@oomol-lab/open-flow 0.1.0-beta.75 → 0.1.0-beta.77

package/dist/common/control-api-conformance.js

@@ -22,44 +22,6 @@ function dequal(foo, bar) {
 	return foo !== foo && bar !== bar;
 }
 //#endregion
-//#region src/execution/common/engineContract.ts
-var currentEngineContract = "open-flow-engine/v8";
-`${JSON.stringify(currentEngineContract)}`, new Set([
-	"assert",
-	"assert/strict",
-	"buffer",
-	"console",
-	"constants",
-	"crypto",
-	"events",
-	"fs",
-	"fs/promises",
-	"os",
-	"path",
-	"path/posix",
-	"process",
-	"punycode",
-	"querystring",
-	"stream",
-	"stream/promises",
-	"stream/web",
-	"string_decoder",
-	"timers",
-	"timers/promises",
-	"url",
-	"util",
-	"zlib"
-].flatMap((name) => [name, `node:${name}`])), `${JSON.stringify("open-flow-engine/v8/nodejs-compat-v1")}`;
-//#endregion
-//#region src/http/common/authBindings.ts
-/** Never allow credentials to enter a Revision as literal node inputs. */
-function assertHttpAuthBindings(document) {
-	for (const node of Object.values(document.graph.nodes)) {
-		if (node.kind != "task" || !("executor" in node.task) || !["openapi", "http-request"].includes(node.task.executor.kind)) continue;
-		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
-	}
-}
-//#endregion
 //#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/util.js
 function getEnumValues(entries) {
 	const numericValues = Object.values(entries).filter((v) => typeof v === "number");
@@ -8514,6 +8476,9 @@ function isSchemaKeyword(value) {
 }
 //#endregion
 //#region src/decision/common/decision.ts
+function isDecisionExecutor(executor) {
+	return executor.kind === "decision";
+}
 var decisionLimits = {
 	choice: 255,
 	score: 10
@@ -8536,7 +8501,7 @@ function limitDecisionQuestions(questions) {
 }
 /** Loading an oversized task also updates its previously generated output schemas. */
 function limitDecisionTask(task) {
-	if (task.executor.kind !== "decision") return task;
+	if (!isDecisionExecutor(task.executor)) return task;
 	const original = task.executor.questions;
 	const questions = limitDecisionQuestions(original);
 	if (questions === original) return task;
@@ -8603,6 +8568,20 @@ function answerSchema(question) {
 	};
 }
 //#endregion
+//#region src/http/common/authBindings.ts
+/** Never allow credentials to enter a Revision as literal inputs of an OpenAPI or HTTP request node. */
+function assertHttpAuthBindings(inputs) {
+	for (const [handle, mapping] of Object.entries(inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
+}
+//#endregion
+//#region src/http/common/hosts.ts
+/** Hosts of a Code `http` Capability: lowercase DNS names or IPv4 addresses; `*.example.com` matches subdomains only. */
+var httpHostPattern = /^(?:\*\.)?(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** Wildcards must name a registrable suffix, so `*.com` is rejected. */
+function isHttpHost(value) {
+	return httpHostPattern.test(value) && (!value.startsWith("*.") || value.slice(2).includes("."));
+}
+//#endregion
 //#region src/http/common/httpRequest.ts
 var parameterSchema = strictObject({
 	mode: _enum(["fields", "object"]).default("fields"),
@@ -8649,6 +8628,52 @@ var httpRequestConfigSchema = strictObject({
 	statusPolicy: _enum(["success", "all"]).default("success")
 });
 var httpRequestExecutorSchema = httpRequestConfigSchema.extend({ kind: literal("http-request") });
+strictObject({
+	scope: _enum(["draft", "live"]),
+	values: boolean().optional()
+});
+strictObject({
+	scope: _enum(["draft", "live"]),
+	key: string$1().min(1).refine((key) => new TextEncoder().encode(key).length <= 256).optional()
+});
+strictObject({
+	scope: _enum(["draft", "live"]),
+	space: string$1().regex(/^(flow|node:.+)$/)
+});
+var dedupeConfigSchema = strictObject({
+	field: string$1().default(""),
+	mode: _enum(["new", "increasing"]).default("new"),
+	space: _enum(["node", "flow"]).default("node")
+});
+var dedupeExecutorSchema = dedupeConfigSchema.extend({ kind: literal("dedupe") });
+var flowStateViewSchema = object({
+	version: literal(1),
+	scope: _enum(["draft", "live"]),
+	limits: object({
+		maxValueBytes: number().positive(),
+		maxValues: number().int().positive(),
+		maxSpaces: number().int().positive(),
+		maxIdentities: number().positive(),
+		maxRunWrites: number().positive()
+	}),
+	values: array(object({
+		key: string$1(),
+		size: number().nonnegative(),
+		updatedAt: number(),
+		value: json$4().optional()
+	})),
+	spaces: array(object({
+		space: string$1(),
+		mode: _enum(["new", "increasing"]),
+		count: number().nonnegative(),
+		watermark: union([
+			string$1(),
+			number(),
+			_null()
+		]),
+		updatedAt: number()
+	}))
+});
 function checkJsonDepth(value, depth = 0) {
 	if (depth > 64) throw new TypeError("Value exceeds the maximum JSON depth.");
 	if (value != null && typeof value == "object") for (const child of Object.values(value)) checkJsonDepth(child, depth + 1);
@@ -8818,7 +8843,15 @@ var workflowCapabilitySchema = strictObject({
 	inputs: array(port$1),
 	outputs: array(port$1).nullable()
 });
-var capability = union([connectorCapabilitySchema, workflowCapabilitySchema]);
+var httpCapabilitySchema = strictObject({
+	kind: literal("http"),
+	hosts: array(text.refine(isHttpHost, "Use a lowercase host name or IPv4 address, optionally prefixed by \"*.\" for subdomains.")).min(1).max(20).describe("Hosts Code may call with context.fetch. \"*.example.com\" matches subdomains only.")
