@melra/protocol 0.3.0-alpha.10 → 0.3.0-alpha.11

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const PROTOCOL_VERSION = "2025-11-25";
-export declare const PRODUCT_VERSION = "0.3.0-alpha.10";
+export declare const PRODUCT_VERSION = "0.3.0-alpha.11";
 export declare const FileOperationSchema: z.ZodObject<{
     kind: z.ZodLiteral<"file">;
     action: z.ZodEnum<{
@@ -202,6 +202,30 @@ export declare const ComputerOperationSchema: z.ZodObject<{
     }, z.core.$strict>>;
     timeoutMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
+export declare const HttpOperationSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"http">;
+    action: z.ZodLiteral<"request">;
+    method: z.ZodDefault<z.ZodEnum<{
+        DELETE: "DELETE";
+        GET: "GET";
+        HEAD: "HEAD";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+    }>>;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    content: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    spend: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+    }, z.core.$strict>>;
+    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
 export declare const SystemOperationSchema: z.ZodObject<{
     kind: z.ZodLiteral<"system">;
     action: z.ZodLiteral<"info">;
@@ -387,6 +411,29 @@ export declare const OperationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"http">;
+    action: z.ZodLiteral<"request">;
+    method: z.ZodDefault<z.ZodEnum<{
+        DELETE: "DELETE";
+        GET: "GET";
+        HEAD: "HEAD";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+    }>>;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    content: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    spend: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+    }, z.core.$strict>>;
+    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"system">;
     action: z.ZodLiteral<"info">;
@@ -397,6 +444,7 @@ export type BrowserTarget = z.infer<typeof BrowserTargetSchema>;
 export type BrowserOperation = z.infer<typeof BrowserOperationSchema>;
 export type MemoryOperation = z.infer<typeof MemoryOperationSchema>;
 export type ComputerOperation = z.infer<typeof ComputerOperationSchema>;
+export type HttpOperation = z.infer<typeof HttpOperationSchema>;
 export type SystemOperation = z.infer<typeof SystemOperationSchema>;
 export type Operation = z.infer<typeof OperationSchema>;
 export declare const EvidencePredicateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -426,6 +474,16 @@ export declare const EvidencePredicateSchema: z.ZodDiscriminatedUnion<[z.ZodObje
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"page_contains">;
     text: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"http_resource_matches">;
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodEnum<{
+        GET: "GET";
+        HEAD: "HEAD";
+    }>>;
+    path: z.ZodString;
+    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>], "type">;
 export type EvidencePredicate = z.infer<typeof EvidencePredicateSchema>;
 export declare const PrincipalKindSchema: z.ZodEnum<{
@@ -692,6 +750,29 @@ export declare const TaskRequestSchema: z.ZodObject<{
             name: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"http">;
+        action: z.ZodLiteral<"request">;
+        method: z.ZodDefault<z.ZodEnum<{
+            DELETE: "DELETE";
+            GET: "GET";
+            HEAD: "HEAD";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+        }>>;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        content: z.ZodOptional<z.ZodString>;
+        idempotencyKey: z.ZodOptional<z.ZodString>;
+        spend: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            amount: z.ZodNumber;
+            currency: z.ZodString;
+        }, z.core.$strict>>;
+        maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"system">;
         action: z.ZodLiteral<"info">;
@@ -734,6 +815,54 @@ export declare const TaskRequestSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>], "type">>>;
+    reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"result_equals">;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"result_contains">;
+        path: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_exists">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_absent">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_hash">;
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"exit_code">;
+        value: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"url_matches">;
+        pattern: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"page_contains">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">>>;
     identity: z.ZodOptional<z.ZodObject<{
         principal: z.ZodObject<{
@@ -855,8 +984,128 @@ export declare const CapabilityGrantSchema: z.ZodObject<{
     principal: z.ZodDefault<z.ZodString>;
     validUntil: z.ZodOptional<z.ZodString>;
     policyVersion: z.ZodOptional<z.ZodString>;
+    maxOperations: z.ZodOptional<z.ZodNumber>;
+    provider: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        amountMax: z.ZodOptional<z.ZodNumber>;
+        dailyMax: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type CapabilityGrant = z.infer<typeof CapabilityGrantSchema>;
+/**
+ * One secret the kernel holds so the agent does not have to.
+ *
+ * The whole point is the asymmetry between the two lists. `hosts` says where
+ * the secret may travel; `capability` says what may be done while holding it.
+ * A request to a host outside `hosts` is sent *without* the credential, because
+ * a secret that follows the caller wherever it points is not scoped to
+ * anything. A request to a host inside `hosts` that the capability does not
+ * cover is *refused* — that is the caller reaching past the authority it was
+ * delegated, and it is the difference between possessing a credential and
+ * possessing authority.
+ */
+export declare const CredentialDefinitionSchema: z.ZodObject<{
+    source: z.ZodUnion<readonly [z.ZodObject<{
+        env: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strict>]>;
+    inject: z.ZodObject<{
+        header: z.ZodString;
+        scheme: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    hosts: z.ZodArray<z.ZodString>;
+    capability: z.ZodString;
+}, z.core.$strict>;
+export type CredentialDefinition = z.infer<typeof CredentialDefinitionSchema>;
+export declare const CredentialsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    source: z.ZodUnion<readonly [z.ZodObject<{
+        env: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strict>]>;
+    inject: z.ZodObject<{
+        header: z.ZodString;
+        scheme: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    hosts: z.ZodArray<z.ZodString>;
+    capability: z.ZodString;
+}, z.core.$strict>>;
+/**
+ * What MELRA promises about how many times an effect can run.
+ *
+ * Stating it is the point. The rule that mutations are never retried already
+ * governed execution, but it lived inside the controller, so a caller setting
+ * `budget.maxRetries: 3` on a write had no way to learn that the number would
+ * be ignored. Derived from the classified effect, never taken from the caller —
+ * a caller that could declare its own `POST` `provider-idempotent` would have
+ * bought itself a retry it is not entitled to.
+ */
+export type ExecutionGuarantee = 
+/** No state change, so there is nothing to guarantee. Freely retried. */
+"read-only"
+/** Executed zero or one times. Never retried. */
+ | "at-most-once"
+/** May run more than once; the caller must tolerate a repeat. */
+ | "at-least-once"
+/** Retry-safe because the provider dedupes on a key MELRA sends. */
+ | "provider-idempotent"
+/** Outcome may be unknown after a crash; a reconciliation pass decides. */
+ | "reconciliation-required"
+/** Undone by a declared compensating effect. */
+ | "compensatable";
+/**
+ * How the kernel is deployed. Not a property of a request — a property of the
+ * process, recorded on every effect that process runs.
+ *
+ * `developer` is the default and the reason MELRA can be tried in thirty
+ * seconds: it governs the effects it is asked for, and says plainly that a
+ * harness holding a native terminal as well makes it optional. `enforced` is the
+ * operator asserting the alternative has been removed. MELRA cannot check that
+ * assertion from inside the process, so it does the part it can: it closes every
+ * door of its own that would contradict the claim.
+ */
+export type DeploymentMode = "developer" | "enforced";
+/**
+ * Only the exact word counts. A stray `MELRA_MODE=Enforced` left in a shell
+ * profile is a typo, and quietly reading it as developer mode would hand back
+ * the bypasses the operator thought they had turned off.
+ */
+export declare function deploymentMode(value: string | undefined): DeploymentMode;
+/**
+ * `at-least-once`, `provider-idempotent` and `compensatable` still need an
+ * adapter that can offer them, so nothing derives those three yet.
+ * `reconciliation-required` is real: a caller that declared `reconciliation`
+ * predicates has given MELRA a way to settle an outcome it could not observe,
+ * and that is a different promise from `at-most-once`, which says the effect
+ * ran zero or one times but not which.
+ */
+export declare function executionGuaranteeFor(effect: Effect, 
+/** Whether the request declared a way to settle an unknown outcome. */
+reconcilable?: boolean): ExecutionGuarantee;
+/**
+ * Prefix on an adapter error that does *not* claim the effect failed to happen.
+ *
+ * The distinction is the whole of it. A request that never left the machine —
+ * DNS failure, connection refused — definitely did nothing, and `failed` is the
+ * truth. A request that was written to the socket and went unanswered is a
+ * different fact: the far end may have done the work and lost the reply.
+ * Reporting the second as `failed` is the one lie a kernel that owns effects
+ * cannot afford to tell, so an adapter that can tell the two apart marks it and
+ * the executor parks the task for reconciliation instead of asserting either
+ * outcome.
+ */
+export declare const OUTCOME_UNKNOWN_PREFIX = "effect_outcome_unknown:";
+/** Wraps a reason as an error whose outcome MELRA cannot determine. */
+export declare function outcomeUnknown(reason: string): Error;
+export declare function isOutcomeUnknown(message: string): boolean;
+/**
+ * Whether more than one attempt is permitted. The executor asks the guarantee
+ * rather than re-deriving the rule from the effect, so the promise on the
+ * contract and the behaviour in the loop cannot drift apart.
+ */
+export declare function allowsRetry(guarantee: ExecutionGuarantee): boolean;
 /**
  * One bounded effect, named as a single object.
  *
@@ -875,6 +1124,8 @@ export interface EffectContract {
     risk: Risk;
     target: string;
     traits: CapabilityTrait[];
+    /** How many times this effect can run. See `ExecutionGuarantee`. */
+    executionGuarantee: ExecutionGuarantee;
     /** Effects this request refuses for itself, honoured even in unhinged mode. */
     forbiddenEffects: Effect[];
     /** What must hold afterwards for the effect to count as a success. */
@@ -1075,6 +1326,29 @@ export declare const OperationNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1117,6 +1391,54 @@ export declare const OperationNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -1184,6 +1506,16 @@ export declare const ConditionNodeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">;
     whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
         goal: z.ZodString;
@@ -1368,6 +1700,29 @@ export declare const ConditionNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1410,6 +1765,54 @@ export declare const ConditionNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -1621,6 +2024,29 @@ export declare const ConditionNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1663,6 +2089,54 @@ export declare const ConditionNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -1879,6 +2353,29 @@ export declare const ParallelNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1921,31 +2418,79 @@ export declare const ParallelNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
-        identity: z.ZodOptional<z.ZodObject<{
-            principal: z.ZodObject<{
-                kind: z.ZodEnum<{
-                    session: "session";
-                    organization: "organization";
-                    human: "human";
-                    harness: "harness";
-                    agent: "agent";
-                    subagent: "subagent";
-                    service: "service";
-                }>;
-                id: z.ZodString;
-            }, z.core.$strict>;
-            onBehalfOf: z.ZodDefault<z.ZodArray<z.ZodObject<{
-                kind: z.ZodEnum<{
-                    session: "session";
-                    organization: "organization";
-                    human: "human";
-                    harness: "harness";
-                    agent: "agent";
-                    subagent: "subagent";
-                    service: "service";
-                }>;
-                id: z.ZodString;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        identity: z.ZodOptional<z.ZodObject<{
+            principal: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    session: "session";
+                    organization: "organization";
+                    human: "human";
+                    harness: "harness";
+                    agent: "agent";
+                    subagent: "subagent";
+                    service: "service";
+                }>;
+                id: z.ZodString;
+            }, z.core.$strict>;
+            onBehalfOf: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                kind: z.ZodEnum<{
+                    session: "session";
+                    organization: "organization";
+                    human: "human";
+                    harness: "harness";
+                    agent: "agent";
+                    subagent: "subagent";
+                    service: "service";
+                }>;
+                id: z.ZodString;
             }, z.core.$strict>>>;
         }, z.core.$strict>>;
     }, z.core.$strict>>>;
@@ -2137,6 +2682,29 @@ export declare const BoundedLoopNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -2179,6 +2747,54 @@ export declare const BoundedLoopNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -2235,6 +2851,16 @@ export declare const BoundedLoopNodeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">>;
 }, z.core.$strict>;
 export declare const CheckpointNodeSchema: z.ZodObject<{
@@ -2430,6 +3056,29 @@ export declare const CompensationNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -2472,6 +3121,54 @@ export declare const CompensationNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -2542,6 +3239,16 @@ export declare const DelegationNodeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">>>;
 }, z.core.$strict>;
 export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -2731,6 +3438,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -2773,6 +3503,54 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -2838,6 +3616,16 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">;
     whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
         goal: z.ZodString;
@@ -3022,6 +3810,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3064,6 +3875,54 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3275,6 +4134,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3317,6 +4199,54 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3532,6 +4462,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3574,6 +4527,54 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3789,6 +4790,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3831,6 +4855,54 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3887,6 +4959,16 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">>;
 }, z.core.$strict>, z.ZodObject<{
     id: z.ZodString;
@@ -4080,6 +5162,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -4122,6 +5227,54 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -4190,6 +5343,16 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">>>;
 }, z.core.$strict>], "type">;
 export declare const WorkflowInputSchema: z.ZodObject<{
@@ -4390,6 +5553,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -4432,6 +5618,54 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -4497,6 +5731,16 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">;
         whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
             goal: z.ZodString;
