFor.customer.id (the customer of this hire) or workBrief.actingFor.operator.id (your operator). Omit when only one approver is available; otherwise the response lists choices.' },
+        contributionTo: {
+            type: 'object', description: 'Artifact only: { kind: "chat" | "agreement", id }. Ask its owner to approve use in this shared work. Name all destination readers and yourself in holders. Existing read access does not replace this consent.',
+        },
         holders: {
             type: 'array',
             description: 'Artifact only, read only: up to 20 readers, each { kind: "agent" | "user" | "org", id }. Leave yourself out to arrange it for others. Omit to ask for yourself.',
@@ -461,6 +464,13 @@ export const accessRequestCapability = {
         const holders = args.holders === undefined ? undefined : readersOf(args.holders);
         if (holders && (scopeKind !== 'artifact' || agreementId || permission !== 'read'))
             throw new Error('holders is for one artifact named by scopeId, to read');
+        let contributionTo;
+        if (args.contributionTo !== undefined) {
+            const target = args.contributionTo;
+            if (!target || !['chat', 'agreement'].includes(String(target.kind)) || typeof target.id !== 'string' || !target.id.trim() || !holders || scopeKind !== 'artifact' || agreementId || permission !== 'read')
+                throw new Error('contributionTo requires an artifact, named readers, and a chat or agreement destination');
+            contributionTo = { kind: target.kind, id: target.id.trim() };
+        }
         const creds = fullCreds(env);
         const result = await new ContextGrantsClient(creds.operatorKey, creds.agentId, env.baseUrl).requestAccess({
             scopeKind, scopeId, agreementId, reason: String(args.reason).trim(),
@@ -468,6 +478,7 @@ export const accessRequestCapability = {
             durationHours, chatId: args.chatId,
             recipientId: typeof args.recipientId === 'string' ? args.recipientId.trim() : undefined,
             ...(holders ? { holders } : {}),
+            ...(contributionTo ? { contributionTo } : {}),
         }, { idempotencyKey: args.idempotencyKey, laneId: creds.laneId });
         const actingAgentId = result.actingAgentId ?? (creds.agentId || undefined);
         if (result.status === 'already_readable') {

package/dist/capabilities/grants.js

@@ -81,10 +81,7 @@ export const listGrantsCapability = {
         if (roleArg !== undefined && roleArg !== 'holder' && roleArg !== 'issuer') {
             throw new Error('role must be holder or issuer');
         }
-        const { items, nextCursor, unreadableRails } = await new GrantsClient(creds.operatorKey, creds.agentId, env.baseUrl, 
-        // The lane, so the server answers with the grants THIS wake may spend
-        // rather than everything the agent holds across every customer.
-        creds.laneId).listGrants({
+        const { items, nextCursor, unreadableRails } = await new GrantsClient(creds.operatorKey, creds.agentId, env.baseUrl).listGrants({
             scopeKind,
             scopeId: typeof args['scopeId'] === 'string' ? args['scopeId'] : undefined,
             role: roleArg,

package/dist/capabilities/mcpBriefs.js

@@ -45,7 +45,7 @@ const BRIEFS = {
         next: 'ziggs_inbox_ack after handling',
     },
     ziggs_inbox_ack: {
-        does: 'Hands back handled deliveries: ackTo exactly as received, plus handledResourceIds for each one assigned to you (empty is safe when none is).',
+        does: 'Hands back handled deliveries: ackTo exactly as received, plus handledDeliveryIds for each one assigned to you (empty is safe when none is).',
         changes: 'moves the watermark; an older ackTo is a no-op; skipping your rows is refused (INBOX_ACK_UNHANDLED)',
     },
     ziggs_inbox_defer: {

package/dist/capabilities/payments.js

@@ -1,15 +1,10 @@
 import { PaymentsClient } from '../http/PaymentsClient.js';
 import { rethrowWithContext, } from './types.js';
 function client(env) {
-    // laneId too, like every other Creds-based client. Only the balance read is
-    // on this surface today, and a read does not spend — but the lane is what
-    // fences a spend to the job it was authorised in, so it is wired here rather
-    // than left for whoever brings a spending verb back to remember. Omitting it
-    // can only leave a spend unfenced; it can never widen one.
-    const { operatorKey, agentId, laneId } = env.creds;
+    const { operatorKey, agentId } = env.creds;
     if (!operatorKey)
         throw new Error('operatorKey missing from tool context');
-    return new PaymentsClient(operatorKey, agentId, env.baseUrl, laneId);
+    return new PaymentsClient(operatorKey, agentId, env.baseUrl);
 }
 /**
  * Reading the balance is the whole rail on an agent surface.

