@oomol-lab/open-flow 0.1.0-beta.85 → 0.1.0-beta.87

package/dist/render/node/index.js

@@ -26,7 +26,7 @@ function dequal(foo, bar) {
 	return foo !== foo && bar !== bar;
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/util.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/util.js
 function getEnumValues(entries) {
 	const numericValues = Object.values(entries).filter((v) => typeof v === "number");
 	return Object.entries(entries).filter(([k, _]) => numericValues.indexOf(+k) === -1).map(([_, v]) => v);
@@ -351,6 +351,17 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
 	return typeof message === "string" ? message : message?.message;
 }
+/** The leading size checks of `defChecks` that set an upper bound, each paired with it. */
+function sizeCaps(defChecks) {
+	const caps = [];
+	for (const ch of defChecks ?? []) {
+		const d = ch._zod.def;
+		if (!/_(length|size)$|_equals$/.test(d.check)) break;
+		const max = d.maximum ?? d.length ?? d.size;
+		if (max >= 0) caps.push([max, ch]);
+	}
+	return caps;
+}
 function attachSchema(issues, start, inst) {
 	var _a;
 	for (let i = start; i < issues.length; i++) (_a = issues[i]).schema ?? (_a.schema = inst);
@@ -567,7 +578,7 @@ function constantCatch(value) {
 	return fn;
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/core.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/core.js
 var _a$1;
 var _zodDesc = {
 	value: void 0,
@@ -673,7 +684,7 @@ function config(newConfig) {
 	return globalConfig;
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/errors.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/errors.js
 function _getMessage() {
 	const internals = this._zod;
 	internals.message ?? (internals.message = JSON.stringify(internals.def, jsonStringifyReplacer, 2));
@@ -789,7 +800,7 @@ function formatError(error, mapper = (issue) => issue.message) {
 	return fieldErrors;
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/parse.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/parse.js
 function finalizeParams(callee, params) {
 	return {
 		callee: params?.callee ?? callee,
@@ -992,7 +1003,7 @@ var _safeDecodeAsync = (_Err) => async (schema, value, _ctx) => {
 	return _safeParseAsync(_Err)(schema, value, _ctx);
 };
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/regexes.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/regexes.js
 /**
 * @deprecated CUID v1 is deprecated by its authors due to information leakage
 * (timestamps embedded in the id). Use {@link cuid2} instead.
@@ -1065,7 +1076,7 @@ var _null$2 = /^null$/i;
 var lowercase = /^[^A-Z]*$/;
 var uppercase = /^[^a-z]*$/;
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/checks.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/checks.js
 var $ZodCheck = /*@__PURE__*/ $constructor("$ZodCheck", (inst, def) => {
 	var _a;
 	inst._zod ?? (inst._zod = {});
@@ -1361,7 +1372,7 @@ var $ZodCheckOverwrite = /*@__PURE__*/ $constructor("$ZodCheckOverwrite", (inst,
 	};
 });
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/doc.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/doc.js
 var Doc = class {
 	constructor(args = [], closed = {}) {
 		this.content = [];
@@ -1395,14 +1406,14 @@ var Doc = class {
 	}
 };
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/versions.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/versions.js
 var version = {
 	major: 4,
 	minor: 6,
-	patch: 5
+	patch: 7
 };
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/schemas.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/schemas.js
 var $ZodType = /*@__PURE__*/ $constructor("$ZodType", (inst, def) => {
 	var _a;
 	inst ?? (inst = {});
@@ -1915,6 +1926,26 @@ var $ZodNever = /*@__PURE__*/ $constructor("$ZodNever", (inst, def) => {
 		return payload;
 	};
 });
+function capSize(inst, size) {
+	const caps = sizeCaps(inst._zod.def.checks);
+	if (!caps.length) return;
+	const cap = Math.min(...caps.map((c) => c[0]));
+	const parse = inst._zod.parse;
+	inst._zod.parse = (payload, ctx) => {
+		const n = size(payload.value);
