From 143f95f2ad94273741452778b4dca09d0cd17b80 Mon Sep 17 00:00:00 2001
From: Alexandre Herve <71396855+AlexRV12@users.noreply.github.com>
Date: Sun, 12 Jul 2026 18:44:57 +0200
Subject: [PATCH] feat(debug): record agent-originated flag in debug audit log

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 backend/windmill-api-debug/src/lib.rs | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/backend/windmill-api-debug/src/lib.rs b/backend/windmill-api-debug/src/lib.rs
index 61ec59be75..7347459edc 100644
--- a/backend/windmill-api-debug/src/lib.rs
+++ b/backend/windmill-api-debug/src/lib.rs
@@ -174,6 +174,9 @@ pub struct SignDebugRequest {
     pub code: String,
     /// The programming language (python3, bun, typescript, etc.)
     pub language: String,
+    /// Caller-asserted audit hint only; never verified, so never trust it for authz.
+    #[serde(default)]
+    pub agent_originated: bool,
 }
 
 /// JWT claims for debug tokens
@@ -205,6 +208,14 @@ pub struct SignedDebugPayload {
     pub job_id: String,
 }
 
+fn bool_str(b: bool) -> &'static str {
+    if b {
+        "true"
+    } else {
+        "false"
+    }
+}
+
 /// Sign a debug request and create audit log + job entries for full traceability.
 ///
 /// This endpoint must be called before starting a debug session.
@@ -320,6 +331,8 @@ async fn sign_debug_request(
     .await?;
 
     // Create audit log entry (identical to jobs.run.preview)
+    let job_id_str = job_id.to_string();
+    let agent_flag = bool_str(request.agent_originated);
     audit_log(
         &mut *tx,
         &authed,
@@ -327,7 +340,13 @@ async fn sign_debug_request(
         ActionKind::Execute,
         &w_id,
         None,
-        Some([("job_id", job_id.to_string().as_str())].into()),
+        Some(
+            [
+                ("job_id", job_id_str.as_str()),
+                ("agent_originated", agent_flag),
+            ]
+            .into(),
+        ),
     )
     .await?;
 
@@ -346,6 +365,9 @@ pub struct SignExpressionRequest {
     pub expression: String,
     /// The job ID of the parent debug session
     pub job_id: String,
+    /// Caller-asserted audit hint only; never verified, so never trust it for authz.
+    #[serde(default)]
+    pub agent_originated: bool,
 }
 
 /// JWT claims for expression evaluation tokens
@@ -428,6 +450,7 @@ async fn sign_expression(
         request.expression.clone()
     };
 
+    let agent_flag = bool_str(request.agent_originated);
     audit_log(
         &mut *tx,
         &authed,
@@ -439,6 +462,7 @@ async fn sign_expression(
             [
                 ("job_id", request.job_id.as_str()),
                 ("expression", request.expression.as_str()),
+                ("agent_originated", agent_flag),
             ]
             .into(),
         ),