@ziggs-ai/ziggs-mcp 0.36.1 → 0.36.2

package/dist/inboxCompact.d.ts

@@ -17,7 +17,10 @@
  *   which `ziggs_auth_status` returns in full;
  * - a read step's `why` that only restates its tool and args, and the ack
  *   step's long one, whose ids are the step's own args;
- * - an `outOfReach` entry's scope and remedy, which its delivery row carries.
+ * - an `outOfReach` entry's scope and remedy, which its delivery row carries;
+ * - `sessionCardHint` ("the card is not in this response") when the card is.
+ *   Both doors assemble the session start from the long-poll result plus the
+ *   card, and the long-poll half's hint said the opposite of what followed.
  *
  * Acknowledgement stays exact: every `ackTo` — the envelope's, each row's and
  * the ack step's — is passed through byte for byte.

package/dist/inboxCompact.js

@@ -17,7 +17,10 @@
  *   which `ziggs_auth_status` returns in full;
  * - a read step's `why` that only restates its tool and args, and the ack
  *   step's long one, whose ids are the step's own args;
- * - an `outOfReach` entry's scope and remedy, which its delivery row carries.
+ * - an `outOfReach` entry's scope and remedy, which its delivery row carries;
+ * - `sessionCardHint` ("the card is not in this response") when the card is.
+ *   Both doors assemble the session start from the long-poll result plus the
+ *   card, and the long-poll half's hint said the opposite of what followed.
  *
  * Acknowledgement stays exact: every `ackTo` — the envelope's, each row's and
  * the ack step's — is passed through byte for byte.
@@ -92,6 +95,8 @@ export function compactInboxResult(result) {
             if (isRecord(s))
                 kindOfParty.set(String(s.partyId), s.partyKind);
     const out = { ...result };
+    if (typeof result.sessionChatCard === 'string' && result.sessionChatCard)
+        delete out.sessionCardHint;
     if (Array.isArray(result.deliveries)) {
         const usual = usualPartyOf(result.deliveries);
         if (usual !== undefined)
@@ -149,13 +154,16 @@ export function windowNote(deliveries, selfAgentIds, outOfReach) {
     const mine = rows.filter((d) => selfAgentIds.includes(String(d.assigneeId))).length;
     const person = rows.filter((d) => !d.assigneeId && d.needsHuman === true).length;
     const others = rows.filter((d) => d.assigneeId && !selfAgentIds.includes(String(d.assigneeId))).length;
+    // Rows nobody is asked to handle (no assignee, not the person's) are context.
+    const context = rows.length - mine - person - others;
     const n = (k, one, many) => `${k} ${k === 1 ? one : many}`;
     const parts = [n(mine, 'is assigned to you', 'are assigned to you')];
     if (person)
         parts.push(`${person} ${person === 1 ? 'needs' : 'need'} your person`);
     if (others)
         parts.push(`${others} ${others === 1 ? 'is' : 'are'} for other assistants`);
-    if (outOfReach)
-        parts.push(`${outOfReach} out of reach`);
-    return `Those counts are decisions and tasks, not messages. This window has ${n(rows.length, 'delivery', 'deliveries')}: ${parts.join(', ')}.`;
+    if (context)
+        parts.push(`${context} ${context === 1 ? 'is' : 'are'} context`);
+    const reach = outOfReach ? ` ${outOfReach} of them ${outOfReach === 1 ? 'is' : 'are'} out of reach.` : '';
+    return `Those counts are decisions and tasks, not messages. This window has ${n(rows.length, 'delivery', 'deliveries')}: ${parts.join(', ')}.${reach}`;
 }

package/dist/protocol/connectText.d.ts

@@ -18,4 +18,10 @@
  * .cursorrules, which a client loads when it chooses to.
  */
 export type ConnectDoor = 'directory' | 'compact';
+/**
+ * The rules a directory client must see even when it never shows the model
+ * the server's instructions (claude.ai does not). Carried on the session-start
+ * inbox read, the first call an agent makes, in the same words as above.
+ */
+export declare function sessionRules(door: ConnectDoor): string[];
 export declare function renderConnectText(door: ConnectDoor): string;

package/dist/protocol/connectText.js

@@ -32,6 +32,14 @@ const RULES = [
     'A send refused with WORK_SELECTION_REQUIRED lists choices: set conversationAgreementId to one of them; never guess.',
     'Agreement and task writes can reserve or settle points. After an uncertain write, read the record, then retry with the same idempotencyKey.',
 ];
+/**
+ * The rules a directory client must see even when it never shows the model
+ * the server's instructions (claude.ai does not). Carried on the session-start
+ * inbox read, the first call an agent makes, in the same words as above.
+ */
+export function sessionRules(door) {
+    return [DATA, INBOX[door]];
+}
 const CATALOG = 'Only the everyday tools are loaded. ziggs_tools lists the rest; call them through ziggs_tool_read or ziggs_tool_write.';
 export function renderConnectText(door) {
     return [

