mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-03 16:02:12 +00:00

Files

T

Ruben FiszelandClaude Opus 5.5 cedd6dc901 fix: hold interpolated references and captures to the token path scopes (#11391 )

* fix: hold interpolated references and captures to the token path scopes

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: let a resource read cover its own linked secret variable

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: resolve policy-granted app upload resources on the viewer's rls

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix: cover multi-secret linked variables and keep capture paths out of refusals

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-28 18:34:55 +02:00

.cargo

…

.sqlx

fix: hold interpolated references and captures to the token path scopes (#11391 )

2026-09-28 18:34:55 +02:00

.vscode

…

api

…

custom_migrations

…

generate_mcp_endpoints_tools

feat: infer a script's schema when a deploy (e.g. MCP) sends none (#11339 )

2026-09-25 10:00:49 +00:00

migrations

feat: let a workspace withdraw operator schedule and trigger writes (#11226 )

2026-09-25 17:34:58 +00:00

parsers

chore(main): release 1.818.0 (#11294 )

2026-09-25 18:42:49 +00:00

src

fix: never double-process a slow canceled flow in the zombie sweep (#11368 )

2026-09-26 16:18:42 +02:00

tests

fix: scope flow resume to its workspace and minting to the job's run (#11392 )

2026-09-28 18:31:44 +02:00

windmill-ai

feat(bedrock): add OIDC role assumption as a fourth auth mode (#10936 )

2026-09-25 18:19:38 +02:00

windmill-alerting

…

windmill-api

fix: hold interpolated references and captures to the token path scopes (#11391 )

2026-09-28 18:34:55 +02:00

windmill-api-agent-workers

…

windmill-api-assets

refresh a dbt column trace with its graph, and stop calling whole ones cut (#11015 )

2026-09-08 11:41:05 +02:00

windmill-api-auth

feat: let a workspace withdraw operator schedule and trigger writes (#11226 )

2026-09-25 17:34:58 +00:00

windmill-api-client

…

windmill-api-configs

feat: let a worker group override the dependency cache object store (#11019 )

2026-09-08 14:10:51 +02:00

windmill-api-debug

feat: instrument AI fill/fix, evals, agents and the debugger (#10853 )

2026-08-28 16:31:13 +02:00

windmill-api-embeddings

feat: store resource type display names and label hub integrations (#11113 )

2026-09-15 11:32:50 +02:00

windmill-api-flow-conversations

feat: store mcp tool call, result and reasoning on flow conversation rows (#11176 )

2026-09-17 15:35:18 +02:00

windmill-api-flows

feat: drafts follow their item through a move; behind means base ≠ head (#10577 )

2026-09-18 20:54:23 +02:00

windmill-api-groups

feat: let a workspace withdraw operator schedule and trigger writes (#11226 )

2026-09-25 17:34:58 +00:00

windmill-api-inputs

fix: show scheduled singlestepflow runs in flow history sidebar (#10312 )

2026-07-24 18:12:09 +02:00

windmill-api-integration-tests

fix: hold interpolated references and captures to the token path scopes (#11391 )

2026-09-28 18:34:55 +02:00

windmill-api-jobs

fix: scope flow resume to its workspace and minting to the job's run (#11392 )

2026-09-28 18:31:44 +02:00

windmill-api-npm-proxy

feat(npm-proxy): keep package files on disk and in the object store (#10638 )

2026-08-11 16:40:53 +00:00

windmill-api-openapi

…

windmill-api-schedule

feat: mount session list pages in process instead of iframes (#11289 )

2026-09-24 15:14:59 +02:00

windmill-api-scripts

fix: relock importers on their own tag, not the bare dependency tag (#11359 )

2026-09-25 17:32:25 +00:00

windmill-api-settings

fix: judge IPv4 embedded in IPv6 and pin the object storage test connect (#11389 )

2026-09-28 17:43:15 +02:00

windmill-api-sse

…

windmill-api-users

feat: let a workspace withdraw operator schedule and trigger writes (#11226 )

2026-09-25 17:34:58 +00:00

windmill-api-workers

perf: retire the legacy pre-partitioning audit table (#11240 )

2026-09-21 15:24:07 +00:00

windmill-api-workspaces

feat: let a workspace withdraw operator schedule and trigger writes (#11226 )

2026-09-25 17:34:58 +00:00

windmill-audit

feat: stream audit logs in batches when a page is slow to load (#10695 )

2026-08-14 13:31:26 +02:00

windmill-autoscaling

…

windmill-common

fix: judge IPv4 embedded in IPv6 and pin the object storage test connect (#11389 )

2026-09-28 17:43:15 +02:00

windmill-dep-map

fix: scope workspace dependencies create to the path workspace (#11385 )

2026-09-28 18:15:10 +02:00

windmill-duckdb-ffi-internal

fix: bound postgres result collection so an oversized result cannot OOM the worker (#10644 )

