@oomol-lab/open-flow 0.1.0-beta.75 → 0.1.0-beta.76

package/dist/common/scheduler-checkpoint.d.ts

@@ -1,7 +1,7 @@
 import type { Graph, JsonValue } from './flow-change.js';
+import type { AgentCheckpoint } from './runtime-contract.js';
 import type { DependenciesCheckpoint } from './scheduler-dependencies.js';
 import type { ExecutableNode } from './scheduler-node-execution.js';
-import type { AgentCheckpoint } from './runtime-contract.js';
 export interface PendingWait {
     readonly jobId: string;
     readonly nodeId: string;

package/dist/common/scheduler-node-execution.d.ts

@@ -1,9 +1,9 @@
 import type { AgentConfig } from './flow-agent.js';
 import type { Graph, GraphNode, JsonValue, TriggerNode } from './flow-change.js';
 import type { WebhookResponseSnapshot } from './webhook-response.js';
+import type { AgentCheckpoint } from './runtime-contract.js';
 import type { FlowRunCheckpoint } from './scheduler-checkpoint.js';
 import type { Dependencies } from './scheduler-dependencies.js';
-import type { AgentCheckpoint } from './runtime-contract.js';
 import type { FlowRunOptions, SchedulerEvent, SchedulerFailure } from './scheduler.js';
 import * as Effect from 'effect/Effect';
 import { z } from 'zod';

package/dist/common/scheduler.d.ts

@@ -1,9 +1,9 @@
 import type { TaskCapability, JsonValue, WaitAction, WaitAutoContinue } from './flow-change.js';
 import type { PreparedFlow } from './flow-semantics.js';
 import type { WebhookResponseSnapshot } from './webhook-response.js';
+import type { AgentCheckpoint } from './runtime-contract.js';
 import type { PreviousNode } from '../index.js';
 import type { FlowRunCheckpoint } from './scheduler-checkpoint.js';
-import type { AgentCheckpoint } from './runtime-contract.js';
 import * as Effect from 'effect/Effect';
 export type { DependenciesCheckpoint } from './scheduler-dependencies.js';
 export type { FlowRunCheckpoint, PendingWait, PendingWorkflowCall } from './scheduler-checkpoint.js';

package/dist/common/scheduler.js

@@ -9383,6 +9383,9 @@ function schemaValidationErrors(value, schema) {
 }
 //#endregion
 //#region src/decision/common/decision.ts
+function isDecisionExecutor(executor) {
+	return executor.kind === "decision";
+}
 var decisionLimits = {
 	choice: 255,
 	score: 10
@@ -9405,7 +9408,7 @@ function limitDecisionQuestions(questions) {
 }
 /** Loading an oversized task also updates its previously generated output schemas. */
 function limitDecisionTask(task) {
-	if (task.executor.kind !== "decision") return task;
+	if (!isDecisionExecutor(task.executor)) return task;
 	const original = task.executor.questions;
 	const questions = limitDecisionQuestions(original);
 	if (questions === original) return task;
@@ -9472,6 +9475,14 @@ function answerSchema(question) {
 	};
 }
 //#endregion
+//#region src/http/common/hosts.ts
+/** Hosts of a Code `http` Capability: lowercase DNS names or IPv4 addresses; `*.example.com` matches subdomains only. */
+var httpHostPattern = /^(?:\*\.)?(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** Wildcards must name a registrable suffix, so `*.com` is rejected. */
+function isHttpHost(value) {
+	return httpHostPattern.test(value) && (!value.startsWith("*.") || value.slice(2).includes("."));
+}
+//#endregion
 //#region src/http/common/headers.ts
 /** Header names are case-insensitive; never silently combine duplicate business fields. */
 function httpHeaderNameIssue(name, names) {
@@ -9760,7 +9771,14 @@ var workflowCapabilitySchema = strictObject({
 	inputs: array(port),
 	outputs: array(port).nullable()
 });
-var capability = union([connectorCapabilitySchema, workflowCapabilitySchema]);
+var capability = union([
+	connectorCapabilitySchema,
+	workflowCapabilitySchema,
+	strictObject({
+		kind: literal("http"),
+		hosts: array(text.refine(isHttpHost, "Use a lowercase host name or IPv4 address, optionally prefixed by \"*.\" for subdomains.")).min(1).max(20).describe("Hosts Code may call with context.fetch. \"*.example.com\" matches subdomains only.")
+	})
+]);
 var inline = object({
 	...ports,
 	name: text,
@@ -10124,7 +10142,8 @@ object({
 		literal(8),
 		literal(9),
 		literal(10),
-		literal(11)
+		literal(11),
+		literal(12)
 	]),
 	document,
 	modules: record$1(text, module)
@@ -10541,10 +10560,12 @@ function nodeSystemOutputPorts(node) {
 	} } : {};
 }
 //#endregion
-//#region src/flow/common/change.ts
+//#region src/flow/common/model.ts
 function portsByHandle(ports) {
 	return Object.fromEntries(ports.flatMap((port) => "handle" in port ? [[port.handle, port]] : []));
 }
+//#endregion
+//#region src/flow/common/change.ts
 function isTriggerNode(node) {
 	return [
 		"manual",

