@ziggs-ai/api-client 0.9.9 → 0.9.11

package/dist/http/ContextGrantsClient.d.ts

@@ -1,6 +1,6 @@
 import type { GrantView } from './grants.js';
 /**
- * ZIG-1037 added `artifact` — the narrowest context scope: one specific artifact,
+ * added `artifact` — the narrowest context scope: one specific artifact,
  * shared without sharing any chat or agreement it sits in. Still the context
  * rail, not a new grant primitive.
  */
@@ -11,7 +11,7 @@ export interface ContextGrantScope {
     id: string;
 }
 /**
- * @deprecated ZIG-646 — context grants now serialise to the canonical
+ * @deprecated context grants now serialise to the canonical
  * {@link GrantView} like every other rail. This alias previously declared a
  * flat `scopeKind`/`scopeId` + `revoked` shape that the backend never actually
  * emitted (it sends nested `scope: { kind, id }` and folds temporal/watermark
@@ -43,13 +43,13 @@ export type DelegateContextGrantResult = {
     agreementId: string;
     ownerId?: string;
 };
-/** A single readable entry inside a grant's scope — id + label only (ZIG-870). */
+/** A single readable entry inside a grant's scope — id + label only. */
 export interface ReachEntry {
     id: string;
     label: string;
 }
 /**
- * ZIG-870 reach expansion — the chat/agreement ids a grant you hold actually
+ * reach expansion — the chat/agreement ids a grant you hold actually
  * covers, so an org/agreement-scoped grant becomes a concrete list you can
  * `context_read` through (via=chat:<id> / agreement:<id>). Ids + labels only,
  * never content. Org scope is capped; `truncatedChats`/`truncatedAgreements`
@@ -64,7 +64,7 @@ export interface GrantReachResult {
     truncatedAgreements: number;
 }
 /**
- * ZIG-411 context grant management — list / issue / delegate / revoke.
+ * context grant management — list / issue / delegate / revoke.
  */
 export declare class ContextGrantsClient {
     private readonly operatorKey;
@@ -78,14 +78,14 @@ export declare class ContextGrantsClient {
     issueGrant(input: IssueContextGrantInput): Promise<GrantView>;
     delegateGrant(parentGrantId: string, input: DelegateContextGrantInput): Promise<DelegateContextGrantResult>;
     /**
-     * ZIG-870 — expand a grant you hold into the chat/agreement ids inside its
+     * expand a grant you hold into the chat/agreement ids inside its
      * scope. A grant is a fence, not a listing: discovery says "you hold
      * org:acme", this says which chats/agreements that covers. Holder-only,
      * labels-only, grant-fenced server-side.
      */
     getReach(grantId: string): Promise<GrantReachResult>;
     /**
-     * ZIG-1037 — share an artifact THIS agent authored with another agent.
+     * share an artifact THIS agent authored with another agent.
      *
      * Not a delegation: an agent holds no grant over its own output, so there is
      * no parent to attenuate. Authorship is the authority, held by the agent's

package/dist/http/ContextGrantsClient.js

@@ -2,7 +2,7 @@ import { getBackendUrl } from '../utils/urlUtils.js';
 import { buildOperatorHeaders } from './operatorHeaders.js';
 import { throwApiError } from '../shared/apiError.js';
 /**
- * ZIG-411 context grant management — list / issue / delegate / revoke.
+ * context grant management — list / issue / delegate / revoke.
  */
 export class ContextGrantsClient {
     operatorKey;
@@ -71,7 +71,7 @@ export class ContextGrantsClient {
         return { status: 'granted', grant: parsed.grant };
     }
     /**
-     * ZIG-870 — expand a grant you hold into the chat/agreement ids inside its
+     * expand a grant you hold into the chat/agreement ids inside its
      * scope. A grant is a fence, not a listing: discovery says "you hold
      * org:acme", this says which chats/agreements that covers. Holder-only,
      * labels-only, grant-fenced server-side.
@@ -96,7 +96,7 @@ export class ContextGrantsClient {
         };
     }
     /**
-     * ZIG-1037 — share an artifact THIS agent authored with another agent.
+     * share an artifact THIS agent authored with another agent.
      *
      * Not a delegation: an agent holds no grant over its own output, so there is
      * no parent to attenuate. Authorship is the authority, held by the agent's

package/dist/http/ContextReadClient.d.ts

@@ -42,7 +42,7 @@ export interface ContextReadEnvelope<T = unknown> {
     nextCursor: string | null;
     latestSequence?: string | null;
 }
-/** Aggregated chat snapshot from `GET /context/snapshot` (ZIG-775 follow-up). */
+/** Aggregated chat snapshot from `GET /context/snapshot` (follow-up). */
 export interface ContextSnapshotResult {
     history: unknown[];
     agreements: unknown[];
@@ -59,7 +59,7 @@ export interface ContextSnapshotResult {
     chatMissing?: boolean;
 }
 /**
- * Protocol-first uniform context reads (ZIG-427).
+ * Protocol-first uniform context reads.
  * Wraps `GET /context/read/:type` — one client, one envelope, four types.
  */
 export declare class ContextReadClient {
@@ -70,7 +70,7 @@ export declare class ContextReadClient {
     /**
      * @param operatorKey Agent-scoped or fleet operator key.
      * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
-     * @param laneId ZIG-1092 — the wake's lane, sent as X-Ziggs-Lane. This is the
+     * @param laneId the wake's lane, sent as X-Ziggs-Lane. This is the
      *   path the dogfood leak ran through: `via=artifact:<other customer's spec>`
      *   was authorised purely because the same agent had authored it.
      */

package/dist/http/ContextReadClient.js

@@ -49,7 +49,7 @@ export function parseVia(via) {
         : null;
 }
 /**
- * Protocol-first uniform context reads (ZIG-427).
+ * Protocol-first uniform context reads.
  * Wraps `GET /context/read/:type` — one client, one envelope, four types.
  */
 export class ContextReadClient {
@@ -60,7 +60,7 @@ export class ContextReadClient {
     /**
      * @param operatorKey Agent-scoped or fleet operator key.
      * @param agentId Required for fleet keys (sent as X-Agent-Id). Omit for agent-scoped keys.
-     * @param laneId ZIG-1092 — the wake's lane, sent as X-Ziggs-Lane. This is the
+     * @param laneId the wake's lane, sent as X-Ziggs-Lane. This is the
      *   path the dogfood leak ran through: `via=artifact:<other customer's spec>`
      *   was authorised purely because the same agent had authored it.
      */
@@ -106,7 +106,7 @@ export class ContextReadClient {
         if (!res.ok) {
             // A 403 here is a legitimate outcome, not a transport failure: addressing
             // and authorisation are separate, so an agent can be told about mail it
-            // is not (or is no longer) allowed to open. ZIG-1124 — one ApiError shape
+            // is not (or is no longer) allowed to open. one ApiError shape
             // (429 → RateLimitedError with Retry-After).
             throw pollSurfaceError(`ContextReadClient.read ${type}`, res, body);
         }
@@ -143,7 +143,7 @@ export class ContextReadClient {
         const res = await fetch(url.toString(), { headers });
         const body = await res.text().catch(() => '');
         if (!res.ok) {
-            // ZIG-1124 — ApiError for every non-OK (429 → RateLimitedError).
+            // ApiError for every non-OK (429 → RateLimitedError).
             throw pollSurfaceError('ContextReadClient.snapshot', res, body);
         }
         return JSON.parse(body);

package/dist/http/GrantsClient.d.ts

@@ -16,7 +16,7 @@ export interface ListGrantsQuery {
     scopeId?: string;
     /**
      * `'holder'` (default) = grants you hold. `'issuer'` = grants you caused
-     * (ZIG-1217 for agents: author-shares + delegate children).
+     * (for agents: author-shares + delegate children).
      */
     role?: 'holder' | 'issuer';
     /** Filter to grants of one health. */
@@ -25,7 +25,7 @@ export interface ListGrantsQuery {
     limit?: number;
 }
 /**
- * ZIG-893 / ZIG-956 — a grant rail the caller's operator key cannot read, named
+ * a grant rail the caller's operator key cannot read, named
  * by the backend on `GET /grants` (it silently drops those rails from `items`,
  * so the unified list tool names what it isn't entitled to instead of
  * presenting a short list as if it were complete). Replaces the client-side
@@ -41,12 +41,12 @@ export interface ListGrantsResult {
     hasMore: boolean;
     /**
      * Rails the caller can't read, per the backend. Absent when the backend
-     * predates ZIG-956 or every requested rail was readable.
+     * predates or every requested rail was readable.
      */
     unreadableRails?: UnreadableRail[];
 }
 /**
- * ZIG-648 — unified grant listing across every rail. `GET /grants` returns the
+ * unified grant listing across every rail. `GET /grants` returns the
  * canonical GrantView for each grant the caller holds (or, admin-gated, a named
  * holder), filterable by scope kind and health, with cursor pagination. Replaces
  * the old per-rail listers (context discovery, connection-grants,

package/dist/http/GrantsClient.js

@@ -2,7 +2,7 @@ import { getBackendUrl } from '../utils/urlUtils.js';
 import { throwApiError } from '../shared/apiError.js';
 import { buildOperatorHeaders } from './operatorHeaders.js';
 /**
- * ZIG-648 — unified grant listing across every rail. `GET /grants` returns the
+ * unified grant listing across every rail. `GET /grants` returns the
  * canonical GrantView for each grant the caller holds (or, admin-gated, a named
  * holder), filterable by scope kind and health, with cursor pagination. Replaces
  * the old per-rail listers (context discovery, connection-grants,

package/dist/http/InboxClient.d.ts

@@ -1,8 +1,8 @@
 import type { InboxAckResult, InboxEnvelope, InboxReadOptions } from '../types.js';
 /**
- * The doorbell, not the door (ZIG-434): references addressed to this agent
+ * The doorbell, not the door: references addressed to this agent
  * since its last ack — never content. Flow: inbox → read → act → ack
- * (ZIG-446). Wraps `GET /inbox` and `POST /inbox/ack`.
+ *. Wraps `GET /inbox` and `POST /inbox/ack`.
  */
 export declare class InboxClient {
     private readonly operatorKey;
@@ -17,9 +17,13 @@ export declare class InboxClient {
     private inboxUrl;
     getInbox(opts?: InboxReadOptions): Promise<InboxEnvelope>;
     /**
-     * Advance this agent's watermark — pass the envelope's `ackTo`. Monotonic
+     * Advance this agent's watermark — pass the envelope's `ackTo` plus every
+     * `resourceId` handled in `(priorAck, upTo]` (ZIG-1305). Monotonic
      * server-side: an older value is a no-op, so a replayed ack can never
-     * redeliver handled work.
+     * redeliver handled work. An ack that would bury unlisted deliveries is
+     * refused.
      */
-    ack(upTo: string): Promise<InboxAckResult>;
+    ack(upTo: string, opts?: {
+        handledResourceIds?: string[];
+    }): Promise<InboxAckResult>;
 }

package/dist/http/InboxClient.js

@@ -1,9 +1,9 @@
 import { getBackendUrl } from '../utils/urlUtils.js';
 import { pollSurfaceError } from '../shared/rateLimit.js';
 /**
- * The doorbell, not the door (ZIG-434): references addressed to this agent
+ * The doorbell, not the door: references addressed to this agent
  * since its last ack — never content. Flow: inbox → read → act → ack
- * (ZIG-446). Wraps `GET /inbox` and `POST /inbox/ack`.
+ *. Wraps `GET /inbox` and `POST /inbox/ack`.
  */
 export class InboxClient {
     operatorKey;
@@ -47,17 +47,24 @@ export class InboxClient {
         return JSON.parse(body);
     }
     /**
-     * Advance this agent's watermark — pass the envelope's `ackTo`. Monotonic
+     * Advance this agent's watermark — pass the envelope's `ackTo` plus every
+     * `resourceId` handled in `(priorAck, upTo]` (ZIG-1305). Monotonic
      * server-side: an older value is a no-op, so a replayed ack can never
-     * redeliver handled work.
+     * redeliver handled work. An ack that would bury unlisted deliveries is
+     * refused.
      */
-    async ack(upTo) {
+    async ack(upTo, opts = {}) {
         if (!upTo)
             throw new Error('InboxClient.ack: upTo is required');
         const res = await fetch(`${this.baseUrl}/inbox/ack`, {
             method: 'POST',
             headers: this.headers(),
-            body: JSON.stringify({ upTo }),
+            body: JSON.stringify({
+                upTo,
+                ...(opts.handledResourceIds
+                    ? { handledResourceIds: opts.handledResourceIds }
+                    : {}),
+            }),
         });
         const body = await res.text().catch(() => '');
         if (!res.ok) {

