mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-20 08:01:35 +00:00

Files

T

History

Ruben Fiszel e356bb1f5d fix(cli): make encryption key push non-interactive-safe + add --skip-reencrypt-on-key-change (#9402 )

When encryption_key.yaml changes and is pushed via `wmill sync push`,
pushWorkspaceKey prompted interactively to confirm re-encrypting the
remote secrets with the new key. That prompt ignored `--yes` and had no
TTY guard, so a CI/non-interactive push that included the key would
block (or behave undefinedly) on the prompt.

Thread a key-push options object (non-interactive flag + explicit
re-encryption choice) through pushObj into pushWorkspaceKey:

- Non-interactive (`--yes` or no TTY) and no explicit choice: skip the
  prompt and default to re-encrypting all remote secrets with the new
  key (matches the interactive default), preserving their plaintext
  values.
- New `--skip-reencrypt-on-key-change` flag (and the
  WMILL_NO_REENCRYPT_ON_KEY_CHANGE=true env var for CI) opt out of
  re-encryption — only safe when the remote ciphertexts are already
  encrypted with the new key (e.g. workspace/instance migration).
- Interactive behavior (TTY, no `--yes`) is unchanged.

Regenerates system_prompts for the new option and adds unit tests for
the no-op, re-encrypt-by-default, flag-skip, and env-skip paths.

Fixes WIN-2005

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-02 07:11:29 +00:00

auto-generated

fix(cli): make encryption key push non-interactive-safe + add --skip-reencrypt-on-key-change (#9402 )

2026-06-02 07:11:29 +00:00

base

refactor(cli): fold flow test-step into flow preview --step (#9330 )

2026-05-26 11:21:54 +00:00

languages

docs(skills): fix //native marker + import rules for bunnative, remove legacy nativets skill (#9382 )

2026-05-30 10:21:56 +00:00

check-freshness.sh

feat: add ai chat schedule and trigger tools (#8961 )

2026-04-29 14:00:01 +00:00

generate.py

feat: add workspace datatable tools to global AI chat mode (#9395 )

2026-06-01 17:48:50 +00:00

README.md

chore(system_prompts): point plugin skills sync at plugins/windmill/ (#9287 )

2026-05-22 11:43:34 +02:00

utils.py

docs(skills): fix //native marker + import rules for bunnative, remove legacy nativets skill (#9382 )

2026-05-30 10:21:56 +00:00

README.md

System Prompts

This directory contains the single source of truth for AI system prompts used by both the frontend copilot and CLI guidance.

Structure

system_prompts/
├── base/              # Core instruction templates (manually written)
│   ├── flow-base.md   # Shared OpenFlow structure guidance
│   └── flow-cli.md    # CLI/local-agent workflow guidance for write-flow skill
├── languages/         # Language-specific instructions (manually written)
└── auto-generated/    # Auto-generated files (DO NOT EDIT)
    ├── sdks/          # SDK documentation
    ├── cli/           # CLI command documentation
    ├── prompts.ts     # TypeScript exports
    └── index.ts       # Helper functions

Usage

Regenerating Prompts

When SDK methods or the OpenFlow schema change, run:

python system_prompts/generate.py

To also refresh the standalone skills in a Claude plugin checkout:

python system_prompts/generate.py --plugin-dir ~/windmill-claude-plugin

--plugin-dir accepts:

the windmill-claude-plugin repo root
a plugin root such as plugins/windmill
a direct skills/ directory

To regenerate the public docs repo (consumed by context7):

python system_prompts/generate.py --context7-dir ~/windmill-cli-docs

--context7-dir writes a fully-rendered snapshot (AGENTS.md, cli-commands.md, skills/<name>/SKILL.md, README.md, manifest.json with the Windmill version) with all template placeholders resolved — suitable for ingestion by docs aggregators. In CI this runs from .github/workflows/publish-cli-docs.yml on every release tag. The generator refuses to wipe the target directory unless it's empty or has a context7 marker (context7.json, manifest.json, or a windmill-cli-docs git remote), so a typo can't delete unrelated files.

This will:

Parse TypeScript and Python SDK files to extract function signatures
Parse the OpenFlow YAML schema
Parse the CLI commands
Assemble complete prompts from markdown files
Generate TypeScript exports in auto-generated/
Optionally refresh plugin-ready standalone SKILL.md files in the target directory

Scope

These system prompts contain ONLY:

How to write Windmill scripts (language syntax, conventions, SDK usage)
How to structure Windmill flows (OpenFlow schema, module types, data flow)
Resource type handling, S3 operations

They DO NOT contain:

Tool usage instructions (edit_code, set_flow_json, etc.)
IDE/editor specific commands
Testing tool invocations

Tool instructions are added separately by the frontend and CLI.

CLI-only workflow instructions live in base/flow-cli.md and are included in the generated write-flow skill for wmill init. They are intentionally excluded from the frontend flow chat prompt.

Integration

Frontend

Uses Vite path alias $system_prompts pointing to auto-generated/:

import { FLOW_GUIDANCE } from "$system_prompts/flow";
import { getLangContext } from "$system_prompts/languages";

CLI

Generates /cli/src/guidance/skills.gen.ts with embedded skill content for wmill init.

Editing Guidelines

Edit markdown files in base/, languages/
Never edit files in auto-generated/ directly
After editing, run generate.py to update exports