starred/windmill

Fork 0

mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-28 00:02:42 +00:00

Files

T

History

8a0318a28f feat: worker group toggle to keep the worker's proxy out of jobs (#11958 )

* feat: worker group setting to strip env vars from the nsjail sandbox

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: apply the nsjail env denylist to profile envar directives too

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* refactor: drop the nsjail env denylist spawn hook

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* feat: replace the nsjail env denylist with a worker group toggle for the job proxy

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: honor the job proxy toggle in duckdb and drop the env var fallback

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: pre-install duckdb extensions with the proxy when jobs run without it

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: update ee-repo-ref to 5cfc0dc6760ea7f631fc98ea1edd39adfc55bf11

This commit updates the EE repository reference after PR #914 was merged in windmill-ee-private.

Previous ee-repo-ref: 8394f2d1b67765ba854205836185342e62df841e

New ee-repo-ref: 5cfc0dc6760ea7f631fc98ea1edd39adfc55bf11

Automated by sync-ee-ref workflow.

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>

2026-10-23 00:47:12 +02:00

.cargo

perf: opt into sqlx test templates through SQLX_TEST_TEMPLATE (#11853 )

2026-10-17 23:23:53 +02:00

.sqlx

fix: compare fork secret variables by decrypted value (#11952 )

2026-10-22 23:50:32 +02:00

.vscode

…

api

…

custom_migrations

…

generate_mcp_endpoints_tools

feat: infer a script's schema when a deploy (e.g. MCP) sends none (#11339 )

2026-09-25 10:00:49 +00:00

migrations

fix: compare fork secret variables by decrypted value (#11952 )

2026-10-22 23:50:32 +02:00

parsers

chore(main): release 1.846.1 (#11932 )

2026-10-21 22:04:23 +02:00

src

feat: worker group toggle to keep the worker's proxy out of jobs (#11958 )

2026-10-23 00:47:12 +02:00

tests

fix: stop audit inserts from silently rolling back saves (#11938 )

2026-10-22 17:15:05 +02:00

windmill-ai

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-alerting

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api

feat: chat with a saved agent from a raw app through an agent runnable (#11921 )

2026-10-22 21:01:09 +02:00

windmill-api-agent-workers

feat: let agent workers authenticate with a workload identity token (#11858 )

2026-10-18 10:44:50 +02:00

windmill-api-assets

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-auth

fix: stop audit inserts from silently rolling back saves (#11938 )

2026-10-22 17:15:05 +02:00

windmill-api-client

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-configs

feat: worker group toggle to keep the worker's proxy out of jobs (#11958 )

2026-10-23 00:47:12 +02:00

windmill-api-debug

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-embeddings

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-flow-conversations

feat: chat with a saved agent from a raw app through an agent runnable (#11921 )

2026-10-22 21:01:09 +02:00

windmill-api-flows

feat: configurable workspace roles with per-workspace overrides (#11821 )

2026-10-21 15:51:54 +02:00

windmill-api-groups

feat: configurable workspace roles with per-workspace overrides (#11821 )

2026-10-21 15:51:54 +02:00

windmill-api-inputs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-integration-tests

fix: compare fork secret variables by decrypted value (#11952 )

2026-10-22 23:50:32 +02:00

windmill-api-jobs

feat: chat with a saved agent from a raw app through an agent runnable (#11921 )

2026-10-22 21:01:09 +02:00

windmill-api-npm-proxy

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-openapi

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-schedule

feat: configurable workspace roles with per-workspace overrides (#11821 )

2026-10-21 15:51:54 +02:00

windmill-api-scripts

feat: serve the ai session toolset over mcp at /api/mcp (#11738 )

2026-10-21 19:12:49 +02:00

windmill-api-settings

feat: configurable workspace roles with per-workspace overrides (#11821 )

2026-10-21 15:51:54 +02:00

windmill-api-sse

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-users

feat: configurable workspace roles with per-workspace overrides (#11821 )

