e7fc1b2e2e
feat: restricted job tokens per script and flow ( #11484 )
...
* feat: restricted job tokens (job_token_scopes on scripts and flows)
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* fix: admit flow-run reads, skip dedicated workers, gate on worker version
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* fix: keep restricted jobs off flow runners, preserve scopes on rename and promotion
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* fix: keep restricted jobs off every dedicated handoff, confine progress flow id
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* fix: exclude restricted runnables from dedicated worker startup
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* fix: gate restrictions on the release after 1.821.0
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* fix: store per-job scopes on job_perms instead of v2_job, pin inline runs to the checked version
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
* feat: step-level job_token_scopes for flow steps and agent tools
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: fail closed on perms read errors, refuse restricted queue imports, gate step scopes in previews
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: carry a job's scopes on its completion so a re-run keeps the caller's cap
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: carry a zombie job's scopes into its completion
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: leave a zombie for the next sweep when its scopes cannot be read
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* docs: correct the QueuedJobV2 completion comment
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: validate step scopes in batch flows, fail closed on unvalidated step scopes
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: refuse flows with step or tool restrictions at push while an older worker is live
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: apply the step-scope worker gate to flow restarts
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: list the job token toggle with the other step and flow settings
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* chore: pin the EE companion merged with EE main
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* perf: skip scope lookups for unrestricted jobs; list job token setting last
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* style: rustfmt scopes tests
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* fix: confine restricted job tokens to their own run lineage; drop remaining extra lookups
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Claude-Session: https://claude.ai/code/session_014FHGE3ynoAu6yrgeg4kLwL
* chore: update ee-repo-ref to 259ad3bfeef5285ba80eedc86309b11dca001220
This commit updates the EE repository reference after PR #843 was merged in windmill-ee-private.
Previous ee-repo-ref: 2b77c0225dca441235daf7bf0a06ba968df0c927
New ee-repo-ref: 259ad3bfeef5285ba80eedc86309b11dca001220
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com >
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
2026-10-03 09:33:44 +02:00
