@oomol-lab/open-flow 0.1.0-beta.75 → 0.1.0-beta.76

package/dist/common/flow-encoding.js

@@ -1,12 +1,3 @@
-//#region src/http/common/authBindings.ts
-/** Never allow credentials to enter a Revision as literal node inputs. */
-function assertHttpAuthBindings(document) {
-	for (const node of Object.values(document.graph.nodes)) {
-		if (node.kind != "task" || !("executor" in node.task) || !["openapi", "http-request"].includes(node.task.executor.kind)) continue;
-		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
-	}
-}
-//#endregion
 //#region ../../node_modules/.bun/dequal@2.0.3/node_modules/dequal/lite/index.mjs
 var has = Object.prototype.hasOwnProperty;
 function dequal(foo, bar) {
@@ -8462,6 +8453,9 @@ function createSchemaComparer() {
 createSchemaComparer();
 //#endregion
 //#region src/decision/common/decision.ts
+function isDecisionExecutor(executor) {
+	return executor.kind === "decision";
+}
 var decisionLimits = {
 	choice: 255,
 	score: 10
@@ -8484,7 +8478,7 @@ function limitDecisionQuestions(questions) {
 }
 /** Loading an oversized task also updates its previously generated output schemas. */
 function limitDecisionTask(task) {
-	if (task.executor.kind !== "decision") return task;
+	if (!isDecisionExecutor(task.executor)) return task;
 	const original = task.executor.questions;
 	const questions = limitDecisionQuestions(original);
 	if (questions === original) return task;
@@ -8551,6 +8545,20 @@ function answerSchema(question) {
 	};
 }
 //#endregion
+//#region src/http/common/authBindings.ts
+/** Never allow credentials to enter a Revision as literal inputs of an OpenAPI or HTTP request node. */
+function assertHttpAuthBindings(inputs) {
+	for (const [handle, mapping] of Object.entries(inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
+}
+//#endregion
+//#region src/http/common/hosts.ts
+/** Hosts of a Code `http` Capability: lowercase DNS names or IPv4 addresses; `*.example.com` matches subdomains only. */
+var httpHostPattern = /^(?:\*\.)?(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** Wildcards must name a registrable suffix, so `*.com` is rejected. */
+function isHttpHost(value) {
+	return httpHostPattern.test(value) && (!value.startsWith("*.") || value.slice(2).includes("."));
+}
+//#endregion
 //#region src/http/common/httpRequest.ts
 var parameterSchema = strictObject({
 	mode: _enum(["fields", "object"]).default("fields"),
@@ -8764,7 +8772,14 @@ var workflowCapabilitySchema = strictObject({
 	inputs: array(port),
 	outputs: array(port).nullable()
 });
-var capability = union([connectorCapabilitySchema, workflowCapabilitySchema]);
+var capability = union([
+	connectorCapabilitySchema,
+	workflowCapabilitySchema,
+	strictObject({
+		kind: literal("http"),
+		hosts: array(text.refine(isHttpHost, "Use a lowercase host name or IPv4 address, optionally prefixed by \"*.\" for subdomains.")).min(1).max(20).describe("Hosts Code may call with context.fetch. \"*.example.com\" matches subdomains only.")
+	})
+]);
 var inline = object({
 	...ports,
 	name: text,
@@ -9128,7 +9143,8 @@ var revision = object({
 		literal(8),
 		literal(9),
 		literal(10),
-		literal(11)
+		literal(11),
+		literal(12)
 	]),
 	document,
 	modules: record$1(text, module)
@@ -9383,14 +9399,14 @@ function repairRevisionEnvelope(value) {
 	checkJsonDepth(value);
 	const envelopeSource = record(value);
 	if (envelopeSource.kind != "open-flow-flow-revision" || envelopeSource.version != 1) throw new TypeError("The value is not an Open Flow Revision envelope.");
-	if (typeof envelopeSource.modelVersion == "number" && envelopeSource.modelVersion > 11) throw new TypeError("The Flow model is newer than this package.");
+	if (typeof envelopeSource.modelVersion == "number" && envelopeSource.modelVersion > 12) throw new TypeError("The Flow model is newer than this package.");
 	let sourceDocument = record(envelopeSource.modelVersion == 1 || envelopeSource.modelVersion == 2 ? upgradeLegacyDocument(envelopeSource.document) : envelopeSource.document);
 	if (typeof envelopeSource.modelVersion == "number" && envelopeSource.modelVersion < 6) sourceDocument = upgradeTaskNodes(sourceDocument);
 	sourceDocument = record(normalizeDocument(sourceDocument));
 	const bindings = record(sourceDocument.bindings);
 	const sourceGraph = repairGraph(sourceDocument.graph, bindings);
