@fungi.computer/oyster 0.1.0 → 0.3.0

package/dist/standalone/workflow-trigger-host.js

@@ -37,8 +37,8 @@ export function createStandaloneWorkflowTriggerHost(options) {
         errors: standaloneTriggerErrors,
         runs: {
             ...runs,
-            async startCachedGraph(binding, request) {
-                const started = await runs.startCachedGraph(binding, request);
+            async startCachedGraph(binding, request, admission) {
+                const started = await runs.startCachedGraph(binding, request, admission);
                 // A replay re-records the same caller after a lost reply.
                 if (started.kind === "started" || started.kind === "replay")
                     options.recordCaller(started.runId, binding.armedBy, binding.computerId);

package/dist/standalone/workflow-webhooks.d.ts

@@ -0,0 +1,22 @@
+import { Hono } from "hono";
+import type { OysterEnv, OysterHost } from "../host.js";
+import type { StandaloneWorkflowEnv } from "./workflows.js";
+/** The root resolves the origin before this unauthenticated signed-delivery path. */
+export declare function standaloneWorkflowWebhookRoutes(env: Pick<StandaloneWorkflowEnv, "WORKFLOW_RUNS">, hostFor: (request: Request) => Promise<Pick<OysterHost, "installations"> | null>): import("hono/hono-base").HonoBase<import("hono/types").BlankEnv, {
+    "/api/installations/:installationId/workflows/webhooks/:bindingId": {
+        $all: {
+            input: {
+                param: {
+                    installationId: string;
+                } & {
+                    bindingId: string;
+                };
+            };
+            output: {};
+            outputFormat: string;
+            status: import("hono/utils/http-status").StatusCode;
+        };
+    };
+}, "/", "/api/installations/:installationId/workflows/webhooks/:bindingId">;
+/** Mounted only under the root's authenticated owner routes; the DO re-admits. */
+export declare function standaloneWorkflowWebhookControls(env: Pick<StandaloneWorkflowEnv, "WORKFLOW_RUNS">, hostFor: () => Promise<Pick<OysterHost, "installations">>): Hono<OysterEnv>;

package/dist/standalone/workflow-webhooks.js

@@ -0,0 +1,39 @@
+import { Hono } from "hono";
+import { bodyLimit } from "hono/body-limit";
+import * as Schema from "effect/Schema";
+import { workflowWebhookCommandSchema } from "../webhooks.js";
+const refused = () => Response.json({ error: "refused" }, { status: 403, headers: { "cache-control": "no-store" } });
+/** Address an existing library, never use an opaque binding ID as a DO name. */
+async function libraryExists(host, installationId) {
+    const installation = await host.installations.get(installationId);
+    return (installation?.status === "enabled" &&
+        installation.authority.approvedGrants.some((grant) => grant.capability === "workflow.run"));
+}
+/** The root resolves the origin before this unauthenticated signed-delivery path. */
+export function standaloneWorkflowWebhookRoutes(env, hostFor) {
+    return new Hono().all("/api/installations/:installationId/workflows/webhooks/:bindingId", async (context) => {
+        const host = await hostFor(context.req.raw);
+        const installationId = context.req.param("installationId");
+        if (host === null || !(await libraryExists(host, installationId)))
+            return refused();
+        const address = new URL(context.req.url);
+        address.pathname = `/webhooks/${encodeURIComponent(context.req.param("bindingId"))}`;
+        address.search = "";
+        return env.WORKFLOW_RUNS.getByName(installationId).fetch(new Request(address, context.req.raw));
+    });
+}
+/** Mounted only under the root's authenticated owner routes; the DO re-admits. */
+export function standaloneWorkflowWebhookControls(env, hostFor) {
+    return new Hono().post("/api/installations/:installationId/workflows/webhooks", bodyLimit({ maxSize: 64 * 1024, onError: refused }), async (context) => {
+        const installationId = context.req.param("installationId");
