@fungi.computer/braid 0.0.0-stage → 0.1.0

package/dist/runtime/graph-contract.d.ts

@@ -0,0 +1,788 @@
+import * as S from "effect/Schema";
+/** Provenance supplied only by the admitted published-Workflow trigger owner. */
+export declare const graphTriggerProvenanceSchema: S.Struct<{
+    readonly libraryInstallationId: S.String;
+    readonly workflowId: S.declare<string, unknown>;
+    readonly commit: S.declare<string, unknown>;
+    readonly triggerId: S.String;
+    readonly armedBy: S.String;
+    readonly nodeGitAccess: S.optionalKey<S.$Array<S.Struct<{
+        readonly graphId: S.optionalKey<S.String>;
+        readonly nodeId: S.String;
+        readonly gitAccess: S.declare<{
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            branches: string[];
+        } | {
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            access: "read";
+        }, {
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            branches: string[];
+        } | {
+            repository: {
+                kind: "installation";
+                installationId: string;
+                repository: string;
+            } | {
+                kind: "team-source";
+                repository: string;
+            };
+            access: "read";
+        }>;
+    }>>>;
+    /** The firing event's repository, resolving `$trigger.repository`. */
+    readonly repository: S.optionalKey<S.declare<string, string>>;
+}>;
+export type GraphTriggerProvenance = typeof graphTriggerProvenanceSchema.Type;
+declare const graphPublicationSchema: S.Struct<{
+    readonly installationId: S.String;
+    readonly workflowId: S.declare<string, unknown>;
+    readonly commit: S.declare<string, unknown>;
+    readonly digest: S.declare<string, unknown>;
+    readonly armedBy: S.declare<{
+        kind: "member";
+        memberId: string;
+    } | {
+        kind: "agent";
+        agentId: string;
+    } | {
+        kind: "team-key";
+        keyId: string;
+    }, unknown>;
+}>;
+export type GraphPublication = typeof graphPublicationSchema.Type;
+/**
+ * The run's declared delivery: the Agent Session that receives its ending,
+ * whoever started it. Declared at start or arming, never by a node.
+ */
+export declare const workflowRunDeliverySchema: S.Struct<{
+    readonly agentId: S.String;
+    readonly sessionId: S.String;
+}>;
+export type WorkflowRunDelivery = typeof workflowRunDeliverySchema.Type;
+/** The member who started or armed the run, or the Agent Session that did. */
+export declare const workflowMemberInitiatorSchema: S.Struct<{
+    readonly kind: S.Literal<"member">;
+    readonly memberId: S.String;
+}>;
+export type WorkflowMemberInitiator = typeof workflowMemberInitiatorSchema.Type;
+/** Trusted acquisition identity, never Workflow arguments or an Agent creator. */
+export declare const workflowAgentInitiatorSchema: S.Struct<{
+    readonly kind: S.Literal<"agent">;
+    readonly agentId: S.String;
+    readonly sessionId: S.String;
+    readonly grantorMemberId: S.String;
+}>;
+export type WorkflowAgentInitiator = typeof workflowAgentInitiatorSchema.Type;
+/** A key never becomes a principal of its own; the run always acts as its grantor. */
+export declare const workflowKeyInitiatorSchema: S.Struct<{
+    readonly kind: S.Literal<"key">;
+    readonly keyId: S.String;
+    readonly grantorMemberId: S.String;
+}>;
+export type WorkflowKeyInitiator = typeof workflowKeyInitiatorSchema.Type;
+export declare const workflowRunInitiatorSchema: S.Union<readonly [S.Struct<{
+    readonly kind: S.Literal<"member">;
+    readonly memberId: S.String;
+}>, S.Struct<{
+    readonly kind: S.Literal<"agent">;
+    readonly agentId: S.String;
+    readonly sessionId: S.String;
+    readonly grantorMemberId: S.String;
+}>, S.Struct<{
+    readonly kind: S.Literal<"key">;
+    readonly keyId: S.String;
+    readonly grantorMemberId: S.String;
+}>]>;
+export type WorkflowRunInitiator = typeof workflowRunInitiatorSchema.Type;
+/** The Agent Session stays host-side; a listing names only the Agent/key and its grantor. */
+export declare function wireRunInitiator(initiatedBy: WorkflowRunInitiator): Readonly<{
+    kind: "member";
+    memberId: string;
+}> | Readonly<{
+    kind: "agent";
+    agentId: string;
+    grantorMemberId: string;
+}> | Readonly<{
+    kind: "key";
+    keyId: string;
+    grantorMemberId: string;
+}>;
+export declare const workflowRunSourceValues: readonly ["manual", "schedule", "event", "agent", "key"];
+export declare const workflowRunSourceSchema: S.Literals<readonly ["manual", "schedule", "event", "agent", "key"]>;
+export type WorkflowRunSource = typeof workflowRunSourceSchema.Type;
+export declare const graphRunSchema: S.Struct<{
+    readonly teamId: S.String;
+    readonly runId: S.String;
+    readonly requestId: S.String;
+    readonly actorId: S.String;
+    /** Host-bound library for raw as well as published App starts; never guest input. */
+    readonly libraryInstallationId: S.optionalKey<S.String>;
+    /** The Computer the starting member pinned; `computer.*` work runs only there. */
+    readonly computerId: S.NullOr<S.String>;
+    readonly plan: S.Struct<{
+        readonly planDigest: S.String;
+        readonly definition: S.Struct<{
+            readonly format: S.Literal<"fungi.workflow/v1">;
+            readonly title: S.String;
+            readonly description: S.optionalKey<S.String>;
+            readonly apps: S.$Record<S.String, S.Struct<{
+                readonly appId: S.String;
+                readonly role: S.optionalKey<S.String>;
+            }>>;
+            readonly subgraphs: S.optionalKey<S.$Record<S.String, S.Struct<{
+                readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                readonly nodes: S.$Array<S.Union<readonly [S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"code">;
+                    readonly source: S.String;
+                    readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                    readonly output: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                    readonly values: S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"app">;
+                    readonly app: S.String;
+                    readonly method: S.String;
+                    readonly methodDigest: S.String;
+                    readonly values: S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+                    readonly gitAccess: S.optionalKey<S.declare<{
+                        binding: string;
+                        repository: string;
+                        branches: string[];
+                    } | {
+                        binding: string;
+                        repository: string;
+                        access: "read";
+                    }, {
+                        binding: string;
+                        repository: string;
+                        branches: string[];
+                    } | {
+                        binding: string;
+                        repository: string;
+                        access: "read";
+                    }>>;
+                    readonly retry: S.optionalKey<S.Struct<{
+                        readonly attempts: S.Number;
+                    }>>;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"review">;
+                    readonly title: S.String;
+                    readonly detail: S.optionalKey<S.String>;
+                    readonly show: S.$Array<S.Struct<{
+                        readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                        readonly port: S.String;
+                    }>>;
+                    readonly reviewers: S.Literals<readonly ["runner", "owners"]>;
+                    readonly timeout: S.Number;
+                    readonly choices: S.optionalKey<S.$Array<S.Struct<{
+                        readonly id: S.String;
+                        readonly label: S.String;
+                        readonly description: S.optionalKey<S.String>;
+                    }>>>;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"condition">;
+                    readonly test: S.Codec<import("../schema.js").Predicate, import("../schema.js").Predicate, never, never>;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"map">;
+                    readonly over: S.Struct<{
+                        readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                        readonly port: S.String;
+                    }>;
+                    readonly body: S.String;
+                    readonly concurrency: S.Number;
+                    readonly maxItems: S.Number;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"repeat">;
+                    readonly body: S.String;
+                    readonly maxRounds: S.Number;
+                    readonly until: S.Codec<import("../schema.js").Predicate, import("../schema.js").Predicate, never, never>;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"wait">;
+                    readonly for: S.Number;
+                }>, S.Struct<{
+                    readonly id: S.String;
+                    readonly kind: S.Literal<"transform">;
+                    readonly fields: S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+                }>]>>;
+                readonly edges: S.$Array<S.Struct<{
+                    readonly from: S.Struct<{
+                        readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                        readonly port: S.String;
+                    }>;
+                    readonly to: S.Struct<{
+                        readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                        readonly port: S.String;
+                    }>;
+                }>>;
+                readonly output: S.$Record<S.String, S.Struct<{
+                    readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                    readonly port: S.String;
+                }>>;
+            }>>>;
+            readonly triggers: S.optionalKey<S.$Array<S.Union<readonly [S.Struct<{
+                readonly id: S.String;
+                readonly on: S.Literal<"webhook">;
+                readonly title: S.optionalKey<S.String>;
