chore(main): release 1.814.0 (#11171 )

* chore(main): release 1.814.0 * Apply automatic changes --------- Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>
feat: let plan mode search and read connected mcp servers (#11205 )
2026-09-18 00:02:27 +00:00 · 2026-09-17 20:10:04 +02:00 · 2026-09-17 16:24:30 +02:00 · 2026-09-17 15:35:18 +02:00 · 2026-09-17 14:55:45 +02:00 · 2026-09-17 11:55:43 +02:00
261 changed files with 5866 additions and 13713 deletions
@@ -1,3 +1,3 @@
 {
-  ".": "1.813.0"
+  ".": "1.814.0"
 }
@@ -1,5 +1,31 @@
 # Changelog

+## [1.814.0](https://github.com/windmill-labs/windmill/compare/v1.813.0...v1.814.0) (2026-09-17)
+
+
+### Features
+
+* **ai-chat:** add list_workers and list_data_metrics global tools ([#11143](https://github.com/windmill-labs/windmill/issues/11143)) ([e954d33](https://github.com/windmill-labs/windmill/commit/e954d33613e4ff5027667eb8f646615d9bbd499d))
+* **ai-chat:** merge get_job_logs and get_flow_run_details into get_run ([#11172](https://github.com/windmill-labs/windmill/issues/11172)) ([5bb37ca](https://github.com/windmill-labs/windmill/commit/5bb37ca3388666fba72c55534e37f37bb3e9299e))
+* allow git sync auto-pull, promotion and PRs on Pro licenses ([#11173](https://github.com/windmill-labs/windmill/issues/11173)) ([02e47de](https://github.com/windmill-labs/windmill/commit/02e47de8b4c4f3f54753aabf8c67bc8e71ffb957))
+* badge chat-input flows on the home list ([#11164](https://github.com/windmill-labs/windmill/issues/11164)) ([3d08197](https://github.com/windmill-labs/windmill/commit/3d0819718221f885b61e73d02b43dcc853c7d02a))
+* collect flow conversations and agent memory once their last message goes ([#11178](https://github.com/windmill-labs/windmill/issues/11178)) ([23c24a9](https://github.com/windmill-labs/windmill/commit/23c24a9688d4c8c462f53221334d538280f16bca))
+* flow chat model picker on a shared model-settings component ([#11187](https://github.com/windmill-labs/windmill/issues/11187)) ([189793c](https://github.com/windmill-labs/windmill/commit/189793c2e4db7f1c853695ebcc895c1ec82ed19f))
+* keep flow inputs and seed the agent when chat mode is enabled ([#11177](https://github.com/windmill-labs/windmill/issues/11177)) ([68f2248](https://github.com/windmill-labs/windmill/commit/68f2248018fc218a090bf939e1eb22ff97d5bc22))
+* let plan mode search and read connected mcp servers ([#11205](https://github.com/windmill-labs/windmill/issues/11205)) ([5371519](https://github.com/windmill-labs/windmill/commit/5371519f0f5ce7750982dcdb374dca72115902e7))
+* let test_run_flow name the conversation of a chat-mode test run ([#11198](https://github.com/windmill-labs/windmill/issues/11198)) ([6e1ef93](https://github.com/windmill-labs/windmill/commit/6e1ef93f329cb396ffc3df3304d592e8fa0e0e71))
+* managed memory with an inherited or custom memory id per step ([#11118](https://github.com/windmill-labs/windmill/issues/11118)) ([c297ed0](https://github.com/windmill-labs/windmill/commit/c297ed0052d998fb8f063faa2a36c6eb03e327be))
+* render the flow chat through the shared session chat components ([#11175](https://github.com/windmill-labs/windmill/issues/11175)) ([a9ec0ae](https://github.com/windmill-labs/windmill/commit/a9ec0aec3ac0c6b0f7919d0eb2168816923826d7))
+* show flow step detail inside the graph tab on narrow detail layouts ([#11168](https://github.com/windmill-labs/windmill/issues/11168)) ([64dffe6](https://github.com/windmill-labs/windmill/commit/64dffe6106ad6a55b61a423c855a4b5b0cef533e))
+* store mcp tool call, result and reasoning on flow conversation rows ([#11176](https://github.com/windmill-labs/windmill/issues/11176)) ([a571117](https://github.com/windmill-labs/windmill/commit/a571117f3fd2cef14c920770645c60ee358fdfdd))
+* tell test flow conversations from deployed ones and rename a chat ([#11179](https://github.com/windmill-labs/windmill/issues/11179)) ([4eab995](https://github.com/windmill-labs/windmill/commit/4eab995cf7cf091a5e4640da4cb77e0921bb7fdf))
+
+
+### Bug Fixes
+
+* disable a schedule whose cron has no run left instead of panicking ([#11195](https://github.com/windmill-labs/windmill/issues/11195)) ([381d447](https://github.com/windmill-labs/windmill/commit/381d4470ef699ea82283742132e56556b95d2bd2))
+* skip expiry notifications for app embed and SDK tokens ([#11169](https://github.com/windmill-labs/windmill/issues/11169)) ([9d348f8](https://github.com/windmill-labs/windmill/commit/9d348f84c7830f36b6153472556fd70e3d84cd24))
+
 ## [1.813.0](https://github.com/windmill-labs/windmill/compare/v1.812.0...v1.813.0) (2026-09-16)


@@ -175,6 +175,10 @@ the decrypted value, exactly as against a real backend. The chat's read path pas
 Seed a recognizable secret (the existing fixture uses `sk_live_do_not_leak_me`) and
 assert it via `valueExcludes` to catch a leak.

+`toolExpect.toolCallArgs` entries support `sharedByAtLeast: <n>`: at least `n` recorded
+calls to that tool must carry the same non-blank string in the field. Use it for calls that
+have to share an identifier, like two test runs of one chat conversation.
+
 `toolExpect.toolCallArgs` entries additionally support `fieldMustBeAbsent: true`: no
 recorded call to that tool may pass the field at all (an explicit `null` counts as
 passing it). Use it for partial-update tools, where supplying a field the model could
@@ -1,5 +1,5 @@
-import { randomUUID } from 'node:crypto'
 import type { BackendValidationSettings } from '../../core/backendValidation'
+import { buildWorkspaceId } from './workspaceId'

 interface CompletedJobResultMaybe {
 	completed: boolean
@@ -24,7 +24,6 @@ export interface CompletedPreviewJob {
 const tokenCache = new Map<string, Promise<string>>()
 const sharedWorkspaceQueue = new Map<string, Promise<void>>()
 const managedSharedWorkspacePrefixes = ['f/evals/']
-const DEFAULT_WORKSPACE_PREFIX = 'ai-evals'

 export class BackendPreviewClient {
 	constructor(private readonly settings: BackendValidationSettings) {}
@@ -441,16 +440,6 @@ async function withSharedWorkspaceLock<T>(workspaceId: string, body: () => Promi
 	}
 }

-function buildWorkspaceId(caseId: string, attempt: number): string {
-	const caseSlug = caseId
-		.toLowerCase()
-		.replace(/[^a-z0-9-]+/g, '-')
-		.replace(/^-+|-+$/g, '')
-		.slice(0, 30)
-	const suffix = randomUUID().slice(0, 8)
-	return `${DEFAULT_WORKSPACE_PREFIX}-${caseSlug || 'case'}-a${attempt}-${suffix}`
-}
-
 function extractFolderName(path: string): string | null {
 	if (!path.startsWith('f/')) {
 		return null
@@ -11,6 +11,7 @@ import type {
 	Script
 } from '../../../frontend/src/lib/gen'
 import type {
+	DataMetric,
 	DataTableTables,
 	DataTableTableSchema,
 	EndpointTool,
@@ -112,6 +113,9 @@ export interface BenchmarkWorkspaceRunnables {
 	aiProviders?: BenchmarkWorkspaceAiProvider[]
 	resources?: BenchmarkWorkspaceResource[]
 	datatables?: BenchmarkDatatableSeed[]
+	/** DuckLake catalog names, as `list_ducklakes` reports them. */
+	ducklakes?: string[]
+	dataMetrics?: DataMetric[]
 	jobs?: BenchmarkWorkspaceJob[]
 }

@@ -673,6 +677,27 @@ export function listBenchmarkDatatables(workspace: string): DataTableTables[] |
 	}))
 }

+// ============= DuckLake catalogs and declared metrics =============
+
+/** Seeded DuckLake names, or `null` for a non-benchmark workspace. */
+export function listBenchmarkDucklakes(workspace: string): string[] | null {
+	const runnables = benchmarkWorkspaceRunnables.get(workspace)
+	return runnables ? (runnables.ducklakes ?? []) : null
+}
+
+/**
+ * Seeded metric declarations, or `null` for a non-benchmark workspace.
+ *
+ * The `table` / `path_prefix` filters are ignored: which rows a filter selects is
+ * `canonical_table_path`'s business and is pinned by `ducklakeTools.test.ts`.
+ * Re-deriving it here would give the eval its own copy of that spec to drift from,
+ * and the case this serves measures whether the model reaches for the tool at all.
+ */
+export function listBenchmarkDataMetrics(workspace: string): DataMetric[] | null {
+	const runnables = benchmarkWorkspaceRunnables.get(workspace)
+	return runnables ? (runnables.dataMetrics ?? []) : null
+}
+
 export function getBenchmarkDatatableSchema(input: {
 	workspace: string
 	datatableName: string
@@ -840,6 +865,29 @@ export function runBenchmarkFlowByPath(input: {
 	})
 }

+/**
+ * Mirror `JobService.runFlowPreview` for benchmark workspaces, including the server's
+ * refusal of a chat-enabled flow run that names no conversation (`memory_id`).
+ */
+export function runBenchmarkFlowPreview(input: {
+	workspace: string
+	memoryId?: string
+	requestBody?: { path?: string; value?: { chat_input_enabled?: boolean }; args?: unknown }
+}): string {
+	if (input.requestBody?.value?.chat_input_enabled && !input.memoryId) {
+		throw new Error('Bad request: memory_id is required for chat-enabled flows')
+	}
+	const args = (input.requestBody?.args ?? {}) as Record<string, unknown>
+	return createBenchmarkCompletedJob({
+		workspace: input.workspace,
+		jobKind: 'flowpreview',
+		success: true,
+		args,
+		result: { path: input.requestBody?.path, args, mocked: true },
+		logs: 'Mock benchmark flow preview completed successfully.'
+	})
+}
+
 export function previewBenchmarkSchedule(input: {
 	requestBody?: Record<string, unknown>
 }): Record<string, unknown> {
@@ -76,7 +76,9 @@ vi.mock('$lib/gen', async () => {
 		listBenchmarkPlainResources,
 		listBenchmarkApps,
 		listBenchmarkDatatables,
+		listBenchmarkDataMetrics,
 		listBenchmarkDrafts,
+		listBenchmarkDucklakes,
 		listBenchmarkFlows,
 		listBenchmarkJobs,
 		listBenchmarkScripts,
@@ -87,6 +89,7 @@ vi.mock('$lib/gen', async () => {
 		previewBenchmarkSchedule,
 		runBenchmarkDatatableSql,
 		runBenchmarkFlowByPath,
+		runBenchmarkFlowPreview,
 		runBenchmarkScriptByPath,
 		runBenchmarkScriptPreview,
 		updateBenchmarkDraft,
@@ -293,6 +296,14 @@ vi.mock('$lib/gen', async () => {
 							args: data.requestBody
 						})
 					: actual.JobService.runScriptByPath(data),
+			runFlowPreview: async (data: {
+				workspace: string
+				memoryId?: string
+				requestBody?: { path?: string; value?: { chat_input_enabled?: boolean }; args?: unknown }
+			}) =>
+				hasBenchmarkWorkspace(data.workspace)
+					? runBenchmarkFlowPreview(data)
+					: actual.JobService.runFlowPreview(data as any),
 			runFlowByPath: async (data: {
 				workspace: string
 				path: string
@@ -341,6 +352,10 @@ vi.mock('$lib/gen', async () => {
 				hasBenchmarkWorkspace(data.workspace)
 					? (listBenchmarkDatatables(data.workspace) ?? [])
 					: actual.WorkspaceService.listDataTableTables(data),
+			listDucklakes: async (data: { workspace: string }) =>
+				hasBenchmarkWorkspace(data.workspace)
+					? (listBenchmarkDucklakes(data.workspace) ?? [])
+					: actual.WorkspaceService.listDucklakes(data),
 			getDataTableTableSchema: async (data: {
 				workspace: string
 				datatableName: string
@@ -356,6 +371,12 @@ vi.mock('$lib/gen', async () => {
 						})
 					: actual.WorkspaceService.getDataTableTableSchema(data)
 		}),
+		DataMetricService: wrapService(actual.DataMetricService, {
+			listDataMetrics: async (data: { workspace: string }) =>
+				hasBenchmarkWorkspace(data.workspace)
+					? { metrics: listBenchmarkDataMetrics(data.workspace) ?? [] }
+					: actual.DataMetricService.listDataMetrics(data)
+		}),
 		ScheduleService: wrapService(actual.ScheduleService, {
 			existsSchedule: async (data: { workspace: string; path: string }) =>
 				hasBenchmarkWorkspace(data.workspace) ? false : actual.ScheduleService.existsSchedule(data),
@@ -1,9 +1,8 @@
-import { randomUUID } from "node:crypto";
 import type { WindmillBackendSettings } from "../../core/windmillBackendSettings";
+import { buildWorkspaceId } from "./workspaceId";

 const tokenCache = new Map<string, Promise<string>>();
 const sharedWorkspaceQueue = new Map<string, Promise<void>>();
-const DEFAULT_WORKSPACE_PREFIX = "ai-evals";

 export class WindmillBackendClient {
  constructor(private readonly settings: WindmillBackendSettings) {}
@@ -179,16 +178,6 @@ async function withSharedWorkspaceLock<T>(
  }
 }

-function buildWorkspaceId(caseId: string, attempt: number): string {
-  const caseSlug = caseId
-    .toLowerCase()
-    .replace(/[^a-z0-9-]+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 30);
-  const suffix = randomUUID().slice(0, 8);
-  return `${DEFAULT_WORKSPACE_PREFIX}-${caseSlug || "case"}-a${attempt}-${suffix}`;
-}
-
 async function expectOk(response: Response, context: string): Promise<void> {
  if (response.ok) {
    return;
@@ -0,0 +1,21 @@
+import { describe, expect, it } from "bun:test";
+import { buildWorkspaceId } from "./workspaceId";
+
+describe("buildWorkspaceId", () => {
+  // `workspace.proper_id` rejects `--`, which a case id can carry itself and
+  // which truncating a slug on a hyphen produces once the suffix adds its own.
+  // One id per shape: cut landing on a hyphen, cut landing mid-word, no cut, and
+  // a doubled hyphen no cut ever reaches.
+  it("stays within the id length cap and the proper_id format", () => {
+    for (const caseId of [
+      "global-test6-secret-variable-draft",
+      "global-test23-datatable-query-select",
+      "short",
+      "global--test-foo",
+    ]) {
+      const id = buildWorkspaceId(caseId, 1);
+      expect(id.length).toBeLessThanOrEqual(50);
+      expect(id).toMatch(/^\w+(-\w+)*$/);
+    }
+  });
+});
@@ -0,0 +1,22 @@
+import { randomUUID } from "node:crypto";
+
+const DEFAULT_WORKSPACE_PREFIX = "ai-evals";
+
+// A workspace id must be at most 50 characters AND match `^\w+(-\w+)*$`
+// (`workspace.proper_id`), so the case slug yields to the random suffix that
+// makes the id unique, and no hyphen may end up doubled — neither one already in
+// the case id nor one a truncation leaves for the suffix to follow.
+const MAX_WORKSPACE_ID_LENGTH = 50;
+
+export function buildWorkspaceId(caseId: string, attempt: number): string {
+  const caseSlug = caseId
+    .toLowerCase()
+    .replace(/[^a-z0-9-]+/g, "-")
+    .replace(/-{2,}/g, "-")
+    .replace(/^-+|-+$/g, "");
+  const suffix = `-a${attempt}-${randomUUID().slice(0, 8)}`;
+  const head = `${DEFAULT_WORKSPACE_PREFIX}-${caseSlug || "case"}`;
+  return `${head
+    .slice(0, MAX_WORKSPACE_ID_LENGTH - suffix.length)
+    .replace(/-+$/, "")}${suffix}`;
+}
@@ -1919,10 +1919,11 @@
    - when the lookup fails, tells the user instead of inventing table names
    - does not write scripts or resources to answer a read-only question

-# --- API catalog (search_api_endpoints / call_api_get / call_api_endpoint) ---
-# The harness serves the catalog and the executed calls itself (mock
-# listMcpTools + benchmark fetch handlers in adapters/frontend), so these cases
-# do not require an mcp-enabled eval backend.
+# --- Dedicated tools preferred over the API catalog ---
+# The harness serves worker/queue reads itself (benchmark fetch handlers in
+# adapters/frontend), so these cases do not require an mcp-enabled eval backend.
+# The stale `api-catalog` in the id below is kept so results stay comparable
+# across benchmark runs.

 - id: global-test30-api-catalog-workers
  prompt: |-
@@ -1934,23 +1935,42 @@
    draftCountExactly: 0
  toolExpect:
    requiredToolsUsed:
-      - search_api_endpoints
-      - call_api_get
+      - list_workers
    forbiddenToolsUsed:
+      - call_api_get
      - call_api_endpoint
      - write_script
      - deploy_workspace_item
-    toolCallArgs:
-      - tool: call_api_get
-        field: name
-        stringIncludesAnyOf:
-          - listWorkers
  # Read-only workspace inspection produces no draft; validate via tool use.
  skipJudge: true
  judgeChecklist:
-    - discovers the workers endpoint through the API catalog instead of guessing or fabricating
+    - reads worker state through list_workers instead of guessing or fabricating
    - reports worker status from the returned data

+- id: global-test37-ducklake-declared-measure
+  prompt: |-
+    We track orders in the main ducklake. Write me a duckdb script that reports total
+    revenue by month. Keep it as a draft, don't deploy it.
+  initial: ai_evals/fixtures/frontend/global/initial/ducklake_orders_metrics.json
+  runtime:
+    maxTurns: 8
+  validate:
+    draftCountExactly: 1
+  toolExpect:
+    requiredToolsUsed:
+      - list_data_metrics
+    forbiddenToolsUsed:
+      - deploy_workspace_item
+      - delete_workspace_item
+  # The judge runs: the point is not that the tool was called but that the number it
+  # describes is the declared one. `revenue` excludes test rows, so an aggregate that
+  # reproduces it without the filter is plausible, runnable and wrong.
+  judgeChecklist:
+    - totals revenue with the declared sum over the amount column rather than an invented aggregate over a guessed column
+    - excludes test orders from the total, as the declared revenue measure does
+    - groups by month using the declared order_month expression over order_date
+    - does not introduce column names absent from the declarations
+
 - id: global-test31-draft-test-run-not-deployed
  prompt: |-
    Update `f/evals/global/format_greeting` so the provided name is uppercased in the greeting, then run it with name "ada" to check it works.
@@ -2140,6 +2160,32 @@
    - creates an AI draft of f/evals/global/process_invoice applying 8% tax
    - does not deploy or save the draft

+- id: global-test38-chat-flow-follow-up-same-conversation
+  prompt: |-
+    I want to check that my support chat flow `f/evals/global/support_chat` remembers what was said.
+    Test it: first send "My name is Ada", then send "What is my name?" as a follow-up in the same chat.
+  initial: ai_evals/fixtures/frontend/global/initial/support_chat_flow.json
+  runtime:
+    maxTurns: 8
+  validate:
+    draftCountExactly: 0
+  toolExpect:
+    requiredToolsUsed:
+      - test_run_flow
+    # A chat flow's memory lives in its conversation, so a follow-up only reaches the first
+    # turn's history when both test runs name the same conversation.
+    toolCallArgs:
+      - tool: test_run_flow
+        field: memory_id
+        sharedByAtLeast: 2
+    forbiddenToolsUsed:
+      - run_flow
+      - deploy_workspace_item
+  # The judge cannot observe runs; what this case guards is the conversation the runs share.
+  skipJudge: true
+  judgeChecklist:
+    - test-runs the chat flow twice, the second message as a follow-up in the first run's conversation
+
 - id: global-undo-created-draft
  prompt: |-
    Create a draft Postgres resource at `u/admin/scratch_db` for host db.example.com port 5432, database `orders`, user `app`, and tell me what fields it ended up with.
@@ -182,6 +182,13 @@ export interface ToolCallArgumentRule {
   * the point is that the model filled it in at all rather than what it said.
   */
  nonEmpty?: boolean;
+  /**
+   * Existential over calls: at least this many recorded calls to `tool` carry the
+   * same non-blank string in `field`. Use when calls have to share an identifier —
+   * e.g. test runs that continue one conversation — while a retry with a rejected
+   * value in between is still acceptable.
+   */
+  sharedByAtLeast?: number;
  /**
   * Universal over calls: no recorded call to `tool` may pass `field` at all.
   * For partial-update tools, where supplying a field the model could not have
@@ -396,6 +396,32 @@ describe("validateToolExpectations", () => {
    expect(nonEmptyCheck?.details).toContain("blank on 1 of 2");
  });

