@anchrd/intel-api 0.14.0 → 0.15.0

package/dist/cli/cli.js

@@ -12,15 +12,9 @@ const interfaces = [
         functions: ["read", "create", "write", "publish", "run", "share"],
     },
     { handle: "tools", functions: ["read", "test", "execute", "admin"] },
-    // Declared here, and not by a service of its own, because Gate scopes the rules it returns to the
-    // service whose key asked (least privilege). The agent runtime authorizes its callers with this
-    // installation's Gate service key against the same audience Intel uses, so a handle registered
-    // anywhere else would never appear in the rules that `can("agents", "run")` reads.
-    //
-    // Without it there is no state between "administrator" and "not at all": the runtime falls back to
-    // `intel:admin`, which is the first-grant exit in the same sense as everywhere else, not the way a
-    // team lets a colleague talk to an agent.
-    { handle: "agents", functions: ["run"] },
+    // ⚠️ `agents:run` is deliberately NOT here any more (#390). `bootstrap` declares, it never
+    // revokes, so an installation that has the interface keeps it as a harmless leftover — but a new
+    // one is not asked to decide about a permission nothing reads.
     // `mcp:connect` means the same thing at every MCP service of this installation. A separate name
     // for the same thing forces the operator to check, service by service, which permission carries
     // portal access.

package/dist/http/http.js

@@ -1,4 +1,4 @@
-import { AddBoardTaskInput, AppendTableRowsInput, ArchiveFlowInput, ArchiveNodeInput, CancelFlowRunInput, CompleteFlowRunStepInput, ConfigureBoardInput, CreateAgentInput, CreateFlowInput, CreateNodeInput, DefineTableInput, DeleteBoardTaskInput, DeleteTableRowsInput, ExecuteToolInput, GetFlowInput, GetFlowRunInput, GetFlowVersionInput, GetNodeInput, GetNodeVersionInput, ListAgentsInput, ListFlowRunsInput, ListFlowsInput, ListNodesInput, MoveBoardTaskInput, NodeGraphInput, PreviewFlowPublishInput, PublishFlowInput, RedefineTableInput, RelationGraphInput, ResolveNodeLinksInput, RevokeGrantInput, RotateAgentKeyInput, SaveAgentDefinitionInput, SaveAttachmentInput, SaveFlowVersionInput, SaveNodeVersionInput, SearchInput, ShareInput, StartFlowRunInput, TestToolInput, UnpublishFlowInput, UpdateBoardTaskInput, UpdateFlowInput, UpdateNodeInput, UpdateTableRowsInput, } from "@anchrd/intel-contract";
+import { AppendTableRowsInput, ArchiveFlowInput, ArchiveNodeInput, CancelFlowRunInput, CompleteFlowRunStepInput, CreateFlowInput, CreateNodeInput, DefineTableInput, DeleteTableRowsInput, ExecuteToolInput, GetFlowInput, GetFlowRunInput, GetFlowVersionInput, GetNodeInput, GetNodeVersionInput, ListFlowRunsInput, ListFlowsInput, ListNodesInput, NodeGraphInput, PreviewFlowPublishInput, PublishFlowInput, RedefineTableInput, RelationGraphInput, ResolveNodeLinksInput, RevokeGrantInput, SaveAttachmentInput, SaveFlowVersionInput, SaveNodeVersionInput, SearchInput, ShareInput, StartFlowRunInput, TestToolInput, UnpublishFlowInput, UpdateFlowInput, UpdateNodeInput, UpdateTableRowsInput, } from "@anchrd/intel-contract";
 import { Hono } from "hono";
 import { z } from "zod";
 import { authorizeBearer, bearer, permits, } from "../shared/gate-authorization/gate-authorization.js";
@@ -78,16 +78,6 @@ function asFlowActor(authorization) {
         isAdmin: authorization.can("intel", "admin"),
     };
 }
-// The same `agents/run` the agent Worker asks for, resolved once at Intel's door. `intel/admin`
-// opens it for the same reason it opens every other one — `permits` is where that lives.