+                readonly when: S.optionalKey<S.Codec<import("../schema.js").Predicate, import("../schema.js").Predicate, never, never>>;
+                readonly input: S.optionalKey<S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly on: S.Literal<"schedule">;
+                readonly title: S.optionalKey<S.String>;
+                readonly cron: S.Struct<{
+                    readonly expression: S.String;
+                    readonly timeZone: S.String;
+                }>;
+                readonly input: S.optionalKey<S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly on: S.Literal<"event">;
+                readonly title: S.optionalKey<S.String>;
+                readonly app: S.String;
+                readonly event: S.String;
+                readonly eventDigest: S.String;
+                readonly when: S.optionalKey<S.Codec<import("../schema.js").Predicate, import("../schema.js").Predicate, never, never>>;
+                readonly input: S.optionalKey<S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>>;
+                readonly repository: S.optionalKey<S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+            }>]>>>;
+            readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+            readonly nodes: S.$Array<S.Union<readonly [S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"code">;
+                readonly source: S.String;
+                readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                readonly output: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                readonly values: S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"app">;
+                readonly app: S.String;
+                readonly method: S.String;
+                readonly methodDigest: S.String;
+                readonly values: S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+                readonly gitAccess: S.optionalKey<S.declare<{
+                    binding: string;
+                    repository: string;
+                    branches: string[];
+                } | {
+                    binding: string;
+                    repository: string;
+                    access: "read";
+                }, {
+                    binding: string;
+                    repository: string;
+                    branches: string[];
+                } | {
+                    binding: string;
+                    repository: string;
+                    access: "read";
+                }>>;
+                readonly retry: S.optionalKey<S.Struct<{
+                    readonly attempts: S.Number;
+                }>>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"review">;
+                readonly title: S.String;
+                readonly detail: S.optionalKey<S.String>;
+                readonly show: S.$Array<S.Struct<{
+                    readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                    readonly port: S.String;
+                }>>;
+                readonly reviewers: S.Literals<readonly ["runner", "owners"]>;
+                readonly timeout: S.Number;
+                readonly choices: S.optionalKey<S.$Array<S.Struct<{
+                    readonly id: S.String;
+                    readonly label: S.String;
+                    readonly description: S.optionalKey<S.String>;
+                }>>>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"condition">;
+                readonly test: S.Codec<import("../schema.js").Predicate, import("../schema.js").Predicate, never, never>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"map">;
+                readonly over: S.Struct<{
+                    readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                    readonly port: S.String;
+                }>;
+                readonly body: S.String;
+                readonly concurrency: S.Number;
+                readonly maxItems: S.Number;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"repeat">;
+                readonly body: S.String;
+                readonly maxRounds: S.Number;
+                readonly until: S.Codec<import("../schema.js").Predicate, import("../schema.js").Predicate, never, never>;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"wait">;
+                readonly for: S.Number;
+            }>, S.Struct<{
+                readonly id: S.String;
+                readonly kind: S.Literal<"transform">;
+                readonly fields: S.$Record<S.String, S.Codec<import("../schema.js").Mapping, import("../schema.js").Mapping, never, never>>;
+            }>]>>;
+            readonly edges: S.$Array<S.Struct<{
+                readonly from: S.Struct<{
+                    readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                    readonly port: S.String;
+                }>;
+                readonly to: S.Struct<{
+                    readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                    readonly port: S.String;
+                }>;
+            }>>;
+            readonly output: S.$Record<S.String, S.Struct<{
+                readonly node: S.Union<readonly [S.String, S.Literals<readonly ["$input", "$item"]>]>;