package/dist/http/AgreementClient.d.ts

@@ -161,6 +161,8 @@ export declare function respondToAgreement(agreementId: string, action: 'approve
     agreement?: Agreement | null;
     /** Where to send the human when the decision is theirs. */
     appUrl?: string;
+    /** The hire whose setting lets this agent answer without a person. */
+    mandateAgreementId?: string;
 }): Promise<Agreement>;
 /**
  * The approval facts a "who decides this?" question is answered from: the party
@@ -202,7 +204,11 @@ export declare function resolveMyPendingApprovalPartyId(agreement: Agreement, op
  * approval authority even for their own slot; the server rechecks it on PUT.
  * Canonical for hire, service, link, and request proposals.
  */
-export declare function approveAgreementAsParty(agreementId: string, partyId: string, status: 'approved' | 'rejected', creds: Creds): Promise<Agreement>;
+export declare function approveAgreementAsParty(agreementId: string, partyId: string, status: 'approved' | 'rejected', creds: Creds, 
+/** The hire whose setting lets this agent answer without a person. Named, never inferred from the execution. */
+opts?: {
+    mandateAgreementId?: string;
+}): Promise<Agreement>;
 export interface CounterAgreementData {
     price?: number;
     agreementDescription?: string;
@@ -392,7 +398,9 @@ export declare class AgreementClient {
     proposeDirect(data: ProposeDirectInput): Promise<Agreement>;
     proposeBroadcast(data: ProposeBroadcastInput): Promise<Agreement>;
     delegate(data: DelegateAgreementData): Promise<Agreement>;
-    respond(id: string, action: 'approve' | 'reject'): Promise<Agreement>;
+    respond(id: string, action: 'approve' | 'reject', opts?: {
+        mandateAgreementId?: string;
+    }): Promise<Agreement>;
     approveAsParty(id: string, partyId: string, status: 'approved' | 'rejected'): Promise<Agreement>;
     counter(id: string, data: CounterAgreementData): Promise<Agreement>;
     getStatus(id: string): Promise<unknown>;

package/dist/http/AgreementClient.js

@@ -255,7 +255,7 @@ export async function respondToAgreement(agreementId, action, creds, opts = {})
     // If the slot is the principal's, the server accepts
     // only under a live approval-authority grant (else 403). Do not pre-refuse
     // here; the PUT is the source of truth.
-    return approveAgreementAsParty(agreementId, partyId, action === 'approve' ? 'approved' : 'rejected', creds);
+    return approveAgreementAsParty(agreementId, partyId, action === 'approve' ? 'approved' : 'rejected', creds, opts.mandateAgreementId ? { mandateAgreementId: opts.mandateAgreementId } : {});
 }
 /**
  * Which of `candidateIds` holds the pending approval slot, first match wins —
@@ -298,7 +298,9 @@ export function resolveMyPendingApprovalPartyId(agreement, opts) {
  * approval authority even for their own slot; the server rechecks it on PUT.
  * Canonical for hire, service, link, and request proposals.
  */
-export async function approveAgreementAsParty(agreementId, partyId, status, creds) {
+export async function approveAgreementAsParty(agreementId, partyId, status, creds, 
+/** The hire whose setting lets this agent answer without a person. Named, never inferred from the execution. */
+opts = {}) {
     if (!agreementId)
         throw new Error('agreementId is required for approval');
     if (!partyId)
@@ -307,7 +309,7 @@ export async function approveAgreementAsParty(agreementId, partyId, status, cred
     const res = await fetch(`${getAgreementBaseUrl()}/${encodeURIComponent(agreementId)}/approvals/${encodeURIComponent(partyId)}`, {
         method: 'PUT',
         headers: buildHeaders(creds),
-        body: JSON.stringify({ status }),
+        body: JSON.stringify({ status, ...(opts.mandateAgreementId ? { mandateAgreementId: opts.mandateAgreementId } : {}) }),
     });
     if (!res.ok) {
         const body = await res.text().catch(() => '');
@@ -688,7 +690,7 @@ export class AgreementClient {
     proposeDirect(data) { return proposeDirectTo(data, this.creds); }
     proposeBroadcast(data) { return proposeBroadcast(data, this.creds); }
     delegate(data) { return delegateAgreement(data, this.creds); }
-    respond(id, action) { return respondToAgreement(id, action, this.creds); }
+    respond(id, action, opts = {}) { return respondToAgreement(id, action, this.creds, opts); }
     approveAsParty(id, partyId, status) { return approveAgreementAsParty(id, partyId, status, this.creds); }
     counter(id, data) { return counterAgreement(id, data, this.creds); }
     getStatus(id) { return getAgreementStatus(id, this.creds); }