+  it("requires sharedByAtLeast calls to carry one value, not merely a value each", () => {
+    const run = (ids: (string | undefined)[]) =>
+      validateToolExpectations({
+        run: {
+          success: true,
+          actual: {},
+          assistantMessageCount: 1,
+          toolCallCount: ids.length,
+          toolsUsed: ["test_run_flow"],
+          toolCallDetails: ids.map((memory_id) => ({
+            name: "test_run_flow",
+            arguments: { path: "f/chat", memory_id },
+          })),
+          skillsInvoked: [],
+        },
+        toolExpect: {
+          toolCallArgs: [{ tool: "test_run_flow", field: "memory_id", sharedByAtLeast: 2 }],
+        },
+      }).find((c) => c.name.includes("is shared by at least 2 calls"))?.passed;
+
+    expect(run(["a", "b"])).toBe(false);
+    expect(run(["a"])).toBe(false);
+    expect(run([undefined, undefined])).toBe(false);
+    expect(run(["rejected", "a", "a"])).toBe(true);
+  });
+
  it("passes nonEmpty when every call filled the field", () => {
    const checks = validateToolExpectations({
      run: {
@@ -320,6 +320,23 @@ export function validateToolExpectations(input: {
      );
    }

+    if (rule.sharedByAtLeast !== undefined) {
+      const counts = new Map<string, number>();
+      for (const value of values) {
+        if (typeof value === "string" && value.trim().length > 0) {
+          counts.set(value, (counts.get(value) ?? 0) + 1);
+        }
+      }
+      const mostShared = Math.max(0, ...counts.values());
+      checks.push(
+        check(
+          `${rule.tool}.${rule.field} is shared by at least ${rule.sharedByAtLeast} calls`,
+          mostShared >= rule.sharedByAtLeast,
+          `most calls sharing one value: ${mostShared}; values: ${summarizeToolValues(values)}`
+        )
+      );
+    }
+
    if (rule.fieldMustBeAbsent) {
      // Anything other than `undefined` was supplied — an explicit `null` is the
      // model passing the field, not omitting it.
@@ -0,0 +1,36 @@
+{
+  "workspace": {
+    "ducklakes": ["main"],
+    "dataMetrics": [
+      {
+        "script_path": "f/analytics/orders_pipeline",
+        "table_path": "main/main.orders",
+        "kind": "measure",
+        "name": "revenue",
+        "expr": "sum(amount)",
+        "filter": "not is_test"
+      },
+      {
+        "script_path": "f/analytics/orders_pipeline",
+        "table_path": "main/main.orders",
+        "kind": "measure",
+        "name": "order_count",
+        "expr": "count(*)"
+      },
+      {
+        "script_path": "f/analytics/orders_pipeline",
+        "table_path": "main/main.orders",
+        "kind": "dimension",
+        "name": "order_month",
+        "expr": "date_trunc('month', order_date)"
+      },
+      {
+        "script_path": "f/analytics/orders_pipeline",
+        "table_path": "main/main.orders",
+        "kind": "dimension",
+        "name": "region",
+        "expr": "region"
+      }
+    ]
+  }
+}
@@ -0,0 +1,59 @@
+{
+  "workspace": {
+    "flows": [
+      {
+        "path": "f/evals/global/support_chat",
+        "summary": "Support chat",
+        "description": "Answers customer questions in a chat, remembering earlier messages.",
+        "schema": {
+          "$schema": "https://json-schema.org/draft/2020-12/schema",
+          "type": "object",
+          "properties": {
+            "user_message": {
+              "type": "string",
+              "description": "Message from user"
+            }
+          },
+          "required": ["user_message"]
+        },
+        "value": {
+          "chat_input_enabled": true,
+          "modules": [
+            {
+              "id": "assistant",
+              "summary": "Support assistant",
+              "value": {
+                "type": "aiagent",
+                "tools": [],
+                "input_transforms": {
+                  "provider": {
+                    "type": "static",
+                    "value": {
+                      "kind": "anthropic",
+                      "model": "claude-haiku-4-5-20251001",
+                      "resource": "$res:f/evals/ai/anthropic"
+                    }
+                  },
+                  "user_message": {
+                    "type": "javascript",
+                    "expr": "flow_input.user_message"
+                  },
+                  "system_prompt": {
+                    "type": "static",
+                    "value": "You are a friendly support assistant. Keep answers short."
+                  },
+                  "memory": {
+                    "type": "static",
+                    "value": { "kind": "auto", "context_length": 10 }
+                  },
+                  "streaming": { "type": "static", "value": true },
+                  "output_type": { "type": "static", "value": "text" }
+                }
+              }
+            }
+          ]
+        }
+      }
+    ]
+  }
+}
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT 1 AS one FROM workspace_settings WHERE workspace_id = $1 FOR UPDATE",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "one",
-        "type_info": "Int4"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "06abbf945bee93349ff88f64906b96ea1e853ef202510281427cfa9beeff81b3"
-}
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings ws\n           SET datatable = (\n               SELECT jsonb_set(ws.datatable, '{datatables}', jsonb_object_agg(\n                   dt.key,\n                   CASE WHEN dt.value->'reference'->>'workspace_id' = $1\n                             AND dt.value->'reference'->>'datatable' = $2\n                       THEN jsonb_set(dt.value, '{reference,datatable}', to_jsonb($3::text))\n                       ELSE dt.value END\n               ))\n               FROM jsonb_each(ws.datatable->'datatables') dt\n           )\n           WHERE EXISTS (\n               SELECT 1 FROM jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) d\n               WHERE d.value->'reference'->>'workspace_id' = $1\n                 AND d.value->'reference'->>'datatable' = $2\n           )",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "06ce02cd7ce2f5a57355153edb573c242f9ba758db66e9a5e16f30e3e1494201"
-}
@@ -1,29 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT permissioned_as, permissioned_as_email FROM v2_job\n                 WHERE id = $1 AND workspace_id = $2",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "permissioned_as",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "permissioned_as_email",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Uuid",
-        "Text"
-      ]
-    },
-    "nullable": [
-      false,
-      false
-    ]
-  },
-  "hash": "0d10e0fa5cf4033c7d93c9ed56be8209046007917f44da954eccf2188e5bff1f"
-}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "INSERT INTO flow_conversation_message (conversation_id, message_type, content, job_id, step_name, success)\n         VALUES ($1, $2, $3, $4, $5, $6)",
+  "query": "INSERT INTO flow_conversation_message (conversation_id, message_type, content, job_id, step_name, success, tool_arguments, tool_result, reasoning, attachments)\n         VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10)",
  "describe": {
    "columns": [],
    "parameters": {
@@ -21,10 +21,14 @@
        "Text",
        "Uuid",
        "Varchar",
-        "Bool"
+        "Bool",
+        "Text",
+        "Text",
+        "Text",
+        "Jsonb"
      ]
    },
    "nullable": []
  },
-  "hash": "b1a9a433e577133869c067b2ce383fc6ce4e9df307feb5fd3edc0d1276d61ff1"
+  "hash": "12329c3359a7944ab5fa3aa27ddca1b26f340ccf574b9fa07641fe88b2d2987c"
 }
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings ws\n           SET datatable = (\n               SELECT jsonb_set(ws.datatable, '{datatables}', jsonb_object_agg(\n                   dt.key,\n                   CASE WHEN dt.value->'reference'->>'workspace_id' = $2\n                       THEN jsonb_set(dt.value, '{reference,workspace_id}', to_jsonb($1::text))\n                       ELSE dt.value END\n               ))\n               FROM jsonb_each(ws.datatable->'datatables') dt\n           )\n           WHERE jsonb_typeof(ws.datatable->'datatables') = 'object'\n             AND ws.datatable::text LIKE '%\"reference\"%'",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "297c7a40dfce729d44aa37bc7c65560517bd25e40c0752a00467829191e2eb98"
-}
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE capture_config SET server_id = NULL, last_server_ping = NULL\n             WHERE workspace_id = $1 AND trigger_kind = 'postgres'\n               AND (trigger_config->>'postgres_resource_path' = $2\n                    OR trigger_config->>'postgres_resource_path' LIKE $3)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "2a391cc1bfcd2f75b46144a394c01237e09c3060da88170f1f6e06468309d213"
-}
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT EXISTS (SELECT 1 FROM pg_roles WHERE rolname = $1)",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "exists",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Name"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "334dbcd48fb59c96c62c2705ab2d1ce716cd52417f487cc1a8dd376017b2db7d"
-}
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE postgres_trigger SET server_id = NULL, last_server_ping = NULL\n         WHERE workspace_id = $1\n           AND (postgres_resource_path = $2 OR postgres_resource_path LIKE $3)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "4692810d2be817bbb5de9b476d68d695941bd4fb5ccef393e4da522ed479d601"
-}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, workspace_id, flow_path, title, created_at, updated_at, created_by\n         FROM flow_conversation\n         WHERE id = $1 AND workspace_id = $2",
+  "query": "SELECT id, workspace_id, flow_path, title, created_at, updated_at, created_by, is_test\n         FROM flow_conversation\n         WHERE id = $1 AND workspace_id = $2",
  "describe": {
    "columns": [
      {
@@ -37,6 +37,11 @@
        "ordinal": 6,
        "name": "created_by",
        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "is_test",
+        "type_info": "Bool"
      }
    ],
    "parameters": {
@@ -52,8 +57,9 @@
      true,
      false,
      false,
+      false,
      false
    ]
  },
-  "hash": "c383cc023714b361d10c10e8fef1fc148ab1da942951ee9ffdddaecee76a6be9"
+  "hash": "48c8522a4fed219c5011f4ba63c81cfe028a8b2a32bd790840cef65c452a8c31"
 }
@@ -1,29 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT ws.workspace_id AS \"workspace_id!\", dt.key AS \"datatable!\"\n           FROM workspace_settings ws\n           CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt\n           WHERE dt.value->'reference'->>'workspace_id' = $1\n             AND dt.value->'reference'->>'datatable' = $2",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "workspace_id!",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "datatable!",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      false,
-      null
-    ]
-  },
-  "hash": "5048e21546f9710697100100e1255ab103979433bc386d7c89d0e30db12bfd57"
-}
@@ -1,29 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT ws.workspace_id AS \"workspace_id!\", dt.key AS \"datatable!\"\n               FROM workspace_settings ws\n               CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt\n               WHERE dt.value->'reference'->>'workspace_id' = $1\n                 AND dt.value->'reference'->>'datatable' = $2",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "workspace_id!",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "datatable!",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      false,
-      null
-    ]
-  },
-  "hash": "538dd1779874e4003932d7f17750239c625f85e25b3364bf2edf566f518c8ee2"
-}
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT username FROM usr WHERE workspace_id = $1 AND email = $2 AND disabled = false",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "username",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "58e5cfe9eb87bda9f7de87c403861b6e7b9d35a41594681e2a92a87359e6a018"
-}
@@ -0,0 +1,24 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE flow_conversation SET title = $1, updated_at = updated_at\n         WHERE id = $2 AND workspace_id = $3\n         RETURNING id",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Uuid"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Uuid",
+        "Text"
+      ]
+    },
+    "nullable": [
+      false
+    ]
+  },
+  "hash": "5b9c9eb64051f291fed4be9bc0b0cc0aef2e7bde732899976eddac36a2da7658"
+}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "INSERT INTO flow_conversation (id, workspace_id, flow_path, created_by, title)\n         VALUES ($1, $2, $3, $4, $5)\n         ON CONFLICT (id) DO NOTHING\n         RETURNING id, workspace_id, flow_path, title, created_at, updated_at, created_by",
+  "query": "INSERT INTO flow_conversation (id, workspace_id, flow_path, created_by, title, is_test)\n         VALUES ($1, $2, $3, $4, $5, $6)\n         ON CONFLICT (id) DO NOTHING\n         RETURNING id, workspace_id, flow_path, title, created_at, updated_at, created_by, is_test",
  "describe": {
    "columns": [
      {
@@ -37,6 +37,11 @@
        "ordinal": 6,
        "name": "created_by",
        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "is_test",
+        "type_info": "Bool"
      }
    ],
    "parameters": {
@@ -45,7 +50,8 @@
        "Varchar",
        "Varchar",
        "Varchar",
-        "Varchar"
+        "Varchar",
+        "Bool"
      ]
    },
    "nullable": [
@@ -55,8 +61,9 @@
      true,
      false,
      false,
+      false,
      false
    ]
  },
-  "hash": "c1e3ed3ecc3bcb98f60ba8196d33fee4a74f61b061e5025ecb75882208b3ba8f"
+  "hash": "6d259b8cce5da5fecefe4ce322789b6b2cc43b51f2056c677d58f39c31fb26cb"
 }
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO global_settings (name, value) VALUES ($1, $2)\n         ON CONFLICT (name) DO UPDATE SET value = $2",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Jsonb"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "6f9fb5d72f486358fa25d6887bd69b93910e028f140c07048f2c1c8d63ee6909"
-}
@@ -1,38 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT id, name, enabled, pwd FROM datatable_role",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "name",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 2,
-        "name": "enabled",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 3,
-        "name": "pwd",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      true
-    ]
-  },
-  "hash": "71ee2cb6661cca1fa4d8874a7f6d368347c59f36fd87df6dc7996152ccb84af0"
-}
@@ -1,29 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "\n        SELECT ws.workspace_id AS \"workspace_id!\", dt.key AS \"datatable!\"\n        FROM workspace_settings ws\n        JOIN workspace w ON w.id = ws.workspace_id AND w.deleted = false\n        CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt\n        WHERE ws.workspace_id <> $1\n          AND dt.value->'database'->>'resource_type' = 'instance'\n          AND dt.value->'database'->>'resource_path' = $2\n        ORDER BY ws.workspace_id, dt.key\n        ",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "workspace_id!",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "datatable!",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      false,
-      null
-    ]
-  },
-  "hash": "79799b5a2e499df6c28e286c42b9ad2db940c2455ab19cc95e5198baf96d5629"
-}
@@ -1,17 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO datatable_role (id, name, enabled, pwd) VALUES ($1, $2, $3, $4)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Varchar",
-        "Bool",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "86af9d51a158ea5cb6161461ecddf2a63695f8cbf8af648da5a0a77a5b9d02ba"
-}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "\n        SELECT\n            j.args as \"args: Json<HashMap<String, Box<RawValue>>>\",\n            js.flow_status as \"flow_status: Json<windmill_common::flow_status::FlowStatus>\"\n        FROM v2_job_status js\n        INNER JOIN v2_job j ON j.id = js.id\n        WHERE js.id = $1\n        ",
+  "query": "\n        SELECT\n            j.args as \"args: Json<HashMap<String, Box<RawValue>>>\",\n            js.flow_status as \"flow_status: Json<windmill_common::flow_status::FlowStatus>\",\n            j.runnable_path\n        FROM v2_job_status js\n        INNER JOIN v2_job j ON j.id = js.id\n        WHERE js.id = $1\n        ",
  "describe": {
    "columns": [
      {
@@ -12,6 +12,11 @@
        "ordinal": 1,
        "name": "flow_status: Json<windmill_common::flow_status::FlowStatus>",
        "type_info": "Jsonb"
+      },
+      {
+        "ordinal": 2,
+        "name": "runnable_path",
+        "type_info": "Varchar"
      }
    ],
    "parameters": {
@@ -20,9 +25,10 @@
      ]
    },
    "nullable": [
+      true,
      true,
      true
    ]
  },
-  "hash": "dd89d652154748d6d7e625e31778f6885d0ee62d29a4b8894a4b459dd215a103"
+  "hash": "9008f9abb70a9a07e38acb20bea6a710d0efd77dac4aedeb88d72240e816530b"
 }
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO global_settings (name, value) VALUES ($1, $2)\n         ON CONFLICT (name) DO UPDATE SET value = $2, updated_at = now()",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Jsonb"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "975e404ac3a6258bb8220e122e3de094c7ab23330fdbc74d6e4ad472ddd3c820"
-}
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT pg_advisory_xact_lock(hashtext('datatable_role_catalog'))",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "pg_advisory_xact_lock",
-        "type_info": "Void"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "9f663180166f53d117e794f3f3a5723a0a43db163ecca7d5a63d4e74ab1d3be1"
-}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, conversation_id, message_type as \"message_type: MessageType\", content, job_id, created_at, created_seq, step_name, success\n             FROM (\n                SELECT id, conversation_id, message_type, content, job_id, created_at, created_seq, step_name, success\n                FROM flow_conversation_message\n                WHERE conversation_id = $1\n                ORDER BY created_seq DESC\n                LIMIT $2 OFFSET $3\n             ) AS messages\n             ORDER BY created_seq ASC\n             ",
+  "query": "SELECT id, conversation_id, message_type as \"message_type: MessageType\", content, job_id, created_at, created_seq, step_name, success, tool_arguments, tool_result, reasoning, attachments\n             FROM (\n                SELECT id, conversation_id, message_type, content, job_id, created_at, created_seq, step_name, success, tool_arguments, tool_result, reasoning, attachments\n                FROM flow_conversation_message\n                WHERE conversation_id = $1\n                ORDER BY created_seq DESC\n                LIMIT $2 OFFSET $3\n             ) AS messages\n             ORDER BY created_seq ASC\n             ",
  "describe": {
    "columns": [
      {
@@ -58,6 +58,26 @@
        "ordinal": 8,
        "name": "success",
        "type_info": "Bool"
+      },
+      {
+        "ordinal": 9,
+        "name": "tool_arguments",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 10,
+        "name": "tool_result",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 11,
+        "name": "reasoning",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 12,
+        "name": "attachments",
+        "type_info": "Jsonb"
      }
    ],
    "parameters": {
@@ -76,8 +96,12 @@
      false,
      false,
      true,
-      false
+      false,
+      true,
+      true,
+      true,
+      true
    ]
  },
-  "hash": "1c3473a0f9f6b6148b2c975f9f05bdefedf8a51c4e6ddf0eca367b9cc778d051"
+  "hash": "a4a823f70b3dbe6aaf4a61c98345e94c5042fd5e6351fea139a66ecb1fb812ab"
 }
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE capture_config SET server_id = NULL, last_server_ping = NULL\n         WHERE workspace_id = $1 AND trigger_kind = 'postgres'\n           AND (trigger_config->>'postgres_resource_path' = $2\n                OR trigger_config->>'postgres_resource_path' LIKE $3)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "a57de2bb0442a5ee8a607cd63cfcf675de175796184f620cb4b09670c8b0b19f"
-}
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT ws.datatable->'datatables' FROM workspace_settings ws\n             WHERE ws.workspace_id = $1 FOR UPDATE",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "?column?",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "b42af37fb474bea4c5419b0a46d9eadfe384013ab970ccf9c5effd1c78321b7c"
-}
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT jsonb_object_keys(value->'databases') FROM global_settings\n         WHERE name = 'custom_instance_pg_databases'",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "jsonb_object_keys",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "b9842d2d8abf382bd82d8fa1de012373638be391f884f81dc387ffc465badac6"
-}
@@ -1,28 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "DELETE FROM usr WHERE email = $1 RETURNING username, workspace_id",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "username",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "workspace_id",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      false,
-      false
-    ]
-  },
-  "hash": "c1d026c886799dabc39ce73e1fe09ccb175c7271df75d67aa9c72ad6f825a992"
-}
@@ -1,28 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT ws.workspace_id AS \"workspace_id!\", dt.key AS \"datatable!\"\n           FROM workspace_settings ws\n           CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt\n           WHERE dt.value->'reference'->>'workspace_id' = $1\n           ORDER BY ws.workspace_id, dt.key",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "workspace_id!",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 1,
-        "name": "datatable!",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      false,
-      null
-    ]
-  },
-  "hash": "c5451ea9d9fa5146af242d1ee8c19ebd65b80e7ed9f29b9fb2e03767c2aa94ba"
-}
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "DELETE FROM datatable_role WHERE id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "c85d362fe2e652d4ac01a35bf470e80b993020a2ff5dcb5849dc570d52798587"
-}
@@ -1,24 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT dt.key AS \"datatable!\"\n           FROM workspace_settings ws\n           CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt\n           WHERE ws.workspace_id = $1\n             AND dt.key <> $2\n             AND NOT dt.value ? 'permissions'\n             AND dt.value->'database'->>'resource_type' = 'instance'\n             AND dt.value->'database'->>'resource_path' = $3\n           ORDER BY dt.key",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "datatable!",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "d48ca62c86b1af7a9dd2450c1c28dc45020a2a553d8874c49f9eafedea5a9d40"
-}
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT datatable FROM workspace_settings WHERE workspace_id = $1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "datatable",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      true
-    ]
-  },
-  "hash": "d5fb5dde6300862f978739a3d9249fc2b3e7697c0da7d3195398933d3d81aadf"
-}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, conversation_id, message_type as \"message_type: MessageType\", content, job_id, created_at, created_seq, step_name, success\n             FROM flow_conversation_message\n             WHERE conversation_id = $1\n               AND created_seq > $2\n             ORDER BY created_seq ASC\n             LIMIT $3\n             ",
+  "query": "SELECT id, conversation_id, message_type as \"message_type: MessageType\", content, job_id, created_at, created_seq, step_name, success, tool_arguments, tool_result, reasoning, attachments\n             FROM flow_conversation_message\n             WHERE conversation_id = $1\n               AND created_seq > $2\n             ORDER BY created_seq ASC\n             LIMIT $3\n             ",
  "describe": {
    "columns": [
      {
@@ -58,6 +58,26 @@
        "ordinal": 8,
        "name": "success",
        "type_info": "Bool"
+      },
+      {
+        "ordinal": 9,
+        "name": "tool_arguments",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 10,
+        "name": "tool_result",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 11,
+        "name": "reasoning",
+        "type_info": "Text"
+      },
+      {
+        "ordinal": 12,
+        "name": "attachments",
+        "type_info": "Jsonb"
      }
    ],
    "parameters": {
@@ -76,8 +96,12 @@
      false,
      false,
      true,
-      false
+      false,
+      true,
+      true,
+      true,
+      true
    ]
  },
-  "hash": "e8802be9203c1e88a06e337260ccca029380139f89a01a89033e36a6ed9ac082"
+  "hash": "d6fa78c43b6c5f8040d7bccb29ad8627be1dac6fbe0097735a52f47c173f51c9"
 }
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings ws\n               SET datatable = (\n                   SELECT jsonb_set(ws.datatable, '{datatables}', jsonb_object_agg(\n                       dt.key,\n                       CASE WHEN dt.value->'reference'->>'workspace_id' = $1\n                                 AND dt.value->'reference'->>'datatable' = $2\n                           THEN jsonb_set(dt.value, '{reference,datatable}', to_jsonb($3::text))\n                           ELSE dt.value END\n                   ))\n                   FROM jsonb_each(ws.datatable->'datatables') dt\n               )\n               WHERE jsonb_typeof(ws.datatable->'datatables') = 'object'\n                 AND ws.datatable::text LIKE '%\"reference\"%'",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "da5057c86607327bafc2942c218025ca9181a0c396405984d87e422e129521c1"
-}
@@ -1,20 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT value->'roles' FROM global_settings WHERE name = 'custom_instance_pg_databases'",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "?column?",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "dc8dfc37559e9b6713bde48155f48b5a2c7b8199eace1508e102b60d1ff40c04"
-}
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, workspace_id, flow_path, title, created_at, updated_at, created_by\n         FROM flow_conversation\n         WHERE id = $1 AND workspace_id = $2\n         FOR UPDATE",
+  "query": "SELECT id, workspace_id, flow_path, title, created_at, updated_at, created_by, is_test\n         FROM flow_conversation\n         WHERE id = $1 AND workspace_id = $2\n         FOR UPDATE",
  "describe": {
    "columns": [
      {
@@ -37,6 +37,11 @@
        "ordinal": 6,
        "name": "created_by",
        "type_info": "Varchar"
+      },
+      {
+        "ordinal": 7,
+        "name": "is_test",
+        "type_info": "Bool"
      }
    ],
    "parameters": {
@@ -52,8 +57,9 @@
      true,
      false,
      false,
+      false,
      false
    ]
  },
-  "hash": "6f32c1feed096ff706ae359ad6a3ca33b3f82ca38289dfa4a69aa95041027d57"
+  "hash": "dd84f9dfb238d18cb74f9e43228345427131bf8008eba6920021d6a449791534"
 }
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE postgres_trigger SET server_id = NULL, last_server_ping = NULL\n             WHERE workspace_id = $1\n               AND (postgres_resource_path = $2 OR postgres_resource_path LIKE $3)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "e159b2ff15633f85e839ee4fe1ec2ecd11caf228ea8d0f52ad66def595644250"
-}
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT datatable FROM workspace_settings WHERE workspace_id = $1 FOR UPDATE",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "datatable",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      true
-    ]
-  },
-  "hash": "e2061df65ffd4a72146c4ca316829265289c8d6f625ac272655c88e1ad0b1745"
-}
@@ -1,17 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings\n               SET datatable = jsonb_set(\n                   jsonb_set(\n                       datatable #- ARRAY['datatables', $2, 'reference'],\n                       ARRAY['datatables', $2, 'database'], $3::jsonb),\n                   ARRAY['datatables', $2, 'forked_from'], $4::jsonb\n               )\n               WHERE workspace_id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Jsonb",
-        "Jsonb"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "ebaf3ed3097621da59dd201b5a4b9d1f440692f183c7c378f59e4b73f1c6e241"
-}
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT workspace_id FROM workspace_settings WHERE datatable::text LIKE $1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "workspace_id",
-        "type_info": "Varchar"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "f3ee09fb17955ca8d886f446d397063c4094546a7807343b570b823796372cef"
-}
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings\n           SET datatable = CASE WHEN $3::jsonb = 'null'::jsonb\n               THEN datatable #- ARRAY['datatables', $2, 'permissions']\n               ELSE jsonb_set(datatable, ARRAY['datatables', $2, 'permissions'], $3::jsonb)\n           END\n           WHERE workspace_id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Jsonb"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "f4adc9e26ebfebce18a29fb2c21bf06394cacb8a9699a608327b097e0ac1363e"
-}
@@ -1,17 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE datatable_role SET name = $2, enabled = $3, pwd = $4 WHERE id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Varchar",
-        "Bool",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "fcb34e643b888122766e115a01394ab31ac856252aaa76c75ea27a447009c363"
-}
@@ -728,7 +728,7 @@ dependencies = [
 "futures-lite 2.6.1",
 "parking",
 "polling 3.11.0",
- "rustix 1.1.4",
+ "rustix 1.1.5",
 "slab",
 "windows-sys 0.61.2",
 ]
@@ -873,7 +873,7 @@ checksum = "82f6aeea286b8eb4dd3431a1be1b59d290ace00f5bfd8e2a159bc2a05e2c1667"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -1976,7 +1976,7 @@ dependencies = [
 "prettyplease 0.3.0",
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -2000,7 +2000,7 @@ dependencies = [
 "proc-macro-crate",
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -2144,7 +2144,7 @@ checksum = "6a1f896587b6f2c069c73d2f0913e2d590c3990285cd2f0b6aa02b786b4c679c"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -2164,9 +2164,9 @@ dependencies = [

