@oomol-lab/open-flow 0.1.0-beta.73 → 0.1.0-beta.75

package/dist/common/control-requests.js

@@ -12285,14 +12285,186 @@ function decisionTask(questions = [defaultDecisionQuestion()], name = "AI Decisi
 	};
 }
 //#endregion
-//#region src/openapi/common/authBindings.ts
+//#region src/http/common/authBindings.ts
 /** Never allow credentials to enter a Revision as literal node inputs. */
-function assertOpenApiAuthBindings(document) {
+function assertHttpAuthBindings(document) {
 	for (const node of Object.values(document.graph.nodes)) {
-		if (node.kind != "task" || !("executor" in node.task) || node.task.executor.kind != "openapi") continue;
-		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("OpenAPI authentication accepts deployment variables and upstream outputs only.");
+		if (node.kind != "task" || !("executor" in node.task) || !["openapi", "http-request"].includes(node.task.executor.kind)) continue;
+		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
 	}
 }
+//#endregion
+//#region src/flow/common/portChanges.ts
+function renamedPort(previous, next) {
+	const previousNames = new Set(previous.flatMap((port) => "handle" in port ? [port.handle] : []));
+	const nextNames = new Set(next.flatMap((port) => "handle" in port ? [port.handle] : []));
+	const removed = [...previousNames].filter((name) => !nextNames.has(name));
+	const added = [...nextNames].filter((name) => !previousNames.has(name));
+	return removed.length == 1 && added.length == 1 ? [removed[0], added[0]] : void 0;
+}
+function renameOutputMapping(mapping, nodeIds, rename) {
+	if (rename == null || mapping.kind != "sources") return mapping;
+	const sources = mapping.sources.map((source) => source.kind == "node" && !source.system && nodeIds.has(source.nodeId) && source.output == rename[0] ? {
+		...source,
+		output: rename[1]
+	} : source);
+	return sources.every((source, index) => source === mapping.sources[index]) ? mapping : {
+		kind: "sources",
+		sources
+	};
+}
+/** Carry saved mappings through a field rename and remove only fields absent from the new contract. */
+function remapInputMappings(mappings, ports, rename) {
+	const inputs = { ...mappings };
+	if (rename != null && Object.hasOwn(inputs, rename[0])) {
+		Object.defineProperty(inputs, rename[1], {
+			value: inputs[rename[0]],
+			enumerable: true,
+			configurable: true,
+			writable: true
+		});
+		delete inputs[rename[0]];
+	}
+	const names = new Set(ports.flatMap((port) => "handle" in port ? [port.handle] : []));
+	for (const name of Object.keys(inputs)) if (!names.has(name)) delete inputs[name];
+	return inputs;
+}
+//#endregion
+//#region src/http/common/httpRequest.ts
+var parameterSchema = strictObject({
+	mode: _enum(["fields", "object"]).default("fields"),
+	names: array(string()).default([])
+});
+var httpRequestConfigSchema = strictObject({
+	method: _enum([
+		"GET",
+		"POST",
+		"PUT",
+		"PATCH",
+		"DELETE",
+		"HEAD",
+		"OPTIONS"
+	]).default("GET"),
+	query: parameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	headers: parameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	bodyFormat: _enum([
+		"none",
+		"json",
+		"text",
+		"form"
+	]).default("none"),
+	authentication: union([
+		strictObject({ type: literal("none") }),
+		strictObject({ type: _enum(["bearer", "basic"]) }),
+		strictObject({
+			type: literal("apiKey"),
+			name: string(),
+			in: _enum(["header", "query"])
+		})
+	]).default({ type: "none" }),
+	responseFormat: _enum([
+		"auto",
+		"json",
+		"text"
+	]).default("auto"),
+	statusPolicy: _enum(["success", "all"]).default("success")
+});
+var httpRequestExecutorSchema = httpRequestConfigSchema.extend({ kind: literal("http-request") });
+var scalarSchema = { type: [
+	"string",
+	"number",
+	"boolean"
+] };
+var queryValueSchema = { anyOf: [scalarSchema, {
+	type: "array",
+	items: scalarSchema
+}] };
+var httpHeaderSchema = {
+	type: "object",
+	additionalProperties: { type: "string" }
+};
+var httpQuerySchema = {
+	type: "object",
+	additionalProperties: queryValueSchema
+};
+function httpAuthHandles(config) {
+	return config.authentication.type == "none" ? [] : config.authentication.type == "basic" ? ["auth.username", "auth.password"] : ["auth.token"];
+}
+function retain(ports, old) {
+	const remaining = new Map(ports.map((port) => [port.handle, port]));
+	return [...old.flatMap((item) => {
+		if ("group" in item) return [item];
+		const next = remaining.get(item.handle);
+		if (next == null) return [];
+		remaining.delete(item.handle);
+		return [dequal(item.jsonSchema, next.jsonSchema) && item.nullable == next.nullable ? item : next];
+	}), ...remaining.values()];
+}
+function httpRequestTask(config = httpRequestConfigSchema.parse({}), name = "HTTP Request", previous) {
+	const inputs = [{
+		handle: "url",
+		jsonSchema: { type: "string" },
+		nullable: false
+	}];
+	for (const group of ["query", "headers"]) if (config[group].mode == "object") inputs.push({
+		handle: group,
+		jsonSchema: group == "query" ? httpQuerySchema : httpHeaderSchema,
+		nullable: true
+	});
+	else for (const parameterName of config[group].names.filter((value) => value.trim())) inputs.push({
+		handle: `${group == "query" ? "query" : "header"}.${parameterName}`,
+		jsonSchema: group == "query" ? queryValueSchema : { type: "string" },
+		nullable: true
+	});
+	if (config.bodyFormat != "none") inputs.push({
+		handle: "body",
+		jsonSchema: config.bodyFormat == "json" ? {} : config.bodyFormat == "text" ? { type: "string" } : httpQuerySchema,
+		nullable: config.bodyFormat == "json"
+	});
+	inputs.push(...httpAuthHandles(config).map((handle) => ({
+		handle,
+		jsonSchema: { type: "string" },
+		nullable: false
+	})));
+	const outputs = [
+		{
+			handle: "body",
+			jsonSchema: config.responseFormat == "text" ? { type: "string" } : {},
+			nullable: true
+		},
+		{
+			handle: "statusCode",
+			jsonSchema: { type: "integer" },
+			nullable: false
+		},
+		{
+			handle: "headers",
+			jsonSchema: httpHeaderSchema,