2026-10-21 15:51:54 +02:00

windmill-api-workers

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-api-workspaces

fix: compare fork secret variables by decrypted value (#11952 )

2026-10-22 23:50:32 +02:00

windmill-audit

fix: stop audit inserts from silently rolling back saves (#11938 )

2026-10-22 17:15:05 +02:00

windmill-autoscaling

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-common

feat: worker group toggle to keep the worker's proxy out of jobs (#11958 )

2026-10-23 00:47:12 +02:00

windmill-dep-map

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-duckdb-ffi-internal

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

windmill-git-sync

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-indexer

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-jseval

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-macros

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-mcp

feat: serve the ai session toolset over mcp at /api/mcp (#11738 )

2026-10-21 19:12:49 +02:00

windmill-native-triggers

feat: let native triggers act through per-user or shared connections (#11352 )

2026-10-22 16:17:51 +02:00

windmill-oauth

feat: slack agents through a workspace's own slack app (#11912 )

2026-10-22 13:51:09 +02:00

windmill-object-store

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-operator

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-queue

fix: refuse restarting a flow past an approval that was never granted (#11920 )

2026-10-21 17:48:58 +02:00

windmill-runtime-nativets

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-store

feat: let native triggers act through per-user or shared connections (#11352 )

2026-10-22 16:17:51 +02:00

windmill-test-utils

fix: stop audit inserts from silently rolling back saves (#11938 )

2026-10-22 17:15:05 +02:00

windmill-trigger

feat: configurable workspace roles with per-workspace overrides (#11821 )

2026-10-21 15:51:54 +02:00

windmill-trigger-amqp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-azure

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-email

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-gcp

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-http

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-kafka

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-mqtt

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-nats

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-postgres

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-sqs

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-trigger-websocket

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

windmill-types

fix: refuse restarting a flow past an approval that was never granted (#11920 )

2026-10-21 17:48:58 +02:00

windmill-worker

feat: worker group toggle to keep the worker's proxy out of jobs (#11958 )

2026-10-23 00:47:12 +02:00

windmill-worker-volumes

test: drop empty doctest and lib-test targets, ignore service tests (#11852 )

2026-10-17 22:30:42 +02:00

.devcontainer.json

…

.gitattributes

…

.gitignore

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

.ignore

…

AGENTS.md

feat: run duckdb jobs out of process under job isolation, drop the engine fork, bump to 1.5.6 (#11780 )

2026-10-15 16:49:50 +02:00

build.rs

fix: embed a VERSIONINFO resource in the Windows binary (#11433 )

2026-09-30 09:20:58 +02:00

Cargo.lock

chore(main): release 1.846.1 (#11932 )

2026-10-21 22:04:23 +02:00

Cargo.toml

chore(main): release 1.846.1 (#11932 )

2026-10-21 22:04:23 +02:00

check_no_symlink.sh

…

CLAUDE.md

…

ee-repo-ref.txt

feat: worker group toggle to keep the worker's proxy out of jobs (#11958 )

2026-10-23 00:47:12 +02:00

LICENSE

…

NOTICE

…

oauth_connect.json

feat: one Entra app for the Teams bot and ms_teams Graph connect (#11718 )

2026-10-16 19:00:52 +00:00

oauth_login.json

fix(oauth): show the account chooser on an explicit Google/Microsoft login (#10961 )

2026-09-05 11:08:27 +00:00

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

…

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

…

README.md

…

run_until_fail.sh

…

rustfmt.toml

…

substitute_ee_code.sh

…

summarize_schema.py

…

summarized_schema.txt

feat: let AI agents answer in Slack (#11630 )

2026-10-19 23:16:17 +02:00

test_debounce_e2e.sh

…

test_wac_e2e.sh

…

THREAT_MODEL.md

fix: apply SSRF validation to workspace webhook URLs (#11285 )

2026-09-22 08:14:12 +00:00

update_sqlx.sh

…

write_latest_ee_ref.sh

…

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise