@oomol-lab/open-flow 0.1.0-beta.74 → 0.1.0-beta.75

package/dist/common/mcp.d.ts

@@ -161,7 +161,7 @@ export declare const mcpTools: {
                     value: {
                         revision?: string | undefined;
                         query: string;
-                        type?: "agent" | "approval" | "code" | "condition" | "connector" | "cron" | "decision" | "error" | "integration" | "llm" | "openapi" | "outputs" | "poll" | "start" | "value" | "wait" | "webhook" | "webhook-response" | "workflow" | undefined;
+                        type?: "agent" | "approval" | "code" | "condition" | "connector" | "cron" | "decision" | "error" | "http-request" | "integration" | "llm" | "openapi" | "outputs" | "poll" | "start" | "value" | "wait" | "webhook" | "webhook-response" | "workflow" | undefined;
                         offset: number;
                         limit: number;
                         flowId: string;
@@ -193,7 +193,7 @@ export declare const mcpTools: {
                 };
                 validate(value: unknown): {
                     value: {
-                        type?: "agent" | "approval" | "code" | "condition" | "connector" | "cron" | "decision" | "error" | "integration" | "llm" | "openapi" | "outputs" | "poll" | "start" | "value" | "wait" | "webhook" | "webhook-response" | "workflow" | undefined;
+                        type?: "agent" | "approval" | "code" | "condition" | "connector" | "cron" | "decision" | "error" | "http-request" | "integration" | "llm" | "openapi" | "outputs" | "poll" | "start" | "value" | "wait" | "webhook" | "webhook-response" | "workflow" | undefined;
                         action?: string | undefined;
                         flowId?: string | undefined;
                     };
@@ -321,7 +321,7 @@ export declare const mcpTools: {
                         edits: ({
                             op: "node.add";
                             as: string;
-                            type: "agent" | "approval" | "code" | "condition" | "connector" | "cron" | "decision" | "error" | "integration" | "llm" | "openapi" | "outputs" | "poll" | "start" | "value" | "wait" | "webhook" | "webhook-response" | "workflow";
+                            type: "agent" | "approval" | "code" | "condition" | "connector" | "cron" | "decision" | "error" | "http-request" | "integration" | "llm" | "openapi" | "outputs" | "poll" | "start" | "value" | "wait" | "webhook" | "webhook-response" | "workflow";
                             name: string;
                             onError?: "error" | "stop" | undefined;
                             retry?: {