+			nullable: false
+		}
+	];
+	return {
+		name,
+		executor: {
+			...config,
+			kind: "http-request"
+		},
+		inputs: retain(inputs, previous?.inputs ?? []),
+		outputs: retain(outputs, previous?.outputs ?? [])
+	};
+}
+/** Only a named parameter rename carries a value; changing source modes is not a rename. */
+function httpRequestInputs(mappings, previous, next) {
+	const candidate = renamedPort(previous.inputs, next.inputs);
+	const rename = candidate != null && ["query.", "header."].some((prefix) => candidate.every((name) => name.startsWith(prefix))) ? candidate : void 0;
+	return remapInputMappings(mappings, next.inputs, rename);
+}
 function checkJsonDepth(value, depth = 0) {
 	if (depth > 64) throw new TypeError("Value exceeds the maximum JSON depth.");
 	if (value != null && typeof value == "object") for (const child of Object.values(value)) checkJsonDepth(child, depth + 1);
@@ -12303,6 +12475,7 @@ var retryNodeTypes = [
 	"code",
 	"connector",
 	"openapi",
+	"http-request",
 	"llm",
 	"decision"
 ];
@@ -12452,7 +12625,7 @@ var ports = {
 	inputs: array(union([input, group])),
 	outputs: array(union([port, group]))
 };
-var capability = union([
+var connectorCapabilitySchema = union([
 	strictObject({
 		kind: literal("connector"),
 		action: text$1,
@@ -12484,6 +12657,15 @@ var capability = union([
 		})).optional()
 	})
 ]);
+var workflowCapabilitySchema = strictObject({
+	kind: literal("workflow"),
+	name: text$1,
+	flowId: text$1,
+	revisionId: text$1,
+	inputs: array(port),
+	outputs: array(port).nullable()
+});
+var capability = union([connectorCapabilitySchema, workflowCapabilitySchema]);
 var inline = object$1({
 	...ports,
 	name: text$1,
@@ -12498,6 +12680,20 @@ var agentValue = union([object$1({
 	input: text$1
 })]);
 var agentInput = union([agentValue, object$1({ kind: literal("model") })]);
+var agentToolFields = {
+	id: text$1,
+	name: text$1,
+	description: text$1,
+	approval: boolean(),
+	inputs: array(input.extend({ source: agentInput }))
+};
+var connectorAgentToolSchema = object$1({
+	...agentToolFields,
+	kind: literal("connector").optional(),
+	action: text$1,
+	connectionId: actionConnection.optional()
+});
+var workflowAgentToolSchema = workflowCapabilitySchema.extend(agentToolFields);
 var decisionQuestion = discriminatedUnion("type", [
 	strictObject({
 		name: text$1,
@@ -12566,15 +12762,7 @@ var managedFields = object$1({
 			model: text$1,
 			prompt: text$1,
 			maxRounds: number(),
-			tools: array(object$1({
-				id: text$1,
-				name: text$1,
-				description: text$1,
-				action: text$1,
-				connectionId: actionConnection.optional(),
-				approval: boolean(),
-				inputs: array(input.extend({ source: agentInput }))
-			})),
+			tools: array(union([workflowAgentToolSchema, connectorAgentToolSchema])),
 			notification: object$1({
 				action: text$1,
 				connectionId: actionConnection.optional(),
@@ -12587,7 +12775,8 @@ var managedFields = object$1({
 			kind: literal("workflow"),
 			flowId: text$1,
 			revisionId: text$1
-		})
+		}),
+		httpRequestExecutorSchema
 	])
 });
 var managed = managedFields.transform(limitDecisionTask);
@@ -12855,7 +13044,8 @@ var revision = object$1({
 		literal(7),
 		literal(8),
 		literal(9),
-		literal(10)
+		literal(10),
+		literal(11)
 	]),
 	document,
 	modules: record$3(text$1, module)
@@ -12886,7 +13076,7 @@ function decodeRevisionContent(value) {
 	checkJsonDepth(value);
 	const content = revision.parse(value);
 	checkModelVersion(content);
-	assertOpenApiAuthBindings(content.document);
+	assertHttpAuthBindings(content.document);
 	return content;
 }
 var shapes = {
@@ -13080,6 +13270,8 @@ function changeOperationsSchema(kind) {
 	return toJSONSchema(schema, { io: "input" });
 }
 function checkModelVersion(content) {
+	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind == "http-request")) throw new TypeError("HTTP Request requires Flow model version 11.");
+	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && ("moduleId" in candidateNode.task ? candidateNode.task.capabilities?.some((item) => item.kind == "workflow") : candidateNode.task.executor.kind == "agent" && candidateNode.task.executor.tools.some((item) => item.kind == "workflow")))) throw new TypeError("Workflow tools require Flow model version 11.");
 	if (content.modelVersion < 10 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "webhook" && (candidateNode.options?.responseBody != null || candidateNode.options?.responseStatusCodeOutput != null || candidateNode.options?.responseHeadersSource != null || candidateNode.options?.responseHeaderOutputs != null))) throw new TypeError("Dynamic Webhook responses require Flow model version 10.");
 	if (content.modelVersion < 9 && Object.values(content.document.graph.nodes).some((candidateNode) => "retry" in candidateNode && candidateNode.retry != null)) throw new TypeError("Node retries require Flow model version 9.");
 	if (content.modelVersion < 9 && Object.values(content.document.graph.nodes).some((candidateNode) => {
@@ -13679,6 +13871,7 @@ var authoringTypes = [
 	"llm",
 	"decision",
 	"openapi",
+	"http-request",
 	"condition",
 	"value",
 	"wait",
@@ -13731,10 +13924,21 @@ var operand = union([
 	system,
 	variable
 ]);
-var agentTool = authoringDefinitionSchemas.agent.shape.tools.element.omit({
+var toolSources = record$3(id$1, agentToolFields.inputs.element.shape.source).optional().describe("Tool input sources by name. The platform resolves types from the selected Action or workflow. New inputs default to model-provided; omitted existing sources are preserved.");
+var agentTool = union([workflowAgentToolSchema.omit({
+	id: true,
+	inputs: true,
+	outputs: true,
+	revisionId: true
+}).extend({ inputs: toolSources }).strict(), connectorAgentToolSchema.omit({
 	id: true,
 	inputs: true
-}).extend({ inputs: record$3(id$1, authoringDefinitionSchemas.agent.shape.tools.element.shape.inputs.element.shape.source).optional().describe("Action input sources by name. The tool resolves types from the Action. New inputs default to model-provided; existing sources are preserved when omitted.") }).strict();
