starred/windmill

mirror of https://github.com/windmill-labs/windmill.git synced 2026-09-21 08:02:38 +00:00

Files

T

History

hugocasaandClaude Opus 5 7206f92f63 fix: read the MCP URL policy when a URL is asked for, and drop the all-workspaces option

Two review findings on the token drawer:

The policy was read once per page load and cached for the browser session, so a
superadmin turning the setting on left every open tab handing out `?token=` URLs
the server now refuses. Both entry points now read it when the user actually asks
for an MCP URL: when MCP mode is entered, and when the connect drawer opens.

The workspace picker offered "All workspaces / Multi-workspace", but the gateway's
consent screen binds the token it issues to the one workspace picked there, so
OAuth has no multi-workspace grant to hand out. That entry is now token-only.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-09-16 10:38:24 +02:00

..

…

…

feat(ai): improve data-pipeline building in AI sessions (prompt + evals + e2e) (#10270 )

2026-07-23 00:51:48 +02:00

stop websockets resurrecting a reclaimed dev server (#10676 )

2026-08-13 07:49:14 +02:00

refactor(frontend): keep the shared-utils bundle free of UI code (#10735 )

2026-08-18 00:36:00 +02:00

fix: read the MCP URL policy when a URL is asked for, and drop the all-workspaces option

2026-09-16 10:38:24 +02:00

keep crawlers off the login page (#11057 )

2026-09-10 18:42:01 +00:00

.devcontainer.json

…

.env

…

.eslintrc.cjs

…

.gitignore

…

.npmrc

…

.prettierignore

…

.prettierrc.json

…

.stylelintrc

…

AGENTS.md

feat(sessions): batch edit, filters and grouping in the session sidebar (#10772 )

2026-08-20 10:50:37 +02:00

brand-guidelines.md

…

BUGS.txt

…

build_full_app_css.sh

…

bundle_graphql_worker.sh

…

CLAUDE.md

docs(agents): rework agent context, fix dev-env docs, vendor skills (#10667 )

2026-08-13 11:12:20 +00:00

Dockerfile

…

filterTailwindClasses.js

…

LICENSE

…

minifiedOpenflowJson.sh

fix(cli): lint against the checkout's schema, not the published validator (#10418 )

2026-07-30 23:33:35 +02:00

NOTICE

…

openapi-ts-error-1758271586180.log

…

package-lock.json

chore(main): release 1.812.0 (#11111 )

2026-09-15 11:40:01 +02:00

package.json

chore(main): release 1.812.0 (#11111 )

2026-09-15 11:40:01 +02:00

playwright.config.ts

…

postcss.config.cjs

…

publish.sh

bundle oauth_connect.json into packaged components (#9535 )

2026-06-11 14:19:24 +00:00

README_DEV.md

chore: add dev server supervisor to cut idle vite dev memory (#10672 )

2026-08-13 06:51:38 +02:00

README.md

…

res.json

…

serve_ui_builder.sh

…

svelte-fast-check.config.ts

…

svelte.config.js

refactor: run the flow chat UI on the windmill-chat sdk (#11134 )

2026-09-15 12:56:07 +00:00

tailwind.config.cjs

feat: inline login errors and a narrower single-column login card (#10777 )

2026-08-21 10:40:34 +02:00

tailwindClasses.js

…

tsconfig.json

feat: Data Pipelines alpha (#9193 )

2026-06-18 18:09:02 +02:00

tslint-imports.json

…

use_latest_ui_builder.sh

harden UI builder artifact bootstrap with verified pinned metadata (#9189 )

2026-05-16 07:40:29 +00:00

vite.config.js

refactor: run the flow chat UI on the windmill-chat sdk (#11134 )

2026-09-15 12:56:07 +00:00

README.md

Windmill frontend

The Windmill frontend written in Svelte 5 + Tailwind CSS

The frontend is under AGPL, see the LICENSE file at the root of this repo