@ziggs-ai/api-client 0.37.7 → 0.37.8

package/dist/capabilities/chatListFields.d.ts

@@ -6,7 +6,7 @@
  * keeps the people who actually receive (`participantSummary`) and drops the
  * other two unless `fields` asks for them.
  */
-export declare const CHAT_LIST_DEFAULT_FIELDS: readonly ["chatId", "name", "updatedAt", "lastMessage", "unreadCount", "participantSummary"];
+export declare const CHAT_LIST_DEFAULT_FIELDS: readonly ["chatId", "name", "updatedAt", "lastMessage", "unreadCount", "participantSummary", "readable", "requestAccess"];
 /** Apply `fields`, or the MCP default when the caller omitted it. */
 export declare function projectChatListRows(chats: unknown[], fieldsRaw?: unknown): unknown[];
 export declare function utf8Bytes(value: unknown): number;

package/dist/capabilities/chatListFields.js

@@ -14,6 +14,9 @@ export const CHAT_LIST_DEFAULT_FIELDS = [
     'lastMessage',
     'unreadCount',
     'participantSummary',
+    // A room you may only list says so, with the read request ready to file.
+    'readable',
+    'requestAccess',
 ];
 function slimParticipant(row) {
     if (!row || typeof row !== 'object' || Array.isArray(row))