+}).extend({ inputs: toolSources }).strict()]);
+var authoringCapabilities = array(union([connectorCapabilitySchema, strictObject({
+	kind: literal("workflow"),
+	name: id$1,
+	flowId: id$1
+})]));
 var notification = strictObject({
 	...authoringDefinitionSchemas.connector.shape,
 	messageHandle: id$1,
@@ -13790,10 +13994,11 @@ var authoringConfigurations = {
 	"code": strictObject({
 		inputs: inputFields,
 		outputs: outputFields,
-		capabilities: authoringDefinitionSchemas.capabilities.optional()
+		capabilities: authoringCapabilities.optional()
 	}),
 	"connector": authoringDefinitionSchemas.connector.omit({ outputMode: true }).strict(),
 	"openapi": authoringOpenApiSchema,
+	"http-request": httpRequestConfigSchema,
 	"agent": authoringDefinitionSchemas.agent.omit({
 		prompt: true,
 		tools: true
@@ -13854,7 +14059,8 @@ var authoringEditSchema = discriminatedUnion("op", [
 	}),
 	strictObject({
 		op: literal("node.refresh"),
-		node: referenceSchema
+		node: referenceSchema,
+		tool: id$1.optional().describe("Name of a workflow tool on an Agent or Code node. Omit for a Call Workflow node.")
 	}),
 	strictObject({
 		op: literal("node.remove"),
@@ -14041,21 +14247,21 @@ function authoringSchema(kind) {
 			"wait",
 			"approval"
 		].includes(kind),
-		guidance: kind == "webhook-response" ? "Prepare an HTTP response using fixed inputs body (any JSON, default empty text), statusCode (number, default 200) and headers (scalar-valued object, default {}). Select this node in Webhook options.responseBody as {kind: \"webhook-response\", nodeId: \"node reference\", timeoutMs: 30000}. Its first completion responds immediately while the Run continues. It has no business outputs. Multiple response nodes are allowed; each Webhook selects one reachable node." : kind == "outputs" ? "Declare output fields through config.outputDefs. Set their values through node.add.inputs or input.set. Outputs is a singleton execution sink; it waits for its predecessors and produces workflow business outputs independently of node logs. No downstream edges or data references to Outputs are allowed." : kind == "webhook" ? "Use options.responseBody: {kind: \"webhook-response\", nodeId: \"node ID or $alias\", timeoutMs: 30000} to respond on the selected node’s first completion while the Run continues. Body, statusCode and headers come exclusively from that node; clear workflow-output-only status/header references when switching. Alternatively configure options.responseBody as {kind: \"workflow-outputs\", output?: \"top-level output name\", timeoutMs?: 30000} to respond after the Run succeeds. Omit output for the complete object. Connect Webhook to Outputs. Timeout is 1000–60000 ms; HTTP timeout does not cancel the Run. Strings return text; other values return JSON. Only in this mode, options.responseStatusCodeOutput can select a numeric top-level workflow output as the HTTP status, overriding the preserved fixed responseStatusCode (default 200). Its runtime value must be an integer from 200 to 599, excluding 204, 205, 304; missing or invalid values return 500. Use responseHeaders for fixed text headers. In workflow-output mode, responseHeaderOutputs maps header names to top-level output names; values can be string, number or boolean and are converted to text. Alternatively responseHeadersSource: {kind: \"workflow-outputs\", output?: \"object field\"} replaces the entire header object (omit output for all outputs), preserving but ignoring per-header settings. Missing, null, complex or invalid header values return 500 without fallback. Header restrictions and Content-Type policy still apply. Omit responseBody for immediate responseData. Clear options.responseBody, options.responseStatusCodeOutput, options.responseHeadersSource and options.responseHeaderOutputs explicitly to switch back." : kind == "start" ? "Declare workflow inputs through config.inputDefs; read them in Start node details. REST calls and manual runs supply them as trigger.outputs. Downstream nodes bind these parameters as Start outputs. Start has no input sources or defaults; non-nullable parameters are required, and omitted nullable parameters become null." : kind == "condition" ? "Edit branch operands through config.branches. A branch can test one expression, all expressions, or any alternatives. Unmatched execution uses branch otherwise." : ["poll", "integration"].includes(kind) ? "Configure static parameters with node.add.inputs or input.set. Definitions come from the selected Trigger key; execution output and variable sources are unavailable." : kind == "llm" ? "Configure model settings, message templates and history as defaults. Input bindings with the same names override these defaults; named business inputs can be bound directly. Template strings interpolate {{name}}." : kind == "openapi" ? "Select an operation; the tool resolves its ports and authentication. Read authenticationChoices from node details. authentication is replaced as a complete choice. Bind advertised credentials through inputs." : kind == "workflow" ? "Select another workflow with config.flowId. A workflow cannot call itself, including in a disconnected node. Owned unpublished or unavailable targets may be saved as incomplete drafts. Use node.refresh to load the current published interface." : "Supply business configuration and input data. Fixed definitions are assembled by the tool. Existing constraints and defaults are preserved on partial updates.",
+		guidance: kind == "webhook-response" ? "Prepare an HTTP response using fixed inputs body (any JSON, default empty text), statusCode (number, default 200) and headers (scalar-valued object, default {}). Select this node in Webhook options.responseBody as {kind: \"webhook-response\", nodeId: \"node reference\", timeoutMs: 30000}. Its first completion responds immediately while the Run continues. It has no business outputs. Multiple response nodes are allowed; each Webhook selects one reachable node." : kind == "outputs" ? "Declare output fields through config.outputDefs. Set their values through node.add.inputs or input.set. Outputs is a singleton execution sink; it waits for its predecessors and produces workflow business outputs independently of node logs. No downstream edges or data references to Outputs are allowed." : kind == "webhook" ? "Use options.responseBody: {kind: \"webhook-response\", nodeId: \"node ID or $alias\", timeoutMs: 30000} to respond on the selected node’s first completion while the Run continues. Body, statusCode and headers come exclusively from that node; clear workflow-output-only status/header references when switching. Alternatively configure options.responseBody as {kind: \"workflow-outputs\", output?: \"top-level output name\", timeoutMs?: 30000} to respond after the Run succeeds. Omit output for the complete object. Connect Webhook to Outputs. Timeout is 1000–60000 ms; HTTP timeout does not cancel the Run. Strings return text; other values return JSON. Only in this mode, options.responseStatusCodeOutput can select a numeric top-level workflow output as the HTTP status, overriding the preserved fixed responseStatusCode (default 200). Its runtime value must be an integer from 200 to 599, excluding 204, 205, 304; missing or invalid values return 500. Use responseHeaders for fixed text headers. In workflow-output mode, responseHeaderOutputs maps header names to top-level output names; values can be string, number or boolean and are converted to text. Alternatively responseHeadersSource: {kind: \"workflow-outputs\", output?: \"object field\"} replaces the entire header object (omit output for all outputs), preserving but ignoring per-header settings. Missing, null, complex or invalid header values return 500 without fallback. Header restrictions and Content-Type policy still apply. Omit responseBody for immediate responseData. Clear options.responseBody, options.responseStatusCodeOutput, options.responseHeadersSource and options.responseHeaderOutputs explicitly to switch back." : kind == "start" ? "Declare workflow inputs through config.inputDefs; read them in Start node details. REST calls and manual runs supply them as trigger.outputs. Downstream nodes bind these parameters as Start outputs. Start has no input sources or defaults; non-nullable parameters are required, and omitted nullable parameters become null." : kind == "condition" ? "Edit branch operands through config.branches. A branch can test one expression, all expressions, or any alternatives. Unmatched execution uses branch otherwise." : ["poll", "integration"].includes(kind) ? "Configure static parameters with node.add.inputs or input.set. Definitions come from the selected Trigger key; execution output and variable sources are unavailable." : kind == "llm" ? "Configure model settings, message templates and history as defaults. Input bindings with the same names override these defaults; named business inputs can be bound directly. Template strings interpolate {{name}}." : kind == "http-request" ? "Configure method, query/headers modes and names, bodyFormat, authentication, responseFormat and statusPolicy. Bind url, query.<name>/header.<name> or whole query/headers objects, body and auth.token (Basic: auth.username/auth.password). Credentials accept variables or upstream outputs only. Outputs: body, statusCode, headers. Authentication is replaced as a complete choice." : kind == "openapi" ? "Select an operation; the tool resolves its ports and authentication. Read authenticationChoices from node details. authentication is replaced as a complete choice. Bind advertised credentials through inputs." : kind == "workflow" ? "Select another workflow with config.flowId. A workflow cannot call itself, including in a disconnected node. Owned unpublished or unavailable targets may be saved as incomplete drafts. Use node.refresh to load the current published interface." : kind == "agent" ? "Tools accept Connector Actions or {kind: \"workflow\", flowId, name, description, approval, inputs}. Workflow parameter sources use model, input or value. The platform derives the interface. Refresh a workflow tool with node.refresh and tool: its name." : kind == "code" ? "Select workflows through config.capabilities: [{kind: \"workflow\", flowId, name}]. Call context.workflows.call(name, input) and await its business output. The platform derives input/output types. Refresh a selected workflow tool with node.refresh and tool: its name. Calls obey node and Run time limits." : "Supply business configuration and input data. Fixed definitions are assembled by the tool. Existing constraints and defaults are preserved on partial updates.",
 		example: {
 			op: "node.add",
 			as: "step",
 			type: kind,
 			name: "Step",
 			...{
-				start: { config: { inputDefs: {} } },
-				outputs: { config: { outputDefs: {} } },
-				workflow: { config: { flowId: "<Flow ID>" } },
-				connector: { config: {
+				"start": { config: { inputDefs: {} } },
+				"outputs": { config: { outputDefs: {} } },
+				"workflow": { config: { flowId: "<Flow ID>" } },
+				"connector": { config: {
 					action: "<Action ID>",
 					connectionId: "<Connection ID>"
 				} },
-				poll: { config: {
+				"poll": { config: {
 					key: "<Trigger key>",
 					schedule: [{
 						type: "every",
@@ -14063,20 +14269,27 @@ function authoringSchema(kind) {
 						value: 5
 					}]
 				} },
-				integration: { config: { key: "<Trigger key>" } },
-				openapi: { config: {
+				"integration": { config: { key: "<Trigger key>" } },
+				"http-request": {
+					config: {},
+					inputs: { url: {
+						kind: "value",
+						value: "https://example.com"
+					} }
+				},
+				"openapi": { config: {
 					sourceUrl: "https://example.com/openapi.json",
 					path: "/items",
 					method: "get"
 				} },
-				code: {
+				"code": {
 					code: "export default ({value}) => ({result:value})",