-function asAgentActor(authorization) {
-    return {
-        id: authorization.identity.id,
-        email: authorization.identity.email,
-        isAdmin: authorization.can("intel", "admin"),
-        canRun: permits(authorization, "agents", "run"),
-    };
-}
 export function createHttp(deps) {
     const app = new Hono();
     async function authenticated(headers) {
@@ -136,94 +126,6 @@ export function createHttp(deps) {
             name: identity.name ?? null,
         });
     });
-    // What this deployment is equipped to do (#190) — facts about the installation, not about the
-    // caller, which is why it needs no capability beyond being signed in. `/session` stays identity
-    // only on purpose; this is the separate answer the UI asks for instead of reading a 503 as one.
-    // It sits behind the auth middleware like everything else, so an anonymous probe still learns
-    // nothing about whether a runtime exists.
-    app.get("/capabilities", (context) => {
-        return context.json({ agentRuntime: deps.agents.available() });
-    });
-    /**
-     * What the models on offer cost and how much they hold (#257).
-     *
-     * ⚠️ Intel asks Cloudflare, never the browser. The account endpoint needs a token and a token does
-     * not belong in a SPA — which is the sentence the hard-coded table in `packages/ui` used to carry
-     * as the reason it stayed hard-coded. This route is the answer to it: the figures cross the wire,
-     * the credential does not.
-     *
-     * ⚠️ No capability beyond being signed in. It is a fact about the installation and about nobody's
-     * data — the same footing `/capabilities` stands on.
-     *
-     * ⚠️ The `cache-control` is the caching the ticket asks for, and it is the caching that matters:
-     * the waste it names is "one fetch every time the select is opened", and that fetch is the
-     * browser's. A Worker isolate has nowhere durable to keep a table between requests, and inventing
-     * storage for a list of prices would cost more than the request it saved.
-     */
-    app.get("/models", async (context) => {
-        context.header("cache-control", "private, max-age=3600");
-        return context.json(await deps.models.list());
-    });
-    /**
-     * The agent runtime, reached through Intel.
-     *
-     * ⚠️ This list IS the door. The runtime serves more than what stands here — `/mcp` is the agent's
-     * own MCP surface, which the portal dials with its own credential (ADR-0005 §7), and
-     * `/mail/inbound` is authorized by a webhook signature. Neither is a browser path, and neither
-     * becomes one by being reachable: anything not named below is a 404 from Hono's router, so there
-     * is no allow-list beside the routes that could go quietly out of step with them.
-     *
-     * ⚠️ `agents/run` — not `knowledge/read`. Reading an agent's page is a knowledge read; driving the
-     * agent is the capability the runtime itself insists on, and Intel refuses on the same terms
-     * BEFORE the binding is touched, so a denial never reaches the runtime at all.
-     */
-    const runtimeRoutes = [
-        { method: "GET", pattern: "/state", path: () => "/state" },
-        { method: "GET", pattern: "/runs", path: () => "/runs" },
-        {
-            method: "GET",
-            pattern: "/runs/:runId",
-            path: (context) => `/runs/${encodeURIComponent(context.req.param("runId") ?? "")}`,
-        },
-        { method: "GET", pattern: "/log", path: () => "/log" },
-        { method: "POST", pattern: "/chat", path: () => "/chat" },
-        { method: "POST", pattern: "/pause", path: () => "/pause" },
-        { method: "POST", pattern: "/resume", path: () => "/resume" },
-        { method: "POST", pattern: "/run", path: () => "/run" },
-    ];
-    /**
-     * What this agent has cost — answered by Intel itself, not forwarded (#251).
-     *
-     * ⚠️ It stands under `/agents/:agentId` and is NOT in `runtimeRoutes`, which is the whole point of
-     * writing it out here. The runtime has no idea what anything costs: the figures come from
-     * Cloudflare's AI Gateway log, which needs an `AI Gateway: Read` token, and that token belongs in
-     * Intel rather than in the Worker that executes model-driven tool calls — the runtime's own
-     * `CLAUDE.md` keeps the number of credentials there deliberately small. The runtime's part is the
-     * stamp on the model call and nothing more.
-     *
-     * ⚠️ `agents/run`, matching the run list this stands beside. What an agent spends is as sensitive
-     * as what it did, and the two must not be reachable on different terms.