+                readonly port: S.String;
+            }>>;
+        }>;
+        readonly catalog: S.$Record<S.String, S.Struct<{
+            readonly methods: S.$Record<S.String, S.Struct<{
+                readonly digest: S.String;
+                readonly pending: S.optionalKey<S.Literal<true>>;
+                readonly description: S.String;
+                readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                readonly output: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+                readonly effect: S.Literals<readonly ["read", "write", "external"]>;
+                readonly approval: S.Literals<readonly ["none", "queue", "simulate"]>;
+                readonly requires: S.$Array<S.String>;
+            }>>;
+            readonly events: S.optionalKey<S.$Record<S.String, S.Struct<{
+                readonly digest: S.String;
+                readonly description: S.String;
+                readonly payload: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+            }>>>;
+        }>>;
+        readonly bindings: S.$Record<S.String, S.declare<{
+            kind: "team-source";
+        } | {
+            appId: string;
+            installationId: string;
+        }, {
+            kind: "team-source";
+        } | {
+            appId: string;
+            installationId: string;
+        }>>;
+        readonly estimatedSteps: S.Number;
+        readonly requiredBindings: S.$Array<S.Struct<{
+            readonly pending: S.optionalKey<S.Literal<true>>;
+            readonly description: S.String;
+            readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+            readonly output: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+            readonly effect: S.Literals<readonly ["read", "write", "external"]>;
+            readonly approval: S.Literals<readonly ["none", "queue", "simulate"]>;
+            readonly requires: S.$Array<S.String>;
+            readonly app: S.String;
+            readonly installationId: S.String;
+            readonly method: S.String;
+        }>>;
+    }>;
+    readonly input: S.$Record<S.String, S.Codec<S.Json, S.Json, never, never>>;
+    readonly ceiling: S.Struct<{
+        readonly nodes: S.$Array<S.Struct<{
+            readonly graphId: S.optionalKey<S.String>;
+            readonly nodeId: S.String;
+            readonly level: S.Literals<readonly ["read", "write"]>;
+            readonly capabilities: S.$Array<S.Literals<readonly ["agent.list", "agent.manage", "agent.rename", "agent.avatar", "agent.toolPolicy", "agent.read", "agent.send", "computer.list", "computer.readFile", "computer.writeFile", "computer.execute", "llm.generation", "media.generation", "games:servers", "git.repository", "apps.open", "apps.call", "app.storage", "app.events.emit", "team.workbenchHost", "marketplace.browse", "marketplace.purchase", "workflow.run", "workflow.publish", "workflow.arm", "world", "channels.read", "channels.personal.manage"]>>;
+            readonly bindings: S.$Array<S.Union<S.Struct<{
+                readonly name: S.Literal<"BACKGROUND" | "GIT" | "EVENTS" | "APPS" | "WORKFLOWS" | "APP_STORAGE" | "MEDIA" | "COMPUTER" | "INBOX" | "AGENTS">;
+                readonly operations: S.$Array<S.Literals<string[]>>;
+            }>[]>>;
+        }>>;
+        readonly nodeGitAccess: S.$Array<S.Struct<{
+            readonly graphId: S.optionalKey<S.String>;
+            readonly nodeId: S.String;
+            readonly gitAccess: S.declare<{
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }, {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }>;
+        }>>;
+    }>;
+    readonly trigger: S.optionalKey<S.Struct<{
+        readonly libraryInstallationId: S.String;
+        readonly workflowId: S.declare<string, unknown>;
+        readonly commit: S.declare<string, unknown>;
+        readonly triggerId: S.String;
+        readonly armedBy: S.String;
+        readonly nodeGitAccess: S.optionalKey<S.$Array<S.Struct<{
+            readonly graphId: S.optionalKey<S.String>;
+            readonly nodeId: S.String;
+            readonly gitAccess: S.declare<{
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }, {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }>;
+        }>>>;
+        /** The firing event's repository, resolving `$trigger.repository`. */
+        readonly repository: S.optionalKey<S.declare<string, string>>;
+    }>>;
+    readonly publication: S.optionalKey<S.Struct<{
+        readonly installationId: S.String;
+        readonly workflowId: S.declare<string, unknown>;
+        readonly commit: S.declare<string, unknown>;
+        readonly digest: S.declare<string, unknown>;
+        readonly armedBy: S.declare<{
+            kind: "member";
+            memberId: string;
+        } | {
+            kind: "agent";
+            agentId: string;
+        } | {
+            kind: "team-key";
+            keyId: string;
+        }, unknown>;
+    }>>;
+    readonly delivery: S.optionalKey<S.Struct<{
+        readonly agentId: S.String;
+        readonly sessionId: S.String;
+    }>>;
+    /** Recorded once, from the admitted preparation; never recomputed later. */