package/dist/common/trigger-catalog.d.ts

@@ -1,13 +1,7 @@
 import type { TriggerKeySnapshot } from './flow-change.js';
 import type { UiLanguage } from './localization.js';
+import type { TriggerDisplay } from './trigger-localization.js';
 import type { TriggerKeySummary } from './control-api.js';
-export interface TriggerDisplay {
-    readonly configInputs: Readonly<Record<string, string>>;
-    readonly configInputLabels: Readonly<Record<string, string>>;
-    readonly displayName: string;
-    readonly description: string;
-    readonly outputs: Readonly<Record<string, string>>;
-}
 export interface TriggerCatalog {
     readonly version: 3;
     readonly locale: UiLanguage;

package/dist/common/trigger-config-options.d.ts

@@ -1,5 +1,5 @@
 import type { ConnectorProxy } from './connector-proxy.js';
-import type { JsonValue } from './flow-change.js';
+import type { JsonValue } from './flow-model.js';
 export interface TriggerConfigOption {
     readonly value: string;
     readonly label: string;

package/dist/common/trigger-config.d.ts

@@ -1,4 +1,4 @@
-import type { Group, InputPort, InputValues, JsonValue } from './flow-change.js';
+import type { Group, InputPort, InputValues, JsonValue } from './flow-model.js';
 /** Deployment-bound selections owned by the Trigger configuration contract. */
 export declare function clearTriggerExternalConfig(key: string, config: InputValues): InputValues;
 export declare function triggerConfigValue(input: InputPort, config: InputValues): JsonValue | undefined;

package/dist/common/trigger-contract.d.ts

@@ -1,4 +1,5 @@
-import type { JsonValue, Port, PortDefinition, TriggerNode } from './flow-change.js';
+import type { JsonValue, Port, PortDefinition } from './flow-model.js';
+import type { TriggerNode } from './trigger-model.js';
 import { webhookMethods, webhookSupportsBody } from './webhook-method.js';
 export { webhookMethods, webhookSupportsBody };
 export declare const errorOutputs: readonly Port[];

package/dist/common/trigger-localization.d.ts

@@ -1,6 +1,12 @@
-import type { TriggerDisplay } from './trigger-catalog.js';
-import type { TriggerKeySnapshot } from './flow-change.js';
 import type { UiLanguage } from './localization.js';
+import type { TriggerKeySnapshot } from './trigger-model.js';
+export interface TriggerDisplay {
+    readonly configInputs: Readonly<Record<string, string>>;
+    readonly configInputLabels: Readonly<Record<string, string>>;
+    readonly displayName: string;
+    readonly description: string;
+    readonly outputs: Readonly<Record<string, string>>;
+}
 type Translations = Readonly<Record<string, Partial<TriggerDisplay>>>;
 export declare function loadTriggerTranslations(locale: UiLanguage): Promise<Translations>;
 export declare function localizeTrigger(definition: TriggerKeySnapshot, locale: UiLanguage): Promise<TriggerDisplay>;

package/dist/common/trigger-model.d.ts

@@ -0,0 +1,101 @@
+import type { Group, InputPort, InputValues, Port } from './flow-model.js';
+import type { WebhookMethod } from './webhook-method.js';
+/** Trigger node shapes. The graph node union and its operations belong to flow/common/change.ts. */
+export type TriggerSchedule = {
+    readonly expression: string;
+    readonly timezone: string;
+    readonly type: 'cron';
+} | {
+    readonly type: 'every';
+    readonly unit: 'day' | 'hour' | 'minute' | 'month' | 'week';
+    readonly value: number;
+};
+interface TriggerKeySnapshotBase {
+    readonly configInputs: readonly (InputPort | Group)[];
+    readonly definitionVersion: number;
+    readonly description: string;
+    readonly displayName: string;
+    readonly key: string;
+    readonly name: string;
+    readonly outputs: readonly Port[];
+    readonly provider: string;
+}
+export type IntegrationEndpointMethod = 'DELETE' | 'GET' | 'HEAD' | 'PATCH' | 'POST' | 'PUT';
+export type IntegrationBodyFormat = 'form' | 'json' | 'multipart' | 'text';
+export interface IntegrationEndpointDeclaration {
+    readonly body: {
+        readonly allowArray: boolean;
+        readonly allowEmpty: boolean;
+        readonly formats: readonly IntegrationBodyFormat[];
+    };
+    readonly methods: readonly IntegrationEndpointMethod[];
+    readonly successStatus: number;
+}
+export type TriggerKeySnapshot = (TriggerKeySnapshotBase & {
+    readonly type: 'poll';
+}) | (TriggerKeySnapshotBase & {
+    readonly endpoint: IntegrationEndpointDeclaration;
+    readonly type: 'integration';
+});
+export interface WebhookBodyField extends InputPort {
+}
+export interface WebhookOptions {
+    readonly allowedOrigins?: readonly string[];
+    readonly responseBody?: {
+        readonly kind: 'workflow-outputs';
+        readonly output?: string;
+        readonly timeoutMs?: number;
+    } | {
+        readonly kind: 'webhook-response';
+        readonly nodeId?: string;
+        readonly timeoutMs?: number;
+    };
+    readonly responseData?: string;
+    readonly responseHeaders?: Readonly<Record<string, string>>;
+    readonly responseHeadersSource?: {
+        readonly kind: 'workflow-outputs';
+        readonly output?: string;
+    };
+    readonly responseHeaderOutputs?: Readonly<Record<string, string>>;
+    readonly responseStatusCode?: number;
+    readonly responseStatusCodeOutput?: string;
+}
+interface TriggerNodeBase {
+    readonly onError?: never;
+    readonly description?: string;
+    readonly icon?: string;
+    readonly name: string;
+}
+export type TriggerNode = (TriggerNodeBase & {
+    readonly kind: 'manual';
+}) | (TriggerNodeBase & {
+    readonly kind: 'start';
+    readonly inputDefs: readonly Port[];
+}) | (TriggerNodeBase & {
+    readonly kind: 'error';
+    readonly sourceFlowIds?: readonly string[];
+}) | (TriggerNodeBase & {
+    readonly bodyFields: readonly WebhookBodyField[];
+    readonly kind: 'webhook';
+    readonly method: WebhookMethod;
+    readonly options?: WebhookOptions;
+}) | (TriggerNodeBase & {
+    readonly cronTimes: readonly TriggerSchedule[];
+    readonly kind: 'cron';
+}) | (TriggerNodeBase & {
+    readonly connectionId?: string;
+    readonly config: InputValues;
+    readonly definition: TriggerKeySnapshot & {
+        readonly type: 'poll';
+    };
+    readonly kind: 'poll';
+    readonly pollTimes: readonly TriggerSchedule[];
+}) | (TriggerNodeBase & {
+    readonly connectionId?: string;
+    readonly config: InputValues;
+    readonly definition: TriggerKeySnapshot & {
+        readonly type: 'integration';
+    };
+    readonly kind: 'integration';
+});
+export {};

package/dist/common/webhook-response.d.ts

@@ -1,4 +1,4 @@
-import type { InputPort, JsonValue, Port, PortDefinition } from './flow-change.js';
+import type { InputPort, JsonValue, Port, PortDefinition } from './flow-model.js';
 export declare const webhookResponseTimeout: {
     readonly defaultMs: 30000;
     readonly minMs: 1000;

package/dist/common/webhook-trigger.d.ts

@@ -1,4 +1,6 @@
-import type { JsonValue, WebhookBodyField, WebhookMethod, WebhookOptions } from './flow-change.js';
+import type { JsonValue } from './flow-model.js';
+import type { WebhookMethod } from './webhook-method.js';
+import type { WebhookBodyField, WebhookOptions } from './trigger-model.js';
 export { webhookSupportsBody } from './trigger-contract.js';
 export { webhookResponseAllowsBody, webhookResponseTimeout } from './webhook-response.js';
 export type { WebhookResponseSnapshot } from './webhook-response.js';

package/dist/common/workflow.d.ts

@@ -1,10 +1,7 @@
-import type { TaskNode, ManagedTaskDefinition, Port, JsonValue, RevisionContent, GraphNode, WorkflowCapability, AgentWorkflowTool } from './flow-change.js';
+import type { TaskNode, ManagedTaskDefinition, Port, JsonValue, RevisionContent, WorkflowCapability, AgentWorkflowTool } from './flow-change.js';
 import { z } from 'zod';
-export interface WorkflowExecutor {
-    readonly kind: 'workflow';
-    readonly flowId: string;
-    readonly revisionId: string;
-}
+export type { WorkflowExecutor } from './flow-model.js';
+export { nodeWorkflowReferences } from './flow-workflowReferences.js';
 export declare const publishedWorkflowInterfaceSchema: z.ZodObject<{
     inputs: z.ZodNullable<z.ZodArray<z.ZodObject<{
         handle: z.ZodString;
@@ -91,12 +88,6 @@ export declare const workflowReferencesSchema: z.ZodObject<{
     }, z.core.$strip>>;
 }, z.core.$strip>;
 export type WorkflowReferences = z.infer<typeof workflowReferencesSchema>;
-/** Workflow declarations share discovery across authoring, admission and resource indexing. */
-export declare function nodeWorkflowReferences(node: GraphNode): readonly {
-    readonly target: Omit<WorkflowCapability, 'kind' | 'name'>;
-    readonly path: string;
-    readonly tool?: string;
-}[];
 export declare function workflowCapability(name: string, target: WorkflowContract | WorkflowCandidate): WorkflowCapability;
 export declare function workflowAgentTool(id: string, name: string, target: WorkflowContract | WorkflowCandidate, previous?: AgentWorkflowTool): AgentWorkflowTool;
 export declare function workflowInterfaceIssues(target: {

