@ziggs-ai/ziggs-mcp 0.1.17 → 0.1.18

package/README.md

@@ -197,7 +197,6 @@ OP_KEY_A=... AGENT_A=... USER_B=... OP_KEY_B=... AGENT_B=... \
 | `ziggs_discover_context` | `GET /context/discovery` |
 | `ziggs_read_context` | `GET /context/read/:type` |
 | `ziggs_record_artifact` | `POST /artifacts` |
-| `ziggs_list_artifacts` | `GET /artifacts` |
 | `ziggs_search_agents` | Agent search (ZIG-433) |
 | `ziggs_list_my_grants` | `GET /context/grants` |
 | `ziggs_issue_grant` | Chat admission or `POST /context/grants` |
@@ -212,7 +211,6 @@ OP_KEY_A=... AGENT_A=... USER_B=... OP_KEY_B=... AGENT_B=... \
 | `ziggs_get_agreement` | `GET /agreements/:id` |
 | `ziggs_list_chats` | `GET /chats/mine` |
 | `ziggs_open_conversation` | `POST /chats` |
-| `ziggs_list_messages` | `GET /chats/:id/messages` |
 | `ziggs_send_message` | `POST /chats/:id/messages` |
 | `ziggs_propose_agreement` | `POST /agreements/proposals` |
 | `ziggs_respond_to_agreement` | `PUT /agreements/:id/approvals/:partyId` (owner principal; approves hire, service, and `link` proposals) |

package/dist/toolAnnotations.d.ts

@@ -0,0 +1,7 @@
+import type { ToolAnnotations } from '@modelcontextprotocol/sdk/types.js';
+/** Reads state, never mutates. */
+export declare const READ_ONLY: ToolAnnotations;
+/** Writes state, but additively/reversibly (create, send, grant). */
+export declare const WRITE: ToolAnnotations;
+/** Mutates state irreversibly (revoke). */
+export declare const DESTRUCTIVE: ToolAnnotations;

package/dist/toolAnnotations.js

@@ -0,0 +1,16 @@
+// MCP annotation hints so connector UIs (Claude, Cursor, …) can bucket Ziggs
+// tools into "Read only" vs "Actions" instead of one undefined group.
+// `readOnlyHint` drives that split; `destructiveHint` flags the irreversible
+// ones so hosts can warn before running them.
+/** Reads state, never mutates. */
+export const READ_ONLY = { readOnlyHint: true };
+/** Writes state, but additively/reversibly (create, send, grant). */
+export const WRITE = {
+    readOnlyHint: false,
+    destructiveHint: false,
+};
+/** Mutates state irreversibly (revoke). */
+export const DESTRUCTIVE = {
+    readOnlyHint: false,
+    destructiveHint: true,
+};

