Windows forbids '*' in a file name, so creating it failed the test on the
Windows CLI runner. The :(literal) pathspec guard it covers is
platform-independent and stays exercised on Linux and macOS.
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* chore: add per-job perf profiler and its docs
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: create perf output dir and refuse to sample with backtraces enabled
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: treat PERF_SQL=0 as off and tag reports with their mode
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat(icons): add network and security vendor icons for new hub integrations
Aruba, F5, Fortinet, Infoblox, IP Fabric, Netskope, Palo Alto Networks, Splunk and Tufin,
plus map entries for awx (existing AnsibleIcon). Cisco integrations already resolve to
CiscoIcon through the leading-segment fallback.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat(icons): add Zabbix icon
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(icons): crop the Zabbix icon to the Z mark only
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat(icons): add Ericsson icon for the Ericsson Private 5G integration
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: open a flow linking an agent from its menu
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: toast when the flow handoff cannot be stored
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: turn an agent into a flow from its editor, and into a chat app from its page
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: let sandboxed apps run agents, and keep the flow handoff race-free
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: save the new flow as a draft before letting the agent draft go
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: offer the chat app only to those who may build apps
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: give the agent page's chat app section a tab on small screens
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show the flow handoff as an info alert, framed around context and output
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep the flow handoff from operators and say why the chat app is locked
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: collapse the flow handoff hint to its title and button
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show the flow handoff as a corner hint, as the flow editor shows its own
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: name the agent on the app button and say why it is disabled
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: ask whether the agent needs steps before or after it
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: name what a flow adds around the agent in its hint
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: say a never-deployed agent turns into a flow
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* revert: leave agent runs and the raw-app guidance to the chat SDK's runnable transport
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: show the agent page's sections as tabs at every width, as a chat-mode flow's page does
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: one webhook panel for scripts, flows and agents, with an AI prompt and chat-mode examples
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: describe the preprocessor's event argument instead of the v1 wm_trigger
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: give the flow chat's preprocessor example the v2 event signature
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: group a webhook's request choices and examples under an HTTP tab, beside the AI prompt and chat SDK
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: drop a comment about guidance this branch no longer adds
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: say where the AI prompt expects the webhook token
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: tell the chat-flow prompt that memory_id is required
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep the webhook tabs next to their content
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep the webhook's REST tab name
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: build an agent's chat app from a template, not an AI session
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: don't send the agent chat app's message on an IME confirmation
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: agent API tab with one row of call examples and a copy-prompt button
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: open build app in an AI session when AI sessions are on
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: app conversations through the memory_id query parameter, chat-mode flows included
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: regenerate the mcp session instructions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: type backendAsync's memoryId option in the eval diagnostics
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: pin git-sync hub scripts to windmill-cli 1.849.0
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep build app in the editor when windmill ai is off
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: webhook panel with http and chat sdk tabs over toggle settings
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: memoryId option on the sync backend call too
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: bump the ui builder artifact for the memoryId option
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep the webhook panel's http and chat sdk tabs close to their content
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: shared-utils 1.0.14
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: cli takes shared-utils 1.0.14 for the memoryId option
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: pin the app conversation scoping and the memoryId signatures
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: assert the ownership refusal, not any refusal
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: match the memoryId option in the cli wmill.ts signature tests
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: show the webhook request formats in a card with their toggle
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: put the chat sdk example in the same card as the http request
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add a windmill app tab to chat-mode flow pages
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: title the webhook example cards and label the ai prompt
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: offer the chat app from the conversations sidebar instead of a tab
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: raise the chat app's chat-sdk floor to 1.851.0
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: render the agent's chat app card only once the workspace is known
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: gate the flow's build chat app menu item like the sidebar card
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: build the agent's chat app through the page's navigation, for app-only authors too
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep an imported app in the editor inside a session preview
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: build a form app from an agent without managed memory
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: cover the agent form app's generated source
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: give GLM models a 32K output budget, including through Custom AI
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: limit the GLM output budget to the families documented at 32K+
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: drop extra_perms from variable and resource access-denied errors
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: pin that denied variable/resource reads omit extra_perms
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: note that perm errors show extra_perms on purpose
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show not deployed yet for undeployed apps in session preview tabs
* fix: say what an embed-token 404 means in the app viewer comment
* fix: name the protection rule only when the rules were actually read
* fix(cli): drop deprecated and unused fields from trigger new templates
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): flow preview takes the windmill path and runs hub steps with --step
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): run a deployed script step with its deployed lock in flow preview --step
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): flow preview --remote honors nonDottedPaths when resolving the folder
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: omit null random_factor when serializing an exponential retry
A non-default exponential retry with no random_factor round-tripped
through the flow-dependencies job as random_factor: null, which
wmill generate-metadata wrote back to flow.yaml and wmill lint rejects.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep an unset branch skip_failure false through serialization
The worker and the flow editor read an absent skip_failure as false, but
Branch defaulted it to true, so a round-trip (generate-metadata, the
flow-dependencies job) silently made every such branch skip failures.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: rebuild and compact service logs without a hash dedupe that cannot spill
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to e3d765239022d2b7a6615d28348a9da661a3faf5
This commit updates the EE repository reference after PR #933 was merged in windmill-ee-private.
