feat(workflow): implement read-only inspection commands (plan, graph, explain)

* Extracts WorkflowPlan structurally from Pipeline building.
* Implements 'sailr workflow plan <profile>' with effects tracking.
* Implements 'sailr workflow graph <profile> [--format mermaid]'.
* Implements 'sailr workflow explain <profile> <task>'.

Author: josh-tracey

src/cli.rs

@@ -74,6 +74,63 @@ pub enum WorkflowCommands {
     Run(WorkflowRunArgs),
     /// Generate a CI template for a workflow profile
     GenerateCi(WorkflowGenerateCiArgs),
+    /// Plan a workflow profile
+    Plan(WorkflowPlanArgs),
+    /// View workflow graph
+    Graph(WorkflowGraphArgs),
+    /// Explain a workflow task
+    Explain(WorkflowExplainArgs),
+}
+
+#[derive(Copy, Clone, PartialEq, Eq, PartialOrd, Ord, ValueEnum, Debug)]
+pub enum WorkflowOutputFormat {
+    Text,
+    Json,
+}
+
+#[derive(Copy, Clone, PartialEq, Eq, PartialOrd, Ord, ValueEnum, Debug)]
+pub enum WorkflowGraphFormat {
+    Text,
+    Mermaid,
+}
+
+#[derive(Debug, Args)]
+pub struct WorkflowPlanArgs {
+    /// Name of the workflow profile to plan
+    pub profile: String,
+
+    #[arg(long, default_value = "text", value_enum)]
+    pub format: WorkflowOutputFormat,
+
+    #[arg(long)]
+    pub only: Option<String>,
+
+    #[arg(long)]
+    pub ignore: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct WorkflowGraphArgs {
+    /// Name of the workflow profile to graph
+    pub profile: String,
+
+    #[arg(long, default_value = "text", value_enum)]
+    pub format: WorkflowGraphFormat,
+
+    #[arg(long)]
+    pub only: Option<String>,
+
+    #[arg(long)]
+    pub ignore: Option<String>,
+}
+
+#[derive(Debug, Args)]
+pub struct WorkflowExplainArgs {
+    /// Name of the workflow profile
+    pub profile: String,
+
+    /// ID of the task to explain
+    pub task: String,
 }
 
 #[derive(Debug, Args)]

src/main.rs

@@ -803,6 +803,27 @@ async fn handle_workflow(cmd: WorkflowCommands) -> Result<(), CliError> {
         return Ok(());
     }
 
+    if let WorkflowCommands::Plan(args) = cmd {
+        sailr::workflow::runner::WorkflowRunner::plan(args)
+            .await
+            .map_err(CliError::Other)?;
+        return Ok(());
+    }
+
+    if let WorkflowCommands::Graph(args) = cmd {
+        sailr::workflow::runner::WorkflowRunner::graph(args)
+            .await
+            .map_err(CliError::Other)?;
+        return Ok(());
+    }
+
+    if let WorkflowCommands::Explain(args) = cmd {
+        sailr::workflow::runner::WorkflowRunner::explain(args)
+            .await
+            .map_err(CliError::Other)?;
+        return Ok(());
+    }
+
     let config = WorkflowConfig::load()?;
 
     match cmd {
@@ -853,7 +874,10 @@ async fn handle_workflow(cmd: WorkflowCommands) -> Result<(), CliError> {
                 path.display()
             ));
         }
-        WorkflowCommands::Run(_) => unreachable!(),
+        WorkflowCommands::Run(_)
+        | WorkflowCommands::Plan(_)
+        | WorkflowCommands::Graph(_)
+        | WorkflowCommands::Explain(_) => unreachable!(),
     }
 
     Ok(())

src/workflow/mod.rs

@@ -2,6 +2,8 @@ pub mod builder_context;
 pub mod ci;
 pub mod config;
 pub mod error;
+pub mod plan;
 pub mod planner;
 pub mod profile;
+pub mod render;
 pub mod runner;

src/workflow/plan.rs

@@ -0,0 +1,49 @@
+use crate::builder::SailrBuildPlan;
+use crate::workflow::profile::NormalizedWorkflowProfile;
+use crate::workflow::runner::RunnerContext;
+
+#[derive(Debug, Clone)]
+pub struct WorkflowPlan {
+    pub profile: NormalizedWorkflowProfile,
+    pub runner: RunnerContext,
+    pub tasks: Vec<WorkflowTaskPlan>,
+    pub edges: Vec<WorkflowEdge>,
+    pub build_plan: Option<SailrBuildPlan>,
+    pub effects: WorkflowEffects,
+}
+
+#[derive(Debug, Clone)]
+pub struct WorkflowTaskPlan {
+    pub id: String,
+    pub label: String,
+    pub kind: WorkflowTaskKind,
+    pub dependencies: Vec<String>,
+    pub effects: WorkflowEffects,
+    pub description: String,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+pub enum WorkflowTaskKind {
+    ValidateConfig,
+    BuildPlan,
+    ServiceBuild,
+    Generate,
+    Deploy,
+    Verify,
+    Approval,
+}
+
+#[derive(Debug, Clone)]
+pub struct WorkflowEdge {
+    pub from: String,
+    pub to: String,
+}
+
+#[derive(Debug, Clone, Default)]
+pub struct WorkflowEffects {
+    pub mutates_filesystem: bool,
+    pub mutates_docker: bool,
+    pub mutates_registry: bool,
+    pub mutates_cluster: bool,
+    pub prompts_user: bool,
+}