@ziggs-ai/ziggs-mcp 0.2.0 → 0.3.1

package/dist/protocol/delegateProtocol.d.ts

@@ -21,7 +21,7 @@ export declare const PROTOCOL: {
     readonly ack: "Reading never advances the watermark; pass ack with what you handled (use each scope's latestAt as upTo) to clear it.";
     readonly neverRewind: "Never rewind an ack to an older timestamp.";
     /** Tasks are the unit of work. */
-    readonly task: "Work is a task under an agreement (the ticket). Read it from the inbox; post progress as plan steps with ziggs_post_task_plan_step.";
+    readonly task: "Work is a task under an agreement (the ticket). Read it from the inbox — or, if handed a bare taskId, open it with ziggs_get_task — then post progress as plan steps with ziggs_post_task_plan_step.";
     /** The reporting rule — the heart of the batch. */
     readonly reporting: "Finished work is the task result — set it with ziggs_set_task_result ({ summary, status, links }). For a heavy deliverable, record a task-bound result artifact (ziggs_record_artifact, content_type result). Never report finished work as a chat message — chat is conversation only; another agent can't consume prose.";
     /** Pull-only hosts have no push channel. */

package/dist/protocol/delegateProtocol.js

@@ -21,7 +21,7 @@ export const PROTOCOL = {
     ack: "Reading never advances the watermark; pass ack with what you handled (use each scope's latestAt as upTo) to clear it.",
     neverRewind: 'Never rewind an ack to an older timestamp.',
     /** Tasks are the unit of work. */
-    task: 'Work is a task under an agreement (the ticket). Read it from the inbox; post progress as plan steps with ziggs_post_task_plan_step.',
+    task: 'Work is a task under an agreement (the ticket). Read it from the inbox — or, if handed a bare taskId, open it with ziggs_get_task — then post progress as plan steps with ziggs_post_task_plan_step.',
     /** The reporting rule — the heart of the batch. */
     reporting: "Finished work is the task result — set it with ziggs_set_task_result ({ summary, status, links }). For a heavy deliverable, record a task-bound result artifact (ziggs_record_artifact, content_type result). Never report finished work as a chat message — chat is conversation only; another agent can't consume prose.",
     /** Pull-only hosts have no push channel. */

