Create dirs

Merge branch 'main' into python-uv
Disable UV for ansible
2024-11-15 01:55:16 +00:00 · 2024-11-14 12:51:10 +00:00 · 2024-11-14 12:45:32 +00:00 · 2024-11-14 11:47:56 +00:00 · 2024-11-14 11:39:52 +00:00 · 2024-11-14 11:30:21 +00:00
247 changed files with 3639 additions and 9774 deletions
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -31,7 +31,7 @@ jobs:
        ports:
          - 8000:8000
    steps:
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - name: benchmark
@@ -72,7 +72,7 @@ jobs:
        ports:
          - 8000:8000
    steps:
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - name: benchmark
@@ -146,7 +146,7 @@ jobs:
          --pull always

    steps:
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - name: benchmark
@@ -264,7 +264,7 @@ jobs:
        options: >-
          --pull always
    steps:
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - name: benchmark
@@ -289,7 +289,7 @@ jobs:
      - benchmark_4workers
      - benchmark_8workers
    steps:
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - uses: actions/checkout@v4
--- a/.github/workflows/build-publish-rh-image.yml
+++ b/.github/workflows/build-publish-rh-image.yml
@@ -3,7 +3,8 @@ env:
  IMAGE_NAME: ${{ github.repository }}

 name: Build and publish windmill for RHEL9
-on: workflow_dispatch
+on:
+  workflow_dispatch

 permissions: write-all

@@ -64,7 +65,7 @@ jobs:
          platforms: linux/amd64
          push: true
          build-args: |
-            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,deno_core,kafka
+            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,deno_core
          secrets: |
            rh_username=${{ secrets.RH_USERNAME }}
            rh_password=${{ secrets.RH_PASSWORD }}
@@ -73,7 +74,7 @@ jobs:
          labels: |
            ${{ steps.meta-ee-public.outputs.labels }}-amd64
            org.opencontainers.image.licenses=Windmill-Enterprise-License
-
+      
      - name: Build and push publicly ee arm64
        uses: depot/build-push-action@v1
        with:
@@ -81,7 +82,7 @@ jobs:
          platforms: linux/arm64
          push: true
          build-args: |
-            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,deno_core,kafka
+            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,deno_core
          secrets: |
            rh_username=${{ secrets.RH_USERNAME }}
            rh_password=${{ secrets.RH_PASSWORD }}
@@ -107,7 +108,7 @@ jobs:
        run: |
          mv "${{ steps.extract-ee-amd64.outputs.destination }}/windmill" "${{ steps.extract-ee-amd64.outputs.destination }}/windmill-ee-amd64-rhel9"
          mv "${{ steps.extract-ee-arm64.outputs.destination }}/windmill" "${{ steps.extract-ee-arm64.outputs.destination }}/windmill-ee-arm64-rhel9"
-
+      
      - uses: actions/upload-artifact@v4
        with:
          name: RHEL9-amd64 build
--- a/.github/workflows/build-staging-image.yml
+++ b/.github/workflows/build-staging-image.yml
@@ -62,7 +62,7 @@ jobs:
          platforms: linux/amd64,linux/arm64
          push: true
          build-args: |
-            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,deno_core,kafka
+            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,deno_core
          tags: |
            ${{ steps.meta-ee-public.outputs.tags }}
          labels: |
--- a/.github/workflows/build_windows_worker_.yml
+++ b/.github/workflows/build_windows_worker_.yml
@@ -45,7 +45,7 @@ jobs:
          $env:OPENSSL_DIR="${Env:VCPKG_INSTALLATION_ROOT}\installed\x64-windows-static"
          mkdir frontend/build && cd backend
          New-Item -Path . -Name "windmill-api/openapi-deref.yaml" -ItemType "File" -Force
-          cargo build --release --features=enterprise,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core,kafka
+          cargo build --release --features=enterprise,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core

      - name: Rename binary with corresponding architecture
        run: |
--- a/.github/workflows/change-versions.yml
+++ b/.github/workflows/change-versions.yml
@@ -20,4 +20,4 @@ jobs:
        run: |
          cd backend
          cargo generate-lockfile
-      - uses: stefanzweifel/git-auto-commit-action@v5
+      - uses: stefanzweifel/git-auto-commit-action@v4
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -1,8 +1,10 @@
 env:
  REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.event_name != 'pull_request' && github.repository ||
+  IMAGE_NAME:
+    ${{ github.event_name != 'pull_request' && github.repository ||
    'windmill-labs/windmill-test' }}
-  DEV_SHA: ${{ github.event_name != 'pull_request' && 'dev' || format('pr-{0}',
+  DEV_SHA:
+    ${{ github.event_name != 'pull_request' && 'dev' || format('pr-{0}',
    github.event.number) }}

 name: Build windmill:main
@@ -138,7 +140,7 @@ jobs:
          platforms: linux/amd64,linux/arm64
          push: true
          build-args: |
-            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core,kafka
+            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core
          tags: |
            ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-ee:${{ env.DEV_SHA }}
            ${{ steps.meta-ee-public.outputs.tags }}
@@ -200,7 +202,7 @@ jobs:
          platforms: linux/amd64
          push: true
          build-args: |
-            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core,kafka
+            features=enterprise,enterprise_saml,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core
            PYTHON_IMAGE=python:3.12.2-slim-bookworm
          tags: |
            ${{ steps.meta-ee-public-py312.outputs.tags }}
--- a/.github/workflows/npm_on_release.yml
+++ b/.github/workflows/npm_on_release.yml
@@ -25,7 +25,7 @@ jobs:
        with:
          node-version: "20.x"
          registry-url: "https://registry.npmjs.org"
-      - uses: denoland/setup-deno@v2
+      - uses: denoland/setup-deno@v1
        with:
          deno-version: v1.x
      - run: cd cli && ./build.sh && cd npm && npm publish
--- a/.github/workflows/publish_windows_worker.yml
+++ b/.github/workflows/publish_windows_worker.yml
@@ -47,7 +47,7 @@ jobs:
          $env:OPENSSL_DIR="${Env:VCPKG_INSTALLATION_ROOT}\installed\x64-windows-static"
          mkdir frontend/build && cd backend
          New-Item -Path . -Name "windmill-api/openapi-deref.yaml" -ItemType "File" -Force
-          cargo build --release --features=enterprise,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core,kafka
+          cargo build --release --features=enterprise,stripe,embedding,parquet,prometheus,openidconnect,cloud,jemalloc,tantivy,deno_core

      - name: Rename binary with corresponding architecture
        run: |
--- a/.github/workflows/sign-cla.yml
+++ b/.github/workflows/sign-cla.yml
@@ -15,7 +15,7 @@ jobs:
          == 'I have read the CLA Document and I hereby sign the CLA') ||
          github.event_name == 'pull_request_target'
        # Beta Release
-        uses: cla-assistant/github-action@v2.6.1
+        uses: cla-assistant/github-action@v2.3.1
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          PERSONAL_ACCESS_TOKEN: ${{ secrets.CLA_PAT }}
--- a/.gitignore
+++ b/.gitignore
@@ -7,4 +7,3 @@ CaddyfileRemoteMalo
 *.swp
 **/.idea/
 .direnv
-.vscode
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@@ -0,0 +1,3 @@
+{
+  "python.analysis.typeCheckingMode": "basic"
+}
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,103 +1,5 @@
 # Changelog

-## [1.429.0](https://github.com/windmill-labs/windmill/compare/v1.428.1...v1.429.0) (2024-11-20)
-
-
-### Features
-
-* app editor ctrl nav ([#4757](https://github.com/windmill-labs/windmill/issues/4757)) ([3731886](https://github.com/windmill-labs/windmill/commit/37318861ac356b73f6da652c0ef8b4fc23436e3f))
-* svix integration ([#3814](https://github.com/windmill-labs/windmill/issues/3814)) ([68f781e](https://github.com/windmill-labs/windmill/commit/68f781ea6f5f53a3aafbc2c4b5dd71496254c68e))
-
-
-### Bug Fixes
-
-* add cancellable icons refresh in apps ([2c325ef](https://github.com/windmill-labs/windmill/commit/2c325ef8524e3c74844e566ecf42c245f87a2918))
-* **frontend:** pdf viewer fullscreen z-index ([#4762](https://github.com/windmill-labs/windmill/issues/4762)) ([a23cd4f](https://github.com/windmill-labs/windmill/commit/a23cd4f9e7c3e327eea099aade8c3fcd30cc2b87))
-
-## [1.428.1](https://github.com/windmill-labs/windmill/compare/v1.428.0...v1.428.1) (2024-11-20)
-
-
-### Bug Fixes
-
-* grant all to new job table ([#4758](https://github.com/windmill-labs/windmill/issues/4758)) ([ff7c94c](https://github.com/windmill-labs/windmill/commit/ff7c94c5a7caf94d571a2654f5dc48c494c7bc2e))
-
-## [1.428.0](https://github.com/windmill-labs/windmill/compare/v1.427.0...v1.428.0) (2024-11-19)
-
-
-### Features
-
-* improve app connection UX [#4687](https://github.com/windmill-labs/windmill/issues/4687)  ([2fd80f7](https://github.com/windmill-labs/windmill/commit/2fd80f7cdd21e3938311914ec733d769e13993d6))
-* pdf file preview ([#4753](https://github.com/windmill-labs/windmill/issues/4753)) ([b3a7cb0](https://github.com/windmill-labs/windmill/commit/b3a7cb058384b61328e2956f8ccd782ebd7b5900))
-
-
-### Bug Fixes
-
-* prevent groups to be ill-defined with non writer owners ([f59c0c0](https://github.com/windmill-labs/windmill/commit/f59c0c007675886d41b57647dc7e93b63444e3f9))
-
-## [1.427.0](https://github.com/windmill-labs/windmill/compare/v1.426.1...v1.427.0) (2024-11-19)
-
-