package/dist/http/MarketplaceClient.js

@@ -1,4 +1,4 @@
-// ZIG-1111: one shaping rule for every agreement this package parses.
+// one shaping rule for every agreement this package parses.
 import { shapeAgreement } from './AgreementClient.js';
 import { getBackendUrl } from '../utils/urlUtils.js';
 import { throwApiError } from '../shared/apiError.js';
@@ -8,7 +8,7 @@ function buildHeaders(creds) {
         'content-type': 'application/json',
         Authorization: `Bearer ${creds.operatorKey}`,
         'X-Agent-Id': creds.agentId,
-        // ZIG-1092 — the wake's lane, so the backend can fence this call to the
+        // the wake's lane, so the backend can fence this call to the
         // engagement it belongs to rather than the agent's whole authority.
         ...(creds.laneId ? { 'X-Ziggs-Lane': creds.laneId } : {}),
     };
@@ -114,7 +114,7 @@ export class MarketplaceClient {
     constructor(operatorKey, agentId) {
         if (!operatorKey)
             throw new Error('MarketplaceClient: operatorKey is required');
-        // agentId may be absent for agent-scoped keys (ZIG-642); the Creds-based
+        // agentId may be absent for agent-scoped keys; the Creds-based
         // standalone functions still assert it per call.
         this.creds = { operatorKey, agentId };
     }

package/dist/http/OrgsClient.d.ts

@@ -6,10 +6,10 @@ export interface MyOrg {
     role?: string;
 }
 /**
- * ZIG-739 / ZIG-956 — the operator's full org membership (not just granted
+ * the operator's full org membership (not just granted
  * scopes, which is all the grant listers see). Lets a delegate resolve an org
- * name to an id and offer a pick-list instead of demanding a pasted org_... id.
- * Moved here from ziggs-mcp so every surface rides the one client (ZIG-894).
+ * name to an id and offer a pick-list instead of demanding a pasted org_.. id.
+ * Moved here from ziggs-mcp so every surface rides the one client.
  */
 export declare function fetchMyOrgs(creds: Creds, baseUrl?: string): Promise<MyOrg[]>;
 export type OrgResolution = {
@@ -22,26 +22,26 @@ export type OrgResolution = {
     status: 'not-found';
 };
 /**
- * ZIG-739 — resolve an org selector (exact org_... id OR a name/handle) against
+ * resolve an org selector (exact org_.. id OR a name/handle) against
  * the operator's memberships. Exact id wins; otherwise case-insensitive name
  * match. Ambiguous names return the candidates rather than guessing.
  */
 export declare function resolveOrgSelector(orgs: MyOrg[], selector: string): OrgResolution;
-/** MCP OAuth auto-provisioned delegate id prefix (ZIG-545 / ZIG-852). */
+/** MCP OAuth auto-provisioned delegate id prefix. */
 export declare const MCP_OAUTH_DELEGATE_AGENT_ID_PREFIX = "claude-delegate--";
 /** True when `agentId` is an inbound MCP OAuth auto-provisioned delegate. */
 export declare function isMcpOAuthDelegateAgentId(agentId: string): boolean;
 /**
- * ZIG-640 / ZIG-956 — runtime acting org from the server (self-hire / agent
+ * runtime acting org from the server (self-hire / agent
  * row): GET /agents/claude-delegate/access. Moved here from ziggs-mcp's inline
- * fetch (ZIG-894 "one client for every surface").
+ * fetch ( "one client for every surface").
  *
  * Only valid for MCP OAuth Claude-delegate sessions. Hosted / fleet
- * impersonation must use {@link fetchHostedAgentAccess} (ZIG-1272).
+ * impersonation must use {@link fetchHostedAgentAccess}.
  */
 export declare function fetchDelegateAccess(creds: Creds, baseUrl?: string): Promise<Record<string, unknown>>;
 /**
- * ZIG-1272 — session access for hosted / fleet impersonation (owner key +
+ * session access for hosted / fleet impersonation (owner key +
  * X-Agent-Id, or an agent-scoped key that is not a Claude OAuth delegate).
  *
  * `GET /agents/claude-delegate/access` refuses those credentials (or reports
@@ -50,7 +50,7 @@ export declare function fetchDelegateAccess(creds: Creds, baseUrl?: string): Pro
  */
 export declare function fetchHostedAgentAccess(creds: Creds, baseUrl?: string): Promise<Record<string, unknown>>;
 /**
- * ZIG-1272 — pick the access reader that matches the acting agent.
+ * pick the access reader that matches the acting agent.
  * Claude OAuth delegates → self-hire status; everything else → hosted path.
  */
 export declare function fetchSessionAccess(creds: Creds, baseUrl?: string): Promise<Record<string, unknown>>;

