@oomol-lab/open-flow 0.1.0-beta.75 → 0.1.0-beta.77

package/dist/common/mcp.js

@@ -8693,16 +8693,10 @@ function isSchemaKeyword(value) {
 /** Shared by decision entry points, the editor, and durable decision storage. */
 var waitCommentSchema = string$1().trim().refine((value) => [...value].length <= 2e3, "Wait comment must contain at most 2,000 Unicode code points.").nullable().optional();
 //#endregion
-//#region src/http/common/authBindings.ts
-/** Never allow credentials to enter a Revision as literal node inputs. */
-function assertHttpAuthBindings(document) {
-	for (const node of Object.values(document.graph.nodes)) {
-		if (node.kind != "task" || !("executor" in node.task) || !["openapi", "http-request"].includes(node.task.executor.kind)) continue;
-		for (const [handle, mapping] of Object.entries(node.inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
-	}
-}
-//#endregion
 //#region src/decision/common/decision.ts
+function isDecisionExecutor(executor) {
+	return executor.kind === "decision";
+}
 var decisionLimits = {
 	choice: 255,
 	score: 10
@@ -8725,7 +8719,7 @@ function limitDecisionQuestions(questions) {
 }
 /** Loading an oversized task also updates its previously generated output schemas. */
 function limitDecisionTask(task) {
-	if (task.executor.kind !== "decision") return task;
+	if (!isDecisionExecutor(task.executor)) return task;
 	const original = task.executor.questions;
 	const questions = limitDecisionQuestions(original);
 	if (questions === original) return task;
@@ -8792,6 +8786,20 @@ function answerSchema(question) {
 	};
 }
 //#endregion
+//#region src/http/common/authBindings.ts
+/** Never allow credentials to enter a Revision as literal inputs of an OpenAPI or HTTP request node. */
+function assertHttpAuthBindings(inputs) {
+	for (const [handle, mapping] of Object.entries(inputs)) if (handle.startsWith("auth.") && mapping.kind == "value") throw new TypeError("HTTP authentication accepts deployment variables and upstream outputs only.");
+}
+//#endregion
+//#region src/http/common/hosts.ts
+/** Hosts of a Code `http` Capability: lowercase DNS names or IPv4 addresses; `*.example.com` matches subdomains only. */
+var httpHostPattern = /^(?:\*\.)?(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+/** Wildcards must name a registrable suffix, so `*.com` is rejected. */
+function isHttpHost(value) {
+	return httpHostPattern.test(value) && (!value.startsWith("*.") || value.slice(2).includes("."));
+}
+//#endregion
 //#region src/http/common/httpRequest.ts
 var parameterSchema = strictObject({
 	mode: _enum(["fields", "object"]).default("fields"),
@@ -8838,6 +8846,54 @@ var httpRequestConfigSchema = strictObject({
 	statusPolicy: _enum(["success", "all"]).default("success")
 });
 var httpRequestExecutorSchema = httpRequestConfigSchema.extend({ kind: literal("http-request") });
+//#endregion
+//#region src/state/common/state.ts
+var stateQuerySchema = strictObject({
+	scope: _enum(["draft", "live"]),
+	values: boolean().optional()
+});
+var stateClearSchema = strictObject({
+	scope: _enum(["draft", "live"]),
+	key: string$1().min(1).refine((key) => new TextEncoder().encode(key).length <= 256).optional()
+});
+var dedupeClearSchema = strictObject({
+	scope: _enum(["draft", "live"]),
+	space: string$1().regex(/^(flow|node:.+)$/)
+});
+var dedupeConfigSchema = strictObject({
+	field: string$1().default(""),
+	mode: _enum(["new", "increasing"]).default("new"),
+	space: _enum(["node", "flow"]).default("node")
+});
+var dedupeExecutorSchema = dedupeConfigSchema.extend({ kind: literal("dedupe") });
+var flowStateViewSchema = object({
+	version: literal(1),
+	scope: _enum(["draft", "live"]),
+	limits: object({
+		maxValueBytes: number().positive(),
+		maxValues: number().int().positive(),
+		maxSpaces: number().int().positive(),
+		maxIdentities: number().positive(),
+		maxRunWrites: number().positive()
+	}),
+	values: array(object({
+		key: string$1(),
+		size: number().nonnegative(),
+		updatedAt: number(),
+		value: json$4().optional()
+	})),
+	spaces: array(object({
+		space: string$1(),
+		mode: _enum(["new", "increasing"]),
+		count: number().nonnegative(),
+		watermark: union([
+			string$1(),
+			number(),
+			_null()
+		]),
+		updatedAt: number()
+	}))
+});
 function checkJsonDepth(value, depth = 0) {
 	if (depth > 64) throw new TypeError("Value exceeds the maximum JSON depth.");
 	if (value != null && typeof value == "object") for (const child of Object.values(value)) checkJsonDepth(child, depth + 1);
@@ -9007,7 +9063,15 @@ var workflowCapabilitySchema = strictObject({
 	inputs: array(port$1),
 	outputs: array(port$1).nullable()
 });
-var capability = union([connectorCapabilitySchema, workflowCapabilitySchema]);
+var httpCapabilitySchema = strictObject({
+	kind: literal("http"),
+	hosts: array(text.refine(isHttpHost, "Use a lowercase host name or IPv4 address, optionally prefixed by \"*.\" for subdomains.")).min(1).max(20).describe("Hosts Code may call with context.fetch. \"*.example.com\" matches subdomains only.")
+});
+var capability = union([
+	connectorCapabilitySchema,
+	workflowCapabilitySchema,
+	httpCapabilitySchema
+]);
 var inline = object({
 	...ports$1,
 	name: text,
@@ -9118,7 +9182,8 @@ var managedFields = object({
 			flowId: text,
 			revisionId: text
 		}),
-		httpRequestExecutorSchema
+		httpRequestExecutorSchema,
+		dedupeExecutorSchema
 	])
 });
 var managed = managedFields.transform(limitDecisionTask);
@@ -9387,7 +9452,9 @@ var revision = object({
 		literal(8),
 		literal(9),
 		literal(10),
-		literal(11)
+		literal(11),
+		literal(12),
+		literal(13)
 	]),
 	document,
 	modules: record$2(text, module)
@@ -9418,7 +9485,7 @@ function decodeRevisionContent(value) {
 	checkJsonDepth(value);
 	const content = revision.parse(value);
 	checkModelVersion(content);
-	assertHttpAuthBindings(content.document);
+	assertDocumentHttpAuthBindings(content.document);
 	return content;
 }
 var shapes = {
@@ -9588,6 +9655,8 @@ array(union([...new Map(Object.entries(shapes).map(([kind, shape]) => [kind, sha
 	...shape
 })])).values()])).min(1);
 function checkModelVersion(content) {
+	if (content.modelVersion < 13 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind === "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind === "dedupe")) throw new Error("Deduplication requires Flow model v13.");
+	if (content.modelVersion < 12 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "moduleId" in candidateNode.task && candidateNode.task.capabilities?.some((item) => item.kind == "http"))) throw new TypeError("Code HTTP access requires Flow model version 12.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind == "http-request")) throw new TypeError("HTTP Request requires Flow model version 11.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && ("moduleId" in candidateNode.task ? candidateNode.task.capabilities?.some((item) => item.kind == "workflow") : candidateNode.task.executor.kind == "agent" && candidateNode.task.executor.tools.some((item) => item.kind == "workflow")))) throw new TypeError("Workflow tools require Flow model version 11.");
 	if (content.modelVersion < 10 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "webhook" && (candidateNode.options?.responseBody != null || candidateNode.options?.responseStatusCodeOutput != null || candidateNode.options?.responseHeadersSource != null || candidateNode.options?.responseHeaderOutputs != null))) throw new TypeError("Dynamic Webhook responses require Flow model version 10.");
@@ -9603,6 +9672,9 @@ function checkModelVersion(content) {
 	if (content.modelVersion < 6 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task)) throw new TypeError("Node-owned managed Tasks require Flow model version 6.");
 	if (content.modelVersion < 5 && Object.values(content.document.graph.nodes).some((itemNode) => itemNode.kind == "error")) throw new TypeError("Error workflows require Flow model version 5.");
 }
+function assertDocumentHttpAuthBindings(content) {
+	for (const graphNode of Object.values(content.graph.nodes)) if (graphNode.kind == "task" && "executor" in graphNode.task && ["openapi", "http-request"].includes(graphNode.task.executor.kind)) assertHttpAuthBindings(graphNode.inputs);
+}
 function resourceNameIssue(value) {
 	const name = value.trim();
 	if (name.length == 0) return "empty";
@@ -9614,6 +9686,84 @@ function resourceNameIssue(value) {
 	if (!/^[\p{L}\p{N}](?:[\p{L}\p{N} _-]*[\p{L}\p{N}])?$/u.test(name)) return "specialCharacter";
 }
 //#endregion
+//#region src/runtime/common/engineContract.ts
+/** v10 adds persistent Flow State to the published v9 Node compatibility and fetch contract. */
+var currentEngineContract = "open-flow-engine/v10";
+/** The published v8 Node compatibility contract, retained for existing Publications and Runs. */
+var nodejsEngineContract = "open-flow-engine/v8/nodejs-compat-v1";
+var platformSource = (contract) => `export const engineContract = ${JSON.stringify(contract)}
+export function identity(value) { return value }
+`;
+var v8Contract = {
+	workflowTools: true,
+	httpRequests: true,
+	waitAutoContinue: true,
+	webhookResponses: true,
+	platformExports: /* @__PURE__ */ new Set(["engineContract", "identity"]),
+	platformModule: "open-flow:platform",
+	platformSource: platformSource("open-flow-engine/v8")
+};
+var nodejsContract = {
+	...v8Contract,
+	builtinModules: new Set([
+		"assert",
+		"assert/strict",
+		"buffer",
+		"console",
+		"constants",
+		"crypto",
+		"events",
+		"fs",
+		"fs/promises",
+		"os",
+		"path",
+		"path/posix",
+		"process",
+		"punycode",
+		"querystring",
+		"stream",
+		"stream/promises",
+		"stream/web",
+		"string_decoder",
+		"timers",
+		"timers/promises",
+		"url",
+		"util",
+		"zlib"
+	].flatMap((name) => [name, `node:${name}`])),
+	platformSource: platformSource(nodejsEngineContract)
+};
+var v9Contract = {
+	...nodejsContract,
+	codeFetch: true,
+	platformSource: platformSource("open-flow-engine/v9")
+};
+var currentContract = {
+	...v9Contract,
+	flowState: true,
+	platformSource: platformSource(currentEngineContract)
+};
+function findEngineContract(contract) {
+	if (contract == "open-flow-engine/v10") return currentContract;
+	if (contract == "open-flow-engine/v9") return v9Contract;
+	if (contract == "open-flow-engine/v8") return v8Contract;
+	if (contract == "open-flow-engine/v8/nodejs-compat-v1") return nodejsContract;
+	if (contract == "open-flow-engine/v7" || contract == "open-flow-engine/v7/nodejs-compat-v1") return {
+		...contract.endsWith("/nodejs-compat-v1") ? nodejsContract : v8Contract,
+		workflowTools: false,
+		httpRequests: false,
+		platformSource: platformSource(contract)
+	};
+	if (contract == "open-flow-engine/v6" || contract == "open-flow-engine/v6/nodejs-compat-v1") return {
+		...contract == "open-flow-engine/v6" ? v8Contract : nodejsContract,
+		workflowTools: false,
+		httpRequests: false,
+		waitAutoContinue: false,
+		webhookResponses: false,
+		platformSource: platformSource(contract)
+	};
+}
+//#endregion
 //#region src/control/common/authoringLlm.ts
 var authoringLlmConfiguration = strictObject({
 	mode: _enum(["chat", "json"]),
@@ -9642,9 +9792,9 @@ var authoringOpenApiSchema = strictObject({
 });
 //#endregion
 //#region src/control/common/authoringSchema.ts
-var id$2 = string$1().min(1);
+var id$3 = string$1().min(1);
 var json$2 = json$4();
-var patch = record$2(id$2, json$2);
+var patch = record$2(id$3, json$2);
 var type = _enum([
 	"start",
 	"outputs",
@@ -9662,16 +9812,17 @@ var type = _enum([
 	"decision",
 	"openapi",
 	"http-request",
+	"dedupe",
 	"condition",
 	"value",
 	"wait",
 	"approval"
 ]);
-var referenceSchema = id$2.describe("An existing node reference returned by read/search, or $alias for a preceding node.add in this edit batch. For node.add.as \"step\", reference \"$step\", never bare \"step\". Aliases are local to one batch.");
+var referenceSchema = id$3.describe("An existing node reference returned by read/search, or $alias for a preceding node.add in this edit batch. For node.add.as \"step\", reference \"$step\", never bare \"step\". Aliases are local to one batch.");
 var output = strictObject({
 	kind: literal("output"),
 	node: referenceSchema,
-	port: id$2.optional().describe("Omit for a node with one output. For multiple outputs, choose a name from node details."),
+	port: id$3.optional().describe("Omit for a node with one output. For multiple outputs, choose a name from node details."),
 	field: string$1().optional()
 });
 var system = strictObject({
@@ -9682,7 +9833,7 @@ var system = strictObject({
 });
 var variable$1 = strictObject({
 	kind: literal("variable"),
-	name: id$2
+	name: id$3
 });
 var authoringSourceSchema = union([
 	output,
@@ -9713,7 +9864,7 @@ var operand = union([
 	system,
 	variable$1
 ]);
-var toolSources = record$2(id$2, agentToolFields.inputs.element.shape.source).optional().describe("Tool input sources by name. The platform resolves types from the selected Action or workflow. New inputs default to model-provided; omitted existing sources are preserved.");
+var toolSources = record$2(id$3, agentToolFields.inputs.element.shape.source).optional().describe("Tool input sources by name. The platform resolves types from the selected Action or workflow. New inputs default to model-provided; omitted existing sources are preserved.");
 var agentTool = union([workflowAgentToolSchema.omit({
 	id: true,
 	inputs: true,
@@ -9723,20 +9874,24 @@ var agentTool = union([workflowAgentToolSchema.omit({
 	id: true,
 	inputs: true
 }).extend({ inputs: toolSources }).strict()]);
-var authoringCapabilities = array(union([connectorCapabilitySchema, strictObject({
-	kind: literal("workflow"),
-	name: id$2,
-	flowId: id$2
-})]));
+var authoringCapabilities = array(union([
+	connectorCapabilitySchema,
+	strictObject({
+		kind: literal("workflow"),
+		name: id$3,
+		flowId: id$3
+	}),
+	httpCapabilitySchema
+]));
 var notification = strictObject({
 	...authoringDefinitionSchemas.connector.shape,
-	messageHandle: id$2,
-	inputs: record$2(id$2, union([strictObject({
+	messageHandle: id$3,
+	inputs: record$2(id$3, union([strictObject({
 		kind: literal("value"),
 		value: json$2
 	}), strictObject({
 		kind: literal("input"),
-		input: id$2
+		input: id$3
 	})]))
 });
 var field = strictObject({
@@ -9744,14 +9899,14 @@ var field = strictObject({
 	nullable: boolean().optional(),
 	description: string$1().optional()
 });
-var inputFields = record$2(id$2, field.extend({ default: json$2.optional() })).describe("Optional business input constraints by name. A binding to a new Code, Agent, LLM, Wait or Approval input automatically declares an input accepting any JSON. Existing constraints are preserved. Omitted schema accepts any JSON; omitted nullable is true. Use default for inherited values; input.set supplies data.");
-var flowInputFields = record$2(id$2, field).describe("Workflow input definitions by name. Omitted schema accepts any JSON; omitted nullable is true. No defaults. Supply call values as trigger.outputs.");
+var inputFields = record$2(id$3, field.extend({ default: json$2.optional() })).describe("Optional business input constraints by name. A binding to a new Code, Agent, LLM, Wait or Approval input automatically declares an input accepting any JSON. Existing constraints are preserved. Omitted schema accepts any JSON; omitted nullable is true. Use default for inherited values; input.set supplies data.");
+var flowInputFields = record$2(id$3, field).describe("Workflow input definitions by name. Omitted schema accepts any JSON; omitted nullable is true. No defaults. Supply call values as trigger.outputs.");
 var flowOutputFields = flowInputFields.describe("Workflow output definitions by name. Omitted schema accepts any JSON; omitted nullable is true. No defaults. Set values on the Outputs node with input.set or node.add.inputs.");
-var flowInputFieldsView = record$2(id$2, field.extend({
+var flowInputFieldsView = record$2(id$3, field.extend({
 	schema: json$2,
 	nullable: boolean()
 }));
-var outputFields = record$2(id$2, field).describe("Code return fields by name. Omitted schema accepts any JSON; omitted nullable is true.");
+var outputFields = record$2(id$3, field).describe("Code return fields by name. Omitted schema accepts any JSON; omitted nullable is true.");
 var expression = strictObject({
 	left: operand,
 	operator: authoringDefinitionSchemas.condition.shape.cases.element.shape.groups.element.shape.expressions.element.shape.operator,
@@ -9765,20 +9920,20 @@ var when = union([
 ]);
 var authoringConfigurations = {
 	"webhook-response": strictObject({}),
-	"workflow": strictObject({ flowId: id$2 }),
+	"workflow": strictObject({ flowId: id$3 }),
 	"start": strictObject({ inputDefs: flowInputFields.default({}) }),
 	"outputs": strictObject({ outputDefs: flowOutputFields.default({}) }),
-	"error": strictObject({ sourceFlowIds: array(id$2).optional() }),
+	"error": strictObject({ sourceFlowIds: array(id$3).optional() }),
 	"webhook": authoringDefinitionSchemas.webhook.omit({ bodyFields: true }).extend({ body: inputFields }).strict(),
 	"cron": strictObject({ schedule: authoringDefinitionSchemas.schedule }),
 	"poll": strictObject({
-		key: id$2,
-		connectionId: id$2.optional(),
+		key: id$3,
+		connectionId: id$3.optional(),
 		schedule: authoringDefinitionSchemas.schedule
 	}),
 	"integration": strictObject({
-		key: id$2,
-		connectionId: id$2.optional()
+		key: id$3,
+		connectionId: id$3.optional()
 	}),
 	"code": strictObject({
 		inputs: inputFields,
@@ -9788,6 +9943,7 @@ var authoringConfigurations = {
 	"connector": authoringDefinitionSchemas.connector.omit({ outputMode: true }).strict(),
 	"openapi": authoringOpenApiSchema,
 	"http-request": httpRequestConfigSchema,
+	"dedupe": dedupeConfigSchema,
 	"agent": authoringDefinitionSchemas.agent.omit({
 		prompt: true,
 		tools: true
@@ -9802,7 +9958,7 @@ var authoringConfigurations = {
 	"condition": strictObject({
 		match: _enum(["first", "all"]),
 		branches: array(strictObject({
-			name: id$2,
+			name: id$3,
 			description: string$1().optional(),
 			when
 		}))
@@ -9819,7 +9975,7 @@ var authoringConfigurations = {
 };
 var updates = strictObject({
 	onError: _enum(["stop", "error"]).optional(),
-	name: id$2.optional(),
+	name: id$3.optional(),
 	description: string$1().optional(),
 	icon: string$1().optional(),
 	maxExecutions: int().positive().optional(),
@@ -9830,13 +9986,13 @@ var updates = strictObject({
 var authoringEditSchema = discriminatedUnion("op", [
 	strictObject({
 		op: literal("node.add"),
-		as: id$2.regex(/^[A-Za-z][\w-]*$/).describe("Unique batch-local alias without the $ prefix. Later edits must reference this new node as $alias; the bare alias is not its node ID."),
+		as: id$3.regex(/^[A-Za-z][\w-]*$/).describe("Unique batch-local alias without the $ prefix. Later edits must reference this new node as $alias; the bare alias is not its node ID."),
 		type,
-		name: id$2,
+		name: id$3,
 		onError: _enum(["stop", "error"]).optional(),
 		retry: retryConfigurationSchema.optional(),
 		config: patch.optional(),
-		inputs: record$2(id$2, authoringSourceSchema).optional().describe("Input data sources, applied after creation, as input.set operations. Execution edges are separate."),
+		inputs: record$2(id$3, authoringSourceSchema).optional().describe("Input data sources, applied after creation, as input.set operations. Execution edges are separate."),
 		code: string$1().optional(),
 		prompt: string$1().optional()
 	}),
@@ -9844,12 +10000,12 @@ var authoringEditSchema = discriminatedUnion("op", [
 		op: literal("node.update"),
 		node: referenceSchema,
 		set: updates.optional(),
-		clear: array(array(id$2).min(1)).optional()
+		clear: array(array(id$3).min(1)).optional()
 	}),
 	strictObject({
 		op: literal("node.refresh"),
 		node: referenceSchema,
-		tool: id$2.optional().describe("Name of a workflow tool on an Agent or Code node. Omit for a Call Workflow node.")
+		tool: id$3.optional().describe("Name of a workflow tool on an Agent or Code node. Omit for a Call Workflow node.")
 	}),
 	strictObject({
 		op: literal("node.remove"),
@@ -9858,20 +10014,20 @@ var authoringEditSchema = discriminatedUnion("op", [
 	strictObject({
 		op: literal("input.set"),
 		node: referenceSchema,
-		input: id$2,
+		input: id$3,
 		source: authoringSourceSchema
 	}),
 	strictObject({
 		op: _enum(["edge.connect", "edge.disconnect"]),
 		source: referenceSchema,
 		target: referenceSchema,
-		branch: id$2.optional()
+		branch: id$3.optional()
 	}),
 	strictObject({
 		op: literal("text.edit"),
 		node: referenceSchema,
 		field: _enum(["code", "prompt"]),
-		oldText: id$2,
+		oldText: id$3,
 		newText: string$1()
 	}),
 	strictObject({
@@ -9882,15 +10038,15 @@ var authoringEditSchema = discriminatedUnion("op", [
 	})
 ]);
 var authoringRequestSchema = strictObject({
-	baseRevision: id$2,
-	requestId: id$2.max(256),
+	baseRevision: id$3,
+	requestId: id$3.max(256),
 	edits: array(authoringEditSchema).min(1).max(1e3)
 });
 var authoringReadSchema = strictObject({
-	revision: id$2.optional().describe("Fixed revision from a previous read; omit to read the current draft."),
-	nodes: array(id$2).min(1).max(100).optional().describe("Node references to read in one batch. Mutually exclusive with text. Long texts return metadata."),
+	revision: id$3.optional().describe("Fixed revision from a previous read; omit to read the current draft."),
+	nodes: array(id$3).min(1).max(100).optional().describe("Node references to read in one batch. Mutually exclusive with text. Long texts return metadata."),
 	text: strictObject({
-		node: id$2,
+		node: id$3,
 		field: _enum(["code", "prompt"]),
 		start: int().positive().default(1),
 		lines: int().min(1).max(200).default(80)
@@ -9899,42 +10055,43 @@ var authoringReadSchema = strictObject({
 	not: { required: ["nodes", "text"] },
 	description: "Omit nodes and text for an outline; provide nodes for details, or text for an excerpt."
 });
-strictObject({ revisionId: id$2 });
+strictObject({ revisionId: id$3 });
 var authoringSearchSchema = strictObject({
-	revision: id$2.optional(),
-	query: id$2.max(1e3),
+	revision: id$3.optional(),
+	query: id$3.max(1e3),
 	type: type.optional(),
 	offset: int().nonnegative().default(0),
 	limit: int().min(1).max(100).default(20)
 });
 var authoringSchemaQuery = strictObject({
 	type: type.optional(),
-	action: id$2.optional()
+	action: id$3.optional()
 }).refine((v) => v.type == null || v.action == null, "Choose type or action.");
+`${[...findEngineContract(currentEngineContract).builtinModules].filter((name) => !name.startsWith("node:")).join(", ")}`;
 var authoringDiagnosticSchema = object({
-	code: id$2,
+	code: id$3,
 	message: string$1(),
-	nodes: array(id$2),
+	nodes: array(id$3),
 	field: string$1().optional(),
 	line: number().optional(),
 	column: number().optional()
 });
 var authoringCheckResponse = object({
-	flowId: id$2,
-	revisionId: id$2,
+	flowId: id$3,
+	revisionId: id$3,
 	valid: boolean(),
 	diagnostics: array(authoringDiagnosticSchema),
 	version: literal(1)
 });
 var authoringEditResponse = object({
-	flowId: id$2,
+	flowId: id$3,
 	saved: literal(true),
-	revision: id$2,
-	nodes: record$2(id$2, id$2),
+	revision: id$3,
+	nodes: record$2(id$3, id$3),
 	changes: array(object({
 		index: int(),
-		op: id$2,
-		node: id$2.optional()
+		op: id$3,
+		node: id$3.optional()
 	})),
 	validation: object({
 		status: _enum([
@@ -9947,8 +10104,8 @@ var authoringEditResponse = object({
 	version: literal(1)
 });
 var authoringReadResponse = object({
-	flowId: id$2,
-	revision: id$2,
+	flowId: id$3,
+	revision: id$3,
 	data: object({
 		nodes: array(record$2(string$1(), json$2)).optional(),
 		edges: array(json$2).optional(),
@@ -9957,12 +10114,12 @@ var authoringReadResponse = object({
 	version: literal(1)
 });
 var authoringSearchResponse = object({
-	flowId: id$2,
-	revision: id$2,
+	flowId: id$3,
+	revision: id$3,
 	data: object({
 		matches: array(object({
-			node: id$2.optional(),
-			field: id$2,
+			node: id$3.optional(),
+			field: id$3,
 			line: int().optional(),
 			excerpt: string$1()
 		})),
@@ -9980,35 +10137,6 @@ var resultQuerySchema = strictObject({
 	maxBytes: number().int().min(1).max(1048576).default(15e3)
 });
 //#endregion
-//#region src/execution/common/engineContract.ts
-var currentEngineContract = "open-flow-engine/v8";
-`${JSON.stringify(currentEngineContract)}`, new Set([
-	"assert",
-	"assert/strict",
-	"buffer",
-	"console",
-	"constants",
-	"crypto",
-	"events",
-	"fs",
-	"fs/promises",
-	"os",
-	"path",
-	"path/posix",
-	"process",
-	"punycode",
-	"querystring",
-	"stream",
-	"stream/promises",
-	"stream/web",
-	"string_decoder",
-	"timers",
-	"timers/promises",
-	"url",
-	"util",
-	"zlib"
-].flatMap((name) => [name, `node:${name}`])), `${JSON.stringify("open-flow-engine/v8/nodejs-compat-v1")}`;
-//#endregion
 //#region src/workflow/common/workflow.ts
 var portSchema = object({
 	handle: string$1().min(1),
@@ -10091,11 +10219,14 @@ var controlErrorCode = {
 	triggerKeyInvalid: "trigger-key.invalid",
 	triggerKeyNotFound: "trigger-key.not-found",
 	triggerNotFound: "trigger.not-found",
+	tagInvalid: "tag.invalid",
+	tagConflict: "tag.conflict",
+	tagNotFound: "tag.not-found",
 	variableInvalid: "variable.invalid",
 	variableLimitReached: "variable.limit-reached",
 	variableNotFound: "variable.not-found"
 };
-controlErrorCode.eventSourceInvalid, controlErrorCode.eventSourceIdentityUnavailable, controlErrorCode.eventSourceNotFound, controlErrorCode.eventSourceConflict, controlErrorCode.authenticationRequired, controlErrorCode.authorizationDenied, controlErrorCode.bindingUnresolved, controlErrorCode.connectorActionNotFound, controlErrorCode.connectorAccessConflict, controlErrorCode.connectorAccessInvalid, controlErrorCode.connectorAccessRequired, controlErrorCode.connectorAccessUnsupported, controlErrorCode.connectorUnconfigured, controlErrorCode.connectorUnavailable, controlErrorCode.connectorConsoleUnconfigured, controlErrorCode.engineUnavailable, controlErrorCode.engineUnsupported, controlErrorCode.flowInvalid, controlErrorCode.flowRepairRequired, controlErrorCode.flowUpgradeRequired, controlErrorCode.flowNotFound, controlErrorCode.flowBusy, controlErrorCode.flowConflict, controlErrorCode.flowPresentationConflict, controlErrorCode.flowRevisionConflict, controlErrorCode.liveConflict, controlErrorCode.liveNotFound, controlErrorCode.pageInvalidCursor, controlErrorCode.publicationConflict, controlErrorCode.publicationNotFound, controlErrorCode.publicationUnsupported, controlErrorCode.publishOperationNotFound, controlErrorCode.routeNotFound, controlErrorCode.runConflict, controlErrorCode.runEventsExpired, controlErrorCode.runInvalid, controlErrorCode.runNotFound, controlErrorCode.runNotTerminal, controlErrorCode.runOverloaded, controlErrorCode.runWaitNotFound, controlErrorCode.triggerKeyInvalid, controlErrorCode.triggerKeyNotFound, controlErrorCode.triggerNotFound, controlErrorCode.variableInvalid, controlErrorCode.variableLimitReached, controlErrorCode.variableNotFound;
+controlErrorCode.eventSourceInvalid, controlErrorCode.eventSourceIdentityUnavailable, controlErrorCode.eventSourceNotFound, controlErrorCode.eventSourceConflict, controlErrorCode.authenticationRequired, controlErrorCode.authorizationDenied, controlErrorCode.bindingUnresolved, controlErrorCode.connectorActionNotFound, controlErrorCode.connectorAccessConflict, controlErrorCode.connectorAccessInvalid, controlErrorCode.connectorAccessRequired, controlErrorCode.connectorAccessUnsupported, controlErrorCode.connectorUnconfigured, controlErrorCode.connectorUnavailable, controlErrorCode.connectorConsoleUnconfigured, controlErrorCode.engineUnavailable, controlErrorCode.engineUnsupported, controlErrorCode.flowInvalid, controlErrorCode.flowRepairRequired, controlErrorCode.flowUpgradeRequired, controlErrorCode.flowNotFound, controlErrorCode.flowBusy, controlErrorCode.flowConflict, controlErrorCode.flowPresentationConflict, controlErrorCode.flowRevisionConflict, controlErrorCode.liveConflict, controlErrorCode.liveNotFound, controlErrorCode.pageInvalidCursor, controlErrorCode.publicationConflict, controlErrorCode.publicationNotFound, controlErrorCode.publicationUnsupported, controlErrorCode.publishOperationNotFound, controlErrorCode.routeNotFound, controlErrorCode.runConflict, controlErrorCode.runEventsExpired, controlErrorCode.runInvalid, controlErrorCode.runNotFound, controlErrorCode.runNotTerminal, controlErrorCode.runOverloaded, controlErrorCode.runWaitNotFound, controlErrorCode.triggerKeyInvalid, controlErrorCode.triggerKeyNotFound, controlErrorCode.triggerNotFound, controlErrorCode.tagInvalid, controlErrorCode.tagConflict, controlErrorCode.tagNotFound, controlErrorCode.variableInvalid, controlErrorCode.variableLimitReached, controlErrorCode.variableNotFound;
 var ApiError = class extends Error {
 	constructor(status, code, message, details) {
 		super(message);
@@ -10572,7 +10703,7 @@ function decodeEntries(values, current) {
 	return parsed.data;
 }
 //#endregion
-//#region src/control/common/providerIconSprite.ts
+//#region src/connector/common/providerIconSprite.ts
 /** Optional artwork must never make an otherwise usable catalog unavailable. */
 function providerIconAppearance(metadata, position) {
 	if (!metadata || typeof metadata != "object" || !position || typeof position != "object") return {};
@@ -11004,6 +11135,30 @@ function connectorProvider(value) {
 	};
 }
 //#endregion
+//#region src/event-source/common/view.ts
+var id$2 = string$1().min(1).max(256);
+/** Public projection of a source that Connector validates and Open Flow exposes unchanged. */
+var eventSourceViewSchema = object({
+	appId: id$2.nullable(),
+	workspaceId: id$2.optional(),
+	installationId: id$2.optional(),
+	organizationId: id$2.optional(),
+	projectId: id$2.optional(),
+	projectKey: id$2.optional(),
+	subscriptionStatus: _enum([
+		"idle",
+		"pending",
+		"ready",
+		"error"
+	]).optional(),
+	lastError: string$1().optional(),
+	signingSecretConfigured: boolean().optional(),
+	manageSubscriptions: boolean().nullable(),
+	verificationTokenConfigured: boolean().nullable(),
+	encryptKeyConfigured: boolean().nullable(),
+	verifiedAt: string$1().nullable()
+});
+//#endregion
 //#region src/control/common/eventSources.ts
 var id$1 = string$1().min(1).max(256);
 var eventType = string$1().regex(/^[a-z][a-z0-9_.:]{0,127}$/);
@@ -11023,29 +11178,12 @@ var eventSourceSchema = object({
 		"fireflies",
 		"jira"
 	]),
-	appId: id$1.nullable(),
-	workspaceId: id$1.optional(),
-	installationId: id$1.optional(),
-	organizationId: id$1.optional(),
-	projectId: id$1.optional(),
-	projectKey: id$1.optional(),
-	subscriptionStatus: _enum([
-		"idle",
-		"pending",
-		"ready",
-		"error"
-	]).optional(),
-	lastError: string$1().optional(),
-	signingSecretConfigured: boolean().optional(),
+	...eventSourceViewSchema.shape,
 	connectionId: id$1,
 	teamId: id$1.nullable(),
 	enabled: boolean(),
 	eventTypes: array(eventType),
-	manageSubscriptions: boolean().nullable(),
-	verificationTokenConfigured: boolean().nullable(),
-	encryptKeyConfigured: boolean().nullable(),
 	endpointUrl: string$1().nullable(),
-	verifiedAt: string$1().nullable(),
 	lastReceivedAt: string$1().nullable(),
 	updatedAt: string$1(),
 	consumers: array(object({
@@ -11054,21 +11192,6 @@ var eventSourceSchema = object({
 		triggerNodeId: id$1
 	}))
 });
-eventSourceSchema.pick({
-	appId: true,
-	workspaceId: true,
-	installationId: true,
-	organizationId: true,
-	projectId: true,
-	projectKey: true,
-	subscriptionStatus: true,
-	lastError: true,
-	signingSecretConfigured: true,
-	manageSubscriptions: true,
-	verificationTokenConfigured: true,
-	encryptKeyConfigured: true,
-	verifiedAt: true
-});
 function decodeEventSource(value) {
 	return eventSourceSchema.parse(value);
 }
@@ -11369,6 +11492,7 @@ function flow$1(value) {
 			publicationId: string(target.publicationId),
 			revisionId: string(target.revisionId)
 		} },
+		tagIds: source.tagIds === void 0 ? [] : strings(source.tagIds),
 		createdAt: string(source.createdAt),
 		...source.connectorTeamId == null ? {} : { connectorTeamId: string(source.connectorTeamId) },
 		draftRevisionId: string(source.draftRevisionId),
@@ -11803,6 +11927,33 @@ function randomId() {
 	return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}`;
 }
 //#endregion
+//#region src/control/common/tags.ts
+function normalizeFlowQuery(query = {}) {
+	return {
+		query: query.query?.trim().toLowerCase() ?? "",
+		tagIds: [...new Set(query.tagIds ?? [])].toSorted(),
+		untagged: query.untagged ?? false
+	};
+}
+function decodeTag(value) {
+	const source = record(value);
+	if (source.version != 1) return invalidResponse();
+	return {
+		tagId: string(source.tagId),
+		name: string(source.name),
+		version: 1
+	};
+}
+function decodeTagListItem(value) {
+	const source = record(value);
+	const referenceCount = integer(source.referenceCount);
+	if (referenceCount < 0) return invalidResponse();
+	return {
+		...decodeTag(source),
+		referenceCount
+	};
+}
+//#endregion
 //#region src/control/common/api.ts
 function decodeRunEvent(value) {
 	const source = record(value);
@@ -11906,7 +12057,7 @@ function decodeRunEvent(value) {
 			switch (kind) {
 				case "node.started": {
 					const nodeKind = payload.nodeKind;
-					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "decision" && nodeKind !== "openapi" && nodeKind !== "http-request" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "value" && nodeKind !== "outputs" && nodeKind !== "webhook-response" && nodeKind !== "workflow" && nodeKind !== "wait") return invalidResponse();
+					if (nodeKind !== void 0 && nodeKind !== "approval" && nodeKind !== "condition" && nodeKind !== "connector" && nodeKind !== "javascript" && nodeKind !== "decision" && nodeKind !== "openapi" && nodeKind !== "http-request" && nodeKind !== "dedupe" && nodeKind !== "llm" && nodeKind !== "agent" && nodeKind !== "value" && nodeKind !== "outputs" && nodeKind !== "webhook-response" && nodeKind !== "workflow" && nodeKind !== "wait") return invalidResponse();
 					return {
 						...base,
 						kind,
@@ -12033,6 +12184,10 @@ var ControlClient = class {
 	}
 	async listFlows(options = {}) {
 		const parameters = new URLSearchParams();
+		const filter = normalizeFlowQuery(options);
+		if (filter.query) parameters.set("query", filter.query);