Previous ee-repo-ref: e96642d749e0c5fcf4738015b067fc218769a5d1
New ee-repo-ref: e3d765239022d2b7a6615d28348a9da661a3faf5
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
The worker schedules step i after the sleep of module i-1
(worker_flow.rs), so a module's sleep delays the step after it. The
schema said "Delay before executing this step", and that text reaches
the write-flow skill, the flow chat and the MCP session instructions.
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep a new app's AI session unsaved until it is started
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: never drop a held session while another draft is created
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: forward untilStarted through openSourceInSession overrides
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add ai review to the drafts page, draft diffs and the session review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: drop an ai review when its workspace changes
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: follow the diff version picker in ai review and review only your own draft from the badge
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: give the drafts page ai review the full width
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: gate guest apps by their mode and the protection rule alone
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep apps that admitted no guest closed on upgrade
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to 0605eac866b49f0de913ab41c1168b79eec31ca0
This commit updates the EE repository reference after PR #931 was merged in windmill-ee-private.
Previous ee-repo-ref: 1f643a1aaa697578b36d67982358299ee20af7f4
New ee-repo-ref: 0605eac866b49f0de913ab41c1168b79eec31ca0
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
A pipeline node deploys with its script hash as parent_hash, so a move to a
workspace without that version left a draft whose Deploy all fails there.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
A session could only move into a direct fork of its workspace. The picker
now lists the whole family and lets a new fork be based on any of its
workspaces, and /drafts/transfer accepts any target with the same root.
A fork the move creates from elsewhere holds that base's drafts, so its
drafts are never replaced.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): resolve /ui/ in app dev and lint, and its bare imports from the app
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): match shared ui/ files by real path so a symlinked ui/ still redirects
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): keep relative css @import in shared ui/ resolving next to the file
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix(cli): let esbuild resolve relative css @import in ui/ so suffixes keep working
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: rebuild raw apps on a ui/-only change and fail sync push on ui/ errors
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: catch unquoted css ui/ imports and surface app lookup errors
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: match the raw app metadata file on windows sync paths
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add ai review to deployment requests
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: bound ai review fetches and surface unreadable items
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add fix in ai session and model picker to deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add workspace instructions for deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: read review instructions from the parent and bind ai review to the fork
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: pin the fix-all session preview to the fork's compare page
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show the protection-rule bypass toggle inline
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: make the bypass toggle small and red
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* refactor: drop workspace-settings instructions from deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: folder-scoped review instructions for the deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: review the selected items with ai on compare and deploy
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep reviewing when review instructions cannot be listed
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: say the review instruction floor is a prompt request, not enforcement
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mark an ai review out of date when its items change
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to 77703cf32e58964906d87ee83ddda44b5b8d1b7e
This commit updates the EE repository reference after PR #926 was merged in windmill-ee-private.
Previous ee-repo-ref: e30ab9e69d1854fcaed5620c934ace32acb0a729
New ee-repo-ref: 77703cf32e58964906d87ee83ddda44b5b8d1b7e
Automated by sync-ee-ref workflow.
* feat: review git sync pull requests with wmill review
* fix: withhold retyped resources and encryption keys, fall back from the responses route
* fix: withhold fileset children, workspace-specific resources and pathspec-named files
* feat: include the ready-to-post review in wmill review --json
* feat: review a workspace synced into a repository subfolder
* docs: say what wmill review takes from flags rather than wmill.yaml
* feat: review git sync pull requests with ai on the instance
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PjsYvwbvQh6Traiw1J3fRM
* chore: update ee-repo-ref for the ai review fixes
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PjsYvwbvQh6Traiw1J3fRM
* feat: point git sync ai review at the published hub script
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PjsYvwbvQh6Traiw1J3fRM
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
* feat: add ai review to deployment requests
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: bound ai review fetches and surface unreadable items
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add fix in ai session and model picker to deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add workspace instructions for deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: read review instructions from the parent and bind ai review to the fork
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: pin the fix-all session preview to the fork's compare page
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show the protection-rule bypass toggle inline
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: make the bypass toggle small and red
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* refactor: drop workspace-settings instructions from deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: folder-scoped review instructions for the deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: review the selected items with ai on compare and deploy
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep reviewing when review instructions cannot be listed
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: say the review instruction floor is a prompt request, not enforcement
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mark an ai review out of date when its items change
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to 77703cf32e58964906d87ee83ddda44b5b8d1b7e
This commit updates the EE repository reference after PR #926 was merged in windmill-ee-private.
Previous ee-repo-ref: e30ab9e69d1854fcaed5620c934ace32acb0a729
New ee-repo-ref: 77703cf32e58964906d87ee83ddda44b5b8d1b7e
Automated by sync-ee-ref workflow.
* feat: review git sync pull requests with wmill review
* fix: withhold retyped resources and encryption keys, fall back from the responses route
* fix: withhold fileset children, workspace-specific resources and pathspec-named files
* feat: include the ready-to-post review in wmill review --json
* feat: review a workspace synced into a repository subfolder
* docs: say what wmill review takes from flags rather than wmill.yaml
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
* fix: issue oidc tokens to a deployed flow's dynamic select
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: leave dyn select previews on a dedicated worker unproven
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: match every dedicated worker tag shape in the dyn select check
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: cover hashed dedicated worker tags of long workspace ids
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep a flow dyn select claimed when a script or app shares its sub
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Ruben Fiszel <ruben@windmill.dev>
* feat: add ai review to deployment requests
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: bound ai review fetches and surface unreadable items
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add fix in ai session and model picker to deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add workspace instructions for deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: read review instructions from the parent and bind ai review to the fork
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: pin the fix-all session preview to the fork's compare page
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show the protection-rule bypass toggle inline
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: make the bypass toggle small and red
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* refactor: drop workspace-settings instructions from deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: folder-scoped review instructions for the deployment ai review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: review the selected items with ai on compare and deploy
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep reviewing when review instructions cannot be listed
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: say the review instruction floor is a prompt request, not enforcement
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mark an ai review out of date when its items change
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to 77703cf32e58964906d87ee83ddda44b5b8d1b7e
This commit updates the EE repository reference after PR #926 was merged in windmill-ee-private.
Previous ee-repo-ref: e30ab9e69d1854fcaed5620c934ace32acb0a729
New ee-repo-ref: 77703cf32e58964906d87ee83ddda44b5b8d1b7e
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
The AI proxy resolved every credential field of a resource except base_url,
so a base_url set with "Insert a Variable" reached URL validation as the
literal $var: path and failed with "relative URL without a base".
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: fork capability per role and fork role mapping on rulesets
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep unset fork for unrestricted roles and apply fork role mapping to fork-owner adds
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: fork_roles feature usage telemetry
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: derive an unset fork in the role editor as the server does
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to d535972f0b35c6a7f257720816bdaec18465adef
This commit updates the EE repository reference after PR #929 was merged in windmill-ee-private.
Previous ee-repo-ref: 4a8d59cd1563382fcec85b1367f7e15e09bc13c2
New ee-repo-ref: d535972f0b35c6a7f257720816bdaec18465adef
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
* chore: apply the untrusted-input check to trigger, resume and asset args
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: apply the check to every native trigger and slack/teams commands
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: accept resume references the approver can read
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: refuse every reference in a resume payload
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: update ee-repo-ref to 5e7b1de9a07114e277a22e9e3c68b0809c06f18d
This commit updates the EE repository reference after PR #927 was merged in windmill-ee-private.