2026-08-12 09:11:56 +02:00

windmill-git-sync

fix(git-sync): run auto-pull as the admin who enabled it (#11121 )

2026-09-15 10:34:57 +02:00

windmill-indexer

feat: serve service log retrieval from a columnar parquet store (#10886 )

2026-08-29 09:51:59 +02:00

windmill-jseval

fix: allow results access inside nested functions in input transforms (#11358 )

2026-09-25 18:41:52 +00:00

windmill-macros

…

windmill-mcp

feat: refresh MCP tools when scripts and flows change (#11337 )

2026-09-25 09:38:41 +00:00

windmill-native-triggers

fix: apply token path scopes to the native trigger list (#11281 )

2026-09-22 08:14:41 +00:00

windmill-oauth

feat: make snowflake_oauth work as a dbt warehouse on every engine (#11095 )

2026-09-12 00:00:17 +02:00

windmill-object-store

fix: judge IPv4 embedded in IPv6 and pin the object storage test connect (#11389 )

2026-09-28 17:43:15 +02:00

windmill-operator

…

windmill-queue

fix: only restart a flow on a version of its own path and workspace (#11376 )

2026-09-27 14:10:21 +00:00

windmill-runtime-nativets

feat: drafts follow their item through a move; behind means base ≠ head (#10577 )

2026-09-18 20:54:23 +02:00

windmill-store

fix: hold interpolated references and captures to the token path scopes (#11391 )

2026-09-28 18:34:55 +02:00

windmill-test-utils

feat: let a workspace withdraw operator schedule and trigger writes (#11226 )

2026-09-25 17:34:58 +00:00

windmill-trigger

fix: validate app and trigger paths, refuse traversal in workspace export (#11311 )

2026-09-23 15:50:32 +02:00

windmill-trigger-amqp

feat(triggers): add AMQP (RabbitMQ) trigger via lapin (#10230 )

2026-07-21 15:10:29 +00:00

windmill-trigger-azure

…

windmill-trigger-email

…

windmill-trigger-gcp

…

windmill-trigger-http

perf: stop polling http trigger routes on workers and every minute (#11351 )

2026-09-25 12:01:28 +00:00

windmill-trigger-kafka

…

windmill-trigger-mqtt

…

windmill-trigger-nats

…

windmill-trigger-postgres

feat: add an options field to the postgresql resource (#11223 )

2026-09-25 17:40:13 +02:00

windmill-trigger-sqs

…

windmill-trigger-websocket

feat(triggers): nested filter groups and dotted paths (#10625 )

2026-08-11 11:07:12 +02:00

windmill-types

perf: skip the flow_env ancestor walk for sub-flows with nothing to inherit (#11349 )

2026-09-25 10:30:43 +00:00

windmill-worker

fix: run an AI agent tool on the worker its own tag selects (#11370 )

2026-09-26 17:32:25 +00:00

windmill-worker-volumes

feat: recognize // volume: mounts in PHP scripts (#11018 )

2026-09-08 13:23:35 +02:00

.devcontainer.json

…

.gitattributes

…

.gitignore

…

.ignore

…

AGENTS.md

docs: make herdr the documented worktree manager (#10727 )

2026-09-21 12:44:17 +02:00

build.rs

…

Cargo.lock

fix: judge IPv4 embedded in IPv6 and pin the object storage test connect (#11389 )

2026-09-28 17:43:15 +02:00

Cargo.toml

fix: judge IPv4 embedded in IPv6 and pin the object storage test connect (#11389 )

2026-09-28 17:43:15 +02:00

check_no_symlink.sh

…

CLAUDE.md

docs(agents): rework agent context, fix dev-env docs, vendor skills (#10667 )

2026-08-13 11:12:20 +00:00

ee-repo-ref.txt

feat: add provenance claims to job OIDC tokens (#11369 )

2026-09-28 11:42:58 +02:00

LICENSE

…

NOTICE

…

oauth_connect.json

feat: make snowflake_oauth work as a dbt warehouse on every engine (#11095 )

2026-09-12 00:00:17 +02:00

oauth_login.json

fix(oauth): show the account chooser on an explicit Google/Microsoft login (#10961 )

2026-09-05 11:08:27 +00:00

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

…

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

…

README.md

…

run_until_fail.sh

…

rustfmt.toml

…

substitute_ee_code.sh

…

summarize_schema.py

…

summarized_schema.txt

feat: deploy from the UI to a workspace on another instance (#11245 )

2026-09-22 01:40:53 +02:00

test_debounce_e2e.sh

…

test_wac_e2e.sh

…

THREAT_MODEL.md

fix: apply SSRF validation to workspace webhook URLs (#11285 )

2026-09-22 08:14:12 +00:00

update_sqlx.sh

…

write_latest_ee_ref.sh

…

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise