justflow 0.1.1__tar.gz

justflow-0.1.1/.env.example

@@ -0,0 +1,170 @@
+# Temporal
+JUSTFLOW_TEMPORAL__ADDRESS=
+JUSTFLOW_TEMPORAL__TASK_QUEUE=
+JUSTFLOW_TEMPORAL__NAMESPACE=
+# Discriminated JSON object. Use {"mode":"local_plaintext"} only with the
+# local runtime profile. TLS supports server_name, bounded CA/client paths, and
+# an optional SecretStr API key supplied at runtime.
+JUSTFLOW_TEMPORAL__CONNECTION=
+# JSON object containing mode and key identifiers only. Encryption keys are
+# supplied by the host application's payload-protection binding.
+JUSTFLOW_TEMPORAL__PAYLOAD_PROTECTION=
+JUSTFLOW_TEMPORAL__DEPLOYMENT_REGISTRATION__ATTEMPTS=
+JUSTFLOW_TEMPORAL__DEPLOYMENT_REGISTRATION__INTERVAL_SECONDS=
+
+# Worker deployment (BUILD_ID is required by the production worker)
+JUSTFLOW_DEPLOYMENT__NAME=
+JUSTFLOW_DEPLOYMENT__BUILD_ID=
+JUSTFLOW_DEPLOYMENT__ARTIFACT_DIGEST=
+JUSTFLOW_DEPLOYMENT__PACKAGE_VERSION=
+JUSTFLOW_DEPLOYMENT__SOURCE_REVISION=
+JUSTFLOW_DEPLOYMENT__COMPATIBLE_ENGINE_WORKFLOW_ABIS=
+
+# Runtime profile (production requires an immutable sha256 artifact digest)
+JUSTFLOW_RUNTIME__PROFILE=
+# JSON scope for local/single-scope operation or a shared-host fallback. Shared
+# production hosts resolve the effective scope from trusted ingress bindings.
+JUSTFLOW_RUNTIME__SCOPE=
+JUSTFLOW_RUNTIME__PINNED_START_RETRY__ATTEMPTS=
+JUSTFLOW_RUNTIME__PINNED_START_RETRY__INTERVAL_SECONDS=
+JUSTFLOW_RUNTIME__WORKER_READY_TIMEOUT_SECONDS=
+
+# Definition catalog. S3 credentials come only from the normal AWS credential chain.
+JUSTFLOW_CATALOG__BACKEND=
+JUSTFLOW_CATALOG__BUCKET=
+JUSTFLOW_CATALOG__PREFIX=
+JUSTFLOW_CATALOG__REGION=
+JUSTFLOW_CATALOG__ENDPOINT_URL=
+JUSTFLOW_CATALOG__EXPECTED_BUCKET_OWNER=
+JUSTFLOW_CATALOG__SERVER_SIDE_ENCRYPTION=
+JUSTFLOW_CATALOG__KMS_KEY_ID=
+
+# Configuration source/store. Use files for Git-managed YAML, sqlite for a
+# single-host writable store, or aws for S3 revision bodies plus DynamoDB metadata.
+# AWS credentials come only from the normal AWS credential chain.
+JUSTFLOW_CONFIGURATION__BACKEND=
+JUSTFLOW_CONFIGURATION__PATH=
+JUSTFLOW_CONFIGURATION__BUCKET=
+JUSTFLOW_CONFIGURATION__TABLE_NAME=
+JUSTFLOW_CONFIGURATION__REVISION_INDEX_NAME=
+JUSTFLOW_CONFIGURATION__ACTIVATION_INDEX_NAME=
+JUSTFLOW_CONFIGURATION__PREFIX=
+JUSTFLOW_CONFIGURATION__REGION=
+JUSTFLOW_CONFIGURATION__ENDPOINT_URL=
+JUSTFLOW_CONFIGURATION__EXPECTED_BUCKET_OWNER=
+JUSTFLOW_CONFIGURATION__SERVER_SIDE_ENCRYPTION=
