@ziggs-ai/ziggs-mcp 0.37.5 → 0.37.7

package/dist/tools.js

@@ -1,7 +1,7 @@
 import { isDirectorySurface } from './directorySurface.js';
 import { randomUUID } from 'node:crypto';
 import { z } from 'zod';
-import { presentResourceActions, getAgreement, getMyAgreements, listMyChats, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, ContextReadClient, GrantsClient, InboxClient, createTask, updateTaskState, acknowledgeTaskControl, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateSession, GRANTS_CAPABILITIES, AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, openCapability, accessExplainCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, openConversationCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, agreementSubcontractCapability, listTasksCapability, cancelTaskCapability, marketplaceViewCapability, parseListFields, pickListedRows, projectChatListRows, sessionOrientation, presentSendResult, presentTaskOutcome, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, } from '@ziggs-ai/api-client';
+import { presentResourceActions, getAgreement, getMyAgreements, listMyChats, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, sendChatMessage, ConnectionsClient, ContextReadClient, GrantsClient, InboxClient, createTask, updateTaskState, acknowledgeTaskControl, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateSession, GRANTS_CAPABILITIES, AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, openCapability, accessExplainCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, openConversationCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, agreementSubcontractCapability, listTasksCapability, cancelTaskCapability, marketplaceViewCapability, parseListFields, pickListedRows, projectChatListRows, sessionOrientation, presentSendResult, presentTaskOutcome, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, SOURCES_DESCRIPTION, } from '@ziggs-ai/api-client';
 import { decodeOperatorKeyClaims } from './operatorKey.js';
 import { registerTrustTools } from './trustTools.js';
 import { registerPaymentTools } from './paymentTools.js';
@@ -250,6 +250,15 @@ function isReadRefusal(e) {
     const status = e?.status;
     return status === 403 || status === 404;
 }
+/**
+ * What a write drew on, as every write tool takes it. Loose on purpose, the
+ * shape the capability adapter gives an object list: the server checks each
+ * entry and says which one is wrong, and a full schema here would repeat that
+ * check on six tools in every session.
+ */
+function sourcesField() {
+    return z.array(z.record(z.unknown())).optional().describe(SOURCES_DESCRIPTION);
+}
 export function registerZiggsTools(server, creds, cfg) {
     // A refused get answers as open would: the server's one judgement of
     // hidden or unreadable, and for unreadable the request to make. When that
@@ -449,7 +458,8 @@ export function registerZiggsTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Retry-safe key. Reuse the SAME key when re-sending the SAME logical message (e.g. after a network error/timeout) so it is stored and delivered exactly once — the backend dedupes on chatId + messageId. Use a fresh key (or omit) for a genuinely new message.'),
-    }, destructive('Send a chat message'), async ({ chatId, to, receiverId, text, entryType, idempotencyKey, conversationAgreementId, underAgreementId, taskId }) => {
+        sources: sourcesField(),
+    }, destructive('Send a chat message'), async ({ chatId, to, receiverId, text, entryType, idempotencyKey, conversationAgreementId, underAgreementId, taskId, sources }) => {
         try {
             const roomId = typeof chatId === 'string' ? chatId.trim() : '';
             const personId = typeof to === 'string' ? to.trim() : '';
@@ -475,6 +485,7 @@ export function registerZiggsTools(server, creds, cfg) {
                 taskId,
                 entryType: entryType ?? 'message',
                 contentType: 'text',
+                ...(sources ? { sources: sources } : {}),
             }, creds);
             // `success: true` was the whole answer, and an agent that had just sent
             // an answer read it as delivered. The presenter names the destination
@@ -567,9 +578,13 @@ export function registerZiggsTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Revised task description for the spawned work'),
-    }, destructive('Counter a proposal'), async ({ agreementId, ...counter }) => {
+        sources: sourcesField(),
+    }, destructive('Counter a proposal'), async ({ agreementId, sources, ...counter }) => {
         try {
-            const agreement = await counterAgreement(agreementId, counter, creds);
+            const agreement = await counterAgreement(agreementId, {
+                ...counter,
+                ...(sources ? { sources: sources } : {}),
+            }, creds);
             return textResult({ status: 'countered', agreementId, agreement });
         }
         catch (e) {
@@ -935,9 +950,11 @@ export function registerZiggsTools(server, creds, cfg) {
         })
             .optional()
             .describe('How often the holder may remind, and how many times at most. Both halves are required together: a cadence with no budget is refused, because one reminder is one wake and a rule that never says stop is an open-ended loop. Omit entirely for a task nobody needs reminding about.'),
-    }, write('Create a task'), async ({ agreementId, description, title, parentTaskId, assigneeId, inputArtifactIds, waitsOn, graph, plan, planReviewTiming, requireMidWorkPlanAck, dueAt, checkBack, }) => {
+        sources: sourcesField(),
+    }, write('Create a task'), async ({ agreementId, description, title, parentTaskId, assigneeId, inputArtifactIds, waitsOn, graph, plan, planReviewTiming, requireMidWorkPlanAck, dueAt, checkBack, sources, }) => {
         try {
             const task = await createTask({
+                ...(sources ? { sources: sources } : {}),
                 agreementId,
                 description,
                 title,
@@ -976,9 +993,15 @@ export function registerZiggsTools(server, creds, cfg) {
             .string()
             .optional()
             .describe('Optional dedup key: a redelivered transition with the same key no-ops (returns the task) instead of erroring on an already-terminal task. Derive it deterministically (e.g. from taskId + target state) so a crash-replay reproduces it.'),
-    }, destructive('File a task result'), async ({ taskId, state, result, errorMessage, idempotencyKey }) => {
+        sources: sourcesField(),
+    }, destructive('File a task result'), async ({ taskId, state, result, errorMessage, idempotencyKey, sources }) => {
         try {
-            const confirm = await updateTaskState(taskId, state, { result, errorMessage, idempotencyKey }, creds);
+            const confirm = await updateTaskState(taskId, state, {
+                result,
+                errorMessage,
+                idempotencyKey,
+                ...(sources ? { sources: sources } : {}),
+            }, creds);
             // The confirmation said `completed` and left delivery,
             // metering and the agreement to be inferred from it. The presenter
             // states each one from what the server reported, and stays silent about
@@ -1016,6 +1039,7 @@ export function registerZiggsTools(server, creds, cfg) {
                 .unknown()
                 .optional()
                 .describe('Optional step output stored with this replace.'),
+            sources: sourcesField(),
         }))
             .describe('Full replacement step list (ordered)'),
     }, destructive('Update a task plan'), async ({ taskId, steps }) => {
@@ -1039,6 +1063,7 @@ export function registerZiggsTools(server, creds, cfg) {
                 .unknown()
                 .optional()
                 .describe('Optional step output stored with this patch.'),
+            sources: sourcesField(),
         }))
             .optional()
             .describe('The steps that changed. Do not resend the rest of the plan. Omit it only when this call is nothing but a waitingOn.'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.37.5",
+  "version": "0.37.7",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts \u2014 act as your Ziggs delegate agent",
   "type": "module",
   "bin": {
@@ -47,7 +47,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.37.5",
+    "@ziggs-ai/api-client": "0.37.7",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"