package/dist/common/mcp.js

@@ -8693,12 +8693,12 @@ function isSchemaKeyword(value) {
 /** Shared by decision entry points, the editor, and durable decision storage. */
 var waitCommentSchema = string$1().trim().refine((value) => [...value].length <= 2e3, "Wait comment must contain at most 2,000 Unicode code points.").nullable().optional();
 //#endregion
-//#region src/openapi/common/authBindings.ts
+//#region src/http/common/authBindings.ts
 /** Never allow credentials to enter a Revision as literal node inputs. */
-function assertOpenApiAuthBindings(document) {
+function assertHttpAuthBindings(document) {
 	for (const node of Object.values(document.graph.nodes)) {
-		if (node.kind != "task" || !("executor" in node.task) || node.task.executor.kind != "openapi") continue;
-		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("OpenAPI authentication accepts deployment variables and upstream outputs only.");
+		if (node.kind != "task" || !("executor" in node.task) || !["openapi", "http-request"].includes(node.task.executor.kind)) continue;
+		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
 	}
 }
 //#endregion
@@ -8791,6 +8791,53 @@ function answerSchema(question) {
 		required: Object.keys(properties)
 	};
 }
+//#endregion
+//#region src/http/common/httpRequest.ts
+var parameterSchema = strictObject({
+	mode: _enum(["fields", "object"]).default("fields"),
+	names: array(string$1()).default([])
+});
+var httpRequestConfigSchema = strictObject({
+	method: _enum([
+		"GET",
+		"POST",
+		"PUT",
+		"PATCH",
+		"DELETE",
+		"HEAD",
+		"OPTIONS"
+	]).default("GET"),
+	query: parameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	headers: parameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	bodyFormat: _enum([
+		"none",
+		"json",
+		"text",
+		"form"
+	]).default("none"),
+	authentication: union([
+		strictObject({ type: literal("none") }),
+		strictObject({ type: _enum(["bearer", "basic"]) }),
+		strictObject({
+			type: literal("apiKey"),
+			name: string$1(),
+			in: _enum(["header", "query"])
+		})
+	]).default({ type: "none" }),
+	responseFormat: _enum([
+		"auto",
+		"json",
+		"text"
+	]).default("auto"),
+	statusPolicy: _enum(["success", "all"]).default("success")
+});
+var httpRequestExecutorSchema = httpRequestConfigSchema.extend({ kind: literal("http-request") });
 function checkJsonDepth(value, depth = 0) {
 	if (depth > 64) throw new TypeError("Value exceeds the maximum JSON depth.");
 	if (value != null && typeof value == "object") for (const child of Object.values(value)) checkJsonDepth(child, depth + 1);
@@ -9070,7 +9117,8 @@ var managedFields = object({
 			kind: literal("workflow"),
 			flowId: text,
 			revisionId: text
-		})
+		}),
+		httpRequestExecutorSchema
 	])
 });
 var managed = managedFields.transform(limitDecisionTask);
@@ -9370,7 +9418,7 @@ function decodeRevisionContent(value) {
 	checkJsonDepth(value);
 	const content = revision.parse(value);
 	checkModelVersion(content);
-	assertOpenApiAuthBindings(content.document);
+	assertHttpAuthBindings(content.document);
 	return content;
 }
 var shapes = {
@@ -9540,6 +9588,7 @@ array(union([...new Map(Object.entries(shapes).map(([kind, shape]) => [kind, sha
 	...shape
 })])).values()])).min(1);
 function checkModelVersion(content) {
+	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind == "http-request")) throw new TypeError("HTTP Request requires Flow model version 11.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && ("moduleId" in candidateNode.task ? candidateNode.task.capabilities?.some((item) => item.kind == "workflow") : candidateNode.task.executor.kind == "agent" && candidateNode.task.executor.tools.some((item) => item.kind == "workflow")))) throw new TypeError("Workflow tools require Flow model version 11.");
 	if (content.modelVersion < 10 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "webhook" && (candidateNode.options?.responseBody != null || candidateNode.options?.responseStatusCodeOutput != null || candidateNode.options?.responseHeadersSource != null || candidateNode.options?.responseHeaderOutputs != null))) throw new TypeError("Dynamic Webhook responses require Flow model version 10.");
 	if (content.modelVersion < 9 && Object.values(content.document.graph.nodes).some((candidateNode) => "retry" in candidateNode && candidateNode.retry != null)) throw new TypeError("Node retries require Flow model version 9.");
@@ -9612,6 +9661,7 @@ var type = _enum([
 	"llm",
 	"decision",
 	"openapi",
+	"http-request",
 	"condition",
 	"value",
 	"wait",
@@ -9737,6 +9787,7 @@ var authoringConfigurations = {
 	}),
 	"connector": authoringDefinitionSchemas.connector.omit({ outputMode: true }).strict(),
 	"openapi": authoringOpenApiSchema,
+	"http-request": httpRequestConfigSchema,
 	"agent": authoringDefinitionSchemas.agent.omit({
 		prompt: true,
 		tools: true
@@ -11855,7 +11906,7 @@ function decodeRunEvent(value) {
 			switch (kind) {
 				case "node.started": {
 					const nodeKind = payload.nodeKind;
-					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "decision" && nodeKind !== "openapi" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "value" && nodeKind !== "outputs" && nodeKind !== "webhook-response" && nodeKind !== "workflow" && nodeKind !== "wait") return invalidResponse();
+					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "decision" && nodeKind !== "openapi" && nodeKind !== "http-request" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "value" && nodeKind !== "outputs" && nodeKind !== "webhook-response" && nodeKind !== "workflow" && nodeKind !== "wait") return invalidResponse();
 					return {
 						...base,
 						kind,

package/dist/common/run-events.js

@@ -1,8 +1,15 @@
+//#region src/http/common/headers.ts
+/** Header names are case-insensitive; never silently combine duplicate business fields. */
+function httpHeaderNameIssue(name, names) {
+	if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) return "invalid";
+	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
+}
+//#endregion
 //#region src/flow/common/webhookResponse.ts
 function webhookResponseAllowsBody(status) {
 	return status !== 204 && status !== 205 && status !== 304;
 }
-var webhookHeadersPort = {
+({
 	jsonSchema: {
 		type: "object",
 		additionalProperties: { type: [
@@ -12,13 +19,7 @@ var webhookHeadersPort = {
 		] }
 	},
 	nullable: true
-};
-/** Header names are case-insensitive; never silently combine duplicate business fields. */
-function webhookHeaderNameIssue(name, names) {
-	if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) return "invalid";
-	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
-}
-webhookHeadersPort.jsonSchema;
+}).jsonSchema;
 function validWebhookStatus(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 200 && value <= 599 && webhookResponseAllowsBody(value);
 }
@@ -28,7 +29,7 @@ function webhookHeaderValues(source) {
 	const headers = {};
 	const names = [];
 	for (const [name, value] of Object.entries(source)) {
-		if (webhookHeaderNameIssue(name, names) != null) return;
+		if (httpHeaderNameIssue(name, names) != null) return;
 		if (typeof value !== "string" && typeof value !== "boolean" && !(typeof value === "number" && Number.isFinite(value))) return;
 		const text = String(value);
 		if ([...text].some((character) => character.charCodeAt(0) > 255 || /[\0\r\n]/.test(character))) return;
@@ -52,6 +53,7 @@ var nodeKinds = /* @__PURE__ */ new Set([
 	"decision",
 	"javascript",
 	"openapi",
+	"http-request",
 	"llm",
 	"value",
 	"wait",

package/dist/common/runtime-contract.js

@@ -27,6 +27,7 @@ var currentEngineContract = "open-flow-engine/v8";
 var nodejsEngineContract = "open-flow-engine/v8/nodejs-compat-v1";
 var currentContract = {
 	workflowTools: true,
+	httpRequests: true,
 	waitAutoContinue: true,
 	webhookResponses: true,
 	platformExports: /* @__PURE__ */ new Set(["engineContract", "identity"]),
@@ -73,11 +74,13 @@ function findEngineContract(contract) {
 	if (contract == "open-flow-engine/v7" || contract == "open-flow-engine/v7/nodejs-compat-v1") return {
 		...contract.endsWith("/nodejs-compat-v1") ? nodejsContract : currentContract,
 		workflowTools: false,
+		httpRequests: false,
 		platformSource: `export const engineContract = ${JSON.stringify(contract)}\nexport function identity(value) { return value }\n`
 	};
 	if (contract == "open-flow-engine/v6" || contract == "open-flow-engine/v6/nodejs-compat-v1") return {
 		...contract == "open-flow-engine/v6" ? currentContract : nodejsContract,
 		workflowTools: false,
+		httpRequests: false,
 		waitAutoContinue: false,
 		webhookResponses: false,
 		platformSource: `export const engineContract = ${JSON.stringify(contract)}

package/dist/common/scheduler.d.ts

@@ -33,7 +33,7 @@ export type SchedulerEvent = {
     readonly inputs: Readonly<Record<string, JsonValue>>;
     readonly jobId: string;
     readonly nodeId: string;
-    readonly nodeKind: 'agent' | 'approval' | 'condition' | 'connector' | 'decision' | 'javascript' | 'openapi' | 'llm' | 'value' | 'wait' | 'outputs' | 'workflow' | 'webhook-response';
+    readonly nodeKind: 'agent' | 'approval' | 'condition' | 'connector' | 'decision' | 'javascript' | 'openapi' | 'http-request' | 'llm' | 'value' | 'wait' | 'outputs' | 'workflow' | 'webhook-response';
     readonly nodeTitle?: string;
     readonly runId: string;
     readonly type: 'node.started';