@@ -4681,6 +5925,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -4723,6 +5990,54 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -4934,6 +6249,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -4976,6 +6314,54 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5191,6 +6577,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -5233,6 +6642,54 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5448,6 +6905,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -5490,6 +6970,54 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5546,6 +7074,16 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>;
     }, z.core.$strict>, z.ZodObject<{
         id: z.ZodString;
@@ -5739,6 +7277,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -5781,6 +7342,54 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5849,6 +7458,16 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>], "type">>>;
     }, z.core.$strict>], "type">>;
     budget: z.ZodOptional<z.ZodObject<{
@@ -6302,6 +7921,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -6344,6 +7986,54 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -6409,6 +8099,16 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">;
             whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 goal: z.ZodString;
@@ -6587,28 +8287,89 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         PAGEDOWN: "PAGEDOWN";
                         DELETE: "DELETE";
                     }>>;
-                    deltaY: z.ZodOptional<z.ZodNumber>;
-                    target: z.ZodOptional<z.ZodObject<{
-                        role: z.ZodOptional<z.ZodString>;
-                        name: z.ZodOptional<z.ZodString>;
-                    }, z.core.$strict>>;
+                    deltaY: z.ZodOptional<z.ZodNumber>;
+                    target: z.ZodOptional<z.ZodObject<{
+                        role: z.ZodOptional<z.ZodString>;
+                        name: z.ZodOptional<z.ZodString>;
+                    }, z.core.$strict>>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"system">;
+                    action: z.ZodLiteral<"info">;
+                }, z.core.$strict>], "kind">;
+                constraints: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                forbiddenEffects: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                    read: "read";
+                    mutate: "mutate";
+                    destructive: "destructive";
+                }>>>;
+                budget: z.ZodDefault<z.ZodObject<{
+                    maxSteps: z.ZodDefault<z.ZodNumber>;
+                    maxDurationMs: z.ZodDefault<z.ZodNumber>;
+                    maxRetries: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>>;
+                requiredEvidence: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
-                }, z.core.$strict>, z.ZodObject<{
-                    kind: z.ZodLiteral<"system">;
-                    action: z.ZodLiteral<"info">;
-                }, z.core.$strict>], "kind">;
-                constraints: z.ZodDefault<z.ZodArray<z.ZodString>>;
-                forbiddenEffects: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-                    read: "read";
-                    mutate: "mutate";
-                    destructive: "destructive";
-                }>>>;
-                budget: z.ZodDefault<z.ZodObject<{
-                    maxSteps: z.ZodDefault<z.ZodNumber>;
-                    maxDurationMs: z.ZodDefault<z.ZodNumber>;
-                    maxRetries: z.ZodDefault<z.ZodNumber>;
-                }, z.core.$strict>>;
-                requiredEvidence: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                     type: z.ZodLiteral<"result_equals">;
                     path: z.ZodString;
                     value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
@@ -6635,6 +8396,16 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -6846,6 +8617,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -6888,6 +8682,54 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7103,6 +8945,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -7145,6 +9010,54 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7360,6 +9273,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -7402,6 +9338,54 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7458,6 +9442,16 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>;
         }, z.core.$strict>, z.ZodObject<{
             id: z.ZodString;
@@ -7651,6 +9645,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -7693,6 +9710,54 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7761,6 +9826,16 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>], "type">>>;
         }, z.core.$strict>], "type">>;
         budget: z.ZodOptional<z.ZodObject<{
@@ -8043,6 +10118,29 @@ export declare const MelraPlanInputSchema: z.ZodObject<{
             name: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"http">;
+        action: z.ZodLiteral<"request">;
+        method: z.ZodDefault<z.ZodEnum<{
+            DELETE: "DELETE";
+            GET: "GET";
+            HEAD: "HEAD";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+        }>>;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        content: z.ZodOptional<z.ZodString>;
+        idempotencyKey: z.ZodOptional<z.ZodString>;
+        spend: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            amount: z.ZodNumber;
+            currency: z.ZodString;
+        }, z.core.$strict>>;
+        maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"system">;
         action: z.ZodLiteral<"info">;
@@ -8085,6 +10183,54 @@ export declare const MelraPlanInputSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>], "type">>>;
+    reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"result_equals">;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"result_contains">;
+        path: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_exists">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_absent">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_hash">;
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"exit_code">;
+        value: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"url_matches">;
+        pattern: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"page_contains">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>], "type">>>;
     identity: z.ZodOptional<z.ZodObject<{
         principal: z.ZodObject<{