@ziggs-ai/ziggs-mcp 0.36.2 → 0.36.3

package/dist/config.d.ts

@@ -30,6 +30,17 @@ declare const envSchema: z.ZodObject<{
      * its process is its host.
      */
     ZIGGS_INSTANCE_ID: z.ZodOptional<z.ZodString>;
+    /**
+     * Workspaces this window reads, comma-separated org ids. Sent as
+     * `X-Ziggs-Workspaces`. Unset reads everything the assistant may read.
+     * A hosted connection sets the header on the MCP request instead; this
+     * process serves every window, so it must not take the list from the env.
+     */
+    ZIGGS_WORKSPACES: z.ZodOptional<z.ZodString>;
+    /** Label on the assistant page, such as "Claude Code". */
+    ZIGGS_APP: z.ZodOptional<z.ZodString>;
+    /** Person-readable window name. Unset becomes the app plus the time. */
+    ZIGGS_SESSION_NAME: z.ZodOptional<z.ZodString>;
     /** Set to 1/true/yes to register internal/debug-only MCP tools. */
     ZIGGS_MCP_DEBUG: z.ZodOptional<z.ZodString>;
     /**
@@ -47,6 +58,9 @@ declare const envSchema: z.ZodObject<{
     ZIGGS_OWNER_USER_ID?: string | undefined;
     ZIGGS_LANE_ID?: string | undefined;
     ZIGGS_INSTANCE_ID?: string | undefined;
+    ZIGGS_WORKSPACES?: string | undefined;
+    ZIGGS_APP?: string | undefined;
+    ZIGGS_SESSION_NAME?: string | undefined;
     ZIGGS_MCP_DEBUG?: string | undefined;
     ZIGGS_MCP_CORE_ONLY?: string | undefined;
 }, {
@@ -58,6 +72,9 @@ declare const envSchema: z.ZodObject<{
     ZIGGS_OWNER_USER_ID?: string | undefined;
     ZIGGS_LANE_ID?: string | undefined;
     ZIGGS_INSTANCE_ID?: string | undefined;
+    ZIGGS_WORKSPACES?: string | undefined;
+    ZIGGS_APP?: string | undefined;
+    ZIGGS_SESSION_NAME?: string | undefined;
     ZIGGS_MCP_DEBUG?: string | undefined;
     ZIGGS_MCP_CORE_ONLY?: string | undefined;
 }>;

package/dist/config.js

@@ -32,6 +32,17 @@ const envSchema = z.object({
      * its process is its host.
      */
     ZIGGS_INSTANCE_ID: z.string().optional(),
+    /**
+     * Workspaces this window reads, comma-separated org ids. Sent as
+     * `X-Ziggs-Workspaces`. Unset reads everything the assistant may read.
+     * A hosted connection sets the header on the MCP request instead; this
+     * process serves every window, so it must not take the list from the env.
+     */
+    ZIGGS_WORKSPACES: z.string().optional(),
+    /** Label on the assistant page, such as "Claude Code". */
+    ZIGGS_APP: z.string().optional(),
+    /** Person-readable window name. Unset becomes the app plus the time. */
+    ZIGGS_SESSION_NAME: z.string().optional(),
     /** Set to 1/true/yes to register internal/debug-only MCP tools. */
     ZIGGS_MCP_DEBUG: z.string().optional(),
     /**
@@ -59,6 +70,9 @@ export function loadConfig() {
         ZIGGS_OWNER_USER_ID: process.env.ZIGGS_OWNER_USER_ID,
         ZIGGS_LANE_ID: process.env.ZIGGS_LANE_ID,
         ZIGGS_INSTANCE_ID: process.env.ZIGGS_INSTANCE_ID,
+        ZIGGS_WORKSPACES: process.env.ZIGGS_WORKSPACES,
+        ZIGGS_APP: process.env.ZIGGS_APP,
+        ZIGGS_SESSION_NAME: process.env.ZIGGS_SESSION_NAME,
         ZIGGS_MCP_DEBUG: process.env.ZIGGS_MCP_DEBUG,
         ZIGGS_MCP_CORE_ONLY: process.env.ZIGGS_MCP_CORE_ONLY,
     };

package/dist/connectionCreds.d.ts

@@ -10,7 +10,12 @@ export declare function parseBearerAuthorization(header: string | string[] | und
  * a person who pasted their key, wrong for a delegate holding grants its
  * customer gave.
  */
-export declare function connectionFromBearer(bearer: string, httpBaseUrl: string, ownerUserId?: string, laneId?: string): {
+export declare function connectionFromBearer(bearer: string, httpBaseUrl: string, ownerUserId?: string, laneId?: string, session?: {
+    clientSessionId?: string;
+    workspaceIds?: string;
+    app?: string;
+    sessionName?: string;
+}): {
     creds: Creds;
     cfg: ZiggsMcpConfig;
 };