-### Features
-
-* **backend:** move some static fields out of job tables ([#4689](https://github.com/windmill-labs/windmill/issues/4689)) ([97457a5](https://github.com/windmill-labs/windmill/commit/97457a5679dd6f17b7835d4adfa66ac99c0f5404))
-
-
-### Bug Fixes
-
-* improve flow status viewer for iterations ([#4744](https://github.com/windmill-labs/windmill/issues/4744)) ([1c39848](https://github.com/windmill-labs/windmill/commit/1c398486e6d5bc5d5bc454b61b41da9acfd50f39))
-
-## [1.426.1](https://github.com/windmill-labs/windmill/compare/v1.426.0...v1.426.1) (2024-11-18)
-
-
-### Bug Fixes
-
-* playbook files permission mode incompatible with Windows ([#4740](https://github.com/windmill-labs/windmill/issues/4740)) ([4d9ec90](https://github.com/windmill-labs/windmill/commit/4d9ec909d1af7d123fec1a64143615e6cd0bba7e))
-
-## [1.426.0](https://github.com/windmill-labs/windmill/compare/v1.425.1...v1.426.0) (2024-11-18)
-
-
-### Features
-
-* Add mode (permissions) option to files in ansible ([#4724](https://github.com/windmill-labs/windmill/issues/4724)) ([5e10782](https://github.com/windmill-labs/windmill/commit/5e107827790292d89e51d81138eeef2b5b23a9c2))
-* kafka triggers ([#4713](https://github.com/windmill-labs/windmill/issues/4713)) ([88b8ffa](https://github.com/windmill-labs/windmill/commit/88b8ffab907e662ccca612bf01e6a228566522d2))
-
-
-### Bug Fixes
-
-* do not mount critical alerts modal if user is neither superadmin nor workspace admin ([#4731](https://github.com/windmill-labs/windmill/issues/4731)) ([180809d](https://github.com/windmill-labs/windmill/commit/180809d3466fb62d6692c45cbb012f158f83528f))
-
-## [1.425.1](https://github.com/windmill-labs/windmill/compare/v1.425.0...v1.425.1) (2024-11-16)
-
-
-### Bug Fixes
-
-* revert bool to text support in  pg ([#4727](https://github.com/windmill-labs/windmill/issues/4727)) ([17d8933](https://github.com/windmill-labs/windmill/commit/17d893315bd86942c7895cdb3e9c3ab34977b258))
-
-## [1.425.0](https://github.com/windmill-labs/windmill/compare/v1.424.0...v1.425.0) (2024-11-15)
-
-
-### Features
-
-* Handle `pip install` by `uv` ([#4517](https://github.com/windmill-labs/windmill/issues/4517)) ([f240d13](https://github.com/windmill-labs/windmill/commit/f240d1322a3c1669dfb69ebda6d05effcca26ae3))
-* **monitoring:** workspace critical alerts ([#4684](https://github.com/windmill-labs/windmill/issues/4684)) ([c32038a](https://github.com/windmill-labs/windmill/commit/c32038a76d9d00703d8b865af72f083ac43414e3))
-
-## [1.424.0](https://github.com/windmill-labs/windmill/compare/v1.423.2...v1.424.0) (2024-11-14)
-
-
-### Features
-
-* allow setting password and login type from superadmin UI ([2a1bff3](https://github.com/windmill-labs/windmill/commit/2a1bff3160b65eadba399229b5f53950ec2c0d48))
-* **backend:** monitor minimal version of living workers ([#4704](https://github.com/windmill-labs/windmill/issues/4704)) ([50ff183](https://github.com/windmill-labs/windmill/commit/50ff183baeaa2a39c2b0188ee8dd6172b08ae801))
-* Support mistral anthropic for ai ([#4692](https://github.com/windmill-labs/windmill/issues/4692)) ([556b4a4](https://github.com/windmill-labs/windmill/commit/556b4a41a1d010bb8a1796f485d343c1e412d278))
-
-
-### Bug Fixes
-
-* add countCompletedJobs api ([2a78359](https://github.com/windmill-labs/windmill/commit/2a78359af7b8e4700634c2ad2745c1d14d2da4f7))
-* add queue_couts api ([10b6b1d](https://github.com/windmill-labs/windmill/commit/10b6b1dc04cb2b2d4ec5ceb26a5dbd2ac7bd1394))
-* autoscaling when count &lt; min worker set to min_workers ([180bb82](https://github.com/windmill-labs/windmill/commit/180bb826436f9960def8c6cf3e9692714ffdf917))
-* deployment callbacks have a concurrency limit of 1 on same path ([c44fc4f](https://github.com/windmill-labs/windmill/commit/c44fc4f5ab8bcb5dffec08d5ed4ccd61feb1cb13))
-
 ## [1.423.2](https://github.com/windmill-labs/windmill/compare/v1.423.1...v1.423.2) (2024-11-13)


--- a/README.md
+++ b/README.md
@@ -318,15 +318,19 @@ you to have it being synced automatically everyday.
 | ------------------------- | ---------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | --------------------- |
 | DATABASE_URL              |                        | The Postgres database url.                                                                                                                                                                         | All                   |
 | WORKER_GROUP              | default                | The worker group the worker belongs to and get its configuration pulled from                                                                                                                       | Worker                |
