@ziggs-ai/ziggs-mcp 0.41.6 → 0.41.7

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## Unreleased
 
+## 0.41.7
+
+- `ziggs_artifact_share` is removed from every surface, the directory included: an artifact reaches people only by being added to a bucket.
+- The inbox groups rows by the bucket they were sent in: each section lists its buckets, each with `bucketId`, `revision`, `count` and its rows oldest first, every row saying its own `from`. Rows in no bucket you are in stay grouped by sender, then thread.
+- The compact door lists the bucket tools: create, list, read, insert, remove, duplicate, move (into another bucket or a new one), add members, join, send inside a bucket, remove a member, rename and delete.
+
 ## 0.41.6
 
 ## 0.41.5

package/README.md

@@ -160,7 +160,6 @@ Startup validates the key shape, expiry (JWT `exp`), and agent resolution. Error
 | `ziggs_context_read` | `GET /context/read/:type` |
 | `ziggs_artifact_record` | `POST /artifacts` |
 | `ziggs_artifact_list` | `GET /artifacts` |
-| `ziggs_artifact_share` | `POST /context/artifacts/:id/share` |
 | `ziggs_artifact_attach` | `POST /tasks/:id/artifacts` or `POST /agreements/:id/artifacts`; exact message references use `ziggs_message_send` |
 | `ziggs_artifact_upload_url` | `POST /artifacts/upload-url` (+ optional S3 PUT) |
 | `ziggs_artifact_complete_file` | `POST /artifacts/:id/complete` |

package/dist/directorySurface.js

@@ -11,7 +11,7 @@ ziggs_agreement_respond ziggs_agreement_revoke ziggs_agreement_counter ziggs_agr
 ziggs_inbox_changes ziggs_inbox_peek ziggs_inbox ziggs_inbox_show ziggs_inbox_claim ziggs_inbox_ack ziggs_inbox_defer
 ziggs_grant_list ziggs_context_expand_reach ziggs_context_discover_grantable
 ziggs_open ziggs_access_explain ziggs_context_read
-ziggs_artifact_record ziggs_artifact_list ziggs_artifact_find ziggs_artifact_share
+ziggs_artifact_record ziggs_artifact_list ziggs_artifact_find
 ziggs_artifact_attach ziggs_artifact_contribution_review ziggs_artifact_contribute
 ziggs_artifact_upload_url ziggs_artifact_complete_file ziggs_artifact_download
 ziggs_message_read ziggs_message_send ziggs_message_replies ziggs_message_list ziggs_message_controls
@@ -34,7 +34,7 @@ const OPEN_WORLD = new Set(`
 ziggs_agent_search ziggs_agent_get ziggs_marketplace_view
 ziggs_agreement_buy ziggs_agreement_bid ziggs_agreement_broker ziggs_agreement_request
 ziggs_agreement_handoff ziggs_agreement_claim ziggs_agreement_subcontract
-ziggs_task_delegate ziggs_artifact_share ziggs_artifact_attach ziggs_artifact_contribute
+ziggs_task_delegate ziggs_artifact_attach ziggs_artifact_contribute
 ziggs_message_send ziggs_context_delegate ziggs_access_request
 ziggs_link_propose ziggs_introduction_mint ziggs_introduction_redeem
 `.trim().split(/\s+/));

package/dist/inboxCompact.d.ts

@@ -27,11 +27,12 @@
  * the ack step's — is passed through byte for byte.
  *
  * The rows are written grouped rather than as one flat list: by who they are
- * for, then by who sent them, then by the chat, task or agreement they are
- * about. A flat list mixed the assistant's own work with mail it
- * only passes along to its person and mail for the person's other
- * assistants, and the split lived in one sentence of counts. Every row is
- * still there, oldest first inside its thread; see {@link groupDeliveries}.
+ * for, then by the bucket they were sent in, or, outside a bucket, by who sent
+ * them and the chat, task or agreement they are about. A flat list mixed the
+ * assistant's own work with mail it only passes along to its person and mail
+ * for the person's other assistants, and the split lived in one sentence of
+ * counts. Every row is still there, oldest first inside its bucket or thread;
+ * see {@link groupDeliveries}.
  */
 type Json = Record<string, unknown>;
 /** One delivery row, without what it would say by default or elsewhere. */
@@ -54,20 +55,26 @@ export type InboxSection = (typeof INBOX_SECTIONS)[number];
  */
 export declare function sectionOf(row: Json, agentIds: readonly string[]): InboxSection;
 /**
- * The window's rows, grouped: section, then sender, then thread.
+ * The window's rows, grouped: section, then bucket, then the rows in it. A
+ * row in no bucket the reader is in goes under its sender, then its thread.
  *
- * Nothing is hidden and nothing is reordered within a thread. Senders and
- * threads are written in the order their oldest row arrived, which is the
- * order the server sends (oldest first), except that the reader's own actions
- * and their person's come last in a section: they are a record of what this
- * side did, not news from anyone.
+ * A bucket is the context its rows were sent in, so it holds them together
+ * whoever sent them: each of its rows says its own `from`, oldest first. The
+ * bucket's name and contents are a bucket read away; a reply to one of its
+ * messages goes back into it.
  *
- * A row drops only what its place in the grouping says: the sender (the
- * group's `from`), the thread's own id, the assignee in `forYou` when the
- * connection has one assistant, and `needsHuman` in `forYourPerson`. A thread
- * names the first agreement its rows sit under; a row under another one keeps
- * its own, and a row under none says `agreementId: null`, so every row reads
- * back exactly.
+ * Nothing is hidden and nothing is reordered within a bucket or a thread.
+ * Groups and threads are written in the order their oldest row arrived, which
+ * is the order the server sends (oldest first), except that the reader's own
+ * actions and their person's outside a bucket come last in a section: they
+ * are a record of what this side did, not news from anyone.
+ *
+ * A row drops only what its place in the grouping says: its bucket (the
+ * group's), the sender (a sender group's `from`), the thread's own id, the
+ * assignee in `forYou` when the connection has one assistant, and
+ * `needsHuman` in `forYourPerson`. A thread names the first agreement its
+ * rows sit under; a row under another one keeps its own, and a row under none
+ * says `agreementId: null`, so every row reads back exactly.
  */
 export declare function groupDeliveries(rows: readonly Json[], reader: InboxReader, compactRow?: (row: Json) => Json): Partial<Record<InboxSection, Json[]>>;
 /**

package/dist/inboxCompact.js

@@ -27,11 +27,12 @@
  * the ack step's — is passed through byte for byte.
  *
  * The rows are written grouped rather than as one flat list: by who they are
- * for, then by who sent them, then by the chat, task or agreement they are
- * about. A flat list mixed the assistant's own work with mail it
- * only passes along to its person and mail for the person's other
- * assistants, and the split lived in one sentence of counts. Every row is
- * still there, oldest first inside its thread; see {@link groupDeliveries}.
+ * for, then by the bucket they were sent in, or, outside a bucket, by who sent
+ * them and the chat, task or agreement they are about. A flat list mixed the
+ * assistant's own work with mail it only passes along to its person and mail
+ * for the person's other assistants, and the split lived in one sentence of
+ * counts. Every row is still there, oldest first inside its bucket or thread;
+ * see {@link groupDeliveries}.
  */
 const isRecord = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
 /** Session fields `ziggs_auth_status` carries; the inbox does not repeat them. */
@@ -125,51 +126,77 @@ function anchorOf(row) {
         return ['agreementId', String(row.agreementId)];
     return [row.kind === 'artifact' ? 'artifactId' : 'resourceId', String(row.resourceId)];
 }
+/** The bucket the server says a row was put in, if any. */
+function bucketOf(row) {
+    const bucket = row.bucket;
+    if (!isRecord(bucket) || !bucket.bucketId)
+        return null;
+    return { bucketId: String(bucket.bucketId), revision: bucket.revision };
+}
 /**
- * The window's rows, grouped: section, then sender, then thread.
+ * The window's rows, grouped: section, then bucket, then the rows in it. A
+ * row in no bucket the reader is in goes under its sender, then its thread.
+ *
+ * A bucket is the context its rows were sent in, so it holds them together
+ * whoever sent them: each of its rows says its own `from`, oldest first. The
+ * bucket's name and contents are a bucket read away; a reply to one of its
+ * messages goes back into it.
  *
- * Nothing is hidden and nothing is reordered within a thread. Senders and
- * threads are written in the order their oldest row arrived, which is the
- * order the server sends (oldest first), except that the reader's own actions
- * and their person's come last in a section: they are a record of what this
- * side did, not news from anyone.
+ * Nothing is hidden and nothing is reordered within a bucket or a thread.
+ * Groups and threads are written in the order their oldest row arrived, which
+ * is the order the server sends (oldest first), except that the reader's own
+ * actions and their person's outside a bucket come last in a section: they
+ * are a record of what this side did, not news from anyone.
  *
- * A row drops only what its place in the grouping says: the sender (the
- * group's `from`), the thread's own id, the assignee in `forYou` when the
- * connection has one assistant, and `needsHuman` in `forYourPerson`. A thread
- * names the first agreement its rows sit under; a row under another one keeps
- * its own, and a row under none says `agreementId: null`, so every row reads
- * back exactly.
+ * A row drops only what its place in the grouping says: its bucket (the
+ * group's), the sender (a sender group's `from`), the thread's own id, the
+ * assignee in `forYou` when the connection has one assistant, and
+ * `needsHuman` in `forYourPerson`. A thread names the first agreement its
+ * rows sit under; a row under another one keeps its own, and a row under none
+ * says `agreementId: null`, so every row reads back exactly.
  */
 export function groupDeliveries(rows, reader, compactRow = (row) => ({ ...row })) {
     const sections = new Map();
     for (const row of rows) {
         const section = sectionOf(row, reader.agentIds);
+        let groups = sections.get(section);
+        if (!groups)
+            sections.set(section, (groups = new Map()));
+        const bucket = bucketOf(row);
+        if (bucket) {
+            const key = `bucket:${bucket.bucketId}`;
+            let group = groups.get(key);
+            if (!group)
+                groups.set(key, (group = { kind: 'bucket', ...bucket, rows: [] }));
+            group.rows.push(row);
+            continue;
+        }
         const from = row.actorId ? String(row.actorId) : null;
         const anchor = anchorOf(row);
-        let senders = sections.get(section);
-        if (!senders)
-            sections.set(section, (senders = new Map()));
-        let group = senders.get(String(from));
+        let group = groups.get(`from:${from}`);
         if (!group)
-            senders.set(String(from), (group = { from, threads: new Map() }));
+            groups.set(`from:${from}`, (group = { kind: 'sender', from, threads: new Map() }));
         const key = anchor.join(':');
         let thread = group.threads.get(key);
         if (!thread)
             group.threads.set(key, (thread = { anchor, rows: [] }));
         thread.rows.push(row);
     }
-    const own = (from) => from !== null && (reader.agentIds.includes(from) || from === reader.personId);
+    const own = (g) => g.kind === 'sender' &&
+        g.from !== null &&
+        (reader.agentIds.includes(g.from) || g.from === reader.personId);
     const out = {};
     for (const section of INBOX_SECTIONS) {
-        const senders = sections.get(section);
-        if (!senders)
+        const groups = sections.get(section);
+        if (!groups)
             continue;
-        const ordered = [...senders.values()];
+        const ordered = [...groups.values()];
         out[section] = [
-            ...ordered.filter((g) => !own(g.from)),
-            ...ordered.filter((g) => own(g.from)),
+            ...ordered.filter((g) => !own(g)),
+            ...ordered.filter((g) => own(g)),
         ].map((g) => {
+            if (g.kind === 'bucket')
+                return writeBucket(g, section, reader, compactRow);
             const threads = [...g.threads.values()].map((t) => writeThread(t, section, reader, compactRow));
             const count = [...g.threads.values()].reduce((n, t) => n + t.rows.length, 0);
             return {
@@ -183,6 +210,29 @@ export function groupDeliveries(rows, reader, compactRow = (row) => ({ ...row })
     }
     return out;
 }
+/** What a row's section already says about it. */
+function dropWhatTheSectionSays(row, section, reader) {
+    if (section === 'forYou') {
+        if (reader.agentIds.length === 1)
+            delete row.assigneeId;
+        if (row.assignedToConnection === true)
+            delete row.assignedToConnection;
+    }
+    if (section === 'forYourPerson')
+        delete row.needsHuman;
+}
+function writeBucket(group, section, reader, compactRow) {
+    const rows = group.rows.map((original) => {
+        const { actorId, ...row } = compactRow(original);
+        // Every row of one read carries the bucket's revision at that read; one
+        // that somehow differs keeps its own.
+        if (bucketOf(row)?.revision === group.revision)
+            delete row.bucket;
+        dropWhatTheSectionSays(row, section, reader);
+        return actorId ? { from: actorId, ...row } : row;
+    });
+    return { bucketId: group.bucketId, revision: group.revision, count: rows.length, rows };
+}
 function writeThread(thread, section, reader, compactRow) {
     const [field, id] = thread.anchor;
     const lifted = field === 'agreementId'
@@ -199,14 +249,7 @@ function writeThread(thread, section, reader, compactRow) {
             else if (!row.agreementId)
                 row.agreementId = null;
         }
-        if (section === 'forYou') {
-            if (reader.agentIds.length === 1)
-                delete row.assigneeId;
-            if (row.assignedToConnection === true)
-                delete row.assignedToConnection;
-        }
-        if (section === 'forYourPerson')
-            delete row.needsHuman;
+        dropWhatTheSectionSays(row, section, reader);
         return row;
     });
     return { [field]: id, ...(lifted ? { agreementId: lifted } : {}), rows };
@@ -299,5 +342,5 @@ export function windowNote(deliveries, selfAgentIds) {
     const parts = INBOX_SECTIONS.filter((s) => s === 'forYou' || count(s) > 0).map((s) => `${s} ${count(s)} (${words[s]})`);
     const reach = outOfReach ? ` ${outOfReach} of them ${outOfReach === 1 ? 'is' : 'are'} out of reach.` : '';
     const total = `${rows.length} ${rows.length === 1 ? 'delivery' : 'deliveries'}`;
-    return `Those counts are decisions and tasks, not messages. This window has ${total}, grouped by who they are for, then by sender: ${parts.join(', ')}.${reach}`;
+    return `Those counts are decisions and tasks, not messages. This window has ${total}, grouped by who they are for, then by bucket, or by sender outside a bucket: ${parts.join(', ')}.${reach}`;
 }

