@ziggs-ai/ziggs-mcp 0.36.5 → 0.36.7

package/README.md

@@ -189,7 +189,6 @@ Startup validates the key shape, expiry (JWT `exp`), and agent resolution — er
 | `ziggs_agreement_bid` | `POST /agreements/proposals` — you work, named counterparty pays |
 | `ziggs_agreement_broker` | `POST /agreements/proposals` — a third party provides |
 | `ziggs_agreement_request` | `POST /agreements/proposals` — broadcast; whoever claims does the work |
-| `ziggs_agreement_offer` | marketplace publish — standing listing; you work, the claimer pays |
 | `ziggs_agreement_handoff` | `POST /agreements/proposals` — pass a hire you hold |
 | `ziggs_agreement_respond` | `PUT /agreements/:id/approvals/:partyId` (owner principal; approves direct hire, service, and `link` proposals) |
 | `ziggs_agreement_claim` | `POST /agreements/:id/claim` — claim any open broadcast (request / offer / hand-off / link invite). Listings are take-it-or-leave-it — never counter one |

package/dist/directorySurface.js

@@ -4,7 +4,7 @@ export const DIRECTORY_TOOLS = new Set(`
 ziggs_auth_status ziggs_org_list ziggs_workspace_sync ziggs_context_snapshot
 ziggs_agreement_list ziggs_agreement_get ziggs_chat_list ziggs_chat_open ziggs_chat_send
 ziggs_agreement_buy ziggs_agreement_bid ziggs_agreement_broker ziggs_agreement_request
-ziggs_agreement_offer ziggs_agreement_handoff ziggs_listing_pause ziggs_listing_resume
+ziggs_agreement_handoff
 ziggs_agreement_claim ziggs_agreement_subcontract ziggs_marketplace_view
 ziggs_agreement_respond ziggs_agreement_revoke ziggs_agreement_counter ziggs_agreement_fulfill
 ziggs_inbox_peek ziggs_inbox ziggs_inbox_claim ziggs_inbox_ack
@@ -30,7 +30,7 @@ export const CONNECTION_ONLY_DIRECTORY_TOOLS = new Set(['ziggs_workspace_sync'])
 const OPEN_WORLD = new Set(`
 ziggs_agent_search ziggs_agent_get ziggs_marketplace_view
 ziggs_agreement_buy ziggs_agreement_bid ziggs_agreement_broker ziggs_agreement_request
-ziggs_agreement_offer ziggs_agreement_handoff ziggs_agreement_claim ziggs_agreement_subcontract
+ziggs_agreement_handoff ziggs_agreement_claim ziggs_agreement_subcontract
 ziggs_chat_open ziggs_chat_send ziggs_artifact_share ziggs_artifact_attach
 ziggs_context_issue_grant ziggs_context_delegate ziggs_context_request ziggs_access_request
 ziggs_link_propose ziggs_introduction_mint ziggs_introduction_redeem

package/dist/toolAliases.js

@@ -57,7 +57,6 @@ export const SEARCH_ALIASES = {
         'post a job',
         'hire anyone',
     ],
-    ziggs_agreement_offer: ['advertise', 'publish', 'list', 'listing', 'sell'],
     ziggs_agreement_broker: ['introduce', 'arrange', 'refer'],
     ziggs_agreement_handoff: ['transfer', 'reassign', 'pass on', 'give away'],
     ziggs_agreement_subcontract: ['subcontract', 'delegate a slice', 'under a parent'],

package/dist/toolError.d.ts

@@ -22,6 +22,15 @@ export interface ToolErrorShape {
      * the same shape an open's action recovery has.
      */
     recovery?: Record<string, unknown>;
+    /** hidden | unreadable, the same outcome open and access_explain give. */
+    outcome?: string;
+    /** The resource the outcome is about. */
+    ref?: {
+        kind: string;
+        id: string;
+    };
+    /** For an unreadable resource: the request to make, as open lists it. */
+    actions?: unknown[];
 }
 /**
  * Classify a thrown client error (or a plain string this layer raised) into a
@@ -35,6 +44,26 @@ export declare function classifyToolError(input: unknown): ToolErrorShape;
  * HTTP status and server `code` that decide the hint.
  * A plain string is still accepted for refusals this layer raises on its own.
  */
+/** A refused read, answered as open would: its outcome, and any request to make. */
+export declare function refusalError(refusal: {
+    code: string;
+    message: string;
+    outcome?: string;
+    ref?: {
+        kind: string;
+        id: string;
+    };
+    actions?: unknown[];
+}): {
+    structuredContent: {
+        error: ToolErrorShape;
+    };
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+};
 export declare function toolError(input: unknown): {
     structuredContent: {
         error: ToolErrorShape;

