@ziggs-ai/ziggs-mcp 0.14.0 → 0.14.2

package/README.md

@@ -157,6 +157,9 @@ Startup validates the key shape, expiry (JWT `exp`), and agent resolution — er
 | `ziggs_grant_list` | `GET /grants` (all rails) |
 | `ziggs_context_read` | `GET /context/read/:type` |
 | `ziggs_artifact_record` | `POST /artifacts` |
+| `ziggs_artifact_list` | `GET /artifacts` |
+| `ziggs_artifact_share` | `POST /context/artifacts/:id/share` |
+| `ziggs_artifact_attach` | `POST /chats/:id/artifacts`, `POST /tasks/:id/artifacts`, or `POST /agreements/:id/artifacts` |
 | `ziggs_artifact_upload_url` | `POST /artifacts/upload-url` (+ optional S3 PUT) |
 | `ziggs_artifact_complete_file` | `POST /artifacts/:id/complete` |
 | `ziggs_artifact_download` | `GET /artifacts/:id/download` |

package/dist/tools.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
-import { getAgreement, getMyAgreements, listMyChats, delegateAgreement, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, PaymentsClient, ContextReadClient, GrantsClient, InboxClient, createTask, updateTaskState, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateAgentId, GRANTS_CAPABILITIES, AGREEMENT_VERB_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, openConversationCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, marketplaceViewCapability, } from '@ziggs-ai/api-client';
+import { getAgreement, getMyAgreements, listMyChats, delegateAgreement, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, PaymentsClient, ContextReadClient, GrantsClient, InboxClient, createTask, updateTaskState, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateAgentId, GRANTS_CAPABILITIES, AGREEMENT_VERB_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, openConversationCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, listTasksCapability, marketplaceViewCapability, } from '@ziggs-ai/api-client';
 import { decodeOperatorKeyClaims } from './operatorKey.js';
 import { registerTrustTools } from './trustTools.js';
 import { registerPaymentTools } from './paymentTools.js';
@@ -36,24 +36,6 @@ const ZIGGS_SEND_MESSAGE_DESCRIPTION = 'Send a chat message as the acting agent.
     'Taking part IS the permission, so there is no separate reach check on the send and no auto-add of a receiver who is not already in the room. ' +
     'A refusal means you hold no write grant here: rooms are opened with you (ziggs_chat_open) and holders are admitted under an instrument, and the refusal names which one is missing and how to create it. ' +
     PROTOCOL.reporting;
-// (revised A4): always-on teaching, not wrong-slot detection. Name the
-// result slot on the artifact_record description and success path so an agent
-// finds the right move unaided. Reporting rule sourced from the shared const
-//.
-// scope is optional. Say so first — the old wording ("write to a chat
-// or agreement scope") is what pushed a model into guessing a container, and
-// guessing wrong used to fail the write outright.
-const ZIGGS_RECORD_ARTIFACT_DESCRIPTION = 'Write an artifact — text (text) or a file (filename + mime + contentBase64; presign, upload ' +
-    'and completion all happen inside this one call). Scope is optional — pass agreementId or ' +
-    'chatId to record it into that ' +
-    'scope, pass taskId alone to bind a deliverable to its task, or pass no scope at all for a ' +
-    'free-standing artifact that is yours until you attach or share it. Never guess a scope: ' +
-    'recording with none always succeeds. Set visibility explicitly. ' +
-    'For a finished deliverable, set contentType=result and pass taskId to bind it to the task. ' +
-    'Inline text max 50000 characters. Over that: pass the body as a file here, ' +
-    'or record an index artifact plus part artifacts and list the part ids in the index. ' +
-    'The server does not auto-split. ' +
-    PROTOCOL.reporting;
 // the strict artifact write (fail loudly, return the artifactId)
 // moved into ArtifactsClient.writeStrict, shared with the SDK's artifact_record.
 // the leak-guard, the connections proxy/request calls, the
@@ -711,11 +693,10 @@ export function registerZiggsTools(server, creds, cfg) {
                 : result;
         },
     });
-    // Description override keeps the reporting rule sourced from the shared
-    // PROTOCOL const so it can't drift from SKILL/server instructions.
-    registerCapability(server, recordArtifactCapability, creds, {
-        description: ZIGGS_RECORD_ARTIFACT_DESCRIPTION,
-    });
+    // descriptions.mcp is canonical — do not override. The reporting paragraph
+    // is PROTOCOL.reporting copied into the capability (api-client cannot import
+    // ziggs-mcp); record-artifact-teaching.test.ts gates the live tool against both.
+    registerCapability(server, recordArtifactCapability, creds);
     // find what you recorded free-standing, and hand one artifact to one
     // agent. Descriptions come from the shared capability (no PROTOCOL override
     // needed; neither is a reporting surface).
@@ -912,41 +893,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e);
         }
     });
-    registerStrictTool(server, 'ziggs_task_list', 'List tasks reachable by the acting agent (GET /tasks). Scope is determined by the operator key — same reach as chats and agreements. Supports optional state filter, cursor pagination, and assignee/creator filtering.', {
-        state: z
-            .string()
-            .optional()
-            .describe('Filter by state: active, completed, failed, cancelled'),
-        cursor: z.string().optional().describe('Opaque cursor from prior nextCursor'),
-        limit: z.number().optional().describe('Max rows (default server-side)'),
-        assignedTo: z
-            .string()
-            .optional()
-            .describe('Filter to tasks explicitly assigned to this agent/user id'),
-        assignedToMe: z
-            .boolean()
-            .optional()
-            .describe('Shorthand for assignedTo=<this delegate\'s own agent id>. Takes precedence over assignedTo if both are set.'),
-        createdByMe: z
-            .boolean()
-            .optional()
-            .describe('Tasks YOU created — the work you handed out to others. Check this before delegating: assignedToMe lists only what was handed TO you, so a job you already assigned does not appear there.'),
-    }, readOnly('List tasks'), async ({ state, cursor, limit, assignedTo, assignedToMe, createdByMe }) => {
-        try {
-            const effectiveAssignedTo = assignedToMe ? creds.agentId : assignedTo;
-            const result = await listTasks({
-                state,
-                cursor,
-                limit,
-                assignedTo: effectiveAssignedTo,
-                ...(createdByMe ? { createdBy: creds.agentId } : {}),
-            }, creds);
-            return textResult(result);
-        }
-        catch (e) {
-            return toolError(e);
-        }
-    });
+    registerCapability(server, listTasksCapability, creds);
     registerStrictTool(server, 'ziggs_task_get', 'Fetch a single task by id (GET /tasks/:id). Use this when a human hands you a taskId directly (e.g. "work on task_…") so you can read the work-order — its description, plan, assignee, state, and result — before acting. Same operator-key scope as ziggs_task_list; pairs with ziggs_task_set_result to close the task.', { taskId: z.string() }, readOnly('Read one task'), async ({ taskId }) => {
         try {
             const task = await getTask(taskId, creds);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.14.0",
+    "@ziggs-ai/api-client": "0.14.2",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"