package/dist/http/OrgsClient.js

@@ -2,10 +2,10 @@ import { getBackendUrl } from '../utils/urlUtils.js';
 import { throwApiError } from '../shared/apiError.js';
 import { buildOperatorHeaders } from './operatorHeaders.js';
 /**
- * ZIG-739 / ZIG-956 — the operator's full org membership (not just granted
+ * the operator's full org membership (not just granted
  * scopes, which is all the grant listers see). Lets a delegate resolve an org
- * name to an id and offer a pick-list instead of demanding a pasted org_... id.
- * Moved here from ziggs-mcp so every surface rides the one client (ZIG-894).
+ * name to an id and offer a pick-list instead of demanding a pasted org_.. id.
+ * Moved here from ziggs-mcp so every surface rides the one client.
  */
 export async function fetchMyOrgs(creds, baseUrl) {
     const url = `${baseUrl || getBackendUrl()}/orgs/me`;
@@ -26,7 +26,7 @@ export async function fetchMyOrgs(creds, baseUrl) {
     }));
 }
 /**
- * ZIG-739 — resolve an org selector (exact org_... id OR a name/handle) against
+ * resolve an org selector (exact org_.. id OR a name/handle) against
  * the operator's memberships. Exact id wins; otherwise case-insensitive name
  * match. Ambiguous names return the candidates rather than guessing.
  */
@@ -42,19 +42,19 @@ export function resolveOrgSelector(orgs, selector) {
         return { status: 'ambiguous', matches: byName };
     return { status: 'not-found' };
 }
-/** MCP OAuth auto-provisioned delegate id prefix (ZIG-545 / ZIG-852). */
+/** MCP OAuth auto-provisioned delegate id prefix. */
 export const MCP_OAUTH_DELEGATE_AGENT_ID_PREFIX = 'claude-delegate--';
 /** True when `agentId` is an inbound MCP OAuth auto-provisioned delegate. */
 export function isMcpOAuthDelegateAgentId(agentId) {
     return !!agentId && agentId.startsWith(MCP_OAUTH_DELEGATE_AGENT_ID_PREFIX);
 }
 /**
- * ZIG-640 / ZIG-956 — runtime acting org from the server (self-hire / agent
+ * runtime acting org from the server (self-hire / agent
  * row): GET /agents/claude-delegate/access. Moved here from ziggs-mcp's inline
- * fetch (ZIG-894 "one client for every surface").
+ * fetch ( "one client for every surface").
  *
  * Only valid for MCP OAuth Claude-delegate sessions. Hosted / fleet
- * impersonation must use {@link fetchHostedAgentAccess} (ZIG-1272).
+ * impersonation must use {@link fetchHostedAgentAccess}.
  */
 export async function fetchDelegateAccess(creds, baseUrl) {
     const url = `${baseUrl || getBackendUrl()}/agents/claude-delegate/access`;
@@ -69,7 +69,7 @@ export async function fetchDelegateAccess(creds, baseUrl) {
     return body ? JSON.parse(body) : {};
 }
 /**
- * ZIG-1272 — session access for hosted / fleet impersonation (owner key +
+ * session access for hosted / fleet impersonation (owner key +
  * X-Agent-Id, or an agent-scoped key that is not a Claude OAuth delegate).
  *
  * `GET /agents/claude-delegate/access` refuses those credentials (or reports
@@ -93,7 +93,7 @@ export async function fetchHostedAgentAccess(creds, baseUrl) {
         ? parsed.activeOrgId
         : null;
     const match = (parsed.orgs ?? []).find((o) => o.orgId === activeOrgId);
-    // Prefer `activeOrg` (ZIG-1272) — membership list often omits the agent home
+    // Prefer `activeOrg` — membership list often omits the agent home
     // org under fleet impersonation.
     const fromActive = parsed.activeOrg;
     const orgName = (typeof fromActive?.name === 'string' && fromActive.name) ||
@@ -111,7 +111,7 @@ export async function fetchHostedAgentAccess(creds, baseUrl) {
     };
 }
 /**
- * ZIG-1272 — pick the access reader that matches the acting agent.
+ * pick the access reader that matches the acting agent.
  * Claude OAuth delegates → self-hire status; everything else → hosted path.
  */
 export async function fetchSessionAccess(creds, baseUrl) {