+});
+var capability = union([
+	connectorCapabilitySchema,
+	workflowCapabilitySchema,
+	httpCapabilitySchema
+]);
 var inline = object({
 	...ports$1,
 	name: text,
@@ -8929,7 +8962,8 @@ var managedFields = object({
 			flowId: text,
 			revisionId: text
 		}),
-		httpRequestExecutorSchema
+		httpRequestExecutorSchema,
+		dedupeExecutorSchema
 	])
 });
 var managed = managedFields.transform(limitDecisionTask);
@@ -9198,7 +9232,9 @@ var revision = object({
 		literal(8),
 		literal(9),
 		literal(10),
-		literal(11)
+		literal(11),
+		literal(12),
+		literal(13)
 	]),
 	document,
 	modules: record$3(text, module)
@@ -9229,7 +9265,7 @@ function decodeRevisionContent(value) {
 	checkJsonDepth(value);
 	const content = revision.parse(value);
 	checkModelVersion(content);
-	assertHttpAuthBindings(content.document);
+	assertDocumentHttpAuthBindings(content.document);
 	return content;
 }
 var shapes = {
@@ -9399,6 +9435,8 @@ array(union([...new Map(Object.entries(shapes).map(([kind, shape]) => [kind, sha
 	...shape
 })])).values()])).min(1);
 function checkModelVersion(content) {
+	if (content.modelVersion < 13 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind === "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind === "dedupe")) throw new Error("Deduplication requires Flow model v13.");
+	if (content.modelVersion < 12 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "moduleId" in candidateNode.task && candidateNode.task.capabilities?.some((item) => item.kind == "http"))) throw new TypeError("Code HTTP access requires Flow model version 12.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind == "http-request")) throw new TypeError("HTTP Request requires Flow model version 11.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && ("moduleId" in candidateNode.task ? candidateNode.task.capabilities?.some((item) => item.kind == "workflow") : candidateNode.task.executor.kind == "agent" && candidateNode.task.executor.tools.some((item) => item.kind == "workflow")))) throw new TypeError("Workflow tools require Flow model version 11.");
 	if (content.modelVersion < 10 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "webhook" && (candidateNode.options?.responseBody != null || candidateNode.options?.responseStatusCodeOutput != null || candidateNode.options?.responseHeadersSource != null || candidateNode.options?.responseHeaderOutputs != null))) throw new TypeError("Dynamic Webhook responses require Flow model version 10.");
@@ -9414,6 +9452,9 @@ function checkModelVersion(content) {
 	if (content.modelVersion < 6 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task)) throw new TypeError("Node-owned managed Tasks require Flow model version 6.");
 	if (content.modelVersion < 5 && Object.values(content.document.graph.nodes).some((itemNode) => itemNode.kind == "error")) throw new TypeError("Error workflows require Flow model version 5.");
 }
+function assertDocumentHttpAuthBindings(content) {
+	for (const graphNode of Object.values(content.graph.nodes)) if (graphNode.kind == "task" && "executor" in graphNode.task && ["openapi", "http-request"].includes(graphNode.task.executor.kind)) assertHttpAuthBindings(graphNode.inputs);
+}
 //#endregion
 //#region src/flow/common/change.ts
 /** Lossless upgrade of readable content. Historical content and its encoding stay unchanged. */
@@ -9424,10 +9465,10 @@ function upgradeRevisionContent(content) {
 function upgradeDecodedRevisionContent(content) {
 	const graph = content.document.graph;
 	const hasManual = Object.values(graph.nodes).some((node) => node.kind == "manual");
-	if (!hasManual && content.modelVersion == 11) return content;
+	if (!hasManual && content.modelVersion == 13) return content;
 	return {
 		...content,
-		modelVersion: 11,
+		modelVersion: 13,
 		document: {
 			...content.document,
 			graph: hasManual ? {
@@ -9445,6 +9486,84 @@ function upgradeManualTrigger(node) {
 	} : node;
 }
 //#endregion
+//#region src/runtime/common/engineContract.ts
+/** v10 adds persistent Flow State to the published v9 Node compatibility and fetch contract. */
+var currentEngineContract = "open-flow-engine/v10";
+/** The published v8 Node compatibility contract, retained for existing Publications and Runs. */
+var nodejsEngineContract = "open-flow-engine/v8/nodejs-compat-v1";
+var platformSource = (contract) => `export const engineContract = ${JSON.stringify(contract)}
+export function identity(value) { return value }
+`;
+var v8Contract = {
+	workflowTools: true,
+	httpRequests: true,
+	waitAutoContinue: true,
+	webhookResponses: true,
+	platformExports: /* @__PURE__ */ new Set(["engineContract", "identity"]),
+	platformModule: "open-flow:platform",
+	platformSource: platformSource("open-flow-engine/v8")
+};
+var nodejsContract = {
+	...v8Contract,
+	builtinModules: new Set([
+		"assert",
+		"assert/strict",
+		"buffer",
+		"console",
+		"constants",
+		"crypto",
+		"events",
+		"fs",
+		"fs/promises",
+		"os",
+		"path",
+		"path/posix",
+		"process",
+		"punycode",
+		"querystring",
+		"stream",
+		"stream/promises",
+		"stream/web",
+		"string_decoder",
+		"timers",