package/dist/common/scheduler.js

@@ -9472,11 +9472,65 @@ function answerSchema(question) {
 	};
 }
 //#endregion
+//#region src/http/common/headers.ts
+/** Header names are case-insensitive; never silently combine duplicate business fields. */
+function httpHeaderNameIssue(name, names) {
+	if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) return "invalid";
+	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
+}
+//#endregion
+//#region src/http/common/httpRequest.ts
+var parameterSchema = strictObject({
+	mode: _enum(["fields", "object"]).default("fields"),
+	names: array(string$1()).default([])
+});
+var httpRequestExecutorSchema = strictObject({
+	method: _enum([
+		"GET",
+		"POST",
+		"PUT",
+		"PATCH",
+		"DELETE",
+		"HEAD",
+		"OPTIONS"
+	]).default("GET"),
+	query: parameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	headers: parameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	bodyFormat: _enum([
+		"none",
+		"json",
+		"text",
+		"form"
+	]).default("none"),
+	authentication: union([
+		strictObject({ type: literal("none") }),
+		strictObject({ type: _enum(["bearer", "basic"]) }),
+		strictObject({
+			type: literal("apiKey"),
+			name: string$1(),
+			in: _enum(["header", "query"])
+		})
+	]).default({ type: "none" }),
+	responseFormat: _enum([
+		"auto",
+		"json",
+		"text"
+	]).default("auto"),
+	statusPolicy: _enum(["success", "all"]).default("success")
+}).extend({ kind: literal("http-request") });
+//#endregion
 //#region src/flow/common/retry.ts
 var retryNodeTypes = [
 	"code",
 	"connector",
 	"openapi",
+	"http-request",
 	"llm",
 	"decision"
 ];
@@ -9565,22 +9619,6 @@ var webhookResponseTimeout = {
 function webhookResponseAllowsBody(status) {
 	return status !== 204 && status !== 205 && status !== 304;
 }
-var webhookHeadersPort = {
-	jsonSchema: {
-		type: "object",
-		additionalProperties: { type: [
-			"string",
-			"number",
-			"boolean"
-		] }
-	},
-	nullable: true
-};
-/** Header names are case-insensitive; never silently combine duplicate business fields. */
-function webhookHeaderNameIssue(name, names) {
-	if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) return "invalid";
-	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
-}
 /** Fixed inputs belong to the node, not author-supplied definitions. */
 var webhookResponseInputs = [
 	{
@@ -9597,7 +9635,17 @@ var webhookResponseInputs = [
 	},
 	{
 		handle: "headers",
-		jsonSchema: webhookHeadersPort.jsonSchema,
+		jsonSchema: {
+			jsonSchema: {
+				type: "object",
+				additionalProperties: { type: [
+					"string",
+					"number",
+					"boolean"
+				] }
+			},
+			nullable: true
+		}.jsonSchema,
 		nullable: false,
 		value: {}
 	}
@@ -9611,7 +9659,7 @@ function webhookHeaderValues(source) {
 	const headers = {};
 	const names = [];
 	for (const [name, value] of Object.entries(source)) {
-		if (webhookHeaderNameIssue(name, names) != null) return;
+		if (httpHeaderNameIssue(name, names) != null) return;
 		if (typeof value !== "string" && typeof value !== "boolean" && !(typeof value === "number" && Number.isFinite(value))) return;
 		const text = String(value);
 		if ([...text].some((character) => character.charCodeAt(0) > 255 || /[\0\r\n]/.test(character))) return;
@@ -9822,7 +9870,8 @@ var managedFields = object({
 			kind: literal("workflow"),
 			flowId: text,
 			revisionId: text
-		})
+		}),
+		httpRequestExecutorSchema
 	])
 });
 var managed = managedFields.transform(limitDecisionTask);
@@ -11458,7 +11507,7 @@ function executeNode(context, input) {
 		const kind = nodeKind(node);
 		const title = nodeTitle(node);
 		const projectedInputs = Object.fromEntries(Object.entries(nodeInputs).filter(([handle]) => {
-			if (node.kind == "task" && "executor" in node.task && node.task?.executor.kind == "openapi" && handle.startsWith("auth.")) return false;
+			if (node.kind == "task" && "executor" in node.task && ["openapi", "http-request"].includes(node.task.executor.kind) && handle.startsWith("auth.")) return false;
 			const mapping = nodeInputMappings(node)[handle];
 			return mapping?.kind != "sources" || mapping.sources.every((source) => source.kind != "binding");
 		}));
@@ -11509,7 +11558,7 @@ function executeNode(context, input) {
 					input: Object.fromEntries(Object.entries(nodeInputs).filter(([handle]) => {
 						if (additional.has(handle)) return false;
 						const task = "executor" in node.task ? node.task : void 0;
-						if (task?.executor.kind != "openapi") return true;
+						if (task == null || !["openapi", "http-request"].includes(task.executor.kind)) return true;
 						const mapping = node.inputs[handle];
 						return mapping?.kind != "unset" && (mapping != null || task.inputs.some((port) => "handle" in port && port.handle == handle && port.value !== void 0));
 					})),