 					inputs: { value: {
 						kind: "value",
 						value: "Hello"
 					} }
 				},
-				condition: { config: {
+				"condition": { config: {
 					match: "first",
 					branches: [{
 						name: "yes",
@@ -14093,32 +14306,32 @@ function authoringSchema(kind) {
 						}
 					}]
 				} },
-				value: { config: { values: {
+				"value": { config: { values: {
 					threshold: 100,
 					region: "EU"
 				} } },
-				webhook: { config: {
+				"webhook": { config: {
 					method: "POST",
 					body: { orderId: {
 						schema: { type: "string" },
 						nullable: false
 					} }
 				} },
-				wait: {
+				"wait": {
 					prompt: "Continue processing this order?",
 					inputs: { order: {
 						kind: "value",
 						value: { orderId: "A-1" }
 					} }
 				},
-				approval: {
+				"approval": {
 					prompt: "Approve this order?",
 					inputs: { order: {
 						kind: "value",
 						value: { orderId: "A-1" }
 					} }
 				},
-				llm: {
+				"llm": {
 					config: {
 						model: { model: "deepseek-v4-flash" },
 						template: [{
@@ -14134,7 +14347,7 @@ function authoringSchema(kind) {
 						}
 					} }
 				},
-				agent: {
+				"agent": {
 					config: { model: "deepseek-v4-flash" },
 					inputs: { orders: {
 						kind: "value",
@@ -14337,6 +14550,24 @@ function resourceNameIssue(value) {
 function portsByHandle(ports) {
 	return Object.fromEntries(ports.flatMap((port) => "handle" in port ? [[port.handle, port]] : []));
 }
+var workflowToolNamePattern = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
+function workflowToolNameIssue(name, otherNames = []) {
+	if (!workflowToolNamePattern.test(name)) return "invalid";
+	for (const other of otherNames) if (other == name) return "duplicate";
+}
+function decodeTaskCapabilities(value) {
+	if (!Array.isArray(value)) throw new TypeError("Task capabilities must be an array.");
+	const parsed = authoringDefinitionSchemas.capabilities.parse(value);
+	const connectors = decodeConnectorCapabilities(parsed.filter((item) => item.kind == "connector"));
+	const names = /* @__PURE__ */ new Set();
+	for (const item of parsed) {
+		if (item.kind != "workflow") continue;
+		if (workflowToolNameIssue(item.name, names)) throw new TypeError("Workflow tool names must be unique provider-compatible names.");
+		names.add(item.name);
+	}
+	let connectorIndex = 0;
+	return parsed.map((item) => item.kind == "connector" ? connectors[connectorIndex++] : item);
+}
 function decodeConnectorCapabilities(value) {
 	if (!Array.isArray(value)) throw new TypeError("Connector capabilities must be an array.");
 	if (value.length == 0) return [];
@@ -14469,10 +14700,10 @@ function upgradeRevisionContent(content) {
 function upgradeDecodedRevisionContent(content) {
 	const graph = content.document.graph;
 	const hasManual = Object.values(graph.nodes).some((node) => node.kind == "manual");
-	if (!hasManual && content.modelVersion == 10) return content;
+	if (!hasManual && content.modelVersion == 11) return content;
 	return {
 		...content,
-		modelVersion: 10,
+		modelVersion: 11,
 		document: {
 			...content.document,
 			graph: hasManual ? {
@@ -14507,7 +14738,7 @@ function invalid(message) {
 	throw new FlowChangeError(message);
 }
 function applyFlowChanges(content, operations) {
-	const source = content.modelVersion != 10 || Object.values(content.document.graph.nodes).some((node) => node.kind == "manual") ? decodeRevisionContent(content) : content;
+	const source = content.modelVersion != 11 || Object.values(content.document.graph.nodes).some((node) => node.kind == "manual") ? decodeRevisionContent(content) : content;
 	const document = { ...source.document };
 	const modules = { ...source.modules };
 	for (const operation of operations) switch (operation.kind) {
@@ -14621,7 +14852,7 @@ function applyFlowChanges(content, operations) {
 			const graph = document.graph;
 			if (!dequal(graph.nodes[operation.nodeId], operation.before)) invalid("The Node changed before this operation was applied.");
 			if (operation.node.kind != operation.before.kind) invalid("Replacing a Node cannot change its kind.");
-			if (operation.node.kind == "task" && "moduleId" in operation.node.task && operation.node.task.capabilities !== void 0) decodeConnectorCapabilities(operation.node.task.capabilities);
+			if (operation.node.kind == "task" && "moduleId" in operation.node.task && operation.node.task.capabilities !== void 0) decodeTaskCapabilities(operation.node.task.capabilities);
 			const name = normalizeNodeName(operation.node.name ?? "");
 			const issue = nodeNameIssue(graph, operation.nodeId, name);
 			if (issue != null) invalid(`Node name is ${issue}.`);
@@ -14643,7 +14874,7 @@ function applyFlowChanges(content, operations) {
 			if (graph.nodes[operation.nodeId] != null) invalid("A Node with this ID already exists in the target graph.");
 			if (operation.node.kind == "error" && Object.values(graph.nodes).some((node) => node.kind == "error")) invalid("A graph can contain only one Flow Error node.");
 			if ((operation.node.kind == "manual" || operation.node.kind == "start") && Object.values(graph.nodes).some((node) => node.kind == "manual" || node.kind == "start")) invalid("A graph can contain only one Start Trigger.");
-			if (operation.node.kind == "task" && "moduleId" in operation.node.task && operation.node.task.capabilities !== void 0) decodeConnectorCapabilities(operation.node.task.capabilities);
+			if (operation.node.kind == "task" && "moduleId" in operation.node.task && operation.node.task.capabilities !== void 0) decodeTaskCapabilities(operation.node.task.capabilities);
 			if (operation.node.name == null) invalid("A Node name cannot be empty.");
 			if (operation.node.kind == "outputs" && Object.values(graph.nodes).some((node) => node.kind == "outputs")) invalid("A graph can contain only one Outputs node.");
 			const name = normalizeNodeName(operation.node.name);
@@ -14742,7 +14973,7 @@ function applyFlowChanges(content, operations) {