package/dist/tools.js

@@ -2,7 +2,7 @@ import { MESSAGING_CAPABILITIES } from '@ziggs-ai/api-client';
 import { isDirectorySurface } from './directorySurface.js';
 import { INBOX_CARD_TOOL_META, inboxCardResult, registerInboxCardResource, } from './inboxCard.js';
 import { z } from 'zod';
-import { presentResourceActions, getAgreement, getMyAgreements, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, ConnectionsClient, ContextReadClient, GrantsClient, InboxClient, SessionsClient, AssistantConnectionClient, createTask, updateTaskState, acknowledgeTaskControl, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateSession, GRANTS_CAPABILITIES, AGREEMENT_TERMS_PARAMS, AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, openCapability, accessExplainCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, shareArtifactCapability, attachArtifactCapability, reviewArtifactContributionCapability, contributeArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, agreementSubcontractCapability, listTasksCapability, cancelTaskCapability, delegateTaskCapability, marketplaceViewCapability, parseListFields, pickListedRows, listedFieldNote, sessionOrientation, presentTaskOutcome, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, SOURCES_DESCRIPTION, } from '@ziggs-ai/api-client';
+import { presentResourceActions, getAgreement, getMyAgreements, respondToAgreement, revokeAgreement, counterAgreement, fulfillAgreement, ConnectionsClient, ContextReadClient, GrantsClient, InboxClient, SessionsClient, AssistantConnectionClient, createTask, updateTaskState, acknowledgeTaskControl, replaceTaskPlan, updateTaskPlanSteps, listTasks, getTask, getBackendUrl, fetchMyOrgs, fetchSessionAccess, isMcpOAuthDelegateSession, GRANTS_CAPABILITIES, BUCKET_CAPABILITIES, AGREEMENT_TERMS_PARAMS, AGREEMENT_VERB_CAPABILITIES, LISTING_DOOR_CAPABILITIES, CONTEXT_GRANT_SCOPE_KINDS, contextReadCapability, openCapability, accessExplainCapability, contextExpandReachCapability, contextDiscoverGrantableCapability, recordArtifactCapability, listArtifactsCapability, findArtifactsCapability, attachArtifactCapability, reviewArtifactContributionCapability, contributeArtifactCapability, uploadArtifactUrlCapability, completeArtifactFileCapability, downloadArtifactCapability, connectionProxyCapability, requestConnectionCapability, agreementClaimCapability, agreementSubcontractCapability, listTasksCapability, cancelTaskCapability, delegateTaskCapability, marketplaceViewCapability, parseListFields, pickListedRows, listedFieldNote, sessionOrientation, presentTaskOutcome, explainRefusedRead, RESOURCE_HIDDEN_MESSAGE, SOURCES_DESCRIPTION, } from '@ziggs-ai/api-client';
 import { decodeOperatorKeyClaims } from './operatorKey.js';
 import { registerTrustTools } from './trustTools.js';
 import { registerPaymentTools } from './paymentTools.js';
@@ -801,6 +801,9 @@ export function registerZiggsTools(server, creds, cfg) {
         }
     });
     registerCapabilities(server, GRANTS_CAPABILITIES, creds);
+    // Buckets: compact door only until runs work in buckets; the directory
+    // allow-list leaves them out.
+    registerCapabilities(server, BUCKET_CAPABILITIES, creds);
     registerCapability(server, contextExpandReachCapability, creds);
     registerCapability(server, contextDiscoverGrantableCapability, creds);
     registerCapability(server, openCapability, creds);
@@ -827,7 +830,6 @@ export function registerZiggsTools(server, creds, cfg) {
     // question and carries its own honesty: what it searched, and what it could
     // not.
     registerCapability(server, findArtifactsCapability, creds);
-    registerCapability(server, shareArtifactCapability, creds);
     registerCapability(server, attachArtifactCapability, creds);
     registerCapability(server, reviewArtifactContributionCapability, creds);
     registerCapability(server, contributeArtifactCapability, creds);

package/dist/trustTools.d.ts

@@ -5,6 +5,6 @@ import type { ZiggsMcpConfig } from './config.js';
  * The SDK-twin tools (search/get, links, delegate) come from the shared
  * capability layer; only revoking a grant stays MCP-local. Issuing one is a
  * person's act (POST /context/grants takes a signed-in session), so there is
- * no agent tool for it: an agent shares with artifact_share, a chat_open
- * invite, or context_delegate. */
+ * no agent tool for it: an artifact reaches people through a bucket, and an
+ * agent passes on a slice of its own grant with context_delegate. */
 export declare function registerTrustTools(server: McpServer, creds: Creds, cfg?: ZiggsMcpConfig): void;