+        if (!(await libraryExists(await hostFor(), installationId)))
+            return refused();
+        const body = Schema.decodeUnknownResult(Schema.fromJsonString(Schema.Json))(await context.req.text());
+        if (body._tag === "Failure")
+            return refused();
+        const command = workflowWebhookCommandSchema.safeParse(body.success);
+        if (!command.success)
+            return refused();
+        return env.WORKFLOW_RUNS.getByName(installationId).webhookControl(context.get("principal"), installationId, command.data);
+    });
+}

package/dist/standalone/workflows.d.ts

@@ -6,16 +6,25 @@ import { type GraphReview, type GraphParams, type NodeCall, type NodeEvent, type
 import { type StandaloneTenancyEnv } from "./tenancy.js";
 import type { AppEventFact } from "@fungi.computer/puffball/app-event-facts";
 import type { InvocationFacts } from "../invocation.js";
+import type { OysterPrincipal } from "../host.js";
 import type { OysterGitWorkerEnv, OysterGitWorkerHost } from "../workers-git.js";
 import { type TenantScope } from "../tenant.js";
 import type { GitWriter, RepositoryRef } from "@fungi.computer/agar/git";
-import type { WorkflowGitPassResult } from "@fungi.computer/agar/computer-contracts";
+import { type WorkflowGitCredential, type WorkflowGitPassGrant } from "@fungi.computer/braid/runtime";
 import { reviewKey, type EventDisarmInput, type WorkflowGitPassRequest, type TriggerArmTarget, type ScheduleDisarmInput } from "./workflow-binding.js";
 import type { StandaloneComputerEnv } from "./computer.js";
 import type { StandaloneAgentsEnv } from "./agents.js";
 import type { OysterMediaEnv } from "./media.js";
+import { createWorkflowWebhooks } from "../webhooks.js";
 export type StandaloneWorkflowEnv = OysterGitWorkerEnv & StandaloneComputerEnv & StandaloneAgentsEnv & OysterMediaEnv & StandaloneTenancyEnv & GraphWorkflowBindings & {
     WORKFLOW_RUNS: DurableObjectNamespace<StandaloneWorkflowRunsBase>;
+    WORKFLOW_WEBHOOK_HOST_RATE?: Pick<RateLimit, "limit">;
+    WORKFLOW_WEBHOOK_BINDING_RATE?: Pick<RateLimit, "limit">;
+    /** Trusted configuration; absent admission closes the new webhook surface. */
+    WORKFLOW_WEBHOOK_POLICY?: {
+        limits: Parameters<typeof createWorkflowWebhooks>[0]["limits"];
+        concurrency: Parameters<typeof createWorkflowWebhooks>[0]["abuse"]["concurrency"];
+    };
 };
 /** Schedule time and the native alarm instant that delivers a due time. */
 export type StandaloneScheduleClock = Readonly<{
@@ -24,23 +33,31 @@ export type StandaloneScheduleClock = Readonly<{
 }>;
 /** SQLite and the native Workflow binding belong to this standalone host; its root supplies `hostFor`. */
 export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneWorkflowEnv = StandaloneWorkflowEnv> extends DurableObject<Env> {
+    #private;
     private readonly composed;
     /** Schedule time and its native alarm instant; production is the wall clock. */
     protected readonly scheduleClock: StandaloneScheduleClock;
     private readonly owner;
     /** The deployable root's host for one tenant; Workflow runs use the default tenant. */
-    protected abstract hostFor(scope: TenantScope): OysterGitWorkerHost;
+    protected abstract hostFor(scope: TenantScope): Promise<OysterGitWorkerHost>;
     constructor(ctx: DurableObjectState, env: Env);
     /** Record the library this object serves; another name is a revocation. */
     private nameLibrary;
     /**
-     * Mint (or renew) the Git pass for the Git step a node frame is executing.
-     * Null when this library dispatched no such step; a step that does not match
-     * the frame's attested Workflow, member and Computer is a revocation.
+     * Admit the Git step a node frame is executing: its public grant, never a
+     * credential. Null when this library dispatched no such step; a step that
+     * does not match the frame's attested Workflow, member and Computer is a
+     * revocation. Only NEW native admission then issues, through issueWorkflowGit.
