fix: address review comments, add NanoflowCallAction formatter, test plan, docs and proposal update

Author: retran

docs/01-project/MDL_FEATURE_MATRIX.md

@@ -13,7 +13,7 @@ When adding a new MDL feature, use this matrix as a checklist to ensure complete
 | **Associations** | Y | Y | Y | N | Y | Y | 01 | Y | N | Y | Y | Y | Y | Y | Y | Y | N |
 | **Enumerations** | Y | Y | Y | Y | Y | Y | 01 | Y | Y | N | Y | Y | Y | N | Y | Y | Y |
 | **Microflows** | Y | Y | Y | Y | Y | N | 02 | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
-| **Nanoflows** | Y | N | N | N | N | N | N | N | Y | Y | Y | N | Y | N | P | N | N |
+| **Nanoflows** | Y | Y | Y | Y | Y | N | N | N | Y | Y | Y | Y | Y | Y | P | N | N |
 | **Pages** | Y | Y | Y | N | Y | Y | 03 | Y | Y | Y | Y | Y | Y | Y | Y | Y | Y |
 | **Snippets** | Y | Y | Y | N | Y | Y | 03 | Y | Y | Y | Y | Y | Y | N | Y | Y | Y |
 | **Layouts** | Y | Y | N | N | N | N | N | N | Y | Y | Y | N | Y | N | Y | N | N |
@@ -37,6 +37,7 @@ When adding a new MDL feature, use this matrix as a checklist to ensure complete
 | **Project Security** | Y | - | - | - | - | Y | 08 | Y | Y | Y | Y | Y | Y | N | N | Y | Y |
 | **Entity Access** | P | N | Y | P | Y | P | 08 | Y | N | Y | Y | Y | Y | N | N | Y | Y |
 | **Microflow Access** | Y | N | Y | P | Y | P | 08 | Y | N | Y | Y | Y | Y | N | N | Y | Y |
+| **Nanoflow Access** | Y | N | Y | P | Y | P | N | N | N | Y | Y | N | Y | N | N | N | N |
 | **Page Access** | Y | N | Y | P | Y | P | 08 | Y | N | Y | Y | Y | Y | N | N | Y | Y |
 
 ## Project Organization
@@ -123,7 +124,7 @@ These types are not covered in `help.go` output:
 
 ### Missing Skills
 
-- **Nanoflows** — No dedicated skill (covered partially by microflow skill)
+- **Nanoflows** — Dedicated skill exists (`write-nanoflows.md`); also partially covered by microflow skill
 - **Layouts** — Read-only, no skill needed
 - **Constants** — No dedicated skill
 
@@ -170,12 +171,12 @@ Mermaid diagram support (`mxcli describe --format mermaid` + VS Code "Show Diagr
 
 - **Domain Model** (Entities/Associations) — `erDiagram` with attributes, cardinality, generalizations
 - **Microflows** — `flowchart TD` with activities, splits, merge points, case labels
+- **Nanoflows** — `flowchart TD` with activities, splits, merge points (same logic as microflows)
 - **Pages** — `block-beta` with widget tree structure
 
 Not yet implemented:
 
 - **Enumerations** — Could render as a simple table or list diagram
-- **Nanoflows** — Same flowchart logic as microflows, not yet wired up
 - **Snippets** — Same widget tree logic as pages, not yet wired up
 - **Call graphs** — `show context of` / `show callers of` as directed graphs
 - **Module overview** — Combined ER + dependency diagram
@@ -186,9 +187,7 @@ Document types that exist in Mendix but have no MDL support:
 
 | Feature | SHOW | DESCRIBE | CREATE | OR MODIFY | DROP | ALTER | Examples | Tests | Catalog | REFS | LSP | Skills | Help | Viz | REPL | Syntax | Starlark | Notes |
 |---------|------|----------|--------|-----------|------|-------|----------|-------|---------|------|-----|--------|------|-----|------|--------|----------|-------|
-| **Nanoflow CREATE** | Y | N | **N** | N | N | N | N | N | Y | Y | Y | N | Y | N | P | N | N | SHOW works; DESCRIBE/CREATE/DROP not implemented |
 | **Microflow activities** | - | - | P | - | - | - | 02 | Y | P | P | P | Y | Y | - | - | - | P | 60+ activities supported; some edge cases missing |
-| **Mobile nanoflows** | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | Mobile-specific nanoflow features |
 | **Building blocks** | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | Reusable page building blocks |
 | **Styling** | P | P | P | N | N | N | N | N | N | N | N | P | N | P | N | N | N | Class/Style/DesignProperties on widgets; full theme system not yet |
 | **Extensions** | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | N | Mendix extensions / add-ons |

docs/01-project/MDL_QUICK_REFERENCE.md

@@ -205,6 +205,8 @@ authentication basic, session
 | Rename constant | `rename constant Module.Old to New;` | Updates all references |
 | Drop microflow | `drop microflow Module.Name;` | |
 | Drop nanoflow | `drop nanoflow Module.Name;` | |
+| Create nanoflow | `create [or modify] nanoflow Module.Name (params) returns type [folder 'path'] begin ... end nanoflow;` | Same body syntax as microflows |
+| Move nanoflow | `move nanoflow Module.Name to folder 'path';` | |
 
 ## Microflows - Supported Statements
 
@@ -275,7 +277,7 @@ Nested folders use `/` separator: `'Parent/Child/Grandchild'`. Missing folders a
 | Show module roles | `show module roles [in module];` | All roles or filtered by module |
 | Show user roles | `show user roles;` | Project-level user roles |
 | Show demo users | `show demo users;` | Configured demo users |
-| Show access on element | `show access on microflow\|page\|entity Mod.Name;` | Which roles can access |
+| Show access on element | `show access on microflow\|nanoflow\|page\|entity Mod.Name;` | Which roles can access |
 | Show security matrix | `show security matrix [in module];` | Full access overview |
 | Create module role | `create module role Mod.Role [description 'text'];` | |
 | Drop module role | `drop module role Mod.Role;` | |
@@ -284,6 +286,8 @@ Nested folders use `/` separator: `'Parent/Child/Grandchild'`. Missing folders a
 | Drop user role | `drop user role Name;` | |
 | Grant microflow access | `grant execute on microflow Mod.MF to Mod.Role, ...;` | |
 | Revoke microflow access | `revoke execute on microflow Mod.MF from Mod.Role, ...;` | |
+| Grant nanoflow access | `grant execute on nanoflow Mod.NF to Mod.Role, ...;` | |
+| Revoke nanoflow access | `revoke execute on nanoflow Mod.NF from Mod.Role, ...;` | |
 | Grant page access | `grant view on page Mod.Page to Mod.Role, ...;` | |
 | Revoke page access | `revoke view on page Mod.Page from Mod.Role, ...;` | |
 | Grant entity access | `grant Mod.Role on Mod.Entity (create, delete, read *, write *);` | Additive — merges with existing |

docs/05-mdl-specification/01-language-reference.md

@@ -707,6 +707,48 @@ Shows the full MDL definition of an existing microflow (round-trippable output).
 drop microflow <qualified-name>
 ```
 
+### CREATE NANOFLOW
+
+Creates a nanoflow (client-side flow). Uses the same body syntax as microflows, but only client-side activities are allowed (no Java actions, REST calls, workflow actions, etc.).
+
+**Syntax:**
+```sql
+create [or modify] nanoflow <qualified-name>
+  [folder '<path>']
+begin
+  [<statements>]
+end nanoflow
+```
+
+**Restrictions:**
+- No `ErrorEvent`, Java action calls, REST/web service calls, workflow actions, import/export mapping actions, log statements, or database queries
+- Return type cannot be `Binary`
+- Activities are the same as microflows minus server-side-only actions (see `PROPOSAL_nanoflow_support.md` for the full list of 20 disallowed action types)
+
+**Example:**
+```sql
+create nanoflow Shop.ACT_ValidateCart
+folder 'Cart'
+begin
+  declare $Valid boolean = true;
+  if $Cart/ItemCount = 0 then
+    validation feedback $Cart/ItemCount message 'Cart is empty';
+    set $Valid = false;
+  end if;
+  return $Valid;
+end nanoflow;
+```
+
+### DESCRIBE NANOFLOW
+
+Shows the full MDL definition of an existing nanoflow (round-trippable output as `CREATE OR MODIFY NANOFLOW`).
+
+### DROP NANOFLOW
+
+```sql
+drop nanoflow <qualified-name>
+```
+
 ---
 
 ## Page Statements
@@ -923,6 +965,7 @@ Shows which roles have access to a specific element.
 **Syntax:**
 ```sql
 show access on microflow <module>.<name>
+show access on nanoflow <module>.<name>
 show access on page <module>.<name>
 show access on <module>.<entity>
 ```
@@ -984,6 +1027,24 @@ Removes execute access on a microflow from one or more module roles.
 revoke execute on microflow <module>.<name> from <module>.<role> [, ...]
 ```
 
+### GRANT EXECUTE ON NANOFLOW
+
+Grants execute access on a nanoflow to one or more module roles.
+
+**Syntax:**
+```sql
+grant execute on nanoflow <module>.<name> to <module>.<role> [, ...]
+```
+
+### REVOKE EXECUTE ON NANOFLOW
+
+Removes execute access on a nanoflow from one or more module roles.
+
+**Syntax:**
+```sql
+revoke execute on nanoflow <module>.<name> from <module>.<role> [, ...]
+```
+
 ### GRANT VIEW ON PAGE
 
 Grants view access on a page to one or more module roles.

docs/06-mdl-reference/grammar-reference.md

@@ -129,6 +129,7 @@ createStatement
     | | createAssociationStatement
     | | createModuleStatement
     | | createMicroflowStatement
+    | | createNanoflowStatement
     | | createPageStatement
     | | createSnippetStatement
     | | createEnumerationStatement