feat(cli): add consistent get/list/new subcommands for all item types (#8047)

* feat(cli): add consistent get/list/new subcommands for all item types

Make the CLI consistent so every item type (script, flow, app, resource,
resource-type, variable, schedule, folder, trigger) supports get/list/new
subcommands, enabling the CLI to be used as a full API client in bash
scripts with jq piping.

- Add --json flag to all list commands for machine-readable output
- Register explicit "list" subcommand alongside default action
- Add "get <path> [--json]" subcommand to fetch single items from API
- Rename "bootstrap" to "new" for script/flow, keep "bootstrap" as alias
- Add "new" subcommand for resource, resource-type, variable, schedule,
  folder, and trigger to create local template YAML files
- Update cli-commands skill documentation for wmill init
- Add integration tests for all new commands

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* all

* feat: install wmill CLI in Docker images and use it for bash variable/resource access

- Install windmill-cli via bun in all Dockerfiles that include bun
- DockerfileCli: switch from node:slim to oven/bun:slim
- CLI: auto-configure from WM_WORKSPACE/WM_TOKEN/BASE_INTERNAL_URL env vars
  as last-resort fallback when no workspace is configured
- Frontend: replace curl-based bash snippets with wmill variable/resource get
- Add backend integration tests for wmill CLI in bash scripts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): install windmill-cli in backend test workflow

Ensures wmill is available on PATH for bash integration tests
that use `wmill variable get` and `wmill resource get`.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* refactor(cli): replace @std/* Deno dependencies with Node.js equivalents

Replace @std/log with a lightweight custom logger (core/log.ts),
@std/path with node:path, and @std/yaml with the yaml npm package.
Also fix process hang on exit, add --node option to install_dev.sh,
and add missing hasRequiredPermissions to NpmProvider.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* all

* all

* all

* refactor(cli): replace @ayonli/jsext and @std/encoding with lightweight alternatives

Replace @ayonli/jsext (8.4MB) with tar-stream (32kB) for tar creation,
replace @std/encoding with Node.js Buffer.toString("hex"), and fix
@windmill-labs/shared-utils to use direct npm instead of JSR mirror.
Also resolve merge conflicts in sync.ts and fix pre-existing type errors.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(cli): use singleQuote YAML output and pass yamlOptions in gitsync pull

The yaml library defaults to double quotes, but the codebase (and tests)
expect single-quoted strings. Add singleQuote: true to yamlOptions and
pass yamlOptions to gitsync-settings pull writeFile calls.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* all

* all

* fix(cli): address code review feedback

- Install CLI from source in backend tests instead of npm
- Fix script bootstrap catch block to re-throw "File already exists"
- Add type-safe local variable after trigger kind validation
- Use created_by instead of policy.on_behalf_of for app get output
- Note --kind is recommended for faster trigger lookup in help text
- Document node symlink purpose in Dockerfiles

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): use /usr/bin for wmill wrapper to ensure it's in PATH

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(ci): install wmill to ~/.local/bin to avoid permission issues

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* ci(backend): switch to Blacksmith runner and add cargo caching

- Switch from ubicloud-standard-16 to blacksmith-16vcpu-ubuntu-2404 for faster NVMe-backed builds
- Add stickydisk for cargo target directory (persistent NVMe cache across runs)
- Add cache for cargo registry and git dependencies
- Upgrade DuckDB FFI cache from actions/cache@v3 to useblacksmith/cache@v1
- Enable CARGO_INCREMENTAL=1 to benefit from persistent target cache

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix ci

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

cli/src/utils/codebase.ts

@@ -1,5 +1,5 @@
 import { Codebase, SyncOptions } from "../core/conf.ts";
-import * as log from "@std/log";
+import * as log from "../core/log.ts";
 import { digestDir } from "./utils.ts";
 
 export type SyncCodebase = Codebase & {

cli/src/utils/git.ts

@@ -1,4 +1,4 @@
-import * as log from "@std/log";
+import * as log from "../core/log.ts";
 import { execSync } from "node:child_process";
 import { WM_FORK_PREFIX } from "../core/constants.ts";
 

cli/src/utils/metadata.ts

@@ -1,8 +1,8 @@
 import { GlobalOptions } from "../types.ts";
-import { SEPARATOR as SEP } from "@std/path";
+import { sep as SEP } from "node:path";
 import { colors } from "@cliffy/ansi/colors";
-import * as log from "@std/log";
-import { stringify as yamlStringify } from "@std/yaml";
+import * as log from "../core/log.ts";
+import { stringify as yamlStringify } from "yaml";
 import { yamlParseFile } from "./yaml.ts";
 import { readFile, writeFile, stat, rm, readdir } from "node:fs/promises";
 import { readFileSync } from "node:fs";

cli/src/utils/resource_folders.ts

@@ -8,8 +8,8 @@
  * (.flow, .app, .raw_app) or dunder-prefixed names (__flow, __app, __raw_app).
  */
 
-import * as log from "@std/log";
-import { SEPARATOR as SEP } from "@std/path";
+import * as log from "../core/log.ts";
+import { sep as SEP } from "node:path";
 import { yamlParseFile } from "./yaml.ts";
 import * as fs from "node:fs";
 import * as path from "node:path";

cli/src/utils/tar.ts

@@ -0,0 +1,22 @@
+import { pack } from "tar-stream";
+
+export interface TarEntry {
+  name: string;
+  content: Buffer | Uint8Array | string;
+}
+
+export function createTarBlob(entries: TarEntry[]): Promise<Blob> {
+  return new Promise((resolve, reject) => {
+    const p = pack();
+    const chunks: Uint8Array[] = [];
+
+    p.on("data", (chunk: Buffer) => chunks.push(new Uint8Array(chunk)));
+    p.on("end", () => resolve(new Blob(chunks as BlobPart[])));
+    p.on("error", reject);
+
+    for (const entry of entries) {
+      p.entry({ name: entry.name }, Buffer.from(entry.content));
+    }
+    p.finalize();
+  });
+}

cli/src/utils/upgrade.ts

@@ -53,6 +53,10 @@ export class NpmProvider extends Provider {
   getRegistryUrl(name: string, version: string): string {
     return `npm:${this.packageName ?? name}@${version}`;
   }
+
+  async hasRequiredPermissions(): Promise<boolean> {
+    return true;
+  }
 }
 
 type NpmApiPackageMetadata = {

cli/src/utils/utils.ts

@@ -3,9 +3,8 @@
 // @ts-nocheck This file is copied from a JS project, so it's not type-safe.
 
 import { colors } from "@cliffy/ansi/colors";
-import { encodeHex } from "@std/encoding";
-import * as log from "@std/log";
-import { SEPARATOR as SEP } from "@std/path";
+import * as log from "../core/log.ts";
+import { sep as SEP } from "node:path";
 import crypto from "node:crypto";
 import { readFileSync, writeFileSync } from "node:fs";
 import { readdir, readFile } from "node:fs/promises";
@@ -128,7 +127,7 @@ export async function generateHashFromBuffer(
   content: BufferSource
 ): Promise<string> {
   const hashBuffer = await crypto.subtle.digest("SHA-256", content);
-  return encodeHex(hashBuffer);
+  return Buffer.from(hashBuffer).toString("hex");
 }
 
 export function readInlinePathSync(path: string): string {

cli/src/utils/yaml.ts

@@ -1,4 +1,4 @@
-import { parse as yamlParse, type ParseOptions } from "@std/yaml";
+import { parse as yamlParse, type ParseOptions } from "yaml";
 import { readFile } from "node:fs/promises";
 
 export async function yamlParseFile(path: string, options: ParseOptions = {}) {