@melra/protocol 0.3.0-alpha.10 → 0.3.0-alpha.12

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export declare const PROTOCOL_VERSION = "2025-11-25";
-export declare const PRODUCT_VERSION = "0.3.0-alpha.10";
+export declare const PRODUCT_VERSION = "0.3.0-alpha.12";
 export declare const FileOperationSchema: z.ZodObject<{
     kind: z.ZodLiteral<"file">;
     action: z.ZodEnum<{
@@ -202,6 +202,30 @@ export declare const ComputerOperationSchema: z.ZodObject<{
     }, z.core.$strict>>;
     timeoutMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
+export declare const HttpOperationSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"http">;
+    action: z.ZodLiteral<"request">;
+    method: z.ZodDefault<z.ZodEnum<{
+        DELETE: "DELETE";
+        GET: "GET";
+        HEAD: "HEAD";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+    }>>;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    content: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    spend: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+    }, z.core.$strict>>;
+    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
 export declare const SystemOperationSchema: z.ZodObject<{
     kind: z.ZodLiteral<"system">;
     action: z.ZodLiteral<"info">;
@@ -387,6 +411,29 @@ export declare const OperationSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         name: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"http">;
+    action: z.ZodLiteral<"request">;
+    method: z.ZodDefault<z.ZodEnum<{
+        DELETE: "DELETE";
+        GET: "GET";
+        HEAD: "HEAD";
+        POST: "POST";
+        PUT: "PUT";
+        PATCH: "PATCH";
+    }>>;
+    url: z.ZodString;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    content: z.ZodOptional<z.ZodString>;
+    idempotencyKey: z.ZodOptional<z.ZodString>;
+    spend: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        amount: z.ZodNumber;
+        currency: z.ZodString;
+    }, z.core.$strict>>;
+    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"system">;
     action: z.ZodLiteral<"info">;
@@ -397,6 +444,7 @@ export type BrowserTarget = z.infer<typeof BrowserTargetSchema>;
 export type BrowserOperation = z.infer<typeof BrowserOperationSchema>;
 export type MemoryOperation = z.infer<typeof MemoryOperationSchema>;
 export type ComputerOperation = z.infer<typeof ComputerOperationSchema>;
+export type HttpOperation = z.infer<typeof HttpOperationSchema>;
 export type SystemOperation = z.infer<typeof SystemOperationSchema>;
 export type Operation = z.infer<typeof OperationSchema>;
 export declare const EvidencePredicateSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -426,6 +474,20 @@ export declare const EvidencePredicateSchema: z.ZodDiscriminatedUnion<[z.ZodObje
 }, z.core.$strict>, z.ZodObject<{
     type: z.ZodLiteral<"page_contains">;
     text: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"http_resource_matches">;
+    url: z.ZodString;
+    method: z.ZodDefault<z.ZodEnum<{
+        GET: "GET";
+        HEAD: "HEAD";
+    }>>;
+    path: z.ZodString;
+    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>, z.ZodObject<{
+    type: z.ZodLiteral<"custom">;
+    verifier: z.ZodString;
+    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
 }, z.core.$strict>], "type">;
 export type EvidencePredicate = z.infer<typeof EvidencePredicateSchema>;
 export declare const PrincipalKindSchema: z.ZodEnum<{
@@ -692,6 +754,29 @@ export declare const TaskRequestSchema: z.ZodObject<{
             name: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"http">;
+        action: z.ZodLiteral<"request">;
+        method: z.ZodDefault<z.ZodEnum<{
+            DELETE: "DELETE";
+            GET: "GET";
+            HEAD: "HEAD";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+        }>>;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        content: z.ZodOptional<z.ZodString>;
+        idempotencyKey: z.ZodOptional<z.ZodString>;
+        spend: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            amount: z.ZodNumber;
+            currency: z.ZodString;
+        }, z.core.$strict>>;
+        maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"system">;
         action: z.ZodLiteral<"info">;
@@ -734,6 +819,62 @@ export declare const TaskRequestSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+    }, z.core.$strict>], "type">>>;
+    reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"result_equals">;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"result_contains">;
+        path: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_exists">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_absent">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_hash">;
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"exit_code">;
+        value: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"url_matches">;
+        pattern: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"page_contains">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">>>;
     identity: z.ZodOptional<z.ZodObject<{
         principal: z.ZodObject<{
@@ -855,8 +996,128 @@ export declare const CapabilityGrantSchema: z.ZodObject<{
     principal: z.ZodDefault<z.ZodString>;
     validUntil: z.ZodOptional<z.ZodString>;
     policyVersion: z.ZodOptional<z.ZodString>;
+    maxOperations: z.ZodOptional<z.ZodNumber>;
+    provider: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        account: z.ZodOptional<z.ZodString>;
+        amountMax: z.ZodOptional<z.ZodNumber>;
+        dailyMax: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type CapabilityGrant = z.infer<typeof CapabilityGrantSchema>;
+/**
+ * One secret the kernel holds so the agent does not have to.
