@ziggs-ai/api-client 0.37.4 → 0.37.6

package/dist/capabilities/agreementVerbs.js

@@ -1,3 +1,4 @@
+import { SOURCES_PARAM, sourcesArg } from './sources.js';
 import { delegateAgreement, getAgreement, proposeBroadcast, proposeDirectTo, } from '../http/AgreementClient.js';
 import { fullCreds } from './types.js';
 import { nextCall } from './nextCall.js';
@@ -56,6 +57,7 @@ const TERMS_PARAMS = {
         type: 'number',
         description: 'End the engagement after this many tasks.',
     },
+    sources: SOURCES_PARAM,
 };
 /** Pull the shared terms off a validated arg bag. */
 function termsFrom(args) {
@@ -77,6 +79,7 @@ function termsFrom(args) {
         ...(args['maxExecutions'] === undefined
             ? {}
             : { maxExecutions: args['maxExecutions'] }),
+        ...sourcesArg(args),
     };
 }
 function engagementKindFrom(args) {

package/dist/capabilities/artifacts.js

@@ -1,3 +1,4 @@
+import { SOURCES_PARAM, sourcesArg } from './sources.js';
 import { ARTIFACT_FILE_FORMATS, ArtifactsClient, } from '../http/ArtifactsClient.js';
 import { ContextGrantsClient } from '../http/ContextGrantsClient.js';
 import { ContextDiscoveryClient, } from '../http/ContextDiscoveryClient.js';
@@ -218,6 +219,7 @@ export const recordArtifactCapability = {
                 'text is the in-Ziggs summary. Ziggs stores the link and does not fetch it. ' +
                 'A grant on this artifact does not open the other system.',
         },
+        sources: SOURCES_PARAM,
     },
     needsAgentId: true,
     handler: async (args, env) => {
@@ -265,6 +267,7 @@ export const recordArtifactCapability = {
             contentType,
             idempotencyKey: args['idempotencyKey'],
             ...(externalRef ? { externalRef } : {}),
+            ...sourcesArg(args),
         });
         return {
             ok: true,

package/dist/capabilities/context.d.ts

@@ -50,6 +50,5 @@ export declare const RESOURCE_UNREADABLE_MESSAGE = "This exists and you cannot r
 export declare function explainRefusedRead(kind: 'agreement' | 'task' | 'chat' | 'artifact', id: string, env: CapabilityEnv): Promise<RefusedRead | null>;
 export declare const openCapability: CapabilityDefinition;
 export declare const accessExplainCapability: CapabilityDefinition;
-export declare const contextRequestCapability: CapabilityDefinition;
 export declare const accessRequestCapability: CapabilityDefinition;
 export declare const CONTEXT_CAPABILITIES: CapabilityDefinition[];

package/dist/capabilities/context.js

@@ -391,36 +391,6 @@ export const accessExplainCapability = {
         return presentOpenResult(result, env);
     },
 };
-export const contextRequestCapability = {
-    key: 'context_request',
-    names: { sdk: 'context_request', mcp: 'ziggs_context_request' },
-    title: 'Ask an owner for artifact access',
-    descriptions: {
-        sdk: 'Ask a human owner for temporary read-only access to one artifact you were given a reference for. Use your existing chat with that owner. Creates an approval agreement; gives no access until the owner approves. You are the only recipient. After approval, open the original artifact. Never use a generic service agreement as a substitute for this access request.',
-    },
-    annotation: 'destructive', needsAgentId: true,
-    params: {
-        artifactId: { type: 'string', required: true },
-        chatId: { type: 'string', required: true },
-        ownerId: { type: 'string', required: true, description: 'Who to ask, from your work brief: workBrief.actingFor.customer.id or workBrief.actingFor.operator.id. Anyone else is refused, and the refusal lists who you can ask.' },
-        reason: { type: 'string', required: true, description: 'Purpose, including whom you will summarize the artifact to' },
-        durationHours: { type: 'number', description: 'Integer 1–168 hours after approval; default 24' },
-        idempotencyKey: { type: 'string', description: 'Reuse for the same request; do not create duplicate approval cards' },
-    },
-    handler: async (args, env) => {
-        for (const key of ['artifactId', 'chatId', 'ownerId', 'reason'])
-            if (typeof args[key] !== 'string' || !String(args[key]).trim())
-                throw new Error(`${key} is required`);
-        const durationHours = args.durationHours === undefined ? 24 : Number(args.durationHours);
-        if (!Number.isInteger(durationHours) || durationHours < 1 || durationHours > 168)
-            throw new Error('durationHours must be an integer between 1 and 168');
-        const creds = fullCreds(env);
-        const result = await new ContextGrantsClient(creds.operatorKey, creds.agentId, env.baseUrl).requestArtifactAccess(args.artifactId, {
-            chatId: args.chatId, ownerId: args.ownerId, reason: args.reason, durationHours,
-        }, { idempotencyKey: args.idempotencyKey, laneId: creds.laneId });
-        return { ...result, outcome: 'pending', state: 'requested', appUrl: `${(env.webUrl ?? 'https://ziggsai.com').replace(/\/$/, '')}/app/agreements/${encodeURIComponent(result.agreementId)}`, note: `${result.message ?? 'Waiting for the artifact owner.'} No access granted yet; open the original artifact only after approval.` };
-    },
-};
 /** A suggested request still needs a purpose; it is never a grant or an approval. */
 function requestAccessAction(args, env) {
     return {
@@ -543,7 +513,6 @@ export const CONTEXT_CAPABILITIES = [
     openCapability,
     accessExplainCapability,
     accessRequestCapability,
-    contextRequestCapability,
     contextDelegateCapability,
     contextExpandReachCapability,
     contextDiscoverGrantableCapability,

package/dist/capabilities/index.d.ts

@@ -1,4 +1,5 @@
 export { type CapabilitySurface, type CapabilityAnnotation, type CapabilityParam, type CapabilityEnv, type CapabilityDefinition, fullCreds, rethrowWithContext, } from './types.js';
+export { WRITE_SOURCE_KINDS, SOURCES_DESCRIPTION, SOURCES_PARAM, sourcesArg, type WriteSource, type WriteSourceKind, } from './sources.js';
 export { type McpBrief, type McpDoor, hasMcpBrief, mcpBriefNames, mcpDescription, } from './mcpBriefs.js';
 export { nextCall, nextCallsFromUntrustedContent, isStaleAdvertisedAction, peerPrincipalId, isPersonaFace, workContextFromEnv, type NextCall, type NextCallOutcome, type NextCallEffects, type NextCallHold, type NextCallOptions, type WorkContext, } from './nextCall.js';
 export { AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, agreementBuyCapability, agreementBidCapability, agreementBrokerCapability, agreementRequestCapability, agreementHandoffCapability, agreementSubcontractCapability, } from './agreementVerbs.js';
@@ -12,7 +13,7 @@ export { TASK_CAPABILITIES, listTasksCapability, cancelTaskCapability, presentTa
 export { AGREEMENT_PROPOSE_PROVIDER_ID_DESCRIPTION } from './proposeProviderId.js';
 export { MARKETPLACE_CAPABILITIES, marketplaceViewCapability } from './marketplace.js';
 export { GRANTS_CAPABILITIES, listGrantsCapability } from './grants.js';
-export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, contextRequestCapability, accessRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, RESOURCE_UNREADABLE_MESSAGE, type RefusedRead, } from './context.js';
+export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, accessRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, RESOURCE_UNREADABLE_MESSAGE, type RefusedRead, } from './context.js';
 export { CONNECTION_CAPABILITIES, connectionProxyCapability, requestConnectionCapability, } from './connections.js';
 export { DISCOVERY_CAPABILITIES, agentSearchCapability, agentGetCapability, } from './discovery.js';
 export { ARTIFACT_CAPABILITIES, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, type UnsearchedContext, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, reextractArtifactCapability, } from './artifacts.js';

package/dist/capabilities/index.js

@@ -1,4 +1,5 @@
 export { fullCreds, rethrowWithContext, } from './types.js';
+export { WRITE_SOURCE_KINDS, SOURCES_DESCRIPTION, SOURCES_PARAM, sourcesArg, } from './sources.js';
 export { hasMcpBrief, mcpBriefNames, mcpDescription, } from './mcpBriefs.js';
 export { nextCall, nextCallsFromUntrustedContent, isStaleAdvertisedAction, peerPrincipalId, isPersonaFace, workContextFromEnv, } from './nextCall.js';
 export { AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, agreementBuyCapability, agreementBidCapability, agreementBrokerCapability, agreementRequestCapability, agreementHandoffCapability, agreementSubcontractCapability, } from './agreementVerbs.js';
@@ -12,7 +13,7 @@ export { TASK_CAPABILITIES, listTasksCapability, cancelTaskCapability, presentTa
 export { AGREEMENT_PROPOSE_PROVIDER_ID_DESCRIPTION } from './proposeProviderId.js';
 export { MARKETPLACE_CAPABILITIES, marketplaceViewCapability } from './marketplace.js';
 export { GRANTS_CAPABILITIES, listGrantsCapability } from './grants.js';
-export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, contextRequestCapability, accessRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, RESOURCE_UNREADABLE_MESSAGE, } from './context.js';
+export { CONTEXT_CAPABILITIES, contextReadCapability, openCapability, accessExplainCapability, contextDelegateCapability, accessRequestCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, contextBounds, resolveOrgScopeId, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, RESOURCE_UNREADABLE_MESSAGE, } from './context.js';
 export { CONNECTION_CAPABILITIES, connectionProxyCapability, requestConnectionCapability, } from './connections.js';
 export { DISCOVERY_CAPABILITIES, agentSearchCapability, agentGetCapability, } from './discovery.js';
 export { ARTIFACT_CAPABILITIES, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, reextractArtifactCapability, } from './artifacts.js';

package/dist/capabilities/introductions.js

@@ -1,3 +1,4 @@
+import { SOURCES_PARAM, sourcesArg } from './sources.js';
 import { IntroductionsClient } from '../http/IntroductionsClient.js';
 import { nextCall } from './nextCall.js';
 import { fullCreds } from './types.js';
@@ -34,6 +35,7 @@ export const mintIntroductionCapability = {
             type: 'string',
             description: 'One line for the other side to read when they open it — why you want to connect.',
         },
+        sources: SOURCES_PARAM,
     },
     needsAgentId: true,
     handler: async (args, env) => {
@@ -43,6 +45,7 @@ export const mintIntroductionCapability = {
             ...(args['venue'] ? { venue: args['venue'] } : {}),
             ...(args['venueRef'] ? { venueRef: args['venueRef'] } : {}),
             ...(args['note'] ? { note: args['note'] } : {}),
+            ...sourcesArg(args),
         });
         return {
             introduction: intro,

package/dist/capabilities/links.d.ts

@@ -5,10 +5,9 @@ export declare function webAppOrigin(env: CapabilityEnv): string;
  *
  * Opening a chat is itself the admission: the backend issues a standing from-now
  * write grant to each side as it creates the room, so both delegates can
- * read and post immediately. Do NOT tell agents to follow chat_open with an
- * issue_grant on that same new chat — that only mints a duplicate grant carrying
- * the default 30-day expiry. issue_grant / context_delegate are for scopes that
- * already exist (an older chat, an agreement, an org).
+ * read and post immediately. Sharing what already exists is artifact_share for
+ * one artifact, a chat_open invite for a room, or context_delegate for a slice
+ * of a grant the agent holds.
  */
 export declare function linkIsReachOnly(env: CapabilityEnv): string;
 export declare const listLinksCapability: CapabilityDefinition;

package/dist/capabilities/links.js

@@ -10,14 +10,13 @@ export function webAppOrigin(env) {
  *
  * Opening a chat is itself the admission: the backend issues a standing from-now
  * write grant to each side as it creates the room, so both delegates can
- * read and post immediately. Do NOT tell agents to follow chat_open with an
- * issue_grant on that same new chat — that only mints a duplicate grant carrying
- * the default 30-day expiry. issue_grant / context_delegate are for scopes that
- * already exist (an older chat, an agreement, an org).
+ * read and post immediately. Sharing what already exists is artifact_share for
+ * one artifact, a chat_open invite for a room, or context_delegate for a slice
+ * of a grant the agent holds.
  */
 export function linkIsReachOnly(env) {
     return env.surface === 'mcp'
-        ? 'A link is reach-only — it shares no context on its own. Open a chat with the PERSON on the other side (ziggs_chat_open, participantId = that link\'s `peer.id`): delivery lands in their mailbox and whoever runs that side picks it up, which is not yours to choose. Use `peer.id`, never a principal out of `parties` — those are display faces, and chat_open refuses a face because it names no single party. Opening the room admits both sides to read and post from then on. To share context that already exists, issue a grant on it with ziggs_context_issue_grant or share a slice of one you hold with ziggs_context_delegate.'
+        ? 'A link is reach-only — it shares no context on its own. Open a chat with the PERSON on the other side (ziggs_chat_open, participantId = that link\'s `peer.id`): delivery lands in their mailbox and whoever runs that side picks it up, which is not yours to choose. Use `peer.id`, never a principal out of `parties` — those are display faces, and chat_open refuses a face because it names no single party. Opening the room admits both sides to read and post from then on. To share context that already exists, share one artifact with ziggs_artifact_share, invite them into a room you hold with ziggs_chat_open (chatId plus participantIds), or share a slice of a grant you hold with ziggs_context_delegate.'
         : 'A link is reach-only — it shares no context on its own. Open a chat with the PERSON on the other side; delivery lands in their mailbox and whoever runs that side picks it up, which is not yours to choose. Opening the room admits both sides to it from then on. To share context that already exists, share a slice of a grant you hold with context_delegate, or ask the peer owner to issue one.';
 }
 const LINK_STATUSES = ['active', 'open', 'cancelled', 'all'];
@@ -84,7 +83,7 @@ export const listLinksCapability = {
             readPlan.push(nextCall(env, 'chat_open', undefined, 'open a room with a linked peer: participantId is that link\'s `peer.id`. Do NOT pass a principal out of `parties` — those are display faces and chat_open refuses them'));
         }
         if (active.length) {
-            readPlan.push(nextCall(env, 'context_issue_grant', undefined, 'share context that already exists: a link does not share any on its own'));
+            readPlan.push(nextCall(env, 'artifact_share', undefined, 'share context that already exists: a link does not share any on its own. One artifact with artifact_share; a room you hold by inviting them with chat_open (chatId plus participantIds)'));
         }
         return {
             count: links.length,

package/dist/capabilities/mcpBriefs.js

@@ -137,14 +137,6 @@ const BRIEFS = {
         does: 'Asks for access to an artifact, chat, agreement or task for this agent. recipientId names who decides (a refusal lists who you can ask); an artifact needs chatId.',
         changes: 'creates a pending approval; grants nothing until approved',
     },
-    ziggs_context_request: {
-        does: 'Asks an artifact’s owner for read access to it, for 1 to 168 hours.',
-        changes: 'creates a pending approval; grants nothing until approved',
-    },
-    ziggs_context_issue_grant: {
-        does: 'Admits another agent to a room. Agreement, org, artifact and task grants need your person’s authority.',
-        changes: 'admits it, pending until the people there consent',
-    },
     ziggs_context_delegate: {
         does: 'Gives another agent a narrower slice of a grant you hold.',
         changes: 'grants it, or opens a request its owner approves (pending_approval)',
@@ -204,7 +196,7 @@ const BRIEFS = {
         changes: 'the old steps are replaced',
     },
     ziggs_task_set_result: {
-        does: 'Closes a task as completed, failed or cancelled; the result is for the next agent, a person reads it in your conversation. The agreement stays active.',
+        does: 'Closes a task as completed or failed; the result is for the next agent, a person reads it in your conversation. The agreement stays active.',
         changes: 'closes the task, proving nobody read or paid; the same idempotencyKey is a no-op',
     },
     ziggs_task_cancel: {

package/dist/capabilities/nextCall.js

@@ -28,7 +28,6 @@ const REQUIRED_ARGS = {
     agreement_subcontract: ['parentAgreementId', 'executorId', 'description'],
     agreement_respond: ['agreementId'],
     introduction_redeem: ['token'],
-    context_issue_grant: ['holderId', 'scopeKind', 'scopeId'],
     artifact_share: ['artifactId', 'holderId'],
     context_delegate: ['parentGrantId', 'holderId', 'scopeKind', 'scopeId', 'temporal'],
     task_create: ['agreementId', 'description'],
@@ -59,7 +58,6 @@ const HTTP_BINDINGS = {
         path: '/agreements/:agreementId/approvals/:partyId',
     },
     marketplace_view: { method: 'GET', path: '/marketplace/offers' },
-    context_issue_grant: { method: 'POST', path: '/context/grants' },
     artifact_share: { method: 'POST', path: '/context/artifacts/:artifactId/share' },
     context_delegate: { method: 'POST', path: '/context/grants/:parentGrantId/delegate' },
     open: { method: 'POST', path: '/context/open' },
@@ -74,11 +72,9 @@ const HTTP_BINDINGS = {
 };
 /**
  * Intentional surface exclusions. A ready next call has to exist as a tool
- * on the calling surface — SDK context exposes delegate, not a top-level
- * issue grant (tool-surface-parity).
+ * on the calling surface (tool-surface-parity).
  */
 const SURFACE_EXPOSURE = {
-    context_issue_grant: ['mcp'],
     // The hosted SDK surface enumerates its own work with task_list and reads a
     // task from the wake it arrived on; ziggs_task_get is the MCP delegate's
     // one-task read. Naming it to an SDK agent would offer a tool it cannot call.
@@ -98,9 +94,6 @@ const MATERIAL_EFFECTS = {
     introduction_redeem: {
         relationship: 'a stranger redeem stages a link both humans must approve — it is not a live connection yet',
     },
-    context_issue_grant: {
-        disclosure: 'issues a grant that widens who can read that scope',
-    },
     link_propose: {
         relationship: 'proposes a reach-only link; nothing is shared until they accept',
     },

package/dist/capabilities/sources.d.ts

@@ -0,0 +1,29 @@
+import type { CapabilityParam } from './types.js';
+/**
+ * What a write drew on. Every write that carries text the agent composed
+ * can say it: things in Ziggs by kind and id, or outside things as a url.
+ * Never shown to anyone; the writer's company admin reads it back by query.
+ */
+export declare const WRITE_SOURCE_KINDS: readonly ["message", "artifact", "task_result", "task_plan_step", "url"];
+export type WriteSourceKind = (typeof WRITE_SOURCE_KINDS)[number];
+/**
+ * - `message`: `id` is the messageId, `chatId` its room.
+ * - `artifact`: `id` is the artifactId.
+ * - `task_result`: `id` is the taskId.
+ * - `task_plan_step`: `id` is the stepId, `taskId` its task.
+ * - `url`: `value` is the outside source.
+ */
+export interface WriteSource {
+    kind: WriteSourceKind;
+    id?: string;
+    chatId?: string;
+    taskId?: string;
+    value?: string;
+}
+/** One line, shared by every tool that takes `sources`: it is repeated per tool. */
+export declare const SOURCES_DESCRIPTION = "What this text drew on: {kind,id} for a message (+chatId), artifact, task_result or task_plan_step (+taskId); {kind:\"url\",value} outside. [] = nothing more.";
+export declare const SOURCES_PARAM: CapabilityParam;
+/** The `sources` a tool call carried, ready for the request body. */
+export declare function sourcesArg(args: Record<string, unknown>): {
+    sources: WriteSource[];
+} | Record<string, never>;

package/dist/capabilities/sources.js

@@ -0,0 +1,34 @@
+/**
+ * What a write drew on. Every write that carries text the agent composed
+ * can say it: things in Ziggs by kind and id, or outside things as a url.
+ * Never shown to anyone; the writer's company admin reads it back by query.
+ */
+export const WRITE_SOURCE_KINDS = [
+    'message',
+    'artifact',
+    'task_result',
+    'task_plan_step',
+    'url',
+];
+/** One line, shared by every tool that takes `sources`: it is repeated per tool. */
+export const SOURCES_DESCRIPTION = 'What this text drew on: {kind,id} for a message (+chatId), artifact, task_result or task_plan_step (+taskId); {kind:"url",value} outside. [] = nothing more.';
+export const SOURCES_PARAM = {
+    type: 'array',
+    description: SOURCES_DESCRIPTION,
+    items: {
+        type: 'object',
+        properties: {
+            kind: { type: 'string', enum: WRITE_SOURCE_KINDS },
+            id: { type: 'string' },
+            chatId: { type: 'string' },
+            taskId: { type: 'string' },
+            value: { type: 'string' },
+        },
+        required: ['kind'],
+    },
+};
+/** The `sources` a tool call carried, ready for the request body. */
+export function sourcesArg(args) {
+    const raw = args['sources'];
+    return Array.isArray(raw) ? { sources: raw } : {};
+}

package/dist/http/AgreementClient.d.ts

@@ -1,3 +1,4 @@
+import type { WriteSource } from '../capabilities/sources.js';
 import { type Creds, type Agreement, type EngagementKind, type BroadcastAudience } from '../types.js';
 /**
  * Shared proposal terms. When `engagementKind` is omitted the server defaults to `service`.
@@ -8,6 +9,8 @@ import { type Creds, type Agreement, type EngagementKind, type BroadcastAudience
  */
 export interface ProposeTerms {
     description: string;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
     price?: number;
     lifecycle?: string;
     expiresAt?: string;
@@ -125,6 +128,8 @@ export declare function proposeDirectTo(input: ProposeDirectInput, creds: Creds)
 export declare function proposeBroadcast(input: ProposeBroadcastInput, creds: Creds): Promise<Agreement>;
 export interface DelegateAgreementData {
     description: string;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
     executorId: string;
     /** Omit it and the server uses the parent agreement's own chat. */
     chatId?: string;
@@ -208,6 +213,8 @@ export interface CounterAgreementData {
     conversationAllowanceScope?: 'direct' | 'subtree';
     interactionMode?: 'messages' | 'tasks' | 'both';
     description?: string;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 }
 export declare function counterAgreement(agreementId: string, counter: CounterAgreementData, creds: Creds): Promise<Agreement>;
 export declare function getAgreementStatus(agreementId: string, creds: Creds): Promise<unknown | null>;

package/dist/http/ArtifactsClient.d.ts

@@ -1,3 +1,4 @@
+import type { WriteSource } from '../capabilities/sources.js';
 import type { ListReachableArtifactsResult } from '@ziggs-ai/contracts';
 /**
  * Inline `POST /artifacts` body cap (matches backend
@@ -91,6 +92,8 @@ export interface WriteArtifactInput {
      * The `text` is the in-Ziggs summary. Ziggs does not fetch the URL.
      */
     externalRef?: ArtifactExternalRef;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 }
 /** Every file format the server stores — the contracts list, re-exported under the names callers already use. */
 export { ARTIFACT_FILE_FORMATS, type ArtifactExternalRef, type ArtifactFileFormat } from '@ziggs-ai/contracts';

package/dist/http/ArtifactsClient.js

@@ -194,6 +194,7 @@ export class ArtifactsClient {
                 ...(input.externalRef
                     ? { externalRef: input.externalRef }
                     : {}),
+                ...(input.sources ? { sources: input.sources } : {}),
             }),
         });
         const body = await res.text().catch(() => '');

package/dist/http/ChatClient.d.ts

@@ -1,3 +1,4 @@
+import type { WriteSource } from '../capabilities/sources.js';
 import type { ChatReadDto } from '@ziggs-ai/contracts';
 import type { MessageDelivery as WireMessageDelivery, SendChatMessageResult as WireSendChatMessageResult } from '@ziggs-ai/contracts';
 import { type Creds } from '../types.js';
@@ -69,6 +70,8 @@ export interface SendChatMessageInput {
     /** Governing service agreement; independent of representation. */
     conversationAgreementId?: string;
     taskId?: string;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 }
 /**
  * Where the server says a send landed.

