feat(workflow-executor): server-side AI fallback

[Scra3]

Summary

When aiConfigurations is empty or not provided, the executor automatically falls back to the Forest Admin server AI proxy via ChatOpenAI with a custom baseURL.

What changes

• aiConfigurations becomes optional in ExecutorOptions
• If absent: creates an AiConfiguration with baseURL pointing to {forestServerUrl}/liana/v1
• JWT signed with envSecret used as apiKey for auth
• Zero changes in ai-proxy — the fallback is a standard config

What doesn't change

• Executors — still call model.invoke() / model.bindTools() transparently
• Tool execution — stays 100% local on client infra
• Privacy — server only sees tool definitions and messages, never client data

Dependency

Requires PRD-270 (server route POST /liana/v1/chat/completions)

Test plan

• yarn workspace @forestadmin/workflow-executor test — 427 tests pass
• yarn workspace @forestadmin/workflow-executor tsc --noEmit — compiles

fixes PRD-271

🤖 Generated with Claude Code

Note

Add server-side AI proxy fallback to workflow executor

• Introduces a new AiModelPort interface in ai-model-port.ts to abstract AI model acquisition, replacing direct AiClient usage throughout the executor.
• Adds ServerAiAdapter in server-ai-adapter.ts, which routes LLM calls through the Forest Admin server proxy (/liana/v1/ai-proxy) using per-step signed JWTs containing envId, userId, runId, and stepIndex.
• Adds AiClientAdapter in ai-client-adapter.ts wrapping the existing AiClient for when aiConfigurations are explicitly provided.
• buildCommonDependencies in build-workflow-executor.ts selects AiClientAdapter when aiConfigurations are provided, and falls back to ServerAiAdapter otherwise; aiConfigurations is now optional.
• Behavioral Change: PendingStepExecution now requires a new envId field; callers constructing step executions must provide it.

^{Macroscope summarized dfd2d3e.}

[linear]

PRD-271 Server-side AI fallback when user has no AI configuration

[qltysh]

1 new issue

Tool	Category	Rule	Count
qlty	Structure	Function with high complexity (count = 16): stop	1

[qltysh]

Coverage Impact

This PR will not change total coverage.

Modified Files with Diff Coverage (4)

Rating	File	% Diff	Uncovered Line #s
	packages/workflow-executor/src/runner.ts	100.0%
	packages/workflow-executor/src/build-workflow-executor.ts	100.0%
	packages/workflow-executor/src/adapters/server-ai-adapter.ts	100.0%
	packages/workflow-executor/src/adapters/ai-client-adapter.ts	100.0%
	Total	100.0%

🚦 See full report on Qlty Cloud »

🛟 Help

• Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

• Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

• File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

  • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.