package/dist/http/ArtifactsClient.d.ts

@@ -146,15 +146,8 @@ export declare function artifactScopeForSession(sessionId: string): {
 export declare class ArtifactsClient {
     private readonly operatorKey;
     private readonly agentId?;
-    private readonly laneId?;
-    /**
-     * @param operatorKey Agent-scoped or fleet operator key.
-     * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
-     * @param laneId the wake's lane (chat id, or `agrn-<agreementId>`),
-     *   sent as X-Ziggs-Lane so `authoredBy=me` is fenced to this engagement
-     *   rather than spanning every engagement the agent has authored in.
-     */
-    constructor(operatorKey: string, agentId?: string, laneId?: string);
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey: string, agentId?: string);
     list(q: ListArtifactsQuery, opts?: ListArtifactsOptions): Promise<ListArtifactsResult>;
     /**
      * `GET /artifacts/find` — lexical search over the artifacts this agent can

package/dist/http/ArtifactsClient.js

@@ -52,20 +52,12 @@ export function artifactScopeForSession(sessionId) {
 export class ArtifactsClient {
     operatorKey;
     agentId;
-    laneId;
-    /**
-     * @param operatorKey Agent-scoped or fleet operator key.
-     * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
-     * @param laneId the wake's lane (chat id, or `agrn-<agreementId>`),
-     *   sent as X-Ziggs-Lane so `authoredBy=me` is fenced to this engagement
-     *   rather than spanning every engagement the agent has authored in.
-     */
-    constructor(operatorKey, agentId, laneId) {
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey, agentId) {
         if (!operatorKey)
             throw new Error('ArtifactsClient: operatorKey is required');
         this.operatorKey = operatorKey;
         this.agentId = agentId;
-        this.laneId = laneId;
     }
     async list(q, opts = {}) {
         const selectors = [q.chatId, q.agreementId, q.taskId, q.authoredBy].filter(Boolean);
@@ -364,6 +356,6 @@ export class ArtifactsClient {
         }
     }
     _headers() {
-        return buildOperatorHeaders(this.operatorKey, this.agentId, { 'content-type': 'application/json' }, this.laneId);
+        return buildOperatorHeaders(this.operatorKey, this.agentId, { 'content-type': 'application/json' });
     }
 }

package/dist/http/AssistantConnectionClient.d.ts

@@ -55,7 +55,7 @@ export declare class AssistantConnectionClient {
     getChanges(options?: InboxChangesOptions): Promise<InboxChangesResult>;
     /** Receipt diagnostics only: this does not subscribe, renew or wake a host. */
     eventStatus(orgId: string, signal?: AbortSignal): Promise<McpEventStatus>;
-    ack(upTo: string, handledResourceIds?: string[]): Promise<unknown>;
+    ack(upTo: string, handledDeliveryIds?: string[]): Promise<unknown>;
     park(agreementId: string): Promise<{
         agreementId: string;
         parked: true;