-| MODE                      | standalone             | The mode if the binary. Possible values: standalone, worker, server, agent                                                                                                                                | All                   |
+| MODE                      | standalone             | The mode if the binary. Possible values: standalone, worker, server                                                                                                                                | All                   |
 | METRICS_ADDR              | None                   | (ee only) The socket addr at which to expose Prometheus metrics at the /metrics path. Set to "true" to expose it on port 8001                                                                      | All                   |
 | JSON_FMT                  | false                  | Output the logs in json format instead of logfmt                                                                                                                                                   | All                   |
 | BASE_URL                  | http://localhost:8000  | The base url that is exposed publicly to access your instance. Is overriden by the instance settings if any.                                                                                       | Server                |
+| SCRIPT_TOKEN_EXPIRY       | 900                    | The default duration period of the ephemeral-token generated at the beginning of a script                                                                                                          | Worker                |
 | ZOMBIE_JOB_TIMEOUT        | 30                     | The timeout after which a job is considered to be zombie if the worker did not send pings about processing the job (every server check for zombie jobs every 30s)                                  | Server                |
 | RESTART_ZOMBIE_JOBS       | true                   | If true then a zombie job is restarted (in-place with the same uuid and some logs), if false the zombie job is failed                                                                              | Server                |
 | SLEEP_QUEUE               | 50                     | The number of ms to sleep in between the last check for new jobs in the DB. It is multiplied by NUM_WORKERS such that in average, for one worker instance, there is one pull every SLEEP_QUEUE ms. | Worker                |
+| MAX_LOG_SIZE              | 500000                 | The maximum number of characters a job can emit (log + result)                                                                                                                                     | Worker                |
+| DISABLE_NUSER             | false                  | If Nsjail is enabled, disable the nsjail's `clone_newuser` setting                                                                                                                                 | Worker                |
 | KEEP_JOB_DIR              | false                  | Keep the job directory after the job is done. Useful for debugging.                                                                                                                                | Worker                |
 | LICENSE_KEY (EE only)     | None                   | License key checked at startup for the Enterprise Edition of Windmill                                                                                                                              | Worker                |
+| S3_CACHE_BUCKET (EE only) | None                   | The S3 bucket to sync the cache of the workers to                                                                                                                                                  | Worker                |
 | SLACK_SIGNING_SECRET      | None                   | The signing secret of your Slack app. See [Slack documentation](https://api.slack.com/authentication/verifying-requests-from-slack)                                                                | Server                |
 | COOKIE_DOMAIN             | None                   | The domain of the cookie. If not set, the cookie will be set by the browser based on the full origin                                                                                               | Server                |
 | DENO_PATH                 | /usr/bin/deno          | The path to the deno binary.                                                                                                                                                                       | Worker                |
@@ -335,6 +339,9 @@ you to have it being synced automatically everyday.