 			if (!dequal(node.task.capabilities, operation.before)) invalid("The inline Task capabilities changed before this operation was applied.");
 			const task = { ...node.task };
 			if (operation.value === void 0) delete task.capabilities;
-			else task.capabilities = decodeConnectorCapabilities(operation.value);
+			else task.capabilities = decodeTaskCapabilities(operation.value);
 			Object.assign(document, { graph: {
 				...graph,
 				nodes: {
@@ -14952,10 +15183,10 @@ function applyFlowChanges(content, operations) {
 			break;
 		}
 	}
-	assertOpenApiAuthBindings(document);
+	assertHttpAuthBindings(document);
 	return upgradeDecodedRevisionContent({
 		document,
-		modelVersion: 10,
+		modelVersion: 11,
 		modules
 	});
 }
@@ -15219,42 +15450,6 @@ async function imports(source) {
 	}
 }
 //#endregion
-//#region src/flow/common/portChanges.ts
-function renamedPort(previous, next) {
-	const previousNames = new Set(previous.flatMap((port) => "handle" in port ? [port.handle] : []));
-	const nextNames = new Set(next.flatMap((port) => "handle" in port ? [port.handle] : []));
-	const removed = [...previousNames].filter((name) => !nextNames.has(name));
-	const added = [...nextNames].filter((name) => !previousNames.has(name));
-	return removed.length == 1 && added.length == 1 ? [removed[0], added[0]] : void 0;
-}
-function renameOutputMapping(mapping, nodeIds, rename) {
-	if (rename == null || mapping.kind != "sources") return mapping;
-	const sources = mapping.sources.map((source) => source.kind == "node" && !source.system && nodeIds.has(source.nodeId) && source.output == rename[0] ? {
-		...source,
-		output: rename[1]
-	} : source);
-	return sources.every((source, index) => source === mapping.sources[index]) ? mapping : {
-		kind: "sources",
-		sources
-	};
-}
-/** Carry saved mappings through a field rename and remove only fields absent from the new contract. */
-function remapInputMappings(mappings, ports, rename) {
-	const inputs = { ...mappings };
-	if (rename != null && Object.hasOwn(inputs, rename[0])) {
-		Object.defineProperty(inputs, rename[1], {
-			value: inputs[rename[0]],
-			enumerable: true,
-			configurable: true,
-			writable: true
-		});
-		delete inputs[rename[0]];
-	}
-	const names = new Set(ports.flatMap((port) => "handle" in port ? [port.handle] : []));
-	for (const name of Object.keys(inputs)) if (!names.has(name)) delete inputs[name];
-	return inputs;
-}
-//#endregion
 //#region src/flow/common/nodeChanges.ts
 var codeTaskTemplate = `export default async function (inputs, context) {
   return { result: inputs.value }
@@ -15699,6 +15894,26 @@ object$1({
 		}).nullable()
 	}))
 });
+function workflowCapability(name, target) {
+	return {
+		kind: "workflow",
+		name,
+		flowId: target.flowId,
+		revisionId: "inputs" in target ? target.revisionId : "",
+		inputs: "inputs" in target ? target.inputs : [],
+		outputs: "inputs" in target ? target.outputs : null
+	};
+}
+function workflowAgentTool(id, name, target, previous) {
+	const capability = workflowCapability(name, target);
+	return {
+		...capability,
+		id,
+		description: previous?.description ?? target.name,
+		approval: previous?.approval ?? false,
+		inputs: capability.inputs.map((port) => Object.assign({}, port, { source: previous?.inputs.find((old) => old.handle == port.handle)?.source ?? { kind: "model" } }))
+	};
+}
 //#endregion
 //#region src/control/common/authoringCondition.ts
 /** Preserve empty groups in invalid drafts; do not turn them into unconditional branches. */
@@ -15887,6 +16102,7 @@ function authoringDiagnosticField(node, parts) {
 					if (tool == null) return "config.tools";
 					const base = `config.tools.${location[2]}`;
 					if (location[3] == "id") return base;
+					if (tool.kind == "workflow" && (location[3] == "revisionId" || location[3] == "outputs")) return `${base}.flowId`;
 					if (location[3] == "inputs") {
 						const input = tool.inputs[Number(location[4])];
 						if (input == null) return `${base}.inputs`;
@@ -15902,6 +16118,11 @@ function authoringDiagnosticField(node, parts) {
 			}
 			return ["config", ...location.slice(1)].join(".");
 		}
+		if (head == "capabilities" && "moduleId" in task && task.capabilities?.[Number(location[1])]?.kind == "workflow" && [
+			"revisionId",
+			"inputs",
+			"outputs"
+		].includes(location[2] ?? "")) return `config.capabilities.${location[1]}.flowId`;
 		if (head == "capabilities") return ["config", ...location].join(".");
 		if (head == "name") return "name";
 		return "config";
@@ -15979,6 +16200,31 @@ function fieldsToPorts(fields, previous) {
 }
 //#endregion
 //#region src/control/common/authoringTools.ts
+/** A rename retains a snapshot only when one removed name matches one added name for the same target. */
+function previousWorkflowTool(tool, next, previous) {
+	const named = previous.find((item) => item.name == tool.name);
+	if (named != null) return named;
+	if (next.filter((item) => item.kind == "workflow" && item.flowId == tool.flowId && !previous.some((old) => old.name == item.name)).length != 1) return;
+	const removed = previous.filter((item) => item.kind == "workflow" && item.flowId == tool.flowId && !next.some((itemNext) => itemNext.name == item.name));
+	return removed.length == 1 ? removed[0] : void 0;
+}
+function outwardCapabilities(capabilities) {
+	return capabilities.map((item) => item.kind == "workflow" ? {
+		kind: item.kind,
+		name: item.name,
+		flowId: item.flowId
+	} : item);
+}
+async function prepareCapabilities(capabilities, previous, workflow) {
+	return Promise.all(capabilities.map(async (item) => {
+		if (item.kind != "workflow") return item;
+		const old = previousWorkflowTool(item, capabilities, previous);
+		return old?.kind == "workflow" && old.flowId == item.flowId ? {
+			...old,
+			name: item.name
+		} : workflowCapability(item.name, await workflow(item.flowId));
+	}));
+}
 var AuthoringToolInputError = class extends Error {
 	constructor(details) {