+		if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+			for (const [max, ch] of sizeCaps(inst._zod.def.checks)) if (n > max && ch._zod.def.when(payload)) {
+				const start = payload.issues.length;
+				ch._zod.check(payload);
+				payload.issues[start].continue = false;
+				attachSchema(payload.issues, start, inst);
+				return payload;
+			}
+		}
+		return parse(payload, ctx);
+	};
+}
+var arraySize = (input) => Array.isArray(input) ? input.length : -1;
 function handleArrayResult(result, final, index) {
 	if (result.issues.length) final.issues.push(...prefixIssues(index, result.issues));
 	final.value[index] = result.value;
@@ -1952,6 +1983,7 @@ var $ZodArray = /*@__PURE__*/ $constructor("$ZodArray", (inst, def) => {
 		if (proms.length) return Promise.all(proms).then(() => payload);
 		return payload;
 	};
+	capSize(inst, arraySize);
 });
 function handlePropertyResult(result, final, key, input, optin, optout) {
 	const isPresent = key in input;
@@ -2870,7 +2902,7 @@ function handleRefineResult(result, payload, input, inst) {
 	}
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/memoizer.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/memoizer.js
 var $ZodCyclicError = class extends Error {
 	constructor() {
 		super(`Cannot parse a reference cycle that closes through a transform`);
@@ -3123,7 +3155,7 @@ function isBackEdge(ctx, value) {
 	return backEdges !== void 0 && isRef(value) && backEdges.has(value);
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/locales/en.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/locales/en.js
 var error = () => {
 	const Sizable = {
 		string: {
@@ -3231,7 +3263,7 @@ function en_default() {
 	return { localeError: error() };
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/registries.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/registries.js
 var _a;
 var $ZodRegistry = class {
 	constructor() {
@@ -3278,7 +3310,7 @@ function registry() {
 (_a = globalThis).__zod_globalRegistry ?? (_a.__zod_globalRegistry = registry());
 var globalRegistry = globalThis.__zod_globalRegistry;
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/api.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/api.js
 function snapshotChecks(def) {
 	if (def.checks) def.checks = [...def.checks];
 	return def;
@@ -3794,7 +3826,7 @@ function _check(fn, params) {
 	return ch;
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/to-json-schema.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/to-json-schema.js
 function assignProps(target, ...sources) {
 	for (const source of sources) for (const key of Reflect.ownKeys(source)) if (Object.prototype.propertyIsEnumerable.call(source, key)) assignProp(target, key, source[key]);
 	return target;
@@ -4238,7 +4270,7 @@ var createStandardJSONSchemaMethod = (schema, io, processors = {}) => (params) =
 	return finalize(ctx, schema);
 };
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/core/json-schema-processors.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/core/json-schema-processors.js
 var narrowMin = (agg, key, value) => {
 	if (agg[key] === void 0 || value > agg[key]) agg[key] = value;
 };
@@ -4699,7 +4731,7 @@ var lazyProcessor = (schema, ctx, _json, params) => {
 	seen.ref = innerType;
 };
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/classic/errors.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/errors.js
 var _installedErrorProtos = /* @__PURE__ */ new WeakSet([Object.prototype, Error.prototype]);
 function _lazyMethod(proto, key, make) {
 	Object.defineProperty(proto, key, {
@@ -4749,7 +4781,7 @@ var initializer = (inst, issues) => {
 };
 var ZodRealError = /*@__PURE__*/ $constructor("ZodError", initializer, void 0, { Parent: Error });
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/classic/parse.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/parse.js
 var parse = /* @__PURE__ */ _parse(ZodRealError);
 var parseAsync = /* @__PURE__ */ _parseAsync(ZodRealError);
 var safeParse = /* @__PURE__ */ _safeParse(ZodRealError);
@@ -4763,7 +4795,7 @@ var safeDecode = /* @__PURE__ */ _safeDecode(ZodRealError);
 var safeEncodeAsync = /* @__PURE__ */ _safeEncodeAsync(ZodRealError);
