(CODUX-216) Harden Graph v2 validation against malformed input

[numnx]

🧩 Task: Harden Graph v2 validation against malformed input

Automated task PR opened by Code UX for T16.

📋 Summary

Sprint: Sprint 216 · Nodes Full Integration · Task: T16

Turn the existing project-scoped node-flow foundation and browser-local canvas into a canonical, secure, versioned automation control plane with registry-driven nodes, encrypted credentials, durable execution, governed integrations, isolated custom nodes, agent authoring, dashboard integration, and authenticated headless readiness.

🤖 Model & Provider

Provider	Codex CLI
Model	gpt-5.6-sol

⏱️ Timing

Started	2026-07-12 09:27:42 UTC
Finished	2026-07-12 09:38:31 UTC
Duration	10m 49s

📊 Token Usage

Metric	Value
Input tokens	109,653
Cached input tokens	2,302,464
Output tokens	21,460
Total tokens	2,433,577
Invocations	1
Tool calls	41
Active time	10m 18s

Included usage estimate (subscription/local login): $2.34

✅ QA Review

⏳ QA review runs after this PR is opened. Check the task card in the dashboard for the outcome once it lands.

📝 Full Task Prompt

### Objective
Make Graph v2 migration and validation fail closed with deterministic field-level issues for all malformed nested values.

### Requirements
Update the graph migrator and validator so null or malformed node, edge, port, credential-binding, definition-reference, capabilities, policy, schema, and metadata entries never throw. Return stable issue paths and preserve valid entries where safe. Cover both legacy Graph v1 and canonical Graph v2 inputs.

### Verification
Add tests for null nodes, null edges, null ports, null bindings, malformed arrays, malformed definition references, and repeated validation. Run focused node-flow tests, typecheck, build, and docs validation.

🌿 Branch Info

Base: feature/CODUX-216-nodes-full-integration
Head: task/feature-codux-21-t16-codex-08340e31-mrhlbg39

---

🤖 Generated by Code UX