package/dist/capabilities/context.js

@@ -425,14 +425,14 @@ export const accessRequestCapability = {
     title: 'Request access for yourself or named readers',
     annotation: 'destructive', needsAgentId: true,
     descriptions: {
-        sdk: 'Request optional bounded access to one artifact, chat, agreement context or task. Creates only a pending approval; never grants access or approves. Name who to ask in recipientId: your work brief offers them for this wake — workBrief.actingFor.customer.id (the customer of the hire you are working in, for their own accounts and resources) or workBrief.actingFor.operator.id (your operator, for tools you bring). Anyone else is refused, and the refusal lists who you can ask. Artifact requests also need chatId, the conversation they approve in. To create work under an agreement you can read but not work on (a task create refused with WORK_ACCESS_REQUIRED), request permission=work on it; only someone who can work on it may approve, and it lasts until the agreement ends. Use scopeId for a known artifact; or scopeKind=artifact with agreementId of your active hire to request its system-maintained workspace summary (workspace name/type and agents, including future updates, not private conversations or document bodies). Send the returned appUrl, wait for human approval, then open the returned scope. To arrange reading of one artifact for others, name them in holders (agents by id, people or workspaces by id or the participant reference this room shows you); include yourself only if you need to read it too. The owner approves that exact list once and each reader gets its own grant; readers who can already read it come back as already_readable. Hiring alone grants no source access. Revocation and expiry are checked by the system.',
+        sdk: 'Request optional bounded access to one artifact, chat, agreement context or task. Creates only a pending approval; never grants access or approves. Name who to ask in recipientId: your work brief offers them for this wake — workBrief.actingFor.customer.id (the customer of the hire you are working in, for their own accounts and resources) or workBrief.actingFor.operator.id (your operator, for tools you bring). Anyone else is refused, and the refusal lists who you can ask. Artifact requests also need chatId, the conversation they approve in. To create work under an agreement you can read but not work on (a task create refused with WORK_ACCESS_REQUIRED), request permission=work on it; only someone who can work on it may approve, and it lasts until the agreement ends. Use scopeId for a known artifact; or scopeKind=artifact with agreementId of your active hire to request its system-maintained workspace summary (workspace name/type and agents, including future updates, not private conversations or document bodies). Send the returned appUrl, wait for human approval, then open the returned scope. To arrange reading of one artifact for others, name them in holders (agents by id, people or workspaces by id or the participant reference this room shows you); include yourself only if you need to read it too. The owner approves that exact list once and each reader gets its own grant; readers who can already read it come back as already_readable. To see which rooms a person is in (to find the room they mean), request scopeKind=person, scopeId=their person id, permission=list, from that person; once they approve, your chat list shows their rooms, each marked readable or not, and reading one still needs its own request. Hiring alone grants no source access. Revocation and expiry are checked by the system.',
     },
     params: {
-        scopeKind: { type: 'string', required: true, enum: ['artifact', 'chat', 'agreement', 'task'] },
+        scopeKind: { type: 'string', required: true, enum: ['artifact', 'chat', 'agreement', 'task', 'person'] },
         scopeId: { type: 'string', description: 'Original resource id. Omit when using a hire agreementId to request its workspace summary.' },
         agreementId: { type: 'string', description: 'Artifact scope only: current hire id, used instead of scopeId to request the system-maintained workspace summary.' },
         reason: { type: 'string', required: true, description: 'Why access is needed and who will receive the reply or summary' },
-        permission: { type: 'string', enum: ['read', 'reply', 'work'], description: 'read by default; reply is read and reply and is only valid for a chat; work lets you create work under an agreement you can read but not work on, and lasts until it ends' },
+        permission: { type: 'string', enum: ['read', 'reply', 'work', 'list'], description: 'read by default; reply is read and reply and is only valid for a chat; work lets you create work under an agreement you can read but not work on, and lasts until it ends; list is required for a person scope and shows which rooms they are in, never their messages' },
         temporal: { type: 'string', enum: ['from-now', 'from-start'], description: 'Chat history requested; default from-now. Earlier messages need from-start. Other resources use from-start.' },
         durationHours: { type: 'number', description: 'Integer 1–168 hours after approval; default 24' },
         chatId: { type: 'string', description: 'Artifact or workspace requests only: existing conversation with the owner' },
@@ -462,14 +462,16 @@ export const accessRequestCapability = {
                 throw new Error(`${key} is required`);
         }
         const scopeKind = args.scopeKind;
-        if (!['artifact', 'chat', 'agreement', 'task'].includes(scopeKind))
+        if (!['artifact', 'chat', 'agreement', 'task', 'person'].includes(scopeKind))
             throw new Error('Unsupported scopeKind');
         const agreementId = typeof args.agreementId === 'string' ? args.agreementId.trim() : undefined;
         const scopeId = typeof args.scopeId === 'string' ? args.scopeId.trim() : undefined;
         if (Boolean(agreementId) === Boolean(scopeId) || (agreementId && scopeKind !== 'artifact'))
             throw new Error('Provide scopeId, or agreementId for its workspace summary artifact');
-        const permission = args.permission ?? 'read';
-        if (!['read', 'reply', 'work'].includes(String(permission)) || (permission === 'reply' && scopeKind !== 'chat'))
+        const permission = args.permission ?? (scopeKind === 'person' ? 'list' : 'read');
+        if ((permission === 'list') !== (scopeKind === 'person'))
+            throw new Error('A person scope is requested with permission=list, and list only for a person');
+        if (!['read', 'reply', 'work', 'list'].includes(String(permission)) || (permission === 'reply' && scopeKind !== 'chat'))
             throw new Error('Only chat access may request reply permission');
         if (permission === 'work' && scopeKind !== 'agreement')
             throw new Error('Only agreement access may request work permission');
@@ -503,7 +505,10 @@ export const accessRequestCapability = {
             ...(actingAgentId ? { actingAgentId } : {}),
             scope: result.scope ?? { kind: scopeKind, id: scopeId },
             appUrl: `${(env.webUrl ?? 'https://ziggsai.com').replace(/\/$/, '')}/app/agreements/${encodeURIComponent(result.agreementId)}`,
-            resumeAfterApproval: { tool: env.surface === 'mcp' ? 'ziggs_open' : 'open', args: result.scope ? { [`${result.scope.kind}Id`]: result.scope.id } : { [`${scopeKind}Id`]: scopeId } },
+            // A person scope opens nothing: the yes shows up in the chat list.
+            ...(scopeKind === 'person'
+                ? env.surface === 'mcp' ? { resumeAfterApproval: { tool: 'ziggs_chat_list', args: {} } } : {}
+                : { resumeAfterApproval: { tool: env.surface === 'mcp' ? 'ziggs_open' : 'open', args: result.scope ? { [`${result.scope.kind}Id`]: result.scope.id } : { [`${scopeKind}Id`]: scopeId } } }),
             note: `${result.message ?? 'A request card is open.'} No access granted until they approve; then open the original resource using the same agent identity.`,
         };
     },

