@anchrd/intel-api 0.15.0 → 0.16.1

package/dist/adapters/db/db-flows.js

@@ -1,4 +1,5 @@
-import { Flow, FlowGraph, FlowRun, FlowVersion, } from "@anchrd/intel-contract";
+import { Flow, FlowGraph, FlowVersion, } from "@anchrd/intel-contract/flow";
+import { FlowRun } from "@anchrd/intel-contract/flow-run";
 import { calleeIds, treeLinkKinds } from "../../flows/flows.js";
 import { flowCallable, flowInSubtree, flowInSubtreeBindings, flowVerbBindings, flowVerbQuery, readableOrRunnableCte, subtreeBindings, subtreeCte, } from "./db-grants.js";
 const flowColumnNames = [

package/dist/adapters/db/db-grants.d.ts

@@ -1,4 +1,4 @@
-import type { ResourceVerb } from "@anchrd/intel-contract";
+import type { ResourceVerb } from "@anchrd/intel-contract/share";
 export interface GrantActor {
     id: string;
     email: string;

package/dist/adapters/openid/openid.js

@@ -1,4 +1,4 @@
-import { ToolSourceUrl } from "@anchrd/intel-contract";
+import { ToolSourceUrl } from "@anchrd/intel-contract/tool";
 import * as client from "openid-client";
 import { z } from "zod";
 const ProtectedResource = z.looseObject({
@@ -162,9 +162,20 @@ export function createOpenId(deps) {
     // one with a 404, which surfaced as a bare 500 on /auth/connect (#93). The fallback repeats the
     // operation once with the OAuth document; when both fail, the second error is thrown because it
     // belongs to the attempt that got further for the issuer that needed the fallback at all.
-    async function withAlgorithmFallback(run) {
+    async function withAlgorithmFallback(run, usable = () => true) {
         try {
-            return await run();
+            const first = await run();
+            // ⚠️ A THROW is not the only way the OIDC document can be the wrong one (#425). Cloudflare
+            // Access answers `/.well-known/openid-configuration` with **200** and a two-field stub —
+            // `issuer` and `jwks_uri`, nothing else — while the endpoints live only under RFC 8414's
+            // `oauth-authorization-server`. Discovery therefore SUCCEEDS, the fallback never runs, and
+            // the missing endpoint surfaces minutes later inside `buildAuthorizationUrl` as
+            // `authorization server metadata does not contain a valid "as.authorization_endpoint"` — a
+            // 500 on `/auth/connect` with nothing in it pointing at discovery.
+            //
+            // So the question is not "did it fail" but "is what came back usable". An answer that parses
+            // and carries nothing is the same situation as a 404, and it gets the same second attempt.
+            return usable(first) ? first : await run("oauth2");
         }
         catch {
             return await run("oauth2");
@@ -174,7 +185,14 @@ export function createOpenId(deps) {
         const key = `${issuer}#${clientId}`;
         let configuration = configurations.get(key);
         if (!configuration) {
-            configuration = withAlgorithmFallback((algorithm) => client.discovery(new URL(issuer), clientId, { token_endpoint_auth_method: "none" }, client.None(), { ...options(issuer), ...(algorithm ? { algorithm } : {}) }));
+            configuration = withAlgorithmFallback((algorithm) => client.discovery(new URL(issuer), clientId, { token_endpoint_auth_method: "none" }, client.None(), { ...options(issuer), ...(algorithm ? { algorithm } : {}) }), 
+            // The two endpoints every flow here needs. Asking for exactly them rather than for a long
+            // list keeps the check honest: a server that publishes these two is usable, and one that
+            // publishes neither is the stub case above, whatever else it carries.
+            (resolved) => {
+                const metadata = resolved.serverMetadata();
+                return Boolean(metadata.authorization_endpoint && metadata.token_endpoint);
+            });
             configurations.set(key, configuration);
             void configuration.catch(() => configurations.delete(key));
         }

package/dist/adapters/remote-tools/remote-tools.js

@@ -1,4 +1,4 @@
-import { ToolTestResult } from "@anchrd/intel-contract";
+import { ToolTestResult } from "@anchrd/intel-contract/tool";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { StreamableHTTPClientTransport } from "@modelcontextprotocol/sdk/client/streamableHttp.js";
 import { CfWorkerJsonSchemaValidator } from "@modelcontextprotocol/sdk/validation/cfworker";

package/dist/bundle/bundle.js

@@ -1,4 +1,7 @@
-import { BlockNoteMediaType, BundleImportResult, BundleManifest, BundleManifestFilename, DocumentLinkInlineType, FlowGraph, TableMediaType, } from "@anchrd/intel-contract";
+import { BundleImportResult, BundleManifest, BundleManifestFilename, } from "@anchrd/intel-contract/bundle";
+import { FlowGraph } from "@anchrd/intel-contract/flow";
+import { BlockNoteMediaType, DocumentLinkInlineType, } from "@anchrd/intel-contract/node";
+import { TableMediaType } from "@anchrd/intel-contract/table";
 import { Unzip, UnzipInflate, Zip, ZipDeflate, ZipPassThrough } from "fflate";
 import { documentLinkTargets } from "../nodes/document-links/document-links.js";
 import { parseCsv } from "../shared/csv/csv.js";

package/dist/bundle/bundle.types.d.ts

@@ -1,4 +1,4 @@
-import type { BundleImportResult, BundleManifest } from "@anchrd/intel-contract";
+import type { BundleImportResult, BundleManifest } from "@anchrd/intel-contract/bundle";
 import type { FlowRepository } from "../flows/flows.types.js";
 import type { Actor, ContentStore, NodeRepository } from "../nodes/nodes.types.js";
 export interface BundleActor extends Actor {

package/dist/cli/cli.js

@@ -2,7 +2,20 @@ import { createBuild } from "../build/build.js";
 import { createPrepare } from "../prepare/prepare.js";
 const interfaces = [
     { handle: "intel", functions: ["use", "admin"] },
-    { handle: "knowledge", functions: ["read", "create", "write", "share"] },
+    // ⚠️ `nodes`, not `knowledge` — and the rename cost something, which is why it needed its own
+    // ticket (#152) five months after #125 renamed everything else. This handle is only half Intel's:
+    // `bootstrap` DECLARES it in Gate and deliberately changes no grant, so to Gate a renamed handle
+    // is a NEW one. Every grant on the old name keeps pointing at the old name, and everybody loses
+    // access at once, silently, until an operator hands the permissions out again.
+    //
+    // It was done in the one window where that is free: the installation on anchrd.sh was being
+    // rebuilt anyway (#385, anchrd/core#93) and there is no other. Doing it later would mean doing it
+    // to somebody.
+    //
+    // ⚠️ The old `knowledge` interface stays declared in Gate — bootstrap declares, it never revokes.
+    // It is a harmless leftover on installations that have it, and nothing in Intel asks about it any
+    // more; removing it is an act in Gate, by hand, when somebody is sure nothing else uses it.
+    { handle: "nodes", functions: ["read", "create", "write", "share"] },
     // ⚠️ No `approve`. The approval node is gone (#73), and this list is what Intel declares to Gate:
     // a function nobody asks about is a permission an operator has to decide on for no reason. An
     // installation that already granted it keeps a harmless leftover — bootstrap declares, it does
@@ -118,7 +131,7 @@ export function createCli(deps) {
         if (!intelUrl || !token) {
             return fail("INTEL_URL and a short-lived INTEL_OPERATOR_TOKEN must be set.");
         }
-        const response = await deps.fetch(`${intelUrl}/api/v1/search/reindex`, {
+        const response = await deps.fetch(`${intelUrl}/api/v1/nodes/reindex`, {
             method: "POST",
             headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
             body: "{}",