package/dist/http/PaymentsClient.d.ts

@@ -76,12 +76,12 @@ export type WaitForApprovalResult = {
     approval: PaymentApproval;
 };
 /**
- * ZIG-894 — the one payments client for every surface (agent-sdk, ziggs-mcp,
+ * the one payments client for every surface (agent-sdk, ziggs-mcp,
  * scripts). Consolidates the former agent-sdk private ZiggsPayClient. Wallet
  * ops ride the operator key; agent-impersonated calls send X-Agent-Id and are
  * policy-gated server-side (transfers above threshold return
  * `approval_required`). Wallet-rail grant mutations (issue / attenuate /
- * revoke) live here; grant *listing* is the unified GET /grants (ZIG-648).
+ * revoke) live here; grant *listing* is the unified GET /grants.
  */
 export declare class PaymentsClient {
     private readonly operatorKey;
@@ -106,7 +106,7 @@ export declare class PaymentsClient {
         description?: string;
         paymentGrantId?: string;
     }): Promise<HoldResult>;
-    /** Prefer a single active wallet grant the agent already holds (ZIG-1182). */
+    /** Prefer a single active wallet grant the agent already holds. */
     private resolveAgentPaymentGrantId;
     release({ holdId, action, toWalletId, idempotencyKey, }: {
         holdId: string;
@@ -131,7 +131,7 @@ export declare class PaymentsClient {
     revokeGrant(grantId: string): Promise<RevokeGrantResult>;
     /**
      * Live wallet grants the acting agent holds, via the unified GET /grants
-     * (ZIG-648 retired GET /payments/grants), following the cursor to completion.
+     * (retired GET /payments/grants), following the cursor to completion.
      */
     listGrants(): Promise<GrantView[]>;
     createTopUpIntent({ amount, description, currency, }?: {

package/dist/http/PaymentsClient.js

@@ -6,12 +6,12 @@ function randomIdempotencyKey(prefix = 'op') {
     return `${prefix}_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 10)}`;
 }
 /**
- * ZIG-894 — the one payments client for every surface (agent-sdk, ziggs-mcp,
+ * the one payments client for every surface (agent-sdk, ziggs-mcp,
  * scripts). Consolidates the former agent-sdk private ZiggsPayClient. Wallet
  * ops ride the operator key; agent-impersonated calls send X-Agent-Id and are
  * policy-gated server-side (transfers above threshold return
  * `approval_required`). Wallet-rail grant mutations (issue / attenuate /
- * revoke) live here; grant *listing* is the unified GET /grants (ZIG-648).
+ * revoke) live here; grant *listing* is the unified GET /grants.
  */
 export class PaymentsClient {
     operatorKey;
@@ -50,7 +50,7 @@ export class PaymentsClient {
             throw new Error('transfer: `to` is required');
         if (!(Number.isInteger(amount) && amount > 0))
             throw new Error('transfer: `amount` must be a positive integer (cents)');
-        // ZIG-1182 — resolve a standing/active grant when the caller omitted one
+        // resolve a standing/active grant when the caller omitted one
         // (Claude/MCP ensureForUser mints it). Explicit id still wins.
         if (this.agentId && !paymentGrantId) {
             paymentGrantId = (await this.resolveAgentPaymentGrantId()) ?? undefined;
@@ -93,7 +93,7 @@ export class PaymentsClient {
     async hold({ amount, idempotencyKey, description, paymentGrantId, }) {
         if (!(Number.isInteger(amount) && amount > 0))
             throw new Error('hold: `amount` must be a positive integer (cents)');
-        // ZIG-1182 — agent holds reserve the owner's wallet; require a grant.
+        // agent holds reserve the owner's wallet; require a grant.
         if (this.agentId && !paymentGrantId) {
             paymentGrantId = (await this.resolveAgentPaymentGrantId()) ?? undefined;
         }
@@ -106,7 +106,7 @@ export class PaymentsClient {
             paymentGrantId,
         }));
     }
-    /** Prefer a single active wallet grant the agent already holds (ZIG-1182). */
+    /** Prefer a single active wallet grant the agent already holds. */
     async resolveAgentPaymentGrantId() {
         try {
             const grants = await this.listGrants();
@@ -148,7 +148,7 @@ export class PaymentsClient {
     }
     /**
      * Live wallet grants the acting agent holds, via the unified GET /grants
-     * (ZIG-648 retired GET /payments/grants), following the cursor to completion.
+     * (retired GET /payments/grants), following the cursor to completion.
      */
     async listGrants() {
         const grants = new GrantsClient(this.operatorKey, this.agentId, this.baseUrl);
@@ -239,7 +239,7 @@ export class PaymentsClient {
         const response = await fetch(`${this.baseUrl}${path}`, init);
         const text = await response.text();
         if (!response.ok) {
-            // ZIG-1124 — ApiError; PaymentsError remains the duck type for `.status`.
+            // ApiError; PaymentsError remains the duck type for `.status`.
             throwApiError(response, text, `HTTP ${response.status}`);
         }
         return text ? JSON.parse(text) : null;