      */
-    openWorkflowGitPass(raw: WorkflowGitPassRequest): Promise<WorkflowGitPassResult | null>;
-    /** The tenant Git door's per-request admission of a presented pass. */
-    admitWorkflowGitPass(passId: string, repository: RepositoryRef, scope: "read" | "write"): Promise<Extract<GitWriter, {
+    admitWorkflowGit(raw: WorkflowGitPassRequest): Promise<WorkflowGitPassGrant | null>;
+    /** One fresh credential for a NEW native invocation of an admitted step. */
+    issueWorkflowGit(invocationId: string, grant: WorkflowGitPassGrant): Promise<WorkflowGitCredential>;
+    /** A live native replay extends its lease; it never issues another. */
+    renewWorkflowGit(invocationId: string, grant: WorkflowGitPassGrant): Promise<void>;
+    /** Close an invocation's credential, even before its issue arrives. */
+    closeWorkflowGit(invocationId: string, grant: WorkflowGitPassGrant): Promise<void>;
+    /** The tenant Git door's per-request admission of a presented bearer. */
+    admitWorkflowGitPass(bearer: string, repository: RepositoryRef, scope: "read" | "write"): Promise<Extract<GitWriter, {
         kind: "actor";
     }> | null>;
     /** A finished run's passes and recorded Git steps end with it. */
@@ -60,7 +77,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     } | {
         kind: "refused";
         reason: string;
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     disarmSchedule(facts: InvocationFacts, input: ScheduleDisarmInput): Promise<{
         kind: "not_found";
@@ -75,13 +92,14 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     } | {
         schedules: {
             scheduleId: string;
+            installationId: string;
             workflowId: string;
             triggerId: string;
             nextDueAt: number;
             state: "active" | "finished" | "paused" | "cancelled";
             lastError: string | null;
         }[];
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     armEventTrigger(facts: InvocationFacts, input: TriggerArmTarget): Promise<{
         kind: "armed";
@@ -93,7 +111,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     } | {
         kind: "refused";
         reason: string;
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     disarmEventTrigger(facts: InvocationFacts, input: EventDisarmInput): Promise<{
         kind: "disarmed";
@@ -115,7 +133,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             state: "active" | "paused";
             lastError: string | null;
         }[];
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     /** Up to 50 runs of this library, newest first; this host has no per-member rule. */
     runs(facts: InvocationFacts, input: {
@@ -125,7 +143,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             runId: string;
             workflowId: string | undefined;
             commit: string | undefined;
-            source: "manual" | "agent" | "key" | "event" | "schedule";
+            source: "key" | "manual" | "agent" | "event" | "schedule";
             initiatedBy: Readonly<{
                 kind: "member";
                 memberId: string;
@@ -144,7 +162,7 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             runId: string;
             workflowId: string | undefined;
             commit: string | undefined;
-            source: "manual" | "agent" | "key" | "event" | "schedule";
+            source: "key" | "manual" | "agent" | "event" | "schedule";
             initiatedBy: Readonly<{
                 kind: "member";
                 memberId: string;
@@ -162,6 +180,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     }>;
     /** Native alarm delivery: fire every due schedule of this library. */
     alarm(): Promise<void>;
+    /** Signed traffic uses the native fetch interface; no sender principal is accepted. */
+    fetch(request: Request): Promise<Response>;
+    /** Root-authenticated owner RPC; command data cannot nominate an actor or pin. */
+    webhookControl(principal: OysterPrincipal, installationId: string, raw: unknown): Promise<Response>;
     /**
      * The emitting App's Instance delivers each accepted event here. The
      * emitter's live Release must declare the event and its payload schema
@@ -230,10 +252,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         runId?: undefined;
         planDigest?: undefined;
     } | {
-        kind: "conflict" | "replay" | "started";
+        kind: "replay" | "conflict" | "started";
         runId: string;
         planDigest: string;
-        readonly error?: undefined;
+        error?: undefined;
     }>;
     loadRun(installationId: string, runId: string): Promise<{
         plan: {
@@ -249,13 +271,13 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
-                readonly title: string;
                 readonly apps: {
                     readonly [x: string]: {
                         readonly appId: string;
                         readonly role?: string | undefined;
                     };
                 };
+                readonly title: string;
                 readonly nodes: readonly ({
                     readonly id: string;
                     readonly kind: "code";
@@ -273,8 +295,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                     readonly values: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     };