 var safeDecodeAsync = /* @__PURE__ */ _safeDecodeAsync(ZodRealError);
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/classic/schemas.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/schemas.js
 function _ensureDefaultLocale() {
 	if (!globalConfig.localeError) config(en_default());
 }
@@ -5695,7 +5727,7 @@ function preprocess(fn, schema) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.bun/zod@4.6.5/node_modules/zod/v4/classic/iso.js
+//#region ../../node_modules/.bun/zod@4.6.7/node_modules/zod/v4/classic/iso.js
 function datetime(params) {
 	return /* @__PURE__ */ _isoDateTime(ZodISODateTime, params);
 }
@@ -8456,6 +8488,32 @@ function createSchemaComparer() {
 }
 createSchemaComparer();
 //#endregion
+//#region src/flow/common/requestParameters.ts
+var requestParameterSchema = strictObject({
+	mode: _enum(["fields", "object"]).default("fields"),
+	names: array(string()).default([])
+});
+var connectorProxyExecutorSchema = strictObject({
+	providerId: string().min(1),
+	connectionId: string().optional(),
+	method: _enum([
+		"GET",
+		"POST",
+		"PUT",
+		"PATCH",
+		"DELETE"
+	]).default("GET"),
+	query: requestParameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	headers: requestParameterSchema.default({
+		mode: "fields",
+		names: []
+	}),
+	bodyFormat: _enum(["none", "json"]).default("none")
+}).extend({ kind: literal("connector-proxy") });
+//#endregion
 //#region src/decision/common/decision.ts
 function isDecisionExecutor(executor) {
 	return executor.kind === "decision";
@@ -8562,12 +8620,6 @@ var httpHostPattern = /^(?:\*\.)?(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0
 function isHttpHost(value) {
 	return httpHostPattern.test(value) && (!value.startsWith("*.") || value.slice(2).includes("."));
 }
-//#endregion
-//#region src/http/common/httpRequest.ts
-var parameterSchema = strictObject({
-	mode: _enum(["fields", "object"]).default("fields"),
-	names: array(string()).default([])
-});
 var httpRequestExecutorSchema = strictObject({
 	method: _enum([
 		"GET",
@@ -8578,11 +8630,11 @@ var httpRequestExecutorSchema = strictObject({
 		"HEAD",
 		"OPTIONS"
 	]).default("GET"),
-	query: parameterSchema.default({
+	query: requestParameterSchema.default({
 		mode: "fields",
 		names: []
 	}),
-	headers: parameterSchema.default({
+	headers: requestParameterSchema.default({
 		mode: "fields",
 		names: []
 	}),
@@ -8954,7 +9006,8 @@ var managedFields = object({
 			revisionId: text
 		}),
 		httpRequestExecutorSchema,
-		skipDuplicatesExecutorSchema
+		skipDuplicatesExecutorSchema,
+		connectorProxyExecutorSchema
 	])
 });
 var managed = managedFields.transform(limitDecisionTask);
@@ -9209,7 +9262,8 @@ var revision = object({
 		literal(10),
 		literal(11),
 		literal(12),
-		literal(13)
+		literal(13),
+		literal(14)
 	]),
 	document,
 	modules: record$1(text, module)
@@ -9410,6 +9464,7 @@ array(union([...new Map(Object.entries(shapes).map(([kind, shape]) => [kind, sha
 	...shape
 })])).values()])).min(1);
 function checkModelVersion(content) {
+	if (content.modelVersion < 14 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind === "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind === "connector-proxy")) throw new TypeError("Custom API Request requires Flow model v14.");
 	if (content.modelVersion < 13 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind === "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind === "skip-duplicates")) throw new Error("Skip Duplicates requires Flow model v13.");
 	if (content.modelVersion < 12 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "moduleId" in candidateNode.task && candidateNode.task.capabilities?.some((item) => item.kind == "http"))) throw new TypeError("Code HTTP access requires Flow model version 12.");
 	if (content.modelVersion < 11 && Object.values(content.document.graph.nodes).some((candidateNode) => candidateNode.kind == "task" && "executor" in candidateNode.task && candidateNode.task.executor.kind == "http-request")) throw new TypeError("HTTP Request requires Flow model version 11.");

