feat(flows): author flows against OpenRegister's store, and stop calling them graphs

[rubenvdlinde]

What

Hermiq's flow editor now reads and writes OpenRegister's native flow store and nothing else, and the word "graph" is retired.

Why

The editor read a duplicate hermiq/agentflow object mirror while the engine ran the native oc_openregister_flows rows. Two copies, free to drift — and they had: the Hydra sequencer's prose sat in the object's description while the native row's notes was null, which is exactly why the Notes tab rendered empty for a flow that documents itself at length.

flow-storage/spec.md forbids the mirror outright:

A flow definition SHALL NOT be stored as an OpenRegister object […] No other app SHALL own a flow store, a flow controller, or a flow execution service.

src/api/graph.js is deleted. It posted to /apps/hermiq/api/graph/run — a route never registered in appinfo/routes.php, so Run had been posting into a 404.

Four rendering defects, one dialect mismatch

A flow is a Petri net: a node is a place, an edge is the transition carrying type/config. The builder read edges[].source/.target and nodes[].type — keys a stored flow does not have. On the live sequencer (17 nodes, 16 edges) that drew zero edges and labelled every node with an em-dash. Silently, because a dropped edge and an absent key look identical.

Defect	Fix
no edges drawn	draw from from/to, fanning array endpoints out — 3 splits ⇒ 19 lines from 16 edges
every node blank	label name || id, never a dash
card inside a card	one frame, owned by the canvas wrapper. Both failure modes had shipped — a second frame, then none at all
port purple regardless of role	success where a run starts, error where it ends; round again at 16×16 (NC's global button min-height had stretched it to 16×34)

Plus: the sidebar closes and reopens (its close event was unhandled, so the X did nothing), and the canvas zooms — CnGraphCanvas always emitted update:zoom, nothing bound it.

The rename

"Graph" was never a second entity, and the second name is what let the second store, the phantom endpoint and the blank canvas each look reasonable. Routes, page ids, components, store, CSS and strings all say flow. /graphs and /graphs/:id remain as legacy pages so links already pasted into Hydra issues and run logs keep working.

Verification

lint, stylelint, check:specs, test:l10n, webpack build — all pass. POST /api/flow/validate accepts the round-tripped sequencer. e2e 9/9, including a positive control: forcing the edge count to 18 fails reporting 19, so the suite is shown able to fail.

Two of those greens were earned rather than assumed — the port-colour test was failing against correct code (it pinned var()'s fallback literal, and --color-success resolves differently at the handle than at the root), and wrapping the sidebar toggle in the new zoom controls had dropped its class.

Follow-ups (specced, not in this PR)

or-flow-action-nodes · or-flow-connectivity-and-last-run · or-flow-migrate-definitions · hermiq-flow-canvas-ports · cn-flow-store-and-canvas-rename (moves this PR's src/api/flows.js into nc-vue as a shared createFlowStore).

🤖 Generated with Claude Code

[github-actions]

Quality Report — ConductionNL/hermiq @ 6df1325

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
composer			✅	✅ 117/117
npm			✅	✅ 744/744
PHPUnit					❌
Newman					✅
Playwright					✅

---

Quality workflow — 2026-08-04 14:06 UTC

Download the full PDF report from the workflow artifacts.

[github-actions]

Quality Report — ConductionNL/hermiq @ f418129

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
composer			✅	✅ 117/117
npm			✅	✅ 744/744
PHPUnit					✅
Newman					✅
Playwright					✅

---

Quality workflow — 2026-08-04 14:30 UTC

Download the full PDF report from the workflow artifacts.