package/dist/http/TaskClient.d.ts

@@ -1,7 +1,7 @@
 import { type Creds, type Task, type TaskState } from '../types.js';
 /**
  * When the buyer reviews a task's plan. Task-rail only — an agreement has no
- * plan to review, which is why ZIG-1095 cut this from the propose/counter/
+ * plan to review, which is why cut this from the propose/counter/
  * subcontract inputs rather than teaching those routes to keep one.
  */
 export type PlanReviewTiming = 'with_proposal' | 'before_execution';
@@ -13,9 +13,9 @@ export interface CreateTaskData {
     planReviewTiming?: PlanReviewTiming;
     requireMidWorkPlanAck?: boolean;
     idempotencyKey?: string;
-    /** Explicit delegation target (ZIG-586) — must be a party to the agreement; validated server-side. */
+    /** Explicit delegation target — must be a party to the agreement; validated server-side. */
     assigneeId?: string;
-    /** ZIG-734: prior-step artifact handles consumed as structured input links. */
+    /** prior-step artifact handles consumed as structured input links. */
     inputArtifactIds?: string[];
 }
 export declare function createTask(taskData: CreateTaskData, creds: Creds): Promise<Task>;
@@ -38,10 +38,10 @@ export declare function getActiveTasksForChat(chatId: string, creds: Creds): Pro
 export declare function cancelTask(taskId: string, creds: Creds): Promise<Task>;
 export declare function getSubtasks(parentTaskId: string, creds: Creds): Promise<Task[]>;
 export interface PlanReplaceStep {
-    /** Omit to let the server mint `step-<n>` (ZIG-1268). */
+    /** Omit to let the server mint `step-<n>`. */
     stepId?: string;
     description: string;
-    /** Omit to use the array index (ZIG-1268). */
+    /** Omit to use the array index. */
     order?: number;
     /**
      * ZIG-1313: step progress. Omit for `pending`. Send `completed` /
@@ -60,7 +60,7 @@ export interface ListTasksOptions {
     state?: string;
     cursor?: string;
     limit?: number;
-    /** Filter to tasks assigned to this id (ZIG-586). */
+    /** Filter to tasks assigned to this id. */
     assignedTo?: string;
 }
 export interface ListTasksResult {