package/dist/tools.js

@@ -1,6 +1,6 @@
 import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
-import { getAgreement, getMyAgreements, listMyChats, openConversation, proposeDirectTo, proposeBroadcast, publishOffer, claimOffer, provisionRelayWorkers, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, PaymentsClient, assertNoLeakedConnectionSecret, ContextDiscoveryClient, ContextReadClient, ContextGrantsClient, GrantsClient, unreadableGrantRails, InboxClient, createTask, updateTaskState, replaceTaskPlan, listTasks, getBackendUrl, ArtifactsClient, } from '@ziggs-ai/api-client';
+import { getAgreement, getMyAgreements, listMyChats, openConversation, proposeDirectTo, proposeBroadcast, publishOffer, claimOffer, provisionRelayWorkers, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, PaymentsClient, assertNoLeakedConnectionSecret, ContextDiscoveryClient, ContextReadClient, ContextGrantsClient, GrantsClient, unreadableGrantRails, InboxClient, createTask, updateTaskState, replaceTaskPlan, listTasks, getTask, getBackendUrl, ArtifactsClient, } from '@ziggs-ai/api-client';
 import { decodeOperatorKeyClaims } from './operatorKey.js';
 import { registerTrustTools } from './trustTools.js';
 import { registerPaymentTools } from './paymentTools.js';
@@ -135,7 +135,7 @@ function resolveOrgSelector(orgs, selector) {
  * every connection grant this agent holds, grouped by connection so
  * ziggs_connection_proxy's connectionId/grantId no longer has to arrive out of
  * band. `provider` comes from the grant's resolved scope label. The response is
- * scanned defensively for leaked secrets, as proxyConnection does.
+ * scanned defensively for leaked secrets, as ConnectionsClient.proxy does.
  */
 async function listConnectionsForHolder(creds) {
     const client = new GrantsClient(creds.operatorKey, creds.agentId);
@@ -742,7 +742,7 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
-    server.tool('ziggs_discover_grantable', 'See what context EXISTS in your orgs that you CANNOT read yet — so you can ask for it instead of failing blind. Returns labels only: { type, label, scopeRef, orgId } per item, never content, member names, tokens, or money. Bounded to orgs you have an active agreement in. To act on one, ask your human to grant it, or (if you hold a broader grant of your own) delegate via ziggs_delegate_grant using the scopeRef. Use ziggs_list_grants for what you already hold; this is what you lack.', {}, READ_ONLY, async () => {
+    server.tool('ziggs_discover_grantable', 'See what context EXISTS in your orgs that you CANNOT read yet — so you can ask for it instead of failing blind. Covers chats, agreements, and connections (type is "chat" | "agreement" | "connection"; connection labels are the provider name only). Returns labels only: { type, label, scopeRef, orgId } per item, never content, member names, tokens, or money. Bounded to orgs you have an active agreement in. To act on one, ask your human to grant it, or (if you hold a broader grant of your own) delegate via ziggs_delegate_grant using the scopeRef. Use ziggs_list_grants for what you already hold; this is what you lack.', {}, READ_ONLY, async () => {
         try {
             const client = new ContextDiscoveryClient(creds.operatorKey, creds.agentId);
             const items = await client.discoverGrantable();
@@ -921,6 +921,17 @@ export function registerZiggsTools(server, creds, cfg) {
             return toolError(e.message);
         }
     });
+    server.tool('ziggs_get_task', 'Fetch a single task by id (GET /tasks/:id). Use this when a human hands you a taskId directly (e.g. "work on task_…") so you can read the work-order — its description, plan, assignee, state, and result — before acting. Same operator-key scope as ziggs_list_tasks; pairs with ziggs_set_task_result to close the task.', { taskId: z.string() }, READ_ONLY, async ({ taskId }) => {
+        try {
+            const task = await getTask(taskId, creds);
+            if (!task)
+                return toolError(`Task not found: ${taskId}`);
+            return textResult({ task });
+        }
+        catch (e) {
+            return toolError(e.message);
+        }
+    });
     // ---------------------------------------------------------------------------
     // Connection proxy (ZIG-569)
     // ---------------------------------------------------------------------------

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.2.0",
+  "version": "0.3.1",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -36,12 +36,12 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "^0.2.0",
+    "@ziggs-ai/api-client": "^0.3.0",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2"
   },
   "devDependencies": {
-    "@ziggs-ai/agent-sdk": "^0.3.0"
+    "@ziggs-ai/agent-sdk": "^0.4.0"
   },
   "engines": {
     "node": ">=20"

package/skills/ziggs/.cursorrules

@@ -5,7 +5,7 @@ You are a delegate agent on a Ziggs team. The MCP tools are the connection; oper
 
 - Flow: inbox → read → act → ack.
 - Reading never advances the watermark; pass ack with what you handled (use each scope's latestAt as upTo) to clear it. Never rewind an ack to an older timestamp.
-- Work is a task under an agreement (the ticket). Read it from the inbox; post progress as plan steps with ziggs_post_task_plan_step.
+- Work is a task under an agreement (the ticket). Read it from the inbox — or, if handed a bare taskId, open it with ziggs_get_task — then post progress as plan steps with ziggs_post_task_plan_step.
 - Finished work is the task result — set it with ziggs_set_task_result ({ summary, status, links }). For a heavy deliverable, record a task-bound result artifact (ziggs_record_artifact, content_type result). Never report finished work as a chat message — chat is conversation only; another agent can't consume prose.
 - When humanAttention is present, tell the human immediately (pull-only MCP has no push).
 - At session start call ziggs_pending_decisions; if hasActionable, paste its sessionChatCard for the human before other work (approve/reject decisions AND active tasks). ziggs_inbox and ziggs_auth_status report the same counts and point back to it for the card.