+JUSTFLOW_CONFIGURATION__KMS_KEY_ID=
+
+# Broker and messaging declarations are JSON objects.
+JUSTFLOW_BROKERS=
+JUSTFLOW_MESSAGING__TRIGGER=
+JUSTFLOW_MESSAGING__RESPONSE=
+JUSTFLOW_MESSAGING__MESSAGE_CONCURRENCY=
+JUSTFLOW_MESSAGING__DEDUPLICATION_CAPACITY=
+JUSTFLOW_MESSAGING__DEDUPLICATION_RETENTION_SECONDS=
+JUSTFLOW_MESSAGING__CONSUMER_READY_TIMEOUT_SECONDS=
+JUSTFLOW_MESSAGING__RECONNECT__INITIAL_DELAY_SECONDS=
+JUSTFLOW_MESSAGING__RECONNECT__MAX_DELAY_SECONDS=
+JUSTFLOW_MESSAGING__RECONNECT__MULTIPLIER=
+JUSTFLOW_MESSAGING__RECONNECT__JITTER_FRACTION=
+
+# Runtime-only transport security policy (JSON values; keep certificate and key
+# paths out of service YAML)
+JUSTFLOW_TRANSPORT_SECURITY__HTTP__ALLOWED_ORIGINS=
+JUSTFLOW_TRANSPORT_SECURITY__GRPC_TLS_PROFILES=
+
+# Runtime-only database/cache connection bindings (JSON objects). Resource YAML
+# contains binding names only; keep connection URLs and DSNs in the host environment.
+JUSTFLOW_RESOURCE_CONNECTIONS__POSTGRES_DSNS=
+JUSTFLOW_RESOURCE_CONNECTIONS__REDIS_URLS=
+
+# Paths
+JUSTFLOW_PATHS__CONFIG_DIR=
+# Optional writable local catalog root. When omitted, the catalog remains beside
+# the configuration files for backward compatibility.
+JUSTFLOW_PATHS__CATALOG_DIR=
+
+# Logging
+JUSTFLOW_LOGGING__LEVEL=
+
+# Optional control API listener and bounded request settings
+JUSTFLOW_CONTROL__HOST=
+JUSTFLOW_CONTROL__PORT=
+JUSTFLOW_CONTROL__MAX_REQUEST_BODY_BYTES=
+JUSTFLOW_CONTROL__MAX_RESPONSE_BODY_BYTES=
+JUSTFLOW_CONTROL__DEFAULT_LIST_LIMIT=
+JUSTFLOW_CONTROL__TEMPORAL_RPC_TIMEOUT_SECONDS=
+JUSTFLOW_CONTROL__SHUTDOWN_GRACE_SECONDS=
+JUSTFLOW_CONTROL__MAX_HEADER_BYTES=
+JUSTFLOW_CONTROL__MAX_HEADER_COUNT=
+JUSTFLOW_CONTROL__MAX_QUERY_BYTES=
+
+# Optional operations UI and safe Temporal Visibility indexes. Enable indexed
+# search only after registering the documented Justflow keyword attributes in
+# the Temporal namespace. Metrics links are bounded JSON objects with public
+# labels and credential-free HTTP(S) URLs. Local source authoring is an explicit
+# local-profile opt-in; its draft path must be outside the configuration folder,
+# and saved workflow/schedule declarations apply only after restart.
+JUSTFLOW_OPERATIONS__ADMIN_PANEL_ENABLED=
+JUSTFLOW_OPERATIONS__INDEXED_SEARCH_ATTRIBUTES_ENABLED=
+JUSTFLOW_OPERATIONS__LOCAL_SOURCE_AUTHORING_ENABLED=
+JUSTFLOW_OPERATIONS__METRICS_LINKS=
+
+# Temporal schedule reconciliation, observation, and dispatch bounds
+JUSTFLOW_SCHEDULES__TASK_QUEUE=
+JUSTFLOW_SCHEDULES__MAX_SCHEDULES=
+JUSTFLOW_SCHEDULES__PAGE_SIZE=
+JUSTFLOW_SCHEDULES__DESCRIBE_CONCURRENCY=
+JUSTFLOW_SCHEDULES__TEMPORAL_RPC_TIMEOUT_SECONDS=
+JUSTFLOW_SCHEDULES__RECENT_ACTION_LIMIT=
+JUSTFLOW_SCHEDULES__DISPATCH_TIMEOUT_SECONDS=
+JUSTFLOW_SCHEDULES__DISPATCH_ATTEMPTS=
+
+# One-off scheduled-start admission, dispatch, retention, and workload policy
+JUSTFLOW_SCHEDULED_STARTS__MAX_HORIZON_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__MAX_INPUT_BYTES=
+JUSTFLOW_SCHEDULED_STARTS__MAX_PENDING_PER_SCOPE=
+JUSTFLOW_SCHEDULED_STARTS__DEFAULT_LIST_LIMIT=
+JUSTFLOW_SCHEDULED_STARTS__MAX_LIST_LIMIT=
+JUSTFLOW_SCHEDULED_STARTS__MAX_SCHEDULES=
+JUSTFLOW_SCHEDULED_STARTS__DESCRIBE_CONCURRENCY=
+JUSTFLOW_SCHEDULED_STARTS__TERMINAL_RETENTION_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__CLEANUP_PAGE_SIZE=
+JUSTFLOW_SCHEDULED_STARTS__CLEANUP_INTERVAL_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__CLOCK_SKEW_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__DISPATCH_TIMEOUT_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__DISPATCH_ATTEMPTS=
+JUSTFLOW_SCHEDULED_STARTS__MUTATION_WAIT_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__RECOVERY_MAX_INTERVAL_SECONDS=
+JUSTFLOW_SCHEDULED_STARTS__WORKLOAD_POLICY__ALLOWED_CLASSES=
+JUSTFLOW_SCHEDULED_STARTS__WORKLOAD_POLICY__INTERACTIVE_PRIORITY_KEY=
+JUSTFLOW_SCHEDULED_STARTS__WORKLOAD_POLICY__STANDARD_PRIORITY_KEY=
+JUSTFLOW_SCHEDULED_STARTS__WORKLOAD_POLICY__BATCH_PRIORITY_KEY=
+JUSTFLOW_SCHEDULED_STARTS__WORKLOAD_POLICY__FAIRNESS_WEIGHT=
+
+# Managed activation lease and prepared-runtime index bounds
+JUSTFLOW_ACTIVATION__LEASE_SECONDS=
+JUSTFLOW_ACTIVATION__MAX_SCOPES=
+JUSTFLOW_ACTIVATION__MAX_TARGETS_PER_SCOPE=
+
+# Runtime bounds
+JUSTFLOW_LIMITS__TRIGGER_PAYLOAD_BYTES=
+JUSTFLOW_LIMITS__WORKFLOW_OUTPUT_BYTES=
+JUSTFLOW_LIMITS__ACTIVITY_INPUT_BYTES=
+JUSTFLOW_LIMITS__ACTIVITY_OUTPUT_BYTES=
+JUSTFLOW_LIMITS__FAILURE_RECORD_BYTES=
+JUSTFLOW_LIMITS__AUDIT_RECORD_BYTES=
+JUSTFLOW_LIMITS__CACHE_ENTRY_BYTES=
+JUSTFLOW_LIMITS__FANOUT_ITEMS=
+JUSTFLOW_LIMITS__FANOUT_CHUNK_ITEMS=
+JUSTFLOW_LIMITS__PARALLELISM=
+JUSTFLOW_LIMITS__LOOP_ATTEMPTS=
+JUSTFLOW_LIMITS__TOTAL_INVOCATIONS=
+JUSTFLOW_LIMITS__QUEUED_MESSAGES=
+JUSTFLOW_LIMITS__SIGNAL_PAYLOAD_BYTES=
+JUSTFLOW_LIMITS__QUEUED_MESSAGE_BYTES=
+JUSTFLOW_LIMITS__COLLECTION_ITEMS=
+JUSTFLOW_LIMITS__WORKFLOW_STATE_BYTES=
+JUSTFLOW_LIMITS__CONTINUATION_INPUT_BYTES=
+JUSTFLOW_LIMITS__HISTORY_EVENTS=
+JUSTFLOW_LIMITS__HISTORY_BYTES=

justflow-0.1.1/.gitignore

@@ -0,0 +1,36 @@
+__pycache__/
+*.py[cod]
+.venv/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+*.egg-info/
+dist/
+example-dist/
+build/
+.env
+.DS_Store
+
+# Generated visualization artifacts
+workflow.html
+
+examples/**/*.html
+/examples_internal/
+
+.codegraph
+graphify-out/
+.claude/settings.local.json
+specs/
+temp/
+site/
+/docs/scheduling-workflows-spec.md
+
+# Administration panel tool output
+ui/admin/node_modules/
+ui/admin/coverage/
+.justflow/
+# The built panel bundle under packages/justflow-admin is covered by the dist/
+# rule above. It ships in the optional wheel via Hatch build artifacts.
+/CHANGELOG_private.md

justflow-0.1.1/CHANGELOG.md

@@ -0,0 +1,104 @@
+# Changelog
+
+Notable changes in public releases of Justflow.
+
+## [Unreleased]
+
+## [0.1.1] — 2026-09-10
+
+Initial public beta release of `justflow` and the optional `justflow-admin`
+package. Supports CPython 3.11–3.14.
+
+### Workflow execution
+
+- Define durable workflows in YAML and execute them on Temporal, with typed
+  Python actions implementing application behavior.
+- Compose sequential steps, result-based and conditional branches, bounded
+  parallel iteration, child workflows, durable sleeps and event waits,
+  polling loops, and failure paths.
+- Validate definitions, expressions, references, and input/output contracts;
+  configure per-step caching and explicit execution limits.
+- Publish immutable workflow definitions, retain execution provenance, and
+  check compatibility against representative recorded Temporal histories.
+- Record workflow outcomes through configurable audit capture and archival,
+  with redaction and host-provided payload encryption support.
+
+### Triggers and scheduling
+
+- Declare authorized API, schedule, webhook, CloudEvent, broker, and
+  application-host triggers.
+- Run recurring cron, calendar, or interval schedules with timezone,
+  overlap, catch-up, pause/resume, and reconciliation controls.
+- Create, inspect, reschedule, and cancel one-off scheduled starts through
+  versioned APIs with idempotent operations.
+- Build bounded customer batches and independent per-customer workflows.
+  A global batch operates within its trusted tenant/application/environment
+  scope; it does not bypass tenant authorization.
+- Use the customer-workflow example to schedule reminders relative to an
+  appointment. Application code computes the due time, such as two elapsed
+  hours before the appointment, and submits a one-off scheduled start.
+
+### APIs and administration
+
+- Expose authenticated, tenant-scoped control and operations APIs for
+  application automation and external dashboards.
+- Provide versioned OpenAPI 3.1 contracts and JSON authoring schemas with
+  offline export commands.
+- Manage configuration drafts, publication, activation, and rollback through
+  APIs composed with the consuming application's host bindings.
+- Install the optional beta administration console over the same public APIs.
+- Compose authentication, resources, providers, catalogs, and Temporal
+  connections through typed Python interfaces.
+
+### Integrations
+
+- Execute actions directly in Python, through approved HTTPS endpoints,
+  through TLS gRPC, or through broker-backed queues using SQS.
+- Access S3 objects and archives, DynamoDB, Secrets Manager, SSM, PostgreSQL,
+  Redis, and static configuration through registered resource providers.
+- Configure transport deadlines, message and result limits, retry behavior,
+  dead-letter handling, and receiving-service idempotency contracts.
+- Supply custom transports, brokers, resources, and ingress mappings through
+  explicit host registration.
+
+### Tooling and documentation
+
+- Validate definitions, run local workflows, start workers, manage triggers,
+  and export contracts from the CLI.
+- Render workflow diagrams as Mermaid or standalone interactive HTML.
+- Follow runnable examples for local execution, host application composition,
+  object ingestion, onboarding, scheduled reporting, and customer workflows.
+- Use deployment and operations guides for local development and self-hosted
+  environments, including an ECS/Fargate plan for self-hosted Temporal.
+- Install optional capabilities through the `aws`, `grpc`, `postgres`,
+  `redis`, `control`, `admin`, and `all` extras.
+
+### Beta scope and limitations
+
+- Workflow definitions, publishers, and provider registration must be trusted.
+  Tenant-scoped APIs do not sandbox arbitrary Python action code.
+- Production deployments require application-owned infrastructure,
+  authentication, credentials, provider bindings, and operational acceptance
+  tests. Live AWS qualification of the ECS/Fargate deployment remains pending.
+- Production one-off scheduled starts require a shared authoritative quota
+  binding from the host. Without it, creation is rejected with
+  `quota_unavailable`. Recurring schedules do not use that quota controller.
+- Managed configuration activation requires the consuming host's deployment
+  and routing bindings.
+- Queue delivery is at least once. Exactly-once external side effects are not
+  guaranteed; receiving services must implement durable idempotency where
+  required.
+- The built-in gRPC transport uses JSON request/response bytes over unary
+  RPCs. Generated Protobuf clients and streaming RPCs need a custom transport.
+- Lambda is available for evaluation; its operational contract is outside
+  the supported beta integration profile.
+- Static independent fork/join branches, visual workflow editing, AI workflow
+  building, and filesystem hot reload are not included.
+- Runtime limits define correctness bounds, not throughput, availability,
+  capacity, or regulatory certification claims.
+
+See the [getting-started guide](docs/getting-started.md),
+[customer workflow examples](docs/operations/customer-workflows.md),
+[integration contracts](docs/integrations.md),
+[limitations](docs/limitations.md), and
+[AWS acceptance runbook](docs/aws/self-hosted-temporal.md).