+		"timers/promises",
+		"url",
+		"util",
+		"zlib"
+	].flatMap((name) => [name, `node:${name}`])),
+	platformSource: platformSource(nodejsEngineContract)
+};
+var v9Contract = {
+	...nodejsContract,
+	codeFetch: true,
+	platformSource: platformSource("open-flow-engine/v9")
+};
+var currentContract = {
+	...v9Contract,
+	flowState: true,
+	platformSource: platformSource(currentEngineContract)
+};
+function findEngineContract(contract) {
+	if (contract == "open-flow-engine/v10") return currentContract;
+	if (contract == "open-flow-engine/v9") return v9Contract;
+	if (contract == "open-flow-engine/v8") return v8Contract;
+	if (contract == "open-flow-engine/v8/nodejs-compat-v1") return nodejsContract;
+	if (contract == "open-flow-engine/v7" || contract == "open-flow-engine/v7/nodejs-compat-v1") return {
+		...contract.endsWith("/nodejs-compat-v1") ? nodejsContract : v8Contract,
+		workflowTools: false,
+		httpRequests: false,
+		platformSource: platformSource(contract)
+	};
+	if (contract == "open-flow-engine/v6" || contract == "open-flow-engine/v6/nodejs-compat-v1") return {
+		...contract == "open-flow-engine/v6" ? v8Contract : nodejsContract,
+		workflowTools: false,
+		httpRequests: false,
+		waitAutoContinue: false,
+		webhookResponses: false,
+		platformSource: platformSource(contract)
+	};
+}
+//#endregion
 //#region src/workflow/common/workflow.ts
 var portSchema = object({
 	handle: string$1().min(1),
@@ -9510,9 +9629,9 @@ var authoringOpenApiSchema = strictObject({
 });
 //#endregion
 //#region src/control/common/authoringSchema.ts
-var id$1 = string$1().min(1);
+var id$2 = string$1().min(1);
 var json$2 = json$4();
-var patch = record$3(id$1, json$2);
+var patch = record$3(id$2, json$2);
 var type = _enum([
 	"start",
 	"outputs",
@@ -9530,16 +9649,17 @@ var type = _enum([
 	"decision",
 	"openapi",
 	"http-request",
+	"dedupe",
 	"condition",
 	"value",
 	"wait",
 	"approval"
 ]);
-var referenceSchema = id$1.describe("An existing node reference returned by read/search, or $alias for a preceding node.add in this edit batch. For node.add.as \"step\", reference \"$step\", never bare \"step\". Aliases are local to one batch.");
+var referenceSchema = id$2.describe("An existing node reference returned by read/search, or $alias for a preceding node.add in this edit batch. For node.add.as \"step\", reference \"$step\", never bare \"step\". Aliases are local to one batch.");
 var output = strictObject({
 	kind: literal("output"),
 	node: referenceSchema,
-	port: id$1.optional().describe("Omit for a node with one output. For multiple outputs, choose a name from node details."),
+	port: id$2.optional().describe("Omit for a node with one output. For multiple outputs, choose a name from node details."),
 	field: string$1().optional()
 });
 var system = strictObject({
@@ -9550,7 +9670,7 @@ var system = strictObject({
 });
 var variable$1 = strictObject({
 	kind: literal("variable"),
-	name: id$1
+	name: id$2
 });
 var authoringSourceSchema = union([
 	output,
@@ -9581,7 +9701,7 @@ var operand = union([
 	system,
 	variable$1
 ]);
-var toolSources = record$3(id$1, agentToolFields.inputs.element.shape.source).optional().describe("Tool input sources by name. The platform resolves types from the selected Action or workflow. New inputs default to model-provided; omitted existing sources are preserved.");
+var toolSources = record$3(id$2, agentToolFields.inputs.element.shape.source).optional().describe("Tool input sources by name. The platform resolves types from the selected Action or workflow. New inputs default to model-provided; omitted existing sources are preserved.");
 var agentTool = union([workflowAgentToolSchema.omit({
 	id: true,
 	inputs: true,
@@ -9591,20 +9711,24 @@ var agentTool = union([workflowAgentToolSchema.omit({
 	id: true,
 	inputs: true
 }).extend({ inputs: toolSources }).strict()]);
-var authoringCapabilities = array(union([connectorCapabilitySchema, strictObject({
-	kind: literal("workflow"),
-	name: id$1,
-	flowId: id$1
-})]));
+var authoringCapabilities = array(union([
+	connectorCapabilitySchema,
+	strictObject({
+		kind: literal("workflow"),
+		name: id$2,
+		flowId: id$2
+	}),
+	httpCapabilitySchema
+]));
 var notification = strictObject({
 	...authoringDefinitionSchemas.connector.shape,
-	messageHandle: id$1,
-	inputs: record$3(id$1, union([strictObject({
+	messageHandle: id$2,
+	inputs: record$3(id$2, union([strictObject({
 		kind: literal("value"),
 		value: json$2
 	}), strictObject({
 		kind: literal("input"),
-		input: id$1
+		input: id$2
 	})]))
 });
 var field = strictObject({
@@ -9612,14 +9736,14 @@ var field = strictObject({
 	nullable: boolean().optional(),
 	description: string$1().optional()
 });
-var inputFields = record$3(id$1, field.extend({ default: json$2.optional() })).describe("Optional business input constraints by name. A binding to a new Code, Agent, LLM, Wait or Approval input automatically declares an input accepting any JSON. Existing constraints are preserved. Omitted schema accepts any JSON; omitted nullable is true. Use default for inherited values; input.set supplies data.");