package/dist/toolError.js

@@ -5,6 +5,12 @@
  * `code`, `body` / `message`). No client-prefix strip, no HTTP-status regex,
  * no re-parsing a JSON body that was concatenated into the message string.
  */
+/**
+ * The shared refusal vocabulary every read tool answers in (hidden,
+ * unreadable, invalid input), so an assistant can branch on the code instead
+ * of parsing each tool's sentence.
+ */
+const SHARED_REFUSALS = new Set(['RESOURCE_HIDDEN', 'RESOURCE_UNREADABLE', 'INVALID_INPUT']);
 const SCOPE_DENIED_HINT = 'For missing access to a returned artifact, chat, agreement, or task, use ' +
     'ziggs_access_request with that original resource id and your purpose. It creates ' +
     'a pending access approval agreement; it grants no access. After approval, ' +
@@ -127,6 +133,9 @@ export function classifyToolError(input) {
 }
 function classify(input) {
     const { message, status, code: machineCode } = thrownFields(input);
+    if (machineCode && SHARED_REFUSALS.has(machineCode)) {
+        return { code: machineCode, message };
+    }
     if (machineCode === 'AGENT_LACKS_HUMAN_AUTHORITY') {
         return {
             code: 'AGENT_LACKS_HUMAN_AUTHORITY',
@@ -181,6 +190,17 @@ function classify(input) {
  * HTTP status and server `code` that decide the hint.
  * A plain string is still accepted for refusals this layer raises on its own.
  */
+/** A refused read, answered as open would: its outcome, and any request to make. */
+export function refusalError(refusal) {
+    const shape = { ...refusal };
+    return {
+        structuredContent: { error: shape },
+        content: [
+            { type: 'text', text: JSON.stringify({ error: shape }, null, 2) },
+        ],
+        isError: true,
+    };
+}
 export function toolError(input) {
     const shape = classifyToolError(input);
     return {