package/dist/common/workflow.js

@@ -9531,6 +9531,31 @@ function comparePorts(source, target) {
 	} : result;
 }
 //#endregion
+//#region src/flow/common/workflowReferences.ts
+/** Workflow declarations share discovery across authoring, admission and resource indexing. */
+function nodeWorkflowReferences(node) {
+	if (node.kind != "task") return [];
+	if ("moduleId" in node.task) return (node.task.capabilities ?? []).flatMap((item, index) => item.kind == "workflow" ? [{
+		target: item,
+		path: `task/capabilities/${index}`,
+		tool: item.name
+	}] : []);
+	if (node.task.executor.kind == "workflow") return [{
+		target: {
+			...node.task.executor,
+			inputs: node.task.inputs.filter((port) => "handle" in port),
+			outputs: node.task.outputs.filter((port) => "handle" in port)
+		},
+		path: "task/executor"
+	}];
+	if (node.task.executor.kind == "agent") return node.task.executor.tools.flatMap((item, index) => item.kind == "workflow" ? [{
+		target: item,
+		path: `task/executor/tools/${index}`,
+		tool: item.name
+	}] : []);
+	return [];
+}
+//#endregion
 //#region src/workflow/common/workflow.ts
 var portSchema = object({
 	handle: string().min(1),
@@ -9686,29 +9711,6 @@ var workflowReferencesSchema = object({
 		}).nullable()
 	}))
 });
-/** Workflow declarations share discovery across authoring, admission and resource indexing. */
-function nodeWorkflowReferences(node) {
-	if (node.kind != "task") return [];
-	if ("moduleId" in node.task) return (node.task.capabilities ?? []).flatMap((item, index) => item.kind == "workflow" ? [{
-		target: item,
-		path: `task/capabilities/${index}`,
-		tool: item.name
-	}] : []);
-	if (node.task.executor.kind == "workflow") return [{
-		target: {
-			...node.task.executor,
-			inputs: node.task.inputs.filter((port) => "handle" in port),
-			outputs: node.task.outputs.filter((port) => "handle" in port)
-		},
-		path: "task/executor"
-	}];
-	if (node.task.executor.kind == "agent") return node.task.executor.tools.flatMap((item, index) => item.kind == "workflow" ? [{
-		target: item,
-		path: `task/executor/tools/${index}`,
-		tool: item.name
-	}] : []);
-	return [];
-}
 function workflowCapability(name, target) {
 	return {
 		kind: "workflow",