 [[package]]
 name = "bytes-str"
-version = "0.2.8"
+version = "0.2.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "577d2bf5650f8554d5a372af5ac93535110a0fc75b3e702bb853369febf227c2"
+checksum = "4dde6d05e75a31ec9610eb6446a6f0a10dd30ff5100d720fee4c7c7a9008b5ba"
 dependencies = [
 "bytes",
 "serde",
@@ -2338,9 +2338,9 @@ dependencies = [

 [[package]]
 name = "cfg-if"
-version = "1.0.4"
+version = "1.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+checksum = "4e7648175b45a9a48536d676f68d918270699102aa8dab5496df06904c914600"

 [[package]]
 name = "cfg_aliases"
@@ -2454,7 +2454,7 @@ dependencies = [
 "heck",
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -3047,7 +3047,7 @@ dependencies = [
 "proc-macro2",
 "quote",
 "strsim 0.11.1",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -3102,7 +3102,7 @@ checksum = "2ac7135c3ef02b2f7833bbeb1be5ba7f966dcde8a87c6b87f65a778d71a02785"
 dependencies = [
 "darling_core 0.24.1",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -4580,7 +4580,7 @@ checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
 dependencies = [
 "libc",
 "option-ext",
- "redox_users 0.5.2",
+ "redox_users 0.5.3",
 "windows-sys 0.61.2",
 ]

@@ -4603,7 +4603,7 @@ checksum = "c6232dd377dcc64799954cbd3a9bb882e9cdc1308ccd87b1c098f1fb2eaf82a8"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -4850,7 +4850,7 @@ checksum = "a65863d15a4ce2888bd2f0f543cc963d3879c3a022c8ee43f6141d479a3ac815"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -5198,7 +5198,7 @@ version = "0.13.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8640e34b88f7652208ce9e88b1a37a2ae95227d84abec377ccd3c5cfeb141ed4"
 dependencies = [
- "rustix 1.1.4",
+ "rustix 1.1.5",
 "windows-sys 0.59.0",
 ]

@@ -5319,7 +5319,7 @@ checksum = "9fb9654ba8355388abeb8dcb4fc62f511300867002afc858860463bdd9fe0c44"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -9438,7 +9438,7 @@ dependencies = [
 "concurrent-queue",
 "hermit-abi 0.5.3",
 "pin-project-lite",
- "rustix 1.1.4",
+ "rustix 1.1.5",
 "windows-sys 0.61.2",
 ]

@@ -9574,7 +9574,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2bfe0f4c752e450fc2faf62654f1c134747922825d5b04ca717b8874f41a40c0"
 dependencies = [
 "proc-macro2",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -10235,11 +10235,10 @@ dependencies = [

 [[package]]
 name = "redox_users"
-version = "0.5.2"
+version = "0.5.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+checksum = "60dc65c0ff1a7ae1294b0c67b9f14baf70b644404010370171787bfac1038fc0"
 dependencies = [
- "getrandom 0.2.17",
 "libredox",
 "thiserror 2.0.20",
 ]
@@ -10261,7 +10260,7 @@ checksum = "92ecd8964f8453721699a1ed72037b0db49ce2f5a5138486ee89bed6f67cdf3a"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -10580,7 +10579,7 @@ dependencies = [
 "proc-macro2",
 "quote",
 "serde_json",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -10798,9 +10797,9 @@ dependencies = [

 [[package]]
 name = "rustix"
-version = "1.1.4"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
+checksum = "891efababe418670775f199f0d233d84843c227a0949a883ce15b37c78d6629d"
 dependencies = [
 "bitflags 2.13.2",
 "errno",
@@ -11217,7 +11216,7 @@ dependencies = [
 "proc-macro2",
 "quote",
 "serde_derive_internals 0.30.0",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -11416,7 +11415,7 @@ checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -11438,7 +11437,7 @@ checksum = "f852137cce035d6a4df67ccce505ff6b3e9fd3a10e3e52b24dc71e650bb1a9bd"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -11492,7 +11491,7 @@ checksum = "8d3b1629de253c70a0508c3899572da79ca359fdab27c7920ff00406df418906"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -11560,7 +11559,7 @@ dependencies = [
 "darling 0.24.1",
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -12708,9 +12707,9 @@ dependencies = [

 [[package]]
 name = "syn"
-version = "3.0.5"
+version = "3.0.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12df2e0110f65b775f769bb17ef989067a1d931b2eb822bd4346631eeada89f9"
+checksum = "8593e8e72159ed2257d083c7a454a85cbf854f37a0966d8d483aff8c8a3ebcee"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -12745,7 +12744,7 @@ checksum = "901704edd0dfe137f1987838ee4f259e4e063c31371bdb423f7ae38ec6f77f02"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -13036,7 +13035,7 @@ dependencies = [
 "fastrand 2.5.0",
 "getrandom 0.4.3",
 "once_cell",
- "rustix 1.1.4",
+ "rustix 1.1.5",
 "windows-sys 0.61.2",
 ]

@@ -13055,7 +13054,7 @@ version = "0.4.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "230a1b821ccbd75b185820a1f1ff7b14d21da1e442e22c0863ea5f08771a8874"
 dependencies = [
- "rustix 1.1.4",
+ "rustix 1.1.5",
 "windows-sys 0.61.2",
 ]

@@ -13115,7 +13114,7 @@ checksum = "bc04cd3e1236dd4a98afca4569f2deb3f120e5422a4023be2cb683f8486292af"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -14075,7 +14074,7 @@ checksum = "f153acc4e99a5f2a5aefa09fb078be54e26271b2813f6041200b224c098d8328"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -14179,9 +14178,9 @@ checksum = "81b79ad29b5e19de4260020f8919b443b2ef0277d242ce532ec7b7a2cc8b6007"

 [[package]]
 name = "unicode-ident"
-version = "1.0.24"
+version = "1.0.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
+checksum = "d245f478577f809a851594d02313b640fb437e0bb33866753cff937863096954"

 [[package]]
 name = "unicode-normalization"
@@ -14546,7 +14545,7 @@ dependencies = [
 "bumpalo",
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 "wasm-bindgen-shared",
 ]

@@ -14589,7 +14588,7 @@ checksum = "8c89dcab8b516b6b603baca9d550b7282d68fcc7f367e3956cff7ebf406a3f12"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -14794,7 +14793,7 @@ dependencies = [

 [[package]]
 name = "windmill"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-nats",
@@ -14882,7 +14881,7 @@ dependencies = [

 [[package]]
 name = "windmill-ai"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "async-stream",
 "async-trait",
@@ -14896,6 +14895,7 @@ dependencies = [
 "eventsource-stream",
 "futures",
 "http 1.5.0",
+ "indexmap 2.14.2",
 "lazy_static",
 "mime_guess",
 "reqwest 0.13.5",
@@ -14915,7 +14915,7 @@ dependencies = [

 [[package]]
 name = "windmill-alerting"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -14928,7 +14928,7 @@ dependencies = [

 [[package]]
 name = "windmill-api"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "argon2",
@@ -15068,7 +15068,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-agent-workers"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15091,7 +15091,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-assets"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15108,7 +15108,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-auth"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "axum 0.8.9",
@@ -15134,7 +15134,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-client"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "reqwest 0.12.28",
 "serde",
@@ -15144,7 +15144,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-configs"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15161,7 +15161,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-debug"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "base64 0.22.1",
@@ -15183,7 +15183,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-embeddings"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "axum 0.8.9",
@@ -15206,7 +15206,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-flow-conversations"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15222,7 +15222,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-flows"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15244,7 +15244,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-groups"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15266,7 +15266,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-inputs"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15280,7 +15280,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-integration-tests"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-nats",
@@ -15315,7 +15315,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-jobs"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "axum 0.8.9",
@@ -15340,7 +15340,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-npm-proxy"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15368,7 +15368,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-openapi"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "axum 0.8.9",
@@ -15390,7 +15390,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-schedule"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15410,7 +15410,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-scripts"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15448,7 +15448,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-settings"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "axum 0.8.9",
@@ -15470,14 +15470,13 @@ dependencies = [
 "windmill-ai",
 "windmill-alerting",
 "windmill-api-auth",
- "windmill-audit",
 "windmill-common",
 "windmill-object-store",
 ]

 [[package]]
 name = "windmill-api-sse"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "lazy_static",
 "serde",
@@ -15489,7 +15488,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-users"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "argon2",
 "axum 0.8.9",
@@ -15513,7 +15512,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-workers"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15527,7 +15526,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-workspaces"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "axum 0.8.9",
 "chrono",
@@ -15562,7 +15561,7 @@ dependencies = [

 [[package]]
 name = "windmill-audit"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "chrono",
 "lazy_static",
@@ -15576,7 +15575,7 @@ dependencies = [

 [[package]]
 name = "windmill-autoscaling"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "axum 0.8.9",
@@ -15595,7 +15594,7 @@ dependencies = [

 [[package]]
 name = "windmill-common"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "aes-gcm",
 "aho-corasick",
@@ -15666,6 +15665,7 @@ dependencies = [
 "serde",
 "serde_json",
 "serde_yml",
+ "sha1",
 "sha2 0.10.9",
 "size",
 "spki",
@@ -15701,7 +15701,7 @@ dependencies = [

 [[package]]
 name = "windmill-dep-map"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "chrono",
 "futures",
@@ -15721,7 +15721,7 @@ dependencies = [

 [[package]]
 name = "windmill-git-sync"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "regex",
 "serde",
@@ -15738,7 +15738,7 @@ dependencies = [

 [[package]]
 name = "windmill-indexer"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "astral-tokio-tar",
@@ -15765,7 +15765,7 @@ dependencies = [

 [[package]]
 name = "windmill-jseval"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "futures",
@@ -15782,7 +15782,7 @@ dependencies = [

 [[package]]
 name = "windmill-macros"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "itertools 0.14.0",
 "lazy_static",
@@ -15798,7 +15798,7 @@ dependencies = [

 [[package]]
 name = "windmill-mcp"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -15819,7 +15819,7 @@ dependencies = [

 [[package]]
 name = "windmill-native-triggers"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -15850,7 +15850,7 @@ dependencies = [

 [[package]]
 name = "windmill-oauth"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "arc-swap",
@@ -15875,7 +15875,7 @@ dependencies = [

 [[package]]
 name = "windmill-object-store"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-stream",
@@ -15910,7 +15910,7 @@ dependencies = [

 [[package]]
 name = "windmill-operator"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "futures",
@@ -15928,7 +15928,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "convert_case 0.6.0",
 "serde",
@@ -15937,7 +15937,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-bash"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -15949,7 +15949,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-csharp"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -15961,7 +15961,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-go"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "gosyn",
@@ -15973,7 +15973,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-graphql"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -15985,7 +15985,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-java"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -15997,7 +15997,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-nu"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "nu-parser",
@@ -16008,7 +16008,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-php"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "itertools 0.14.0",
@@ -16019,7 +16019,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "itertools 0.14.0",
@@ -16031,7 +16031,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "rustpython-ast",
@@ -16042,7 +16042,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-recursion",
@@ -16064,7 +16064,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-r"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -16076,7 +16076,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ruby"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -16090,7 +16090,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-rust"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "convert_case 0.6.0",
@@ -16107,7 +16107,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-sql"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -16120,7 +16120,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde",
@@ -16132,7 +16132,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ts"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -16150,7 +16150,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde-wasm-bindgen",
@@ -16166,7 +16166,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-wac"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "rustpython-ast",
@@ -16182,7 +16182,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-yaml"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -16196,7 +16196,7 @@ dependencies = [

 [[package]]
 name = "windmill-queue"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-recursion",
@@ -16235,7 +16235,7 @@ dependencies = [

 [[package]]
 name = "windmill-runtime-nativets"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "const_format",
@@ -16275,7 +16275,7 @@ dependencies = [

 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "getrandom 0.3.4",
 "wasm-bindgen",
@@ -16286,7 +16286,7 @@ dependencies = [

 [[package]]
 name = "windmill-store"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-recursion",
@@ -16321,7 +16321,7 @@ dependencies = [

 [[package]]
 name = "windmill-test-utils"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16345,7 +16345,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16378,7 +16378,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-amqp"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16405,7 +16405,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-azure"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16438,7 +16438,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-email"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16458,7 +16458,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-gcp"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16492,7 +16492,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-http"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16528,7 +16528,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-kafka"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16551,7 +16551,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-mqtt"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16575,7 +16575,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-nats"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-nats",
@@ -16599,7 +16599,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-postgres"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16634,7 +16634,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-sqs"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16662,7 +16662,7 @@ dependencies = [

 [[package]]
 name = "windmill-trigger-websocket"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-trait",
@@ -16687,7 +16687,7 @@ dependencies = [

 [[package]]
 name = "windmill-types"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "bitflags 2.13.2",
@@ -16706,7 +16706,7 @@ dependencies = [

 [[package]]
 name = "windmill-worker"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-once-cell",
@@ -16824,7 +16824,7 @@ dependencies = [

 [[package]]
 name = "windmill-worker-volumes"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "bytes",
 "futures",
@@ -17457,7 +17457,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
 dependencies = [
 "libc",
- "rustix 1.1.4",
+ "rustix 1.1.5",
 ]

 [[package]]
@@ -17518,7 +17518,7 @@ checksum = "33811428bee40dbceb6d545e95754741d17a6aef9a4849f0fd62e2ba4f412a78"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 "synstructure 0.14.0",
 ]

@@ -17559,7 +17559,7 @@ checksum = "f75b4683f6c7f45248d4d64056a24298c6281e0993356d7d1b4a1a962ef10d4a"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 "synstructure 0.14.0",
 ]

@@ -17615,7 +17615,7 @@ checksum = "34df6fc39dbd26ddc9c10e6a2984476e13acce22e64e4487636ef494369225da"
 dependencies = [
 "proc-macro2",
 "quote",
- "syn 3.0.5",
+ "syn 3.0.6",
 ]

 [[package]]
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.813.0"
+version = "1.814.0"
 authors.workspace = true
 edition.workspace = true

@@ -88,7 +88,7 @@ members = [
 exclude = ["./windmill-duckdb-ffi-internal", "./parsers/windmill-parser-wasm"]

 [workspace.package]
-version = "1.813.0"
+version = "1.814.0"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"

