@anchrd/intel-contract 0.1.1 → 0.2.1

package/README.md

@@ -1,6 +1,6 @@
 # @anchrd/intel-contract
 
-The shared wire contract for [`@anchrd/intel`](https://www.npmjs.com/package/@anchrd/intel): Zod
+The shared wire contract for [`@anchrd/intel-api`](https://www.npmjs.com/package/@anchrd/intel-api): Zod
 schemas that describe every payload crossing Intel's HTTP, MCP and browser surfaces.
 
 You rarely install this directly — the server and the UI both depend on it. Reach for it when you

package/dist/contract/contract.d.ts

@@ -10,6 +10,12 @@ export declare const ProblemDetails: z.ZodObject<{
     code: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type ProblemDetails = z.infer<typeof ProblemDetails>;
+export declare const SessionUser: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodEmail;
+    name: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type SessionUser = z.infer<typeof SessionUser>;
 export declare const KnowledgeNodeKind: z.ZodEnum<{
     folder: "folder";
     document: "document";
@@ -483,18 +489,7 @@ export declare const DeleteKnowledgeLinkResult: z.ZodObject<{
 }, z.core.$strict>;
 export type DeleteKnowledgeLinkResult = z.infer<typeof DeleteKnowledgeLinkResult>;
 export declare const ToolSourceUrl: z.ZodURL;
-export declare const ToolSource: z.ZodObject<{
-    id: z.ZodString;
-    name: z.ZodString;
-    url: z.ZodURL;
-    connectionHandle: z.ZodString;
-    enabled: z.ZodBoolean;
-    createdBy: z.ZodString;
-    createdAt: z.ZodISODateTime;
-    updatedAt: z.ZodISODateTime;
-    lastDiscoveredAt: z.ZodNullable<z.ZodISODateTime>;
-}, z.core.$strict>;
-export type ToolSource = z.infer<typeof ToolSource>;
+export declare const ToolName: z.ZodString;
 export declare const ToolAnnotations: z.ZodObject<{
     title: z.ZodOptional<z.ZodString>;
     readOnlyHint: z.ZodOptional<z.ZodBoolean>;
@@ -504,7 +499,6 @@ export declare const ToolAnnotations: z.ZodObject<{
 }, z.core.$strict>;
 export type ToolAnnotations = z.infer<typeof ToolAnnotations>;
 export declare const ToolCapability: z.ZodObject<{
-    sourceId: z.ZodString;
     name: z.ZodString;
     title: z.ZodNullable<z.ZodString>;
     description: z.ZodNullable<z.ZodString>;
@@ -518,30 +512,11 @@ export declare const ToolCapability: z.ZodObject<{
         openWorldHint: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strict>;
     fingerprint: z.ZodString;
-    discoveredAt: z.ZodISODateTime;
 }, z.core.$strict>;
 export type ToolCapability = z.infer<typeof ToolCapability>;
-export declare const ToolConnectionStatus: z.ZodEnum<{
-    connected: "connected";
-    missing: "missing";
-    forbidden: "forbidden";
-    invalid: "invalid";
-}>;
-export type ToolConnectionStatus = z.infer<typeof ToolConnectionStatus>;
-export declare const ToolCatalogEntry: z.ZodObject<{
-    source: z.ZodObject<{
-        id: z.ZodString;
-        name: z.ZodString;
-        url: z.ZodURL;
-        connectionHandle: z.ZodString;
-        enabled: z.ZodBoolean;
-        createdBy: z.ZodString;
-        createdAt: z.ZodISODateTime;
-        updatedAt: z.ZodISODateTime;
-        lastDiscoveredAt: z.ZodNullable<z.ZodISODateTime>;
-    }, z.core.$strict>;
-    capability: z.ZodObject<{
-        sourceId: z.ZodString;
+export declare const ToolCatalog: z.ZodObject<{
+    portalConnected: z.ZodBoolean;
+    items: z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         title: z.ZodNullable<z.ZodString>;
         description: z.ZodNullable<z.ZodString>;
@@ -555,89 +530,15 @@ export declare const ToolCatalogEntry: z.ZodObject<{
             openWorldHint: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strict>;
         fingerprint: z.ZodString;
-        discoveredAt: z.ZodISODateTime;
-    }, z.core.$strict>;
-    connectionStatus: z.ZodEnum<{
-        connected: "connected";
-        missing: "missing";
-        forbidden: "forbidden";
-        invalid: "invalid";
-    }>;
-}, z.core.$strict>;
-export type ToolCatalogEntry = z.infer<typeof ToolCatalogEntry>;
-export declare const ToolSourceList: z.ZodObject<{
-    items: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        name: z.ZodString;
-        url: z.ZodURL;
-        connectionHandle: z.ZodString;
-        enabled: z.ZodBoolean;
-        createdBy: z.ZodString;
-        createdAt: z.ZodISODateTime;
-        updatedAt: z.ZodISODateTime;
-        lastDiscoveredAt: z.ZodNullable<z.ZodISODateTime>;
-    }, z.core.$strict>>;
-}, z.core.$strict>;
-export type ToolSourceList = z.infer<typeof ToolSourceList>;
-export declare const ToolCatalog: z.ZodObject<{
-    items: z.ZodArray<z.ZodObject<{
-        source: z.ZodObject<{
-            id: z.ZodString;
-            name: z.ZodString;
-            url: z.ZodURL;
-            connectionHandle: z.ZodString;
-            enabled: z.ZodBoolean;
-            createdBy: z.ZodString;
-            createdAt: z.ZodISODateTime;
-            updatedAt: z.ZodISODateTime;
-            lastDiscoveredAt: z.ZodNullable<z.ZodISODateTime>;
-        }, z.core.$strict>;
-        capability: z.ZodObject<{
-            sourceId: z.ZodString;
-            name: z.ZodString;
-            title: z.ZodNullable<z.ZodString>;
-            description: z.ZodNullable<z.ZodString>;
-            inputSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-            outputSchema: z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-            annotations: z.ZodObject<{
-                title: z.ZodOptional<z.ZodString>;
-                readOnlyHint: z.ZodOptional<z.ZodBoolean>;
-                destructiveHint: z.ZodOptional<z.ZodBoolean>;
-                idempotentHint: z.ZodOptional<z.ZodBoolean>;
-                openWorldHint: z.ZodOptional<z.ZodBoolean>;
-            }, z.core.$strict>;
-            fingerprint: z.ZodString;
-            discoveredAt: z.ZodISODateTime;
-        }, z.core.$strict>;
-        connectionStatus: z.ZodEnum<{
-            connected: "connected";
-            missing: "missing";
-            forbidden: "forbidden";
-            invalid: "invalid";
-        }>;
     }, z.core.$strict>>;
 }, z.core.$strict>;
 export type ToolCatalog = z.infer<typeof ToolCatalog>;
-export declare const CreateToolSourceInput: z.ZodObject<{
-    name: z.ZodString;
-    url: z.ZodURL;
-    connectionHandle: z.ZodDefault<z.ZodString>;
-    idempotencyKey: z.ZodString;
-}, z.core.$strict>;
-export type CreateToolSourceInput = z.infer<typeof CreateToolSourceInput>;
-export declare const DiscoverToolSourceInput: z.ZodObject<{
-    sourceId: z.ZodString;
-    idempotencyKey: z.ZodString;
-}, z.core.$strict>;
-export type DiscoverToolSourceInput = z.infer<typeof DiscoverToolSourceInput>;
 export declare const TestToolInput: z.ZodObject<{
-    sourceId: z.ZodString;
     name: z.ZodString;
     arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strict>;
 export type TestToolInput = z.infer<typeof TestToolInput>;
 export declare const ExecuteToolInput: z.ZodObject<{
-    sourceId: z.ZodString;
     name: z.ZodString;
     arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
 }, z.core.$strict>;
@@ -703,7 +604,6 @@ export declare const FlowNode: z.ZodDiscriminatedUnion<[z.ZodObject<{
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"tool">;
     configuration: z.ZodObject<{
-        sourceId: z.ZodString;
         toolName: z.ZodString;
         fingerprint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -814,7 +714,6 @@ export declare const FlowGraph: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"tool">;
         configuration: z.ZodObject<{
-            sourceId: z.ZodString;
             toolName: z.ZodString;
             fingerprint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -876,6 +775,7 @@ export declare const FlowGraph: z.ZodObject<{
 export type FlowGraph = z.infer<typeof FlowGraph>;
 export declare const Flow: z.ZodObject<{
     id: z.ZodString;
+    parentId: z.ZodNullable<z.ZodString>;
     title: z.ZodString;
     description: z.ZodNullable<z.ZodString>;
     ownerId: z.ZodString;
@@ -941,7 +841,6 @@ export declare const FlowVersion: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"tool">;
             configuration: z.ZodObject<{
-                sourceId: z.ZodString;
                 toolName: z.ZodString;
                 fingerprint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -1007,6 +906,7 @@ export type FlowVersion = z.infer<typeof FlowVersion>;
 export declare const FlowDocument: z.ZodObject<{
     flow: z.ZodObject<{
         id: z.ZodString;
+        parentId: z.ZodNullable<z.ZodString>;
         title: z.ZodString;
         description: z.ZodNullable<z.ZodString>;
         ownerId: z.ZodString;
@@ -1071,7 +971,6 @@ export declare const FlowDocument: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"tool">;
                 configuration: z.ZodObject<{
-                    sourceId: z.ZodString;
                     toolName: z.ZodString;
                     fingerprint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                     arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -1138,6 +1037,7 @@ export type FlowDocument = z.infer<typeof FlowDocument>;
 export declare const FlowList: z.ZodObject<{
     items: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
+        parentId: z.ZodNullable<z.ZodString>;
         title: z.ZodString;
         description: z.ZodNullable<z.ZodString>;
         ownerId: z.ZodString;
@@ -1150,11 +1050,25 @@ export declare const FlowList: z.ZodObject<{
 }, z.core.$strict>;
 export type FlowList = z.infer<typeof FlowList>;
 export declare const CreateFlowInput: z.ZodObject<{
+    parentId: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     title: z.ZodString;
     description: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     idempotencyKey: z.ZodString;
 }, z.core.$strict>;
 export type CreateFlowInput = z.infer<typeof CreateFlowInput>;
+export declare const UpdateFlowInput: z.ZodObject<{
+    flowId: z.ZodString;
+    baseUpdatedAt: z.ZodISODateTime;
+    title: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type UpdateFlowInput = z.infer<typeof UpdateFlowInput>;
+export declare const ListFlowsInput: z.ZodObject<{
+    parentId: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strict>;
+export type ListFlowsInput = z.infer<typeof ListFlowsInput>;
 export declare const GetFlowInput: z.ZodObject<{
     flowId: z.ZodString;
 }, z.core.$strict>;
@@ -1213,7 +1127,6 @@ export declare const SaveFlowVersionInput: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"tool">;
             configuration: z.ZodObject<{
-                sourceId: z.ZodString;
                 toolName: z.ZodString;
                 fingerprint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
                 arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
@@ -1415,7 +1328,6 @@ export declare const FlowRunStep: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"tool">;
         configuration: z.ZodObject<{
-            sourceId: z.ZodString;
             toolName: z.ZodString;
             fingerprint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             arguments: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;