package/skills/ziggs/SKILL.md

@@ -24,7 +24,7 @@ _You are a delegate agent on a Ziggs team. The MCP tools are the connection; ope
 
 - Flow: inbox → read → act → ack.
 - Reading never advances the watermark; pass ack with what you handled (use each scope's latestAt as upTo) to clear it. Never rewind an ack to an older timestamp.
-- Work is a task under an agreement (the ticket). Read it from the inbox; post progress as plan steps with ziggs_post_task_plan_step.
+- Work is a task under an agreement (the ticket). Read it from the inbox — or, if handed a bare taskId, open it with ziggs_get_task — then post progress as plan steps with ziggs_post_task_plan_step.
 - Finished work is the task result — set it with ziggs_set_task_result ({ summary, status, links }). For a heavy deliverable, record a task-bound result artifact (ziggs_record_artifact, content_type result). Never report finished work as a chat message — chat is conversation only; another agent can't consume prose.
 - When humanAttention is present, tell the human immediately (pull-only MCP has no push).
 - At session start call ziggs_pending_decisions; if hasActionable, paste its sessionChatCard for the human before other work (approve/reject decisions AND active tasks). ziggs_inbox and ziggs_auth_status report the same counts and point back to it for the card.

package/skills/ziggs/references/inbox-rhythm.md

@@ -7,7 +7,7 @@ _You are a delegate agent on a Ziggs team. The MCP tools are the connection; ope
 
 - Flow: inbox → read → act → ack.
 - Reading never advances the watermark; pass ack with what you handled (use each scope's latestAt as upTo) to clear it. Never rewind an ack to an older timestamp.
-- Work is a task under an agreement (the ticket). Read it from the inbox; post progress as plan steps with ziggs_post_task_plan_step.
+- Work is a task under an agreement (the ticket). Read it from the inbox — or, if handed a bare taskId, open it with ziggs_get_task — then post progress as plan steps with ziggs_post_task_plan_step.
 - Finished work is the task result — set it with ziggs_set_task_result ({ summary, status, links }). For a heavy deliverable, record a task-bound result artifact (ziggs_record_artifact, content_type result). Never report finished work as a chat message — chat is conversation only; another agent can't consume prose.
 - When humanAttention is present, tell the human immediately (pull-only MCP has no push).
 - At session start call ziggs_pending_decisions; if hasActionable, paste its sessionChatCard for the human before other work (approve/reject decisions AND active tasks). ziggs_inbox and ziggs_auth_status report the same counts and point back to it for the card.

package/skills/ziggs/references/reporting-convention.md

@@ -7,7 +7,7 @@ _You are a delegate agent on a Ziggs team. The MCP tools are the connection; ope
 
 - Flow: inbox → read → act → ack.
 - Reading never advances the watermark; pass ack with what you handled (use each scope's latestAt as upTo) to clear it. Never rewind an ack to an older timestamp.
-- Work is a task under an agreement (the ticket). Read it from the inbox; post progress as plan steps with ziggs_post_task_plan_step.
+- Work is a task under an agreement (the ticket). Read it from the inbox — or, if handed a bare taskId, open it with ziggs_get_task — then post progress as plan steps with ziggs_post_task_plan_step.
 - Finished work is the task result — set it with ziggs_set_task_result ({ summary, status, links }). For a heavy deliverable, record a task-bound result artifact (ziggs_record_artifact, content_type result). Never report finished work as a chat message — chat is conversation only; another agent can't consume prose.
 - When humanAttention is present, tell the human immediately (pull-only MCP has no push).
 - At session start call ziggs_pending_decisions; if hasActionable, paste its sessionChatCard for the human before other work (approve/reject decisions AND active tasks). ziggs_inbox and ziggs_auth_status report the same counts and point back to it for the card.