package/dist/flows/flows.d.ts

@@ -1,4 +1,4 @@
-import type { FlowGraph, FlowNode } from "@anchrd/intel-contract";
+import type { FlowGraph, FlowNode } from "@anchrd/intel-contract/flow";
 import type { CompiledFlow, FlowDeps, FlowService } from "./flows.types.js";
 type SubflowNode = Extract<FlowNode, {
     kind: "subflow";

package/dist/flows/flows.js

@@ -1,4 +1,4 @@
-import { flowNodeLayer } from "@anchrd/intel-contract";
+import { flowNodeLayer } from "@anchrd/intel-contract/flow";
 import { IntelError } from "../shared/intel-error/intel-error.js";
 import { plainTitle } from "../shared/plain-title/plain-title.js";
 function invalid(detail) {

package/dist/flows/flows.types.d.ts

@@ -1,4 +1,7 @@
-import type { ArchiveFlowInput, CancelFlowRunInput, CompleteFlowRunStepInput, CreateFlowInput, Flow, FlowDocument, FlowGraph, FlowPublishPreview, FlowRequirements, FlowRun, FlowRunHistory, FlowRunList, FlowRunStep, FlowValidation, FlowVersion, FlowVersionList, FlowVersionSummary, GetFlowVersionInput, ListFlowRunsInput, ListFlowsInput, Node, PreviewFlowPublishInput, PublishFlowInput, RelationGraph, RelationGraphInput, ResourceVerb, SaveFlowVersionInput, StartFlowRunInput, UnpublishFlowInput, UpdateFlowInput } from "@anchrd/intel-contract";
+import type { ArchiveFlowInput, CreateFlowInput, Flow, FlowDocument, FlowGraph, FlowPublishPreview, FlowRequirements, FlowValidation, FlowVersion, FlowVersionList, FlowVersionSummary, GetFlowVersionInput, ListFlowsInput, PreviewFlowPublishInput, PublishFlowInput, RelationGraph, RelationGraphInput, SaveFlowVersionInput, UnpublishFlowInput, UpdateFlowInput } from "@anchrd/intel-contract/flow";
+import type { CancelFlowRunInput, CompleteFlowRunStepInput, FlowRun, FlowRunHistory, FlowRunList, FlowRunStep, ListFlowRunsInput, StartFlowRunInput } from "@anchrd/intel-contract/flow-run";
+import type { Node } from "@anchrd/intel-contract/node";
+import type { ResourceVerb } from "@anchrd/intel-contract/share";
 export type FlowPrincipal = Pick<FlowActor, "id" | "email" | "isAdmin">;
 export type FlowCallReach = "subtree" | "library" | "out-of-reach";
 export interface FlowRunChainEntry {

