@ziggs-ai/ziggs-mcp 0.37.13 → 0.37.15

package/CHANGELOG.md

@@ -0,0 +1,153 @@
+# Changelog
+
+## Unreleased
+
+## 0.37.15
+
+- `ziggs_inbox_park` leaves one proposal pending. Later reads keep it out of the session card and name it as parked.
+
+## 0.37.14
+
+### Fixed
+
+- Return identical structured and text error details so hosts receive the original error code without inferring it from prose.
+- Include the API client fix for the assistant identity selected by resource-routed OAuth calls.
+
+### Added
+
+- `ziggs_tools` takes `need`, a plain sentence of what you want done, and
+  answers with the one tool that does it (full schema and call line) or
+  "nothing fits". When no single tool clearly fits, or the pick is
+  unavailable, it answers the full list exactly as before. `describe` and
+  `search` are unchanged.
+
+- Formation receipts on marketplace browse and a shared `formationGuide`:
+  reuse a matching active agreement, claim a listing (never counter it),
+  post a request when nothing listed fits, subcontract under a parent,
+  and refuse a second formation on a live hire. Searching "subcontract"
+  now lands on `ziggs_agreement_subcontract`, not the broker verb. The
+  README agreement table lists one route per split verb.
+
+- Inbox results carry an `engagement` receipt when the envelope is a
+  hire-room work order, a stranger brief, a duplicate, a held graph, or
+  a reminder the host cannot schedule. New catalog verb
+  `ziggs_task_cancel` (PATCH /tasks/:id/cancel) is the withdraw pointer
+  for a held graph. Protocol now states that a hire-room brief is a
+  self work order and that a live hire does not take a second hire.
+
+## 0.15.0
+
+### Breaking
+
+**`ziggs_tool` is replaced by `ziggs_tool_read` and `ziggs_tool_write`.** One
+dispatcher carried reads and writes under a single write annotation. That is
+the one tool shape the connector directories reject outright, and it also had
+a host ask the human to confirm "Call a Ziggs tool" for whatever the dispatch
+was really running. Each catalog row already says whether a tool is read-only:
+call those with `ziggs_tool_read { tool, args }` and the rest with
+`ziggs_tool_write { tool, args }`. The wrong dispatcher refuses by name and
+points at the right one; irreversible tools are still called by their own name.
+There is no alias on `ziggs_tool`.
+
+**The connection rail leaves the listed surface, and the listed surface follows
+the credential.** A connected assistant — a token minted by either OAuth consent
+rail, the authorization-code flow or the device-code flow — gets `ziggs_connection_list`
+and nothing else of the rail: `ziggs_mcp_tools_list`, `ziggs_mcp_tool_call` and
+`ziggs_connection_request` join `ziggs_connection_proxy` off that surface, and
+the lister says so. An operator key gets the whole rail on stdio and on the
+remote endpoint alike; the remote endpoint no longer decides by transport, so a
+developer who points their own framework at it with an operator key keeps
+everything.
+
+**Two agreement verbs are renamed.** Names-first delivery made the catalog
+listing (name plus one line) the whole basis for picking a verb, and these two
+names did not survive that. Searching the catalog for "hire" returned
+`ziggs_agreement_handoff` — one tool, and the wrong one.
+
+| Was | Now |
+|---|---|
+| `ziggs_agreement_commission` | `ziggs_agreement_buy` |
+| `ziggs_agreement_quest` | `ziggs_agreement_request` |
+
+There are no aliases on the old names: one vocabulary, decided before the
+surface went public rather than carried forever. Both old words are catalog
+*search* aliases, so `ziggs_tools { search: "commission" }` returns
+`ziggs_agreement_buy` and a caller holding the old name is pointed at the new
+one.
+
+`marketplace_view` renames its response fields to match: `quests` → `requests`,