+    readonly source: S.Literals<readonly ["manual", "schedule", "event", "agent", "key"]>;
+    readonly initiatedBy: S.Union<readonly [S.Struct<{
+        readonly kind: S.Literal<"member">;
+        readonly memberId: S.String;
+    }>, S.Struct<{
+        readonly kind: S.Literal<"agent">;
+        readonly agentId: S.String;
+        readonly sessionId: S.String;
+        readonly grantorMemberId: S.String;
+    }>, S.Struct<{
+        readonly kind: S.Literal<"key">;
+        readonly keyId: S.String;
+        readonly grantorMemberId: S.String;
+    }>]>;
+}>;
+export type GraphRun = typeof graphRunSchema.Type;
+/** Host-owned identity of one App node execution within a graph run. */
+export declare const graphNodeContextSchema: S.Struct<{
+    readonly runId: S.String;
+    readonly graphId: S.optionalKey<S.String>;
+    readonly nodeId: S.String;
+    readonly iteration: S.String;
+    /** Pending-call poll identity, separate from retries of the same poll. */
+    readonly poll: S.optionalKey<S.Number>;
+    /** Opaque engine retry identity, never parsed as authority. */
+    readonly idempotencyKey: S.String;
+    readonly trigger: S.optionalKey<S.Struct<{
+        readonly libraryInstallationId: S.String;
+        readonly workflowId: S.declare<string, unknown>;
+        readonly commit: S.declare<string, unknown>;
+        readonly triggerId: S.String;
+        readonly armedBy: S.String;
+        readonly nodeGitAccess: S.optionalKey<S.$Array<S.Struct<{
+            readonly graphId: S.optionalKey<S.String>;
+            readonly nodeId: S.String;
+            readonly gitAccess: S.declare<{
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }, {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }>;
+        }>>>;
+        /** The firing event's repository, resolving `$trigger.repository`. */
+        readonly repository: S.optionalKey<S.declare<string, string>>;
+    }>>;
+    readonly gitAccess: S.optionalKey<S.declare<{
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        branches: string[];
+    } | {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        access: "read";
+    }, {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        branches: string[];
+    } | {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        access: "read";
+    }>>;
+}>;
+/** Execution coordinates alone do not attest a published Workflow. */
+export type GraphNodeContext = typeof graphNodeContextSchema.Type;
+/** Publication attribution from an admitted publisher App or trigger owner. */
+export declare const workflowRunContextSchema: S.Struct<{
+    readonly workflowId: S.declare<string, unknown>;
+    readonly armedBy: S.declare<{
+        kind: "member";
+        memberId: string;
+    } | {
+        kind: "agent";
+        agentId: string;
+    } | {
+        kind: "team-key";
+        keyId: string;
+    }, unknown>;
+    readonly runId: S.String;
+    readonly graphId: S.optionalKey<S.String>;
+    readonly nodeId: S.String;
+    readonly iteration: S.String;
+    /** Pending-call poll identity, separate from retries of the same poll. */
+    readonly poll: S.optionalKey<S.Number>;
+    /** Opaque engine retry identity, never parsed as authority. */
+    readonly idempotencyKey: S.String;
+    readonly trigger: S.optionalKey<S.Struct<{
+        readonly libraryInstallationId: S.String;
+        readonly workflowId: S.declare<string, unknown>;
+        readonly commit: S.declare<string, unknown>;
+        readonly triggerId: S.String;
+        readonly armedBy: S.String;
+        readonly nodeGitAccess: S.optionalKey<S.$Array<S.Struct<{
+            readonly graphId: S.optionalKey<S.String>;
+            readonly nodeId: S.String;
+            readonly gitAccess: S.declare<{
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }, {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                branches: string[];
+            } | {
+                repository: {
+                    kind: "installation";
+                    installationId: string;
+                    repository: string;
+                } | {
+                    kind: "team-source";
+                    repository: string;
+                };
+                access: "read";
+            }>;
+        }>>>;
+        /** The firing event's repository, resolving `$trigger.repository`. */
+        readonly repository: S.optionalKey<S.declare<string, string>>;
+    }>>;
+    readonly gitAccess: S.optionalKey<S.declare<{
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        branches: string[];
+    } | {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        access: "read";
+    }, {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        branches: string[];
+    } | {
+        repository: {
+            kind: "installation";
+            installationId: string;
+            repository: string;
+        } | {
+            kind: "team-source";
+            repository: string;
+        };
+        access: "read";
+    }>>;
+}>;
+export type WorkflowRunContext = typeof workflowRunContextSchema.Type;
+export {};