@@ -1 +1 @@
-c2e43f5b5ff753d339b70e232fd17b6ffecb054d
+d252afcc80e77fcc4f9a2a346b80908c8605a6c0
@@ -1,18 +0,0 @@
-- Refuse while the catalog holds anything. Each row is a live Postgres login with a password
-- only this table carries, so dropping it would leave credentials on the cluster that Windmill can
-- no longer disable, delete or even name — and re-applying could not recreate them, because the
-- role names would already be taken. Cleaning them up here is not an option either: dropping a
-- role means reassigning what it owns in *every* instance database, and a migration runs in one.
--
-- Delete the roles through instance settings first; that path does the cluster work.
-LOCK TABLE datatable_role IN ACCESS EXCLUSIVE MODE;
-
-DO $$
-BEGIN
-    IF EXISTS (SELECT 1 FROM datatable_role) THEN
-        RAISE EXCEPTION 'Cannot roll back: % data table role(s) still exist as Postgres logins. Delete them in instance settings first, which drops them from the cluster.',
-            (SELECT count(*) FROM datatable_role);
-    END IF;
-END $$;
-
-DROP TABLE IF EXISTS datatable_role;
@@ -1,21 +0,0 @@
-- The instance's data table role catalog: one row per Postgres login Windmill created for data
-- table access.
--
-- A table rather than a `global_settings` key, because the value is a set of live cluster
-- credentials and that table has generic read, list, write and CLI round-trip paths that know
-- nothing about what they are carrying. Every one of them is a way to leak the passwords or to
-- overwrite the catalog with a copy that has none, and a row nothing generic touches has none of
-- those. One row per role also makes two concurrent creates two inserts rather than a
-- read-modify-write over one document.
-CREATE TABLE datatable_role (
-    id VARCHAR(50) PRIMARY KEY,
-    -- The Postgres role name, verbatim. Unique because it is the cluster's own key.
-    name VARCHAR(63) NOT NULL UNIQUE,
-    enabled BOOLEAN NOT NULL DEFAULT true,
-    -- Generated by Windmill, never entered by anyone, and never leaves the server.
-    pwd TEXT,
-    created_at TIMESTAMPTZ NOT NULL DEFAULT now()
-);
-
-GRANT ALL ON datatable_role TO windmill_user;
-GRANT ALL ON datatable_role TO windmill_admin;
@@ -0,0 +1,3 @@
+ALTER TABLE flow_conversation_message DROP COLUMN tool_arguments;
+ALTER TABLE flow_conversation_message DROP COLUMN tool_result;
+ALTER TABLE flow_conversation_message DROP COLUMN reasoning;
@@ -0,0 +1,12 @@
+-- A chat is rebuilt from its rows without reading jobs, so every tool row carries its call:
+-- the arguments the model wrote and the text the model got back, or what the call failed
+-- with. A script or flow tool's job holds the args its input transforms produced, not the
+-- model's; an MCP tool runs inside the agent's job, whose result lists every call of the
+-- turn with nothing tying one to a row. A provider-native web search carries only its
+-- citations, the provider never returning the query.
+ALTER TABLE flow_conversation_message ADD COLUMN tool_arguments TEXT;
+ALTER TABLE flow_conversation_message ADD COLUMN tool_result TEXT;
+
+-- The thinking behind this row. The agent job keeps the turn's thinking as one string;
+-- the rows keep it per iteration, next to the answer or tool call it led to.
+ALTER TABLE flow_conversation_message ADD COLUMN reasoning TEXT;
@@ -0,0 +1 @@
+ALTER TABLE flow_conversation DROP COLUMN is_test;
@@ -0,0 +1,26 @@
+-- A chat run from the flow editor's test panel is stored exactly like one from the
+-- deployed flow, so the two were indistinguishable once written. Marking them lets the
+-- lists tell a trial apart from a real conversation.
+ALTER TABLE flow_conversation ADD COLUMN is_test BOOLEAN NOT NULL DEFAULT false;
+
+-- Existing rows: a conversation whose messages came from a flowpreview run was a test.
+-- Derived once here because the job is purged on retention, after which the origin of an
+-- old conversation is unknowable.
+--
+-- Walked to the root job rather than matched directly: an existing message row never holds
+-- the flow job itself. The rows point at the step that produced them — the AI agent's job
+-- for an answer, the tool's own job for a tool call — whose kind is never 'flowpreview'.
+--
+-- `root_job` first, matching `get_root_job_id` (windmill-worker/src/common.rs): only it
+-- reaches the top of the run. `flow_innermost_root_job` stops at the closest flow scope by
+-- design, so an agent inside a subflow would land on that subflow's 'flow' row and the
+-- conversation would read as deployed.
+UPDATE flow_conversation c
+SET is_test = true
+WHERE EXISTS (
+    SELECT 1 FROM flow_conversation_message m
+    JOIN v2_job j ON j.id = m.job_id
+    JOIN v2_job root
+      ON root.id = coalesce(j.root_job, j.flow_innermost_root_job, j.parent_job, j.id)
+    WHERE m.conversation_id = c.id AND root.kind = 'flowpreview'
+);
@@ -0,0 +1 @@
+ALTER TABLE flow_conversation_message DROP COLUMN attachments;
@@ -0,0 +1,4 @@
+-- The files a user message carried, as object-storage references: `[{input, s3, storage?,
+-- filename?}]`. Only references, never file bytes and never a presigned URL, so a
+-- transcript can show a message's files without reading its run's args.
+ALTER TABLE flow_conversation_message ADD COLUMN attachments JSONB;
@@ -6191,7 +6191,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"

 [[package]]
 name = "windmill-common"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "aho-corasick",
 "anyhow",
@@ -6274,7 +6274,7 @@ dependencies = [

 [[package]]
 name = "windmill-macros"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "proc-macro2",
 "quote",
@@ -6286,7 +6286,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "convert_case",
 "serde",
@@ -6295,7 +6295,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-bash"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -6307,7 +6307,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-csharp"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -6319,7 +6319,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-go"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "gosyn",
@@ -6331,7 +6331,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-graphql"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -6343,7 +6343,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-java"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -6355,7 +6355,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-nu"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "nu-parser",
@@ -6366,7 +6366,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-php"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "itertools 0.14.0",
@@ -6377,7 +6377,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "itertools 0.14.0",
@@ -6389,7 +6389,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py-asset"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "rustpython-ast",
@@ -6400,7 +6400,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "async-recursion",
@@ -6422,7 +6422,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-r"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -6434,7 +6434,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ruby"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -6448,7 +6448,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-rust"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "convert_case",
@@ -6465,7 +6465,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-sql"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -6478,7 +6478,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-sql-asset"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde",
@@ -6490,7 +6490,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ts"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -6508,7 +6508,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ts-asset"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "serde-wasm-bindgen",
@@ -6524,7 +6524,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-wac"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "rustpython-ast",
@@ -6540,7 +6540,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-wasm"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "getrandom 0.2.17",
@@ -6572,7 +6572,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-yaml"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -6586,7 +6586,7 @@ dependencies = [

 [[package]]
 name = "windmill-types"
-version = "1.813.0"
+version = "1.814.0"
 dependencies = [
 "anyhow",
 "bitflags",
@@ -12,7 +12,7 @@ resolver = "2"
 members = ["."]

 [workspace.package]
-version = "1.813.0"
+version = "1.814.0"
 edition = "2021"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]

@@ -730,12 +730,7 @@ pub fn parse_asset_syntax(
    s: &str,
    enable_default_syntax: bool,
 ) -> Option<(AssetKind, Cow<'_, str>)> {
-    // `datatable` and `datatable?role=analyst` both name the default data table: the role picks
-    // which Postgres login the connection is made as, not which data table is read.
-    if enable_default_syntax
-        && s.strip_prefix("datatable")
-            .is_some_and(|rest| rest.is_empty() || rest.starts_with('?'))
-    {
+    if enable_default_syntax && s == "datatable" {
        return Some((AssetKind::DataTable, Cow::Borrowed("main")));
    } else if enable_default_syntax && s == "ducklake" {
        return Some((AssetKind::Ducklake, Cow::Borrowed("main")));
@@ -746,14 +741,6 @@ pub fn parse_asset_syntax(
            if *kind == AssetKind::Dbt {
                return Some((*kind, Cow::Owned(canonicalize_table_asset_path(suffix))));
            }
-            // Same reasoning as above, for the explicit form. Specific to data tables: a
-            // `Resource`'s `?table=` is part of what it names, and stripping it would merge two
-            // different assets.
-            if *kind == AssetKind::DataTable {
-                if let Some((path, _role)) = suffix.split_once('?') {
-                    return Some((*kind, Cow::Borrowed(path)));
-                }
-            }
            // The suffix is kept verbatim. For S3 the path encodes the storage:
            // `s3://<storage>/<key>`, with an EMPTY storage segment for the
            // workspace default — so `s3:///key` yields `/key` (leading slash
@@ -1705,25 +1692,6 @@ fn parse_trigger_spec(s: &str) -> Option<TriggerSpec> {
 mod pipeline_annotation_tests {
    use super::*;

-    #[test]
-    fn a_datatable_role_is_not_part_of_the_asset_it_names() {
-        // The role picks which Postgres login the connection is made as, so two references that
-        // differ only by role are the same asset and must land on one graph node.
-        assert_eq!(
-            parse_asset_syntax("datatable://sales?role=analytics", false),
-            Some((AssetKind::DataTable, Cow::Borrowed("sales")))
-        );
-        assert_eq!(
-            parse_asset_syntax("datatable?role=analytics", true),
-            Some((AssetKind::DataTable, Cow::Borrowed("main")))
-        );
-        // A resource's `?table=` is part of what it names, so it is kept.
-        assert_eq!(
-            parse_asset_syntax("$res:f/db/pg?table=users", false),
-            Some((AssetKind::Resource, Cow::Borrowed("f/db/pg?table=users")))
-        );
-    }
-
    #[test]
    fn s3_path_keeps_storage_distinction() {
        // An S3 asset path is `<storage>/<key>` with an empty storage segment
@@ -99,9 +99,9 @@ email_trigger: path(char), local_part(char), workspaced_local_part(bool), script
 favorite: usr(char), workspace_id(char), path(char), favorite_kind(favorite_kind)
 flow: workspace_id(char), path(char), summary(text), description(text), value(jsonb), edited_by(char), edited_at(ts), archived(bool), schema(json), extra_perms(jsonb), dependency_job(uuid), draft_only(bool), tag(char), ws_error_handler_muted(bool), dedicated_worker(bool), timeout(int), visible_to_runner_only(bool), concurrency_key(char), versions(bigint[]), on_behalf_of(varchar), on_behalf_of_email(text), lock_error_logs(text), labels(text[])
  FK: (workspace_id) -> workspace(id)
-flow_conversation: id(uuid), workspace_id(char), flow_path(char), title(char), created_at(ts), updated_at(ts), created_by(char)
+flow_conversation: id(uuid), workspace_id(char), flow_path(char), title(char), created_at(ts), updated_at(ts), created_by(char), is_test(bool)
  FK: (workspace_id) -> workspace(id)
-flow_conversation_message: id(uuid), conversation_id(uuid), message_type(message_type), content(text), job_id(uuid), created_at(ts), created_seq(int8), step_name(char), success(bool)
+flow_conversation_message: id(uuid), conversation_id(uuid), message_type(message_type), content(text), job_id(uuid), created_at(ts), created_seq(int8), step_name(char), success(bool), tool_arguments(text), tool_result(text), reasoning(text), attachments(jsonb)
  FK: (conversation_id) -> flow_conversation(id) | (job_id) -> v2_job(id)
 flow_iterator_data: job_id(uuid), itered(jsonb)
 flow_node: id(bigint), workspace_id(char), hash(bigint), path(char), lock(text), code(text), flow(jsonb), hash_v2(char(64))
@@ -258,6 +258,7 @@ async fn test_new_turns_wait_for_conversation_cleanup_and_recreate(
                    "test-user",
                    "hi again",
                    conv_id,
+                    false,
                )
                .await?;
                windmill_common::flow_conversations::add_message_to_conversation_tx(
@@ -268,6 +269,7 @@ async fn test_new_turns_wait_for_conversation_cleanup_and_recreate(
                    windmill_common::flow_conversations::MessageType::User,
                    None,
                    true,
+                    None,
                )
                .await?;
                tx.commit().await?;
@@ -23,6 +23,7 @@ async-trait.workspace = true
 async-stream.workspace = true
 base64.workspace = true
 bytes.workspace = true
+indexmap.workspace = true
 eventsource-stream.workspace = true
 futures.workspace = true
 http.workspace = true
@@ -1074,7 +1074,8 @@ impl BedrockQueryBuilder {

        let mut accumulated_text = String::new();
        let mut events_str = String::new();
-        let mut accumulated_tool_calls: HashMap<String, StreamingToolCall> = HashMap::new();
+        let mut accumulated_tool_calls: indexmap::IndexMap<String, StreamingToolCall> =
+            indexmap::IndexMap::new();
        let mut current_tool_use_id: Option<String> = None;
        let mut usage: Option<TokenUsage> = None;
        // Claude reasoning block for the turn (only populated when thinking is on),
@@ -1263,7 +1264,10 @@ mod tests {
        // recovers the uncached share by subtracting the details back out.
        assert_eq!(usage["usage"]["prompt_tokens"], 1010);
        assert_eq!(usage["usage"]["completion_tokens"], 7);
-        assert_eq!(usage["usage"]["prompt_tokens_details"]["cached_tokens"], 900);
+        assert_eq!(
+            usage["usage"]["prompt_tokens_details"]["cached_tokens"],
+            900
+        );
        assert_eq!(
            usage["usage"]["prompt_tokens_details"]["cache_write_tokens"],
            100
@@ -1,6 +1,7 @@
 use std::collections::HashMap;

 use eventsource_stream::Eventsource;
+use indexmap::IndexMap;
 use reqwest::Response;
 use serde::Deserialize;
 use tokio_stream::StreamExt;
@@ -137,7 +138,9 @@ pub struct OpenAISSEParser {
    pub accumulated_content: String,
    /// The thinking streamed before the answer, kept so it can be stored with it.
    pub accumulated_reasoning: String,
-    pub accumulated_tool_calls: HashMap<i64, OpenAIToolCall>,
+    // Insertion-ordered in every parser: tool calls run and are persisted in the order the
+    // stream showed them, and a chat attaches a round's thinking to its first call.
+    pub accumulated_tool_calls: IndexMap<i64, OpenAIToolCall>,
    pub events_str: String,
    pub stream_event_processor: Box<dyn StreamEventSink>,
    /// Token usage from final chunk (when stream_options.include_usage is true)
@@ -149,7 +152,7 @@ impl OpenAISSEParser {
        Self {
            accumulated_content: String::new(),
            accumulated_reasoning: String::new(),
-            accumulated_tool_calls: HashMap::new(),
+            accumulated_tool_calls: IndexMap::new(),
            events_str: String::new(),
            stream_event_processor,
            usage: None,
@@ -359,7 +362,7 @@ pub struct AnthropicSSEParser {
    pub accumulated_content: String,
    /// The thinking streamed before the answer, kept so it can be stored with it.
    pub accumulated_reasoning: String,
-    pub accumulated_tool_calls: HashMap<i64, OpenAIToolCall>,
+    pub accumulated_tool_calls: IndexMap<i64, OpenAIToolCall>,
    pub events_str: String,
    pub stream_event_processor: Box<dyn StreamEventSink>,
    /// Track content block types by index
@@ -382,7 +385,7 @@ impl AnthropicSSEParser {
        Self {
            accumulated_content: String::new(),
            accumulated_reasoning: String::new(),
-            accumulated_tool_calls: HashMap::new(),
+            accumulated_tool_calls: IndexMap::new(),
            events_str: String::new(),
            stream_event_processor,
            content_blocks: HashMap::new(),
@@ -601,7 +604,7 @@ pub struct GeminiSSEParser {
    pub accumulated_content: String,
    /// The thinking streamed before the answer, kept so it can be stored with it.
    pub accumulated_reasoning: String,
-    pub accumulated_tool_calls: HashMap<i64, OpenAIToolCall>,
+    pub accumulated_tool_calls: IndexMap<i64, OpenAIToolCall>,
    pub events_str: String,
    pub stream_event_processor: Box<dyn StreamEventSink>,
    tool_call_index: i64,
@@ -615,7 +618,7 @@ impl GeminiSSEParser {
        Self {
            accumulated_content: String::new(),
            accumulated_reasoning: String::new(),
-            accumulated_tool_calls: HashMap::new(),
+            accumulated_tool_calls: IndexMap::new(),
            events_str: String::new(),
            stream_event_processor,
            tool_call_index: 0,
@@ -833,7 +836,7 @@ pub struct OpenAIResponsesSSEParser {
    pub accumulated_content: String,
    /// The reasoning summary streamed before the answer, kept so it can be stored with it.
    pub accumulated_reasoning: String,
-    pub accumulated_tool_calls: HashMap<String, OpenAIToolCall>,
+    pub accumulated_tool_calls: IndexMap<String, OpenAIToolCall>,
    /// Maps item_id -> (name, call_id) for function calls
    tool_call_metadata: HashMap<String, (String, String)>,
    /// Maps item_id -> accumulated arguments
@@ -855,7 +858,7 @@ impl OpenAIResponsesSSEParser {
        Self {
            accumulated_content: String::new(),
            accumulated_reasoning: String::new(),
-            accumulated_tool_calls: HashMap::new(),
+            accumulated_tool_calls: IndexMap::new(),
            tool_call_metadata: HashMap::new(),
            tool_call_arguments: HashMap::new(),
            events_str: String::new(),
@@ -78,17 +78,50 @@ impl Default for OutputType {
 #[serde(tag = "kind", rename_all = "lowercase")]
 pub enum Memory {
    Off,
-    Auto {
-        #[serde(default)]
+    Window {
+        #[serde(default, deserialize_with = "deserialize_null_as_zero")]
        context_length: usize,
-        #[serde(default)]
+    },
+    /// Written before `window`. Its `memory_id` stays a fallback behind the run's memory id.
+    Auto {
+        #[serde(default, deserialize_with = "deserialize_null_as_zero")]
+        context_length: usize,
+        #[serde(default, deserialize_with = "deserialize_blank_as_none")]
        memory_id: Option<Uuid>,
    },
+    /// Written before a step had history inputs of its own, and read on its own where it remains.
    Manual {
        messages: Vec<OpenAIMessage>,
    },
 }

+// An editor form can leave `""` in a legacy baked id it never filled; it means no id rather than
+// failing every run of the step.
+fn deserialize_blank_as_none<'de, D: serde::Deserializer<'de>>(
+    deserializer: D,
+) -> Result<Option<Uuid>, D::Error> {
+    match <Option<String> as serde::Deserialize>::deserialize(deserializer)? {
+        Some(id) if !id.trim().is_empty() => Uuid::parse_str(id.trim())
+            .map(Some)
+            .map_err(serde::de::Error::custom),
+        _ => Ok(None),
+    }
+}
+
+// A count the editor's number field was cleared of is stored as `null`, which `default` does not
+// cover; it reads as 0, memory off, rather than failing every run of the step.
+fn deserialize_null_as_zero<'de, D: serde::Deserializer<'de>>(
+    deserializer: D,
+) -> Result<usize, D::Error> {
+    <Option<usize> as serde::Deserialize>::deserialize(deserializer).map(Option::unwrap_or_default)
+}
+
+fn deserialize_present<'de, D: serde::Deserializer<'de>>(
+    deserializer: D,
+) -> Result<Option<serde_json::Value>, D::Error> {
+    <serde_json::Value as serde::Deserialize>::deserialize(deserializer).map(Some)
+}
+
 #[derive(Deserialize)]
 struct AIAgentArgsRaw {
    provider: ProviderWithResource,
@@ -103,6 +136,12 @@ struct AIAgentArgsRaw {
    streaming: Option<bool>,
    max_iterations: Option<usize>,
    memory: Option<Memory>,
+    // A null must stay distinguishable from an absent key: a step whose own memory id evaluates to
+    // nothing runs stateless instead of falling back to the run's memory id.
+    #[serde(default, deserialize_with = "deserialize_present")]
+    memory_id: Option<serde_json::Value>,
+    #[serde(default)]
+    previous_messages: Option<Vec<OpenAIMessage>>,
    enabled_tools: Option<Vec<String>>,
    // Legacy field for backward compatibility
    messages_context_length: Option<usize>,
@@ -124,6 +163,10 @@ pub struct AIAgentArgs {
    pub streaming: Option<bool>,
    pub max_iterations: Option<usize>,
    pub memory: Option<Memory>,
+    /// Memory id set on the step, overriding the run's. Empty when its expression produced none.
+    pub memory_id: Option<String>,
+    /// History supplied by the flow, replayed without reading or writing memory.
+    pub previous_messages: Option<Vec<OpenAIMessage>>,
    /// Which of the agent's tools this run may call; `narrow_roster` holds what the names are and
    /// what `None` means.
    pub enabled_tools: Option<Vec<String>>,
@@ -139,12 +182,17 @@ impl From<AIAgentArgsRaw> for AIAgentArgs {
        });

        // Backward compatibility: if context_length is 0, use off mode
-        let memory = memory.map(|memory| {
-            if let Memory::Auto { context_length: 0, .. } = memory {
+        let memory = memory.map(|memory| match memory {
+            Memory::Auto { context_length: 0, .. } | Memory::Window { context_length: 0 } => {
                Memory::Off
-            } else {
-                memory
            }
+            memory => memory,
+        });
+
+        let memory_id = raw.memory_id.map(|value| match value {
+            serde_json::Value::Null => String::new(),
+            serde_json::Value::String(s) => s.trim().to_string(),
+            value => value.to_string(),
        });

        AIAgentArgs {
@@ -159,6 +207,8 @@ impl From<AIAgentArgsRaw> for AIAgentArgs {
            streaming: raw.streaming,
            max_iterations: raw.max_iterations,
            memory,
+            memory_id,
+            previous_messages: raw.previous_messages,
            enabled_tools: raw.enabled_tools,
            credentials_check: raw.credentials_check.unwrap_or(false),
        }
@@ -1,6 +1,6 @@
 use axum::{
    extract::{Path, Query},
-    routing::{delete, get},
+    routing::{delete, get, post},
    Extension, Json, Router,
 };
 use chrono::{DateTime, Utc};
@@ -15,13 +15,14 @@ use windmill_common::{
    db::{UserDB, DB},
    error::{JsonResult, Result},
    flow_conversations::MessageType,
-    utils::{not_found_if_none, paginate, Pagination},
+    utils::{not_found_if_none, paginate, truncate_with_ellipsis, Pagination},
 };

 pub fn workspaced_service() -> Router {
    Router::new()
        .route("/list", get(list_conversations))
        .route("/delete/{conversation_id}", delete(delete_conversation))
+        .route("/update/{conversation_id}", post(update_conversation))
        .route("/{conversation_id}/messages", get(list_messages))
 }