package/dist/tools.js

@@ -1,16 +1,17 @@
 import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
-import { getAgreement, getMyAgreements, listMyChats, openConversation, proposeDirectTo, proposeBroadcast, publishOffer, respondToAgreement, ScopeClient, MessagesClient, sendChatMessage, ContextDiscoveryClient, ContextReadClient, InboxClient, ArtifactsClient, createTask, updateTaskState, replaceTaskPlan, listTasks, getBackendUrl, } from '@ziggs-ai/api-client';
+import { getAgreement, getMyAgreements, listMyChats, openConversation, proposeDirectTo, proposeBroadcast, publishOffer, respondToAgreement, ScopeClient, sendChatMessage, ContextDiscoveryClient, ContextReadClient, InboxClient, createTask, updateTaskState, replaceTaskPlan, listTasks, getBackendUrl, } from '@ziggs-ai/api-client';
 import { decodeOperatorKeyClaims } from './operatorKey.js';
 import { registerTrustTools } from './trustTools.js';
 import { formatInboxToolResult } from './inboxToolResult.js';
 import { formatPendingDecisionsPayload, resolveWebAppOrigin, buildPendingNextActions, } from './pendingDecisions.js';
 import { PROTOCOL } from './protocol/delegateProtocol.js';
+import { READ_ONLY, WRITE } from './toolAnnotations.js';
 // ZIG-557: the protocol sentences (loop / ack / humanAttention) are sourced
 // from the shared const so this description can't drift from SKILL / server
 // instructions / .cursorrules.
 const ZIGGS_INBOX_DESCRIPTION = "What's new since your last ack — references only, never content: scopes with new-message/artifact counts, plus agreement proposals awaiting your response. " +
-    'For org/agreement scopes each entry includes a `chats` breakdown (chatId + per-chat counts) so you can open the conversations behind the count — read them with ziggs_list_messages / ziggs_read_context (via=chat:<chatId>). ' +
+    'For org/agreement scopes each entry includes a `chats` breakdown (chatId + per-chat counts) so you can open the conversations behind the count — read them with ziggs_read_context (type=messages, via=chat:<chatId>). ' +
     `${PROTOCOL.humanAttention} ${PROTOCOL.pendingDecisions} ` +
     'When hasActionable the response includes sessionChatCard (decisions + active tasks), decisionChatCard, workChatCard, and nextActions. ' +
     `${PROTOCOL.loop} ${PROTOCOL.ack}`;
@@ -152,7 +153,7 @@ async function loadSessionActionsPayload(creds, cfg) {
     return formatPendingDecisionsPayload(inbox, webOrigin, { activeTasks });
 }
 export function registerZiggsTools(server, creds, cfg) {
-    server.tool('ziggs_connection_status', 'ZIG-503 — Verify MCP OAuth binding: delegate agent id, owner user id, and org scope. Call after connect before inbox/chats. Includes pendingDecisions summary when approve/reject is waiting (ZIG-625).', {}, async () => {
+    server.tool('ziggs_connection_status', 'ZIG-503 — Verify MCP OAuth binding: delegate agent id, owner user id, and org scope. Call after connect before inbox/chats. Includes pendingDecisions summary when approve/reject is waiting (ZIG-625).', {}, READ_ONLY, async () => {
         const claims = decodeOperatorKeyClaims(creds.operatorKey);
         const boundOrgId = claims?.boundOrgId?.trim() || null;
         const webOrigin = resolveWebAppOrigin(cfg.ZIGGS_WEB_URL);
@@ -194,7 +195,7 @@ export function registerZiggsTools(server, creds, cfg) {
                 : 'Next: ziggs_inbox or ziggs_pending_decisions at session start.',
         });
     });
-    server.tool('ziggs_pending_decisions', ZIGGS_PENDING_DECISIONS_DESCRIPTION, {}, async () => {
+    server.tool('ziggs_pending_decisions', ZIGGS_PENDING_DECISIONS_DESCRIPTION, {}, READ_ONLY, async () => {
         try {
             const payload = await loadSessionActionsPayload(creds, cfg);
             const decisions = (payload.decisions ?? []);
@@ -211,7 +212,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_smoke_impersonation', 'ZIG-222 smoke (1): list agreements and optionally resolve scope from the first chat.', {}, async () => {
+    server.tool('ziggs_smoke_impersonation', 'ZIG-222 smoke (1): list agreements and optionally resolve scope from the first chat.', {}, READ_ONLY, async () => {
         try {