package/dist/http/AssistantConnectionClient.js

@@ -60,8 +60,8 @@ export class AssistantConnectionClient {
     eventStatus(orgId, signal) {
         return this.request(`events/status?${new URLSearchParams({ orgId })}`, undefined, signal);
     }
-    ack(upTo, handledResourceIds = []) {
-        return this.request('inbox/ack', { upTo, handledResourceIds });
+    ack(upTo, handledDeliveryIds = []) {
+        return this.request('inbox/ack', { upTo, handledDeliveryIds });
     }
     park(agreementId) {
         return this.request('inbox/park', { agreementId });

package/dist/http/ConnectionsClient.d.ts

@@ -62,18 +62,8 @@ export declare class ConnectionsClient {
     private readonly operatorKey;
     private readonly agentId?;
     private readonly baseUrl;
-    private readonly laneId?;
-    /**
-     * @param laneId the wake's lane (a chat id, or `agrn-<agreementId>`), sent as
-     *   X-Ziggs-Lane. It tells the broker which hire this wake is in, and the
-     *   broker reads off it WHO the agent is acting for: an agent that serves
-     *   several hirers holds all of their grants at once and is the holder of
-     *   every one, so without a lane one hirer's grant is indistinguishable from
-     *   another's, and a grant one customer gave can be spent while working for
-     *   somebody else.
-     *   ArtifactsClient sends the same header for the same reason.
-     */
-    constructor(operatorKey: string, agentId?: string, baseUrl?: string, laneId?: string);
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey: string, agentId?: string, baseUrl?: string);
     /**
      * Present a ConnectionGrant to the broker and perform a provider action.
      * Returns the provider result — never the raw OAuth token. Requires an

package/dist/http/ConnectionsClient.js

@@ -35,24 +35,13 @@ export class ConnectionsClient {
     operatorKey;
     agentId;
     baseUrl;
-    laneId;
-    /**
-     * @param laneId the wake's lane (a chat id, or `agrn-<agreementId>`), sent as
-     *   X-Ziggs-Lane. It tells the broker which hire this wake is in, and the
-     *   broker reads off it WHO the agent is acting for: an agent that serves
-     *   several hirers holds all of their grants at once and is the holder of
-     *   every one, so without a lane one hirer's grant is indistinguishable from
-     *   another's, and a grant one customer gave can be spent while working for
-     *   somebody else.
-     *   ArtifactsClient sends the same header for the same reason.
-     */
-    constructor(operatorKey, agentId, baseUrl, laneId) {
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey, agentId, baseUrl) {
         if (!operatorKey)
             throw new Error("ConnectionsClient: operatorKey is required");
         this.operatorKey = operatorKey;
         this.agentId = agentId;
         this.baseUrl = baseUrl || getBackendUrl();
-        this.laneId = laneId;
     }
     /**
      * Present a ConnectionGrant to the broker and perform a provider action.
@@ -104,7 +93,7 @@ export class ConnectionsClient {
      * defensively for leaked secrets, as `proxy` does.
      */
     async listForHolder() {
-        const grantsClient = new GrantsClient(this.operatorKey, this.agentId, this.baseUrl, this.laneId);
+        const grantsClient = new GrantsClient(this.operatorKey, this.agentId, this.baseUrl);
         // All pages of the agent's live connection grants (not just the first page).
         const { items, unreadableRails } = await grantsClient.listAllGrantsWithRails({
             scopeKind: "connection",
@@ -188,7 +177,7 @@ export class ConnectionsClient {
             headers: buildOperatorHeaders(this.operatorKey, this.agentId, {
                 ...(body !== undefined ? { "content-type": "application/json" } : {}),
                 ...extraHeaders,
-            }, this.laneId),
+            }),
         };
         if (body !== undefined)
             init.body = JSON.stringify(body);

package/dist/http/ContextGrantsClient.d.ts

@@ -111,6 +111,7 @@ export declare class ContextGrantsClient {
         recipientId?: string;
         /** Artifact only: who should read it, if not only the caller. One grant each. */
         holders?: AccessReader[];
+        contributionTo?: import('@ziggs-ai/contracts').ContributionTarget;
     }, opts?: {
         idempotencyKey?: string;
         laneId?: string;