package/dist/http/ChatClient.js

@@ -130,6 +130,7 @@ export async function sendChatMessage(input, creds) {
             underAgreementId: input.underAgreementId,
             conversationAgreementId: input.conversationAgreementId,
             taskId: input.taskId,
+            ...(input.sources ? { sources: input.sources } : {}),
         }),
     });
     if (!res.ok) {

package/dist/http/ContextGrantsClient.d.ts

@@ -115,18 +115,6 @@ export declare class ContextGrantsClient {
         idempotencyKey?: string;
         laneId?: string;
     }): Promise<AccessRequestResult>;
-    requestArtifactAccess(artifactId: string, input: {
-        chatId: string;
-        ownerId: string;
-        reason: string;
-        durationHours?: number;
-    }, opts?: {
-        idempotencyKey?: string;
-        laneId?: string;
-    }): Promise<{
-        status: 'pending_approval';
-        agreementId: string;
-    } & RequestSentTo>;
     delegateGrant(parentGrantId: string, input: DelegateContextGrantInput, opts?: {
         idempotencyKey?: string;
     }): Promise<DelegateContextGrantResult>;

package/dist/http/ContextGrantsClient.js

@@ -94,24 +94,6 @@ export class ContextGrantsClient {
         }
         return { status: 'pending_approval', agreementId: result.agreementId, ...common };
     }
-    async requestArtifactAccess(artifactId, input, opts) {
-        const res = await fetch(`${this.baseUrl}/context/artifacts/${encodeURIComponent(artifactId)}/access-requests`, {
-            method: 'POST',
-            headers: buildOperatorHeaders(this.operatorKey, this.agentId, {
-                'content-type': 'application/json',
-                ...(opts?.idempotencyKey ? { 'Idempotency-Key': opts.idempotencyKey } : {}),
-                ...(opts?.laneId ? { 'x-ziggs-lane': opts.laneId } : {}),
-            }),
-            body: JSON.stringify(input),
-        });
-        const body = await res.text().catch(() => '');
-        if (!res.ok)
-            throwApiError(res, body, `requestArtifactAccess failed: ${res.status}`);
-        const result = JSON.parse(body);
-        if (result.status !== 'pending_approval' || !result.agreementId)
-            throw new Error('Expected a pending artifact access request');
-        return { status: 'pending_approval', agreementId: result.agreementId, ...sentToOf(result) };
-    }
     async delegateGrant(parentGrantId, input, opts) {
         const res = await fetch(`${this.baseUrl}/context/grants/${encodeURIComponent(parentGrantId)}/delegate`, {
             method: 'POST',

package/dist/http/IntroductionsClient.d.ts

@@ -1,3 +1,4 @@
+import type { WriteSource } from '../capabilities/sources.js';
 /** What became of one hello. `expired` is derived by the server, not stored. */
 export type IntroductionStatus = 'open' | 'redeemed' | 'declined' | 'revoked' | 'expired';
 export type IntroductionOutcome = 'link_pending' | 'already_teammates' | 'already_linked';
@@ -56,6 +57,8 @@ export interface MintIntroductionInput {
     venue?: string;
     venueRef?: string;
     note?: string;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 }
 /**
  * Introduction tokens — the one object to exchange when you meet an

package/dist/http/MarketplaceClient.d.ts

@@ -1,6 +1,9 @@
+import type { WriteSource } from '../capabilities/sources.js';
 import { type Creds, type Agreement, type BroadcastAudience } from '../types.js';
 export interface PublishOfferPayload {
     description: string;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
     price?: number;
     lifecycle?: string;
     expiresAt?: string;

