Add workflows, init commit

[Adityav369]

No description provided.

[jazzberry-ai]

Bug Report

Name	Severity	Example test case	Description
Injection vulnerability in apply_instruction.py	High	Create a document with malicious content and use a prompt template to trigger code execution by the LLM.	The apply_instruction action is susceptible to prompt injection, allowing malicious users to execute code via the LLM.
Data loss in save_to_metadata.py with top-level merge and non-dict data	Medium	Create a document with initial metadata, run a workflow that returns a string, and use save_to_metadata with merge_mode set to "top_level" without specifying a metadata_key.	When merge_mode is "top_level" and the data is not a dict, existing metadata can be overwritten.
Concurrency issue during workflow execution for same document	Medium	Simultaneously trigger the same workflow on the same document twice.	A race condition allows multiple workflow runs to be created for the same document.
SQL injection in folder-workflow association queries	High	Inject malicious SQL into the workflow_ids array when associating/disassociating workflows with folders.	The SQL queries used to update folder workflow associations are susceptible to SQL injection.
Document service: potential infinite loop in _ensure_folder_exists	Medium	Configure folder creation to always fail and ingest a document with folder_name.	The _ensure_folder_exists function could lead to an infinite loop if folder creation repeatedly fails.

_{Comments? Email us.}

[jazzberry-ai]

Bug Report

Name	Severity	Example test case	Description
SQL Injection in delete_workflow	High	workflow_id = "123'; DROP TABLE users; --"	The delete_workflow method in core/database/postgres_database.py is vulnerable to SQL injection because it directly substitutes the workflow_id into the SQL query used to remove the workflow from folders. A malicious user could exploit this vulnerability to execute arbitrary SQL code, potentially compromising the database.

_{Comments? Email us.}

[jazzberry-ai]

Bug Report

Name	Severity	Example test case	Description
Incorrect Context Propagation in Workflow Execution	High	Add a document to a folder with an associated workflow.	The workflow might fail to execute because the asyncio.create_task call in _queue_folder_workflows does not propagate the request context, leading to issues accessing the database and other request-scoped dependencies.

_{Comments? Email us.}