@@ -36,11 +37,37 @@ pub struct FlowConversationMessage {
    pub created_seq: i64,
    pub step_name: Option<String>,
    pub success: bool,
+    /// On a tool row, the arguments the model wrote. For a Windmill tool these exclude the
+    /// inputs its step wires in. Null for a web search, whose query the provider does not
+    /// return.
+    pub tool_arguments: Option<String>,
+    /// On a tool row, the text the model got back, or what the call failed with; a web
+    /// search's citations.
+    pub tool_result: Option<String>,
+    /// On an answer, the thinking that produced it; on a tool row, the thinking that led to
+    /// the call. The agent job keeps the turn's thinking as one string.
+    pub reasoning: Option<String>,
+    /// The files a user message carried, as object-storage references
+    /// (`[{input, s3, storage?, filename?}]`).
+    pub attachments: Option<sqlx::types::JsonValue>,
+}
+
+/// Which conversations a listing holds. A test chat was started from the editor's test
+/// panel; a deployed one from the flow itself.
+#[derive(Deserialize, Default, Clone, Copy)]
+#[serde(rename_all = "lowercase")]
+pub enum ConversationKind {
+    Test,
+    /// The default: a deployed flow's chat should not surface someone's trial runs.
+    #[default]
+    Deployed,
+    All,
 }

 #[derive(Deserialize)]
 pub struct ListConversationsQuery {
    pub flow_path: Option<String>,
+    pub kind: Option<ConversationKind>,
 }

 #[derive(Deserialize)]
@@ -67,6 +94,7 @@ async fn list_conversations(
        "created_at",
        "updated_at",
        "created_by",
+        "is_test",
    ])
    .and_where_eq("workspace_id", "?".bind(&w_id));

@@ -74,6 +102,16 @@ async fn list_conversations(
        sqlb.and_where_eq("flow_path", "?".bind(flow_path));
    }

+    match query.kind.unwrap_or_default() {
+        ConversationKind::Test => {
+            sqlb.and_where_eq("is_test", "true");
+        }
+        ConversationKind::Deployed => {
+            sqlb.and_where_eq("is_test", "false");
+        }
+        ConversationKind::All => {}
+    }
+
    sqlb.order_by("updated_at", true)
        .limit(per_page as i64)
        .offset(offset as i64);
@@ -101,7 +139,7 @@ async fn delete_conversation(
    // Verify the conversation exists and belongs to the user
    let conversation = sqlx::query_as!(
        FlowConversation,
-        "SELECT id, workspace_id, flow_path, title, created_at, updated_at, created_by
+        "SELECT id, workspace_id, flow_path, title, created_at, updated_at, created_by, is_test
         FROM flow_conversation
         WHERE id = $1 AND workspace_id = $2",
        conversation_id,
@@ -148,6 +186,50 @@ async fn delete_conversation(
    Ok(format!("Conversation {} deleted", conversation_id))
 }

+#[derive(Deserialize)]
+pub struct UpdateConversation {
+    pub title: String,
+}
+
+async fn update_conversation(
+    authed: ApiAuthed,
+    Extension(user_db): Extension<UserDB>,
+    Path((w_id, conversation_id)): Path<(String, Uuid)>,
+    Json(update): Json<UpdateConversation>,
+) -> Result<String> {
+    // Postgres refuses a NUL in a text column, so it must not reach the query as a 500.
+    if update.title.contains('\0') {
+        return Err(windmill_common::error::Error::BadRequest(
+            "title cannot contain a NUL character".to_string(),
+        ));
+    }
+    // The column is VARCHAR(255) and the helper appends an ellipsis to what it cuts, so the
+    // bound it takes is three short of the column's. A longer title would otherwise reach
+    // Postgres as a 22001 and come back a 500.
+    let title = truncate_with_ellipsis(update.title.trim(), 252);
+
+    let mut tx = user_db.clone().begin(&authed).await?;
+
+    // `updated_at` is kept: the list is ordered by it, and a rename must not move the
+    // chat to the top the way a new turn does.
+    let updated = sqlx::query_scalar!(
+        "UPDATE flow_conversation SET title = $1, updated_at = updated_at
+         WHERE id = $2 AND workspace_id = $3
+         RETURNING id",
+        title,
+        conversation_id,
+        &w_id
+    )
+    .fetch_optional(&mut *tx)
+    .await?;
+
+    not_found_if_none(updated, "Conversation", conversation_id.to_string())?;
+
+    tx.commit().await?;
+
+    Ok(format!("Conversation {} updated", conversation_id))
+}
+
 async fn list_messages(
    authed: ApiAuthed,
    Extension(user_db): Extension<UserDB>,
@@ -178,7 +260,7 @@ async fn list_messages(
    let messages = if let Some(after_seq) = query.after_seq {
        sqlx::query_as!(
            FlowConversationMessage,
-            r#"SELECT id, conversation_id, message_type as "message_type: MessageType", content, job_id, created_at, created_seq, step_name, success
+            r#"SELECT id, conversation_id, message_type as "message_type: MessageType", content, job_id, created_at, created_seq, step_name, success, tool_arguments, tool_result, reasoning, attachments
             FROM flow_conversation_message
             WHERE conversation_id = $1
               AND created_seq > $2
@@ -195,9 +277,9 @@ async fn list_messages(
        // Fetch messages for this conversation, oldest first, but reverse the order of the messages for easy rendering on the frontend
        sqlx::query_as!(
            FlowConversationMessage,
-            r#"SELECT id, conversation_id, message_type as "message_type: MessageType", content, job_id, created_at, created_seq, step_name, success
+            r#"SELECT id, conversation_id, message_type as "message_type: MessageType", content, job_id, created_at, created_seq, step_name, success, tool_arguments, tool_result, reasoning, attachments
             FROM (
-                SELECT id, conversation_id, message_type, content, job_id, created_at, created_seq, step_name, success
+                SELECT id, conversation_id, message_type, content, job_id, created_at, created_seq, step_name, success, tool_arguments, tool_result, reasoning, attachments
                FROM flow_conversation_message
                WHERE conversation_id = $1
                ORDER BY created_seq DESC
@@ -800,14 +800,6 @@ async fn delete_folder(

    not_found_if_none(get_folderopt(&mut tx, &w_id, &name).await?, "Folder", &name)?;

-    // See the same call in `delete_group`: a freed name must not stay in a tenant list.
-    windmill_common::workspaces::remove_datatable_tenant_in_workspace(
-        &mut tx,
-        &w_id,
-        &format!("f/{name}"),
-    )
-    .await?;
-
    let del = sqlx::query_scalar!(
        "DELETE FROM folder WHERE name = $1 AND workspace_id = $2 RETURNING 1",
        name,
@@ -797,15 +797,6 @@ async fn delete_group(
    }
    not_found_if_none(get_group_opt(&mut tx, &w_id, &name).await?, "Group", &name)?;

-    // A tenant list names a principal, so a freed name must not linger in one: a later group
-    // reusing it would silently inherit the data table access this one had.
-    windmill_common::workspaces::remove_datatable_tenant_in_workspace(
-        &mut tx,
-        &w_id,
-        &format!("g/{name}"),
-    )
-    .await?;
-
    sqlx::query!(
        "DELETE FROM usr_to_group WHERE group_ = $1 AND workspace_id = $2",
        name,
@@ -1,108 +0,0 @@
-//! Who may read and change a data table's grants and owners. On the Enterprise Edition: its
-//! administrators, from the workspace that governs it. Without it: nobody. Each refusal is decided
-//! before anything connects to the data table, so the fixture's database never has to exist.
-
-use serde_json::{json, Value};
-use sqlx::{Pool, Postgres};
-
-use windmill_test_utils::*;
-
-fn grant_select_on_public() -> Value {
-    json!({
-        "target": {"kind": "schema", "schema": "public"},
-        "change": {"type": "grant", "role": "analytics", "privileges": ["SELECT"],
-                   "scope": "all_tables"},
-        "statements": [r#"GRANT SELECT ON ALL TABLES IN SCHEMA "public" TO "analytics""#]
-    })
-}
-
-async fn post_acl(
-    port: u16,
-    w_id: &str,
-    action: &str,
-    token: &str,
-) -> anyhow::Result<reqwest::Response> {
-    Ok(reqwest::Client::new()
-        .post(format!(
-            "http://localhost:{port}/api/w/{w_id}/workspaces/datatable_acl/main/{action}"
-        ))
-        .header("Authorization", format!("Bearer {token}"))
-        .json(&grant_select_on_public())
-        .send()
-        .await?)
-}
-
-/// A fork reaches the data table through a pointer: it may use it, never change what each role may
-/// touch on it — not even as an admin of the fork.
-#[cfg(all(feature = "private", feature = "enterprise"))]
-#[sqlx::test(migrations = "../migrations", fixtures("base", "datatable_roles"))]
-async fn a_fork_cannot_change_access_on_the_data_table_it_points_at(
-    db: Pool<Postgres>,
-) -> anyhow::Result<()> {
-    initialize_tracing().await;
-    let server = ApiServer::start(db.clone()).await?;
-    let port = server.addr.port();
-    for action in ["plan", "apply"] {
-        let resp = post_acl(port, "wm-fork-dt", action, "SECRET_TOKEN_2").await?;
-        assert_eq!(resp.status(), 401, "{action}: {}", resp.text().await?);
-    }
-    Ok(())
-}
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-#[sqlx::test(migrations = "../migrations", fixtures("base", "datatable_roles"))]
-async fn a_member_who_is_not_an_admin_cannot_change_access(
-    db: Pool<Postgres>,
-) -> anyhow::Result<()> {
-    initialize_tracing().await;
-    let server = ApiServer::start(db.clone()).await?;
-    let port = server.addr.port();
-    for action in ["plan", "apply"] {
-        let resp = post_acl(port, "test-workspace", action, "SECRET_TOKEN_2").await?;
-        assert_eq!(resp.status(), 401, "{action}: {}", resp.text().await?);
-    }
-    Ok(())
-}
-
-/// Not even reading, and not even on a data table that is not under roles — which any member
-/// reaches, so only the edition stands between them and the instance's credentials.
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-#[sqlx::test(migrations = "../migrations", fixtures("base", "datatable_roles"))]
-async fn only_the_enterprise_edition_has_the_access_editor(
-    db: Pool<Postgres>,
-) -> anyhow::Result<()> {
-    initialize_tracing().await;
-    sqlx::query(
-        "UPDATE workspace_settings
-         SET datatable = datatable #- '{datatables,main,permissions}'
-         WHERE workspace_id = 'test-workspace'",
-    )
-    .execute(&db)
-    .await?;
-    let server = ApiServer::start(db.clone()).await?;
-    let port = server.addr.port();
-
-    let read = reqwest::Client::new()
-        .get(format!(
-            "http://localhost:{port}/api/w/test-workspace/workspaces/datatable_acl/main?kind=database"
-        ))
-        .header("Authorization", "Bearer SECRET_TOKEN")
-        .send()
-        .await?;
-    let mut responses = vec![("read", read)];
-    for action in ["plan", "apply"] {
-        responses.push((
-            action,
-            post_acl(port, "test-workspace", action, "SECRET_TOKEN").await?,
-        ));
-    }
-    for (action, resp) in responses {
-        assert_eq!(resp.status(), 400, "{action}");
-        let body = resp.text().await?;
-        assert!(
-            body.contains("Data table roles are a Windmill Enterprise Edition feature"),
-            "{action}: {body}"
-        );
-    }
-    Ok(())
-}
@@ -1,45 +0,0 @@
-- A data table under roles in `test-workspace`, and a fork whose entry points at it rather than
-- carrying a copy. `test-user-2` is a non-admin of the parent and an admin of the fork: the shape
-- the pointer exists for.
-
-- Empty registry: role provisioning grants CONNECT on every database named here, and the data
-- table's `dt_main` is a name in workspace settings, not a database that exists.
-INSERT INTO global_settings (name, value) VALUES
-    ('custom_instance_pg_databases', '{"user_pwd": "pw", "databases": {}}'::jsonb)
-    ON CONFLICT (name) DO UPDATE SET value = EXCLUDED.value;
-
-INSERT INTO datatable_role (id, name, enabled, pwd) VALUES ('role1', 'analytics', true, 'pw');
-
-UPDATE workspace_settings SET datatable = '{
-    "datatables": {
-        "main": {
-            "database": {"resource_type": "instance", "resource_path": "dt_main"},
-            "permissions": {
-                "default_role": "role1",
-                "roles": {
-                    "admin": {"tenants": []},
-                    "role1": {"tenants": ["u/test-user-2", "g/analysts", "f/finance"]}
-                }
-            }
-        }
-    }
-}'::jsonb WHERE workspace_id = 'test-workspace';
-
-INSERT INTO group_ (workspace_id, name, summary, extra_perms) VALUES
-	('test-workspace', 'analysts', 'Analysts', '{}');
-INSERT INTO folder (workspace_id, name, display_name, owners, extra_perms) VALUES
-	('test-workspace', 'finance', 'finance', '{}', '{}');
-
-INSERT INTO workspace (id, name, owner, parent_workspace_id) VALUES
-	('wm-fork-dt', 'fork of test-workspace', 'test2@windmill.dev', 'test-workspace');
-INSERT INTO workspace_key (workspace_id, kind, key) VALUES ('wm-fork-dt', 'cloud', 'test-key');
-INSERT INTO group_ (workspace_id, name, summary, extra_perms) VALUES
-	('wm-fork-dt', 'all', 'All users', '{}');
-INSERT INTO usr (workspace_id, email, username, is_admin, role) VALUES
-	('wm-fork-dt', 'test2@windmill.dev', 'test-user-2', true, 'Admin');
-
-INSERT INTO workspace_settings (workspace_id, datatable) VALUES ('wm-fork-dt', '{
-    "datatables": {
-        "main": {"reference": {"workspace_id": "test-workspace", "datatable": "main"}}
-    }
-}'::jsonb);
@@ -26,7 +26,9 @@ use windmill_api_auth::{check_scopes, get_scope_tags, ApiAuthed};
 use windmill_common::{
    db::{UserDB, UserDbWithAuthed},
    error::{self, Error},
-    flow_conversations::{add_message_to_conversation_tx, MessageType},
+    flow_conversations::{
+        add_message_to_conversation_tx, message_attachments, MessageExtras, MessageType,
+    },
    get_latest_flow_version_info_for_path,
    jobs::{
        check_tag_available_for_workspace_internal, format_result, script_path_to_payload,
@@ -653,9 +655,11 @@ pub async fn set_flow_memory_id(
 pub async fn process_flow_run_query_params(
    tx: &mut sqlx::Transaction<'_, sqlx::Postgres>,
    job_id: Uuid,
+    w_id: &str,
+    flow_path: &str,
    run_query: &RunJobQuery,
 ) -> error::Result<()> {
-    if let Some(memory_id) = run_query.memory_id {
+    if let Some(memory_id) = run_query.memory_key(w_id, flow_path) {
        set_flow_memory_id(tx, job_id, memory_id).await?;
    }
    Ok(())
@@ -669,10 +673,13 @@ pub async fn handle_chat_conversation_messages(
    run_query: &RunJobQuery,
    user_message_raw: Option<&Box<serde_json::value::RawValue>>,
    job_id: Uuid,
+    is_test: bool,
+    // The run's args, for the files the message carried.
+    args: &HashMap<String, Box<serde_json::value::RawValue>>,
 ) -> error::Result<()> {
    // Names the query parameter rather than the field: it is not a flow argument, and
    // supplying it as one is the first thing tried on reading `memory_id is required`.
-    let memory_id = run_query.memory_id.ok_or_else(|| {
+    let memory_id = run_query.memory_key(w_id, flow_path).ok_or_else(|| {
        windmill_common::error::Error::BadRequest(
            "memory_id is required for chat-enabled flows. Pass it as the `memory_id` query \
             parameter, not as a flow argument: it names the conversation the turn belongs to, \
@@ -701,11 +708,12 @@ pub async fn handle_chat_conversation_messages(
        &authed.username,
        &user_message,
        memory_id,
+        is_test,
    )
    .await?;

-    // The run this message started. Its args are the only record of what the message
-    // carried besides its text — attachments and every other flow input — and nothing
+    // The run this message started. The row keeps the files the message carried as
+    // references; its args are the only record of every other flow input, and nothing
    // written later points at them: an assistant row holds the AI agent step's job.
    add_message_to_conversation_tx(
        tx,
@@ -715,6 +723,7 @@ pub async fn handle_chat_conversation_messages(
        MessageType::User,
        None,
        true,
+        Some(&MessageExtras { attachments: message_attachments(args), ..Default::default() }),
    )
    .await?;

@@ -822,7 +831,7 @@ pub async fn run_flow<'c>(
    .await?;

    // Set memory_id if provided (for agent memory)
-    if let Some(memory_id) = run_query.memory_id {
+    if let Some(memory_id) = run_query.memory_key(w_id, flow_path) {
        set_flow_memory_id(&mut tx, uuid, memory_id).await?;
    }

@@ -836,6 +845,8 @@ pub async fn run_flow<'c>(
            &run_query,
            args.args.get("user_message"),
            uuid,
+            false,
+            &args.args,
        )
        .await?;
    }
@@ -47,13 +47,25 @@ pub struct RunJobQuery {
    pub cache_ignore_s3_path: Option<bool>,
    pub skip_preprocessor: Option<bool>,
    pub poll_delay_ms: Option<u64>,
-    pub memory_id: Option<Uuid>,
+    /// Any string; see [`RunJobQuery::memory_key`].
+    pub memory_id: Option<String>,
    pub trigger_external_id: Option<String>,
    pub service_name: Option<String>,
    pub suspended_mode: Option<bool>,
 }

 impl RunJobQuery {
+    /// The memory id as stored in `flow_status.memory_id`: a uuid is kept, any other string hashed
+    /// within the workspace and the flow being run.
+    pub fn memory_key(&self, workspace_id: &str, flow_path: &str) -> Option<Uuid> {
+        self.memory_id
+            .as_deref()
+            .filter(|memory_id| !memory_id.trim().is_empty())
+            .map(|memory_id| {
+                windmill_common::flow_conversations::memory_key(workspace_id, flow_path, memory_id)
+            })
+    }
+
    pub async fn get_scheduled_for(
        &self,
        db: &DB,
@@ -11,7 +11,7 @@ path = "src/lib.rs"
 [features]
 default = []
 enterprise = ["license"]
-private = ["windmill-common/private", "windmill-audit/private"]
+private = ["windmill-common/private"]
 parquet = ["windmill-common/parquet", "windmill-object-store/parquet"]
 license = ["dep:rsa"]

@@ -19,7 +19,6 @@ license = ["dep:rsa"]
 windmill-ai = { workspace = true, default-features = false }
 windmill-alerting.workspace = true
 windmill-api-auth.workspace = true
-windmill-audit.workspace = true
 windmill-common = { workspace = true, default-features = false }
 axum.workspace = true
 anyhow.workspace = true
@@ -1,44 +0,0 @@
-/*
- * Author: Ruben Fiszel
- * Copyright: Windmill Labs, Inc 2022
- * This file and its contents are licensed under the AGPLv3 License.
- * Please see the included NOTICE for copyright information and
- * LICENSE-AGPL for a copy of the license.
- */
-
-//! Where the data table role catalog endpoints come from: the enterprise implementation, or a
-//! refusal. Roles are an Enterprise Edition feature; see `windmill_common::datatable_roles_oss`.
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-pub(crate) use crate::datatable_roles_ee::{
-    create_datatable_role, delete_datatable_role, list_datatable_roles, update_datatable_role,
-};
-
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-pub(crate) use ce::*;
-
-// The routes stay registered so the API has one shape; each answers after authentication, before
-// anything is read.
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-mod ce {
-    use windmill_api_auth::ApiAuthed;
-    use windmill_common::{
-        datatable_roles_oss::datatable_roles_unavailable as unavailable, error::Result,
-    };
-
-    pub(crate) async fn list_datatable_roles(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-
-    pub(crate) async fn create_datatable_role(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-
-    pub(crate) async fn update_datatable_role(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-
-    pub(crate) async fn delete_datatable_role(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-}
@@ -17,9 +17,6 @@ mod audit_logs_s3;
 mod audit_logs_s3_backfill;
 #[cfg(feature = "parquet")]
 mod background_task;
-#[cfg(all(feature = "private", feature = "enterprise"))]
-mod datatable_roles_ee;
-mod datatable_roles_oss;
 #[cfg(feature = "private")]
 mod ee;
 pub mod ee_oss;
@@ -154,16 +151,6 @@ pub fn global_service() -> Router {
            "/list_custom_instance_pg_databases",
            post(list_custom_instance_pg_databases),
        )
-        .route(
-            "/datatable_roles",
-            get(datatable_roles_oss::list_datatable_roles)
-                .post(datatable_roles_oss::create_datatable_role),
-        )
-        .route(
-            "/datatable_roles/{id}",
-            post(datatable_roles_oss::update_datatable_role)
-                .delete(datatable_roles_oss::delete_datatable_role),
-        )
        .route(
            "/refresh_custom_instance_user_pwd",
            post(refresh_custom_instance_user_pwd),
@@ -1647,8 +1634,6 @@ struct CustomInstanceDb {
    tag: Option<String>,
    #[serde(default, skip_serializing_if = "Vec::is_empty")]
    used_by_workspaces: Vec<String>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    workspace_id: Option<String>,
 }