package/dist/http/TaskClient.d.ts

@@ -1,3 +1,4 @@
+import type { WriteSource } from '../capabilities/sources.js';
 import { type Creds, type Task, type TaskState } from '../types.js';
 /**
  * Thin confirmation from task write verbs. Full object stays on
@@ -48,6 +49,8 @@ export interface CreateTaskGraphNodeData {
     assigneeId?: string;
     waitsOn?: string[];
     joinKind?: 'all' | 'any';
+    /** A yes/no question over the steps this one waits on; it runs only on yes. */
+    runIf?: string;
 }
 export interface CreateTaskGraphData {
     nodes: CreateTaskGraphNodeData[];
@@ -102,6 +105,8 @@ export interface CreateTaskData {
      * the whole object for a task nobody needs reminding about.
      */
     checkBack?: CreateTaskCheckBackData;
+    /** What the title and description drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 }
 /** See {@link CreateTaskData.checkBack}. */
 export interface CreateTaskCheckBackData {
@@ -123,6 +128,8 @@ export interface UpdateTaskStateData {
      * stateless crash-replay reproduces it.
      */
     idempotencyKey?: string;
+    /** What the result drew on. Recorded only when a result is written. */
+    sources?: WriteSource[];
 }
 export declare function updateTaskState(taskId: string, state: TaskState, data: UpdateTaskStateData | undefined, creds: Creds): Promise<TaskWriteConfirm>;
 export declare function getActiveTasksForAgent(agentId: string, creds: Creds): Promise<Task[]>;
@@ -143,6 +150,8 @@ export interface PlanReplaceStep {
     status?: 'pending' | 'in_progress' | 'completed' | 'skipped';
     /** Optional step output stored with this replace. */
     result?: unknown;
+    /** What this text drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 }
 export declare function replaceTaskPlan(taskId: string, steps: PlanReplaceStep[], creds: Creds): Promise<TaskWriteConfirm>;
 /** Named-step progress — only the listed steps change. */
@@ -150,6 +159,8 @@ export type PlanStepPatch = {
     stepId: string;
     status: 'pending' | 'in_progress' | 'completed' | 'skipped';
     result?: unknown;
+    /** What this step drew on. See {@link WriteSource}. */
+    sources?: WriteSource[];
 };
 /**
  * Who the holder is waiting on, because its last act was asking them.
@@ -164,7 +175,7 @@ export type TaskWaitingOn = {
     id: string;
 };
 export declare function updateTaskPlanSteps(taskId: string, patches: PlanStepPatch[], creds: Creds, waitingOn?: TaskWaitingOn | null): Promise<TaskWriteConfirm>;
-export declare function updateTaskPlanStep(taskId: string, stepId: string, status: string, result: unknown, creds: Creds, waitingOn?: TaskWaitingOn | null): Promise<TaskWriteConfirm>;
+export declare function updateTaskPlanStep(taskId: string, stepId: string, status: string, result: unknown, creds: Creds, waitingOn?: TaskWaitingOn | null, sources?: WriteSource[]): Promise<TaskWriteConfirm>;
 export declare function reportTask(taskId: string, message: string | undefined, creds: Creds): Promise<TaskWriteConfirm>;
 export declare function setTaskSatisfaction(taskId: string, satisfaction: 'positive' | 'negative', creds: Creds): Promise<TaskWriteConfirm>;
 export interface ListTasksOptions {

package/dist/http/TaskClient.js

@@ -335,7 +335,7 @@ export async function updateTaskPlanSteps(taskId, patches, creds, waitingOn) {
         throw new Error('Invalid response: task write confirm not found');
     return confirm;
 }
-export async function updateTaskPlanStep(taskId, stepId, status, result, creds, waitingOn) {
+export async function updateTaskPlanStep(taskId, stepId, status, result, creds, waitingOn, sources) {
     if (!taskId)
         throw new Error('updateTaskPlanStep: taskId is required');
     if (!stepId)
@@ -354,6 +354,7 @@ export async function updateTaskPlanStep(taskId, stepId, status, result, creds,
             status,
             ...(result !== undefined && { result }),
             ...(waitingOn !== undefined ? { waitingOn } : {}),
+            ...(sources ? { sources } : {}),
         }),
     });
     if (!res.ok) {

package/dist/types.d.ts

@@ -112,6 +112,20 @@ export interface Task {
     } | null;
     graphNodeId?: string | null;
     heldByGraphReview?: boolean;
+    /**
+     * A graph step that runs only if a yes/no question holds over the steps it
+     * waits on. Once asked: `run`, `skipped` (closed cancelled without running),
+     * `held` (waiting for the buyer to acknowledge its plan) or `buyer_run`.
+     */
+    runIf?: {
+        question: string;
+        outcome?: 'run' | 'skipped' | 'held' | 'buyer_run';
+        answer?: 'yes' | 'no' | null;
+        confidence?: number | null;
+        reason?: string;
+        decidedAt?: string;
+        decidedBy?: string | null;
+    } | null;
     plan?: {
         steps?: PlanStep[];
     };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/api-client",
-  "version": "0.37.4",
+  "version": "0.37.6",
   "description": "HTTP and WebSocket client for the Ziggs backend API",
   "type": "module",
   "main": "dist/index.js",