 		super(`Unknown input ${JSON.stringify(details.input)} for tool ${JSON.stringify(details.tool)}. Choose from: ${details.choices.join(", ") || "(none)"}.`);
@@ -15988,17 +16234,45 @@ var AuthoringToolInputError = class extends Error {
 	}
 };
 function outwardAgentTools(tools) {
-	return tools.map(({ id: _id, inputs, ...tool }) => ({
-		...tool,
-		inputs: Object.fromEntries(inputs.map((input) => [input.handle, input.source]))
-	}));
+	return tools.map((tool) => {
+		const { id: _id, inputs, ...settings } = tool;
+		return {
+			...tool.kind == "workflow" ? {
+				kind: tool.kind,
+				name: tool.name,
+				description: tool.description,
+				approval: tool.approval,
+				flowId: tool.flowId
+			} : settings,
+			inputs: Object.fromEntries(inputs.map((input) => [input.handle, input.source]))
+		};
+	});
 }
-/** Keep persisted Action contracts until the caller selects a different Action. */
-async function prepareAgentTools(tools, previous, action, id) {
+/** Keep persisted tool contracts until the caller selects a different target or explicitly refreshes. */
+async function prepareAgentTools(tools, previous, action, id, workflow) {
 	const prepared = [];
 	for (const tool of tools) {
-		const old = previous.find((item) => item.name == tool.name);
-		const retained = old?.action == tool.action ? old : void 0;
+		const old = tool.kind == "workflow" ? previousWorkflowTool(tool, tools, previous) : previous.find((item) => item.name == tool.name);
+		if (tool.kind == "workflow") {
+			if (workflow == null) throw new Error("Workflow tools are unavailable.");
+			const preparedTool = (old?.kind == "workflow" && old.flowId == tool.flowId ? old : void 0) ?? workflowAgentTool(old?.id ?? id(), tool.name, await workflow(tool.flowId));
+			const choices = preparedTool.inputs.map((port) => port.handle);
+			for (const input of Object.keys(tool.inputs ?? {})) if (!choices.includes(input)) throw new AuthoringToolInputError({
+				tool: tool.name,
+				action: tool.flowId,
+				input,
+				choices
+			});
+			prepared.push({
+				...preparedTool,
+				name: tool.name,
+				description: tool.description,
+				approval: tool.approval,
+				inputs: preparedTool.inputs.map((port) => Object.assign({}, port, { source: tool.inputs?.[port.handle] ?? port.source }))
+			});
+			continue;
+		}
+		const retained = old?.kind != "workflow" && old?.action == tool.action ? old : void 0;
 		const definition = retained == null ? await action(tool.action) : void 0;
 		const ports = retained?.inputs ?? Object.entries(definition.inputs).map(([handle, port]) => Object.assign({}, port, {
 			handle,
@@ -16137,12 +16411,15 @@ function authoringNode(content, ref) {
 			inputs: fieldsView([...task.inputs, ...node.kind == "task" ? node.additionalInputs ?? [] : []].filter((port) => !("handle" in port) || !llmReservedInputs.includes(port.handle)))
 		};
 		else if (task.executor.kind == "workflow") config = { flowId: task.executor.flowId };
-		else if (task.executor.kind == "openapi") config = { ...openApiConfigView(task.executor) };
+		else if (task.executor.kind == "http-request") {
+			const { kind: _kind, ...settings } = task.executor;
+			config = settings;
+		} else if (task.executor.kind == "openapi") config = { ...openApiConfigView(task.executor) };
 	} else if (node.kind == "task" && "moduleId" in node.task) {
 		config = {
 			inputs: fieldsView([...node.task.inputs, ...node.additionalInputs ?? []]),
 			outputs: fieldsView(node.task.outputs),
-			...node.task.capabilities == null ? {} : { capabilities: node.task.capabilities }
+			...node.task.capabilities == null ? {} : { capabilities: outwardCapabilities(node.task.capabilities) }
 		};
 		texts.code = content.modules[node.task.moduleId]?.source ?? "";
 	} else switch (node.kind) {
@@ -16410,9 +16687,12 @@ async function compileAuthoring(base, request, host) {
 			outputs: Object.entries(action.outputs).map(([handle, port]) => Object.assign({ handle }, port))
 		};
 	}
-	async function resolveWorkflow(flowId, name, previous) {
+	async function workflowTarget(flowId) {
 		if (host.workflow == null) fail("workflow.unavailable", "Workflow calls are unavailable.");
-		const target = await host.workflow(flowId);
+		return host.workflow(flowId);
+	}
+	async function resolveWorkflow(flowId, name, previous) {
+		const target = await workflowTarget(flowId);
 		return "inputs" in target ? workflowTask(target, name) : workflowSelectionTask({
 			...target,
 			name
@@ -16435,7 +16715,7 @@ async function compileAuthoring(base, request, host) {
 			const timing = record(record(patch.config).autoContinue);
 			if (Object.hasOwn(timing, "kind") && timing.kind != record(record(view.config).autoContinue).kind) record(update.config).autoContinue = timing;
 		}
-		if (type == "openapi" && Object.hasOwn(record(patch.config), "authentication")) record(update.config).authentication = record(patch.config).authentication;
+		if ((type == "openapi" || type == "http-request") && Object.hasOwn(record(patch.config), "authentication")) record(update.config).authentication = record(patch.config).authentication;
 		for (const path of clear) clearPath(update, path);
 		if (typeof update.name != "string") fail("node.name-required", "Node name cannot be cleared.");
 		const config = authoringConfigurations[type].parse(update.config);
@@ -16491,6 +16771,7 @@ async function compileAuthoring(base, request, host) {
 					moduleId: node.task.moduleId,
 					name: String(update.name),
 					...config,
+					...config.capabilities == null ? {} : { capabilities: await prepareCapabilities(config.capabilities, node.task.capabilities ?? [], workflowTarget) },
 					inputs,
 					outputs: fieldsToPorts(config.outputs, node.task.outputs)
 				}
@@ -16520,7 +16801,13 @@ async function compileAuthoring(base, request, host) {
 					};
 				} else task = await connectorTask(config, String(update.name));
 			} else if (type == "decision") task = decisionTask(config.questions, String(update.name));
-			else if (type == "openapi") task = await prepareOpenApiTask(config, before, (url) => host.openapi(url), String(update.name), {