 #[derive(Deserialize, Debug, Serialize, Default)]
@@ -1689,15 +1674,7 @@ async fn list_custom_instance_pg_databases(
            ))
        })?;

-    if !windmill_api_auth::is_super_admin_authed(&db, &authed).await? {
-        // Which workspace reserved a fork copy is nobody else's business: it would enumerate every
-        // pending fork on the instance.
-        for entry in result.values_mut() {
-            entry.workspace_id = None;
-        }
-        return Ok(Json(result));
-    }
-    {
+    if windmill_api_auth::is_super_admin_authed(&db, &authed).await? {
        // Enrich each database with the list of workspaces referencing it through
        // either a ducklake catalog or a datatable database whose resource_type is
        // 'instance'. Not stored in DB to avoid drift.
@@ -1764,31 +1741,12 @@ async fn setup_custom_instance_pg_database(
    Path(dbname): Path<String>,
    Json(body): Json<SetupCustomInstanceDbBody>,
 ) -> JsonResult<CustomInstanceDb> {
-    // Before anything is recorded: the status written below replaces the registry entry, and with it
-    // the workspace a fork copy is reserved for.
-    require_super_admin(&db, &authed).await?;
-    // A re-run keeps the fork reservation: without it, the workspace the copy was made for could no
-    // longer import into it or finish its fork.
-    let workspace_id = sqlx::query_scalar::<_, Option<String>>(
-        "SELECT value->'databases'->$1->>'workspace_id' FROM global_settings
-         WHERE name = 'custom_instance_pg_databases'",
-    )
-    .bind(&dbname)
-    .fetch_optional(&db)
-    .await?
-    .flatten();
    let mut logs = CustomInstanceDbLogs::default();
    let result = setup_custom_instance_pg_database_inner(authed, &db, &dbname, &mut logs).await;
    let success = result.is_ok();
    let error = result.err().map(|e| e.to_string());
-    let status = CustomInstanceDb {
-        logs,
-        success,
-        error,
-        tag: body.tag,
-        used_by_workspaces: vec![],
-        workspace_id,
-    };
+    let status =
+        CustomInstanceDb { logs, success, error, tag: body.tag, used_by_workspaces: vec![] };
    let status_json = serde_json::to_value(&status).map_err(to_anyhow)?;
    // Save that the database was setup successfully
    sqlx::query!(
@@ -1703,25 +1703,14 @@ async fn delete_user(
        .await?;
    windmill_common::user_drafts::delete_drafts_of_email(&mut *tx, &email_to_delete).await?;

-    let memberships = sqlx::query!(
-        "DELETE FROM usr WHERE email = $1 RETURNING username, workspace_id",
+    let usernames = sqlx::query_scalar!(
+        "DELETE FROM usr WHERE email = $1 RETURNING username",
        &email_to_delete
    )
    .fetch_all(&mut *tx)
    .await?;

-    for row in memberships {
-        let username = row.username;
-        // A tenant list names a principal of its workspace, so the name has to be freed in every
-        // workspace this account belonged to: a later account taking the username would otherwise
-        // inherit the data table access it had.
-        windmill_common::workspaces::remove_datatable_tenant_in_workspace(
-            &mut tx,
-            &row.workspace_id,
-            &format!("u/{username}"),
-        )
-        .await?;
-
+    for username in usernames {
        sqlx::query!("DELETE FROM password WHERE email = $1", &email_to_delete)
            .execute(&mut *tx)
            .await?;
@@ -2467,15 +2456,6 @@ pub async fn delete_workspace_user_internal(
    tx: &mut Transaction<'_, Postgres>,
    authed: Option<&ApiAuthed>, // None for system operations
 ) -> Result<()> {
-    // Same reasoning as the `extra_perms` sweep below: a freed username must not stay named
-    // anywhere that grants access, tenant lists included.
-    windmill_common::workspaces::remove_datatable_tenant_in_workspace(
-        tx,
-        w_id,
-        &format!("u/{username_to_delete}"),
-    )
-    .await?;
-
    // ---- Clean up extra_perms referencing this user ----
    let extra_perms_tables = [
        "script",
@@ -3985,12 +3965,6 @@ async fn leave_workspace(
 ) -> Result<String> {
    forbid_job_token_account_destruction(&authed)?;
    let mut tx = db.begin().await?;
-    windmill_common::workspaces::remove_datatable_tenant_in_workspace(
-        &mut tx,
-        &w_id,
-        &format!("u/{}", authed.username),
-    )
-    .await?;
    sqlx::query!(
        "DELETE FROM usr WHERE workspace_id = $1 AND username = $2",
        &w_id,
@@ -1,44 +0,0 @@
-/*
- * Author: Ruben Fiszel
- * Copyright: Windmill Labs, Inc 2022
- * This file and its contents are licensed under the AGPLv3 License.
- * Please see the included NOTICE for copyright information and
- * LICENSE-AGPL for a copy of the license.
- */
-
-//! Where the ACL planner comes from: the enterprise one, or a refusal.
-//!
-//! Data table roles are an Enterprise Edition feature, and so is everything here — reading who
-//! owns what included. `private` alone is not that edition — community builds carry it — so the
-//! planner is behind `enterprise` as well.
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-pub(crate) use crate::datatable_acl_ee::plan_statements;
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-pub(crate) fn ensure_datatable_acl_available() -> windmill_common::error::Result<()> {
-    Ok(())
-}
-
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-use {
-    crate::datatable_acl::{AclChange, AclPlan, AclTarget, CatalogFacts},
-    windmill_common::{datatable_roles_oss::datatable_roles_unavailable, error::Result},
-};
-
-/// Checked first by every ACL route, before anything is read or connected to.
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-pub(crate) fn ensure_datatable_acl_available() -> Result<()> {
-    Err(datatable_roles_unavailable())
-}
-
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-pub(crate) fn plan_statements(
-    _target: &AclTarget,
-    _change: &AclChange,
-    _dbname: &str,
-    _pg_role: &str,
-    _facts: &CatalogFacts,
-) -> Result<AclPlan> {
-    Err(datatable_roles_unavailable())
-}
@@ -30,7 +30,6 @@ use windmill_api_auth::{require_super_admin, ApiAuthed};
 use windmill_api_jobs::run_wait_result_internal;
 use windmill_audit::audit_oss::audit_log;
 use windmill_audit::ActionKind;
-use windmill_common::datatable_roles::ADMIN_DATATABLE_ROLE;
 use windmill_common::db::UserDB;
 use windmill_common::error::{pg_error_message, Error, JsonResult, Result};
 use windmill_common::jobs::{JobPayload, RawCode};
@@ -39,11 +38,7 @@ use windmill_common::runnable_settings::{ConcurrencySettingsWithCustom, Debounci
 use windmill_common::scripts::ScriptLang;
 use windmill_common::users::username_to_permissioned_as;
 use windmill_common::worker::to_raw_value;
-use windmill_common::worker::SqlAnnotations;
-use windmill_common::workspaces::{
-    ensure_can_use_datatable_role, ensure_datatable_admin_access,
-    get_datatable_resource_from_db_unchecked, resolve_governing_datatable, DatatableAccess,
-};
+use windmill_common::workspaces::get_datatable_resource_from_db_unchecked;
 use windmill_common::{PgDatabase, DB};
 use windmill_git_sync::{
    handle_deployment_metadata, handle_deployment_metadata_batch, DeployedObject,
@@ -91,42 +86,6 @@ pub(crate) fn routes() -> Router {
        )
 }

-/// Refuse a migration whose role this caller may not use, before a job is pushed or a version
-/// recorded.
-///
-/// A migration that declares `-- role <name>` runs as that role, so the caller has to be one of its
-/// tenants. One that declares none runs as `admin` and reaches every object in the database
-/// whatever the roles grant, so it is for the admins of the workspace that governs the data table
-/// — a fork can run a migration under a role it holds, never a migration under `admin`.
-///
-/// The executor re-checks the role when it resolves the connection, so this is not the boundary. It
-/// is what makes the refusal legible: which migration, and which role.
-async fn ensure_migration_role_allowed(
-    db: &DB,
-    w_id: &str,
-    datatable_name: &str,
-    authed: &ApiAuthed,
-    sql: &str,
-    timestamp: i64,
-    name: &str,
-) -> Result<()> {
-    let context = format!("Migration {timestamp} ({name})");
-    let access = DatatableAccess::Authed(authed.to_authed_ref());
-    match SqlAnnotations::datatable_role(sql)? {
-        Some(role) => {
-            ensure_can_use_datatable_role(db, w_id, datatable_name, Some(&role), &access, &context)
-                .await
-        }
-        None => ensure_datatable_admin_access(db, w_id, datatable_name, &access)
-            .await
-            .map_err(|e| {
-                Error::NotAuthorized(format!(
-                    "{context} declares no role, so it would run as admin. {e}"
-                ))
-            }),
-    }
-}
-
 #[derive(Serialize)]
 struct AppliedMigration {
    version: i64,
@@ -169,18 +128,7 @@ async fn datatable_database_arg(
    .await?
    .ok_or_else(|| Error::internal_err(format!("datatable {datatable_name} not found")))?;

-    // `?role=admin` rather than a bare reference, so a migration that declares no `-- role` runs
-    // as the connection that owns the schema instead of falling through to the data table's
-    // default role — which is what `ensure_migration_role_allowed` gated it as, and which is the
-    // only role a DDL statement can be expected to succeed under. A migration that does declare a
-    // role overrides this: the annotation wins over the reference.
-    //
-    // A legacy name containing `?` cannot be migrated through this reference: the appended query
-    // makes it neither an exact name nor a parseable one. Accepted on purpose, since such names can
-    // no longer be created and none are expected to carry migrations.
-    Ok(to_raw_value(&format!(
-        "datatable://{datatable_name}?role={ADMIN_DATATABLE_ROLE}"
-    )))
+    Ok(to_raw_value(&format!("datatable://{datatable_name}")))
 }

 /// Run a migration's SQL as a normal Windmill `postgresql` job, permissioned as
@@ -436,11 +384,6 @@ async fn run_datatable_migrations(
    Path((w_id, datatable_name)): Path<(String, String)>,
    Query(query): Query<RunDatatableMigrationsQuery>,
 ) -> JsonResult<RunDatatableMigrationsResult> {
-    // Before the admin connection is opened at all: the bookkeeping below is created and read
-    // through it, so a caller no role covers must be refused here rather than after the fact.
-    crate::datatable_permissions::ensure_reaches_datatable(&db, &w_id, &datatable_name, &authed)
-        .await?;
-
    audit_log(
        &db,
        &authed,
@@ -497,16 +440,6 @@ async fn run_datatable_migrations(
        if applied_versions.contains(&m.timestamp) {
            continue;
        }
-        ensure_migration_role_allowed(
-            &db,
-            &w_id,
-            &datatable_name,
-            &authed,
-            &m.code_up,
-            m.timestamp,
-            &m.name,
-        )
-        .await?;
        run_datatable_migration_job(&db, &user_db, &authed, &w_id, &database_arg, &m.code_up)
            .await
            .map_err(|e| {
@@ -573,11 +506,6 @@ async fn rollback_datatable_migrations(
    Path((w_id, datatable_name)): Path<(String, String)>,
    Query(query): Query<RollbackDatatableMigrationsQuery>,
 ) -> JsonResult<RollbackDatatableMigrationsResult> {
-    // Before the admin connection is opened at all: the bookkeeping below is created and read
-    // through it, so a caller no role covers must be refused here rather than after the fact.
-    crate::datatable_permissions::ensure_reaches_datatable(&db, &w_id, &datatable_name, &authed)
-        .await?;
-
    audit_log(
        &db,
        &authed,
@@ -660,17 +588,6 @@ async fn rollback_datatable_migrations(
        ))
    })?;

-    ensure_migration_role_allowed(
-        &db,
-        &w_id,
-        &datatable_name,
-        &authed,
-        &code_down,
-        version,
-        &definition.name,
-    )
-    .await?;
-
    let database_arg = datatable_database_arg(&db, &w_id, &datatable_name).await?;
    run_datatable_migration_job(&db, &user_db, &authed, &w_id, &database_arg, &code_down)
        .await
@@ -831,15 +748,10 @@ async fn read_applied_datatable_versions(

 /// List a data table's migrations annotated with whether each has been applied.
 async fn datatable_migrations_status(
-    authed: ApiAuthed,
+    _authed: ApiAuthed,
    Extension(db): Extension<DB>,
    Path((w_id, datatable_name)): Path<(String, String)>,
 ) -> JsonResult<DatatableMigrationsStatusResult> {
-    // Reads `_wm_migrations` through the data table's admin connection, so it answers to the same
-    // question as running one: may you reach this data table at all.
-    crate::datatable_permissions::ensure_reaches_datatable(&db, &w_id, &datatable_name, &authed)
-        .await?;
-
    let enabled = datatable_migrations_enabled(&db, &w_id, &datatable_name).await?;
    if !enabled {
        return Ok(Json(DatatableMigrationsStatusResult {
@@ -1519,15 +1431,6 @@ async fn generate_initial_datatable_migration(
    Extension(db): Extension<DB>,
    Path((w_id, datatable_name)): Path<(String, String)>,
 ) -> JsonResult<DatatableMigration> {
-    // Returns a `pg_dump` of the whole schema and writes into the data table's own bookkeeping, so
-    // it answers to the workspace that governs it rather than to whoever is asking.
-    ensure_datatable_admin_access(
-        &db,
-        &w_id,
-        &datatable_name,
-        &DatatableAccess::Authed(authed.to_authed_ref()),
-    )
-    .await?;
    validate_datatable_path_segment(&datatable_name)?;
    ensure_datatable_migrations_enabled(&db, &w_id, &datatable_name).await?;

@@ -1698,21 +1601,9 @@ pub(crate) struct DatatableRename {
    pub(crate) to: String,
 }

-/// The database whose `_wm_migrations` a rename or delete of `datatable` in `w_id` should touch —
-/// `None` when that is somebody else's.
-///
-/// A fork's entry points at the workspace that governs the data table, so renaming or removing it
-/// changes what the fork calls the data table and nothing more. Following the pointer here would
-/// let a fork admin relabel or wipe the *governing* workspace's migration bookkeeping through
-/// their own settings form, and the parent would then re-run every migration from zero.
-async fn resolve_datatable_pg(db: &DB, w_id: &str, datatable: &str) -> Result<Option<PgDatabase>> {
-    let governing = resolve_governing_datatable(db, w_id, datatable).await?;
-    if governing.workspace_id != w_id {
-        return Ok(None);
-    }
+async fn resolve_datatable_pg(db: &DB, w_id: &str, datatable: &str) -> Result<PgDatabase> {
    let db_resource = get_datatable_resource_from_db_unchecked(db, w_id, datatable).await?;
    serde_json::from_value(db_resource)
-        .map(Some)
        .map_err(|e| Error::internal_err(format!("Failed to parse database credentials: {}", e)))
 }

@@ -1730,9 +1621,7 @@ fn ignore_missing_wm_migrations(e: tokio_postgres::Error) -> Result<()> {

 /// Drop a data table's rows from its own database's `_wm_migrations`.
 async fn remote_forget_datatable_migrations(db: &DB, w_id: &str, datatable: &str) -> Result<()> {
-    let Some(pg_db) = resolve_datatable_pg(db, w_id, datatable).await? else {
-        return Ok(());
-    };
+    let pg_db = resolve_datatable_pg(db, w_id, datatable).await?;
    let (client, connection) = pg_db.connect(Some(db)).await?;
    tokio::spawn(async move {
        let _ = connection.await;
@@ -1757,9 +1646,7 @@ async fn remote_rename_datatable_migrations(
    from: &str,
    to: &str,
 ) -> Result<()> {
-    let Some(pg_db) = resolve_datatable_pg(db, w_id, resolve_by).await? else {
-        return Ok(());
-    };
+    let pg_db = resolve_datatable_pg(db, w_id, resolve_by).await?;
    let (client, connection) = pg_db.connect(Some(db)).await?;
    tokio::spawn(async move {
        let _ = connection.await;
@@ -1,79 +0,0 @@
-/*
- * Author: Ruben Fiszel
- * Copyright: Windmill Labs, Inc 2022
- * This file and its contents are licensed under the AGPLv3 License.
- * Please see the included NOTICE for copyright information and
- * LICENSE-AGPL for a copy of the license.
- */
-
-//! Who may connect to a data table as which role.
-//!
-//! The decision lives on the data table entry of the workspace that governs it, which is not
-//! necessarily the workspace asking: a fork's entry points at its parent's, and everything here
-//! resolves through that pointer first. Nothing in this module runs SQL against the data table —
-//! a save is tenant lists and a default, and the Postgres roles themselves are the instance
-//! catalog's business.
-
-use axum::{routing::get, Router};
-
-use windmill_api_auth::ApiAuthed;
-use windmill_common::error::Result;
-use windmill_common::workspaces::GoverningDatatable;
-use windmill_common::DB;
-
-use crate::datatable_permissions_oss as roles;
-
-pub(crate) fn routes() -> Router {
-    Router::new()
-        .route(
-            "/datatable_permissions/{datatable_name}",
-            get(roles::get_datatable_permissions).post(roles::set_datatable_permissions),
-        )
-        .route(
-            "/datatable_usable_roles/{datatable_name}",
-            get(roles::list_usable_datatable_roles),
-        )
-}
-
-/// Administering a data table — its permissions, its migrations that declare no role, its exports
-/// — is for the admins of the workspace that governs it. A fork can use the data table; it never
-/// administers it.
-// The gate for whatever administers a data table under roles, which the routes of this module alone
-// do not always reach.
-#[allow(dead_code)]
-pub(crate) async fn ensure_governs_datatable(
-    db: &DB,
-    authed: &ApiAuthed,
-    w_id: &str,
-    governing: &GoverningDatatable,
-) -> Result<()> {
-    roles::ensure_governs_datatable(db, authed, w_id, governing).await
-}
-
-/// Refuse a caller that no tenant of this data table covers.
-///
-/// The bookkeeping endpoints below open the data table's `admin` connection to read or create
-/// `_wm_migrations` before they know which migration will run — so without this, someone covered
-/// by no role at all can still force admin-backed reads and writes on a database they may not
-/// touch. It asks only "may you reach this data table as anything"; which role a given migration
-/// runs as is still decided per migration, and by the executor after that.
-pub(crate) async fn ensure_reaches_datatable(
-    db: &DB,
-    w_id: &str,
-    datatable_name: &str,
-    authed: &ApiAuthed,
-) -> Result<()> {
-    roles::ensure_reaches_datatable(db, w_id, datatable_name, authed).await
-}
-
-/// [`ensure_reaches_datatable`] against an entry already resolved, for a caller that goes on to
-/// connect from that same entry.
-pub(crate) async fn ensure_reaches_governing_datatable(
-    db: &DB,
-    w_id: &str,
-    datatable_name: &str,
-    governing: &GoverningDatatable,
-    authed: &ApiAuthed,
-) -> Result<()> {
-    roles::ensure_reaches_governing_datatable(db, w_id, datatable_name, governing, authed).await
-}
@@ -1,112 +0,0 @@
-/*
- * Author: Ruben Fiszel
- * Copyright: Windmill Labs, Inc 2022
- * This file and its contents are licensed under the AGPLv3 License.
- * Please see the included NOTICE for copyright information and
- * LICENSE-AGPL for a copy of the license.
- */
-
-//! Where the data table permissions endpoints and their gates come from: the enterprise
-//! implementation, or a refusal. Roles are an Enterprise Edition feature; see
-//! `windmill_common::datatable_roles_oss`.
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-pub(crate) use crate::datatable_permissions_ee::{
-    ensure_governs_datatable, ensure_reaches_datatable, ensure_reaches_governing_datatable,
-    get_datatable_permissions, list_usable_datatable_roles, set_datatable_permissions,
-    usable_datatable_roles,
-};
-
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-pub(crate) use ce::*;
-
-#[cfg(not(all(feature = "private", feature = "enterprise")))]
-mod ce {
-    use windmill_api_auth::ApiAuthed;
-    use windmill_common::{
-        datatable_roles_oss::datatable_roles_unavailable as unavailable,
-        error::Result,
-        workspaces::{resolve_governing_datatable, GoverningDatatable},
-        DB,
-    };
-
-    /// Nobody administers a data table's roles without them.
-    #[allow(dead_code)]
-    pub(crate) async fn ensure_governs_datatable(
-        _db: &DB,
-        _authed: &ApiAuthed,
-        _w_id: &str,
-        _governing: &GoverningDatatable,
-    ) -> Result<()> {
-        Err(unavailable())
-    }
-
-    /// A data table not under roles is reached as it was before roles existed. One under roles is
-    /// refused: no role of it can be connected as.
-    pub(crate) async fn ensure_reaches_datatable(
-        db: &DB,
-        w_id: &str,
-        datatable_name: &str,
-        _authed: &ApiAuthed,
-    ) -> Result<()> {
-        let governing = resolve_governing_datatable(db, w_id, datatable_name).await?;
-        if governing.datatable.permissions.is_none() {
-            Ok(())
-        } else {
-            Err(unavailable())
-        }
-    }
-
-    pub(crate) async fn ensure_reaches_governing_datatable(
-        _db: &DB,
-        _w_id: &str,
-        _datatable_name: &str,
-        governing: &GoverningDatatable,
-        _authed: &ApiAuthed,
-    ) -> Result<()> {
-        if governing.datatable.permissions.is_none() {
-            Ok(())
-        } else {
-            Err(unavailable())
-        }
-    }
-
-    // The routes stay registered so the API has one shape; each answers after authentication,
-    // before anything is read.
-
-    pub(crate) async fn get_datatable_permissions(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-
-    pub(crate) async fn set_datatable_permissions(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-
-    pub(crate) async fn list_usable_datatable_roles(_authed: ApiAuthed) -> Result<String> {
-        Err(unavailable())
-    }
-
-    pub(crate) struct UsableDatatableRoles {
-        pub(crate) permissioned: bool,
-        pub(crate) roles: Vec<String>,
-        pub(crate) default_role: String,
-    }
-
-    /// A data table not under roles is used as `admin`, as before roles existed. One under roles
-    /// is refused: no role of it can be connected as.
-    pub(crate) async fn usable_datatable_roles(
-        _db: &DB,
-        _authed: &ApiAuthed,
-        _w_id: &str,
-        governing: &GoverningDatatable,
-    ) -> Result<UsableDatatableRoles> {
-        if governing.datatable.permissions.is_some() {
-            return Err(unavailable());
-        }
-        Ok(UsableDatatableRoles {
-            permissioned: false,
-            roles: vec![],
-            default_role: windmill_common::datatable_roles::ADMIN_DATATABLE_ROLE.to_string(),
-        })
-    }
-}
@@ -1,11 +1,7 @@
 #[cfg(feature = "parquet")]
 pub mod ai_session_backups;
 pub mod data_metrics;
-pub mod datatable_acl;
-pub mod datatable_acl_oss;
 pub mod datatable_migrations;
-pub mod datatable_permissions;
-pub mod datatable_permissions_oss;
 pub mod deployment_requests;
 pub mod workspaces;
 pub mod workspaces_extra;
@@ -13,9 +9,3 @@ pub mod workspaces_oss;