-                    readonly method: string;
                     readonly kind: "app";
+                    readonly method: string;
                     readonly id: string;
                     readonly app: string;
                     readonly methodDigest: string;
@@ -293,17 +315,19 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 } | {
                     readonly kind: "review";
                     readonly id: string;
+                    readonly timeout: number;
                     readonly title: string;
                     readonly reviewers: "runner" | "owners";
                     readonly show: readonly {
                         readonly node: string;
                         readonly port: string;
                     }[];
-                    readonly timeout: number;
                     readonly choices?: readonly {
-                        readonly id: string;
                         readonly label: string;
+                        readonly id: string;
+                        readonly description?: string | undefined;
                     }[] | undefined;
+                    readonly detail?: string | undefined;
                 } | {
                     readonly id: string;
                     readonly kind: "condition";
@@ -368,8 +392,8 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                             readonly values: {
                                 readonly [x: string]: import("@fungi.computer/braid").Mapping;
                             };
-                            readonly method: string;
                             readonly kind: "app";
+                            readonly method: string;
                             readonly id: string;
                             readonly app: string;
                             readonly methodDigest: string;
@@ -388,17 +412,19 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                         } | {
                             readonly kind: "review";
                             readonly id: string;
+                            readonly timeout: number;
                             readonly title: string;
                             readonly reviewers: "runner" | "owners";
                             readonly show: readonly {
                                 readonly node: string;
                                 readonly port: string;
                             }[];
-                            readonly timeout: number;
                             readonly choices?: readonly {
-                                readonly id: string;
                                 readonly label: string;
+                                readonly id: string;
+                                readonly description?: string | undefined;
                             }[] | undefined;
+                            readonly detail?: string | undefined;
                         } | {
                             readonly id: string;
                             readonly kind: "condition";
@@ -451,10 +477,10 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly triggers?: readonly ({
                     readonly id: string;
                     readonly on: "webhook";
-                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly input?: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     } | undefined;
+                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly title?: string | undefined;
                 } | {
                     readonly id: string;
@@ -469,15 +495,15 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                     readonly title?: string | undefined;
                 } | {
                     readonly id: string;
-                    readonly event: string;
                     readonly on: "event";
+                    readonly event: string;
                     readonly app: string;
                     readonly eventDigest: string;
-                    readonly repository?: import("@fungi.computer/braid").Mapping | undefined;
-                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
                     readonly input?: {
                         readonly [x: string]: import("@fungi.computer/braid").Mapping;
                     } | undefined;
+                    readonly when?: import("@fungi.computer/braid").Predicate | undefined;
+                    readonly repository?: import("@fungi.computer/braid").Mapping | undefined;
                     readonly title?: string | undefined;
                 })[] | undefined;
             };
@@ -485,14 +511,14 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly [x: string]: {
                     readonly methods: {
                         readonly [x: string]: {
-                            readonly digest: string;
                             readonly output: {
                                 readonly [x: string]: S.Json;
                             };
                             readonly input: {
                                 readonly [x: string]: S.Json;
                             };
-                            readonly approval: "none" | "queue" | "simulate";
+                            readonly digest: string;