-     */
-    app.get("/agents/:agentId/costs", async (context) => {
-        const authorization = context.get("authorization");
-        return context.json(await deps.agentCosts.read(asAgentActor(authorization), context.req.param("agentId")));
-    });
-    for (const route of runtimeRoutes) {
-        app.on(route.method, `/agents/:agentId${route.pattern}`, async (context) => {
-            const authorization = context.get("authorization");
-            // The runtime's answer is returned untouched, headers included: the chat is a stream, and a
-            // body read here to inspect it would be a stream nobody could read afterwards.
-            return await deps.agents.forward({
-                actor: asAgentActor(authorization),
-                token: context.get("token"),
-                agentId: context.req.param("agentId"),
-                method: route.method,
-                path: route.path(context),
-                ...(route.method === "POST" ? { body: await context.req.text() } : {}),
-                signal: context.req.raw.signal,
-            });
-        });
-    }
     app.get("/nodes", async (context) => {
         const auth = requireCapability(context, "knowledge", "read");
         const url = new URL(context.req.url);
@@ -251,51 +153,6 @@ export function createHttp(deps) {
         });
         return context.json(await deps.nodes.graph(asActor(auth), input));
     });
-    // ⚠️ Before `/nodes/:nodeId`, or the router would read "agents" as a node ID. Same order and same
-    // reason as `/nodes/graph` above.
-    app.get("/nodes/agents", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
-        const url = new URL(context.req.url);
-        requireKnownQuery(url, ["parentId", "includeArchived"]);
-        const parentId = url.searchParams.get("parentId");
-        // ⚠️ The key is only set when the caller sent it. Omitted means the whole tree and `null` means
-        // the root level, so defaulting a missing parameter to `null` here would silently answer a
-        // different question than the one asked.
-        const input = ListAgentsInput.parse({
-            ...(url.searchParams.has("parentId") ? { parentId: parentId === "" ? null : parentId } : {}),
-            includeArchived: url.searchParams.get("includeArchived") === "true",
-        });
-        return context.json(await deps.nodes.listAgents(asActor(auth), input));
-    });
-    /**
-     * ⚠️ NO response in Intel's HTTP surface carries a credential any more (D29, #207).
-     *
-     * Creating an agent still mints its Gate Application with the caller's own bearer — so this needs
-     * `applications:write` in Gate on top of `knowledge:create` in Intel — but the key Gate issues
-     * once goes straight into the agent runtime over the service binding, inside this request. The
-     * answer is the same shape every agent read has. Until #207 it carried the key in plain text and
-     * a person had to put it into a Worker secret by hand, which is why an agent created here could
-     * never run (#200).
-     */
-    app.post("/nodes/agents", async (context) => {
-        const auth = requireCapability(context, "knowledge", "create");
-        const input = CreateAgentInput.parse(await context.req.json().catch(() => null));
-        return context.json(await deps.nodes.createAgent(asActor(auth), input, { token: context.get("token") }), 201);
-    });
-    /**
-     * The repair path, and the only one an agent that lost its key has (D29, #207).
-     *
-     * ⚠️ `knowledge/write`, not `agents/run`. Which principal an agent acts as is a property of the
-     * agent, changed by whoever may change the agent; being allowed to press "Run now" is a different
-     * question and answers a different one. The resource ACL on the node is checked by the service.
-     *
-     * ⚠️ Before `/nodes/:nodeId`, like every other literal segment under `/nodes`.
-     */
-    app.post("/nodes/agents/:nodeId/rotate-key", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = RotateAgentKeyInput.parse({ nodeId: context.req.param("nodeId") });
-        return context.json(await deps.nodes.rotateAgentKey(asActor(auth), input, { token: context.get("token") }));
-    });
     // ⚠️ Before `/nodes/:nodeId`, or the router would read "export" as a node ID. The root has no
     // node to address, so the whole installation — as this caller may read it — exports here (#136).
     app.get("/nodes/export", async (context) => {
@@ -337,20 +194,6 @@ export function createHttp(deps) {
         const input = GetNodeInput.parse({ nodeId: context.req.param("nodeId") });
         return zipResponse(await deps.bundle.exportSubtree(asBundleActor(auth), input.nodeId));
     });
-    app.get("/nodes/:nodeId/agent", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
-        return context.json(await deps.nodes.getAgent(asActor(auth), { nodeId: context.req.param("nodeId") }));
-    });
-    app.post("/nodes/:nodeId/agent", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = SaveAgentDefinitionInput.parse(await context.req.json().catch(() => null));
-        if (input.nodeId !== context.req.param("nodeId")) {
-            throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
-        }
-        // ⚠️ The caller's own bearer travels on, like it does when an agent is created: writing a
-        // definition also arms what it schedules, and that call is made as the person saving (#214).