 	return decodeRevisionContent({
-		modelVersion: 11,
+		modelVersion: 12,
 		document: {
 			bindings: repairedEntries(sourceDocument.bindings, binding),
 			graph: sourceGraph
@@ -9406,7 +9422,7 @@ function decodeRevisionContent(value) {
 	checkJsonDepth(value);
 	const content = revision.parse(value);
 	checkModelVersion(content);
-	assertHttpAuthBindings(content.document);
+	assertDocumentHttpAuthBindings(content.document);
 	return content;
 }
 function decodeRevisionEnvelope(value) {
@@ -9418,7 +9434,7 @@ function decodeRevisionEnvelope(value) {
 	} : value;
 	const content = envelope$1.parse(candidate);
 	checkModelVersion(content);
-	assertHttpAuthBindings(content.document);
+	assertDocumentHttpAuthBindings(content.document);
 	return {
 		modelVersion: content.modelVersion,
 		document: content.document,
@@ -9592,6 +9608,7 @@ array(union([...new Map(Object.entries(shapes).map(([kind, shape]) => [kind, sha
 	...shape
 })])).values()])).min(1);
 function checkModelVersion(content) {
+	if (content.modelVersion < 12 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "moduleId" in candidateNode.task && candidateNode.task.capabilities?.some((item) => item.kind == "http"))) throw new TypeError("Code HTTP access requires Flow model version 12.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind == "http-request")) throw new TypeError("HTTP Request requires Flow model version 11.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && ("moduleId" in candidateNode.task ? candidateNode.task.capabilities?.some((item) => item.kind == "workflow") : candidateNode.task.executor.kind == "agent" && candidateNode.task.executor.tools.some((item) => item.kind == "workflow")))) throw new TypeError("Workflow tools require Flow model version 11.");
 	if (content.modelVersion < 10 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "webhook" && (candidateNode.options?.responseBody != null || candidateNode.options?.responseStatusCodeOutput != null || candidateNode.options?.responseHeadersSource != null || candidateNode.options?.responseHeaderOutputs != null))) throw new TypeError("Dynamic Webhook responses require Flow model version 10.");
@@ -9607,6 +9624,9 @@ function checkModelVersion(content) {
 	if (content.modelVersion < 6 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task)) throw new TypeError("Node-owned managed Tasks require Flow model version 6.");
 	if (content.modelVersion < 5 && Object.values(content.document.graph.nodes).some((itemNode) => itemNode.kind == "error")) throw new TypeError("Error workflows require Flow model version 5.");
 }
+function assertDocumentHttpAuthBindings(content) {
+	for (const graphNode of Object.values(content.graph.nodes)) if (graphNode.kind == "task" && "executor" in graphNode.task && ["openapi", "http-request"].includes(graphNode.task.executor.kind)) assertHttpAuthBindings(graphNode.inputs);
+}
 //#endregion
 //#region src/flow/common/condition.ts
 function clearConditionBinding(operand) {
@@ -9649,10 +9669,10 @@ function upgradeRevisionContent(content) {
 function upgradeDecodedRevisionContent(content) {
 	const graph = content.document.graph;
 	const hasManual = Object.values(graph.nodes).some((node) => node.kind == "manual");
-	if (!hasManual && content.modelVersion == 11) return content;
+	if (!hasManual && content.modelVersion == 12) return content;
 	return {
 		...content,
-		modelVersion: 11,
+		modelVersion: 12,
 		document: {
 			...content.document,
 			graph: hasManual ? {
@@ -9728,7 +9748,7 @@ function clearNodeConnections(graph, connectionId) {
 				return [id, node];
 			}
 			const capabilities = node.task.capabilities?.map((capability) => {
-				if (capability.kind == "workflow") return capability;
+				if (capability.kind == "workflow" || capability.kind == "http") return capability;
 				if (!("mode" in capability)) {
 					if ("action" in capability) {
 						const { connectionId: selected, ...rest } = capability;
@@ -10224,7 +10244,7 @@ function revisionRepairKind(bytes) {
 		return;
 	}
 	const source = value;
-	return typeof source.modelVersion == "number" && source.modelVersion < 11 ? "upgrade" : "repair";
+	return typeof source.modelVersion == "number" && source.modelVersion < 12 ? "upgrade" : "repair";
 }
 function repairRevision(bytes) {
 	return repairRevisionEnvelope(revisionValue(bytes));