+`questCount` → `requestCount`. The claim result and the inbox delivery kind that
+read `quest` now read `request`.
+
+**All six agreement verb titles are rewritten** to state who does the work and
+who pays, because the title is what a caller picks from:
+
+| Verb | Title |
+|---|---|
+| `ziggs_agreement_buy` | They work, you pay (named counterparty) |
+| `ziggs_agreement_bid` | You work, they pay (named counterparty) |
+| `ziggs_agreement_request` | They work, you pay (open to anyone) |
+| `ziggs_agreement_offer` | You work, they pay (open to anyone) |
+| `ziggs_agreement_broker` | A third party does the work, you arrange it |
+| `ziggs_agreement_handoff` | Pass a hire you hold to whoever claims it |
+
+### Fixed
+
+- **A device-code credential gets the listed surface, like every other
+  connected assistant.** The surface was chosen by comparing the backend's
+  provenance stamp against a single value, so only assistants boarded through
+  the authorization-code flow were narrowed. Both rails board an assistant
+  through the connector directory and both get the listed surface; the question
+  is asked as a predicate now rather than as an equality test, so a credential
+  from either one is recognised.
+
+- **A tool name that is in the catalog but not natively listed is callable
+  again.** Catalog tools were removed from `tools/list` by disabling them, and
+  disabling also blocks `tools/call` — so anything holding a name (a saved
+  config, a script, a model that learned the name in an earlier session) got
+  `Tool <name> disabled`, a refusal thrown inside the MCP SDK that does not say
+  the tool exists or how to reach it. Nothing is disabled now; `tools/list` is
+  narrowed instead. `ziggs_tool` still works and is still the documented path,
+  and irreversible tools are still refused through it so the host can warn about
+  what it is really running.
+
+## 0.10.0
+
+### Breaking
+
+**`ziggs_agreement_propose` is removed.** It is replaced by one verb per shape,
+so the direction of work is in the name rather than in a combination of
+`proposedTo`, `providerId`, `parentAgreementId` and `engagementKind` that the
+caller had to get right.
+
+| Was | Now |
+|---|---|
+| `propose(proposedTo: X, chatId, providerId omitted or = X)` | `ziggs_agreement_commission(counterparty: X, chatId)` |
+| `propose(proposedTo: X, chatId, providerId = your own id)` | `ziggs_agreement_bid(counterparty: X, chatId)` |
+| `propose(proposedTo: X, chatId, providerId = a third party)` | `ziggs_agreement_broker(counterparty: X, chatId, provider)` |
+| `propose(proposedTo: "everyone" \| "org", no providerId)` | `ziggs_agreement_quest(audience)` |
+| `propose(proposedTo: "everyone" \| "org", providerId = your own id)` | `ziggs_agreement_offer(audience)` |
+| `propose(parentAgreementId, providerId = its provider)` | `ziggs_agreement_handoff(parentAgreementId, to?)` |
+| `propose(engagementKind: "link", proposedTo: X)` | `ziggs_link_propose(counterparty: X)` |
+
+Every shape the old tool could reach has a verb. `providerId` is gone from all of
+them except `ziggs_agreement_broker`, where naming a provider is the point.
+`ziggs_agreement_handoff` reads the provider from the parent hire, so you no
+longer look it up to pass it.
+
+If you have prompts, skills or scripts naming `ziggs_agreement_propose`, they
+need updating: the tool is not registered any more and calls to it will fail as
+unknown.
+
+### Added
+
+- Runnable follow-ups on more responses. `ziggs_link_list` returns
+  `ziggs_chat_open` calls with the peer id filled in, per active link;
+  `ziggs_marketplace_view` returns a claim follow-up. Same `readPlan` shape the
+  inbox and context reads already use.
+- Every tool carries a `title`.
+
+### Fixed
+
+- Tool descriptions no longer point at tools that do not exist on the surface
+  they are describing.

