@ziggs-ai/ziggs-mcp 0.37.1 → 0.37.3

package/dist/config.d.ts

@@ -107,6 +107,13 @@ export interface ZiggsMcpConfig extends EnvConfig {
      * call may do: every call is still authorized by the backend.
      */
     directConnection: boolean;
+    /**
+     * The serving backend delivers `ziggs.inbox.updated` events to hosts that
+     * subscribe (its `MCP_EVENTS_ENABLED`). Only the remote server knows, so it
+     * sets this; stdio leaves it unset. Adds one rule to the directory door's
+     * connect text, inside that text's budget.
+     */
+    eventsEnabled?: boolean;
 }
 /** Load delegate credentials from the environment. */
 export declare function loadConfig(): ZiggsMcpConfig;

package/dist/protocol/connectText.d.ts

@@ -24,4 +24,8 @@ export type ConnectDoor = 'directory' | 'compact';
  * inbox read, the first call an agent makes, in the same words as above.
  */
 export declare function sessionRules(door: ConnectDoor): string[];
-export declare function renderConnectText(door: ConnectDoor): string;
+export interface ConnectTextOptions {
+    /** The serving backend delivers `ziggs.inbox.updated` events. */
+    events?: boolean;
+}
+export declare function renderConnectText(door: ConnectDoor, options?: ConnectTextOptions): string;

package/dist/protocol/connectText.js

@@ -47,12 +47,21 @@ export function sessionRules(door) {
     return [DATA, INBOX[door], WAIT, ACCESS, REPLY, GROUNDING];
 }
 const CATALOG = 'Only the everyday tools are loaded. ziggs_tools lists the rest; call them through ziggs_tool_read or ziggs_tool_write.';
-export function renderConnectText(door) {
+/**
+ * Directory door only: inbox events ride the connection key that door is
+ * minted for. Said only when the serving backend has events on, so a host is
+ * never told to subscribe where nothing answers. Lives here, inside the
+ * budget the tests enforce, rather than appended by the backend after the
+ * text was already sized: that append is what cut the text mid-word.
+ */
+const EVENTS = 'Inbox events: a host may subscribe to ziggs.inbox.updated per workspace; promise alerts only once it confirms. An event carries only orgId: read that inbox and follow its rules.';
+export function renderConnectText(door, options = {}) {
     return [
         `- ${DATA}`,
         `- ${SESSION}`,
         `- ${INBOX[door]}`,
         ...RULES.map((r) => `- ${r}`),
         ...(door === 'compact' ? [`- ${CATALOG}`] : []),
+        ...(door === 'directory' && options.events ? [`- ${EVENTS}`] : []),
     ].join('\n');
 }

package/dist/server.js

@@ -23,7 +23,9 @@ export function createZiggsMcpServer(creds, cfg) {
         // this into model context on `initialize`: the short connect text, the
         // same for every client — clients truncate a long one. Covers
         // stdio and remote HTTP alike, since both build the server here.
-        instructions: renderConnectText(cfg.directConnection === false ? 'directory' : 'compact'),
+        instructions: renderConnectText(cfg.directConnection === false ? 'directory' : 'compact', {
+            events: cfg.eventsEnabled === true,
+        }),
     });
     if (cfg.directConnection === false)
         installDirectorySurface(server);

package/dist/tools.js

@@ -436,7 +436,7 @@ export function registerZiggsTools(server, creds, cfg) {
         receiverId: z
             .string()
             .optional()
-            .describe("Receiver id for the message. Leave it out to write back in this room, and name someone only when you mean them. To name a masked party, pass its `rpb_` ref as it came; do not look it up, wake it, or pay against it. With one other participant, they are the recipient. With several, Jev may select one when confident. Otherwise the message stays in the room with no specific wake. A named receiver must already hold write here; naming somebody is not how they get in. Pass 'human' to address the people in the room."),
+            .describe("Receiver id for the message. Leave it out to write back in this room, and name someone only when you mean them. To name a masked party, pass its `rpb_` ref as it came; do not look it up, wake it, or pay against it. With one other participant, they are the recipient. With several, Jev may select one when confident. Otherwise the message stays in the room with no specific wake. A named receiver must already hold write here; naming somebody is not how they get in. Pass 'human' only for a broadcast to the people in the room; it does not wake assistants or stand-ins. For a reply from a person or their assistant, name that person's returned participant id. This does not grant their assistant access or guarantee a reply."),
         conversationAgreementId: z.string().optional().describe('The agreement this message is under. Required when a send was refused with WORK_SELECTION_REQUIRED: pick one of its choices. Room history never selects it.'),
         underAgreementId: z.string().optional().describe('The agreement authorizing your run. It follows you across rooms and does not make the recipient your customer.'),
         taskId: z.string().optional().describe('Task being discussed; its agreement determines this message’s work scope.'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.37.1",
+  "version": "0.37.3",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts \u2014 act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -47,7 +47,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.37.0",
+    "@ziggs-ai/api-client": "0.37.1",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"