+ *
+ * The whole point is the asymmetry between the two lists. `hosts` says where
+ * the secret may travel; `capability` says what may be done while holding it.
+ * A request to a host outside `hosts` is sent *without* the credential, because
+ * a secret that follows the caller wherever it points is not scoped to
+ * anything. A request to a host inside `hosts` that the capability does not
+ * cover is *refused* — that is the caller reaching past the authority it was
+ * delegated, and it is the difference between possessing a credential and
+ * possessing authority.
+ */
+export declare const CredentialDefinitionSchema: z.ZodObject<{
+    source: z.ZodUnion<readonly [z.ZodObject<{
+        env: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strict>]>;
+    inject: z.ZodObject<{
+        header: z.ZodString;
+        scheme: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    hosts: z.ZodArray<z.ZodString>;
+    capability: z.ZodString;
+}, z.core.$strict>;
+export type CredentialDefinition = z.infer<typeof CredentialDefinitionSchema>;
+export declare const CredentialsSchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    source: z.ZodUnion<readonly [z.ZodObject<{
+        env: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        file: z.ZodString;
+    }, z.core.$strict>]>;
+    inject: z.ZodObject<{
+        header: z.ZodString;
+        scheme: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    hosts: z.ZodArray<z.ZodString>;
+    capability: z.ZodString;
+}, z.core.$strict>>;
+/**
+ * What MELRA promises about how many times an effect can run.
+ *
+ * Stating it is the point. The rule that mutations are never retried already
+ * governed execution, but it lived inside the controller, so a caller setting
+ * `budget.maxRetries: 3` on a write had no way to learn that the number would
+ * be ignored. Derived from the classified effect, never taken from the caller —
+ * a caller that could declare its own `POST` `provider-idempotent` would have
+ * bought itself a retry it is not entitled to.
+ */
+export type ExecutionGuarantee = 
+/** No state change, so there is nothing to guarantee. Freely retried. */
+"read-only"
+/** Executed zero or one times. Never retried. */
+ | "at-most-once"
+/** May run more than once; the caller must tolerate a repeat. */
+ | "at-least-once"
+/** Retry-safe because the provider dedupes on a key MELRA sends. */
+ | "provider-idempotent"
+/** Outcome may be unknown after a crash; a reconciliation pass decides. */
+ | "reconciliation-required"
+/** Undone by a declared compensating effect. */
+ | "compensatable";
+/**
+ * How the kernel is deployed. Not a property of a request — a property of the
+ * process, recorded on every effect that process runs.
+ *
+ * `developer` is the default and the reason MELRA can be tried in thirty
+ * seconds: it governs the effects it is asked for, and says plainly that a
+ * harness holding a native terminal as well makes it optional. `enforced` is the
+ * operator asserting the alternative has been removed. MELRA cannot check that
+ * assertion from inside the process, so it does the part it can: it closes every
+ * door of its own that would contradict the claim.
+ */
+export type DeploymentMode = "developer" | "enforced";
+/**
+ * Only the exact word counts. A stray `MELRA_MODE=Enforced` left in a shell
+ * profile is a typo, and quietly reading it as developer mode would hand back
+ * the bypasses the operator thought they had turned off.
+ */
+export declare function deploymentMode(value: string | undefined): DeploymentMode;
+/**
+ * `at-least-once`, `provider-idempotent` and `compensatable` still need an
+ * adapter that can offer them, so nothing derives those three yet.