package/dist/render/node/licenses.md

@@ -50,7 +50,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 THE SOFTWARE.
 
-## zod - 4.6.5 (MIT)
+## zod - 4.6.7 (MIT)
 
 MIT License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oomol-lab/open-flow",
-  "version": "0.1.0-beta.85",
+  "version": "0.1.0-beta.87",
   "description": "TypeScript contracts and Browser runtime for Open Flow.",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {

package/skills/open-flow/references/flow-authoring.md

@@ -289,19 +289,20 @@ unavailable action and an action lacking an active Connection are different
 problems. Actions marked `authenticated: false` need no account. Connection
 selection rules come from the selected node contract.
 
-For Connector Tasks, independent Code Actions, Agent tools and notifications, an omitted `connectionId` means unconfigured; `connectionId: ""` explicitly defers account configuration. Deferred selections pass account readiness checks but fail with `connector.connection-required` if invoked. Deferred Agent tools are excluded from the callable tool set. Provider Triggers still require a nonempty account ID. Public edits and portable exports preserve the empty string; clear the field to return to the unconfigured state.
-
-| Capability                      | Relevant schema and configuration                                                                                                                                                                                                   |
-| ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| Provider read or write          | `connector`: discovered `action`, optional `connectionId`, named input bindings.                                                                                                                                                    |
-| Provider event                  | `poll` or `integration`: discovered `key`, Connection and any static inputs; polling also has a schedule.                                                                                                                           |
-| Manual, HTTP or scheduled entry | `start`, `webhook`, `cron`: workflow `inputDefs`, HTTP body fields, or schedule.                                                                                                                                                    |
-| Workflow failure handler        | `error`: published upstream Flows' automatic Run failures; not a node-level catch or a handler for manual Run failures.                                                                                                             |
-| Call another workflow           | `workflow`: select an owned published Flow ID; inputs and outputs derive from its saved contract. Use `node.refresh` to update it.                                                                                                  |
-| Single HTTP request             | `http-request`: method, parameter modes, authentication, body and response configuration; URL and request values use public inputs.                                                                                                 |
-| Fixed HTTP operation            | `openapi`: an OpenAPI source, path and method; resolved authentication choices and ports appear in node details.                                                                                                                    |
-| Reusable constants              | `value`: named JSON values and optional output constraints.                                                                                                                                                                         |
-| Durable interaction             | `wait`, `approval`: prompt and named inputs; resume through the Run's Wait ID. Wait additionally supports optional `config.autoContinue` with `{kind:"after",durationMs:86400000}` or `{kind:"at",at:"2026-10-25T10:00:00+08:00"}`. |
+For Connector Tasks, Provider API requests, independent Code Actions, Agent tools and notifications, an omitted `connectionId` means unconfigured; `connectionId: ""` explicitly defers account configuration. Deferred selections pass account readiness checks but fail with `connector.connection-required` if invoked. Deferred Agent tools are excluded from the callable tool set. Provider Triggers still require a nonempty account ID. Public edits and portable exports preserve the empty string; clear the field to return to the unconfigured state.
+
+| Capability                      | Relevant schema and configuration                                                                                                                                                                                                                                                                                                                                                   |
+| ------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Provider read or write          | `connector`: discovered `action`, optional `connectionId`, named input bindings.                                                                                                                                                                                                                                                                                                    |
+| Unlisted Provider API           | `connector-proxy`: `providerId`, optional `connectionId`, method, Query/Header modes and none/JSON body. Bind required `endpoint` and request data through inputs. Query accepts scalar values without arrays. Outputs are complete `body`, `statusCode`, `headers` and nullable `bodyEncoding`. Upstream 4xx/5xx remains output; Proxy permission is independent of Action grants. |
+| Provider event                  | `poll` or `integration`: discovered `key`, Connection and any static inputs; polling also has a schedule.                                                                                                                                                                                                                                                                           |
+| Manual, HTTP or scheduled entry | `start`, `webhook`, `cron`: workflow `inputDefs`, HTTP body fields, or schedule.                                                                                                                                                                                                                                                                                                    |
+| Workflow failure handler        | `error`: published upstream Flows' automatic Run failures; not a node-level catch or a handler for manual Run failures.                                                                                                                                                                                                                                                             |
+| Call another workflow           | `workflow`: select an owned published Flow ID; inputs and outputs derive from its saved contract. Use `node.refresh` to update it.                                                                                                                                                                                                                                                  |
+| Single HTTP request             | `http-request`: method, parameter modes, authentication, body and response configuration; URL and request values use public inputs.                                                                                                                                                                                                                                                 |
+| Fixed HTTP operation            | `openapi`: an OpenAPI source, path and method; resolved authentication choices and ports appear in node details.                                                                                                                                                                                                                                                                    |
+| Reusable constants              | `value`: named JSON values and optional output constraints.                                                                                                                                                                                                                                                                                                                         |
+| Durable interaction             | `wait`, `approval`: prompt and named inputs; resume through the Run's Wait ID. Wait additionally supports optional `config.autoContinue` with `{kind:"after",durationMs:86400000}` or `{kind:"at",at:"2026-10-25T10:00:00+08:00"}`.                                                                                                                                                 |
 
 Connector and LLM services are configured on the Server. Missing capabilities
 should be described in terms of the required operation or event, without silently

package/src/base/common/jsonSchema.ts

@@ -0,0 +1,11 @@
+import { toPlainObject } from '@wopjs/cast'
+
+/** Keep local definition references usable when a property becomes a standalone schema. */
+export function propertySchemaWithDefinitions(root: Readonly<Record<string, unknown>>, schema: unknown): unknown {
+  const property = toPlainObject(schema)
+  if (property == null) return schema
+  const result: Record<string, unknown> = Object.assign({}, property)
+  if (result.$defs == null && root.$defs != null) result.$defs = root.$defs
+  if (result.definitions == null && root.definitions != null) result.definitions = root.definitions
+  return result
+}

package/src/connector/common/actionSchema.ts

@@ -1,4 +1,5 @@
 import { toPlainObject } from '@wopjs/cast'
+import { propertySchemaWithDefinitions } from '../../base/common/jsonSchema.ts'
 
 export interface ConnectorActionPorts {
   readonly inputs: readonly {
@@ -69,8 +70,9 @@ function inputPorts(schema: unknown): ConnectorActionPorts['inputs'] {
 
 export function connectorOutputMode(schema: unknown): 'fields' | 'value' {
   const root = toPlainObject(schema)
-  const properties = toPlainObject(root?.properties)
-  return (properties != null && Object.keys(properties).length > 0) || (root?.type == 'object' && root.additionalProperties === false) ? 'fields' : 'value'
+  const patterns = toPlainObject(root?.patternProperties)
+  // Only closed objects without dynamic keys can be represented completely by named ports.
+  return root?.type == 'object' && root.additionalProperties === false && (patterns == null || Object.keys(patterns).length == 0) ? 'fields' : 'value'
 }
 
 function outputPorts(schema: unknown): ConnectorActionPorts['outputs'] {
@@ -88,15 +90,6 @@ function outputPorts(schema: unknown): ConnectorActionPorts['outputs'] {
   }))
 }
 
-function propertySchemaWithDefinitions(root: Record<string, unknown>, schema: unknown): unknown {
-  const property = toPlainObject(schema)
-  if (property == null) return schema
-  const result: Record<string, unknown> = Object.assign({}, property)
-  if (result.$defs == null && root.$defs != null) result.$defs = root.$defs
-  if (result.definitions == null && root.definitions != null) result.definitions = root.definitions
-  return result
-}
-
 function schemaDescription(root: unknown, schema: unknown): string | undefined {
   for (const object of referencedSchemas(root, schema)) {
     if (typeof object.description == 'string') return object.description

package/src/connector/common/proxy.ts

@@ -1,5 +1,19 @@
 import type { SourceOperation, SourceReferenceOperation } from '../../event-source/common/definition.ts'
+import type { InputMapping, InputPort, ManagedTaskDefinitionOf, TaskDefinitionBase } from '../../flow/common/model.ts'
+import type { RequestTaskNode } from '../../flow/common/requestParameters.ts'
 import type { JsonValue } from '../../types/index.ts'
+
+import { z } from 'zod'
+import {
+  requestParameterSchema,
+  requestParameterHandle,
+  requestParameterIssues,
+  requestParameterPorts,
+  requestInputMappings,
+  retainRequestPorts,
+  withRequestParameterFields,
+  withRequestParameterSource,
+} from '../../flow/common/requestParameters.ts'
 export type TriggerOperationRequest =
   | { readonly operation: 'sourceReference'; readonly request: SourceReferenceOperation }
   | { readonly operation: 'source'; readonly request: SourceOperation }
@@ -36,9 +50,147 @@ export interface ConnectorProxyRequest {
 export interface ConnectorProxyResult {
   readonly data: unknown
   readonly status: number
+  readonly headers?: Readonly<Record<string, string>>
+  readonly bodyEncoding?: 'base64'
 }
 