-        return context.json(await deps.nodes.saveAgentDefinition(asActor(auth), input, { token: context.get("token") }), 201);
-    });
     app.get("/nodes/:nodeId/versions", async (context) => {
         const auth = requireCapability(context, "knowledge", "read");
         return context.json(await deps.nodes.listVersions(asActor(auth), context.req.param("nodeId")));
@@ -438,54 +281,6 @@ export function createHttp(deps) {
         }
         return context.json(await deps.nodes.redefineTable(asActor(auth), input), 201);
     });
-    // The board (#285). One read and five task operations, all action-style POSTs for the same reason
-    // the table mutations are: what they address is a task ID in the body, and none of them has an
-    // address of its own to PUT to. Every one writes a version, so they all answer 201 like the
-    // table's do.
-    app.get("/nodes/:nodeId/board", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
-        return context.json(await deps.nodes.getBoard(asActor(auth), { nodeId: context.req.param("nodeId") }));
-    });
-    app.post("/nodes/:nodeId/board/configure", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = ConfigureBoardInput.parse(await context.req.json().catch(() => null));
-        if (input.nodeId !== context.req.param("nodeId")) {
-            throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
-        }
-        return context.json(await deps.nodes.configureBoard(asActor(auth), input), 201);
-    });
-    app.post("/nodes/:nodeId/board/tasks", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = AddBoardTaskInput.parse(await context.req.json().catch(() => null));
-        if (input.nodeId !== context.req.param("nodeId")) {
-            throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
-        }
-        return context.json(await deps.nodes.addBoardTask(asActor(auth), input), 201);
-    });
-    app.post("/nodes/:nodeId/board/tasks/update", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = UpdateBoardTaskInput.parse(await context.req.json().catch(() => null));
-        if (input.nodeId !== context.req.param("nodeId")) {
-            throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
-        }
-        return context.json(await deps.nodes.updateBoardTask(asActor(auth), input), 201);
-    });
-    app.post("/nodes/:nodeId/board/tasks/move", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = MoveBoardTaskInput.parse(await context.req.json().catch(() => null));
-        if (input.nodeId !== context.req.param("nodeId")) {
-            throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
-        }
-        return context.json(await deps.nodes.moveBoardTask(asActor(auth), input), 201);
-    });
-    app.post("/nodes/:nodeId/board/tasks/delete", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
-        const input = DeleteBoardTaskInput.parse(await context.req.json().catch(() => null));
-        if (input.nodeId !== context.req.param("nodeId")) {
-            throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
-        }
-        return context.json(await deps.nodes.deleteBoardTask(asActor(auth), input), 201);
-    });
     // ⚠️ There is deliberately no route for the sixth board operation. `board_repair_task_ids`
     // (anchrd/intel#341) is MCP-only until a screen calls it: the routes here are what the browser
     // reaches, nothing in `intel-data-provider` asks for it, and a route with no caller is the thing

package/dist/http/http.types.d.ts

@@ -1,10 +1,7 @@
 import type { GateClient } from "@anchrd/gate-sdk";
-import type { AgentCostsService } from "../agent-costs/agent-costs.types.js";
-import type { AgentRuntimeService } from "../agent-runtime/agent-runtime.types.js";
 import type { BrowserAuth } from "../auth/auth.types.js";
 import type { BundleService } from "../bundle/bundle.types.js";
 import type { FlowService } from "../flows/flows.types.js";
-import type { ModelCatalogService } from "../model-catalog/model-catalog.types.js";
 import type { NodeService } from "../nodes/nodes.types.js";
 import type { ToolService } from "../tools/tools.types.js";
 export interface HttpDeps {
@@ -13,11 +10,6 @@ export interface HttpDeps {
     flows: FlowService;
     tools: ToolService;
     bundle: BundleService;
-    agents: AgentRuntimeService;
-    /** What an agent has cost, read out of the AI Gateway log rather than computed here (#251). */
-    agentCosts: AgentCostsService;
-    /** What the models on offer cost, read from Cloudflare rather than typed out here (#257). */
-    models: ModelCatalogService;
     resource: string;
     resourceMetadataUrl: string;
     auth?: Pick<BrowserAuth, "resolve">;

package/dist/indexing/indexing.js

@@ -1,10 +1,9 @@
-import { ArchivedBoardStatusId, BlockNoteDocument, BlockNoteMediaType, BoardDocument, } from "@anchrd/intel-contract";
-import { upgradeStoredBoard } from "../nodes/board/board.js";
+import { BlockNoteDocument, BlockNoteMediaType } from "@anchrd/intel-contract";
 export class PermanentIndexingError extends Error {
 }
-// The key under which a node that has exactly one vector is filed — every kind but `board`. It is
-// the bare node id in the index itself, which is why nothing written before anchrd/intel#301 has to
-// be renamed or embedded again.
+// The key under which a node with exactly one vector is filed — since #390 that is every kind. It
+// is the bare node id in the index itself, which is why nothing written before anchrd/intel#301 has
+// to be renamed or embedded again.
 const wholeNodeChunkKey = "";
 // What the pass hands to `purgeVectors` at its end: the names it has just written, in case the node
 // was archived while it worked and the record of them was refused (anchrd/intel#348).
@@ -21,58 +20,6 @@ function indexText(mediaType, content) {
         throw new PermanentIndexingError(`Node version content is not a valid BlockNote document: ${error instanceof Error ? error.message : "unknown parse failure"}`);
     }
 }
-/**
- * One passage per task, never one per board (#285) — and since anchrd/intel#301 one VECTOR per task
- * too, which is what `key` carries.
- *
- * ⚠️ This is the whole reason a board is chunked at all. "Where do I stand with X" has to land on a
- * CARD: indexed as one blob, a board of three hundred tasks matches on any of them and answers with
- * whichever thousand characters the snippet function happened to cut — text from a task that may
- * have nothing to do with the question. Each chunk carries the task's own title, which is the
- * column the FTS table weights highest.
- *
- * ⚠️ The status list is not indexed, and neither is a task's own status. "Backlog" and "Done" appear
- * on every board in the installation, so they are the words most likely to match and the least
- * likely to mean anything — and in the semantic half they would drag every card of every board
- * towards every question phrased as a state.
- *
- * ⚠️ A task on the `archived` shelf is left out of BOTH halves (anchrd/intel#301). That shelf is
- * what a board has instead of deleting a card (`ArchivedBoardStatusId`), so it is the same statement
- * `archived_at` makes about a node one level up — and an archived node has never been searchable.
- * Answering "where do I stand with X" out of a card somebody swept away is the failure the ticket
- * names. A card in a `terminal` status is NOT swept: "we finished it" is an answer to where the work
- * stands, and the only thing that says a card no longer counts is the shelf.
- */
-function boardChunks(content) {
-    let parsed;
-    try {
-        parsed = JSON.parse(content);
-    }
-    catch (error) {
-        throw new PermanentIndexingError(`Node version content is not valid JSON: ${error instanceof Error ? error.message : "unknown parse failure"}`);
-    }
-    /**
-     * ⚠️ Upgraded first, exactly like `parseStoredBoard` — this is the SECOND place a stored board
-     * body is parsed, and it reads bodies nobody has rewritten since (anchrd/intel#318).
-     *
-     * `reindex` walks every current version in the installation, so an old board arrives here as it
-     * was written: without `terminal` (#311) or with a repeated `dependsOn`. Without the upgrade the
-     * refusal below is PERMANENT — the version is marked failed and never retried — so that board
-     * would simply stop being findable, quietly, while its screen still worked. A rule added at one
-     * parse site and not the other is how a fix looks complete and is not.