package/dist/tools.js

@@ -1,7 +1,7 @@
 import { isDirectorySurface } from './directorySurface.js';
 import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
-import { presentResourceActions, getAgreement, getMyAgreements, listMyChats, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, ContextReadClient, GrantsClient, InboxClient, createTask, updateTaskState, acknowledgeTaskControl, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateSession, GRANTS_CAPABILITIES, AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, openCapability, accessExplainCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, openConversationCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, agreementSubcontractCapability, listTasksCapability, cancelTaskCapability, marketplaceViewCapability, parseListFields, pickListedRows, projectChatListRows, sessionOrientation, presentSendResult, presentTaskOutcome, } from '@ziggs-ai/api-client';
+import { presentResourceActions, getAgreement, getMyAgreements, listMyChats, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, ContextReadClient, GrantsClient, InboxClient, createTask, updateTaskState, acknowledgeTaskControl, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateSession, GRANTS_CAPABILITIES, AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, openCapability, accessExplainCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, openConversationCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, agreementSubcontractCapability, listTasksCapability, cancelTaskCapability, marketplaceViewCapability, parseListFields, pickListedRows, projectChatListRows, sessionOrientation, presentSendResult, presentTaskOutcome, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, } from '@ziggs-ai/api-client';
 import { decodeOperatorKeyClaims } from './operatorKey.js';
 import { registerTrustTools } from './trustTools.js';
 import { registerPaymentTools } from './paymentTools.js';
@@ -12,7 +12,7 @@ import { agreementAppUrl, filterTasksForDelegate, formatPendingDecisionsPayload,
 import { resolveMcpConnectionTarget, withMcpGatewayClient, } from './mcpConnectionTools.js';
 import { readOnly, write, destructive } from './toolAnnotations.js';
 import { registerStrictTool } from './strictParams.js';
-import { toolError } from './toolError.js';
+import { refusalError, toolError } from './toolError.js';
 import { registerCapability, registerCapabilities, textResult, } from './capabilityAdapter.js';
 // the strict artifact write (fail loudly, return the artifactId)
 // moved into ArtifactsClient.writeStrict, shared with the SDK's artifact_record.
@@ -245,7 +245,44 @@ function inboxFor(creds) {
         sessionName: creds.sessionName,
     });
 }
+/** A get the server refused for reach (403) or existence (404). */
+function isReadRefusal(e) {
+    const status = e?.status;
+    return status === 403 || status === 404;
+}
 export function registerZiggsTools(server, creds, cfg) {
+    // A refused get answers as open would: the server's one judgement of
+    // hidden or unreadable, and for unreadable the request to make. When that
+    // judgement cannot be had, the original refusal stands (or, for a get that
+    // returned nothing at all, hidden).
+    const refusedRead = async (kind, id, cause) => {
+        const refusal = await explainRefusedRead(kind, id, {
+            creds,
+            webUrl: cfg.ZIGGS_WEB_URL,
+            surface: 'mcp',
+        });
+        if (refusal)
+            return refusalError(refusal);
+        // No workspace of this connection holds it: the routing guard refused
+        // before the read, and the judgement behind it would be refused the same
+        // way. Not reachable from here reads as hidden, the same as missing.
+        if (cause?.code === 'RESOURCE_NOT_ACCESSIBLE') {
+            return refusalError({
+                code: 'RESOURCE_HIDDEN',
+                message: RESOURCE_HIDDEN_MESSAGE,
+                outcome: 'hidden',
+                ref: { kind, id },
+            });
+        }
+        return cause
+            ? toolError(cause)
+            : refusalError({
+                code: 'RESOURCE_HIDDEN',
+                message: RESOURCE_HIDDEN_MESSAGE,
+                outcome: 'hidden',
+                ref: { kind, id },
+            });
+    };
     // A binding check and nothing else. This used to also report the
     // pending/active counts and point at a separate decisions tool for the card,
     // which is how a session start came to cost three calls that each said some
@@ -359,10 +396,12 @@ export function registerZiggsTools(server, creds, cfg) {
         try {
             const agreement = await getAgreement(agreementId, creds);
             if (!agreement)
-                return toolError(`Agreement not found: ${agreementId}`);
+                return refusedRead('agreement', agreementId);
             return textResult({ agreement });
         }
         catch (e) {
+            if (isReadRefusal(e))
+                return refusedRead('agreement', agreementId, e);
             return toolError(e);
         }
     });
@@ -458,8 +497,7 @@ export function registerZiggsTools(server, creds, cfg) {
     registerCapabilities(server, AGREEMENT_VERB_CAPABILITIES, creds, {
         webUrl: cfg.ZIGGS_WEB_URL,
     });
-    // The publisher's own door on a listing it already holds: pause and resume.
-    // Apart from the verbs above because they form nothing.
+    // Pause and resume are not on this surface. The array is empty.
     registerCapabilities(server, LISTING_DOOR_CAPABILITIES, creds);
     registerCapability(server, agreementClaimCapability, creds, {
         webUrl: cfg.ZIGGS_WEB_URL,
@@ -1027,10 +1065,12 @@ export function registerZiggsTools(server, creds, cfg) {
         try {
             const task = await getTask(taskId, creds);
             if (!task)
-                return toolError(`Task not found: ${taskId}`);
+                return refusedRead('task', taskId);
             return textResult({ task });
         }
         catch (e) {
+            if (isReadRefusal(e))
+                return refusedRead('task', taskId, e);
             return toolError(e);
         }
     });

package/dist/workspaceRouting.js

@@ -162,12 +162,22 @@ export class WorkspaceRouter {
                 return this.run(workspaces[0], args, extra, invoke, false);
             }
             if (readOnly && workspaces.length > 1) {
-                const results = await Promise.all(workspaces.map(async (w) => ({
-                    orgId: w.orgId,
-                    name: w.name,
-                    result: parsed(await this.run(w, args, extra, invoke, false)),
-                })));
-                return result({ workspaces: results });
+                const runs = await Promise.all(workspaces.map(async (w) => ({ workspace: w, raw: await this.run(w, args, extra, invoke, false) })));
+                // The same refusal from every workspace is one refusal: a bad input is
+                // bad everywhere, and splitting it per workspace made an error read as
+                // a success-shaped answer.
+                const first = runs[0].raw;
+                if (first.isError &&
+                    runs.every((r) => r.raw.isError && r.raw.content[0]?.text === first.content[0]?.text)) {
+                    return first;
+                }
+                return result({
+                    workspaces: runs.map((r) => ({
+                        orgId: r.workspace.orgId,
+                        name: r.workspace.name,
+                        result: parsed(r.raw),
+                    })),
+                });
             }
             if (workspaces.length === 1)
                 return this.run(workspaces[0], args, extra, invoke);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.36.5",
+  "version": "0.36.7",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -40,7 +40,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.36.3",
+    "@ziggs-ai/api-client": "0.36.4",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"