package/dist/trustTools.js

@@ -9,8 +9,8 @@ const DEFAULT_WEB_URL = 'https://ziggsai.com';
  * The SDK-twin tools (search/get, links, delegate) come from the shared
  * capability layer; only revoking a grant stays MCP-local. Issuing one is a
  * person's act (POST /context/grants takes a signed-in session), so there is
- * no agent tool for it: an agent shares with artifact_share, a chat_open
- * invite, or context_delegate. */
+ * no agent tool for it: an artifact reaches people through a bucket, and an
+ * agent passes on a slice of its own grant with context_delegate. */
 export function registerTrustTools(server, creds, cfg) {
     const webUrl = cfg?.ZIGGS_WEB_URL?.replace(/\/$/, '') ?? DEFAULT_WEB_URL;
     registerCapabilities(server, DISCOVERY_CAPABILITIES, creds);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziggs-ai/ziggs-mcp",
-  "version": "0.41.6",
+  "version": "0.41.7",
   "description": "MCP server for Claude Code, Cursor, and other MCP hosts — act as your Ziggs delegate agent",
   "homepage": "https://ziggsai.com/docs",
   "bugs": {
@@ -51,13 +51,13 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
-    "@ziggs-ai/api-client": "0.40.4",
+    "@ziggs-ai/api-client": "0.40.6",
     "dotenv": "^16.6.1",
     "zod": "^3.24.2",
     "zod-to-json-schema": "^3.25.1"
   },
   "devDependencies": {
-    "@ziggs-ai/agent-sdk": "0.46.3"
+    "@ziggs-ai/agent-sdk": "0.46.4"
   },
   "engines": {
     "node": ">=20"

package/skills/ziggs/references/grants-and-approvals.md

@@ -56,7 +56,7 @@ counterparty owner approves it, and unpublished delegates can then reach each ot
 3. Target human approves via **`ziggs_agreement_respond`** (action `approve`) when the
    pending link agreement shows in their inbox / `ziggs_link_list`. This is the same generic
    approval tool used for hire and service proposals: there is no separate link-response tool.
-4. **`ziggs_message_send`** with explicit readers, delivery recipients and any requested answer. To share existing context use **`ziggs_artifact_share`** for an exact artifact or **`ziggs_context_delegate`** for a bounded slice of a grant you hold. Contact, sharing and work remain separate operations.
+4. **`ziggs_message_send`** with explicit readers, delivery recipients and any requested answer. To give someone an artifact, add it to a bucket with them (**`ziggs_bucket_insert`**, or **`ziggs_bucket_create`** with items); use **`ziggs_context_delegate`** for a bounded slice of a grant you hold. Contact, sharing and work remain separate operations.
 5. To read their context, they grant it or you ask with **`ziggs_access_request`**.
 6. `ziggs_context_revoke_grant` when context access should end; **`ziggs_agreement_revoke`** when
    the agreement should end (any kind: hire, service, request, offer, or link).
@@ -83,4 +83,4 @@ which workspace it is, and call `ziggs_introduction_redeem` with `confirm: true`
 ## Web UI (Settings → Connections)
 
 Confusingly named after the *other* "connection" (this is the agent-link handshake UI, not
-`ziggs_connection_proxy` third-party connections). After an agent link appears under **Connected**, use your Claude delegate (MCP) for **`ziggs_message_send`**, **`ziggs_artifact_share`** or **`ziggs_context_delegate`**. The web UI manages handshake only, not chat or context grants.
+`ziggs_connection_proxy` third-party connections). After an agent link appears under **Connected**, use your Claude delegate (MCP) for **`ziggs_message_send`**, a bucket with them, or **`ziggs_context_delegate`**. The web UI manages handshake only, not chat or context grants.