-     */
-    const board = BoardDocument.safeParse(upgradeStoredBoard(parsed));
-    if (!board.success) {
-        throw new PermanentIndexingError("Node version content is not a valid board document");
-    }
-    return board.data.tasks
-        .filter((task) => task.status !== ArchivedBoardStatusId)
-        .map((task) => ({
-        key: task.id,
-        title: task.title,
-        text: [task.title, ...task.labels, task.description].filter(Boolean).join("\n\n"),
-    }));
-}
 /**
  * What one chunk is embedded as (anchrd/intel#301).
  *
@@ -85,9 +32,9 @@ function boardChunks(content) {
  * compare against. That cost is one embedding per node, paid when that node is next saved or when
  * an administrator runs `reindex`, and never per card.
  *
- * ⚠️ A card is NOT prefixed with the board's title. It brings its own title as the first line of its
- * text already, and the board's would put a value into all three hundred fingerprints that moves
- * when somebody renames the board — one rename, three hundred embeddings.
+ * ⚠️ Only the WHOLE-node chunk is prefixed, and the distinction is what kept a rename cheap while
+ * a node could hold many chunks: a per-chunk prefix would have put the node's title into every
+ * fingerprint, so renaming it once cost one embedding per chunk.
  */
 function embeddedText(target, chunk) {
     return chunk.key === wholeNodeChunkKey ? `${target.title}\n\n${chunk.text}` : chunk.text;
@@ -95,14 +42,13 @@ function embeddedText(target, chunk) {
 /**
  * The vectors this node needs, minus the ones it already has (anchrd/intel#301).
  *
- * ⚠️ This is the answer to "a changed card must not reindex the board". A save writes the whole
- * document — that is what a board version IS — so without this every keystroke-save of a board with
- * three hundred cards would cost three hundred embeddings. The fingerprint of the exact text that
- * was embedded is what tells an untouched card from a changed one.
+ * ⚠️ This is the answer to "an unchanged chunk must not be embedded again". A save writes the
+ * whole document, so without this every save would re-embed everything it holds. The fingerprint of
+ * the exact text that was embedded is what tells an untouched chunk from a changed one.
  *
  * ⚠️ The comparison is against D1 and deliberately not against Vectorize. Vectorize writes are
  * asynchronous — a vector upserted a moment ago is not readable yet — so a check made there would
- * answer about the save before last and re-embed a board that had just been saved twice.
+ * answer about the save before last and re-embed a node that had just been saved twice.
  *
  * ⚠️ The record is written only after the upsert returned, in the caller. A pass that dies in
  * between leaves the record short, so the next one embeds again; the opposite order would leave a
@@ -127,9 +73,9 @@ async function replaceVectors(deps, target, chunks) {
     const stale = stored.map((record) => record.chunkKey).filter((key) => !wanted.has(key));
     // ⚠️ The one-time sweep of the vector this node had BEFORE it was chunked. An empty record with a
     // chunked node means this is the first pass since anchrd/intel#301 (or since `reindex` emptied
-    // the record), and the whole-board vector written under the bare node id is still sitting there —
+    // the record), and the whole-node vector written under the bare node id is still sitting there —
     // matching questions and answering with the wrong card's passage. Once a record exists this
-    // branch is never taken again, so it costs one call per board rather than one per save.
+    // branch is never taken again, so it costs one call per node rather than one per save.
     if (stored.length === 0 && !wanted.has(wholeNodeChunkKey))
         stale.push(wholeNodeChunkKey);
     await semantic.upsert(target, changed);
@@ -207,22 +153,6 @@ export function createIndexing(deps) {
                 await purgeVectors(deps, versionId);
                 return;
             }
-            // ⚠️ An agent's body is a definition, not something to read: node IDs, a cron line and a model
-            // name (ADR-0005 §4). Indexing it verbatim would fill the index with identifiers and, worse,
-            // put them into the passage a searcher is shown — the definition names nodes the searcher may
-            // have no access to, and a snippet is the one place their IDs would become visible without
-            // the tree being asked. What makes an agent findable is what a person wrote about it, so the
-            // text is its description, and the FTS table indexes the title on its own (#139).