+ * `reconciliation-required` is real: a caller that declared `reconciliation`
+ * predicates has given MELRA a way to settle an outcome it could not observe,
+ * and that is a different promise from `at-most-once`, which says the effect
+ * ran zero or one times but not which.
+ */
+export declare function executionGuaranteeFor(effect: Effect, 
+/** Whether the request declared a way to settle an unknown outcome. */
+reconcilable?: boolean): ExecutionGuarantee;
+/**
+ * Prefix on an adapter error that does *not* claim the effect failed to happen.
+ *
+ * The distinction is the whole of it. A request that never left the machine —
+ * DNS failure, connection refused — definitely did nothing, and `failed` is the
+ * truth. A request that was written to the socket and went unanswered is a
+ * different fact: the far end may have done the work and lost the reply.
+ * Reporting the second as `failed` is the one lie a kernel that owns effects
+ * cannot afford to tell, so an adapter that can tell the two apart marks it and
+ * the executor parks the task for reconciliation instead of asserting either
+ * outcome.
+ */
+export declare const OUTCOME_UNKNOWN_PREFIX = "effect_outcome_unknown:";
+/** Wraps a reason as an error whose outcome MELRA cannot determine. */
+export declare function outcomeUnknown(reason: string): Error;
+export declare function isOutcomeUnknown(message: string): boolean;
+/**
+ * Whether more than one attempt is permitted. The executor asks the guarantee
+ * rather than re-deriving the rule from the effect, so the promise on the
+ * contract and the behaviour in the loop cannot drift apart.
+ */
+export declare function allowsRetry(guarantee: ExecutionGuarantee): boolean;
 /**
  * One bounded effect, named as a single object.
  *
@@ -875,6 +1136,8 @@ export interface EffectContract {
     risk: Risk;
     target: string;
     traits: CapabilityTrait[];
+    /** How many times this effect can run. See `ExecutionGuarantee`. */
+    executionGuarantee: ExecutionGuarantee;
     /** Effects this request refuses for itself, honoured even in unhinged mode. */
     forbiddenEffects: Effect[];
     /** What must hold afterwards for the effect to count as a success. */
@@ -1075,6 +1338,29 @@ export declare const OperationNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1117,6 +1403,62 @@ export declare const OperationNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -1184,6 +1526,20 @@ export declare const ConditionNodeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">;
     whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
         goal: z.ZodString;
@@ -1368,6 +1724,29 @@ export declare const ConditionNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1410,6 +1789,62 @@ export declare const ConditionNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -1621,6 +2056,29 @@ export declare const ConditionNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1663,6 +2121,62 @@ export declare const ConditionNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -1879,6 +2393,29 @@ export declare const ParallelNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -1921,20 +2458,76 @@ export declare const ParallelNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
-        identity: z.ZodOptional<z.ZodObject<{
-            principal: z.ZodObject<{
-                kind: z.ZodEnum<{
-                    session: "session";
-                    organization: "organization";
-                    human: "human";
-                    harness: "harness";
-                    agent: "agent";
-                    subagent: "subagent";
-                    service: "service";
-                }>;
-                id: z.ZodString;
-            }, z.core.$strict>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        identity: z.ZodOptional<z.ZodObject<{
+            principal: z.ZodObject<{
+                kind: z.ZodEnum<{
+                    session: "session";
+                    organization: "organization";
+                    human: "human";
+                    harness: "harness";
+                    agent: "agent";
+                    subagent: "subagent";
+                    service: "service";
+                }>;
+                id: z.ZodString;
+            }, z.core.$strict>;
             onBehalfOf: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 kind: z.ZodEnum<{
                     session: "session";
@@ -2137,6 +2730,29 @@ export declare const BoundedLoopNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -2179,6 +2795,62 @@ export declare const BoundedLoopNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -2235,6 +2907,20 @@ export declare const BoundedLoopNodeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">>;
 }, z.core.$strict>;
 export declare const CheckpointNodeSchema: z.ZodObject<{
@@ -2430,6 +3116,29 @@ export declare const CompensationNodeSchema: z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -2472,6 +3181,62 @@ export declare const CompensationNodeSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -2542,6 +3307,20 @@ export declare const DelegationNodeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">>>;
 }, z.core.$strict>;
 export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -2731,6 +3510,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -2773,6 +3575,62 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -2838,6 +3696,20 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">;
     whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
         goal: z.ZodString;
@@ -3022,6 +3894,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3064,6 +3959,62 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3275,6 +4226,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3317,6 +4291,62 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3532,6 +4562,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3574,6 +4627,62 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3789,6 +4898,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -3831,6 +4963,62 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -3887,6 +5075,20 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">>;
 }, z.core.$strict>, z.ZodObject<{
     id: z.ZodString;
@@ -4080,6 +5282,29 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
                 name: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
             timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"http">;
+            action: z.ZodLiteral<"request">;
+            method: z.ZodDefault<z.ZodEnum<{
+                DELETE: "DELETE";
+                GET: "GET";
+                HEAD: "HEAD";
+                POST: "POST";
+                PUT: "PUT";
+                PATCH: "PATCH";
+            }>>;
+            url: z.ZodString;
+            headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            content: z.ZodOptional<z.ZodString>;
+            idempotencyKey: z.ZodOptional<z.ZodString>;
+            spend: z.ZodOptional<z.ZodObject<{
+                provider: z.ZodString;
+                account: z.ZodOptional<z.ZodString>;
+                amount: z.ZodNumber;
+                currency: z.ZodString;
+            }, z.core.$strict>>;
+            maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"system">;
             action: z.ZodLiteral<"info">;
@@ -4122,6 +5347,62 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+        }, z.core.$strict>], "type">>>;
+        reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            type: z.ZodLiteral<"result_equals">;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"result_contains">;
+            path: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_exists">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_absent">;
+            path: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"file_hash">;
+            path: z.ZodString;
+            sha256: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"exit_code">;
+            value: z.ZodNumber;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"url_matches">;
+            pattern: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"page_contains">;
+            text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
         identity: z.ZodOptional<z.ZodObject<{
             principal: z.ZodObject<{
@@ -4190,6 +5471,20 @@ export declare const WorkflowNodeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">>>;
 }, z.core.$strict>], "type">;
 export declare const WorkflowInputSchema: z.ZodObject<{
@@ -4390,6 +5685,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -4432,6 +5750,62 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -4497,6 +5871,20 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">;
         whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
             goal: z.ZodString;
@@ -4681,6 +6069,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -4723,6 +6134,62 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -4928,28 +6395,93 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     PAGEDOWN: "PAGEDOWN";
                     DELETE: "DELETE";
                 }>>;
-                deltaY: z.ZodOptional<z.ZodNumber>;
-                target: z.ZodOptional<z.ZodObject<{
-                    role: z.ZodOptional<z.ZodString>;
-                    name: z.ZodOptional<z.ZodString>;
-                }, z.core.$strict>>;
+                deltaY: z.ZodOptional<z.ZodNumber>;
+                target: z.ZodOptional<z.ZodObject<{
+                    role: z.ZodOptional<z.ZodString>;
+                    name: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"system">;
+                action: z.ZodLiteral<"info">;
+            }, z.core.$strict>], "kind">;
+            constraints: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            forbiddenEffects: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+                read: "read";
+                mutate: "mutate";
+                destructive: "destructive";
+            }>>>;
+            budget: z.ZodDefault<z.ZodObject<{
+                maxSteps: z.ZodDefault<z.ZodNumber>;
+                maxDurationMs: z.ZodDefault<z.ZodNumber>;
+                maxRetries: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>>;
+            requiredEvidence: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
-                kind: z.ZodLiteral<"system">;
-                action: z.ZodLiteral<"info">;
-            }, z.core.$strict>], "kind">;
-            constraints: z.ZodDefault<z.ZodArray<z.ZodString>>;
-            forbiddenEffects: z.ZodDefault<z.ZodArray<z.ZodEnum<{
-                read: "read";
-                mutate: "mutate";
-                destructive: "destructive";
-            }>>>;
-            budget: z.ZodDefault<z.ZodObject<{
-                maxSteps: z.ZodDefault<z.ZodNumber>;
-                maxDurationMs: z.ZodDefault<z.ZodNumber>;
-                maxRetries: z.ZodDefault<z.ZodNumber>;
-            }, z.core.$strict>>;
-            requiredEvidence: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
                 type: z.ZodLiteral<"result_equals">;
                 path: z.ZodString;
                 value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