package/dist/index.d.ts

@@ -20,18 +20,50 @@ export interface ArtifactRef {
     readonly kind: 'artifact';
     readonly id: string;
     readonly name: string;
-    readonly mediaType: string | undefined;
+    readonly mediaType?: string;
     readonly size: number;
     readonly digest: string;
 }
 export interface ArtifactPutOptions {
     readonly name: string;
-    readonly mediaType?: string | undefined;
+    readonly mediaType?: string;
 }
-export type ArtifactData = Uint8Array | Blob | ReadableStream<Uint8Array>;
+/** Strings are stored as UTF-8. */
+export type ArtifactData = string | Uint8Array;
+/** Artifacts belong to the current Run; an ArtifactRef is JSON and can be passed to downstream nodes. */
 export interface ArtifactCapability {
     put(data: ArtifactData, options: ArtifactPutOptions): Promise<ArtifactRef>;
-    open(ref: ArtifactRef): Promise<ReadableStream<Uint8Array>>;
+    open(ref: ArtifactRef): Promise<Uint8Array>;
+}
+export interface TaskFetchInit {
+    /** GET, HEAD, POST, PUT, PATCH, DELETE or OPTIONS. */
+    readonly method?: string;
+    readonly headers?: Readonly<Record<string, string>> | Iterable<readonly [string, string]>;
+    /** At most 1 MiB; strings are sent as UTF-8 text/plain unless a content-type header is supplied. */
+    readonly body?: string | Uint8Array | ArrayBuffer;
+    readonly signal?: AbortSignal;
+}
+export interface TaskFetchHeaders extends Iterable<[string, string]> {
+    get(name: string): string | null;
+    has(name: string): boolean;
+    entries(): IterableIterator<[string, string]>;
+    keys(): IterableIterator<string>;
+    values(): IterableIterator<string>;
+    forEach(callback: (value: string, name: string) => void): void;
+}
+/** A read-only subset of the Fetch Response; the body is buffered, at most 1 MiB, and readable once. */
+export interface TaskFetchResponse {
+    readonly status: number;
+    readonly statusText: string;
+    readonly ok: boolean;
+    readonly redirected: false;
+    readonly url: string;
+    readonly headers: TaskFetchHeaders;
+    readonly bodyUsed: boolean;
+    bytes(): Promise<Uint8Array>;
+    arrayBuffer(): Promise<ArrayBuffer>;
+    text(): Promise<string>;
+    json(): Promise<unknown>;
 }
 export interface MediaPreviewPayload {
     readonly type: 'video' | 'audio' | 'markdown' | 'iframe' | 'html';
@@ -60,12 +92,6 @@ export interface CsvPreviewPayload {
 }
 export type PreviewPayload = MediaPreviewPayload | TextPreviewPayload | ImagePreviewPayload | TablePreviewPayload | CsvPreviewPayload;
 export type PreviewType = PreviewPayload['type'];
-export interface TaskLogger {
-    debug(message: string, data?: unknown): void;
-    info(message: string, data?: unknown): void;
-    warn(message: string, data?: unknown): void;
-    error(message: string, data?: unknown): void;
-}
 export interface TaskContext<Actions extends object = Record<string, never>, Workflows extends object = {
     call: (name: never, input?: never) => Promise<never>;
 }> {
@@ -77,12 +103,13 @@ export interface TaskContext<Actions extends object = Record<string, never>, Wor
     readonly runId: string;
     readonly blockId: string;
     readonly artifact: ArtifactCapability;
-    readonly fetch: typeof fetch;
-    readonly logger: TaskLogger;
     /** Reads the selected direct predecessors, sorted by node ID; empty for a graph root. */
     getPrevious(): Promise<readonly PreviousNode[]>;
-    preview(payload: PreviewPayload, id?: string): Promise<void>;
-    reportProgress(progress: number): Promise<void>;
+    /**
+     * Calls an HTTP(S) URL whose host the node declares in its `http` Capability. Redirects are returned, not followed,
+     * and no platform credentials are added. Network failures reject with a TypeError.
+     */
+    fetch(input: string | URL, init?: TaskFetchInit): Promise<TaskFetchResponse>;
 }
 export type TaskResult<Outputs extends object> = keyof Outputs extends never ? Outputs | void : Outputs;
 export interface Task<Inputs extends object = Record<string, unknown>, Outputs extends object = Record<string, unknown>, Actions extends object = Record<string, never>, Workflows extends object = TaskContext['workflows']> {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oomol-lab/open-flow",
-  "version": "0.1.0-beta.75",
+  "version": "0.1.0-beta.76",
   "description": "TypeScript contracts and Browser runtime for Open Flow.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {
@@ -113,6 +113,10 @@
       "types": "./dist/common/runtime-contract.d.ts",
       "import": "./dist/common/runtime-contract.js"
     },
+    "./runtime-nodejs-compat": {
+      "types": "./dist/common/runtime-nodejs-compat.d.ts",
+      "import": "./dist/common/runtime-nodejs-compat.js"
+    },
     "./scheduler": {
       "types": "./dist/common/scheduler.d.ts",
       "import": "./dist/common/scheduler.js"

package/src/base/common/json.ts

@@ -1,4 +1,4 @@
-export type JsonValue = null | boolean | number | string | readonly JsonValue[] | JsonObject
+import type { JsonValue } from '../../types/index.ts'
 
 export type JsonObject = { readonly [key: string]: JsonValue }
 

package/src/connector/common/proxy.ts

@@ -1,5 +1,5 @@
 import type { SourceOperation, SourceReferenceOperation } from '../../event-source/common/definition.ts'
-import type { JsonValue } from '../../flow/common/change.ts'
+import type { JsonValue } from '../../types/index.ts'
 export type TriggerOperationRequest =
   | { readonly operation: 'sourceReference'; readonly request: SourceReferenceOperation }
   | { readonly operation: 'source'; readonly request: SourceOperation }

package/src/control/common/api.ts

@@ -1,6 +1,6 @@
 import type { CanvasCommand } from '../../canvas/common/commands.ts'
 