 export interface ConnectorProxy {
   trigger?(request: TriggerOperationRequest, signal?: AbortSignal): Promise<unknown>
   execute(request: ConnectorProxyRequest, signal?: AbortSignal): Promise<ConnectorProxyResult>
 }
+
+export const connectorProxyConfigSchema = z.strictObject({
+  providerId: z.string().min(1),
+  connectionId: z.string().optional(),
+  method: z.enum(['GET', 'POST', 'PUT', 'PATCH', 'DELETE']).default('GET'),
+  query: requestParameterSchema.default({ mode: 'fields', names: [] }),
+  headers: requestParameterSchema.default({ mode: 'fields', names: [] }),
+  bodyFormat: z.enum(['none', 'json']).default('none'),
+})
+export type ConnectorProxyConfig = z.infer<typeof connectorProxyConfigSchema>
+export interface ConnectorProxyExecutor extends ConnectorProxyConfig {
+  readonly kind: 'connector-proxy'
+}
+export const connectorProxyExecutorSchema = connectorProxyConfigSchema.extend({ kind: z.literal('connector-proxy') })
+export const connectorProxyQueryValueSchema = { type: ['string', 'number', 'boolean', 'null'] }
+export const connectorProxyQuerySchema = { type: 'object', additionalProperties: connectorProxyQueryValueSchema }
+export const connectorProxyHeaderSchema = { type: 'object', additionalProperties: { type: 'string' } }
+export const connectorProxyBodyInput: InputPort = { handle: 'body', jsonSchema: {}, nullable: true }
+
+export function connectorProxySupportsBody(method: ConnectorProxyRequest['method']): boolean {
+  return method !== 'GET'
+}
+
+export function connectorProxyHasBody(mapping: InputMapping | undefined, defaultValue?: JsonValue): boolean {
+  if (mapping?.kind === 'unset') return false
+  return mapping == null ? defaultValue !== undefined : mapping.kind === 'value' || mapping.sources.length > 0
+}
+
+export function connectorProxyTask(
+  config: ConnectorProxyConfig,
+  name = 'Custom API Request',
+  previous?: TaskDefinitionBase,
+): ManagedTaskDefinitionOf<ConnectorProxyExecutor> {
+  const { connectionId, ...settings } = config
+  const inputs: InputPort[] = [
+    { handle: 'endpoint', jsonSchema: { type: 'string' }, nullable: false },
+    ...requestParameterPorts(config, connectorProxyQuerySchema, connectorProxyQueryValueSchema, connectorProxyHeaderSchema),
+    ...(config.bodyFormat === 'none' ? [] : [connectorProxyBodyInput]),
+  ]
+  const outputs: InputPort[] = [
+    { handle: 'body', jsonSchema: {}, nullable: true },
+    { handle: 'statusCode', jsonSchema: { type: 'integer' }, nullable: false },
+    { handle: 'headers', jsonSchema: connectorProxyHeaderSchema, nullable: false },
+    { handle: 'bodyEncoding', jsonSchema: { const: 'base64' }, nullable: true },
+  ]
+  return {
+    name,
+    executor: { ...settings, ...(connectionId === undefined ? {} : { connectionId }), kind: 'connector-proxy' },
+    inputs: retainRequestPorts(inputs, previous?.inputs),
+    outputs: retainRequestPorts(outputs, previous?.outputs),
+  }
+}
+
+export function connectorProxyInputs(
+  mappings: Readonly<Record<string, InputMapping>>,
+  previous: RequestTaskNode['task'],
+  next: RequestTaskNode['task'],
+): Record<string, InputMapping> {
+  const inputs = requestInputMappings(mappings, previous, next)
+  const before = previous.executor?.kind === 'connector-proxy' ? (previous.executor as ConnectorProxyExecutor) : undefined
+  const after = next.executor?.kind === 'connector-proxy' ? (next.executor as ConnectorProxyExecutor) : undefined
+  if (before != null && after != null && connectorProxySupportsBody(before.method) && !connectorProxySupportsBody(after.method)) {