package/dist/connectionCreds.js

@@ -20,7 +20,7 @@ export function parseBearerAuthorization(header) {
  * a person who pasted their key, wrong for a delegate holding grants its
  * customer gave.
  */
-export function connectionFromBearer(bearer, httpBaseUrl, ownerUserId, laneId) {
+export function connectionFromBearer(bearer, httpBaseUrl, ownerUserId, laneId, session) {
     const resolvedAgentId = resolveDelegateAgentId(bearer, undefined);
     if (httpBaseUrl) {
         process.env.HTTP_URL = httpBaseUrl;
@@ -61,6 +61,10 @@ export function connectionFromBearer(bearer, httpBaseUrl, ownerUserId, laneId) {
             agentId: resolvedAgentId,
             ...(laneId ? { laneId } : {}),
             ...(instanceId ? { instanceId } : {}),
+            ...(session?.clientSessionId ? { clientSessionId: session.clientSessionId } : {}),
+            ...(session?.workspaceIds ? { workspaceIds: session.workspaceIds } : {}),
+            ...(session?.app ? { app: session.app } : {}),
+            ...(session?.sessionName ? { sessionName: session.sessionName } : {}),
         },
         cfg,
     };

package/dist/creds.js

@@ -10,5 +10,8 @@ export function credsFromConfig(cfg) {
         // stays up and wrong for one a scheduler respawns per run — that one pins
         // ZIGGS_INSTANCE_ID so every run is the same host.
         ...(cfg.ZIGGS_INSTANCE_ID ? { instanceId: cfg.ZIGGS_INSTANCE_ID } : {}),
+        ...(cfg.ZIGGS_WORKSPACES ? { workspaceIds: cfg.ZIGGS_WORKSPACES } : {}),
+        ...(cfg.ZIGGS_APP ? { app: cfg.ZIGGS_APP } : {}),
+        ...(cfg.ZIGGS_SESSION_NAME ? { sessionName: cfg.ZIGGS_SESSION_NAME } : {}),
     };
 }

package/dist/tools.js

@@ -237,6 +237,14 @@ function registerConnectionTools(server, creds, cfg) {
     });
     registerCapability(server, requestConnectionCapability, creds);
 }
+function inboxFor(creds) {
+    return new InboxClient(creds.operatorKey, creds.agentId, undefined, creds.instanceId, {
+        clientSessionId: creds.clientSessionId,
+        workspaceIds: creds.workspaceIds,
+        app: creds.app,
+        sessionName: creds.sessionName,
+    });
+}
 export function registerZiggsTools(server, creds, cfg) {
     // A binding check and nothing else. This used to also report the
     // pending/active counts and point at a separate decisions tool for the card,
@@ -548,7 +556,7 @@ export function registerZiggsTools(server, creds, cfg) {
             .describe('Hold up to this many seconds (the server clamps a hold at about 110) and return as soon as assigned mail exists. Omit for an immediate count. Still does not take the lease. To wait for a reply your person asked about, call ziggs_inbox with waitSeconds: 55 instead, since only the full read returns the mail.'),
     }, readOnly('Peek inbox count without taking the mailbox'), async ({ waitSeconds }) => {
         try {
-            const client = new InboxClient(creds.operatorKey, creds.agentId, undefined, creds.instanceId);
+            const client = inboxFor(creds);
             const [bindingSettled, readsSettled, peekSettled] = await Promise.allSettled([
                 loadSessionBinding(creds, cfg),
                 loadSessionReads(creds),
@@ -609,7 +617,7 @@ export function registerZiggsTools(server, creds, cfg) {
         try {
             // Unset on stdio: that process IS the host, and a scheduler that
             // respawns it per run pins ZIGGS_INSTANCE_ID instead.
-            const client = new InboxClient(creds.operatorKey, creds.agentId, undefined, creds.instanceId);
+            const client = inboxFor(creds);
             // A cold call is the session start, and its extra reads — the binding
             // and the active-task rows — take nothing from the envelope. Started
             // here, they ride the same wave as the inbox fetch
@@ -707,7 +715,7 @@ export function registerZiggsTools(server, creds, cfg) {
     if (isDirectorySurface(server)) {
         registerStrictTool(server, 'ziggs_inbox_claim', {}, destructive('Claim the inbox for this worker'), async () => {
             try {
-                const client = new InboxClient(creds.operatorKey, creds.agentId, undefined, creds.instanceId);
+                const client = inboxFor(creds);
                 return compactTextResult(await client.getInbox());
             }
             catch (e) {
@@ -732,7 +740,7 @@ export function registerZiggsTools(server, creds, cfg) {
         try {
             // Same host identity as the read: acking renews an owner, and only a
             // read acquires one.
-            const client = new InboxClient(creds.operatorKey, creds.agentId, undefined, creds.instanceId);
+            const client = inboxFor(creds);
             const acked = await client.ackOrTakeHost(ack, {
                 handledResourceIds: handledResourceIds ?? [],
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.36.2",
+  "version": "0.36.3",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -40,7 +40,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.36.0",
+    "@ziggs-ai/api-client": "0.36.1",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"