+		if (filter.tagIds.length) parameters.set("tagIds", filter.tagIds.join(","));
+		if (filter.untagged) parameters.set("untagged", "true");
 		if (options.cursor != null) parameters.set("cursor", options.cursor);
 		if (options.limit != null) parameters.set("limit", String(options.limit));
 		if (options.includeTotal != null) parameters.set("includeTotal", String(options.includeTotal));
@@ -12122,15 +12277,17 @@ var ControlClient = class {
 				file,
 				name: options.name,
 				teamId: options.teamId,
+				tagIds: options.tagIds,
 				version: 1
 			})
 		}));
 	}
-	async createFlow(name, idempotencyKey = `flow-${randomId()}`, teamId) {
+	async createFlow(name, idempotencyKey = `flow-${randomId()}`, teamId, tagIds) {
 		return flow$1(await this.request("/v1/flows", {
 			body: JSON.stringify({
 				name,
 				...teamId == null ? {} : { teamId },
+				...tagIds == null ? {} : { tagIds },
 				version: 1
 			}),
 			headers: { "idempotency-key": idempotencyKey },
@@ -12165,15 +12322,68 @@ var ControlClient = class {
 		if (source.version != 1 || !Array.isArray(source.listeners)) return invalidResponse();
 		return source.listeners.map(errorListener);
 	}
-	async renameFlow(flowId, name) {
-		return flow$1(await this.request(`/v1/flows/${segment(flowId)}`, {
+	async listTags(signal) {
+		const source = record(await this.request("/v1/tags", { signal }));
+		if (source.version != 1 || !Array.isArray(source.tags)) return invalidResponse();
+		return {
+			tags: source.tags.map(decodeTagListItem),
+			version: 1
+		};
+	}
+	async createTag(name) {
+		return decodeTag(await this.request("/v1/tags", {
+			method: "POST",
 			body: JSON.stringify({
 				name,
 				version: 1
-			}),
-			method: "PATCH"
+			})
+		}));
+	}
+	async renameTag(tagId, name) {
+		return decodeTag(await this.request(`/v1/tags/${segment(tagId)}`, {
+			method: "PATCH",
+			body: JSON.stringify({
+				name,
+				version: 1
+			})
 		}));
 	}
+	async deleteTag(tagId) {
+		if (record(await this.request(`/v1/tags/${segment(tagId)}`, { method: "DELETE" })).version != 1) invalidResponse();
+	}
+	async setFlowTags(flowId, tagIds) {
+		return flow$1(await this.request(`/v1/flows/${segment(flowId)}/tags`, {
+			method: "PUT",
+			body: JSON.stringify({
+				tagIds,
+				version: 1
+			})
+		}));
+	}
+	async updateFlow(flowId, changes) {
+		return flow$1(await this.request(`/v1/flows/${segment(flowId)}`, {
+			method: "PATCH",
+			body: JSON.stringify({
+				...changes,
+				version: 1
+			})
+		}));
+	}
+	async getFlowState(flowId, scope, values = false) {
+		const result = flowStateViewSchema.safeParse(await this.request(`/v1/flows/${segment(flowId)}/state?scope=${scope}&values=${values}`));
+		return result.success && result.data.scope === scope ? result.data : invalidResponse();
+	}
+	async clearFlowState(flowId, scope, key) {
+		const source = record(await this.request(`/v1/flows/${segment(flowId)}/state?scope=${scope}${key == null ? "" : `&key=${encodeURIComponent(key)}`}`, { method: "DELETE" }));
+		if (source.version !== 1 || source.cleared !== true) invalidResponse();
+	}
+	async clearFlowDedupe(flowId, scope, space) {
+		const source = record(await this.request(`/v1/flows/${segment(flowId)}/dedupe?scope=${scope}&space=${encodeURIComponent(space)}`, { method: "DELETE" }));
+		if (source.version !== 1 || source.cleared !== true) invalidResponse();
+	}
+	async renameFlow(flowId, name) {
+		return this.updateFlow(flowId, { name });
+	}
 	async deleteFlow(flowId) {
 		return flow$1(await this.request(`/v1/flows/${segment(flowId)}`, { method: "DELETE" }));
 	}
@@ -12925,6 +13135,9 @@ function tool(description, schema, readOnly, idempotent = true) {
 	};
 }
 var mcpTools = {
+	flow_state: tool("Inspect Flow state usage, business keys and deduplication spaces. Values are omitted unless requested. Scope is required.", stateQuerySchema.extend({ flowId: flow }), true),
+	flow_state_clear: tool("Delete one business state key or clear all business values. Explicit draft/live scope is required; live changes production state immediately.", stateClearSchema.extend({ flowId: flow }), false),
+	flow_dedupe_clear: tool("Clear one deduplication space (flow or node:<id>). Explicit draft/live scope is required; live changes production history immediately.", dedupeClearSchema.extend({ flowId: flow }), false),
 	flow_canvas: tool("Broadcast a transient canvas command to connected Workbenches viewing this Flow. Success only confirms Server broadcast, not delivery or execution. No replay, session selection or Presentation save. Pan uses screen pixels (positive right/down); zoom is an absolute ratio (0.1–3); fit includes all nodes. Repeating pan moves again.", strictObject({
 		flowId: flow,
 		command: canvasCommandSchema