-import { currentEngineContract } from '../../execution/common/engineContract.ts'
+import { currentEngineContract } from '../../runtime/common/engineContract.ts'
 import { workflowContractSchema, workflowReferencesSchema } from '../../workflow/common/workflow.ts'
 export type { CanvasCommand, CanvasCommandSubscriber } from '../../canvas/common/commands.ts'
 import type { LiveDetails } from './liveDetails.ts'
@@ -9,12 +9,12 @@ import { decodeLiveDetails } from './liveDetails.ts'
 export { liveEntries } from './liveDetails.ts'
 export { flowInputDefinitions } from './authoringFields.ts'
 export type { LiveDetails, LiveEntry } from './liveDetails.ts'
+import type { ProviderIconAppearance } from '../../connector/common/providerIconSprite.ts'
 import type { AuthoringRead, AuthoringSearch, AuthoringRequest, AuthoringType } from './authoringSchema.ts'
-import type { ProviderIconAppearance } from './providerIconSprite.ts'
 
 import { authoringReadResponse, authoringSearchResponse, authoringEditResponse, authoringCheckResponse } from './authoringSchema.ts'
-export { providerIconAppearance } from './providerIconSprite.ts'
-export type { ProviderIconAppearance, ProviderIconSprite, ProviderIconSpriteCatalog } from './providerIconSprite.ts'
+export { providerIconAppearance } from '../../connector/common/providerIconSprite.ts'
+export type { ProviderIconAppearance, ProviderIconSprite, ProviderIconSpriteCatalog } from '../../connector/common/providerIconSprite.ts'
 export { connectorAccess as decodeConnectorAccess, connectorAccessSnapshot as decodeConnectorAccessSnapshot } from './connectorDecoders.ts'
 import type { ProviderAccessIdentity, ProviderAccessReference } from './providerAccess.ts'
 export {
@@ -35,7 +35,8 @@ export { decodeEventSource, decodeEventSources, type CreateEventSource, type Upd
 import type { TriggerCatalogCache } from './triggerCatalog.ts'
 
 import { decodeTriggerCatalog } from './triggerCatalog.ts'
-export { decodeTriggerCatalog, searchTriggerKeys, type TriggerCatalog, type TriggerCatalogCache, type TriggerDisplay } from './triggerCatalog.ts'
+export { decodeTriggerCatalog, searchTriggerKeys, type TriggerCatalog, type TriggerCatalogCache } from './triggerCatalog.ts'
+export type { TriggerDisplay } from '../../trigger/providers/localization.ts'
 import type { TriggerConfigOption } from '../../trigger/common/configOptions.ts'
 export type { TriggerConfigOption } from '../../trigger/common/configOptions.ts'
 import type { ResultQuery } from './results.ts'

package/src/control/common/authoringSchema.ts

@@ -6,10 +6,12 @@ import {
   connectorAgentToolSchema,
   workflowAgentToolSchema,
   connectorCapabilitySchema,
+  httpCapabilitySchema,
   authoringDefinitionSchemas as definitions,
 } from '../../flow/common/changeSchema.ts'
 import { retryConfigurationSchema, retryNodeTypes } from '../../flow/common/retry.ts'
 import { httpRequestConfigSchema } from '../../http/common/httpRequest.ts'
+import { currentEngineContract, findEngineContract } from '../../runtime/common/engineContract.ts'
 import { authoringLlmConfiguration } from './authoringLlm.ts'
 import { authoringOpenApiSchema } from './authoringOpenApi.ts'
 
@@ -71,7 +73,9 @@ const agentTool = z.union([
   workflowAgentToolSchema.omit({ id: true, inputs: true, outputs: true, revisionId: true }).extend({ inputs: toolSources }).strict(),
   connectorAgentToolSchema.omit({ id: true, inputs: true }).extend({ inputs: toolSources }).strict(),
 ])
-const authoringCapabilities = z.array(z.union([connectorCapabilitySchema, z.strictObject({ kind: z.literal('workflow'), name: id, flowId: id })]))
+const authoringCapabilities = z.array(
+  z.union([connectorCapabilitySchema, z.strictObject({ kind: z.literal('workflow'), name: id, flowId: id }), httpCapabilitySchema]),
+)
 const notification = z.strictObject({
   ...definitions.connector.shape,
   messageHandle: id,
@@ -259,6 +263,9 @@ const requestContracts = {
   },
 }
 