@@ -4976,6 +6508,20 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5191,6 +6737,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -5233,6 +6802,62 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5448,6 +7073,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -5490,6 +7138,62 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5546,6 +7250,20 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>;
     }, z.core.$strict>, z.ZodObject<{
         id: z.ZodString;
@@ -5739,6 +7457,29 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
                     name: z.ZodOptional<z.ZodString>;
                 }, z.core.$strict>>;
                 timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"http">;
+                action: z.ZodLiteral<"request">;
+                method: z.ZodDefault<z.ZodEnum<{
+                    DELETE: "DELETE";
+                    GET: "GET";
+                    HEAD: "HEAD";
+                    POST: "POST";
+                    PUT: "PUT";
+                    PATCH: "PATCH";
+                }>>;
+                url: z.ZodString;
+                headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                content: z.ZodOptional<z.ZodString>;
+                idempotencyKey: z.ZodOptional<z.ZodString>;
+                spend: z.ZodOptional<z.ZodObject<{
+                    provider: z.ZodString;
+                    account: z.ZodOptional<z.ZodString>;
+                    amount: z.ZodNumber;
+                    currency: z.ZodString;
+                }, z.core.$strict>>;
+                maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>, z.ZodObject<{
                 kind: z.ZodLiteral<"system">;
                 action: z.ZodLiteral<"info">;
@@ -5781,6 +7522,62 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+            }, z.core.$strict>], "type">>>;
+            reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                type: z.ZodLiteral<"result_equals">;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"result_contains">;
+                path: z.ZodString;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_exists">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_absent">;
+                path: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"file_hash">;
+                path: z.ZodString;
+                sha256: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"exit_code">;
+                value: z.ZodNumber;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"url_matches">;
+                pattern: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"page_contains">;
+                text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
             identity: z.ZodOptional<z.ZodObject<{
                 principal: z.ZodObject<{
@@ -5849,6 +7646,20 @@ export declare const WorkflowDefinitionSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             type: z.ZodLiteral<"page_contains">;
             text: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"http_resource_matches">;
+            url: z.ZodString;
+            method: z.ZodDefault<z.ZodEnum<{
+                GET: "GET";
+                HEAD: "HEAD";
+            }>>;
+            path: z.ZodString;
+            value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+            timeoutMs: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>, z.ZodObject<{
+            type: z.ZodLiteral<"custom">;
+            verifier: z.ZodString;
+            params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
         }, z.core.$strict>], "type">>>;
     }, z.core.$strict>], "type">>;
     budget: z.ZodOptional<z.ZodObject<{
@@ -6302,6 +8113,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -6344,6 +8178,62 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -6409,6 +8299,20 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">;
             whenTrue: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 goal: z.ZodString;
@@ -6593,6 +8497,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -6635,6 +8562,62 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -6846,6 +8829,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -6888,6 +8894,62 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7103,6 +9165,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -7145,6 +9230,62 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7360,6 +9501,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -7402,6 +9566,62 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7458,6 +9678,20 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>;
         }, z.core.$strict>, z.ZodObject<{
             id: z.ZodString;
@@ -7651,6 +9885,29 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                         name: z.ZodOptional<z.ZodString>;
                     }, z.core.$strict>>;
                     timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    kind: z.ZodLiteral<"http">;
+                    action: z.ZodLiteral<"request">;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        DELETE: "DELETE";
+                        GET: "GET";
+                        HEAD: "HEAD";
+                        POST: "POST";
+                        PUT: "PUT";
+                        PATCH: "PATCH";
+                    }>>;
+                    url: z.ZodString;
+                    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                    content: z.ZodOptional<z.ZodString>;
+                    idempotencyKey: z.ZodOptional<z.ZodString>;
+                    spend: z.ZodOptional<z.ZodObject<{
+                        provider: z.ZodString;
+                        account: z.ZodOptional<z.ZodString>;
+                        amount: z.ZodNumber;
+                        currency: z.ZodString;
+                    }, z.core.$strict>>;
+                    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