+                            readonly approval: "queue" | "none" | "simulate";
                             readonly description: string;
                             readonly effect: "read" | "write" | "external";
                             readonly requires: readonly string[];
@@ -520,15 +546,15 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
             };
             readonly estimatedSteps: number;
             readonly requiredBindings: readonly {
-                readonly method: string;
-                readonly installationId: string;
                 readonly output: {
                     readonly [x: string]: S.Json;
                 };
                 readonly input: {
                     readonly [x: string]: S.Json;
                 };
-                readonly approval: "none" | "queue" | "simulate";
+                readonly method: string;
+                readonly installationId: string;
+                readonly approval: "queue" | "none" | "simulate";
                 readonly description: string;
                 readonly effect: "read" | "write" | "external";
                 readonly requires: readonly string[];
@@ -547,9 +573,29 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
         readonly code: "invalid_input" | "revoked" | "not_granted" | "invalid_output" | "member_revoked" | "workflow_run_revoked" | "computer_revoked" | "budget_exhausted" | "unknown_method";
     }>;
     dispatch(call: NodeCall): Promise<{
-        readonly kind: "complete";
         readonly output: S.Json;
+        readonly kind: "complete";
         readonly costMilliunits: number;
+        readonly row?: {
+            readonly id: string;
+            readonly title: string;
+            readonly status?: {
+                readonly label: string;
+                readonly tone: "success" | "error" | "info" | "warning" | "neutral" | "primary" | "secondary" | "accent";
+            } | undefined;
+            readonly media?: {
+                readonly path: string;
+                readonly format: "fungi:image" | "fungi:video";
+            } | undefined;
+            readonly open?: {
+                readonly params: readonly {
+                    readonly key: string;
+                    readonly value: string;
+                }[];
+            } | undefined;
+            readonly detail?: string | undefined;
+            readonly tone?: "error" | "running" | "settled" | "attention" | "muted" | undefined;
+        } | undefined;
     } | {
         readonly kind: "refused";
         readonly code: "invalid_input" | "revoked" | "not_granted" | "invalid_output" | "member_revoked" | "workflow_run_revoked" | "computer_revoked" | "budget_exhausted" | "unknown_method";
@@ -576,37 +622,53 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
     status(facts: InvocationFacts, raw: {
         runId: string;
     }): Promise<{
-        error: string;
-        runId?: undefined;
-        planDigest?: undefined;
-        title?: undefined;
-        outcome?: undefined;
-        events?: undefined;
-        reviews?: undefined;
-        status?: undefined;
-        output?: undefined;
-    } | {
         runId: string;
         planDigest: string;
         title: string;
         outcome: "terminal" | "cancelled" | "active" | null;
         events: readonly {
-            readonly state: "running" | "queued" | "failed" | "complete" | "waiting" | "skipped";
             readonly runId: string;
             readonly nodeId: string;
+            readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
             readonly iteration: string;
             readonly attempt: number;
             readonly output?: {
                 readonly [x: string]: S.Json;
             } | undefined;
-            readonly costMilliunits?: number | undefined;
+            readonly refusal?: string | undefined;
+            readonly row?: {
+                readonly id: string;
+                readonly title: string;
+                readonly status?: {
+                    readonly label: string;
+                    readonly tone: "success" | "error" | "info" | "warning" | "neutral" | "primary" | "secondary" | "accent";
+                } | undefined;
+                readonly media?: {
+                    readonly path: string;
+                    readonly format: "fungi:image" | "fungi:video";
+                } | undefined;
+                readonly open?: {
+                    readonly params: readonly {
+                        readonly key: string;
+                        readonly value: string;
+                    }[];
+                } | undefined;
+                readonly detail?: string | undefined;
+                readonly tone?: "error" | "running" | "settled" | "attention" | "muted" | undefined;
+            } | undefined;
             readonly graphId?: string | undefined;
             readonly poll?: number | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
             readonly recordedAt?: number | undefined;
             readonly durationMs?: number | undefined;
+            readonly costMilliunits?: number | undefined;
             readonly outputDigest?: string | undefined;
             readonly errorMessage?: string | undefined;
-            readonly refusal?: string | undefined;