 | GOPRIVATE                 |                        | The GOPRIVATE env variable to use private go modules                                                                                                                                               | Worker                |
 | GOPROXY                   |                        | The GOPROXY env variable to use                                                                                                                                                                    | Worker                |
 | NETRC                     |                        | The netrc content to use a private go registry                                                                                                                                                     | Worker                |
+| PIP_INDEX_URL             | None                   | The index url to pass for pip.                                                                                                                                                                     | Worker                |
+| PIP_EXTRA_INDEX_URL       | None                   | The extra index url to pass to pip.                                                                                                                                                                | Worker                |
+| PIP_TRUSTED_HOST          | None                   | The trusted host to pass to pip.                                                                                                                                                                   | Worker                |
 | PATH                      | None                   | The path environment variable, usually inherited                                                                                                                                                   | Worker                |
 | HOME                      | None                   | The home directory to use for Go and Bash , usually inherited                                                                                                                                      | Worker                |
 | DATABASE_CONNECTIONS      | 50 (Server)/3 (Worker) | The max number of connections in the database connection pool                                                                                                                                      | All                   |
@@ -343,7 +350,6 @@ you to have it being synced automatically everyday.
 | QUEUE_LIMIT_WAIT_RESULT   | None                   | The number of max jobs in the queue before rejecting immediately the request in 'run_wait_result' endpoint. Takes precedence on the query arg. If none is specified, there are no limit.           | Worker                |
 | DENO_AUTH_TOKENS          | None                   | Custom DENO_AUTH_TOKENS to pass to worker to allow the use of private modules                                                                                                                      | Worker                |
 | DISABLE_RESPONSE_LOGS          | false                   | Disable response logs                                                   | Server                |
-| CREATE_WORKSPACE_REQUIRE_SUPERADMIN | true | If true, only superadmins can create new workspaces | Server |

 ## Run a local dev setup
 See the [./frontend/README_DEV.md](./frontend/README_DEV.md) file for all
--- a/backend/.gitignore
+++ b/backend/.gitignore
@@ -2,7 +2,7 @@ target/
 .env
 oauth.json
 oauth2.json
+windmill-api/openapi-deref.yaml
 tracing.folded
 heaptrack*
 index/
-windmill-api/openapi-*.*
--- a/backend/.sqlx/query-00588a40dde5189ac1c61505f17acb0f4c244c60477427505bf5bd1b104d3bf9.json
+++ b/backend/.sqlx/query-00588a40dde5189ac1c61505f17acb0f4c244c60477427505bf5bd1b104d3bf9.json
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE alerts SET acknowledged_workspace = true, acknowledged = true WHERE workspace_id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "00588a40dde5189ac1c61505f17acb0f4c244c60477427505bf5bd1b104d3bf9"