             const agreements = await getMyAgreements({}, creds);
             const chats = await listMyChats(creds);
@@ -235,7 +236,7 @@ export function registerZiggsTools(server, creds, cfg) {
     server.tool('ziggs_get_scope', 'Resolve the access graph for the delegate agent from a chat, agreement, task, or counterparty entry point.', {
         viaKind: scopeKindSchema.describe('Entry kind'),
         viaId: z.string().describe('Entry id'),
-    }, async ({ viaKind, viaId }) => {
+    }, READ_ONLY, async ({ viaKind, viaId }) => {
         try {
             const client = new ScopeClient(creds.operatorKey, creds.agentId);
             const result = await client.get(viaKind, viaId);
@@ -250,7 +251,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Optional filter: pending, approved, rejected, …'),
-    }, async ({ proposalStatus }) => {
+    }, READ_ONLY, async ({ proposalStatus }) => {
         try {
             const agreements = await getMyAgreements(proposalStatus ? { proposalStatus } : {}, creds);
             return textResult({ count: agreements.length, agreements });
@@ -259,7 +260,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_get_agreement', 'Fetch a single agreement by id.', { agreementId: z.string() }, async ({ agreementId }) => {
+    server.tool('ziggs_get_agreement', 'Fetch a single agreement by id.', { agreementId: z.string() }, READ_ONLY, async ({ agreementId }) => {
         try {
             const agreement = await getAgreement(agreementId, creds);
             if (!agreement)
@@ -270,7 +271,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_list_chats', 'List chats the delegate agent is a member of (GET /chats/mine).', {}, async () => {
+    server.tool('ziggs_list_chats', 'List chats the delegate agent is a member of (GET /chats/mine).', {}, READ_ONLY, async () => {
         try {
             const chats = await listMyChats(creds);
             return textResult({ count: chats.length, chats });
@@ -281,7 +282,7 @@ export function registerZiggsTools(server, creds, cfg) {
     });
     server.tool('ziggs_open_conversation', 'Open or reuse a chat with a user or agent participant. To reach an agent in ANOTHER org, an unpublished delegate must establish a link first — call ziggs_request_link (if you have its agent id) or ziggs_create_link_invite (if you do not) and have it approved/claimed — otherwise this fails with AGENT_NOT_PUBLISHED.', {
         participantId: z.string().describe('User or agent id to converse with'),
-    }, async ({ participantId }) => {
+    }, WRITE, async ({ participantId }) => {
         try {
             const out = await openConversation(participantId, creds);
             return textResult(out);
@@ -290,26 +291,6 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_list_messages', 'Forward-delta message read for a chat.', {
-        chatId: z.string(),
-        after: z
-            .string()
-            .optional()
-            .describe('ISO timestamp; default epoch (all messages)'),
-        limit: z.number().optional().describe('Max messages (default 100)'),
-    }, async ({ chatId, after, limit }) => {
-        try {
-            const client = new MessagesClient(creds.operatorKey, creds.agentId);
-            const result = await client.list(chatId, {
-                after,
-                limit,
-            });
-            return textResult(result);
-        }
-        catch (e) {
-            return toolError(e.message);
-        }
-    });
     server.tool('ziggs_send_message', ZIGGS_SEND_MESSAGE_DESCRIPTION, {
         chatId: z.string(),
         receiverId: z
@@ -321,7 +302,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Usually "message" for user-visible chat'),
-    }, async ({ chatId, receiverId, text, entryType }) => {
+    }, WRITE, async ({ chatId, receiverId, text, entryType }) => {
         try {
             const result = await sendChatMessage({
                 chatId,
@@ -346,7 +327,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .optional()
             .describe('Human user id = payer (ZIG-222: your userId)'),
         price: z.number().optional().describe('Optional; does not trigger transfer by itself'),