         }[];
         reviews: {
             review: {
@@ -619,28 +681,119 @@ export declare abstract class StandaloneWorkflowRunsBase<Env extends StandaloneW
                 readonly iteration: string;
                 readonly instanceId: string;
                 readonly eventType: string;
+                readonly position?: readonly {
+                    readonly node: string;
+                    readonly loop: "repeat" | "map";
+                    readonly index: number;
+                    readonly count: number;
+                }[];
                 readonly choices?: readonly string[];
             };
             status: "closed" | "pending" | "answered" | "delivered" | "timed_out";
             openedAt: number;
             expiresAt: number;
         }[];
-        status: "unknown" | "running" | "queued" | "errored" | "complete" | "waiting" | "paused" | "terminated" | "waitingForPause";
+        status: "unknown" | "paused" | "queued" | "running" | "errored" | "terminated" | "complete" | "waiting" | "waitingForPause";
         output: {} | null;
         error: {
             name: string;
             message: string;
         } | null;
-    }>;
+    } | {
+        error: string;
+    } | null>;
+    private runStatus;
     cancel(facts: InvocationFacts, raw: {
         runId: string;
     }): Promise<{
         kind: string;
-        reason: string;
     } | {
         kind: string;
-        reason?: undefined;
+        reason: string;
     }>;
+    /** Host-only MCP control reopens the configured owner's authority on every call. */
+    control(principal: OysterPrincipal, operation: "status" | "cancel", runId: string): Promise<{
+        runId: string;
+        planDigest: string;
+        title: string;
+        outcome: "terminal" | "cancelled" | "active" | null;
+        events: readonly {
+            readonly runId: string;
+            readonly nodeId: string;
+            readonly state: "skipped" | "queued" | "running" | "failed" | "complete" | "waiting";
+            readonly iteration: string;
+            readonly attempt: number;
+            readonly output?: {
+                readonly [x: string]: S.Json;
+            } | undefined;
+            readonly refusal?: string | undefined;
+            readonly row?: {
+                readonly id: string;
+                readonly title: string;
+                readonly status?: {
+                    readonly label: string;
+                    readonly tone: "success" | "error" | "info" | "warning" | "neutral" | "primary" | "secondary" | "accent";
+                } | undefined;
+                readonly media?: {
+                    readonly path: string;
+                    readonly format: "fungi:image" | "fungi:video";
+                } | undefined;
+                readonly open?: {
+                    readonly params: readonly {
+                        readonly key: string;
+                        readonly value: string;
+                    }[];
+                } | undefined;
+                readonly detail?: string | undefined;
+                readonly tone?: "error" | "running" | "settled" | "attention" | "muted" | undefined;
+            } | undefined;
+            readonly graphId?: string | undefined;
+            readonly poll?: number | undefined;
+            readonly position?: readonly {
+                readonly node: string;
+                readonly loop: "map" | "repeat";
+                readonly index: number;
+                readonly count: number;
+            }[] | undefined;
+            readonly recordedAt?: number | undefined;
+            readonly durationMs?: number | undefined;
+            readonly costMilliunits?: number | undefined;
+            readonly outputDigest?: string | undefined;
+            readonly errorMessage?: string | undefined;
+        }[];
+        reviews: {
+            review: {
+                readonly show: readonly S.Json[];
+                readonly title: string;
+                readonly timeout: number;
+                readonly runId: string;
+                readonly nodeId: string;
+                readonly reviewers: "runner" | "owners";
+                readonly iteration: string;
+                readonly instanceId: string;
+                readonly eventType: string;
+                readonly position?: readonly {
+                    readonly node: string;
+                    readonly loop: "repeat" | "map";
+                    readonly index: number;
+                    readonly count: number;
+                }[];
+                readonly choices?: readonly string[];
+            };
+            status: "closed" | "pending" | "answered" | "delivered" | "timed_out";
+            openedAt: number;
+            expiresAt: number;
+        }[];
+        status: "unknown" | "paused" | "queued" | "running" | "errored" | "terminated" | "complete" | "waiting" | "waitingForPause";
+        output: {} | null;
+        error: {
+            name: string;
+            message: string;
+        } | null;
+    } | {
+        kind: string;
+    } | null>;
+    private cancelRun;
 }
 /** The SAME extracted interpreter as Hub, with this host's owned ports. */
 export declare class StandaloneGraphWorkflow extends GraphWorkflow<StandaloneWorkflowEnv> {