-}
--- a/backend/.sqlx/query-034583442e6f8ae38d6c4e4aac26f17c8d9d0e657f28276228fc90d3e22e1304.json
+++ b/backend/.sqlx/query-034583442e6f8ae38d6c4e4aac26f17c8d9d0e657f28276228fc90d3e22e1304.json
@@ -0,0 +1,16 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE workspace_settings SET openai_resource_path = $1, code_completion_enabled = $2 WHERE workspace_id = $3",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Varchar",
+        "Bool",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "034583442e6f8ae38d6c4e4aac26f17c8d9d0e657f28276228fc90d3e22e1304"
+}
--- a/backend/.sqlx/query-044e2b428ee6e2dd4543c87ad8835e239cf7567d18b8b3fa6608ea3a9d206ca7.json
+++ b/backend/.sqlx/query-044e2b428ee6e2dd4543c87ad8835e239cf7567d18b8b3fa6608ea3a9d206ca7.json
@@ -1,18 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO alerts (alert_type, message, acknowledged, acknowledged_workspace, workspace_id, resource)\n        VALUES ('critical_error', $1, $2, $3, $4, $5)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Bool",
-        "Bool",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "044e2b428ee6e2dd4543c87ad8835e239cf7567d18b8b3fa6608ea3a9d206ca7"
-}
--- a/backend/.sqlx/query-0b955f2cff82a2d4ba3840588143e08952f029480d4a42503ecc3c5e70437995.json
+++ b/backend/.sqlx/query-0b955f2cff82a2d4ba3840588143e08952f029480d4a42503ecc3c5e70437995.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, alert_type, message, created_at, COALESCE(acknowledged, false) AS acknowledged, workspace_id\n                 FROM alerts\n                 ORDER BY created_at DESC\n                 LIMIT $1 OFFSET $2",
+  "query": "SELECT id, alert_type, message, created_at, acknowledged \n             FROM alerts \n             WHERE acknowledged = $1\n             ORDER BY created_at DESC \n             LIMIT $2 OFFSET $3",
  "describe": {
    "columns": [
      {
@@ -27,15 +27,11 @@
        "ordinal": 4,
        "name": "acknowledged",
        "type_info": "Bool"
-      },
-      {
-        "ordinal": 5,
-        "name": "workspace_id",
-        "type_info": "Text"
      }
    ],
    "parameters": {
      "Left": [
+        "Bool",
        "Int8",
        "Int8"
      ]
@@ -45,9 +41,8 @@
      false,
      false,
      false,
-      null,
      true
    ]
  },
-  "hash": "4d30c5a2894d655741d167f5589f5816583f0bae78a0dd3270dedb377dfa944a"
+  "hash": "0b955f2cff82a2d4ba3840588143e08952f029480d4a42503ecc3c5e70437995"
 }
--- a/backend/.sqlx/query-0ee63ef2dd5c88edba2a1f56d31f29876724922f148dad7af35b36efbf70207a.json
+++ b/backend/.sqlx/query-0ee63ef2dd5c88edba2a1f56d31f29876724922f148dad7af35b36efbf70207a.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "DELETE FROM healthchecks WHERE check_type = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "0ee63ef2dd5c88edba2a1f56d31f29876724922f148dad7af35b36efbf70207a"
+}
--- a/backend/.sqlx/query-1610c79b8d238e3a35d795f34a2a0100b933b7f199d41cc2f554d57c811d55f3.json
+++ b/backend/.sqlx/query-1610c79b8d238e3a35d795f34a2a0100b933b7f199d41cc2f554d57c811d55f3.json
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings SET ai_resource = $1, code_completion_enabled = $2 WHERE workspace_id = $3",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Jsonb",
-        "Bool",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "1610c79b8d238e3a35d795f34a2a0100b933b7f199d41cc2f554d57c811d55f3"
-}
--- a/backend/.sqlx/query-1730f39fd1793d45fbb41b21389c61296a3ff7489ae12f52a19f9543173ac597.json
+++ b/backend/.sqlx/query-1730f39fd1793d45fbb41b21389c61296a3ff7489ae12f52a19f9543173ac597.json
@@ -65,8 +65,8 @@
      },
      {
        "ordinal": 12,
-        "name": "ai_resource",
-        "type_info": "Jsonb"
+        "name": "openai_resource_path",
+        "type_info": "Varchar"
      },
      {
        "ordinal": 13,
@@ -117,11 +117,6 @@
        "ordinal": 22,
        "name": "deploy_ui",
        "type_info": "Jsonb"
-      },