+			else if (type == "http-request") {
+				task = httpRequestTask(httpRequestConfigSchema.parse(config), String(update.name), before);
+				next = {
+					...next,
+					inputs: httpRequestInputs(node.inputs, before, task)
+				};
+			} else if (type == "openapi") task = await prepareOpenApiTask(config, before, (url) => host.openapi(url), String(update.name), {
 				authentication: explicit("authentication"),
 				serverUrl: explicit("serverUrl")
 			});
@@ -16539,7 +16826,7 @@ async function compileAuthoring(base, request, host) {
 				};
 				if (type == "agent") {
 					const previous = before.executor.kind == "agent" ? before.executor : void 0;
-					Object.assign(prepared, { tools: await prepareAgentTools(tools, previous?.tools ?? [], (id) => host.action(id), () => fresh("tool")) });
+					Object.assign(prepared, { tools: await prepareAgentTools(tools, previous?.tools ?? [], (id) => host.action(id), () => fresh("tool"), workflowTarget) });
 					Reflect.deleteProperty(prepared, "notification");
 					if (notification != null) {
 						if (dequal(record(view.config).notification, notification) && previous?.notification != null) Object.assign(prepared, { notification: previous.notification });
@@ -16763,13 +17050,45 @@ async function compileAuthoring(base, request, host) {
 				case "node.refresh": {
 					const ref = resolve(edit.node);
 					const node = nodeAt(content, ref);
-					if (node.kind != "task" || !("executor" in node.task) || node.task.executor.kind != "workflow") fail("node.invalid-type", "Only workflow call nodes support refresh.");
-					apply([{
-						kind: "graph.node.replace",
-						nodeId: ref,
-						before: node,
-						node: withWorkflowTask(node, await resolveWorkflow(node.task.executor.flowId, node.name ?? node.task.name, node.task))
-					}]);
+					if (node.kind != "task") fail("node.invalid-type", "Only workflow nodes and tools support refresh.");
+					if (edit.tool != null) {
+						if ("moduleId" in node.task) {
+							const selected = node.task.capabilities?.find((item) => item.kind == "workflow" && item.name == edit.tool);
+							if (selected?.kind != "workflow") fail("tool.not-found", "Workflow tool was not found.");
+							const target = await workflowTarget(selected.flowId);
+							if (!("inputs" in target)) fail("workflow.unavailable", "The workflow interface is unavailable.");
+							replace(ref, {
+								...node,
+								task: {
+									...node.task,
+									capabilities: node.task.capabilities.map((item) => item === selected ? workflowCapability(selected.name, target) : item)
+								}
+							});
+						} else if (node.task.executor.kind == "agent") {
+							const selected = node.task.executor.tools.find((item) => item.kind == "workflow" && item.name == edit.tool);
+							if (selected?.kind != "workflow") fail("tool.not-found", "Workflow tool was not found.");
+							const target = await workflowTarget(selected.flowId);
+							if (!("inputs" in target)) fail("workflow.unavailable", "The workflow interface is unavailable.");
+							replace(ref, {
+								...node,
+								task: {
+									...node.task,
+									executor: {
+										...node.task.executor,
+										tools: node.task.executor.tools.map((item) => item === selected ? workflowAgentTool(selected.id, selected.name, target, selected) : item)
+									}
+								}
+							});
+						} else fail("node.invalid-type", "Only Agent and Code nodes have workflow tools.");
+					} else {
+						if (!("executor" in node.task) || node.task.executor.kind != "workflow") fail("node.invalid-type", "Specify a workflow tool name.");
+						apply([{
+							kind: "graph.node.replace",
+							nodeId: ref,
+							before: node,
+							node: withWorkflowTask(node, await resolveWorkflow(node.task.executor.flowId, node.name ?? node.task.name, node.task))
+						}]);
+					}
 					break;
 				}
 				case "node.add": {
@@ -16829,6 +17148,9 @@ async function compileAuthoring(base, request, host) {
 						case "connector":
 							changes = createManagedTask(identity, await connectorTask(config, name));
 							break;
+						case "http-request":
+							changes = createManagedTask(identity, httpRequestTask(httpRequestConfigSchema.parse(config), name));
+							break;
 						case "openapi":
 							changes = createManagedTask(identity, await prepareOpenApiTask(authoringConfigurations.openapi.parse(config), void 0, (url) => host.openapi(url), name));
 							break;
@@ -17047,6 +17369,7 @@ var descriptions = {
 	"poll": "Gmail polling by key; replace CONNECTION_ID with an active Gmail connection.",
 	"integration": "Telegram webhook integration by key; replace CONNECTION_ID with an active Telegram connection.",
 	"decision": "AI Decision evaluates named questions against target and returns a complete answer object per output. Configure target before running.",
+	"http-request": "A single HTTP request. Bind url and request inputs; outputs are body, statusCode and headers.",
 	"openapi": "A fixed JSON API operation. Replace the example document and URL before running.",
 	"connector": "A Connector Task and its node. Replace ACTION_ID, CONNECTION_ID and port definitions using connector_get / connector show. Set connectionId to an empty string to defer account configuration; execution will require an account.",
 	"code": "A JavaScript module and its node. Use Code for custom computation; use Connector Tasks for existing actions.",
@@ -17090,6 +17413,17 @@ function authoringExample(name) {
 				instructions: "Does the customer need support?"
 			}]);
 			break;
+		case "http-request":
+			operations = [...createManagedTask({ nodeId: "http" }, httpRequestTask()), {
+				kind: "graph.node.input.set",
+				nodeId: "http",
+				handle: "url",
+				value: {
+					kind: "value",
+					value: "https://example.com"
+				}
+			}];
+			break;
 		case "openapi":
 			operations = createManagedTask({ nodeId: "api" }, openApiTask(selectOperation({
 				openapi: "3.1.0",