 #[cfg(feature = "private")]
 pub mod workspaces_ee;
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-pub mod datatable_acl_ee;
-
-#[cfg(all(feature = "private", feature = "enterprise"))]
-pub mod datatable_permissions_ee;
@@ -110,21 +110,6 @@ pub(crate) async fn change_workspace_id(
    .execute(&mut *tx)
    .await?;

-    // A fork copy reserved for the old id would otherwise be unreachable: its creator cannot
-    // import into it or finish its fork under the new id, and nothing else would ever drop it.
-    sqlx::query(
-        r#"UPDATE global_settings SET value = jsonb_set(value, '{databases}', (
-               SELECT COALESCE(jsonb_object_agg(k, CASE WHEN v->>'workspace_id' = $1
-                   THEN jsonb_set(v, '{workspace_id}', to_jsonb($2::text)) ELSE v END), '{}'::jsonb)
-               FROM jsonb_each(COALESCE(value->'databases', '{}'::jsonb)) AS e(k, v)
-           ))
-           WHERE name = 'custom_instance_pg_databases'"#,
-    )
-    .bind(&old_id)
-    .bind(&rw.new_id)
-    .execute(&mut *tx)
-    .await?;
-
    // Duplicate workspace settings (keep copy in old workspace for reference)
    info!("Duplicating workspace_settings table");
    sqlx::query!(
@@ -507,30 +492,6 @@ pub(crate) async fn change_workspace_id(
    .fetch_all(&mut *tx)
    .await?;

-    // A fork's data table entry names the workspace that governs it by id, so the rename has to
-    // follow there too — anywhere, not just in the reparented children: a detached workspace can
-    // point at this one without being its fork. Left behind, the pointer resolves to the archived
-    // shell and every job through it stops.
-    info!("Re-pointing data table references to the new workspace id");
-    sqlx::query!(
-        r#"UPDATE workspace_settings ws
-           SET datatable = (
-               SELECT jsonb_set(ws.datatable, '{datatables}', jsonb_object_agg(
-                   dt.key,
-                   CASE WHEN dt.value->'reference'->>'workspace_id' = $2
-                       THEN jsonb_set(dt.value, '{reference,workspace_id}', to_jsonb($1::text))
-                       ELSE dt.value END
-               ))
-               FROM jsonb_each(ws.datatable->'datatables') dt
-           )
-           WHERE jsonb_typeof(ws.datatable->'datatables') = 'object'
-             AND ws.datatable::text LIKE '%"reference"%'"#,
-        &rw.new_id,
-        &old_id,
-    )
-    .execute(&mut *tx)
-    .await?;
-
    info!("Updating workspace_protection_rule table");
    sqlx::query!(
        "UPDATE workspace_protection_rule SET workspace_id = $1 WHERE workspace_id = $2",
@@ -1010,22 +971,6 @@ pub(crate) async fn delete_workspace(
    // but the destructive cleanup itself runs only after the commit below: a delete that
    // fails mid-way must never leave a live workspace with its fork data destroyed and no
    // registry row to retry from. Read-only: nothing is dropped here.
-    // Read before the delete: another workspace's data table entry can point at one of this
-    // workspace's, and deleting the workspace it names leaves that pointer resolving to nothing.
-    // Nothing sweeps them — turning them back into copies would hand each fork the database
-    // outright — so the deleter is told which data tables they just stranded.
-    let stranded_pointers = sqlx::query!(
-        r#"SELECT ws.workspace_id AS "workspace_id!", dt.key AS "datatable!"
-           FROM workspace_settings ws
-           CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt
-           WHERE dt.value->'reference'->>'workspace_id' = $1
-           ORDER BY ws.workspace_id, dt.key"#,
-        &w_id,
-    )
-    .fetch_all(&db)
-    .await
-    .unwrap_or_default();
-
    let fork_ducklake_cleanups = prepare_fork_ducklake_cleanups(&db, &w_id, None)
        .await
        .unwrap_or_else(|e| {
@@ -1344,23 +1289,7 @@ pub(crate) async fn delete_workspace(
        tracing::warn!("failed to broadcast fork lineage change: {e:#}");
    }

-    if stranded_pointers.is_empty() {
-        Ok(format!("Deleted workspace {}", &w_id))
-    } else {
-        let stranded = stranded_pointers
-            .iter()
-            .map(|r| format!("{}/{}", r.workspace_id, r.datatable))
-            .collect::<Vec<_>>()
-            .join(", ");
-        Ok(format!(
-            concat!(
-                "Deleted workspace {}. These data tables were governed by it and no longer ",
-                "resolve: {}. Their databases still exist; a superadmin can point them at ",
-                "another workspace's data table."
-            ),
-            &w_id, stranded
-        ))
-    }
+    Ok(format!("Deleted workspace {}", &w_id))
 }

 #[derive(Deserialize)]
@@ -1414,20 +1343,15 @@ pub async fn drop_forked_datatable_databases(
    let mut errors: Vec<String> = Vec::new();

    for dt_name in &req.datatable_names {
-        // Only a clone is droppable, and a clone is terminal by construction: a kept data table is
-        // a pointer at the parent's database, which this fork does not own.
-        let database = match datatables.get(dt_name) {
-            Some(dt) if dt.forked_from.is_some() => match dt.database.as_ref() {
-                Some(database) => database,
-                None => continue,
-            },
+        let dt = match datatables.get(dt_name) {
+            Some(dt) if dt.forked_from.is_some() => dt,
            _ => continue,
        };

-        if database.resource_type
+        if dt.database.resource_type
            == windmill_common::workspaces::DataTableCatalogResourceType::Instance
        {
-            let db_to_drop = &database.resource_path;
+            let db_to_drop = &dt.database.resource_path;
            if !db_to_drop.starts_with("wm_fork_") {
                errors.push(format!(
                    "Refusing to drop instance database '{}' for datatable://{}:  name does not start with 'wm_fork_'",
@@ -1435,53 +1359,7 @@ pub async fn drop_forked_datatable_databases(
                ));
                continue;
            }
-            // The fork's own entry is what is going away; anything else still reaching the copy,
-            // a child fork's pointer at this entry included, keeps it. The lock keeps a child fork
-            // from gaining such a pointer before the drop.
-            let dropped = async {
-                let mut tx = db.begin().await?;
-                // The three locks a settings save takes, in its order: this workspace's data
-                // tables, its settings row, and the database itself. Without them a save could
-                // rename this entry, or point another one here, either side of the check below.
-                windmill_common::workspaces::lock_fork_datatables(&mut tx, &w_id).await?;
-                sqlx::query("SELECT 1 FROM workspace_settings WHERE workspace_id = $1 FOR UPDATE")
-                    .bind(&w_id)
-                    .fetch_optional(&mut *tx)
-                    .await?;
-                windmill_common::datatable_roles::lock_instance_databases_governance(
-                    &mut tx,
-                    [db_to_drop.as_str()],
-                )
-                .await?;
-                let uses = windmill_common::workspaces::managed_database_uses(
-                    &mut tx,
-                    windmill_common::workspaces::DataTableCatalogResourceType::Instance,
-                    db_to_drop,
-                    Some((&w_id, dt_name)),
-                )
-                .await?;
-                if !uses.is_empty() {
-                    return Err(Error::BadRequest(format!(
-                        "it is still used by {}",
-                        uses.join(", ")
-                    )));
-                }
-                // The entry goes with the database: a fork this one is cloned into afterwards must
-                // not inherit a pointer at a data table whose database is gone.
-                sqlx::query(
-                    "UPDATE workspace_settings SET datatable = datatable #- ARRAY['datatables', $2]
-                     WHERE workspace_id = $1",
-                )
-                .bind(&w_id)
-                .bind(dt_name)
-                .execute(&mut *tx)
-                .await?;
-                windmill_common::drop_custom_instance_database(&db, db_to_drop).await?;
-                tx.commit().await?;
-                Ok::<_, Error>(())
-            }
-            .await;
-            if let Err(e) = dropped {
+            if let Err(e) = windmill_common::drop_custom_instance_database(&db, db_to_drop).await {
                errors.push(format!(
                    "Could not drop instance database '{}' for datatable://{}: {}",
                    db_to_drop, dt_name, e
@@ -1,7 +1,7 @@
 openapi: "3.0.3"

 info:
-  version: 1.813.0
+  version: 1.814.0
  title: Windmill API

  contact:
@@ -1588,89 +1588,6 @@ paths:
                additionalProperties:
                  $ref: "#/components/schemas/CustomInstanceDb"

-  /settings/datatable_roles:
-    get:
-      summary: list the instance's data table roles
-      operationId: listInstanceDatatableRoles
-      tags:
-        - setting
-      responses:
-        "200":
-          description: the instance role catalog
-          content:
-            application/json:
-              schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/InstanceDatatableRole"
-    post:
-      summary: create a data table role on the instance's Postgres cluster
-      operationId: createInstanceDatatableRole
-      tags:
-        - setting
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              required: [name]
-              properties:
-                name:
-                  type: string
-      responses:
-        "200":
-          description: the created role
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/InstanceDatatableRole"
-
-  /settings/datatable_roles/{id}:
-    post:
-      summary: rename a data table role or turn its login on and off
-      operationId: updateInstanceDatatableRole
-      tags:
-        - setting
-      parameters:
-        - in: path
-          name: id
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                name:
-                  type: string
-                enabled:
-                  type: boolean
-      responses:
-        "200":
-          description: the updated role
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/InstanceDatatableRole"
-    delete:
-      summary: drop a data table role from the cluster and from every workspace that named it
-      operationId: deleteInstanceDatatableRole
-      tags:
-        - setting
-      parameters:
-        - in: path
-          name: id
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: deleted
-
  /settings/setup_custom_instance_pg_database/{name}:
    post:
      summary: Runs CREATE DATABASE on the Windmill Postgres and grants access to the custom_instance_user
@@ -5224,7 +5141,7 @@ paths:
                type: array
                items:
                  type: object
-                  required: [name, resource_type, resource_path, permissioned]
+                  required: [name, resource_type, resource_path]
                  properties:
                    name:
                      type: string
@@ -5233,188 +5150,6 @@ paths:
                      enum: [postgres, instance]
                    resource_path:
                      type: string
-                    governing_workspace_id:
-                      type: string
-                    permissioned:
-                      type: boolean
-
-  /w/{workspace}/workspaces/datatable_permissions/{datatable_name}:
-    get:
-      summary: get who may connect to a data table as which role
-      operationId: getDatatablePermissions
-      tags:
-        - workspace
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: the data table's roles and their tenants
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/DatatablePermissions"
-    post:
-      summary: set who may connect to a data table as which role
-      operationId: setDatatablePermissions
-      tags:
-        - workspace
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              required: [permissioned]
-              properties:
-                permissioned:
-                  type: boolean
-                default_role:
-                  type: string
-                roles:
-                  type: array
-                  items:
-                    $ref: "#/components/schemas/DatatableRoleTenants"
-      responses:
-        "200":
-          description: status
-          content:
-            text/plain:
-              schema:
-                type: string
-
-  /w/{workspace}/workspaces/datatable_acl/{datatable_name}:
-    get:
-      summary: read the owner and grants of an instance data table's database, schema or table
-      operationId: getDatatableAcl
-      tags:
-        - workspace
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: kind
-          in: query
-          required: true
-          schema:
-            type: string
-            enum: [database, schema, table]
-        - name: schema
-          in: query
-          required: false
-          schema:
-            type: string
-        - name: table
-          in: query
-          required: false
-          schema:
-            type: string
-      responses:
-        "200":
-          description: owner and grants
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/DatatableAclInfo"
-
-  /w/{workspace}/workspaces/datatable_acl/{datatable_name}/plan:
-    post:
-      summary: preview the SQL an ownership or grant change would run (data table administrators only)
-      operationId: planDatatableAcl
-      tags:
-        - workspace
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/AclChangeRequest"
-      responses:
-        "200":
-          description: statements that would run, in a single transaction
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/AclPlan"
-
-  /w/{workspace}/workspaces/datatable_acl/{datatable_name}/apply:
-    post:
-      summary: run an ownership or grant change exactly as planned (data table administrators only)
-      operationId: applyDatatableAcl
-      tags:
-        - workspace
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: path
-          required: true
-          schema:
-            type: string
-      requestBody:
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/AclChangeRequest"
-      responses:
-        "200":
-          description: change applied
-          content:
-            text/plain:
-              schema:
-                type: string
-
-  /w/{workspace}/workspaces/datatable_usable_roles/{datatable_name}:
-    get:
-      summary: list the data table roles the caller may connect as
-      operationId: listUsableDatatableRoles
-      tags:
-        - workspace
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        "200":
-          description: usable roles
-          content:
-            application/json:
-              schema:
-                type: object
-                required: [permissioned, roles, default_role]
-                properties:
-                  permissioned:
-                    type: boolean
-                  roles:
-                    type: array
-                    items:
-                      type: string
-                  default_role:
-                    type: string

  /w/{workspace}/workspaces/list_datatable_schemas:
    get:
@@ -5488,21 +5223,6 @@ paths:
        - workspace
      parameters:
        - $ref: "#/components/parameters/WorkspaceId"
-        - name: datatable_name
-          in: query
-          description: list only this data table; each listed data table opens a connection to its database
-          schema:
-            type: string
-        - name: role_for
-          in: query
-          description: the data table `role` applies to; every other one is listed as its default role
-          schema:
-            type: string
-        - name: role
-          in: query
-          description: the role to list `role_for` as; refused, in that entry's `error`, if the caller may not use it
-          schema:
-            type: string
      responses:
        "200":
          description: table metadata of all datatables
@@ -5536,11 +5256,6 @@ paths:
          required: true
          schema:
            type: string
-        - name: role
-          in: query
-          description: the data table role to read the table as; defaults to the data table's default role
-          schema:
-            type: string
      responses:
        "200":
          description: schema of one datatable table
@@ -5616,22 +5331,7 @@ paths:
          description: status
          content:
            application/json:
-              schema:
-                type: object
-                properties:
-                  stranded_references:
-                    description: >-
-                      Data tables in other workspaces that were governed by one this save deleted
-                      and no longer resolve.
-                    type: array
-                    items:
-                      type: object
-                      required: [workspace_id, datatable]
-                      properties:
-                        workspace_id:
-                          type: string
-                        datatable:
-                          type: string
+              schema: {}

  /w/{workspace}/workspaces/run_datatable_migrations/{datatable_name}:
    post:
@@ -11567,11 +11267,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid

      requestBody:
        description: script args
@@ -11608,11 +11307,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid

      requestBody:
        description: script args
@@ -11649,11 +11347,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid

      responses:
        "200":
@@ -11676,11 +11373,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid
        - name: poll_delay_ms
          description: delay between polling for job updates in milliseconds
          in: query
@@ -11718,11 +11414,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid
        - name: poll_delay_ms
          description: delay between polling for job updates in milliseconds
          in: query
@@ -11758,11 +11453,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid
        - name: poll_delay_ms
          description: delay between polling for job updates in milliseconds
          in: query
@@ -11806,11 +11500,10 @@ paths:
        - $ref: "#/components/parameters/NewJobId"
        - $ref: "#/components/parameters/SkipPreprocessor"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid
        - name: poll_delay_ms
          description: delay between polling for job updates in milliseconds
          in: query
@@ -12764,6 +12457,15 @@ paths:
          in: query
          schema:
            type: string
+        - name: kind
+          description: which conversations to list - the flow editor's test chats, the deployed flow's own (the default), or both
+          in: query
+          schema:
+            type: string
+            enum:
+              - test
+              - deployed
+              - all
      responses:
        "200":
          description: flow conversations list
@@ -12774,6 +12476,40 @@ paths:
                items:
                  $ref: "#/components/schemas/FlowConversation"

+  /w/{workspace}/flow_conversations/update/{conversation_id}:
+    post:
+      summary: rename flow conversation
+      operationId: updateFlowConversation
+      tags:
+        - flow_conversations
+      parameters:
+        - $ref: "#/components/parameters/WorkspaceId"
+        - name: conversation_id
+          description: conversation id
+          in: path
+          required: true
+          schema:
+            type: string
+            format: uuid
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              required: [title]
+              properties:
+                title:
+                  type: string
+                  description: the chat's name
+      responses:
+        "200":
+          description: flow conversation updated
+          content:
+            text/plain:
+              schema:
+                type: string
+
  /w/{workspace}/flow_conversations/delete/{conversation_id}:
    delete:
      summary: delete flow conversation
@@ -15168,11 +14904,10 @@ paths:
          schema:
            type: boolean
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid
      requestBody:
        description: flow args
        required: true
@@ -15226,11 +14961,10 @@ paths:
          schema:
            type: boolean
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid
      requestBody:
        description: flow args
        required: true
@@ -15718,11 +15452,10 @@ paths:
            type: boolean
        - $ref: "#/components/parameters/NewJobId"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid

      requestBody:
        description: preview
@@ -15750,11 +15483,10 @@ paths:
      parameters:
        - $ref: "#/components/parameters/WorkspaceId"
        - name: memory_id
-          description: memory ID for chat-enabled flows
+          description: Memory id for the flow's AI agent steps. A uuid is used as is; any other string is hashed within the workspace and flow, so the same string always names the same memory of that flow.
          in: query
          schema:
            type: string
-            format: uuid

      requestBody:
        description: preview
@@ -28601,7 +28333,7 @@ components:
    FlowConversation:
      type: object
      required:
-        [id, workspace_id, flow_path, created_at, updated_at, created_by]
+        [id, workspace_id, flow_path, created_at, updated_at, created_by, is_test]
      properties:
        id:
          type: string
@@ -28628,6 +28360,9 @@ components:
        created_by:
          type: string
          description: Username who created the conversation
+        is_test:
+          type: boolean
+          description: Started from the flow editor's test panel rather than a deployed run

    FlowConversationMessage:
      type: object
@@ -28667,6 +28402,50 @@ components:
        success:
          type: boolean
          description: Whether the message is a success
+        tool_arguments:
+          type: string
+          nullable: true
+          description: >-
+            On a tool row, the arguments the model wrote for the call. For a script, flow or
+            AI agent tool these exclude the inputs its step wires in, which only the tool's
+            job holds. Null for a provider-native web search, whose query the provider does
+            not return.
+        tool_result:
+          type: string
+          nullable: true
+          description: >-
+            On a tool row, the text the model got back from the call, or what the call
+            failed with — the row's own text names the tool rather than the reason. For a
+            provider-native web search, its citations.
+        reasoning:
+          type: string
+          nullable: true
+          description: >-
+            On an answer, the thinking that produced it; on a tool row, the thinking that
+            led to the call. Each round's thinking is on one row. The agent job's result
+            keeps the turn's thinking as a single string.
+        attachments:
+          type: array
+          nullable: true
+          description: >-
+            The files a user message carried, as object-storage references: every flow
+            input other than user_message that held one or a list of them, at most 20. Never
+            file bytes or a presigned URL.
+          items:
+            type: object
+            required: [input, s3]
+            properties:
+              input:
+                type: string
+                description: The flow input that held the file
+              s3:
+                type: string
+                description: The file's key in object storage
+              storage:
+                type: string
+                description: The secondary storage holding the file, absent for the primary one
+              filename:
+                type: string

