Skip to content

CreateStoredFlowsRouterOptions

agentId: string;

runtime: StoredFlowsRuntime;

store: FlowDefinitionsStore;

optional storedFlowsPolicy?: Policy;

Policy at the HTTP boundary. Decisions are requested as stored-flows:read (GET) and stored-flows:write (POST/DELETE).

Omitted: default-allow. The hono-server chat router ships authless (dev/local). A missing policy matches that posture so the same process can host chat and stored-flows without inventing a second auth system. Production hosts must pass a Policy. authorId in query/body is metadata for filters and Policy args — never a grant.

ask has no HITL path on this surface and is treated as deny (403).