package/dist/http/TaskClient.js

@@ -6,7 +6,7 @@ function buildHeaders(creds) {
         'content-type': 'application/json',
         Authorization: `Bearer ${creds.operatorKey}`,
         'X-Agent-Id': creds.agentId,
-        // ZIG-1092 — the wake's lane, so the backend can fence this call to the
+        // the wake's lane, so the backend can fence this call to the
         // engagement it belongs to rather than the agent's whole authority.
         ...(creds.laneId ? { 'X-Ziggs-Lane': creds.laneId } : {}),
     };
@@ -108,7 +108,7 @@ export async function getActiveTasksForAgent(agentId, creds) {
     const fromAgent = Array.isArray(data?.['tasks']) ? data['tasks'] : [];
     if (fromAgent.length > 0)
         return fromAgent;
-    // Fallback when /agents/:id/tasks is empty but party-agreement tasks exist (ZIG-802).
+    // Fallback when /agents/:id/tasks is empty but party-agreement tasks exist.
     return getActiveTasksForAgentViaPartyAgreements(agentId, creds);
 }
 async function getActiveTasksForAgentViaPartyAgreements(agentId, creds) {
@@ -352,7 +352,7 @@ export class TaskClient {
     constructor(operatorKey, agentId) {
         if (!operatorKey)
             throw new Error('TaskClient: operatorKey is required');
-        // agentId may be absent for agent-scoped keys (ZIG-642); the Creds-based
+        // agentId may be absent for agent-scoped keys; the Creds-based
         // standalone functions still assert it per call.
         this.creds = { operatorKey, agentId };
     }

package/dist/http/agreementFlows.d.ts

@@ -1,7 +1,7 @@
 import { type ClaimedKind, type ProposeTerms } from './AgreementClient.js';
 import { type Agreement, type Creds, type EngagementKind } from '../types.js';
 /**
- * ZIG-1022 — one propose grammar. Direct, broadcast (quest and standing
+ * one propose grammar. Direct, broadcast (quest and standing
  * offer), and link proposals all flow through here; the surfaces expose a
  * single propose tool instead of dedicated publish/request tools.
  *
@@ -23,14 +23,14 @@ export declare function proposeUnified(input: UnifiedProposeInput, creds: Creds)
     shape: ProposeShape;
 }>;
 /**
- * ZIG-1021 — one claim verb for any open broadcast: link invite, quest,
+ * one claim verb for any open broadcast: link invite, quest,
  * hand-off, or standing offer.
  *
  * One request. This used to read the agreement first to decide which endpoint to
  * post to, and `GET /agreements/:id` is party-scoped — a claimer is by definition
  * not yet a party to the broadcast it is claiming, so the routing read 404'd and
  * every standing offer in the store failed with "Agreement not found" before
- * either claim endpoint was called (ZIG-1155). The backend routes it now, where
+ * either claim endpoint was called. The backend routes it now, where
  * the row is readable without being a party to it.
  *
  * `kind` arrives on the claim response — the route that did the routing reports

package/dist/http/agreementFlows.js

@@ -56,14 +56,14 @@ export async function proposeUnified(input, creds) {
     return { agreement, shape: 'direct' };
 }
 /**
- * ZIG-1021 — one claim verb for any open broadcast: link invite, quest,
+ * one claim verb for any open broadcast: link invite, quest,
  * hand-off, or standing offer.
  *
  * One request. This used to read the agreement first to decide which endpoint to
  * post to, and `GET /agreements/:id` is party-scoped — a claimer is by definition
  * not yet a party to the broadcast it is claiming, so the routing read 404'd and
  * every standing offer in the store failed with "Agreement not found" before
- * either claim endpoint was called (ZIG-1155). The backend routes it now, where
+ * either claim endpoint was called. The backend routes it now, where
  * the row is readable without being a party to it.
  *
  * `kind` arrives on the claim response — the route that did the routing reports

package/dist/http/grants.d.ts

@@ -1,5 +1,5 @@
 /**
- * ZIG-646: the one grant shape the backend presents on the wire, mirrored for
+ * the one grant shape the backend presents on the wire, mirrored for
  * SDK consumers. Context, connection, and payment grants all serialise to this
  * exact object (see backend `src/grants/grant-view.ts`), so a caller reads one
  * shape to answer "what grants exist, and are they live?" regardless of rail.

package/dist/http/grants.js

@@ -10,7 +10,7 @@ export const CONTEXT_GRANT_SCOPE_KINDS = [
     'chat',
     'agreement',
     'org',
-    // ZIG-1037: narrowest context scope
+    // narrowest context scope
     'artifact',
 ];
 /** Every scope kind across every rail: context + connection + payment. */