Previous ee-repo-ref: 15733e7ee1e8ab0efa56a429801be31fe40277e2
New ee-repo-ref: 5e7b1de9a07114e277a22e9e3c68b0809c06f18d
Automated by sync-ee-ref workflow.
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
* refactor: harmonize flow and script settings layout
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: keep the priority input open while it is edited
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* feat: confirm run-as on flow and script deploy, mute from editor menu
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: keep settings rows open while edited and name the deploying user for non-admins
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: reread the deployed run-as user after a deploy that keeps the editor open
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: write a setting before its row opens and show its real state while edited
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: slide settings rows open to their full height
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: send the popover's deployment message when Deploy is clicked
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: remount a settings row's fields when its toggle turns it on
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: send the popover's deployment message from Deploy & Stay here
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: clear the deployment message after a successful deploy
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* fix: read the deployed row before muting from the menu, title Deploy only when icon-only
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
* feat: app conversations through the memory_id query parameter, chat-mode flows included
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: regenerate the mcp session instructions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: type backendAsync's memoryId option in the eval diagnostics
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: pin git-sync hub scripts to windmill-cli 1.849.0
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: memoryId option on the sync backend call too
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: bump the ui builder artifact for the memoryId option
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: shared-utils 1.0.14
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* chore: cli takes shared-utils 1.0.14 for the memoryId option
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: pin the app conversation scoping and the memoryId signatures
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: assert the ownership refusal, not any refusal
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* test: match the memoryId option in the cli wmill.ts signature tests
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: file an app's turns as the deployed flow's conversation, preview included
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* fix: drop superseded list replies after a workspace or filter change
* fix: build resources filter suggestions from the visible tab
* test: pin that latestRequest peek never supersedes a request
* fix: keep a superseded email trigger load from ending the loading state
* fix: stop the breadcrumb sliding when switching sessions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: state the band offset constraint without the old arrangement
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: render mcp run tools as an mcp apps run card
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: back off run card polling and pin its run summary
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep the run card polling after a failed get_run
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add run details, run form, diff and item views to the mcp card
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: guard the mcp card's run form and diff errors
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: honour the host's dark theme in the mcp card without its colours
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep untouched run form arguments and drop stale run refreshes
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: let the run form re-send references and label diff links by target
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: parse literals typed over run form references by field type
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: version the mcp card uri and declare its empty csp
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: keep the mcp card to runs, group loop and branch steps, restyle it
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: say when the mcp card cannot read a finished run's details
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: show runs, run tables and deploy reviews through dedicated mcp tools
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: review the whole draft before deploying from the mcp card
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: follow host card guidelines: header link, collapsible steps, review summary, no run form
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep fullscreen review diffs whole and match drafts by storage path first
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: link to windmill where a host has no fullscreen, cap inline logs, shrink the card back
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: say in the review summary why a draft cannot be deployed from the card
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: link the review to compare and deploy, cap inline tables, open long results
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: flag a cut result or log by what was kept, keep a lone log line
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mark the mcp card's fullscreen buttons with the expand icon
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: capitalize the mcp card's windmill link labels
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: add a show_item card for workspace items, collapsible sections in fullscreen
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: apply windmill brand guidelines to the mcp card and show errors as windmill does
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: show more windmill result kinds in the mcp run card
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: tidy the mcp card layout and let oversized drafts deploy from the review
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: name a shown run by its summary, cap long item values, drop variable cards
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: link an app draft's card to its editor
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: show a running flow's progress in the mcp card, open cut blocks on click, link each step
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: read only a running step's log tail and skip the preprocessor in the progress bar
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp card headers carry a kind icon, and a summary names the item over its path
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: skip result streams in log tail reads, keep the cut-result link when it fits
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: link app drafts and agents to their own pages, offer Cancel only to tokens that can cancel
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: simple inline mcp cards with a tabbed fullscreen run view and step drill-in
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: draw the mcp card's tabs as windmill's underlined tabs
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: link to windmill for what an mcp card hides when the host has no fullscreen
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp run card steps as a tree beside the selected step, nested progress, danger cancel