-            if (target.kind === "agent") {
-                const chunks = [
-                    { key: wholeNodeChunkKey, title: target.title, text: target.description ?? "" },
-                ];
-                await deps.repository.replace(target, chunks);
-                await replaceVectors(deps, target, chunks);
-                await purgeVectors(deps, versionId, writtenKeys(chunks));
-                await deps.repository.markIndexed(versionId, deps.now().toISOString());
-                return;
-            }
             // An attachment is one object of bytes; text kinds may be several, because a table's content
             // is the join of its versions (#40). A missing segment fails the whole pass rather than
             // indexing a table with a hole in it.
@@ -240,12 +170,11 @@ export function createIndexing(deps) {
                 if (text === undefined) {
                     throw new PermanentIndexingError(`No document converter is configured for ${target.mediaType}`);
                 }
-                // Both halves are chunked the same way now (anchrd/intel#301): a board is one passage and
-                // one vector per card, everything else is one of each for the node. The two indexes read the
-                // same list, so they cannot come to disagree about what a board is made of.
-                const chunks = target.kind === "board"
-                    ? boardChunks(text)
-                    : [{ key: wholeNodeChunkKey, title: target.title, text }];
+                // ⚠️ One chunk per node since #390, and the LIST is what stays. Both indexes read it, so
+                // they cannot come to disagree about what a node is made of — which is the property that
+                // let a board be one passage and one vector per card (#285, anchrd/intel#301) without
+                // either half being told about it separately.
+                const chunks = [{ key: wholeNodeChunkKey, title: target.title, text }];
                 await deps.repository.replace(target, chunks);
                 await replaceVectors(deps, target, chunks);
                 // ⚠️ Asked again, at the END of a pass that started on a live node (anchrd/intel#348). The

package/dist/intel/intel.js

@@ -72,9 +72,6 @@ export function createIntel(deps) {
         flows: deps.flows,
         tools: deps.tools,
         bundle: deps.bundle,
-        agents: deps.agents,
-        agentCosts: deps.agentCosts,
-        models: deps.models,
         resource,
         resourceMetadataUrl,
         ...(deps.auth ? { auth: deps.auth } : {}),
@@ -87,13 +84,11 @@ export function createIntel(deps) {
         }
         return await handleMcp(context.req.raw, {
             authorization,
-            // ⚠️ The very token this call was authorized with, so the agent tools reach the runtime as the
-            // caller and not as Intel. There is no cookie path on `/mcp`, so `bearer` is the same value
-            // `authorize` just used — read again rather than passed out of it, because a function that
-            // returned a credential beside its answer would be one somebody logs.
+            // ⚠️ The very token this call was authorized with, so a tool that has to speak to Gate does
+            // it as the caller and not as Intel. There is no cookie path on `/mcp`, so `bearer` is the
+            // same value `authorize` just used — read again rather than passed out of it, because a
+            // function that returned a credential beside its answer would be one somebody logs.
             bearer: bearer(context.req.raw.headers) ?? "",
-            agents: deps.agents,
-            agentCosts: deps.agentCosts,
             flows: deps.flows,
             nodes: deps.nodes,
             tools: deps.tools,

package/dist/intel/intel.types.d.ts

@@ -1,10 +1,7 @@
 import type { GateClient } from "@anchrd/gate-sdk";
-import type { AgentCostsService } from "../agent-costs/agent-costs.types.js";
-import type { AgentRuntimeService } from "../agent-runtime/agent-runtime.types.js";
 import type { BrowserAuth } from "../auth/auth.types.js";
 import type { BundleService } from "../bundle/bundle.types.js";
 import type { FlowService } from "../flows/flows.types.js";
-import type { ModelCatalogService } from "../model-catalog/model-catalog.types.js";
 import type { NodeService } from "../nodes/nodes.types.js";
 import type { ToolService } from "../tools/tools.types.js";
 export interface IntelDeps {
@@ -15,8 +12,5 @@ export interface IntelDeps {
     flows: FlowService;
     tools: ToolService;
     bundle: BundleService;
-    agents: AgentRuntimeService;
-    agentCosts: AgentCostsService;
-    models: ModelCatalogService;
     auth?: BrowserAuth;
 }