-var flowInputFields = record$3(id$1, field).describe("Workflow input definitions by name. Omitted schema accepts any JSON; omitted nullable is true. No defaults. Supply call values as trigger.outputs.");
+var inputFields = record$3(id$2, field.extend({ default: json$2.optional() })).describe("Optional business input constraints by name. A binding to a new Code, Agent, LLM, Wait or Approval input automatically declares an input accepting any JSON. Existing constraints are preserved. Omitted schema accepts any JSON; omitted nullable is true. Use default for inherited values; input.set supplies data.");
+var flowInputFields = record$3(id$2, field).describe("Workflow input definitions by name. Omitted schema accepts any JSON; omitted nullable is true. No defaults. Supply call values as trigger.outputs.");
 var flowOutputFields = flowInputFields.describe("Workflow output definitions by name. Omitted schema accepts any JSON; omitted nullable is true. No defaults. Set values on the Outputs node with input.set or node.add.inputs.");
-var flowInputFieldsView = record$3(id$1, field.extend({
+var flowInputFieldsView = record$3(id$2, field.extend({
 	schema: json$2,
 	nullable: boolean()
 }));
-var outputFields = record$3(id$1, field).describe("Code return fields by name. Omitted schema accepts any JSON; omitted nullable is true.");
+var outputFields = record$3(id$2, field).describe("Code return fields by name. Omitted schema accepts any JSON; omitted nullable is true.");
 var expression = strictObject({
 	left: operand,
 	operator: authoringDefinitionSchemas.condition.shape.cases.element.shape.groups.element.shape.expressions.element.shape.operator,
@@ -9633,20 +9757,20 @@ var when = union([
 ]);
 var authoringConfigurations = {
 	"webhook-response": strictObject({}),
-	"workflow": strictObject({ flowId: id$1 }),
+	"workflow": strictObject({ flowId: id$2 }),
 	"start": strictObject({ inputDefs: flowInputFields.default({}) }),
 	"outputs": strictObject({ outputDefs: flowOutputFields.default({}) }),
-	"error": strictObject({ sourceFlowIds: array(id$1).optional() }),
+	"error": strictObject({ sourceFlowIds: array(id$2).optional() }),
 	"webhook": authoringDefinitionSchemas.webhook.omit({ bodyFields: true }).extend({ body: inputFields }).strict(),
 	"cron": strictObject({ schedule: authoringDefinitionSchemas.schedule }),
 	"poll": strictObject({
-		key: id$1,
-		connectionId: id$1.optional(),
+		key: id$2,
+		connectionId: id$2.optional(),
 		schedule: authoringDefinitionSchemas.schedule
 	}),
 	"integration": strictObject({
-		key: id$1,
-		connectionId: id$1.optional()
+		key: id$2,
+		connectionId: id$2.optional()
 	}),
 	"code": strictObject({
 		inputs: inputFields,
@@ -9656,6 +9780,7 @@ var authoringConfigurations = {
 	"connector": authoringDefinitionSchemas.connector.omit({ outputMode: true }).strict(),
 	"openapi": authoringOpenApiSchema,
 	"http-request": httpRequestConfigSchema,
+	"dedupe": dedupeConfigSchema,
 	"agent": authoringDefinitionSchemas.agent.omit({
 		prompt: true,
 		tools: true
@@ -9670,7 +9795,7 @@ var authoringConfigurations = {
 	"condition": strictObject({
 		match: _enum(["first", "all"]),
 		branches: array(strictObject({
-			name: id$1,
+			name: id$2,
 			description: string$1().optional(),
 			when
 		}))
@@ -9687,7 +9812,7 @@ var authoringConfigurations = {
 };
 var updates = strictObject({
 	onError: _enum(["stop", "error"]).optional(),
-	name: id$1.optional(),
+	name: id$2.optional(),
 	description: string$1().optional(),
 	icon: string$1().optional(),
 	maxExecutions: int().positive().optional(),
@@ -9698,13 +9823,13 @@ var updates = strictObject({
 var authoringEditSchema = discriminatedUnion("op", [
 	strictObject({
 		op: literal("node.add"),
-		as: id$1.regex(/^[A-Za-z][\w-]*$/).describe("Unique batch-local alias without the $ prefix. Later edits must reference this new node as $alias; the bare alias is not its node ID."),
+		as: id$2.regex(/^[A-Za-z][\w-]*$/).describe("Unique batch-local alias without the $ prefix. Later edits must reference this new node as $alias; the bare alias is not its node ID."),
 		type,
-		name: id$1,
+		name: id$2,
 		onError: _enum(["stop", "error"]).optional(),
 		retry: retryConfigurationSchema.optional(),
 		config: patch.optional(),
-		inputs: record$3(id$1, authoringSourceSchema).optional().describe("Input data sources, applied after creation, as input.set operations. Execution edges are separate."),
+		inputs: record$3(id$2, authoringSourceSchema).optional().describe("Input data sources, applied after creation, as input.set operations. Execution edges are separate."),
 		code: string$1().optional(),
 		prompt: string$1().optional()
 	}),
@@ -9712,12 +9837,12 @@ var authoringEditSchema = discriminatedUnion("op", [
 		op: literal("node.update"),
 		node: referenceSchema,
 		set: updates.optional(),
-		clear: array(array(id$1).min(1)).optional()
+		clear: array(array(id$2).min(1)).optional()
 	}),
 	strictObject({
 		op: literal("node.refresh"),
 		node: referenceSchema,
-		tool: id$1.optional().describe("Name of a workflow tool on an Agent or Code node. Omit for a Call Workflow node.")