-      {
-        "ordinal": 23,
-        "name": "mute_critical_alerts",
-        "type_info": "Bool"
      }
    ],
    "parameters": {
@@ -152,7 +147,6 @@
      true,
      false,
      true,
-      true,
      true
    ]
  },
--- a/backend/.sqlx/query-188534f4b29f6461b1a6214d060f183c830b19a403ebb7b8be55a691675010c3.json
+++ b/backend/.sqlx/query-188534f4b29f6461b1a6214d060f183c830b19a403ebb7b8be55a691675010c3.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT\n                -- slack_team_id, \n                -- slack_name, \n                -- slack_command_script, \n                -- CASE WHEN slack_email = 'missing@email.xyz' THEN NULL ELSE slack_email END AS slack_email,\n                auto_invite_domain IS NOT NULL AS \"auto_invite_enabled!\",\n                CASE WHEN auto_invite_operator IS TRUE THEN 'operator' ELSE 'developer' END AS \"auto_invite_as!\", \n                CASE WHEN auto_add IS TRUE THEN 'add' ELSE 'invite' END AS \"auto_invite_mode!\", \n                webhook, \n                deploy_to, \n                error_handler, \n                ai_resource, \n                code_completion_enabled, \n                error_handler_extra_args, \n                error_handler_muted_on_cancel, \n                large_file_storage, \n                git_sync,\n                default_app,\n                default_scripts,\n                workspace.name\n            FROM workspace_settings\n            LEFT JOIN workspace ON workspace.id = workspace_settings.workspace_id\n            WHERE workspace_id = $1",
+  "query": "SELECT\n                -- slack_team_id, \n                -- slack_name, \n                -- slack_command_script, \n                -- CASE WHEN slack_email = 'missing@email.xyz' THEN NULL ELSE slack_email END AS slack_email,\n                auto_invite_domain IS NOT NULL AS \"auto_invite_enabled!\",\n                CASE WHEN auto_invite_operator IS TRUE THEN 'operator' ELSE 'developer' END AS \"auto_invite_as!\", \n                CASE WHEN auto_add IS TRUE THEN 'add' ELSE 'invite' END AS \"auto_invite_mode!\", \n                webhook, \n                deploy_to, \n                error_handler, \n                openai_resource_path, \n                code_completion_enabled, \n                error_handler_extra_args, \n                error_handler_muted_on_cancel, \n                large_file_storage, \n                git_sync,\n                default_app,\n                default_scripts,\n                workspace.name\n            FROM workspace_settings\n            LEFT JOIN workspace ON workspace.id = workspace_settings.workspace_id\n            WHERE workspace_id = $1",
  "describe": {
    "columns": [
      {
@@ -35,8 +35,8 @@
      },
      {
        "ordinal": 6,
-        "name": "ai_resource",
-        "type_info": "Jsonb"
+        "name": "openai_resource_path",
+        "type_info": "Varchar"
      },
      {
        "ordinal": 7,
@@ -102,5 +102,5 @@
      false
    ]
  },
-  "hash": "0331a81262e2d3c1bcfaeb64617b11eb68ab4599d64e5e5af639a9ac5d791fd0"
+  "hash": "188534f4b29f6461b1a6214d060f183c830b19a403ebb7b8be55a691675010c3"
 }
--- a/backend/.sqlx/query-1e7ce0c140410ae799f9c0c5772e4be4506bfd238c88f1b1c3ddf39b29071446.json
+++ b/backend/.sqlx/query-1e7ce0c140410ae799f9c0c5772e4be4506bfd238c88f1b1c3ddf39b29071446.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT\n                flow_status AS \"flow_status!: Json<Box<RawValue>>\",\n                raw_flow->'modules'->(flow_status->'step')::int AS \"module: Json<Box<RawValue>>\"\n            FROM queue_view WHERE id = $1 AND workspace_id = $2 LIMIT 1",
+  "query": "SELECT\n                flow_status AS \"flow_status!: Json<Box<RawValue>>\",\n                raw_flow->'modules'->(flow_status->'step')::int AS \"module: Json<Box<RawValue>>\"\n            FROM queue WHERE id = $1 AND workspace_id = $2 LIMIT 1",
  "describe": {
    "columns": [
      {
@@ -25,5 +25,5 @@
      null
    ]
  },