package/dist/common/flow-input-value.d.ts

@@ -1,4 +1,4 @@
-import type { FixedInputValue, InputValues, InputMapping, JsonValue } from './flow-change.js';
+import type { FixedInputValue, InputValues, InputMapping, JsonValue } from './flow-model.js';
 /** An explicit clear suppresses the default; absent mappings still inherit it. */
 export declare function inputValue(mapping: InputMapping | undefined, fallback: JsonValue | undefined): JsonValue | undefined;
 /** Converts explicit user values at authoring boundaries, never persisted legacy data. */

package/dist/common/flow-model.d.ts

@@ -0,0 +1,121 @@
+import type { JsonValue, Port, PortDefinition } from '../index.js';
+export type { JsonValue, Port, PortDefinition } from '../index.js';
+/** Primitives shared by every node family. Node unions and graph operations belong to change.ts. */
+export interface RetryConfiguration {
+    readonly maxRetries: number;
+    readonly intervalMs: number;
+}
+export interface InputPortDefinition extends PortDefinition {
+    readonly value?: JsonValue;
+}
+export interface InputPort extends InputPortDefinition {
+    readonly handle: string;
+}
+export interface Group {
+    readonly collapsed?: boolean;
+    readonly group: string;
+}
+export declare function portsByHandle<Value extends Port>(ports: readonly (Value | Group)[]): Readonly<Record<string, Value>>;
+export interface NodeSource {
+    readonly system?: true;
+    readonly field?: string;
+    readonly kind: 'node';
+    readonly nodeId: string;
+    readonly output: string;
+}
+export interface BindingSource {
+    readonly bindingId: string;
+    readonly kind: 'binding';
+}
+export type FixedInputValue = {
+    readonly kind: 'unset';
+} | {
+    readonly kind: 'value';
+    readonly value: JsonValue;
+};
+export type InputValues = Readonly<Record<string, FixedInputValue>>;
+export type InputMapping = FixedInputValue | {
+    readonly kind: 'sources';
+    readonly sources: readonly (BindingSource | NodeSource)[];
+};
+export interface GraphNodeBase {
+    readonly description?: string;
+    readonly icon?: string;
+    readonly inputs: Readonly<Record<string, InputMapping>>;
+    readonly name?: string;
+    readonly maxExecutions?: number;
+    readonly timeoutMs?: number;
+    readonly retry?: RetryConfiguration;
+    readonly onError?: 'stop' | 'error';
+}
+export type Source = BindingSource | NodeSource;
+export interface WorkflowCapability {
+    readonly kind: 'workflow';
+    readonly name: string;
+    readonly flowId: string;
+    readonly revisionId: string;
+    readonly inputs: readonly Port[];
+    readonly outputs: readonly Port[] | null;
+}
+/** Hosts that Code may call through `context.fetch`; requires Flow model 12 and Engine v9. */
+export interface HttpCapability {
+    readonly kind: 'http';
+    readonly hosts: readonly string[];
+}
+export type TaskCapability = ConnectorCapability | WorkflowCapability | HttpCapability;
+export interface ConnectorAccessCapability {
+    readonly actionHints?: readonly string[];
+    readonly connectionHints?: readonly {
+        readonly action: string;
+        readonly connectionId: string;
+        readonly alias?: string;
+    }[];
+    readonly kind: 'connector';
+}
+export interface ConnectorActionCapability {
+    readonly action: string;
+    readonly connections: readonly {
+        readonly connectionId: string;
+        readonly alias?: string;
+    }[];
+    readonly connectionId?: string;
+    readonly kind: 'connector';
+}
+export type ConnectorPermissionCapability = {
+    readonly kind: 'connector';
+    readonly mode: 'shared';
+} | {
+    readonly kind: 'connector';
+    readonly mode: 'independent';
+    readonly actions: readonly {
+        readonly action: string;
+        readonly connectionId?: string;
+    }[];
+};
+export type ConnectorCapability = ConnectorAccessCapability | ConnectorActionCapability | ConnectorPermissionCapability;
+export interface TaskDefinitionBase {
+    readonly inputs: readonly (InputPort | Group)[];
+    readonly name: string;
+    readonly outputs: readonly (Port | Group)[];
+}
+export interface InlineTaskDefinition extends TaskDefinitionBase {
+    readonly capabilities?: readonly TaskCapability[];
+    readonly moduleId: string;
+}
+/** The executor shape every managed Task shares; each node family narrows it with its own executor. */
+export interface TaskExecutor {
+    readonly kind: string;
+}
+export interface ManagedTaskDefinitionOf<Executor extends TaskExecutor> extends TaskDefinitionBase {
+    readonly executor: Executor;
+}
+export interface WorkflowExecutor {
+    readonly kind: 'workflow';
+    readonly flowId: string;
+    readonly revisionId: string;
+}
+export interface CodeModule {
+    readonly imports: readonly string[];
+    readonly name: string;
+    readonly source: string;
+}