+		tool: id$2.optional().describe("Name of a workflow tool on an Agent or Code node. Omit for a Call Workflow node.")
 	}),
 	strictObject({
 		op: literal("node.remove"),
@@ -9726,20 +9851,20 @@ var authoringEditSchema = discriminatedUnion("op", [
 	strictObject({
 		op: literal("input.set"),
 		node: referenceSchema,
-		input: id$1,
+		input: id$2,
 		source: authoringSourceSchema
 	}),
 	strictObject({
 		op: _enum(["edge.connect", "edge.disconnect"]),
 		source: referenceSchema,
 		target: referenceSchema,
-		branch: id$1.optional()
+		branch: id$2.optional()
 	}),
 	strictObject({
 		op: literal("text.edit"),
 		node: referenceSchema,
 		field: _enum(["code", "prompt"]),
-		oldText: id$1,
+		oldText: id$2,
 		newText: string$1()
 	}),
 	strictObject({
@@ -9750,15 +9875,15 @@ var authoringEditSchema = discriminatedUnion("op", [
 	})
 ]);
 strictObject({
-	baseRevision: id$1,
-	requestId: id$1.max(256),
+	baseRevision: id$2,
+	requestId: id$2.max(256),
 	edits: array(authoringEditSchema).min(1).max(1e3)
 });
 strictObject({
-	revision: id$1.optional().describe("Fixed revision from a previous read; omit to read the current draft."),
-	nodes: array(id$1).min(1).max(100).optional().describe("Node references to read in one batch. Mutually exclusive with text. Long texts return metadata."),
+	revision: id$2.optional().describe("Fixed revision from a previous read; omit to read the current draft."),
+	nodes: array(id$2).min(1).max(100).optional().describe("Node references to read in one batch. Mutually exclusive with text. Long texts return metadata."),
 	text: strictObject({
-		node: id$1,
+		node: id$2,
 		field: _enum(["code", "prompt"]),
 		start: int().positive().default(1),
 		lines: int().min(1).max(200).default(80)
@@ -9767,42 +9892,43 @@ strictObject({
 	not: { required: ["nodes", "text"] },
 	description: "Omit nodes and text for an outline; provide nodes for details, or text for an excerpt."