package/dist/http/http.js

@@ -1,4 +1,9 @@
-import { AppendTableRowsInput, ArchiveFlowInput, ArchiveNodeInput, CancelFlowRunInput, CompleteFlowRunStepInput, CreateFlowInput, CreateNodeInput, DefineTableInput, DeleteTableRowsInput, ExecuteToolInput, GetFlowInput, GetFlowRunInput, GetFlowVersionInput, GetNodeInput, GetNodeVersionInput, ListFlowRunsInput, ListFlowsInput, ListNodesInput, NodeGraphInput, PreviewFlowPublishInput, PublishFlowInput, RedefineTableInput, RelationGraphInput, ResolveNodeLinksInput, RevokeGrantInput, SaveAttachmentInput, SaveFlowVersionInput, SaveNodeVersionInput, SearchInput, ShareInput, StartFlowRunInput, TestToolInput, UnpublishFlowInput, UpdateFlowInput, UpdateNodeInput, UpdateTableRowsInput, } from "@anchrd/intel-contract";
+import { ArchiveFlowInput, CreateFlowInput, GetFlowInput, GetFlowVersionInput, ListFlowsInput, PreviewFlowPublishInput, PublishFlowInput, RelationGraphInput, SaveFlowVersionInput, UnpublishFlowInput, UpdateFlowInput, } from "@anchrd/intel-contract/flow";
+import { CancelFlowRunInput, CompleteFlowRunStepInput, GetFlowRunInput, ListFlowRunsInput, StartFlowRunInput, } from "@anchrd/intel-contract/flow-run";
+import { ArchiveNodeInput, CreateNodeInput, GetNodeInput, GetNodeVersionInput, ListNodesInput, NodeGraphInput, ResolveNodeLinksInput, SaveAttachmentInput, SaveNodeVersionInput, SearchInput, UpdateNodeInput, } from "@anchrd/intel-contract/node";
+import { RevokeGrantInput, ShareInput } from "@anchrd/intel-contract/share";
+import { AppendTableRowsInput, DefineTableInput, DeleteTableRowsInput, RedefineTableInput, UpdateTableRowsInput, } from "@anchrd/intel-contract/table";
+import { ExecuteToolInput, TestToolInput } from "@anchrd/intel-contract/tool";
 import { Hono } from "hono";
 import { z } from "zod";
 import { authorizeBearer, bearer, permits, } from "../shared/gate-authorization/gate-authorization.js";
@@ -119,15 +124,20 @@ export function createHttp(deps) {
     // The caller's own identity, so the shell can name who is signed in. It needs no capability —
     // the answer is the token's own subject — and it returns nothing but id, email, and name.
     app.get("/session", (context) => {
-        const { identity } = context.get("authorization");
+        const authorization = context.get("authorization");
+        const { identity } = authorization;
         return context.json({
             id: identity.id,
             email: identity.email,
             name: identity.name ?? null,
+            // ⚠️ What the shell may DRAW, never what it may do (#416). Every admin route below still asks
+            // `requireCapability` for itself, and a browser that lied here would gain nothing but a
+            // button that answers 403.
+            isAdmin: authorization.can("intel", "admin"),
         });
     });
     app.get("/nodes", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const url = new URL(context.req.url);
         const unknownQuery = [];
         url.searchParams.forEach((_value, key) => {
@@ -146,7 +156,7 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.list(asActor(auth), input));
     });
     app.get("/nodes/graph", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const url = new URL(context.req.url);
         const input = NodeGraphInput.parse({
             limit: url.searchParams.has("limit") ? Number(url.searchParams.get("limit")) : undefined,
@@ -156,14 +166,14 @@ export function createHttp(deps) {
     // ⚠️ Before `/nodes/:nodeId`, or the router would read "export" as a node ID. The root has no
     // node to address, so the whole installation — as this caller may read it — exports here (#136).
     app.get("/nodes/export", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         return zipResponse(await deps.bundle.exportSubtree(asBundleActor(auth), null));
     });
     // The reverse door (#137): a zip bundle — or a naked zipped folder — lands as a new subtree.
     // The body IS the zip, streamed to the service rather than read whole here; `knowledge/create`
     // like every other way of making nodes, and the resource-level write check is the service's.
     async function importBundle(context, targetNodeId) {
-        const auth = requireCapability(context, "knowledge", "create");
+        const auth = requireCapability(context, "nodes", "create");
         const idempotencyKey = ImportIdempotencyKey.parse(context.req.header("idempotency-key"));
         const body = context.req.raw.body;
         if (body === null) {
@@ -181,7 +191,7 @@ export function createHttp(deps) {
     // ⚠️ Before `/nodes/:nodeId`, or the router would read "import" as a node ID.
     app.post("/nodes/import", async (context) => await importBundle(context, null));
     app.get("/nodes/:nodeId", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         return context.json(await deps.nodes.get(asActor(auth), context.req.param("nodeId")));
     });
     app.post("/nodes/:nodeId/import", async (context) => {
@@ -190,19 +200,19 @@ export function createHttp(deps) {
     });
     // One subtree — a folder with everything beneath it, or a single node — as a zip bundle (#136).
     app.get("/nodes/:nodeId/export", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const input = GetNodeInput.parse({ nodeId: context.req.param("nodeId") });
         return zipResponse(await deps.bundle.exportSubtree(asBundleActor(auth), input.nodeId));
     });
     app.get("/nodes/:nodeId/versions", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         return context.json(await deps.nodes.listVersions(asActor(auth), context.req.param("nodeId")));
     });
     // The content behind one row of the list above (#147): what a version-pinned citation points at.
     // Read capability like every other node read; the resource ACL and the node/version pairing are
     // the service's to refuse.
     app.get("/nodes/:nodeId/versions/:versionId/content", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const input = GetNodeVersionInput.parse({
             nodeId: context.req.param("nodeId"),
             versionId: context.req.param("versionId"),
@@ -214,13 +224,13 @@ export function createHttp(deps) {
     // resource address says nothing to an HTTP client, whose address for the bytes is the sibling
     // route below.
     app.get("/nodes/:nodeId/attachment/meta", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const input = GetNodeInput.parse({ nodeId: context.req.param("nodeId") });
         const { node, version } = await deps.nodes.getAttachment(asActor(auth), input.nodeId);
         return context.json({ node, version });
     });
     app.get("/nodes/:nodeId/attachment", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const { attachment, body } = await deps.nodes.readAttachment(asActor(auth), context.req.param("nodeId"));
         return new Response(body, {
             headers: {
@@ -232,13 +242,13 @@ export function createHttp(deps) {
         });
     });
     app.get("/nodes/:nodeId/table", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         return context.json(await deps.nodes.getTable(asActor(auth), context.req.param("nodeId")));
     });
     // Defining the header and appending rows are two routes because they are two decisions: the
     // header is written once and is the contract, an append is the everyday write (#40).
     app.post("/nodes/:nodeId/table", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = DefineTableInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -246,7 +256,7 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.defineTable(asActor(auth), input), 201);
     });
     app.post("/nodes/:nodeId/table/rows", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = AppendTableRowsInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -258,7 +268,7 @@ export function createHttp(deps) {
     // the `baseVersionId` that says which state they mean. Each writes one snapshot version, so the
     // 201 is the same statement the append's 201 makes.
     app.post("/nodes/:nodeId/table/rows/update", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = UpdateTableRowsInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -266,15 +276,15 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.updateTableRows(asActor(auth), input), 201);
     });
     app.post("/nodes/:nodeId/table/rows/delete", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = DeleteTableRowsInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
         }
         return context.json(await deps.nodes.deleteTableRows(asActor(auth), input), 201);
     });
-    app.post("/nodes/:nodeId/table/redefine", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+    app.patch("/nodes/:nodeId/table", async (context) => {
+        const auth = requireCapability(context, "nodes", "write");
         const input = RedefineTableInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -286,7 +296,7 @@ export function createHttp(deps) {
     // reaches, nothing in `intel-data-provider` asks for it, and a route with no caller is the thing
     // YAGNI is about. The screen is anchrd/intel#358, and it brings this route with it.
     app.get("/nodes/:nodeId/links", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         return context.json(await deps.nodes.listLinks(asActor(auth), context.req.param("nodeId")));
     });
     // A document link's name, for whoever is reading the text (#41). A POST because the list of IDs
@@ -297,27 +307,27 @@ export function createHttp(deps) {
     // There is no route to create or delete a link any more. A relationship is written where it is
     // meant, in the text, and `POST /nodes/:nodeId/versions` is what records it.
     app.post("/nodes/links/resolve", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const input = ResolveNodeLinksInput.parse(await context.req.json().catch(() => null));
         return context.json(await deps.nodes.resolveLinks(asActor(auth), input));
     });
     app.post("/nodes/search", async (context) => {
-        const auth = requireCapability(context, "knowledge", "read");
+        const auth = requireCapability(context, "nodes", "read");
         const input = SearchInput.parse(await context.req.json().catch(() => null));
         return context.json(await deps.nodes.search(asActor(auth), input));
     });
-    app.post("/search/reindex", async (context) => {
+    app.post("/nodes/reindex", async (context) => {
         const auth = requireCapability(context, "intel", "admin");
         z.strictObject({}).parse(await context.req.json().catch(() => null));
         return context.json(await deps.nodes.reindex(asActor(auth)), 202);
     });
     app.post("/nodes", async (context) => {
-        const auth = requireCapability(context, "knowledge", "create");
+        const auth = requireCapability(context, "nodes", "create");
         const input = CreateNodeInput.parse(await context.req.json().catch(() => null));
         return context.json(await deps.nodes.create(asActor(auth), input), 201);
     });
     app.post("/nodes/:nodeId/versions", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = SaveNodeVersionInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -325,7 +335,7 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.save(asActor(auth), input), 201);
     });
     app.post("/nodes/:nodeId/attachment", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = SaveAttachmentInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -333,7 +343,7 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.saveAttachment(asActor(auth), input), 201);
     });
     app.patch("/nodes/:nodeId", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = UpdateNodeInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
@@ -341,21 +351,21 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.update(asActor(auth), input));
     });
     app.post("/nodes/:nodeId/archive", async (context) => {
-        const auth = requireCapability(context, "knowledge", "write");
+        const auth = requireCapability(context, "nodes", "write");
         const input = ArchiveNodeInput.parse(await context.req.json().catch(() => null));
         if (input.nodeId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body node IDs differ");
         }
         // The caller's own bearer, for the one thing archiving may have to do in Gate: switch off the
         // Application behind an agent (#182). Every other kind never reaches it.
-        return context.json(await deps.nodes.archive(asActor(auth), input, { token: context.get("token") }));
+        return context.json(await deps.nodes.archive(asActor(auth), input));
     });
     app.get("/nodes/:nodeId/grants", async (context) => {
-        const auth = requireCapability(context, "knowledge", "share");
+        const auth = requireCapability(context, "nodes", "share");
         return context.json(await deps.nodes.listGrants(asActor(auth), context.req.param("nodeId")));
     });
     app.post("/nodes/:nodeId/grants", async (context) => {
-        const auth = requireCapability(context, "knowledge", "share");
+        const auth = requireCapability(context, "nodes", "share");
         const input = ShareInput.parse(await context.req.json().catch(() => null));
         if (input.resourceId !== context.req.param("nodeId")) {
             throw new IntelError(400, "node_id_mismatch", "Path and body resource IDs differ");
@@ -363,7 +373,7 @@ export function createHttp(deps) {
         return context.json(await deps.nodes.share(asActor(auth), input), 201);
     });
     app.post("/nodes/:nodeId/grants/:grantId/revoke", async (context) => {
-        const auth = requireCapability(context, "knowledge", "share");
+        const auth = requireCapability(context, "nodes", "share");
         const input = RevokeGrantInput.parse(await context.req.json().catch(() => null));
         if (input.resourceId !== context.req.param("nodeId") ||
             input.grantId !== context.req.param("grantId")) {
@@ -552,7 +562,7 @@ export function createHttp(deps) {
         const input = GetFlowRunInput.parse({ runId: context.req.param("runId") });
         return context.json(await deps.flows.listRunSteps(asFlowActor(auth), input.runId));
     });
-    app.post("/flow-runs/:runId/complete", async (context) => {
+    app.post("/flow-runs/:runId/steps/complete", async (context) => {
         const auth = requireCapability(context, "flows", "run");
         const input = CompleteFlowRunStepInput.parse(await context.req.json().catch(() => null));
         if (input.runId !== context.req.param("runId")) {

package/dist/indexing/indexing.js

@@ -1,4 +1,4 @@
-import { BlockNoteDocument, BlockNoteMediaType } from "@anchrd/intel-contract";
+import { BlockNoteDocument, BlockNoteMediaType } from "@anchrd/intel-contract/node";
 export class PermanentIndexingError extends Error {
 }
 // The key under which a node with exactly one vector is filed — since #390 that is every kind. It

package/dist/intel/intel.js

@@ -60,7 +60,16 @@ export function createIntel(deps) {
                 if (error instanceof IntelError) {
                     return context.redirect(`/tools?connectError=${encodeURIComponent(error.code)}`);
                 }
-                throw error;
+                // ⚠️ Everything else used to be rethrown, and the outer handler turned it into a bare 500
+                // with a generic body (#425). For an API that is the right answer; for a route a BROWSER is
+                // sent to it is a dead end — the reader gets JSON instead of a screen, and the Tools page
+                // never learns that the attempt happened at all, so it says "no access" about a sign-in
+                // that crashed.
+                //
+                // The trace still goes to the log, which is the operator's channel; what changes is that
+                // the reader is returned to a screen that can say "this broke" instead of "you may not".
+                reportUnexpectedError(error);
+                return context.redirect("/tools?connectError=portal_sign_in_failed");
             }
         });
         app.get("/auth/callback", async (context) => await browserAuth.callback(new URL(context.req.url), context.req.raw.headers));

package/dist/mcp/mcp.js

@@ -1,4 +1,10 @@
-import { AppendTableRowsInput, ArchiveFlowInput, ArchiveNodeInput, CancelFlowRunInput, CompleteFlowRunStepInput, CreateFlowInput, CreateNodeInput, DefineTableInput, DeleteTableRowsInput, ExecuteToolInput, GetFlowInput, GetFlowRunInput, GetFlowVersionInput, GetNodeInput, GetNodeVersionInput, GetTableInput, IntelId, ListFlowRunsInput, ListFlowsInput, ListGrantsInput, ListNodesInput, NodeGraphInput, PreviewFlowPublishInput, PublishFlowInput, RedefineTableInput, RelationGraphInput, ResolveNodeLinksInput, RevokeGrantInput, SaveAttachmentInput, SaveFlowVersionInput, SaveNodeVersionInput, SearchInput, ShareInput, StartFlowRunInput, TestToolInput, UnpublishFlowInput, UpdateFlowInput, UpdateNodeInput, UpdateTableRowsInput, } from "@anchrd/intel-contract";
+import { IdempotencyKey, IntelId } from "@anchrd/intel-contract";
+import { ArchiveFlowInput, CreateFlowInput, GetFlowInput, GetFlowVersionInput, ListFlowsInput, PreviewFlowPublishInput, PublishFlowInput, RelationGraphInput, SaveFlowVersionInput, UnpublishFlowInput, UpdateFlowInput, } from "@anchrd/intel-contract/flow";
+import { CancelFlowRunInput, CompleteFlowRunStepInput, GetFlowRunInput, ListFlowRunsInput, StartFlowRunInput, } from "@anchrd/intel-contract/flow-run";
+import { ArchiveNodeInput, CreateNodeInput, GetNodeInput, GetNodeVersionInput, ListNodesInput, NodeGraphInput, ResolveNodeLinksInput, SaveAttachmentInput, SaveNodeVersionInput, SearchInput, UpdateNodeInput, } from "@anchrd/intel-contract/node";
+import { ListGrantsInput, RevokeGrantInput, ShareInput } from "@anchrd/intel-contract/share";
+import { AppendTableRowsInput, DefineTableInput, DeleteTableRowsInput, GetTableInput, RedefineTableInput, UpdateTableRowsInput, } from "@anchrd/intel-contract/table";
+import { ExecuteToolInput, TestToolInput } from "@anchrd/intel-contract/tool";
 import { McpServer, ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
 import { z } from "zod";
@@ -65,14 +71,20 @@ export async function handleMcp(request, deps) {
     const EmptyInput = z.strictObject({});
     // `null` is the root: the whole tree as this caller may read it. The field is required rather
     // than defaulted so "everything" is always said, never fallen into.
-    const ExportManifestInput = z.strictObject({ nodeId: IntelId.nullable() });
+    const ExportManifestInput = z.strictObject({
+        nodeId: IntelId.nullable().describe('Folder or node to plan the export of, or `null` for the whole tree as this caller may read it. Required rather than defaulted, so "everything" is always said and never fallen into.'),
+    });
     // The zip travels inline as base64, which is MCP's one way of carrying bytes. ~14M characters is
     // ~10 MB of zip — the same order as the attachment inline limit, and for the same isolate-memory
     // reason. Bigger bundles take the HTTP door, which streams.
     const ImportBundleInput = z.strictObject({
-        nodeId: IntelId.nullable(),
-        zipBase64: z.string().min(1).max(14_000_000),
-        idempotencyKey: z.string().min(8).max(200),
+        nodeId: IntelId.nullable().describe("Folder the bundle lands under, or `null` for the top level. The bundle's own structure is kept beneath it."),
+        zipBase64: z
+            .string()
+            .min(1)
+            .max(14_000_000)
+            .describe("The zip bundle, base64-encoded. Around 10 MB of zip; a bigger bundle takes the HTTP door, which streams instead of holding it in memory."),
+        idempotencyKey: IdempotencyKey,
     });
     function decodeZipBase64(value) {
         if (value.length % 4 !== 0 || !/^[A-Za-z0-9+/]*={0,2}$/.test(value)) {
@@ -105,7 +117,7 @@ export async function handleMcp(request, deps) {
         email: deps.authorization.identity.email,
         name: deps.authorization.identity.name ?? null,
     }));
-    if (permits(deps.authorization, "knowledge", "read")) {
+    if (permits(deps.authorization, "nodes", "read")) {
         server.registerTool("node_list", {
             title: "List nodes",
             description: "List authorized folders, documents, attachments, and tables under one parent.",
@@ -130,7 +142,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.get(actor, input.nodeId)));
-        server.registerTool("node_versions_list", {
+        server.registerTool("node_version_list", {
             title: "List node versions",
             description: "List immutable versions of one authorized node.",
             inputSchema: GetNodeInput,
@@ -219,7 +231,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.getTable(actor, input.nodeId)));
-        server.registerTool("node_links_list", {
+        server.registerTool("node_link_list", {
             title: "List node links",
             description: "List authorized outgoing links and backlinks for one node.",
             inputSchema: GetNodeInput,
@@ -233,12 +245,12 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.nodes.listLinks(actor, input.nodeId)));
         // The reader's half of a document link (#41): the titles of the linked documents this caller
         // may see. There is no tool to create or delete a link — a relationship is written in the text
-        // and `node_save` is what records it, so there is only one way to make one.
+        // and `node_version_create` is what records it, so there is only one way to make one.
         //
         // ⚠️ A target this caller may not reach, or one that is gone, is simply absent from the answer.
         // The two are indistinguishable on purpose: telling them apart would confirm that a document
         // exists somewhere they cannot look.
-        server.registerTool("node_links_resolve", {
+        server.registerTool("node_link_resolve", {
             title: "Resolve node links",
             description: "Resolve document link targets to the titles this caller is authorized to see. Targets that are unreachable or deleted are absent from the result.",
             inputSchema: ResolveNodeLinksInput,
@@ -268,12 +280,12 @@ export async function handleMcp(request, deps) {
         // resource payload travels inline as base64 and would have to fit in Worker memory twice, the
         // same limit that caps `node_attachment_get` at 10 MB — a whole subtree is the case that limit
         // exists for. HTTP `GET /nodes/:nodeId/export` streams the real archive.
-        server.registerTool("node_export_manifest", {
-            title: "Get export manifest",
+        server.registerTool("node_export", {
+            title: "Export nodes",
             description: "Plan a bundle export: the manifest of one authorized subtree (or the whole tree when nodeId is null) with each entry's bundle path, kind, and media type. Content bytes are fetched per node; the binary zip is served over HTTP.",
             inputSchema: ExportManifestInput,
             annotations: {
-                title: "Get export manifest",
+                title: "Export nodes",
                 readOnlyHint: true,
                 destructiveHint: false,
                 idempotentHint: true,
@@ -295,7 +307,7 @@ export async function handleMcp(request, deps) {
             },
         }, async () => text(await deps.nodes.reindex(actor)));
     }
-    if (permits(deps.authorization, "knowledge", "create")) {
+    if (permits(deps.authorization, "nodes", "create")) {
         server.registerTool("node_create", {
             title: "Create node",
             description: "Create a governed folder, document, attachment, or table node.",
@@ -309,25 +321,25 @@ export async function handleMcp(request, deps) {
             },
         }, async (input) => text(await deps.nodes.create(actor, input)));
     }
-    if (permits(deps.authorization, "knowledge", "write")) {
-        server.registerTool("node_save", {
-            title: "Save node version",
+    if (permits(deps.authorization, "nodes", "write")) {
+        server.registerTool("node_version_create", {
+            title: "Create node version",
             description: "Append an immutable content version using an optimistic base version.",
             inputSchema: SaveNodeVersionInput,
             annotations: {
-                title: "Save node version",
+                title: "Create node version",
                 readOnlyHint: false,
                 destructiveHint: false,
                 idempotentHint: true,
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.save(actor, input)));
-        server.registerTool("node_attachment_save", {
-            title: "Save node attachment",
+        server.registerTool("node_attachment_create", {
+            title: "Create node attachment version",
             description: "Append immutable base64 file bytes to an attachment node.",
             inputSchema: SaveAttachmentInput,
             annotations: {
-                title: "Save node attachment",
+                title: "Create node attachment version",
                 readOnlyHint: false,
                 destructiveHint: false,
                 idempotentHint: true,
@@ -338,12 +350,12 @@ export async function handleMcp(request, deps) {
         // the export — or a naked zipped folder — lands as a new subtree under the target. Same
         // service as HTTP, so authorization, limits, remapping, and the all-or-nothing write cannot
         // differ by surface; only the transport differs (inline base64 here, a streamed body there).
-        server.registerTool("node_import_bundle", {
-            title: "Import bundle",
+        server.registerTool("node_import", {
+            title: "Import nodes",
             description: "Import a zip bundle (base64) as a new subtree under an authorized target folder — null files at the root. Kinds come from manifest.json when present, from file extensions otherwise. Always creates new nodes; links and flow references between bundled entries are rewritten to the new IDs. Bundles beyond ~10 MB take the streaming HTTP route POST /nodes/:nodeId/import.",
             inputSchema: ImportBundleInput,
             annotations: {
-                title: "Import bundle",
+                title: "Import nodes",
                 readOnlyHint: false,
                 destructiveHint: false,
                 idempotentHint: true,
@@ -354,12 +366,12 @@ export async function handleMcp(request, deps) {
             zip: decodeZipBase64(input.zipBase64),
             idempotencyKey: input.idempotencyKey,
         })));
-        server.registerTool("node_table_define", {
-            title: "Define node table columns",
+        server.registerTool("node_table_create", {
+            title: "Create node table columns",
             description: "Write the column names of an empty table. The header is the contract every append is checked against and cannot be rewritten.",
             inputSchema: DefineTableInput,
             annotations: {
-                title: "Define node table columns",
+                title: "Create node table columns",
                 readOnlyHint: false,
                 destructiveHint: false,
                 idempotentHint: true,
@@ -368,12 +380,12 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.nodes.defineTable(actor, input)));
         // The tool #40 exists for: an agent collecting findings on a schedule appends them without
         // reading or resending what is already there, and two agents appending at once lose nothing.
-        server.registerTool("node_table_append", {
-            title: "Append node table rows",
+        server.registerTool("node_table_row_create", {
+            title: "Create node table rows",
             description: "Append rows to a table without reading or resending its existing content. Each row must have exactly as many cells as the table has columns; a row that does not is rejected and nothing is written.",
             inputSchema: AppendTableRowsInput,
             annotations: {
-                title: "Append node table rows",
+                title: "Create node table rows",
                 readOnlyHint: false,
                 destructiveHint: false,
                 // The idempotency key makes a repeat of the same call a no-op; without one, appending
@@ -386,7 +398,7 @@ export async function handleMcp(request, deps) {
         // rows — they carry no IDs on purpose — so every mutation names the version the positions were
         // read from and is refused with `version_conflict` when the table moved on. No `knowledge_*`
         // alias: these tools are new under the post-#125 naming and never carried the old prefix.
-        server.registerTool("node_table_update_rows", {
+        server.registerTool("node_table_row_update", {
             title: "Update node table rows",
             description: "Replace rows at the given zero-based positions. Requires the baseVersionId the positions were read from (see node_table_get); answers version_conflict and writes nothing when the table has changed since. Each replacement row must match the column count.",
             inputSchema: UpdateTableRowsInput,
@@ -399,7 +411,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.updateTableRows(actor, input)));
-        server.registerTool("node_table_delete_rows", {
+        server.registerTool("node_table_row_delete", {
             title: "Delete node table rows",
             description: "Remove rows at the given zero-based positions. Requires the baseVersionId the positions were read from; answers version_conflict and writes nothing when the table has changed since.",
             inputSchema: DeleteTableRowsInput,
@@ -411,12 +423,12 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.deleteTableRows(actor, input)));
-        server.registerTool("node_table_redefine", {
-            title: "Redefine node table columns",
+        server.registerTool("node_table_update", {
+            title: "Update node table columns",
             description: "Change the header of a defined table through an explicit column mapping: each new column names the current column that fills it (rename or keep), names none to start empty (add), and a current column no entry names is removed with its cells. Requires the baseVersionId the mapping was read from. Defining over an existing header without a mapping stays refused.",
             inputSchema: RedefineTableInput,
             annotations: {
-                title: "Redefine node table columns",
+                title: "Update node table columns",
                 readOnlyHint: false,
                 destructiveHint: true,
                 idempotentHint: true,
@@ -437,53 +449,53 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.nodes.update(actor, input)));
         server.registerTool("node_archive", {
             title: "Archive node",
-            description: "Archive or restore one node using optimistic concurrency. Archiving an agent also switches off its Gate application; restoring switches it back on.",
+            description: "Archive or restore one node. Archiving hides it from listings and search and takes its vectors out of the index; nothing is deleted and every version stays readable, so restoring is the same call with `archived: false`.",
             inputSchema: ArchiveNodeInput,
             annotations: {
                 title: "Archive node",
                 readOnlyHint: false,
                 destructiveHint: true,
                 idempotentHint: true,
-                // The one node mutation that can reach a system outside Intel: archiving an agent
-                // switches its Gate Application (#182). Nothing else here leaves the installation.
-                openWorldHint: true,
+                // ⚠️ `true` until #418, and the reason is worth keeping: archiving an agent used to
+                // switch its Gate Application off (#182), which was the one node mutation that reached
+                // outside. With the agents parked nothing here leaves the installation — and an
+                // openWorldHint that is wrong in the cautious direction is still wrong, because it is
+                // the field a client decides on.
+                openWorldHint: false,
             },
-        }, 
-        // The caller's own bearer, exactly as the runtime proxy uses it and for the same reason:
-        // switching a machine principal is an act in Gate, performed by the person asking.
-        async (input) => text(await deps.nodes.archive(actor, input, { token: deps.bearer })));
+        }, async (input) => text(await deps.nodes.archive(actor, input)));
     }
-    if (permits(deps.authorization, "knowledge", "share")) {
-        server.registerTool("node_shares_list", {
-            title: "List node shares",
+    if (permits(deps.authorization, "nodes", "share")) {
+        server.registerTool("node_grant_list", {
+            title: "List node grants",
             description: "List direct grants for nodes the caller is allowed to manage.",
             inputSchema: ListGrantsInput,
             annotations: {
-                title: "List node shares",
+                title: "List node grants",
                 readOnlyHint: true,
                 destructiveHint: false,
                 idempotentHint: true,
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.listGrants(actor, input.resourceId)));
-        server.registerTool("node_share", {
-            title: "Share node",
+        server.registerTool("node_grant_create", {
+            title: "Grant node access",
             description: "Grant inherited node access to a Gate user, verified email, or the organization.",
             inputSchema: ShareInput,
             annotations: {
-                title: "Share node",
+                title: "Grant node access",
                 readOnlyHint: false,
                 destructiveHint: false,
                 idempotentHint: true,
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.nodes.share(actor, input)));
-        server.registerTool("node_revoke_share", {
-            title: "Revoke node share",
+        server.registerTool("node_grant_revoke", {
+            title: "Revoke node grant",
             description: "Revoke one direct node grant by ID.",
             inputSchema: RevokeGrantInput,
             annotations: {
-                title: "Revoke node share",
+                title: "Revoke node grant",
                 readOnlyHint: false,
                 destructiveHint: true,
                 idempotentHint: true,
@@ -492,7 +504,7 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.nodes.revokeGrant(actor, input)));
     }
     if (permits(deps.authorization, "flows", "read")) {
-        server.registerTool("flows_list", {
+        server.registerTool("flow_list", {
             title: "List flows",
             description: "List authorized flows, either all of them or the ones filed in one folder of the shared tree.",
             inputSchema: ListFlowsInput,
@@ -519,7 +531,7 @@ export async function handleMcp(request, deps) {
         // Named like `knowledge_versions_list`, because it is the same question about the other kind of
         // thing in the tree. This pair is what turns the `versionId` that `flow_publish` and
         // `flow_publish_preview` demand into something an MCP client can actually obtain (#144).
-        server.registerTool("flow_versions_list", {
+        server.registerTool("flow_version_list", {
             title: "List flow versions",
             description: "List the immutable versions of one authorized flow, oldest first, marking which of them is published. Metadata only; flow_version_get loads a version's graph.",
             inputSchema: GetFlowInput,
@@ -543,7 +555,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.flows.getVersion(flowActor, input)));
-        server.registerTool("flow_calls_list", {
+        server.registerTool("flow_call_list", {
             title: "List called flows",
             description: "List the flows one flow calls, read out of its graph rather than out of where it is filed.",
             inputSchema: GetFlowInput,
@@ -558,7 +570,7 @@ export async function handleMcp(request, deps) {
         // ⚠️ Only nodes the requesting user may see are in the answer, placeholders included: an edge to
         // a grey box would already say that something is there. The same rule the screen follows,
         // because it is the same service (#19).
-        server.registerTool("flow_relation_graph", {
+        server.registerTool("flow_graph", {
             title: "Read the relation graph",
             description: "Read what accesses what for one folder or one flow: which flow reads which document and which flow calls which flow.",
             inputSchema: RelationGraphInput,
@@ -582,7 +594,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.flows.validate(flowActor, input.flowId)));
-        server.registerTool("flow_requirements_list", {
+        server.registerTool("flow_requirement_list", {
             title: "List what a flow needs",
             description: "List the documents and MCP tools one flow's graph names. Documents the calling user cannot see are counted rather than named, and no claim is made about whether anyone may reach them: for tools that cannot be known in advance, because the catalog is a live query with each user's own portal token.",
             inputSchema: GetFlowInput,
@@ -609,7 +621,7 @@ export async function handleMcp(request, deps) {
         // ⚠️ Model context like every other tool result: what a run did, never what it produced. The run
         // input and output are absent because a run reaches nodes and tools with the rights of
         // whoever started it, and only their own runs are the calling user's to read out that way.
-        server.registerTool("flow_runs_list", {
+        server.registerTool("flow_run_list", {
             title: "List flow runs",
             description: "List the runs of one flow, newest first, with status, start, duration, what triggered them, and for a failed run the step that ended it. Optionally only the failed ones. Runs the calling user may not see are absent, and a failure inside a called flow they may not see is named by the calling step alone.",
             inputSchema: ListFlowRunsInput,
@@ -621,7 +633,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.flows.listRuns(flowActor, input)));
-        server.registerTool("flow_run_steps_list", {
+        server.registerTool("flow_run_step_list", {
             title: "List flow run steps",
             description: "List every completed step of one run, oldest first, with its outcome, branch, and the reason a failed step gives, plus the call chain the run belongs to.",
             inputSchema: GetFlowRunInput,
@@ -635,7 +647,7 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.flows.listRunSteps(flowActor, input.runId)));
     }
     // A flow has no share tool of its own. Sharing happens on the folder a flow is filed in, through
-    // node_share, so a narrower grant cannot sit beside the folder grant (ADR-0004 §2).
+    // node_grant_create, so a narrower grant cannot sit beside the folder grant (ADR-0004 §2).
     if (permits(deps.authorization, "flows", "create")) {
         server.registerTool("flow_create", {
             title: "Create flow",
@@ -677,12 +689,12 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.flows.archive(flowActor, input)));
-        server.registerTool("flow_save", {
-            title: "Save flow",
+        server.registerTool("flow_version_create", {
+            title: "Create flow version",
             description: "Append a validated immutable flow graph version with optimistic concurrency.",
             inputSchema: SaveFlowVersionInput,
             annotations: {
-                title: "Save flow",
+                title: "Create flow version",
                 readOnlyHint: false,
                 destructiveHint: false,
                 idempotentHint: true,
@@ -746,7 +758,7 @@ export async function handleMcp(request, deps) {
                 openWorldHint: false,
             },
         }, async (input) => text(await deps.flows.start(flowActor, input)));
-        server.registerTool("flow_run_complete_step", {
+        server.registerTool("flow_run_step_complete", {
             title: "Complete flow step",
             description: "Submit a node result or semantic branch to advance a durable run without persisting credentials.",
             inputSchema: CompleteFlowRunStepInput,
@@ -774,7 +786,7 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.flows.cancelRun(flowActor, input)));
     }
     if (permits(deps.authorization, "tools", "read")) {
-        server.registerTool("tools_catalog_list", {
+        server.registerTool("tool_list", {
             title: "List tools",
             description: "List the MCP tools the calling user can reach through the portal, live rather than cached.",
             inputSchema: EmptyInput,
@@ -787,9 +799,9 @@ export async function handleMcp(request, deps) {
             },
         }, async () => text(await deps.tools.catalog(toolActor)));
         // The servers behind the same live list (D30), as the portal itself names them.
-        server.registerTool("tools_servers_list", {
+        server.registerTool("tool_server_list", {
             title: "List tool servers",
-            description: "List the MCP servers the calling user reaches through the portal, as the portal itself names them. These are the handles an agent definition may delegate.",
+            description: "List the MCP servers the calling user reaches through the portal, as the portal itself names them. The handle is the prefix on every tool name from that server, which is how tool_execute is routed.",
             inputSchema: EmptyInput,
             annotations: {
                 title: "List tool servers",
@@ -801,7 +813,7 @@ export async function handleMcp(request, deps) {
         }, async () => text(await deps.tools.servers(toolActor)));
     }
     if (permits(deps.authorization, "tools", "test")) {
-        server.registerTool("tools_test", {
+        server.registerTool("tool_test", {
             title: "Test tool",
             description: "Validate input and execute one explicitly read-only cached MCP tool with the caller's Gate connection.",
             inputSchema: TestToolInput,
@@ -815,7 +827,7 @@ export async function handleMcp(request, deps) {
         }, async (input) => text(await deps.tools.test(toolActor, input)));
     }
     if (permits(deps.authorization, "tools", "execute")) {
-        server.registerTool("tools_execute", {
+        server.registerTool("tool_execute", {
             title: "Execute tool",
             description: "Validate and execute a discovered MCP tool with the caller's just-in-time Gate connection.",
             inputSchema: ExecuteToolInput,