package/dist/common/webhook-response.d.ts

@@ -27,8 +27,6 @@ export declare const webhookHeadersPort: {
     readonly nullable: true;
 };
 export declare function workflowOutputsPort(outputs: readonly Port[]): PortDefinition;
-/** Header names are case-insensitive; never silently combine duplicate business fields. */
-export declare function webhookHeaderNameIssue(name: string, names: readonly string[]): 'invalid' | 'duplicate' | undefined;
 /** Fixed inputs belong to the node, not author-supplied definitions. */
 export declare const webhookResponseInputs: readonly InputPort[];
 export interface WebhookResponseSnapshot {

package/dist/common/webhook-trigger.js

@@ -91,6 +91,13 @@ function isJsonObject(value) {
 	}
 }
 //#endregion
+//#region src/http/common/headers.ts
+/** Header names are case-insensitive; never silently combine duplicate business fields. */
+function httpHeaderNameIssue(name, names) {
+	if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) return "invalid";
+	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
+}
+//#endregion
 //#region src/flow/common/webhookResponse.ts
 var webhookResponseTimeout = {
 	defaultMs: 3e4,
@@ -100,7 +107,7 @@ var webhookResponseTimeout = {
 function webhookResponseAllowsBody(status) {
 	return status !== 204 && status !== 205 && status !== 304;
 }
-var webhookHeadersPort = {
+({
 	jsonSchema: {
 		type: "object",
 		additionalProperties: { type: [
@@ -110,13 +117,7 @@ var webhookHeadersPort = {
 		] }
 	},
 	nullable: true
-};
-/** Header names are case-insensitive; never silently combine duplicate business fields. */
-function webhookHeaderNameIssue(name, names) {
-	if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]+$/.test(name)) return "invalid";
-	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
-}
-webhookHeadersPort.jsonSchema;
+}).jsonSchema;
 function validWebhookStatus(value) {
 	return typeof value === "number" && Number.isInteger(value) && value >= 200 && value <= 599 && webhookResponseAllowsBody(value);
 }
@@ -126,7 +127,7 @@ function webhookHeaderValues(source) {
 	const headers = {};
 	const names = [];
 	for (const [name, value] of Object.entries(source)) {
-		if (webhookHeaderNameIssue(name, names) != null) return;
+		if (httpHeaderNameIssue(name, names) != null) return;
 		if (typeof value !== "string" && typeof value !== "boolean" && !(typeof value === "number" && Number.isFinite(value))) return;
 		const text = String(value);
 		if ([...text].some((character) => character.charCodeAt(0) > 255 || /[\0\r\n]/.test(character))) return;
@@ -2929,7 +2930,7 @@ function webhookResponseHeaders(result, options) {
 	if (!isJsonObject(source)) return;
 	const values = /* @__PURE__ */ new Map();
 	for (const [name, value] of Object.entries(source)) {
-		if (webhookHeaderNameIssue(name, [...values.values()].map((entry) => entry.name)) != null) return;
+		if (httpHeaderNameIssue(name, [...values.values()].map((entry) => entry.name)) != null) return;
 		values.set(name.toLowerCase(), {
 			name,
 			value
@@ -2938,7 +2939,7 @@ function webhookResponseHeaders(result, options) {
 	if (whole == null) {
 		const names = [];
 		for (const [name, output] of Object.entries(options.responseHeaderOutputs ?? {})) {
-			if (webhookHeaderNameIssue(name, names) != null) return;
+			if (httpHeaderNameIssue(name, names) != null) return;
 			names.push(name);
 			values.set(name.toLowerCase(), {
 				name,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oomol-lab/open-flow",
-  "version": "0.1.0-beta.74",
+  "version": "0.1.0-beta.75",
   "description": "TypeScript contracts and Browser runtime for Open Flow.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {
@@ -25,6 +25,10 @@
       "types": "./dist/common/decision.d.ts",
       "import": "./dist/common/decision.js"
     },
+    "./http-request": {
+      "types": "./dist/common/http-request.d.ts",
+      "import": "./dist/common/http-request.js"
+    },
     "./openapi": {
       "types": "./dist/common/openapi.d.ts",
       "import": "./dist/common/openapi.js"