package/dist/http/ContextGrantsClient.js

@@ -70,7 +70,7 @@ export class ContextGrantsClient {
             headers: buildOperatorHeaders(this.operatorKey, this.agentId, {
                 'content-type': 'application/json',
                 ...(opts?.idempotencyKey ? { 'Idempotency-Key': opts.idempotencyKey } : {}),
-            }, opts?.laneId),
+            }),
             body: JSON.stringify(input),
         });
         const body = await res.text().catch(() => '');

package/dist/http/ContextOpenClient.d.ts

@@ -67,7 +67,7 @@ export interface ContextOpenResult {
     ref: ContextOpenRef;
     access: ContextOpenAccess;
     workContext: {
-        laneId: string | null;
+        executionContextId: string | null;
     };
     page?: {
         type: string;
@@ -90,8 +90,7 @@ export declare class ContextOpenClient {
     private readonly operatorKey;
     private readonly agentId?;
     private readonly baseUrl?;
-    private readonly laneId?;
-    constructor(operatorKey: string, agentId?: string | undefined, baseUrl?: string | undefined, laneId?: string | undefined);
+    constructor(operatorKey: string, agentId?: string | undefined, baseUrl?: string | undefined);
     open(body: ContextOpenBody): Promise<ContextOpenResult>;
     explain(body: ContextOpenBody): Promise<ContextExplainResult>;
     private post;

package/dist/http/ContextOpenClient.js

@@ -16,12 +16,10 @@ export class ContextOpenClient {
     operatorKey;
     agentId;
     baseUrl;
-    laneId;
-    constructor(operatorKey, agentId, baseUrl, laneId) {
+    constructor(operatorKey, agentId, baseUrl) {
         this.operatorKey = operatorKey;
         this.agentId = agentId;
         this.baseUrl = baseUrl;
-        this.laneId = laneId;
         if (!operatorKey)
             throw new Error('ContextOpenClient: operatorKey is required');
     }
@@ -37,7 +35,7 @@ export class ContextOpenClient {
         const res = await fetch(url, {
             method: 'POST',
             headers: {
-                ...buildOperatorHeaders(this.operatorKey, this.agentId, { 'Content-Type': 'application/json' }, this.laneId),
+                ...buildOperatorHeaders(this.operatorKey, this.agentId, { 'Content-Type': 'application/json' }),
             },
             body: JSON.stringify(normalized),
         });

package/dist/http/ContextReadClient.d.ts

@@ -58,7 +58,9 @@ export interface ContextSnapshotParticipant {
 }
 export interface ContextSnapshotResult {
     /** Server-resolved orientation; writes recheck authority. */
-    workBrief?: Record<string, unknown>;
+    workBrief?: Record<string, unknown> & {
+        position?: import('@ziggs-ai/contracts').WorkPositionView;
+    };
     work?: Record<string, unknown>;
     history: unknown[];
     agreements: unknown[];
@@ -95,18 +97,8 @@ export declare class ContextReadClient {
     private readonly operatorKey;
     private readonly agentId?;
     private readonly baseUrl;
-    private readonly laneId?;
-    /**
-     * @param operatorKey Agent-scoped or fleet operator key.
-     * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
-     * @param laneId the wake's lane, sent as X-Ziggs-Lane. The server fences a
-     *   read to the lane's parties; without it, reach falls back to a wider
-     *   test and a read can be authorised on a weaker basis than the caller
-     *   intended. Send it on every read made while acting on a wake.
-     */
-    constructor(operatorKey: string, agentId?: string, baseUrl?: string, laneId?: string);
-    /** The same reader acting on one wake's lane. */
-    withLane(laneId: string | undefined): ContextReadClient;
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey: string, agentId?: string, baseUrl?: string);
     read<T = unknown>(type: ContextReadType, query: ContextReadQuery): Promise<ContextReadEnvelope<T>>;
     /**
      * Aggregated chat snapshot — `GET /context/snapshot?via=chat:<id>`. The

