feat: 增加工作流合法性校验功能

easyflow-api/easyflow-api-public/src/main/java/tech/easyflow/publicapi/controller/PublicWorkflowController.java

@@ -8,11 +8,13 @@ import com.easyagents.flow.core.parser.ChainParser;
 import jakarta.annotation.Resource;
 import jakarta.validation.constraints.NotBlank;
 import org.springframework.web.bind.annotation.*;
-import tech.easyflow.ai.entity.Workflow;
-import tech.easyflow.ai.service.WorkflowService;
 import tech.easyflow.ai.easyagentsflow.entity.ChainInfo;
 import tech.easyflow.ai.easyagentsflow.entity.NodeInfo;
+import tech.easyflow.ai.easyagentsflow.entity.WorkflowCheckStage;
 import tech.easyflow.ai.easyagentsflow.service.TinyFlowService;
+import tech.easyflow.ai.easyagentsflow.service.WorkflowCheckService;
+import tech.easyflow.ai.entity.Workflow;
+import tech.easyflow.ai.service.WorkflowService;
 import tech.easyflow.common.domain.Result;
 import tech.easyflow.common.web.jsonbody.JsonBody;
 
@@ -36,6 +38,8 @@ public class PublicWorkflowController {
     private ChainParser chainParser;
     @Resource
     private TinyFlowService tinyFlowService;
+    @Resource
+    private WorkflowCheckService workflowCheckService;
 
     /**
      * 通过id或别名获取工作流详情
@@ -83,6 +87,7 @@ public class PublicWorkflowController {
         if (workflow == null) {
             throw new RuntimeException("工作流不存在");
         }
+        workflowCheckService.checkOrThrow(workflow.getContent(), WorkflowCheckStage.PRE_EXECUTE, workflow.getId());
         String executeId = chainExecutor.executeAsync(id.toString(), variables);
         return Result.ok(executeId);
     }
@@ -116,6 +121,7 @@ public class PublicWorkflowController {
         if (workflow == null) {
             return Result.fail(1, "can not find the workflow by id: " + id);
         }
+        workflowCheckService.checkOrThrow(workflow.getContent(), WorkflowCheckStage.PRE_EXECUTE, workflow.getId());
 
         ChainDefinition definition = chainParser.parse(workflow.getContent());
         if (definition == null) {