package/dist/nodes/document-links/document-links.js

@@ -1,4 +1,4 @@
-import { BlockNoteDocument, BlockNoteMediaType, DocumentLinkInlineType, } from "@anchrd/intel-contract";
+import { BlockNoteDocument, BlockNoteMediaType, DocumentLinkInlineType, } from "@anchrd/intel-contract/node";
 function isRecord(value) {
     return typeof value === "object" && value !== null;
 }

package/dist/nodes/nodes.js

@@ -1,4 +1,4 @@
-import { TableMediaType, } from "@anchrd/intel-contract";
+import { TableMediaType } from "@anchrd/intel-contract/table";
 import { encodeCsv, parseCsv } from "../shared/csv/csv.js";
 import { IntelError } from "../shared/intel-error/intel-error.js";
 import { plainTitle } from "../shared/plain-title/plain-title.js";
@@ -318,8 +318,8 @@ export function createNodes(deps) {
      * there, and what was added is.
      *
      * ⚠️ Only targets this actor may see become links. The author can only insert what the picker
-     * offers them, but `node_save` takes any content over MCP, and an unfiltered write would
-     * turn the graph into a place where the existence of an unreachable document can be confirmed by
+     * offers them, but `node_version_create` takes any content over MCP, and an unfiltered write
+     * would turn the graph into a place where the existence of an unreachable document can be confirmed by
      * anyone who guesses its ID. The filter is `resolveVisibleTitles`, the same lookup the reader's
      * side goes through — one rule, not two.
      *
@@ -801,17 +801,17 @@ export function createNodes(deps) {
          *
          * ⚠️ Until #390 this also switched an agent's Gate Application off with the node, and the ORDER
          * of the two writes was the whole safety argument. With the agents parked there is no second
-         * system to keep in step, and `caller` survives only because `archive` is still the one node
-         * mutation a surface hands its bearer to.
+         * system to keep in step, so #418 took the caller's bearer back out — a parameter kept "in
+         * case" is a parameter every surface has to find a value for, and both of them were passing a
+         * token nothing read.
          */
-        async archive(actor, input, _caller) {
+        async archive(actor, input) {
             const current = await requireVisible(actor, input.nodeId);
             if (!(await deps.repository.can(actor, current.id, "write"))) {
                 throw new IntelError(403, "node_forbidden", "This node cannot be edited");
             }
             const replayedId = await deps.repository.findIdempotentNode(actor.id, "node.archive", input.idempotencyKey);
-            // A replay switches nothing a second time: the first run already did, and Gate must not learn
-            // about a request that is not happening.
+            // A replay does nothing a second time and answers with what the first run made.
             if (replayedId)
                 return await requireVisible(actor, replayedId);
             const updatedAt = deps.now().toISOString();

package/dist/nodes/nodes.types.d.ts

@@ -1,4 +1,7 @@
-import type { AppendTableRowsInput, AppendTableRowsResult, ArchiveNodeInput, CreateNodeInput, DefineTableInput, DeleteTableRowsInput, DeleteTableRowsResult, Flow, FlowVersion, ListNodesInput, Node, NodeAttachment, NodeCitation, NodeDocument, NodeGraph, NodeGraphInput, NodeLink, NodeTable, NodeVersion, RedefineTableInput, ResolveNodeLinksInput, ResolveNodeLinksResult, ResourceGrant, ResourceGrantList, ResourceVerb, RevokeGrantInput, SaveAttachmentInput, SaveNodeVersionInput, SearchInput, ShareInput, ShareResult, UpdateNodeInput, UpdateTableRowsInput, UpdateTableRowsResult } from "@anchrd/intel-contract";
+import type { Flow, FlowVersion } from "@anchrd/intel-contract/flow";
+import type { ArchiveNodeInput, CreateNodeInput, ListNodesInput, Node, NodeAttachment, NodeCitation, NodeDocument, NodeGraph, NodeGraphInput, NodeKind, NodeLink, NodeTable, NodeVersion, ResolveNodeLinksInput, ResolveNodeLinksResult, SaveAttachmentInput, SaveNodeVersionInput, SearchInput, UpdateNodeInput } from "@anchrd/intel-contract/node";
+import type { ResourceGrant, ResourceGrantList, ResourceVerb, RevokeGrantInput, ShareInput, ShareResult } from "@anchrd/intel-contract/share";
+import type { AppendTableRowsInput, AppendTableRowsResult, DefineTableInput, DeleteTableRowsInput, DeleteTableRowsResult, RedefineTableInput, UpdateTableRowsInput, UpdateTableRowsResult } from "@anchrd/intel-contract/table";
 import type { SemanticIndex } from "../adapters/semantic-index/semantic-index.types.js";
 export interface Actor {
     id: string;
@@ -176,9 +179,6 @@ export interface NodeAttachmentBody {
     attachment: NodeAttachment;
     body: ReadableStream<Uint8Array>;
 }
-export interface GateCaller {
-    token: string;
-}
 export interface NodesDeps {
     repository: NodeRepository;
     content: ContentStore;
@@ -258,7 +258,7 @@ export interface NodeService {
      * by a write that half succeeded; the opposite order can only leave a live agent whose principal
      * is off, which stops working loudly and is repaired by repeating the call.
      */
-    archive(actor: Actor, input: ArchiveNodeInput, caller: GateCaller): Promise<Node>;
+    archive(actor: Actor, input: ArchiveNodeInput): Promise<Node>;
     listGrants(actor: Actor, resourceId: string): Promise<ResourceGrantList>;
     listLinks(actor: Actor, nodeId: string): Promise<{
         items: NodeLink[];
@@ -284,7 +284,7 @@ export interface NodeIndexTarget {
     description: string | null;
     contentKeys: string[];
     mediaType: string;
-    kind: "document" | "attachment" | "table";
+    kind: Exclude<NodeKind, "folder">;
     updatedAt: string;
 }
 /**

package/dist/tools/tool-servers/tool-servers.d.ts

@@ -1,4 +1,4 @@
-import { type ToolServer } from "@anchrd/intel-contract";
+import { type ToolServer } from "@anchrd/intel-contract/tool";
 /**
  * The portal's own directory tool. It is an ordinary entry in `tools/list`, so it is reached the
  * same way every other tool is: `tools/call` with the asking user's portal token.

package/dist/tools/tool-servers/tool-servers.js

@@ -1,4 +1,4 @@
-import { serverOf } from "@anchrd/intel-contract";
+import { serverOf } from "@anchrd/intel-contract/tool";
 import { z } from "zod";
 /**
  * The portal's own directory tool. It is an ordinary entry in `tools/list`, so it is reached the

package/dist/tools/tools.types.d.ts

@@ -1,4 +1,4 @@
-import type { ExecuteToolInput, TestToolInput, ToolCapability, ToolCatalog, ToolServerCatalog, ToolTestResult } from "@anchrd/intel-contract";
+import type { ExecuteToolInput, TestToolInput, ToolCapability, ToolCatalog, ToolServerCatalog, ToolTestResult } from "@anchrd/intel-contract/tool";
 export interface ToolActor {
     id: string;
     email: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anchrd/intel-api",
-  "version": "0.15.0",
+  "version": "0.16.1",
   "type": "module",
   "license": "UNLICENSED",
   "repository": {
@@ -43,7 +43,7 @@
   },
   "dependencies": {
     "@anchrd/gate-sdk": "^0.7.0",
-    "@anchrd/intel-contract": "^0.13.0",
+    "@anchrd/intel-contract": "^0.14.0",
     "@cfworker/json-schema": "^4.1.1",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "fflate": "^0.8.3",