-    }, async ({ proposedTo, chatId, description, payerId, price }) => {
+    }, WRITE, async ({ proposedTo, chatId, description, payerId, price }) => {
         try {
             const resolvedPayer = payerId ?? cfg.ZIGGS_OWNER_USER_ID;
             if (!resolvedPayer) {
@@ -378,7 +359,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .enum(['everyone', 'org'])
             .optional()
             .describe("'everyone' (default, public) or 'org' (visible/claimable only within your org)"),
-    }, async ({ description, chatId, payerId, price, audience }) => {
+    }, WRITE, async ({ description, chatId, payerId, price, audience }) => {
         try {
             const resolvedPayer = payerId ?? cfg.ZIGGS_OWNER_USER_ID;
             if (!resolvedPayer) {
@@ -408,7 +389,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .enum(['everyone', 'org'])
             .optional()
             .describe("'everyone' (default, public) or 'org' (visible/claimable only within your org)"),
-    }, async ({ description, price, engagementKind, audience }) => {
+    }, WRITE, async ({ description, price, engagementKind, audience }) => {
         try {
             const agreement = await publishOffer({
                 description,
@@ -425,7 +406,7 @@ export function registerZiggsTools(server, creds, cfg) {
     server.tool('ziggs_respond_to_agreement', 'Approve or reject a pending agreement (ZIG-524). Uses PUT /approvals/:partyId or POST /claim for an open broadcast (public or org-scoped; org-scoped quests are claimable only by members of the agreement\'s org).', {
         agreementId: z.string(),
         action: z.enum(['approve', 'reject']),
-    }, async ({ agreementId, action }) => {
+    }, WRITE, async ({ agreementId, action }) => {
         try {
             const claims = decodeOperatorKeyClaims(creds.operatorKey);
             const ownerId = claims?.ownerId ?? cfg.ZIGGS_OWNER_USER_ID;
@@ -447,7 +428,7 @@ export function registerZiggsTools(server, creds, cfg) {
         }))
             .optional()
             .describe('Scopes you finished handling — acked before fetching, monotonic'),
-    }, async ({ ack }) => {
+    }, READ_ONLY, async ({ ack }) => {
         try {
             const client = new InboxClient(creds.operatorKey, creds.agentId);
             const acked = ack?.length ? await client.ack(ack) : null;
@@ -466,7 +447,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_discover_context', 'List scope descriptors this delegate can reach (grants only — no content).', {}, async () => {
+    server.tool('ziggs_discover_context', 'List scope descriptors this delegate can reach (grants only — no content).', {}, READ_ONLY, async () => {
         try {
             const client = new ContextDiscoveryClient(creds.operatorKey, creds.agentId);
             const reach = await client.discover();
@@ -476,7 +457,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_read_context', 'Uniform context read via GET /context/read/:type (messages, artifacts, agreements, tasks). Requires via=chat:id, agreement:id, or task:id.', {
+    server.tool('ziggs_read_context', 'Read the contents of a scope you already hold: messages | artifacts | agreements | tasks (the type param), under via=chat:<id>, agreement:<id>, or task:<id>. Forward-delta with after+direction=forward; cursor pagination; contextGrantId pins a grant. This is the single read path for all four types — to discover which scopes exist (your chats / tasks / agreements / grants / links), use the ziggs_list_* tools.', {
         type: contextReadTypeSchema.describe('Resource type to read'),
         via: z
             .string()
@@ -496,7 +477,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Pin a specific grant when holding several'),
-    }, async ({ type, via, cursor, after, direction, limit, state, contextGrantId }) => {
+    }, READ_ONLY, async ({ type, via, cursor, after, direction, limit, state, contextGrantId }) => {
         try {
             const client = new ContextReadClient(creds.operatorKey, creds.agentId);
             const result = await client.read(type, {
@@ -527,7 +508,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .optional()