 });
-strictObject({ revisionId: id$1 });
+strictObject({ revisionId: id$2 });
 strictObject({
-	revision: id$1.optional(),
-	query: id$1.max(1e3),
+	revision: id$2.optional(),
+	query: id$2.max(1e3),
 	type: type.optional(),
 	offset: int().nonnegative().default(0),
 	limit: int().min(1).max(100).default(20)
 });
 strictObject({
 	type: type.optional(),
-	action: id$1.optional()
+	action: id$2.optional()
 }).refine((v) => v.type == null || v.action == null, "Choose type or action.");
+`${[...findEngineContract(currentEngineContract).builtinModules].filter((name) => !name.startsWith("node:")).join(", ")}`;
 var authoringDiagnosticSchema = object({
-	code: id$1,
+	code: id$2,
 	message: string$1(),
-	nodes: array(id$1),
+	nodes: array(id$2),
 	field: string$1().optional(),
 	line: number().optional(),
 	column: number().optional()
 });
 var authoringCheckResponse = object({
-	flowId: id$1,
-	revisionId: id$1,
+	flowId: id$2,
+	revisionId: id$2,
 	valid: boolean(),
 	diagnostics: array(authoringDiagnosticSchema),
 	version: literal(1)
 });
 var authoringEditResponse = object({
-	flowId: id$1,
+	flowId: id$2,
 	saved: literal(true),
-	revision: id$1,
-	nodes: record$3(id$1, id$1),
+	revision: id$2,
+	nodes: record$3(id$2, id$2),
 	changes: array(object({
 		index: int(),
-		op: id$1,
-		node: id$1.optional()
+		op: id$2,
+		node: id$2.optional()
 	})),
 	validation: object({
 		status: _enum([
@@ -9815,8 +9941,8 @@ var authoringEditResponse = object({
 	version: literal(1)
 });
 var authoringReadResponse = object({
-	flowId: id$1,
-	revision: id$1,
+	flowId: id$2,
+	revision: id$2,
 	data: object({
 		nodes: array(record$3(string$1(), json$2)).optional(),
 		edges: array(json$2).optional(),
@@ -9825,12 +9951,12 @@ var authoringReadResponse = object({
 	version: literal(1)
 });
 var authoringSearchResponse = object({
-	flowId: id$1,
-	revision: id$1,
+	flowId: id$2,
+	revision: id$2,
 	data: object({
 		matches: array(object({
-			node: id$1.optional(),
-			field: id$1,
+			node: id$2.optional(),
+			field: id$2,
 			line: int().optional(),
 			excerpt: string$1()
 		})),
@@ -9885,11 +10011,14 @@ var controlErrorCode = {
 	triggerKeyInvalid: "trigger-key.invalid",
 	triggerKeyNotFound: "trigger-key.not-found",
 	triggerNotFound: "trigger.not-found",
+	tagInvalid: "tag.invalid",
+	tagConflict: "tag.conflict",
+	tagNotFound: "tag.not-found",
 	variableInvalid: "variable.invalid",
 	variableLimitReached: "variable.limit-reached",
 	variableNotFound: "variable.not-found"
 };
-controlErrorCode.eventSourceInvalid, controlErrorCode.eventSourceIdentityUnavailable, controlErrorCode.eventSourceNotFound, controlErrorCode.eventSourceConflict, controlErrorCode.authenticationRequired, controlErrorCode.authorizationDenied, controlErrorCode.bindingUnresolved, controlErrorCode.connectorActionNotFound, controlErrorCode.connectorAccessConflict, controlErrorCode.connectorAccessInvalid, controlErrorCode.connectorAccessRequired, controlErrorCode.connectorAccessUnsupported, controlErrorCode.connectorUnconfigured, controlErrorCode.connectorUnavailable, controlErrorCode.connectorConsoleUnconfigured, controlErrorCode.engineUnavailable, controlErrorCode.engineUnsupported, controlErrorCode.flowInvalid, controlErrorCode.flowRepairRequired, controlErrorCode.flowUpgradeRequired, controlErrorCode.flowNotFound, controlErrorCode.flowBusy, controlErrorCode.flowConflict, controlErrorCode.flowPresentationConflict, controlErrorCode.flowRevisionConflict, controlErrorCode.liveConflict, controlErrorCode.liveNotFound, controlErrorCode.pageInvalidCursor, controlErrorCode.publicationConflict, controlErrorCode.publicationNotFound, controlErrorCode.publicationUnsupported, controlErrorCode.publishOperationNotFound, controlErrorCode.routeNotFound, controlErrorCode.runConflict, controlErrorCode.runEventsExpired, controlErrorCode.runInvalid, controlErrorCode.runNotFound, controlErrorCode.runNotTerminal, controlErrorCode.runOverloaded, controlErrorCode.runWaitNotFound, controlErrorCode.triggerKeyInvalid, controlErrorCode.triggerKeyNotFound, controlErrorCode.triggerNotFound, controlErrorCode.variableInvalid, controlErrorCode.variableLimitReached, controlErrorCode.variableNotFound;
+controlErrorCode.eventSourceInvalid, controlErrorCode.eventSourceIdentityUnavailable, controlErrorCode.eventSourceNotFound, controlErrorCode.eventSourceConflict, controlErrorCode.authenticationRequired, controlErrorCode.authorizationDenied, controlErrorCode.bindingUnresolved, controlErrorCode.connectorActionNotFound, controlErrorCode.connectorAccessConflict, controlErrorCode.connectorAccessInvalid, controlErrorCode.connectorAccessRequired, controlErrorCode.connectorAccessUnsupported, controlErrorCode.connectorUnconfigured, controlErrorCode.connectorUnavailable, controlErrorCode.connectorConsoleUnconfigured, controlErrorCode.engineUnavailable, controlErrorCode.engineUnsupported, controlErrorCode.flowInvalid, controlErrorCode.flowRepairRequired, controlErrorCode.flowUpgradeRequired, controlErrorCode.flowNotFound, controlErrorCode.flowBusy, controlErrorCode.flowConflict, controlErrorCode.flowPresentationConflict, controlErrorCode.flowRevisionConflict, controlErrorCode.liveConflict, controlErrorCode.liveNotFound, controlErrorCode.pageInvalidCursor, controlErrorCode.publicationConflict, controlErrorCode.publicationNotFound, controlErrorCode.publicationUnsupported, controlErrorCode.publishOperationNotFound, controlErrorCode.routeNotFound, controlErrorCode.runConflict, controlErrorCode.runEventsExpired, controlErrorCode.runInvalid, controlErrorCode.runNotFound, controlErrorCode.runNotTerminal, controlErrorCode.runOverloaded, controlErrorCode.runWaitNotFound, controlErrorCode.triggerKeyInvalid, controlErrorCode.triggerKeyNotFound, controlErrorCode.triggerNotFound, controlErrorCode.tagInvalid, controlErrorCode.tagConflict, controlErrorCode.tagNotFound, controlErrorCode.variableInvalid, controlErrorCode.variableLimitReached, controlErrorCode.variableNotFound;
 var ApiError = class extends Error {
 	constructor(status, code, message, details) {
 		super(message);
@@ -10366,7 +10495,7 @@ function decodeEntries(values, current) {
 	return parsed.data;
 }
 //#endregion
-//#region src/control/common/providerIconSprite.ts
+//#region src/connector/common/providerIconSprite.ts
 /** Optional artwork must never make an otherwise usable catalog unavailable. */
 function providerIconAppearance(metadata, position) {
 	if (!metadata || typeof metadata != "object" || !position || typeof position != "object") return {};
@@ -10798,6 +10927,30 @@ function connectorProvider(value) {
 	};
 }
 //#endregion
+//#region src/event-source/common/view.ts
+var id$1 = string$1().min(1).max(256);
+/** Public projection of a source that Connector validates and Open Flow exposes unchanged. */
+var eventSourceViewSchema = object({
+	appId: id$1.nullable(),
+	workspaceId: id$1.optional(),
+	installationId: id$1.optional(),
+	organizationId: id$1.optional(),
+	projectId: id$1.optional(),
+	projectKey: id$1.optional(),
+	subscriptionStatus: _enum([
+		"idle",
+		"pending",
+		"ready",
+		"error"
+	]).optional(),
+	lastError: string$1().optional(),
+	signingSecretConfigured: boolean().optional(),
+	manageSubscriptions: boolean().nullable(),
+	verificationTokenConfigured: boolean().nullable(),
+	encryptKeyConfigured: boolean().nullable(),
+	verifiedAt: string$1().nullable()
+});
+//#endregion
 //#region src/control/common/eventSources.ts
 var id = string$1().min(1).max(256);
 var eventType = string$1().regex(/^[a-z][a-z0-9_.:]{0,127}$/);
@@ -10817,29 +10970,12 @@ var eventSourceSchema = object({
 		"fireflies",
 		"jira"
 	]),
-	appId: id.nullable(),
-	workspaceId: id.optional(),
-	installationId: id.optional(),
-	organizationId: id.optional(),
-	projectId: id.optional(),
-	projectKey: id.optional(),
-	subscriptionStatus: _enum([
-		"idle",
-		"pending",
-		"ready",
-		"error"
-	]).optional(),
-	lastError: string$1().optional(),
-	signingSecretConfigured: boolean().optional(),
+	...eventSourceViewSchema.shape,
 	connectionId: id,
 	teamId: id.nullable(),
 	enabled: boolean(),
 	eventTypes: array(eventType),
-	manageSubscriptions: boolean().nullable(),
-	verificationTokenConfigured: boolean().nullable(),
-	encryptKeyConfigured: boolean().nullable(),
 	endpointUrl: string$1().nullable(),
-	verifiedAt: string$1().nullable(),
 	lastReceivedAt: string$1().nullable(),
 	updatedAt: string$1(),
 	consumers: array(object({
@@ -10848,21 +10984,6 @@ var eventSourceSchema = object({
 		triggerNodeId: id
 	}))
 });
-eventSourceSchema.pick({
-	appId: true,
-	workspaceId: true,
-	installationId: true,
-	organizationId: true,
-	projectId: true,
-	projectKey: true,
-	subscriptionStatus: true,
-	lastError: true,
-	signingSecretConfigured: true,
-	manageSubscriptions: true,
-	verificationTokenConfigured: true,
-	encryptKeyConfigured: true,
-	verifiedAt: true
-});
 function decodeEventSource(value) {
 	return eventSourceSchema.parse(value);
 }
@@ -11169,6 +11290,7 @@ function flow(value) {
 			publicationId: string(target.publicationId),
 			revisionId: string(target.revisionId)
 		} },
+		tagIds: source.tagIds === void 0 ? [] : strings(source.tagIds),
 		createdAt: string(source.createdAt),
 		...source.connectorTeamId == null ? {} : { connectorTeamId: string(source.connectorTeamId) },
 		draftRevisionId: string(source.draftRevisionId),
@@ -11614,6 +11736,33 @@ function randomId() {
 	return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
 }
 //#endregion
+//#region src/control/common/tags.ts
+function normalizeFlowQuery(query = {}) {
+	return {
+		query: query.query?.trim().toLowerCase() ?? "",
+		tagIds: [...new Set(query.tagIds ?? [])].toSorted(),
+		untagged: query.untagged ?? false
+	};
+}
+function decodeTag(value) {
+	const source = record$1(value);
+	if (source.version != 1) return invalidResponse();
+	return {
+		tagId: string(source.tagId),
+		name: string(source.name),
+		version: 1
+	};
+}
+function decodeTagListItem(value) {