package/dist/common/flow-notifications.d.ts

@@ -1,4 +1,4 @@
-import type { CanvasCommand } from '../common/canvas-commands.js';
+import type { CanvasCommand } from './canvas-commands.js';
 export type FlowCatalogEvent = {
     readonly kind: 'flows.changed';
     readonly version: 1;

package/dist/common/flow-retry.d.ts

@@ -1,9 +1,7 @@
 import type { GraphNode } from './flow-change.js';
+import type { RetryConfiguration } from './flow-model.js';
 import { z } from 'zod';
-export interface RetryConfiguration {
-    readonly maxRetries: number;
-    readonly intervalMs: number;
-}
+export type { RetryConfiguration } from './flow-model.js';
 export declare const retryNodeTypes: readonly ['code', 'connector', 'openapi', 'http-request', 'llm', 'decision'];
 export declare const nodeRetryLimits: {
     readonly maxRetries: 5;

package/dist/common/flow-semantics.js

@@ -3973,6 +3973,9 @@ function hasRetiredRef(value) {
 }
 //#endregion
 //#region src/decision/common/decision.ts
+function isDecisionExecutor(executor) {
+	return executor.kind === "decision";
+}
 var decisionLimits = {
 	choice: 255,
 	score: 10
@@ -3995,7 +3998,7 @@ function limitDecisionQuestions(questions) {
 }
 /** Loading an oversized task also updates its previously generated output schemas. */
 function limitDecisionTask(task) {
-	if (task.executor.kind !== "decision") return task;
+	if (!isDecisionExecutor(task.executor)) return task;
 	const original = task.executor.questions;
 	const questions = limitDecisionQuestions(original);
 	if (questions === original) return task;
@@ -4120,7 +4123,7 @@ function decisionTask(questions = [defaultDecisionQuestion()], name = "AI Decisi
 }
 function decisionTaskIssues(task) {
 	task = limitDecisionTask(task);
-	if (task.executor.kind !== "decision") return [];
+	if (!isDecisionExecutor(task.executor)) return [];
 	const expected = decisionTask(task.executor.questions, task.name);
 	return [...decisionQuestionIssues(task.executor.questions), ...!dequal(task.inputs, expected.inputs) || !dequal(task.outputs, expected.outputs) ? [{
 		field: "ports",
@@ -9809,6 +9812,14 @@ function httpHeaderNameIssue(name, names) {
 	if (names.some((candidate) => candidate.toLowerCase() === name.toLowerCase())) return "duplicate";
 }
 //#endregion
+//#region src/http/common/hosts.ts
+/** Hosts of a Code `http` Capability: lowercase DNS names or IPv4 addresses; `*.example.com` matches subdomains only. */
+var httpHostPattern = /^(?:\*\.)?(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** Wildcards must name a registrable suffix, so `*.com` is rejected. */
+function isHttpHost(value) {
+	return httpHostPattern.test(value) && (!value.startsWith("*.") || value.slice(2).includes("."));
+}
+//#endregion
 //#region src/http/common/httpRequest.ts
 var parameterSchema = strictObject({
 	mode: _enum(["fields", "object"]).default("fields"),
@@ -10189,6 +10200,9 @@ function schema$1(doc, schemaValue) {
 		...Object.keys(defs).length ? { $defs: defs } : {}
 	};
 }
+function isOpenApiExecutor(executor) {
+	return executor.kind == "openapi";
+}
 function parameters(config) {
 	const doc = parseOpenApi(config.document);
 	const { item, op } = operation(doc, config.path, config.method);
@@ -10310,7 +10324,7 @@ function inlineSchema(value, index) {
 }
 /** The canvas validator and property panel share the same configuration contract. */
 function openApiFieldIssues(task) {
-	if (task.executor.kind != "openapi") return [];
+	if (!isOpenApiExecutor(task.executor)) return [];
 	const config = task.executor;
 	let field = "sourceUrl";
 	try {
@@ -10349,66 +10363,6 @@ function openApiIssues(task) {
 	return openApiFieldIssues(task).map((issue) => issue.message);
 }
 //#endregion
-//#region src/workflow/common/workflow.ts
-var portSchema = object$1({
-	handle: string().min(1),
-	jsonSchema: json$1(),
-	nullable: boolean(),
-	description: string().optional()
-});
-strictObject({
-	inputs: array(portSchema).nullable(),
-	outputs: array(portSchema).nullable()
-});
-object$1({
-	version: literal(1),
-	flowId: string().min(1),
-	name: string(),
-	revisionId: string().min(1),
-	publicationId: string().min(1),
-	inputs: array(portSchema),
-	outputs: array(portSchema).nullable()
-});
-object$1({
-	version: literal(1),
-	direction: _enum(["incoming", "outgoing"]),
-	total: int().nonnegative(),
-	nextOffset: int().nonnegative().optional(),
-	references: array(object$1({
-		flowId: string(),
-		name: string().nullable(),
-		available: boolean(),
-		draft: boolean(),
-		live: object$1({
-			publicationId: string(),