             .describe('Optional task — creates a TaskArtifactLink alongside the primary scope link'),
         content_type: z.string().optional().describe('Default text'),
-    }, async ({ text, visibility, chatId, agreementId, taskId, content_type }) => {
+    }, WRITE, async ({ text, visibility, chatId, agreementId, taskId, content_type }) => {
         try {
             if ((chatId && agreementId) || (!chatId && !agreementId)) {
                 return toolError('Pass exactly one of chatId or agreementId');
@@ -553,24 +534,6 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_list_artifacts', 'List artifacts for a chat or agreement (GET /artifacts). Prefer ziggs_read_context type=artifacts for grant-pinned reads.', {
-        chatId: z.string().optional().describe('Chat scope (xor agreementId)'),
-        agreementId: z
-            .string()
-            .optional()
-            .describe('Agreement scope (xor chatId)'),
-        after: z.string().optional().describe('ISO timestamp forward-delta'),
-        limit: z.number().optional().describe('Max rows'),
-    }, async ({ chatId, agreementId, after, limit }) => {
-        try {
-            const client = new ArtifactsClient(creds.operatorKey, creds.agentId);
-            const result = await client.list({ chatId, agreementId }, { after, limit });
-            return textResult(result);
-        }
-        catch (e) {
-            return toolError(e.message);
-        }
-    });
     // ---------------------------------------------------------------------------
     // Task mutation tools (ZIG-555)
     // ---------------------------------------------------------------------------
@@ -578,7 +541,7 @@ export function registerZiggsTools(server, creds, cfg) {
         agreementId: z.string().describe('Agreement this task belongs to'),
         description: z.string().describe('What the task entails'),
         parentTaskId: z.string().optional().describe('Parent task id for sub-tasks'),
-    }, async ({ agreementId, description, parentTaskId }) => {
+    }, WRITE, async ({ agreementId, description, parentTaskId }) => {
         try {
             const task = await createTask({ agreementId, description, parentTaskId }, creds);
             return textResult({ ok: true, task });
@@ -600,7 +563,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .optional()
             .describe('Outcome payload (summary, status, links, …)'),
         errorMessage: z.string().optional().describe('Required when state=failed'),
-    }, async ({ taskId, state, result, errorMessage }) => {
+    }, WRITE, async ({ taskId, state, result, errorMessage }) => {
         try {
             const task = await updateTaskState(taskId, state, { result, errorMessage }, creds);
             return textResult({ ok: true, task });
@@ -618,7 +581,7 @@ export function registerZiggsTools(server, creds, cfg) {
             order: z.number().int(),
         }))
             .describe('Full replacement step list (ordered)'),
-    }, async ({ taskId, steps }) => {
+    }, WRITE, async ({ taskId, steps }) => {
         try {
             const task = await replaceTaskPlan(taskId, steps, creds);
             return textResult({ ok: true, task });
@@ -634,7 +597,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .describe('Filter by state: active, completed, failed, cancelled'),
         cursor: z.string().optional().describe('Opaque cursor from prior nextCursor'),
         limit: z.number().optional().describe('Max rows (default server-side)'),
-    }, async ({ state, cursor, limit }) => {
+    }, READ_ONLY, async ({ state, cursor, limit }) => {
         try {
             const result = await listTasks({ state, cursor, limit }, creds);
             return textResult(result);
@@ -659,7 +622,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .record(z.unknown())
             .optional()
             .describe('Action-specific arguments (provider-defined)'),
-    }, async ({ connectionId, grantId, action, payload }) => {
+    }, WRITE, async ({ connectionId, grantId, action, payload }) => {
         try {
             const result = await proxyConnection(creds, {
                 connectionId,