package/dist/directorySurface.js

@@ -7,7 +7,7 @@ ziggs_agreement_buy ziggs_agreement_bid ziggs_agreement_broker ziggs_agreement_r
 ziggs_agreement_handoff
 ziggs_agreement_claim ziggs_agreement_subcontract ziggs_marketplace_view
 ziggs_agreement_respond ziggs_agreement_revoke ziggs_agreement_counter ziggs_agreement_fulfill
-ziggs_inbox_peek ziggs_inbox ziggs_inbox_claim ziggs_inbox_ack
+ziggs_inbox_peek ziggs_inbox ziggs_inbox_claim ziggs_inbox_ack ziggs_inbox_park
 ziggs_grant_list ziggs_context_expand_reach ziggs_context_discover_grantable
 ziggs_open ziggs_access_explain ziggs_context_read
 ziggs_artifact_record ziggs_artifact_list ziggs_artifact_find ziggs_artifact_share

package/dist/pendingDecisions.js

@@ -448,6 +448,10 @@ export function formatPendingDecisionsPayload(inbox, webOrigin, opts) {
     }
     if (decidedNote)
         parts.push(decidedNote);
+    const parkedCount = inbox.parkedProposals?.length ?? 0;
+    if (parkedCount > 0) {
+        parts.push(`${count(parkedCount, 'parked decision', 'parked decisions')} left pending on purpose.`);
+    }
     const notice = parts.join(' ');
     const attention = humanAttentionForResult(inbox.humanAttention);
     return {

package/dist/tools.js

@@ -797,6 +797,19 @@ export function registerZiggsTools(server, creds, cfg) {
         if (decodeOperatorKeyClaims(creds.operatorKey)?.connectionClientId)
             registerStrictTool(server, 'ziggs_workspace_sync', {}, destructive('Synchronize assistant workspace access'), async () => toolError('Workspace synchronization runs through the assistant connection; this session has no connection roster.'));
     }
+    registerStrictTool(server, 'ziggs_inbox_park', {
+        agreementId: z
+            .string()
+            .describe('Agreement id the person said to leave pending. Later reads keep it out of the shout and list it as parked. A later change, or expiry inside a day, brings the shout back. Does not approve or reject.'),
+    }, destructive('Leave a pending decision unshouted'), async ({ agreementId }) => {
+        try {
+            const client = inboxFor(creds);
+            return textResult(await client.park(agreementId));
+        }
+        catch (e) {
+            return toolError(e);
+        }
+    });
     registerStrictTool(server, 'ziggs_inbox_ack', {
         ack: z
             .string()

package/dist/trustTools.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { ContextGrantsClient, LINK_CAPABILITIES, INTRODUCTION_CAPABILITIES, DISCOVERY_CAPABILITIES, contextDelegateCapability, accessRequestCapability, } from '@ziggs-ai/api-client';
+import { ContextGrantsClient, LINK_CAPABILITIES, INTRODUCTION_CAPABILITIES, PARTY_CAPABILITIES, DISCOVERY_CAPABILITIES, contextDelegateCapability, accessRequestCapability, } from '@ziggs-ai/api-client';
 import { destructive } from './toolAnnotations.js';
 import { registerStrictTool } from './strictParams.js';
 import { toolError } from './toolError.js';
@@ -24,6 +24,9 @@ export function registerTrustTools(server, creds, cfg) {
         // The introduction rail rides with links: redeeming one is how a
         // meeting somewhere Ziggs does not own becomes a link proposal here.
         registerCapabilities(server, INTRODUCTION_CAPABILITIES, creds, { webUrl });
+        // A person not on Ziggs yet arrives by mail or Slack; what the workspace
+        // knows about them rides in every room snapshot they are in.
+        registerCapabilities(server, PARTY_CAPABILITIES, creds);
     }
     registerStrictTool(server, 'ziggs_context_revoke_grant', {
         grantId: z.string(),

package/dist/workspaceRouting.js

@@ -15,6 +15,7 @@ const CONNECTION = new Set([
     'ziggs_inbox',
     'ziggs_inbox_peek',
     'ziggs_inbox_ack',
+    'ziggs_inbox_park',
     'ziggs_inbox_claim',
     'ziggs_workspace_sync',
 ]);
@@ -210,6 +211,9 @@ export class WorkspaceRouter {
     /** The connection's own reads and acks: never routed, always live. */
     async connectionTool(name, args) {
         try {
+            if (name === 'ziggs_inbox_park') {
+                return result(await this.client.park(String(args.agreementId)));
+            }
             if (name === 'ziggs_inbox_ack') {
                 return result({
                     acked: await this.client.ack(String(args.ack), args.handledResourceIds),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.37.13",
+  "version": "0.37.15",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts \u2014 act as your Ziggs delegate agent",
   "homepage": "https://ziggsai.com/docs",
   "bugs": {
@@ -51,7 +51,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.37.13",
+    "@ziggs-ai/api-client": "0.37.15",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"
@@ -73,6 +73,7 @@
   "files": [
     "dist",
     "README.md",
+    "CHANGELOG.md",
     "examples",
     "skills"
   ],