+	const source = record$1(value);
+	const referenceCount = integer(source.referenceCount);
+	if (referenceCount < 0) return invalidResponse();
+	return {
+		...decodeTag(source),
+		referenceCount
+	};
+}
+//#endregion
 //#region src/control/common/api.ts
 function decodeRunEvent(value) {
 	const source = record$1(value);
@@ -11717,7 +11866,7 @@ function decodeRunEvent(value) {
 			switch (kind) {
 				case "node.started": {
 					const nodeKind = payload.nodeKind;
-					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "decision" && nodeKind !== "openapi" && nodeKind !== "http-request" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "value" && nodeKind !== "outputs" && nodeKind !== "webhook-response" && nodeKind !== "workflow" && nodeKind !== "wait") return invalidResponse();
+					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "decision" && nodeKind !== "openapi" && nodeKind !== "http-request" && nodeKind !== "dedupe" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "value" && nodeKind !== "outputs" && nodeKind !== "webhook-response" && nodeKind !== "workflow" && nodeKind !== "wait") return invalidResponse();
 					return {
 						...base,
 						kind,
@@ -11844,6 +11993,10 @@ var ControlClient = class {
 	}
 	async listFlows(options = {}) {
 		const parameters = new URLSearchParams();
+		const filter = normalizeFlowQuery(options);
+		if (filter.query) parameters.set("query", filter.query);
+		if (filter.tagIds.length) parameters.set("tagIds", filter.tagIds.join(","));
+		if (filter.untagged) parameters.set("untagged", "true");
 		if (options.cursor != null) parameters.set("cursor", options.cursor);
 		if (options.limit != null) parameters.set("limit", String(options.limit));
 		if (options.includeTotal != null) parameters.set("includeTotal", String(options.includeTotal));
@@ -11933,15 +12086,17 @@ var ControlClient = class {
 				file,
 				name: options.name,
 				teamId: options.teamId,
+				tagIds: options.tagIds,
 				version: 1
 			})
 		}));
 	}
-	async createFlow(name, idempotencyKey = `flow-${randomId()}`, teamId) {
+	async createFlow(name, idempotencyKey = `flow-${randomId()}`, teamId, tagIds) {
 		return flow(await this.request("/v1/flows", {
 			body: JSON.stringify({
 				name,
 				...teamId == null ? {} : { teamId },
+				...tagIds == null ? {} : { tagIds },
 				version: 1
 			}),
 			headers: { "idempotency-key": idempotencyKey },
@@ -11976,15 +12131,68 @@ var ControlClient = class {
 		if (source.version != 1 || !Array.isArray(source.listeners)) return invalidResponse();
 		return source.listeners.map(errorListener);
 	}
-	async renameFlow(flowId, name) {
-		return flow(await this.request(`/v1/flows/${segment(flowId)}`, {
+	async listTags(signal) {
+		const source = record$1(await this.request("/v1/tags", { signal }));
+		if (source.version != 1 || !Array.isArray(source.tags)) return invalidResponse();
+		return {
+			tags: source.tags.map(decodeTagListItem),
+			version: 1
+		};
+	}
+	async createTag(name) {
+		return decodeTag(await this.request("/v1/tags", {
+			method: "POST",
 			body: JSON.stringify({
 				name,
 				version: 1
-			}),
-			method: "PATCH"
+			})
+		}));
+	}
+	async renameTag(tagId, name) {
+		return decodeTag(await this.request(`/v1/tags/${segment(tagId)}`, {
+			method: "PATCH",
+			body: JSON.stringify({
+				name,
+				version: 1
+			})
+		}));
+	}
+	async deleteTag(tagId) {
+		if (record$1(await this.request(`/v1/tags/${segment(tagId)}`, { method: "DELETE" })).version != 1) invalidResponse();
+	}
+	async setFlowTags(flowId, tagIds) {
+		return flow(await this.request(`/v1/flows/${segment(flowId)}/tags`, {
+			method: "PUT",
+			body: JSON.stringify({
+				tagIds,
+				version: 1
+			})
+		}));
+	}
+	async updateFlow(flowId, changes) {
+		return flow(await this.request(`/v1/flows/${segment(flowId)}`, {
+			method: "PATCH",
+			body: JSON.stringify({
+				...changes,
+				version: 1
+			})
 		}));
 	}
+	async getFlowState(flowId, scope, values = false) {
+		const result = flowStateViewSchema.safeParse(await this.request(`/v1/flows/${segment(flowId)}/state?scope=${scope}&values=${values}`));
+		return result.success && result.data.scope === scope ? result.data : invalidResponse();
+	}
+	async clearFlowState(flowId, scope, key) {
+		const source = record$1(await this.request(`/v1/flows/${segment(flowId)}/state?scope=${scope}${key == null ? "" : `&key=${encodeURIComponent(key)}`}`, { method: "DELETE" }));
+		if (source.version !== 1 || source.cleared !== true) invalidResponse();
+	}
+	async clearFlowDedupe(flowId, scope, space) {
+		const source = record$1(await this.request(`/v1/flows/${segment(flowId)}/dedupe?scope=${scope}&space=${encodeURIComponent(space)}`, { method: "DELETE" }));
+		if (source.version !== 1 || source.cleared !== true) invalidResponse();
+	}
+	async renameFlow(flowId, name) {
+		return this.updateFlow(flowId, { name });
+	}
 	async deleteFlow(flowId) {
 		return flow(await this.request(`/v1/flows/${segment(flowId)}`, { method: "DELETE" }));
 	}