    EndpointTool:
      type: object
@@ -33621,315 +33400,6 @@ components:
        - ducklake
        - datatable

-    InstanceDatatableRole:
-      type: object
-      required: [id, name, enabled]
-      properties:
-        id:
-          type: string
-        name:
-          type: string
-        enabled:
-          type: boolean
-
-    DatatableRoleTenants:
-      type: object
-      required: [id, tenants]
-      properties:
-        id:
-          type: string
-        name:
-          type: string
-        tenants:
-          type: array
-          items:
-            type: string
-
-    DatatablePermissions:
-      type: object
-      required: [supported, permissioned, default_role, roles, editable, available_roles]
-      properties:
-        supported:
-          type: boolean
-          description: >-
-            Whether this data table can be put under roles at all. Only one backed by the
-            instance database can: a role is a login on that cluster.
-        permissioned:
-          type: boolean
-        default_role:
-          type: string
-        roles:
-          type: array
-          items:
-            $ref: "#/components/schemas/DatatableRoleTenants"
-        governing_workspace_id:
-          type: string
-        editable:
-          type: boolean
-        available_roles:
-          type: array
-          items:
-            $ref: "#/components/schemas/InstanceDatatableRole"
-        ungoverned_reachers:
-          type: array
-          items:
-            type: object
-            required: [workspace_id, datatable]
-            properties:
-              workspace_id:
-                type: string
-              datatable:
-                type: string
-
-    AclTarget:
-      description: what access is read or changed on
-      oneOf:
-        - $ref: "#/components/schemas/AclTargetDatabase"
-        - $ref: "#/components/schemas/AclTargetSchema"
-        - $ref: "#/components/schemas/AclTargetTable"
-      discriminator:
-        propertyName: kind
-        mapping:
-          database: "#/components/schemas/AclTargetDatabase"
-          schema: "#/components/schemas/AclTargetSchema"
-          table: "#/components/schemas/AclTargetTable"
-
-    AclTargetDatabase:
-      type: object
-      required: [kind]
-      properties:
-        kind:
-          type: string
-          enum: [database]
-
-    AclTargetSchema:
-      type: object
-      required: [kind, schema]
-      properties:
-        kind:
-          type: string
-          enum: [schema]
-        schema:
-          type: string
-
-    AclTargetTable:
-      type: object
-      required: [kind, schema, table]
-      properties:
-        kind:
-          type: string
-          enum: [table]
-        schema:
-          type: string
-        table:
-          type: string
-
-    AclChange:
-      description: one change to plan or apply
-      oneOf:
-        - $ref: "#/components/schemas/AclChangeSetOwner"
-        - $ref: "#/components/schemas/AclChangeGrant"
-        - $ref: "#/components/schemas/AclChangeRevoke"
-      discriminator:
-        propertyName: type
-        mapping:
-          set_owner: "#/components/schemas/AclChangeSetOwner"
-          grant: "#/components/schemas/AclChangeGrant"
-          revoke: "#/components/schemas/AclChangeRevoke"
-
-    AclChangeSetOwner:
-      type: object
-      description: >-
-        hands the target to role — for a schema, with everything already in it but an extension's
-        members, which stay with the extension
-      required: [type, role]
-      properties:
-        type:
-          type: string
-          enum: [set_owner]
-        role:
-          type: string
-          description: a data table role of the instance, or admin
-
-    AclChangeGrant:
-      type: object
-      required: [type, role, privileges, scope]
-      properties:
-        type:
-          type: string
-          enum: [grant]
-        role:
-          type: string
-          description: a data table role of the instance, or admin
-        privileges:
-          type: array
-          items:
-            type: string
-        scope:
-          $ref: "#/components/schemas/AclGrantScope"
-
-    AclChangeRevoke:
-      type: object
-      required: [type, role, privileges, scope]
-      properties:
-        type:
-          type: string
-          enum: [revoke]
-        role:
-          type: string
-          description: a data table role of the instance, other than admin
-        privileges:
-          type: array
-          items:
-            type: string
-        scope:
-          $ref: "#/components/schemas/AclGrantScope"
-        objects:
-          type: array
-          description: >-
-            objects inside the target the revoke covers, empty for the target itself. Only with the
-            target scope; a revoke on all objects of a kind is refused, since it cannot say which
-            grants it takes back.
-          items:
-            $ref: "#/components/schemas/AclObject"
-
-    AclGrantScope:
-      type: string
-      enum:
-        [
-          target,
-          all_tables,
-          all_sequences,
-          all_functions,
-          future_tables,
-          future_sequences,
-          future_functions,
-        ]
-
-    AclChangeRequest:
-      type: object
-      required: [target, change]
-      properties:
-        target:
-          $ref: "#/components/schemas/AclTarget"
-        change:
-          $ref: "#/components/schemas/AclChange"
-        statements:
-          type: array
-          description: >-
-            The statements the plan showed. Required to apply, which plans again and refuses if
-            the result differs.
-          items:
-            type: string
-
-    AclPlan:
-      type: object
-      required: [statements, warnings]
-      properties:
-        statements:
-          type: array
-          items:
-            type: string
-        warnings:
-          type: array
-          items:
-            type: string
-
-    AclObject:
-      type: object
-      required: [name, kind]
-      properties:
-        name:
-          type: string
-        kind:
-          type: string
-          description: >-
-            TABLE, SEQUENCE, FUNCTION, PROCEDURE or TYPE — what the object is. A revoke turns it
-            into the keyword it takes, ROUTINE for both routine kinds; a type's grants are read
-            only.
-        args:
-          type: string
-          description: identity arguments of a routine, which is what tells two of the same name apart
-
-    AclGrant:
-      type: object
-      required: [grantee, privileges, sources]
-      properties:
-        grantee:
-          type: string
-        privileges:
-          type: array
-          items:
-            type: string
-        object:
-          $ref: "#/components/schemas/AclObject"
-        future:
-          type: string
-          description: >-
-            set for a default privilege, naming the kind of object it covers (TABLES, SEQUENCES,
-            FUNCTIONS, TYPES, or SCHEMAS). On a schema, the defaults set in that schema; on the
-            database, the ones set database-wide, which apply in every schema and which no schema's
-            own defaults take back.
-        sources:
-          type: array
-          description: >-
-            the roles the grant comes from, each once — who granted it, or for a default privilege
-            the role whose future objects it covers. A revoke of some of the grant's privileges
-            takes them back from every source that gave them.
-          items:
-            $ref: "#/components/schemas/AclSource"
-
-    AclSource:
-      type: object
-      required: [role, privileges, reachable]
-      properties:
-        role:
-          type: string
-        privileges:
-          type: array
-          description: >-
-            what role gave of the grant's privileges. A revoke is held back only by a source out of
-            reach that gave some of what it takes back.
-          items:
-            type: string
-        reachable:
-          type: boolean
-          description: >-
-            whether the data table's connection can take back what role gave. On an object that is
-            the owner, when the connection acts for the owner, and otherwise the connection itself;
-            for a default privilege, a creating role the connection acts for. What a source out of
-            reach gave is not revocable from here; privileges only other sources gave still are.
-
-    DatatableAclInfo:
-      type: object
-      required: [owner, roles, editable, supports_maintain, dbname, grants, children]
-      properties:
-        owner:
-          type: string
-        roles:
-          type: array
-          description: the roles a change may name; empty unless the caller may change anything
-          items:
-            type: string
-        editable:
-          type: boolean
-          description: whether the caller may plan and apply changes
-        supports_maintain:
-          type: boolean
-          description: whether the server is Postgres 17+, which added the MAINTAIN table privilege
-        dbname:
-          type: string
-          description: the database the target lives in
-        grants:
-          type: array
-          items:
-            $ref: "#/components/schemas/AclGrant"
-        children:
-          type: array
-          description: a database's schemas, or a schema's tables
-          items:
-            type: string
-
    CustomInstanceDb:
      type: object
      required:
@@ -33954,9 +33424,6 @@ components:
          items:
            type: string
          description: Workspaces that reference this database via a ducklake catalog or datatable database with resource_type 'instance'. Computed at request time, not persisted.
-        workspace_id:
-          type: string
-          description: The workspace a member created this database for as a fork copy. Only that workspace can import into it or point a fork at it.

    NewSqsTrigger:
      type: object
@@ -35981,11 +35448,9 @@ components:
          type: object
          additionalProperties:
            type: object
+            required: [database]
            properties:
              database:
-                description: >-
-                  Set on an entry that owns its database. Absent on a fork's entry, which points at
-                  another workspace's data table instead.
                type: object
                properties:
                  resource_type:
@@ -35997,17 +35462,6 @@ components:
                    type: string
                required:
                  - resource_type
-              reference:
-                description: >-
-                  The workspace and data table that govern this one. Server-owned: written by fork
-                  creation, and carried across a settings save whatever the request says.
-                type: object
-                required: [workspace_id, datatable]
-                properties:
-                  workspace_id:
-                    type: string
-                  datatable:
-                    type: string
              migrations_enabled:
                type: boolean
                description: Whether the SQL migrations feature is opted in for this data table
@@ -36076,17 +35530,7 @@ components:

    DataTableTables:
      type: object
-      required:
-        [
-          datatable_name,
-          schemas,
-          instance,
-          permissioned,
-          usable_roles,
-          default_role,
-          can_create_schema,
-          creatable_schemas,
-        ]
+      required: [datatable_name, schemas]
      properties:
        datatable_name:
          type: string
@@ -36099,26 +35543,6 @@ components:
              type: string
        error:
          type: string
-        instance:
-          type: boolean
-          description: on the instance database, the only kind that can be under roles or have its access edited
-        permissioned:
-          type: boolean
-        usable_roles:
-          type: array
-          description: the roles the caller may connect as, by name; empty when not under roles
-          items:
-            type: string
-        default_role:
-          type: string
-        can_create_schema:
-          type: boolean
-          description: whether the role the listing connected as may create schemas
-        creatable_schemas:
-          type: array
-          description: the schemas the role the listing connected as may create in
-          items:
-            type: string

    DataTableTableSchema:
      type: object
@@ -4310,11 +4310,11 @@ async fn execute_component(
        }
    }

-    let is_flow = payload
+    let flow_path = payload
        .path
-        .as_ref()
-        .map(|p| p.starts_with("flow/"))
-        .unwrap_or(false);
+        .as_deref()
+        .and_then(|path| path.strip_prefix("flow/"))
+        .map(str::to_string);

    // Tag for inline-script jobs is read from the deployed policy in run mode;
    // only preview mode (editor) honors the client-supplied tag. This applies to
@@ -4444,8 +4444,9 @@ async fn execute_component(

    // Apply runnable query parameters if provided
    if let Some(ref run_query) = payload.run_query_params {
-        if is_flow {
-            crate::jobs::process_flow_run_query_params(&mut tx, uuid, run_query).await?;
+        if let Some(flow_path) = flow_path.as_deref() {
+            crate::jobs::process_flow_run_query_params(&mut tx, uuid, &w_id, flow_path, run_query)
+                .await?;
        }
    }

@@ -567,9 +567,6 @@ async fn set_config(
    };

    let mut tx = user_db.begin(&authed).await?;
-    if matches!(nc.trigger_kind, TriggerKind::Postgres) {
-        windmill_common::datatable_roles::lock_datatable_streams(&mut *tx, false).await?;
-    }

    sqlx::query!(
        r#"
@@ -617,9 +614,6 @@ async fn ping_config(
    )>,
 ) -> Result<()> {
    let mut tx = user_db.begin(&authed).await?;
-    if matches!(trigger_kind, TriggerKind::Postgres) {
-        windmill_common::datatable_roles::lock_datatable_streams(&mut *tx, false).await?;
-    }

    sqlx::query!(
        r#"
@@ -8343,9 +8343,8 @@ pub async fn run_wait_result_flow_by_version(
 /// job lives, in particular DuckDB, which runs in-process in the worker.
 ///
 /// What it does permit is any statement against the workspace's data tables, writes and DDL
-/// included: the helper's body is an unrestricted SQL template. What that reaches is the
-/// operator's own data table role — the preview job is permissioned as them, so the executor
-/// resolves it under their tenancy like any other job.
+/// included: the helper's body is an unrestricted SQL template and data tables carry no
+/// per-user ACL. Narrowing that is a separate decision from this exemption.
 ///
 /// The database argument is only half the target: the executor honors a `-- database`
 /// directive in the SQL over it, and `-- s3` redirects the result set, so both are refused.
@@ -8577,7 +8576,7 @@ async fn run_inline_preview_script(
 #[cfg(not(feature = "run_inline"))]
 async fn run_inline_preview_script() -> error::Result<Response> {
    Err(error::Error::InternalErr(
-        "inline preview requires the run_inline feature on the worker".to_string(),
+        "inline preview requires the worker feature".to_string(),
    ))
 }

@@ -8701,12 +8700,7 @@ fn register_potential_assets_on_inline_execution(
            .as_ref()
            .and_then(|args| args.get("database"))
            .map(|v| v.get().trim_matches('"'))
-            .and_then(|dt| dt.strip_prefix("datatable://"))
-            // `?role=` picks the connection, not the data table. Anything else after a `?` may be
-            // part of a name stored before names were restricted, so it stays.
-            .map(|dt| {
-                windmill_common::workspaces::parse_datatable_ref(dt).map_or(dt, |(name, _)| name)
-            });
+            .and_then(|dt| dt.strip_prefix("datatable://"));
        if let Some(datatable) = datatable {
            let re = regex::Regex::new(r#"SET search_path TO "([^"]+)";"#).unwrap();
            let (schema, content) = if let Some(captures) = re.captures(&preview.content) {
@@ -9546,7 +9540,7 @@ async fn run_preview_flow_job(
    .await?;

    // Set memory_id if provided (for agent memory)
-    if let Some(memory_id) = run_query.memory_id {
+    if let Some(memory_id) = run_query.memory_key(&w_id, &flow_path) {
        set_flow_memory_id(&mut tx, uuid, memory_id).await?;
    }

@@ -9560,6 +9554,9 @@ async fn run_preview_flow_job(
            &run_query,
            user_message.as_ref(),
            uuid,
+            // Run from the editor's test panel: a trial, not a real conversation.
+            true,
+            &flow_args,
        )
        .await?;
    }
@@ -352,17 +352,6 @@ async fn update_username_in_workpsace<'c>(
    new_username: &str,
    w_id: &str,
 ) -> error::Result<()> {
-    // ---- data table tenants ----
-    // Tenants name the user, so the rename has to follow here too; a list left naming the old
-    // username silently drops the access instead of moving it.
-    windmill_common::workspaces::rename_datatable_tenant_in_workspace(
-        tx,
-        w_id,
-        &format!("u/{old_username}"),
-        &format!("u/{new_username}"),
-    )
-    .await?;
-
    // ---- instance and workspace users ----
    sqlx::query!(
        "UPDATE usr SET username = $1 WHERE email = $2",
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Ruben Fiszelandrubenfiszel	d440ebb520	chore(main): release 1.814.0 (#11171 ) * chore(main): release 1.814.0 * Apply automatic changes --------- Co-authored-by: rubenfiszel <275584+rubenfiszel@users.noreply.github.com>	2026-09-17 20:10:04 +02:00
hugocasaandClaude Opus 5	5371519f0f	feat: let plan mode search and read connected mcp servers (#11205 ) Co-authored-by: Claude Opus 5 <noreply@anthropic.com>	2026-09-17 16:24:30 +02:00
GuilhemandClaude Opus 5	a571117f3f	feat: store mcp tool call, result and reasoning on flow conversation rows (#11176 ) * feat: store mcp tool call, result and reasoning on flow conversation rows Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: keep the failure reason and web search citations on tool rows Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: persist a structured answer as its own row and keep reasoning-only rows from closing a turn Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: keep a failed Windmill tool's error on its conversation row Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: let a structured answer row claim its streamed thinking Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: scope a structured answer's claim to its own turn and document the row fields as stored Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: claim a textless assistant row only within the newest turn Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * refactor: store the thinking that led to a tool call on the tool row Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: keep tool calls in stream order and scope a structured answer to its turn Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * feat: store the files a user message carried as object-storage references on its row Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * feat(chat-sdk): read a message's attachments and build their download URL Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * feat(chat-sdk): carry a loaded user message's attachments in AI SDK metadata Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * feat: store the model's call and what it got back on every tool row Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: pass no extras in the orphaned-conversation test's message insert Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(chat-sdk): keep a stored JSON null tool result instead of the row text Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: label a tool call the turn finished without as not finished Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: keep a structured answer's streamed call out of the did-not-finish label Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: write a turn's conversation rows in order and describe stored tool calls Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: await the image answer row like the agent loop's other rows Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(chat-sdk): place a row nothing streamed by its sequence, not at the end Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(chat-sdk): place only tool rows by sequence, keep a closing row last Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(flow chat): show a failed tool's error, and no Retry on a running or stopped turn A failed tool card showed the row label in place of the error the row now stores. The live tool result now reports failures, so a failed call briefly flagged a running turn as failed; a stopped turn, whose last row is the failed tool or the cancelled flow's failure, offered Retry too. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>	2026-09-17 15:35:18 +02:00
GuilhemandClaude Opus 5	6e1ef93f32	feat: let test_run_flow name the conversation of a chat-mode test run (#11198 ) * feat: let test_run_flow name the conversation of a chat-mode test run Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: refuse a non-UUID conversation_id and mint chat test-run ids in one place Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test(ai-evals): add a chat-flow follow-up case and mock flow preview runs Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test: expect the conversation id argument on the manager's flow test bridge Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * test(ai-evals): require the chat-flow follow-up runs to share one conversation id Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * refactor: name the test_run_flow argument memory_id after the run parameter Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-17 14:55:45 +02:00
hugocasaandClaude Opus 5	c297ed0052	feat: managed memory with an inherited or custom memory id per step (#11118 ) * feat: split ai agent memory into agent policy, run memory id and step history * fix: scope string memory ids to workspace and flow, keep nested tool history inputs * chore: update sqlx cache for the flow context query * docs: describe memory id scoping as collision-free rather than isolated * chore: regenerate openflow json after merging main * fix: offer no memory id for legacy manual memory, document linked history inputs * fix: seed provided messages from legacy manual memory and hide its note once set * fix: bypass memory when a provided messages expression evaluates to null * fix: require a user message when provided messages are empty * chore: keep the empty messages comment within the line width * docs: name the history inputs wherever linked steps list their flow-local inputs * docs: keep the memory storage path on one line * feat: managed memory with an inherited or custom memory id per step Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: list a custom memory id in the test run form and name where an inherited one comes from Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: keep memory id out of the add-field menu and drop the memory id telemetry Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: keep legacy auto memory without an id working after an untouched redeploy Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: rename step messages to previous_messages and address review Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * style: rewrap comments and docs lines lengthened by the previous_messages rename Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * refactor: read agent memory as either a legacy shape or the current one Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: name the memory setting in ignored-input notes and keep conversions honest Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> * fix: keep a legacy memory count unset on open and read a cleared count as off Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: address review on cleared test history and zero-count memory Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: drop flow-local keys from a linked agent resource before interpolating it Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: keep a linked resource's own inputs as fallbacks and note ignored history on image runs Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: restore the linked agent draft tests and log ignored history on every image run Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: resolve the one-of variant from the value when the selected one leaves the list Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: treat zero-count managed memory as off when enabling chat mode and shorten comments Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: stop requiring user_message in the openflow agent contract when previous messages are the prompt Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5 <noreply@anthropic.com>	2026-09-17 11:55:43 +02:00
GuilhemandClaude Fable 5.1	4eab995cf7	feat: tell test flow conversations from deployed ones and rename a chat (#11179 ) * feat: mark test flow conversations apart from deployed ones and allow renaming a chat Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: keep the conversation kind across refreshes and reject NUL titles Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> * fix: ignore conversation lists for a kind no longer selected Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: start a fresh conversation listing when the kind changes on a later page Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: refuse sending into a conversation of the other kind Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: refuse cross-kind conversation continuations on the server Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix: keep the conversation filter unavailable while an answer runs Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>	2026-09-17 11:41:49 +02:00
hugocasaandClaude Opus 5	381d4470ef	fix: disable a schedule whose cron has no run left instead of panicking (#11195 ) Co-authored-by: Claude Opus 5 <noreply@anthropic.com>	2026-09-17 11:40:00 +02:00
AlexRV12andClaude Opus 5	e954d33613	feat(ai-chat): add list_workers and list_data_metrics global tools (#11143 ) * feat(ai-chat): add list_workers and list_data_metrics global tools Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(ai-evals): keep the generated eval workspace id valid for the backend Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * refactor(ai-chat): trim the worker truncation note and added comments Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): only hedge an empty worker list when workers can be hidden Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): show the empty-worker message in the tool card Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): stop advertising workers in the api catalog tool Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * test(ai-evals): move the workspace id guard beside its function Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): keep the empty metric note true for every filter shape Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): resolve the caller role before judging an empty worker list Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-evals): collapse doubled hyphens in the generated workspace id Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * docs(ai-chat): describe what the ducklake tools and the worker hedge do Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): name the missing lake when a metric table filter has none Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * fix(ai-chat): strip the ducklake scheme from the table retry hint Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq * test(ai-evals): add a global case for the declared measure path Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gi6UeLKJB9UaSWtjDCVaMq --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-09-17 10:29:37 +02:00
				`@@ -0,0 +1 @@`
				`ALTER TABLE flow_conversation DROP COLUMN is_test;`
				`@@ -0,0 +1 @@`
				`ALTER TABLE flow_conversation_message DROP COLUMN attachments;`