justflow-0.1.1/CONTRIBUTING.md

@@ -0,0 +1,87 @@
+# Contributing
+
+This guide covers local setup, checks to run before merging a PR, and the
+conventions used in the codebase.
+
+## Development setup
+
+```bash
+git clone https://github.com/nickyua/justflow.git
+cd justflow
+python3.14 -m venv .venv
+.venv/bin/pip install --constraint constraints/ci.txt \
+  --editable ".[dev]" --editable packages/justflow-admin \
+  --editable examples/prime_stats build
+npm --prefix ui/admin ci
+npm --prefix ui/admin run build
+```
+
+The last step builds the administration panel bundle into
+`packages/justflow-admin/src/justflow_admin/assets/dist/`. The bundle is gitignored build
+output (shipped in the wheel via hatch `artifacts`), and the backend test
+suite and `justflow serve` read it from disk — rebuild it after changing
+`ui/admin` sources (`make admin-check` does this too).
+
+## Checks before merging
+
+Run the full check suite before merging a PR:
+
+```bash
+make check
+```
+
+You can also run the checks separately:
+
+| Command                   | What it runs |
+| ------------------------- | ------------ |
+| `make admin-check`        | Admin panel types, lint, unit coverage, and production build with Node 24 |
+| `make lint`               | Ruff and mypy |
+| `make format-check`       | Pinned Ruff formatter check |
+| `make test-unit`          | Unit suite without Temporal |
+| `make coverage`           | Unit suite with branch coverage and the minimum coverage requirement |
+| `make test-replay`        | Committed Temporal history replay against the compatible worker code |
+| `make test-sandbox`       | Checks that workflow code runs in Temporal's sandbox |
+| `make test-integration`   | Integration suite against the pinned local Temporal server |
+| `make build`              | Main and example sdist/wheel builds |
+| `make verify-distribution` | Exact artifact-name, metadata, and contents inspection |
+| `make smoke-wheel`        | Isolated installation and import of the built wheel |
+
+CI (`.github/workflows/ci.yml`) runs the same checks on every PR. Unit and
+integration tests cover Python 3.11 through 3.14; package checks use
+Python 3.14.
+
+Keep existing replay histories when changing workflow behavior: they verify
+that old runs still work. Add recordings for new behavior, review the history
+index, and run `make test-replay`. Use Temporal versioning when a change would
+alter decisions recorded by an existing workflow.
+
+## Project layout
+
+```
+src/justflow/          the engine library
+ui/admin/              separately built TypeScript administration panel
+examples/prime_stats/ runnable application with its own action package and configs
+tests/                unit tests (+ tests/integration for the Temporal-backed suite)
+```
+
+## Conventions
+
+- Add types and run mypy. Resolve type errors through correct types and
+  narrowing rather than suppressions.
+- Give meaningful values names: use constants for fixed values and settings
+  for values that vary by deployment.
+- Raise on programmer errors and corrupt state. Handle expected external
+  failures explicitly, and preserve enough information to diagnose them.
+- Keep unit tests independent of the network, wall clock, and test order.
+  Inject time and seed randomness. Use frozen dataclass cases for test matrices.
+- Translate dependency errors into the appropriate Justflow exception;
+  transport failures use `TransportError` subclasses.
+- Keep each PR focused on one change and explain why it is needed. Open a
+  draft PR when you create a branch, then add implementation commits to it.
+
+## Reporting issues
+
+Follow [SUPPORT.md](SUPPORT.md) when reporting a bug. A minimal workflow and
+the error code are useful; remove credentials and customer data before
+sharing configuration, logs, or audit output. Report vulnerabilities through
+[SECURITY.md](SECURITY.md).

justflow-0.1.1/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

justflow-0.1.1/NOTICE

@@ -0,0 +1,7 @@
+Justflow
+Copyright 2026 Mykyta Bakunov
+
+This product includes Mermaid 11.16.0, distributed under the MIT License.
+The vendored asset provenance and license are included in
+src/justflow/visualization/static/MERMAID_ASSET.md and
+src/justflow/visualization/static/MERMAID_LICENSE.