-			enabled: boolean()
-		}).nullable()
-	}))
-});
-/** Workflow declarations share discovery across authoring, admission and resource indexing. */
-function nodeWorkflowReferences(node) {
-	if (node.kind != "task") return [];
-	if ("moduleId" in node.task) return (node.task.capabilities ?? []).flatMap((item, index) => item.kind == "workflow" ? [{
-		target: item,
-		path: `task/capabilities/${index}`,
-		tool: item.name
-	}] : []);
-	if (node.task.executor.kind == "workflow") return [{
-		target: {
-			...node.task.executor,
-			inputs: node.task.inputs.filter((port) => "handle" in port),
-			outputs: node.task.outputs.filter((port) => "handle" in port)
-		},
-		path: "task/executor"
-	}];
-	if (node.task.executor.kind == "agent") return node.task.executor.tools.flatMap((item, index) => item.kind == "workflow" ? [{
-		target: item,
-		path: `task/executor/tools/${index}`,
-		tool: item.name
-	}] : []);
-	return [];
-}
-//#endregion
 //#region src/flow/common/inputValue.ts
 /** An explicit clear suppresses the default; absent mappings still inherit it. */
 function inputValue(mapping, fallback) {
@@ -10664,7 +10618,14 @@ var workflowCapabilitySchema = strictObject({
 	inputs: array(port),
 	outputs: array(port).nullable()
 });
-var capability = union([connectorCapabilitySchema, workflowCapabilitySchema]);
+var capability = union([
+	connectorCapabilitySchema,
+	workflowCapabilitySchema,
+	strictObject({
+		kind: literal("http"),
+		hosts: array(text.refine(isHttpHost, "Use a lowercase host name or IPv4 address, optionally prefixed by \"*.\" for subdomains.")).min(1).max(20).describe("Hosts Code may call with context.fetch. \"*.example.com\" matches subdomains only.")
+	})
+]);
 var inline = object$1({
 	...ports,
 	name: text,
@@ -11044,7 +11005,8 @@ object$1({
 		literal(8),
 		literal(9),
 		literal(10),
-		literal(11)
+		literal(11),
+		literal(12)
 	]),
 	document,
 	modules: record$1(text, module)
@@ -11399,13 +11361,15 @@ function nodeSystemOutputPorts(node) {
 	} } : {};
 }
 //#endregion
+//#region src/flow/common/model.ts
+function portsByHandle(ports) {
+	return Object.fromEntries(ports.flatMap((port) => "handle" in port ? [[port.handle, port]] : []));
+}
+//#endregion
 //#region src/flow/common/change.ts
 function validVariableName(value) {
 	return value.length <= 256 && /^[A-Za-z_][A-Za-z0-9_]*$/.test(value) && value.slice(0, 3).toUpperCase() != "OO_";
 }
-function portsByHandle(ports) {
-	return Object.fromEntries(ports.flatMap((port) => "handle" in port ? [[port.handle, port]] : []));
-}
 var workflowToolNamePattern = /^[A-Za-z][A-Za-z0-9_-]{0,63}$/;
 function workflowToolNameIssue(name, otherNames = []) {
 	if (!workflowToolNamePattern.test(name)) return "invalid";
@@ -11421,6 +11385,8 @@ function decodeTaskCapabilities(value) {
 		if (workflowToolNameIssue(item.name, names)) throw new TypeError("Workflow tool names must be unique provider-compatible names.");
 		names.add(item.name);
 	}
+	const http = parsed.filter((item) => item.kind == "http");
+	if (http.length > 1 || http.some((item) => new Set(item.hosts).size != item.hosts.length)) throw new TypeError("Code declares HTTP hosts once, without duplicates.");
 	let connectorIndex = 0;
 	return parsed.map((item) => item.kind == "connector" ? connectors[connectorIndex++] : item);
 }
@@ -11549,6 +11515,31 @@ function isTriggerNode(node) {
 	].includes(node.kind);
 }
 //#endregion
+//#region src/flow/common/workflowReferences.ts
+/** Workflow declarations share discovery across authoring, admission and resource indexing. */
+function nodeWorkflowReferences(node) {
+	if (node.kind != "task") return [];
+	if ("moduleId" in node.task) return (node.task.capabilities ?? []).flatMap((item, index) => item.kind == "workflow" ? [{
+		target: item,
+		path: `task/capabilities/${index}`,
+		tool: item.name
+	}] : []);
+	if (node.task.executor.kind == "workflow") return [{
+		target: {
+			...node.task.executor,
+			inputs: node.task.inputs.filter((port) => "handle" in port),
+			outputs: node.task.outputs.filter((port) => "handle" in port)
+		},
+		path: "task/executor"
+	}];
+	if (node.task.executor.kind == "agent") return node.task.executor.tools.flatMap((item, index) => item.kind == "workflow" ? [{
+		target: item,
+		path: `task/executor/tools/${index}`,
+		tool: item.name
+	}] : []);
+	return [];
+}
+//#endregion
 //#region src/flow/common/promptTemplate.ts
 var promptReferencePattern = /\{\{\s*([^{}\s]+)\s*\}\}/g;
 function renderPrompt(template, input) {
@@ -11643,7 +11634,7 @@ function clearNodeConnections(graph, connectionId) {