package/dist/capabilities/mcpBriefs.js

@@ -100,7 +100,7 @@ const BRIEFS = {
     },
     // Rooms
     ziggs_chat_list: {
-        does: 'Lists rooms you hold a grant on, with last message and unread count. fields adds members or rosterSummary.',
+        does: 'Lists rooms you hold a grant on, with last message and unread count, plus the rooms a person let you list, marked readable: false with no message and the read request to file. fields adds members or rosterSummary.',
     },
     ziggs_chat_open: {
         does: 'Opens or reuses a conversation with a person or agent (participantId), starts a group (participantIds), or invites people into a room (chatId).',

package/dist/http/ChatClient.d.ts

@@ -153,7 +153,10 @@ export declare function addChatMember(input: AddChatMemberInput, creds: Creds):
  * an existing participant and `chatId` is omitted.
  */
 export declare function sendChatMessage(input: SendChatMessageInput, creds: Creds): Promise<SendChatMessageResult>;
-export declare function listMyChats(creds: Creds): Promise<ChatSummary[]>;
+export declare function listMyChats(creds: Creds, filters?: {
+    participantId?: string;
+    readable?: boolean;
+}): Promise<ChatSummary[]>;
 export declare class ChatClient {
     private creds;
     /**

package/dist/http/ChatClient.js

@@ -154,14 +154,20 @@ export async function sendChatMessage(input, creds) {
         ...(coverage ? { coverage } : {}),
     };
 }
-export async function listMyChats(creds) {
+export async function listMyChats(creds, filters = {}) {
     assertCreds(creds, 'list my chats');
+    const query = new URLSearchParams();
+    if (filters.participantId)
+        query.set('participantId', filters.participantId);
+    if (filters.readable !== undefined)
+        query.set('readable', String(filters.readable));
+    const qs = query.toString();
     // empty array only for a genuine empty 200; any failure (non-2xx /
     // network) throws so ziggs_chat_list reports a real error instead of "you
     // have no chats". HTTP failures are ApiError (status/body/code).
     let res;
     try {
-        res = await fetch(`${getBackendUrl()}/chats/mine`, {
+        res = await fetch(`${getBackendUrl()}/chats/mine${qs ? `?${qs}` : ''}`, {
             method: 'GET',
             headers: buildHeaders(creds),
         });

package/dist/http/ContextGrantsClient.d.ts

@@ -98,11 +98,11 @@ export declare class ContextGrantsClient {
     issueGrant(input: IssueContextGrantInput): Promise<GrantView>;
     /** Request-only endpoint: a successful call must still have granted no access. */
     requestAccess(input: {
-        scopeKind: 'artifact' | 'chat' | 'agreement' | 'task';
+        scopeKind: 'artifact' | 'chat' | 'agreement' | 'task' | 'person';
         scopeId?: string;
         agreementId?: string;
         reason: string;
-        permission?: 'read' | 'reply' | 'work';
+        permission?: 'read' | 'reply' | 'work' | 'list';
         temporal?: 'from-now' | 'from-start';
         durationHours?: number;
         chatId?: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/api-client",
-  "version": "0.37.7",
+  "version": "0.37.8",
   "description": "HTTP and WebSocket client for the Ziggs backend API",
   "type": "module",
   "main": "dist/index.js",