package/dist/contract/contract.js

@@ -9,6 +9,13 @@ export const ProblemDetails = z.strictObject({
     instance: z.string().optional(),
     code: z.string().optional(),
 });
+// Who the caller is, as Gate resolved it from the bearer. Deliberately identity only: no
+// capabilities, no token, nothing a surface could mistake for a permission.
+export const SessionUser = z.strictObject({
+    id: IntelId,
+    email: z.email(),
+    name: z.string().min(1).max(240).nullable(),
+});
 export const KnowledgeNodeKind = z.enum(["folder", "document", "attachment"]);
 export const ContextPolicy = z.enum(["pinned", "relevant", "explicit"]);
 export const ResourceRole = z.enum(["viewer", "commenter", "editor", "manager"]);
@@ -227,18 +234,10 @@ export const ToolSourceUrl = z.url().refine((value) => {
     catch {
         return false;
     }
-}, "Tool source must use an approved public HTTPS host without embedded credentials");
-export const ToolSource = z.strictObject({
-    id: IntelId,
-    name: z.string().min(1).max(120),
-    url: ToolSourceUrl,
-    connectionHandle: z.string().regex(/^[a-z0-9][a-z0-9-]{1,62}$/),
-    enabled: z.boolean(),
-    createdBy: IntelId,
-    createdAt: IsoDateTime,
-    updatedAt: IsoDateTime,
-    lastDiscoveredAt: IsoDateTime.nullable(),
-});
+}, "The portal must use an approved public HTTPS host without embedded credentials");
+// The portal namespaces every upstream tool, so the name alone identifies the target server. Intel
+// never learns which server that is — the portal resolves it and attaches the credentials.
+export const ToolName = z.string().min(1).max(240);
 export const ToolAnnotations = z.strictObject({
     title: z.string().max(240).optional(),
     readOnlyHint: z.boolean().optional(),
@@ -247,40 +246,22 @@ export const ToolAnnotations = z.strictObject({
     openWorldHint: z.boolean().optional(),
 });
 export const ToolCapability = z.strictObject({
-    sourceId: IntelId,
-    name: z.string().min(1).max(240),
+    name: ToolName,
     title: z.string().max(240).nullable(),
     description: z.string().max(10_000).nullable(),
     inputSchema: z.record(z.string(), z.unknown()),
     outputSchema: z.record(z.string(), z.unknown()).nullable(),
     annotations: ToolAnnotations,
     fingerprint: z.string().regex(/^[a-f0-9]{64}$/),
-    discoveredAt: IsoDateTime,
-});
-export const ToolConnectionStatus = z.enum(["connected", "missing", "forbidden", "invalid"]);
-export const ToolCatalogEntry = z.strictObject({
-    source: ToolSource,
-    capability: ToolCapability,
-    connectionStatus: ToolConnectionStatus,
-});
-export const ToolSourceList = z.strictObject({ items: z.array(ToolSource) });
-export const ToolCatalog = z.strictObject({ items: z.array(ToolCatalogEntry) });
-export const CreateToolSourceInput = z.strictObject({
-    name: z.string().trim().min(1).max(120),
-    url: ToolSourceUrl,
-    connectionHandle: z
-        .string()
-        .regex(/^[a-z0-9][a-z0-9-]{1,62}$/)
-        .default("intel-tools"),
-    idempotencyKey: z.string().min(8).max(200),
 });
-export const DiscoverToolSourceInput = z.strictObject({
-    sourceId: IntelId,
-    idempotencyKey: z.string().min(8).max(200),
+// The catalog reflects one live tools/list for the requesting user. It is never stored as a
+// permission mirror, so there is no per-source state and no Intel-owned connection status.
+export const ToolCatalog = z.strictObject({
+    portalConnected: z.boolean(),
+    items: z.array(ToolCapability),
 });
 export const TestToolInput = z.strictObject({
-    sourceId: IntelId,
-    name: z.string().min(1).max(240),
+    name: ToolName,
     arguments: z.record(z.string(), z.unknown()).default({}),
 });
 export const ExecuteToolInput = TestToolInput;
@@ -325,8 +306,7 @@ export const FlowNode = z.discriminatedUnion("kind", [
         ...FlowNodeBase,
         kind: z.literal("tool"),
         configuration: z.strictObject({
-            sourceId: IntelId,
-            toolName: z.string().min(1).max(240),
+            toolName: ToolName,
             fingerprint: z
                 .string()
                 .regex(/^[a-f0-9]{64}$/)
@@ -370,6 +350,10 @@ export const FlowGraph = z.strictObject({
 });
 export const Flow = z.strictObject({
     id: IntelId,
+    // The one thing a Flow shares with a document: its place in the Knowledge folder tree (ADR-0004).
+    // Everything else stays apart — versions, R2 body and Vectorize belong to the document, the graph,
+    // runs and approvals to the flow. `null` is the root of that same tree.
+    parentId: IntelId.nullable(),
     title: z.string().min(1).max(240),
     description: z.string().max(2_000).nullable(),
     ownerId: IntelId,
@@ -393,10 +377,30 @@ export const FlowDocument = z.strictObject({
 });
 export const FlowList = z.strictObject({ items: z.array(Flow) });
 export const CreateFlowInput = z.strictObject({
+    parentId: IntelId.nullable().default(null),
     title: z.string().trim().min(1).max(240),
     description: z.string().trim().max(2_000).nullable().default(null),
     idempotencyKey: z.string().min(8).max(200),
 });
+// Renaming and moving a flow. Both are organization and nothing else: they touch no version, no
+// published graph and no run, because organization has to stay free of consequence or nobody dares
+// to reorganize (ADR-0004).
+export const UpdateFlowInput = z
+    .strictObject({
+    flowId: IntelId,
+    baseUpdatedAt: IsoDateTime,
+    title: z.string().trim().min(1).max(240).optional(),
+    description: z.string().trim().max(2_000).nullable().optional(),
+    parentId: IntelId.nullable().optional(),
+    idempotencyKey: z.string().min(8).max(200),
+})
+    .refine((input) => input.title !== undefined || input.description !== undefined || input.parentId !== undefined, { error: "At least one change is required" });
+// Three answers, not two: an absent `parentId` lists every visible flow (the search dialog asks
+// that), `null` lists the root of the shared tree and an ID lists one folder (the sidebar tree asks
+// per level, which is what keeps the tree off the N+1 it used to load with).
+export const ListFlowsInput = z.strictObject({
+    parentId: IntelId.nullable().optional(),
+});
 export const GetFlowInput = z.strictObject({ flowId: IntelId });
 export const SaveFlowVersionInput = z.strictObject({
     flowId: IntelId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anchrd/intel-contract",
-  "version": "0.1.1",
+  "version": "0.2.1",
   "type": "module",
   "license": "UNLICENSED",
   "repository": {