package/dist/http/ContextReadClient.js

@@ -57,28 +57,13 @@ export class ContextReadClient {
     operatorKey;
     agentId;
     baseUrl;
-    laneId;
-    /**
-     * @param operatorKey Agent-scoped or fleet operator key.
-     * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
-     * @param laneId the wake's lane, sent as X-Ziggs-Lane. The server fences a
-     *   read to the lane's parties; without it, reach falls back to a wider
-     *   test and a read can be authorised on a weaker basis than the caller
-     *   intended. Send it on every read made while acting on a wake.
-     */
-    constructor(operatorKey, agentId, baseUrl, laneId) {
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey, agentId, baseUrl) {
         if (!operatorKey)
             throw new Error('ContextReadClient: operatorKey is required');
         this.operatorKey = operatorKey;
         this.agentId = agentId;
         this.baseUrl = baseUrl || getBackendUrl();
-        this.laneId = laneId;
-    }
-    /** The same reader acting on one wake's lane. */
-    withLane(laneId) {
-        if (!laneId || laneId === this.laneId)
-            return this;
-        return new ContextReadClient(this.operatorKey, this.agentId, this.baseUrl, laneId);
     }
     async read(type, query) {
         if (!query.via?.trim()) {
@@ -101,7 +86,7 @@ export class ContextReadClient {
         if (query.contextGrantId) {
             url.searchParams.set('contextGrantId', query.contextGrantId);
         }
-        const headers = buildOperatorHeaders(this.operatorKey, this.agentId, undefined, this.laneId);
+        const headers = buildOperatorHeaders(this.operatorKey, this.agentId, undefined);
         if (query.contextGrantId) {
             headers['X-Context-Grant-Id'] = query.contextGrantId;
         }
@@ -138,7 +123,7 @@ export class ContextReadClient {
         if (opts.contextGrantId) {
             url.searchParams.set('contextGrantId', opts.contextGrantId);
         }
-        const headers = buildOperatorHeaders(this.operatorKey, this.agentId, undefined, this.laneId);
+        const headers = buildOperatorHeaders(this.operatorKey, this.agentId, undefined);
         if (opts.contextGrantId) {
             headers['X-Context-Grant-Id'] = opts.contextGrantId;
         }

package/dist/http/ExecutionContextClient.d.ts

@@ -0,0 +1,3 @@
+import type { WorkExecutionContext } from '@ziggs-ai/contracts';
+/** Fail closed before resuming model state, including timers and recorded wakes. */
+export declare function validateWorkExecution(context: WorkExecutionContext, operatorKey: string, baseUrl?: string): Promise<void>;

package/dist/http/ExecutionContextClient.js

@@ -0,0 +1,17 @@
+import { getBackendUrl } from '../utils/urlUtils.js';
+import { buildOperatorHeaders, withWorkExecution } from './operatorHeaders.js';
+import { throwApiError } from '../shared/apiError.js';
+/** Fail closed before resuming model state, including timers and recorded wakes. */
+export async function validateWorkExecution(context, operatorKey, baseUrl = getBackendUrl()) {
+    await withWorkExecution(context, async () => {
+        const response = await fetch(`${baseUrl}/execution/context`, {
+            headers: buildOperatorHeaders(operatorKey, context.actorId),
+        });
+        const text = await response.text();
+        if (!response.ok)
+            throwApiError(response, text, 'Execution context is no longer valid');
+        const body = JSON.parse(text);
+        if (body.contextId !== context.contextId)
+            throw new Error('Execution preflight returned a different context');
+    });
+}

package/dist/http/GrantsClient.d.ts

@@ -56,16 +56,8 @@ export declare class GrantsClient {
     private readonly operatorKey;
     private readonly agentId?;
     private readonly baseUrl;
-    private readonly laneId?;
-    /**
-     * @param laneId the wake's lane (a chat id, or `agrn-<agreementId>`), sent as
-     *   X-Ziggs-Lane. The server reads off it who the agent is acting for, and
-     *   answers the spendable rails with only the grants this wake may spend —
-     *   so an agent serving several customers is never handed a list it has to
-     *   choose between. Without it the list is everything the agent holds, and
-     *   the grant it picks may then be refused with nothing saying why.
-     */
-    constructor(operatorKey: string, agentId?: string, baseUrl?: string, laneId?: string);
+    /** Authority is supplied by withWorkExecution / withWorkExecutionId. */
+    constructor(operatorKey: string, agentId?: string, baseUrl?: string);
     listGrants(query?: ListGrantsQuery): Promise<ListGrantsResult>;
     /**
      * Every grant matching `query`, following the cursor to completion. Use when a