package/skills/open-flow/references/flow-authoring.md

@@ -298,6 +298,7 @@ For Connector Tasks, independent Code Actions, Agent tools and notifications, an
 | Manual, HTTP or scheduled entry | `start`, `webhook`, `cron`: workflow `inputDefs`, HTTP body fields, or schedule.                                                                                                                                                    |
 | Workflow failure handler        | `error`: published upstream Flows' automatic Run failures; not a node-level catch or a handler for manual Run failures.                                                                                                             |
 | Call another workflow           | `workflow`: select an owned published Flow ID; inputs and outputs derive from its saved contract. Use `node.refresh` to update it.                                                                                                  |
+| Single HTTP request             | `http-request`: method, parameter modes, authentication, body and response configuration; URL and request values use public inputs.                                                                                                 |
 | Fixed HTTP operation            | `openapi`: an OpenAPI source, path and method; resolved authentication choices and ports appear in node details.                                                                                                                    |
 | Reusable constants              | `value`: named JSON values and optional output constraints.                                                                                                                                                                         |
 | Durable interaction             | `wait`, `approval`: prompt and named inputs; resume through the Run's Wait ID. Wait additionally supports optional `config.autoContinue` with `{kind:"after",durationMs:86400000}` or `{kind:"at",at:"2026-10-25T10:00:00+08:00"}`. |

package/skills/open-flow/references/flow-n8n-conversion.md

@@ -13,17 +13,17 @@ publishing and enabling remain separate actions within the user's authorization.
 
 ## Choose a representation
 
-| Source behavior                               | Open Flow building blocks                       | What determines a good fit                                                     |
-| --------------------------------------------- | ----------------------------------------------- | ------------------------------------------------------------------------------ |
-| Scheduled, webhook or provider event          | Cron, Webhook, Poll or Integration Trigger      | Schedule/timezone, event payload, delivery and response behavior.              |
-| Provider read or write                        | Connector                                       | Exact operation, input/output shape, account and number of calls.              |
-| Field shaping, filtering, aggregation or join | Code with named input/output fields             | Explicit collection representation, ordering, keys and empty-input behavior.   |
-| IF or Switch                                  | Condition and named execution branches          | Predicate, first/all matches, fallback route and data sent onward.             |
-| Prompt plus model and output parser           | LLM with template, inputs and `resultSchema`    | Supported model, result shape and any parser repair behavior.                  |
-| Agent with tools or memory                    | Agent where its current contract fits           | Tool permissions, state lifetime and how context is supplied.                  |
-| HTTP request                                  | OpenAPI where an actual operation contract fits | Method, parameters, auth, response format and error behavior.                  |
-| Human response or durable pause               | Wait or Approval                                | Who resumes it, payload, timing, notification and external response lifecycle. |
-| Workflow failure handling                     | Error Trigger where its scope fits              | Which failures trigger it and what failure data it receives.                   |
+| Source behavior                               | Open Flow building blocks                               | What determines a good fit                                                     |
+| --------------------------------------------- | ------------------------------------------------------- | ------------------------------------------------------------------------------ |
+| Scheduled, webhook or provider event          | Cron, Webhook, Poll or Integration Trigger              | Schedule/timezone, event payload, delivery and response behavior.              |
+| Provider read or write                        | Connector                                               | Exact operation, input/output shape, account and number of calls.              |
+| Field shaping, filtering, aggregation or join | Code with named input/output fields                     | Explicit collection representation, ordering, keys and empty-input behavior.   |
+| IF or Switch                                  | Condition and named execution branches                  | Predicate, first/all matches, fallback route and data sent onward.             |
+| Prompt plus model and output parser           | LLM with template, inputs and `resultSchema`            | Supported model, result shape and any parser repair behavior.                  |
+| Agent with tools or memory                    | Agent where its current contract fits                   | Tool permissions, state lifetime and how context is supplied.                  |
+| HTTP request                                  | `http-request`, or `openapi` for a documented operation | Method, parameters, auth, response format and error behavior.                  |
+| Human response or durable pause               | Wait or Approval                                        | Who resumes it, payload, timing, notification and external response lifecycle. |
+| Workflow failure handling                     | Error Trigger where its scope fits                      | Which failures trigger it and what failure data it receives.                   |
 
 Use `schema TYPE` and provider discovery for the actual deployment. A node's
 name alone does not establish equivalence. Provider operations can differ even
@@ -120,10 +120,14 @@ inside URLs, headers, expressions or Code; keep those out of Drafts and reports.
 Use supported credential bindings for the selected operation. A missing account
 can leave a Draft incomplete without implying that the action itself is absent.
 
-For HTTP Request conversion, `schema openapi` describes source URL, operation
-selection and supported authentication. Check the actual operation's response,
-non-success status, redirect, binary and retry requirements against that contract.
-An invented API specification does not establish support for an unknown operation.
+For HTTP Request conversion, `schema http-request` describes a single request's
+method, parameter modes, body, authentication and response handling. Bind `url`,
+request parameters and body through public inputs. Authentication inputs require
+variables or upstream outputs. Query arrays become repeated parameters; response
+arrays remain one value. The first version does not follow redirects or support
+pagination, files, OAuth or direct Agent tools. Check these requirements before
+calling the conversion equivalent. Use `schema openapi` when an actual operation
+contract is available; do not invent an API specification to make a request.
 
 A provider event may expose an ID where the source expected a full record. A
 Connector read can supply the missing data if it preserves the desired behavior.

package/src/control/common/api.ts

@@ -675,6 +675,7 @@ export function decodeRunEvent(value: unknown) {
             nodeKind !== 'javascript' &&
             nodeKind !== 'decision' &&
             nodeKind !== 'openapi' &&
+            nodeKind !== 'http-request' &&
             nodeKind !== 'llm' &&
             nodeKind !== 'agent' &&
             nodeKind !== 'value' &&

package/src/control/common/authoring.ts

@@ -42,6 +42,7 @@ import {
   renameFlowOutputSources,
 } from '../../flow/common/nodeChanges.ts'
 import { retryConfigurationSchema } from '../../flow/common/retry.ts'
+import { httpRequestTask, httpRequestConfigSchema, httpRequestInputs } from '../../http/common/httpRequest.ts'
 import { withWorkflowTask, workflowTask, workflowSelectionTask, workflowCapability, workflowAgentTool } from '../../workflow/common/workflow.ts'
 import { conditionConfigurationView, prepareConditionConfiguration } from './authoringCondition.ts'
 import { authoringDiagnosticField } from './authoringDiagnosticFields.ts'
@@ -145,7 +146,10 @@ export function authoringNode(content: RevisionContent, ref: string) {
         ),
       }
     else if (task.executor.kind == 'workflow') config = { flowId: task.executor.flowId }
-    else if (task.executor.kind == 'openapi') {
+    else if (task.executor.kind == 'http-request') {
+      const { kind: _kind, ...settings } = task.executor
+      config = settings
+    } else if (task.executor.kind == 'openapi') {
       config = { ...openApiConfigView(task.executor) }
     }
   } else if (node.kind == 'task' && 'moduleId' in node.task) {
@@ -442,7 +446,8 @@ export async function compileAuthoring(base: RevisionContent, request: Authoring
       const timing = record(record(patch.config).autoContinue)
       if (Object.hasOwn(timing, 'kind') && timing.kind != record(record(view.config).autoContinue).kind) record(update.config).autoContinue = timing
     }
-    if (type == 'openapi' && Object.hasOwn(record(patch.config), 'authentication')) record(update.config).authentication = record(patch.config).authentication
+    if ((type == 'openapi' || type == 'http-request') && Object.hasOwn(record(patch.config), 'authentication'))
+      record(update.config).authentication = record(patch.config).authentication
     for (const path of clear) clearPath(update, path)
     if (typeof update.name != 'string') fail('node.name-required', 'Node name cannot be cleared.')
     const config = authoringConfigurations[type].parse(update.config) as Record<string, unknown>
@@ -516,7 +521,10 @@ export async function compileAuthoring(base: RevisionContent, request: Authoring
           task = { ...before, name: String(update.name), executor: { ...executor, ...config } } as ManagedTaskDefinition
         } else task = await connectorTask(config, String(update.name))
       } else if (type == 'decision') task = decisionTask(config.questions as Parameters<typeof decisionTask>[0], String(update.name))
-      else if (type == 'openapi') {
+      else if (type == 'http-request') {
+        task = httpRequestTask(httpRequestConfigSchema.parse(config), String(update.name), before)
+        next = { ...next, inputs: httpRequestInputs(node.inputs, before, task) } as GraphNode
+      } else if (type == 'openapi') {
         task = await prepareOpenApiTask(config as AuthoringOpenApiConfig, before, (url) => host.openapi(url), String(update.name), {
           authentication: explicit('authentication'),
           serverUrl: explicit('serverUrl'),
@@ -766,6 +774,9 @@ export async function compileAuthoring(base: RevisionContent, request: Authoring
             case 'connector':
               changes = createManagedTask(identity, await connectorTask(config, name))
               break
+            case 'http-request':
+              changes = createManagedTask(identity, httpRequestTask(httpRequestConfigSchema.parse(config), name))
+              break
             case 'openapi':
               changes = createManagedTask(
                 identity,

package/src/control/common/authoringExamples.ts

@@ -11,6 +11,7 @@ import {
   createValue,
   createWait,
 } from '../../flow/common/nodeChanges.ts'
+import { httpRequestTask } from '../../http/common/httpRequest.ts'
 import { openApiTask, selectOperation } from '../../openapi/common/openapi.ts'
 
 const descriptions = {
@@ -22,6 +23,7 @@ const descriptions = {
   'poll': 'Gmail polling by key; replace CONNECTION_ID with an active Gmail connection.',
   'integration': 'Telegram webhook integration by key; replace CONNECTION_ID with an active Telegram connection.',
   'decision': 'AI Decision evaluates named questions against target and returns a complete answer object per output. Configure target before running.',
+  'http-request': 'A single HTTP request. Bind url and request inputs; outputs are body, statusCode and headers.',
   'openapi': 'A fixed JSON API operation. Replace the example document and URL before running.',
   'connector':
     'A Connector Task and its node. Replace ACTION_ID, CONNECTION_ID and port definitions using connector_get / connector show. Set connectionId to an empty string to defer account configuration; execution will require an account.',
@@ -55,6 +57,12 @@ export function authoringExample(name: string): { version: 1; operations: readon
         { name: 'needs_support', type: 'noul', instructions: 'Does the customer need support?' },
       ])
       break
+    case 'http-request':
+      operations = [
+        ...createManagedTask({ nodeId: 'http' }, httpRequestTask()),
+        { kind: 'graph.node.input.set', nodeId: 'http', handle: 'url', value: { kind: 'value', value: 'https://example.com' } },
+      ]
+      break
     case 'openapi': {
       const document = {
         openapi: '3.1.0',