+    const bodyPort = next.inputs.find((port): port is InputPort => 'handle' in port && port.handle === 'body')
+    if (connectorProxyHasBody(inputs.body, bodyPort?.value)) inputs.body = { kind: 'unset' }
+  }
+  return inputs
+}
+
+export function connectorProxyIssues(config: ConnectorProxyConfig, hasBody = config.bodyFormat !== 'none') {
+  return [
+    ...requestParameterIssues(config),
+    ...(!connectorProxySupportsBody(config.method) && hasBody
+      ? [{ field: 'bodyFormat' as const, code: 'bodyUnsupported' as const, message: 'GET does not support a request body.' }]
+      : []),
+  ]
+}
+
+export function buildConnectorProxyRequest(
+  config: ConnectorProxyConfig,
+  input: Readonly<Record<string, JsonValue>>,
+  mappings?: Readonly<Record<string, InputMapping>>,
+  bodyDefault?: JsonValue,
+): ConnectorProxyRequest {
+  const hasBody = mappings == null ? input.body !== undefined : connectorProxyHasBody(mappings.body, bodyDefault)
+  if (connectorProxyIssues(config, hasBody).length > 0) throw new Error('Invalid Provider API request configuration.')
+  const endpoint = input.endpoint
+  if (typeof endpoint !== 'string' || !endpoint.trim()) throw new Error('An endpoint is required.')
+  const parameters = (group: 'query' | 'headers'): Record<string, JsonValue> => {
+    if (config[group].mode === 'object') {
+      const value = input[group]
+      if (value == null) return {}
+      if (typeof value !== 'object' || Array.isArray(value)) throw new Error('Expected a parameter object.')
+      return { ...(value as Readonly<Record<string, JsonValue>>) }
+    }
+    return Object.fromEntries(
+      config[group].names.flatMap((name) => {
+        const handle = requestParameterHandle(group, name)
+        if (mappings != null && (mappings[handle] == null || mappings[handle]?.kind === 'unset')) return []
+        const value = input[handle]
+        return value === undefined || (group === 'headers' && value === null) ? [] : [[name, value]]
+      }),
+    )
+  }
+  const query = parameters('query')
+  const headers = parameters('headers')
+  if (Object.values(query).some((value) => value !== null && !['string', 'number', 'boolean'].includes(typeof value)))
+    throw new Error('Query parameters require scalar values.')
+  if (Object.values(headers).some((value) => typeof value !== 'string')) throw new Error('Headers require text values.')
+  return {
+    endpoint,
+    method: config.method,
+    query: query as NonNullable<ConnectorProxyRequest['query']>,
+    headers: headers as Readonly<Record<string, string>>,
+    ...(hasBody ? { body: input.body ?? null } : {}),
+  }
+}
+
+export function withConnectorProxyParameterFields<Node extends RequestTaskNode>(
+  node: Node,
+  group: 'query' | 'headers',
+  values: Record<string, JsonValue>,
+): Node {
+  const executor = node.task.executor
+  if (executor?.kind !== 'connector-proxy') return node
+  const config = executor as ConnectorProxyExecutor
+  return withRequestParameterFields(node, group, values, config[group], (parameters) =>
+    connectorProxyTask({ ...config, [group]: parameters }, node.task.name, node.task),
+  )
+}
+
+export function withConnectorProxyParameterSource<Node extends RequestTaskNode>(node: Node, group: 'query' | 'headers', mapping?: InputMapping): Node {
+  const executor = node.task.executor
+  if (executor?.kind !== 'connector-proxy') return node
+  const config = executor as ConnectorProxyExecutor
+  return withRequestParameterSource(node, group, mapping, (parameters) => connectorProxyTask({ ...config, [group]: parameters }, node.task.name, node.task))
+}