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: draw image results in the mcp run card, and a collapse control in fullscreen
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: copy controls on the mcp card's results, logs and code
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp card links read as text, hover tint only on buttons
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: windmill's names, icons, status colours and type scale in the mcp card, within the hosts' rules
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep images out of mcp run table rows, and re-read only single-field image results
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: measure a re-read mcp image result as postgres prints it, so wrapped images draw
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp review deploys the selected drafts, loops list every iteration's result, branches and subflows named
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp review diffs open on demand, as on the compare page
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp script cards fade their code in inline, item sections open whole in fullscreen
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp item cards link what a schedule or trigger runs, show a trigger's key settings and a schedule's arguments as rows
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp card lists a loop's latest 10 iterations, trigger topics by name
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp trigger cards open their other settings from a last table row
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp draft badge in windmill's indigo without a spinner, show-more as a list's last row
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: consistent mcp cards: one expand icon and rule, aligned tables, path titles, error and empty states
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp item cards offer fullscreen for cut values and overflowing code, name script steps by path
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp cards show ai agents: their answer, named tool calls, what a waiting agent asks, saved agents
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp saved-agent runs label tool calls by tool, never by the internal root step
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: a saved agent's run card names its steps tab Tool calls
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: an mcp card says an agent waits only while its run is going
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp card paths wrap at slashes beside their icon; oauth approval offers all workspaces to a user in none
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp card view read carries the cache hints 2026-07-28 clients require
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: mcp card leaves leaving fullscreen to the host's own close control
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp cards name a saved agent's test run by the agent's path, without .chat
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* perf: mcp get_run builds no card data; the run card refreshes through show_run
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp show_deploy_review refuses a token that cannot deploy, not only hides from it
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp session tools carry a title and explicit read-only, destructive and open-world hints
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp run card reads only the end of a run's log; create_datatable_migration is destructive
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp run card counts log offsets from 1 and reads a finished run's archived log in full
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp item card rechecks clipped code on resize; oauth hint hides once the toggle is on
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: mcp item card uncuts a code block once a wider card fits it
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
* feat: guidance for building standalone ai agents in ai sessions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: agent guidance for resource-only sessions, no flow tools
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: tell the user to deploy a drafted tool script with its agent
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: scope plain agent values, document tool_inputs, list agents in get_instructions
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: test and run ai agents from ai sessions, open agents in their editor
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: full-bleed agent editor tabs, back to the run form for agent tests
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: describe read-and-run as running agents too, pin agent run links
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: host the agent editor natively in session tabs
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: switch the agent editor to tabs below 900px
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: name an agent's session tab after its summary
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: show deployed agents in session tabs, open and run them from the chat
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: deploy agents from the chat, report agent tabs as the active editor
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: pick agents from the tab picker, name their tabs, scope the agent page to its workspace
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: leave open editors alone on agent writes, read the agent page's workspace user
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: refresh an agent's deployed page when the chat deploys or deletes it
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: name agent tabs before they load, mark agents in the changes drawer, stay on a deleted agent's tab
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep a cleared agent summary out of its tab name
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep the resource drawer's json option that the resources list still passes
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* feat: open an agent in an AI session from its pages, fix review findings on agent tabs
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* docs: name the reserved agent tool names in the agent guidance
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: reload an agent's editor on a discard, open a new agent in a session
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: show agents as agents on compare and deploy, name a never-deployed one by its path
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: keep a deployed agent's type in its draft diff
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: link a fork row to the agent editor only on the side that holds the agent
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
* fix: guard agent page paths, mark drafted agents in the picker, side-aware agent rows on fork compare
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
The transfer bypasses the syncer that keeps localDraftHints, and lists
prefer a hint over the server's flag, so the parent kept its markers after
"Remove these drafts". The parent's hints are cleared for removed drafts
and the fork's set for copied ones.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
The editors stay mounted while the move drains them, and a keystroke
typed during that drain was lost when they closed, or left in the parent
of an existing fork. The preview tabs are inert from the move's first
step, so nothing new reaches an editor after the drain starts.
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Guilhem LemouelandClaude Opus 5.5
Ruben Fiszelandrubenfiszel
Alexander PetricandClaude Opus 5.5
hugocasaandClaude Opus 5.5
AlexRV12