package/dist/strictParams.d.ts

@@ -13,6 +13,8 @@ import type { TitledAnnotations } from './toolAnnotations.js';
  * against. So every tool schema is built strict, and the rejection names both
  * the offending key and the params the tool actually accepts.
  */
+/** The workspace parameter the router adds to a tool that acts in one. */
+export declare const WORKSPACE_PARAM = "Workspace orgId, when more than one fits.";
 export type StrictShape<S extends ZodRawShape> = ZodObject<S, 'strict', z.ZodTypeAny>;
 export declare function strictParams<S extends ZodRawShape>(toolName: string, shape: S): StrictShape<S>;
 /**

package/dist/strictParams.js

@@ -4,6 +4,20 @@ import { workspaceRouter } from './workspaceRouting.js';
 import { mcpDescription } from '@ziggs-ai/api-client';
 import { z } from 'zod';
 import { recordCatalogEntry } from './toolCatalog.js';
+/**
+ * registering a tool with a plain `ZodRawShape` lets the MCP SDK
+ * wrap it in a default `z.object()`, which *strips* unknown keys instead of
+ * rejecting them. A misspelled param (`nweChat` for `newChat`) was therefore
+ * dropped and the call ran anyway, reporting success for the opposite of what
+ * the caller asked for.
+ *
+ * A human typing that into a form gets a red field; an agent got silence, and
+ * silence reads as confirmation — there was no feedback loop to self-correct
+ * against. So every tool schema is built strict, and the rejection names both
+ * the offending key and the params the tool actually accepts.
+ */
+/** The workspace parameter the router adds to a tool that acts in one. */
+export const WORKSPACE_PARAM = 'Workspace orgId, when more than one fits.';
 export function strictParams(toolName, shape) {
     const accepted = Object.keys(shape);
     return z
@@ -58,8 +72,11 @@ export function registerStrictTool(server, name, shape, annotations, cb) {
     const router = workspaceRouter(server);
     const nativeOrgId = !!shape.orgId;
     if (router) {
+        // Said once per tool and kept short: it rides on most of the surface. Which
+        // workspace to use is taught where it matters — the refusal for a call that
+        // needs one lists the choices and says to ask the person.
         if (router.acceptsWorkspace(name))
-            shape = { ...shape, orgId: shape.orgId?.optional() ?? z.string().optional().describe('Workspace named by your human. Required for new actions when more than one workspace fits.') };
+            shape = { ...shape, orgId: shape.orgId?.optional() ?? z.string().optional().describe(WORKSPACE_PARAM) };
         cb = router.wrap(name, annotations.readOnlyHint === true, cb, nativeOrgId);
     }
     const routed = cb;

package/dist/tools.js

@@ -7,6 +7,7 @@ import { registerTrustTools } from './trustTools.js';
 import { registerPaymentTools } from './paymentTools.js';
 import { formatInboxToolResult, buildReadContextReadPlan, } from './inboxToolResult.js';
 import { compactTextResult, windowNote } from './inboxCompact.js';
+import { sessionRules } from './protocol/connectText.js';
 import { agreementAppUrl, filterTasksForDelegate, formatPendingDecisionsPayload, resolveWebAppOrigin, } from './pendingDecisions.js';
 import { resolveMcpConnectionTarget, withMcpGatewayClient, } from './mcpConnectionTools.js';
 import { readOnly, write, destructive } from './toolAnnotations.js';
@@ -676,6 +677,9 @@ export function registerZiggsTools(server, creds, cfg) {
                 ...news,
                 session,
                 ...actions,
+                // A directory host may never show the model the server's
+                // instructions; the session-start read is the one place it looks.
+                ...(isDirectorySurface(server) ? { rules: sessionRules('directory') } : {}),
                 ...(note && typeof actions.notice === 'string'
                     ? { notice: `${actions.notice} ${note}` }
                     : {}),

package/dist/workspaceRouting.js

@@ -3,6 +3,7 @@ import { AsyncLocalStorage } from 'node:async_hooks';
 import { AssistantConnectionClient, withAssistantRequest, decodeOperatorKeyClaims, } from '@ziggs-ai/api-client';
 import { formatInboxToolResult } from './inboxToolResult.js';
 import { compactTextResult, windowNote } from './inboxCompact.js';
+import { sessionRules } from './protocol/connectText.js';
 import { formatPendingDecisionsPayload, resolveWebAppOrigin } from './pendingDecisions.js';
 const routers = new WeakMap();
 /** The catalog and its dispatchers: they reach other tools, which route themselves. */
@@ -207,6 +208,7 @@ export class WorkspaceRouter {
                 return compactTextResult({
                     ...news,
                     ...pending,
+                    ...(name === 'ziggs_inbox' && args.waitSeconds == null ? { rules: sessionRules('directory') } : {}),
                     ...(note && typeof pending.notice === 'string' ? { notice: `${pending.notice} ${note}` } : {}),
                     session: { workspaces },
                     instruction: `Assigned to any of agentIds is your work. ${ASK_YOUR_HUMAN}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.36.1",
+  "version": "0.36.2",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -27,6 +27,7 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.json && chmod +x dist/index.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
     "prepack": "rm -rf dist && npm run build",
     "start": "node dist/index.js",
     "dev": "tsx src/index.ts",