 				return [id, node];
 			}
 			const capabilities = node.task.capabilities?.map((capability) => {
-				if (capability.kind == "workflow") return capability;
+				if (capability.kind == "workflow" || capability.kind == "http") return capability;
 				if (!("mode" in capability)) {
 					if ("action" in capability) {
 						const { connectionId: selected, ...rest } = capability;
@@ -11888,22 +11879,25 @@ function normalizeTriggerOutputs(trigger, outputs) {
 	return matchesTriggerOutputs(trigger, normalized) ? normalized : void 0;
 }
 //#endregion
-//#region src/execution/common/engineContract.ts
-var currentEngineContract = "open-flow-engine/v8";
+//#region src/runtime/common/engineContract.ts
+/** v9 is a single contract: the Node compatibility builtins, `context.fetch`, and no `context.egress`. */
+var currentEngineContract = "open-flow-engine/v9";
+/** The published v8 Node compatibility contract, retained for existing Publications and Runs. */
 var nodejsEngineContract = "open-flow-engine/v8/nodejs-compat-v1";
-var currentContract = {
+var platformSource = (contract) => `export const engineContract = ${JSON.stringify(contract)}
+export function identity(value) { return value }
+`;
+var v8Contract = {
 	workflowTools: true,
 	httpRequests: true,
 	waitAutoContinue: true,
 	webhookResponses: true,
 	platformExports: /* @__PURE__ */ new Set(["engineContract", "identity"]),
 	platformModule: "open-flow:platform",
-	platformSource: `export const engineContract = ${JSON.stringify(currentEngineContract)}
-export function identity(value) { return value }
-`
+	platformSource: platformSource("open-flow-engine/v8")
 };
 var nodejsContract = {
-	...currentContract,
+	...v8Contract,
 	builtinModules: new Set([
 		"assert",
 		"assert/strict",
@@ -11930,28 +11924,30 @@ var nodejsContract = {
 		"util",
 		"zlib"
 	].flatMap((name) => [name, `node:${name}`])),
-	platformSource: `export const engineContract = ${JSON.stringify(nodejsEngineContract)}
-export function identity(value) { return value }
-`
+	platformSource: platformSource(nodejsEngineContract)
+};
+var currentContract = {
+	...nodejsContract,
+	codeFetch: true,
+	platformSource: platformSource(currentEngineContract)
 };
 function findEngineContract(contract) {
-	if (contract == "open-flow-engine/v8") return currentContract;
+	if (contract == "open-flow-engine/v9") return currentContract;
+	if (contract == "open-flow-engine/v8") return v8Contract;
 	if (contract == "open-flow-engine/v8/nodejs-compat-v1") return nodejsContract;
 	if (contract == "open-flow-engine/v7" || contract == "open-flow-engine/v7/nodejs-compat-v1") return {
-		...contract.endsWith("/nodejs-compat-v1") ? nodejsContract : currentContract,
+		...contract.endsWith("/nodejs-compat-v1") ? nodejsContract : v8Contract,
 		workflowTools: false,
 		httpRequests: false,
-		platformSource: `export const engineContract = ${JSON.stringify(contract)}\nexport function identity(value) { return value }\n`
+		platformSource: platformSource(contract)
 	};
 	if (contract == "open-flow-engine/v6" || contract == "open-flow-engine/v6/nodejs-compat-v1") return {
-		...contract == "open-flow-engine/v6" ? currentContract : nodejsContract,
+		...contract == "open-flow-engine/v6" ? v8Contract : nodejsContract,
 		workflowTools: false,
 		httpRequests: false,
 		waitAutoContinue: false,
 		webhookResponses: false,
-		platformSource: `export const engineContract = ${JSON.stringify(contract)}
-export function identity(value) { return value }
-`
+		platformSource: platformSource(contract)
 	};
 }
 //#endregion
@@ -25073,6 +25069,7 @@ async function prepareFlow(revision, engineContract, triggerId) {
 	const engine = findEngineContract(engineContract);
 	if (engine == null) return { kind: "engine-unsupported" };
 	if (!engine.httpRequests && Object.values(revision.document.graph.nodes).some((node) => node.kind == "task" && "executor" in node.task && node.task.executor.kind == "http-request")) return { kind: "engine-unsupported" };
+	if (!engine.codeFetch && Object.values(revision.document.graph.nodes).some((node) => node.kind == "task" && "moduleId" in node.task && node.task.capabilities?.some((item) => item.kind == "http"))) return { kind: "engine-unsupported" };
 	if (!engine.workflowTools && Object.values(revision.document.graph.nodes).some((node) => nodeWorkflowReferences(node).some((ref) => ref.tool != null))) return { kind: "engine-unsupported" };
 	if (triggerId != null) {
 		const trigger = revision.document.graph.nodes[triggerId];

package/dist/common/flow-workflowReferences.d.ts

@@ -0,0 +1,8 @@
+import type { GraphNode } from './flow-change.js';
+import type { WorkflowCapability } from './flow-model.js';
+/** Workflow declarations share discovery across authoring, admission and resource indexing. */
+export declare function nodeWorkflowReferences(node: GraphNode): readonly {
+    readonly target: Omit<WorkflowCapability, 'kind' | 'name'>;
+    readonly path: string;
+    readonly tool?: string;
+}[];

package/dist/common/flowInspection.d.ts

@@ -43,7 +43,7 @@ export declare function flowInspection(inspected: Awaited<ReturnType<typeof insp
             nodes: {
                 [k: string]: Record<string, unknown>;
             };
-            edges: readonly import('./flow-change.js').GraphEdge[];
+            edges: readonly import("./flow-change.js").GraphEdge[];
         };
         bindings: Readonly<Record<string, {
             readonly kind: 'variable';

package/dist/common/http-hosts.d.ts

@@ -0,0 +1,6 @@
+/** Hosts of a Code `http` Capability: lowercase DNS names or IPv4 addresses; `*.example.com` matches subdomains only. */
+export declare const httpHostPattern: RegExp;
+export declare const maxHttpHosts = 20;
+/** Wildcards must name a registrable suffix, so `*.com` is rejected. */
+export declare function isHttpHost(value: string): boolean;
+export declare function httpHostAllowed(hosts: readonly string[], hostname: string): boolean;