feat(workflows): browse, author, and save workflows in one editor

[Igloczek]

Summary

Workflows had no client library or authoring surface. This adds the environment/project-bound library and one editor for creating, cloning, repairing and saving canonical definitions. Agent and End steps are editable; existing later-ticket nodes retain their meanings and remain read-only at this layer.

Workflows library → palette / flow / inspector + Routes
                 → canonical YAML import/export and staged repair
                 → authorized save with revision/fingerprint checks

Refs #25 and parent #3. Layer 1/5 of #30 → #31 → #34 → #35 → #36, based on origin/main fc7f811de94ed0d65bc56bf3f5e6a4b4449fa5b7. The remaining layers are being restacked and revalidated.

Evidence

• Before: no workflow library/editor on main.
  After: library, responsive editor, keyboard authoring, canonical YAML and recoverable drafts verified by the primary agent in the native T3 Browser against isolated worktree state. Uploaded before/after images and Save/Reload recordings identify their tested heads; still captures are 640×400.
• Proposed local head b0e5a7f596c796b3fcb6ac5233ea1af287af69aa: 92 focused tests across five files pass, including 50 editor behavior cases. The complete authenticated WorkflowAuthoring.integration.test.tsx walkthrough passes. Workflow/web package typechecks, changed-file formatting and lint pass (nine existing Editor warnings). The independent background-read reproduction passes unchanged. Earlier focused backend authoring/redaction/catalog checks and prepared server typecheck passed; the core/plugin RPC handler split is preserved.
• Real client: four viewport widths, light/dark themes, palette/graph/Routes/inspector, validation focus, save/reopen, conflict/compare and keyboard sheets. Pending Save freezes mutation; delayed manual Reload preserves newer edits. Authenticated tailnet HTTPS authoring, hard-reload recovery and reopening passed. Current-head HTTPS reconnect evidence: releasing a real older read response after Save retains the saved revision and empty recovery; the next edit uses the current baseline and saves successfully. Own fixtures and instrumentation were removed.
• Independent GPT-6-Astra/Gilfoyle R14: APPROVED — b0e5a7f596c796b3fcb6ac5233ea1af287af69aa, with no unresolved material findings. Independently passed 105 tests and all three original race reproductions. Root also approves this head. The remote stack is being updated to the reviewed commit.

The existing generic page integration fixture has a confirmed parent failure at registry/provider setup and is not claimed passing. The current authoring walkthrough is passing. Node 26.8.1 differs from the declared Node 24 engine; Bun 1.4.3 and pnpm 11.10.0 were used. This evidence does not establish T3 Connect relay/tunnel, hosted production builds, cross-device behavior or a live provider run. The canonical schema has no description field; Compare presents two YAML panes.

Merge Danger

Door: two-way

The UI is reversible. Explicit save/repair/delete actions write environment-local workflow files; revision/content checks preserve concurrent edits and failed-request drafts.

Blast Radius: workflows

Includes the required generic host design, discovery, page-state, permission and draft/navigation seams. Contracts and services remain authoritative; core stores and navigation contain no workflow domain branches.

Implementation by Claude Opus 5.5 (Claude Code) and OpenAI GPT-6.1-Sol (Codex); integration, orchestration and primary client verification by GPT-6.1-Sol through Codex in T3 Code. Independent review by GPT-6-Astra through Codex using Gilfoyle; earlier reviews used Claude Opus 5.5 through Claude Code.

[Igloczek]

UI evidence for #25, captured by the primary agent in the native T3 Browser against isolated development state.

Before: origin/main fc7f811de9, without the Workflows library/editor.

After: the workflow library on the proposed authoring layer. Native still captures are 640×400.

Pending Save verification (4450d43e9b): inputs, palette and keyboard removal stay frozen until the actual backend request settles.

iglo-pr30-save-freeze-4450d43e9b.mp4

Delayed Reload verification (9a920ce2a4): typing remains available; releasing the actual read request preserves the newer displayed and recovered draft. A later unsuperseded Reload succeeds.

iglo-pr30-reload-guard-9a920ce2a4.mp4

These are local proposed-head checks; they do not claim remote/tunnel coverage or approval of the current remote head. Temporary browser instrumentation was removed and the primary agent’s fixtures were deleted. Independent review confirmed the product race fixes; the remaining authoring walkthrough test-fixture correction is in progress.

Primary verification and evidence upload: GPT-6.1-Sol, Codex harness in T3 Code.

[Igloczek]

Primary client verification on proposed head b0e5a7f596c796b3fcb6ac5233ea1af287af69aa (#25). Over the authenticated HTTPS connection to isolated development state, I held the real reconnect read response for revision 1, saved revision 2, then released the original unmodified response. The editor retained Saved revision 2, disabled Save, and no false conflict or recovery draft. A subsequent edit recovered against revision 2 and saved as revision 3. The owned fixture and temporary browser instrumentation were removed.

Focused checks: 92 tests across 5 files passed; the full authenticated authoring walkthrough passed; the independent reproduction passed unchanged; workflow/web typechecks and changed-file formatting/lint passed (9 existing Editor warnings). Independent GPT-6-Astra/Gilfoyle R14 review is pending. This is local proposed-head evidence; the remote stack has not yet been updated. It establishes authenticated tailnet HTTPS behavior, without claiming T3 Connect relay/tunnel or hosted production coverage.

Primary verification and upload: GPT-6.1-Sol / Codex harness in T3 Code.