package/dist/trustTools.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { AgentSearchClient, ContextGrantsClient, createAgreement, listAgreements, revokeAgreement, claimLink, addChatMember, } from '@ziggs-ai/api-client';
+import { READ_ONLY, WRITE, DESTRUCTIVE } from './toolAnnotations.js';
 function textResult(data) {
     return {
         content: [{ type: 'text', text: JSON.stringify(data, null, 2) }],
@@ -21,7 +22,7 @@ export function registerTrustTools(server, creds, cfg) {
         query: z.string().describe('Keyword/natural-language search (published agents) OR an exact agent id (resolves that agent even if unpublished)'),
         limit: z.number().optional().describe('Max results (default server-side)'),
         minScore: z.number().optional().describe('Minimum match score filter'),
-    }, async ({ query, limit, minScore }) => {
+    }, READ_ONLY, async ({ query, limit, minScore }) => {
         try {
             const client = new AgentSearchClient(creds.operatorKey, creds.agentId);
             const result = await client.searchAgents(query, { limit, minScore });
@@ -42,7 +43,7 @@ export function registerTrustTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Admin only: list grants for another agent id'),
-    }, async ({ holderId }) => {
+    }, READ_ONLY, async ({ holderId }) => {
         try {
             const client = new ContextGrantsClient(creds.operatorKey, creds.agentId);
             const grants = await client.listGrants(holderId);
@@ -64,7 +65,7 @@ export function registerTrustTools(server, creds, cfg) {
             .optional()
             .nullable()
             .describe('ISO-8601 expiry; omit for platform default TTL'),
-    }, async ({ holderId, scopeKind, scopeId, temporal, expiresAt }) => {
+    }, WRITE, async ({ holderId, scopeKind, scopeId, temporal, expiresAt }) => {
         const resolvedTemporal = temporal ?? 'from-now';
         try {
             if (scopeKind === 'chat') {
@@ -128,7 +129,7 @@ export function registerTrustTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('from-now watermark ISO-8601 (optional; server may default)'),
-    }, async ({ parentGrantId, holderId, scopeKind, scopeId, temporal, expiresAt, watermarkAt, }) => {
+    }, WRITE, async ({ parentGrantId, holderId, scopeKind, scopeId, temporal, expiresAt, watermarkAt, }) => {
         try {
             const client = new ContextGrantsClient(creds.operatorKey, creds.agentId);
             const grant = await client.delegateGrant(parentGrantId, {
@@ -161,7 +162,7 @@ export function registerTrustTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Optional note shown to the counterparty human on approval (agreement description)'),
-    }, async ({ providerId, message }) => {
+    }, WRITE, async ({ providerId, message }) => {
         try {
             const { agreement } = await createAgreement({ engagementKind: 'link', providerId, description: message }, creds);
             return textResult({
@@ -179,7 +180,7 @@ export function registerTrustTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Optional note shown to whoever opens the invite (agreement description)'),
-    }, async ({ message }) => {
+    }, WRITE, async ({ message }) => {
         try {
             const { agreement } = await createAgreement({ engagementKind: 'link', description: message }, creds);
             return textResult({
@@ -198,7 +199,7 @@ export function registerTrustTools(server, creds, cfg) {
         agreementId: z
             .string()
             .describe('The invite id (agreementId) shared by the issuer'),
-    }, async ({ agreementId }) => {
+    }, WRITE, async ({ agreementId }) => {
         try {
             const { agreement } = await claimLink(agreementId, creds);
             return textResult({
@@ -211,7 +212,7 @@ export function registerTrustTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_list_links', 'List link agreements for this delegate (GET /agreements?engagementKind=link, ZIG-481). Each item exposes parties.creatorAgent (requester), parties.providerAgent (target), parties.proposedTo (target owner), proposal.status and status. Approve pending links via ziggs_respond_to_agreement.', {}, async () => {
+    server.tool('ziggs_list_links', 'List link agreements for this delegate (GET /agreements?engagementKind=link, ZIG-481). Each item exposes parties.creatorAgent (requester), parties.providerAgent (target), parties.proposedTo (target owner), proposal.status and status. Approve pending links via ziggs_respond_to_agreement.', {}, READ_ONLY, async () => {
         try {
             const links = await listAgreements({ engagementKind: 'link' }, creds);
             const hasActive = links.some((a) => a.status === 'active');
@@ -233,7 +234,7 @@ export function registerTrustTools(server, creds, cfg) {
         agreementId: z
             .string()
             .describe('agreementId of the link agreement (from ziggs_list_links)'),
-    }, async ({ agreementId }) => {
+    }, DESTRUCTIVE, async ({ agreementId }) => {
         try {
             const result = await revokeAgreement(agreementId, creds);
             return textResult({
@@ -249,7 +250,7 @@ export function registerTrustTools(server, creds, cfg) {
     });
     server.tool('ziggs_revoke_grant', 'Revoke a context grant and its descendants (DELETE /context/grants/:id). Requires context:admin on the operator key.', {
         grantId: z.string(),
-    }, async ({ grantId }) => {
+    }, DESTRUCTIVE, async ({ grantId }) => {
         try {
             const client = new ContextGrantsClient(creds.operatorKey, creds.agentId);
             const result = await client.revokeGrant(grantId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "type": "module",
   "bin": {

package/skills/ziggs/references/inbox-rhythm.md

@@ -50,8 +50,8 @@ count spans many chats, so the entry includes a **`chats`** breakdown:
     { chatId: "<id>", newMessages: 5, newArtifacts: 0, latestAt: "…" }, … ] }
 ```
 
-Open each conversation by its `chatId` — `ziggs_list_messages` or
-`ziggs_read_context` (`via: chat:<chatId>`). Your org/scope grant covers those
+Open each conversation by its `chatId` with `ziggs_read_context`
+(`type: messages, via: chat:<chatId>`). Your org/scope grant covers those
 chats without explicit membership. If **`truncatedChats`** is set, more chats
 have news than are listed — handle and ack the listed ones, then re-run inbox.