                 }, z.core.$strict>, z.ZodObject<{
                     kind: z.ZodLiteral<"system">;
                     action: z.ZodLiteral<"info">;
@@ -7693,6 +9950,62 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
                 }, z.core.$strict>, z.ZodObject<{
                     type: z.ZodLiteral<"page_contains">;
                     text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+                }, z.core.$strict>], "type">>>;
+                reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+                    type: z.ZodLiteral<"result_equals">;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"result_contains">;
+                    path: z.ZodString;
+                    value: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_exists">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_absent">;
+                    path: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"file_hash">;
+                    path: z.ZodString;
+                    sha256: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"exit_code">;
+                    value: z.ZodNumber;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"url_matches">;
+                    pattern: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"page_contains">;
+                    text: z.ZodString;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"http_resource_matches">;
+                    url: z.ZodString;
+                    method: z.ZodDefault<z.ZodEnum<{
+                        GET: "GET";
+                        HEAD: "HEAD";
+                    }>>;
+                    path: z.ZodString;
+                    value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                    timeoutMs: z.ZodDefault<z.ZodNumber>;
+                }, z.core.$strict>, z.ZodObject<{
+                    type: z.ZodLiteral<"custom">;
+                    verifier: z.ZodString;
+                    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
                 }, z.core.$strict>], "type">>>;
                 identity: z.ZodOptional<z.ZodObject<{
                     principal: z.ZodObject<{
@@ -7761,6 +10074,20 @@ export declare const WorkflowPlanInputSchema: z.ZodObject<{
             }, z.core.$strict>, z.ZodObject<{
                 type: z.ZodLiteral<"page_contains">;
                 text: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"http_resource_matches">;
+                url: z.ZodString;
+                method: z.ZodDefault<z.ZodEnum<{
+                    GET: "GET";
+                    HEAD: "HEAD";
+                }>>;
+                path: z.ZodString;
+                value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+                timeoutMs: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strict>, z.ZodObject<{
+                type: z.ZodLiteral<"custom">;
+                verifier: z.ZodString;
+                params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
             }, z.core.$strict>], "type">>>;
         }, z.core.$strict>], "type">>;
         budget: z.ZodOptional<z.ZodObject<{
@@ -8043,6 +10370,29 @@ export declare const MelraPlanInputSchema: z.ZodObject<{
             name: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>>;
         timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"http">;
+        action: z.ZodLiteral<"request">;
+        method: z.ZodDefault<z.ZodEnum<{
+            DELETE: "DELETE";
+            GET: "GET";
+            HEAD: "HEAD";
+            POST: "POST";
+            PUT: "PUT";
+            PATCH: "PATCH";
+        }>>;
+        url: z.ZodString;
+        headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        content: z.ZodOptional<z.ZodString>;
+        idempotencyKey: z.ZodOptional<z.ZodString>;
+        spend: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodString;
+            account: z.ZodOptional<z.ZodString>;
+            amount: z.ZodNumber;
+            currency: z.ZodString;
+        }, z.core.$strict>>;
+        maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"system">;
         action: z.ZodLiteral<"info">;
@@ -8085,6 +10435,62 @@ export declare const MelraPlanInputSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         type: z.ZodLiteral<"page_contains">;
         text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
+    }, z.core.$strict>], "type">>>;
+    reconciliation: z.ZodDefault<z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"result_equals">;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"result_contains">;
+        path: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_exists">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_absent">;
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"file_hash">;
+        path: z.ZodString;
+        sha256: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"exit_code">;
+        value: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"url_matches">;
+        pattern: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"page_contains">;
+        text: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"http_resource_matches">;
+        url: z.ZodString;
+        method: z.ZodDefault<z.ZodEnum<{
+            GET: "GET";
+            HEAD: "HEAD";
+        }>>;
+        path: z.ZodString;
+        value: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strict>, z.ZodObject<{
+        type: z.ZodLiteral<"custom">;
+        verifier: z.ZodString;
+        params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodNull]>>>;
     }, z.core.$strict>], "type">>>;
     identity: z.ZodOptional<z.ZodObject<{
         principal: z.ZodObject<{