+const codeBuiltins = [...findEngineContract(currentEngineContract)!.builtinModules!].filter((name) => !name.startsWith('node:'))
+const codeGuidance = `Code is an ES module whose default export receives (inputs, context) and returns the business outputs. It may import the Node builtins ${codeBuiltins.join(', ')}, with or without the node: prefix; fs is a fresh in-memory filesystem containing /tmp per execution. require, dynamic import, packages and the http/net builtins are unavailable. To call HTTP APIs, declare their hosts in config.capabilities as {kind: "http", hosts: ["api.example.com", "*.example.org"]} and use context.fetch(url, {method, headers, body}); it returns status, ok, headers.get(), text(), json() and bytes(), does not follow redirects, adds no credentials, and limits bodies to 1 MiB. Prefer an HTTP Request node for a single call without transformation and Connector Actions for services with accounts. context provides inputs, signal, getPrevious(), fetch, actions, workflows, artifact, flowId, runId and blockId. Select workflows through config.capabilities: [{kind: "workflow", flowId, name}]. Call context.workflows.call(name, input) and await its business output. The platform derives input/output types. Refresh a selected workflow tool with node.refresh and tool: its name. Calls obey node and Run time limits.`
+
 /** Transport-independent discovery of the same requests the service validates. */
 export function authoringRequestContract(name: string) {
   if (!Object.hasOwn(requestContracts, name)) return undefined
@@ -308,7 +315,7 @@ export function authoringSchema(kind?: AuthoringType) {
                               : kind == 'agent'
                                 ? 'Tools accept Connector Actions or {kind: "workflow", flowId, name, description, approval, inputs}. Workflow parameter sources use model, input or value. The platform derives the interface. Refresh a workflow tool with node.refresh and tool: its name.'
                                 : kind == 'code'
-                                  ? 'Select workflows through config.capabilities: [{kind: "workflow", flowId, name}]. Call context.workflows.call(name, input) and await its business output. The platform derives input/output types. Refresh a selected workflow tool with node.refresh and tool: its name. Calls obey node and Run time limits.'
+                                  ? codeGuidance
                                   : 'Supply business configuration and input data. Fixed definitions are assembled by the tool. Existing constraints and defaults are preserved on partial updates.',
         example: {
           op: 'node.add',

package/src/control/common/authoringTools.ts

@@ -17,7 +17,7 @@ export type AuthoringCapability = Exclude<TaskCapability, WorkflowCapability> |
 export type WorkflowLookup = (flowId: string) => Promise<WorkflowContract | WorkflowCandidate>
 
 interface ToolIdentity {
-  readonly kind?: 'connector' | 'workflow'
+  readonly kind?: string
   readonly name?: string
   readonly flowId?: string
 }

package/src/control/common/conformance.ts

@@ -4,8 +4,8 @@ import type { ConnectorConnection, CreateEventSource, ResultInfo, PollTriggerTes
 import type { ProviderAccessIdentity } from './providerAccess.ts'
 
 import { dequal } from 'dequal/lite'
-import { currentEngineContract as engineContract } from '../../execution/common/engineContract.ts'
 import { upgradeRevisionContent } from '../../flow/common/change.ts'
+import { currentEngineContract as engineContract } from '../../runtime/common/engineContract.ts'
 import { ControlClient, decodeRunEvent } from './api.ts'
 import { allConnectorConnectionsQuery } from './connectorQueries.ts'
 

package/src/control/common/connectorDecoders.ts

@@ -14,10 +14,10 @@ import type {
   ProviderAccessBindingCandidate,
 } from './api.ts'
 
+import { providerIconAppearance } from '../../connector/common/providerIconSprite.ts'
 import { exact, requiredFields, integer, invalidResponse, jsonValue, record, string } from './decoding.ts'
 import { ApiError } from './errors.ts'
 import { parseProviderAccessSource } from './providerAccess.ts'
-import { providerIconAppearance } from './providerIconSprite.ts'
 
 export function leinaBots(value: unknown): readonly LeinaBot[] {
   const source = record(value)