-  "hash": "4bbf4dbf5b18d8dfd62c0a029ec4deb95a348dc804ee23a02698adb9aa32b375"
+  "hash": "1e7ce0c140410ae799f9c0c5772e4be4506bfd238c88f1b1c3ddf39b29071446"
 }
--- a/backend/.sqlx/query-2139f1fb1877294bbf55d786000c5c32f582a3911efcf88e437aa90d7d5a49b5.json
+++ b/backend/.sqlx/query-2139f1fb1877294bbf55d786000c5c32f582a3911efcf88e437aa90d7d5a49b5.json
@@ -1,24 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT COUNT(*) FROM kafka_trigger WHERE script_path = $1 AND is_flow = $2 AND workspace_id = $3",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "count",
-        "type_info": "Int8"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Bool",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "2139f1fb1877294bbf55d786000c5c32f582a3911efcf88e437aa90d7d5a49b5"
-}
--- a/backend/.sqlx/query-28987898c7e4b172d466bf08f33c2da733e71f8a253b0122c17b9e021919809e.json
+++ b/backend/.sqlx/query-28987898c7e4b172d466bf08f33c2da733e71f8a253b0122c17b9e021919809e.json
@@ -1,18 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO alerts (alert_type, message, acknowledged, acknowledged_workspace, workspace_id, resource)\n        VALUES ('recovered_critical_error', $1, $2, $3, $4, $5)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Bool",
-        "Bool",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "28987898c7e4b172d466bf08f33c2da733e71f8a253b0122c17b9e021919809e"
-}
--- a/backend/.sqlx/query-31dd23f6768052e486668172e15eba1a3f9b6a8e5678a7ee8e5456ff4405d6f9.json
+++ b/backend/.sqlx/query-31dd23f6768052e486668172e15eba1a3f9b6a8e5678a7ee8e5456ff4405d6f9.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT raw_flow->'failure_module' != 'null'::jsonb\n            FROM completed_job_view\n            WHERE id = $1",
+  "query": "SELECT raw_flow->'failure_module' != 'null'::jsonb\n            FROM completed_job\n            WHERE id = $1",
  "describe": {
    "columns": [
      {
@@ -18,5 +18,5 @@
      null
    ]
  },
-  "hash": "6673aeb02e1c39616c6f38fd2bad841271bc08401573f4d1be8e8896cd77507b"
+  "hash": "31dd23f6768052e486668172e15eba1a3f9b6a8e5678a7ee8e5456ff4405d6f9"
 }
--- a/backend/.sqlx/query-344b3a5d9683273a956b5156fed5ab9fdff1a7252198e4ae290d8c8f937ff177.json
+++ b/backend/.sqlx/query-344b3a5d9683273a956b5156fed5ab9fdff1a7252198e4ae290d8c8f937ff177.json
@@ -1,54 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT id, alert_type, message, created_at, COALESCE(acknowledged, false) AS acknowledged, workspace_id\n                 FROM alerts\n                 WHERE COALESCE(acknowledged, false) = $1\n                 ORDER BY created_at DESC\n                 LIMIT $2 OFFSET $3",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int4"
-      },
-      {
-        "ordinal": 1,
-        "name": "alert_type",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 2,
-        "name": "message",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 3,
-        "name": "created_at",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 4,
-        "name": "acknowledged",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 5,
-        "name": "workspace_id",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Bool",
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      null,
-      true
-    ]
-  },
-  "hash": "344b3a5d9683273a956b5156fed5ab9fdff1a7252198e4ae290d8c8f937ff177"
-}
--- a/backend/.sqlx/query-3997dcf2c11817e59bf50fd896381d870b847a8ba07e6197212fdf85ec901b09.json
+++ b/backend/.sqlx/query-3997dcf2c11817e59bf50fd896381d870b847a8ba07e6197212fdf85ec901b09.json
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "DELETE FROM kafka_trigger WHERE workspace_id = $1 AND path = $2",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "3997dcf2c11817e59bf50fd896381d870b847a8ba07e6197212fdf85ec901b09"
-}
--- a/backend/.sqlx/query-3a94ad52c6b7cde844fa868167248cd9ff63e5fdfa1d93d8fbec32a257b6b05e.json
+++ b/backend/.sqlx/query-3a94ad52c6b7cde844fa868167248cd9ff63e5fdfa1d93d8fbec32a257b6b05e.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO alerts (alert_type, message, acknowledged) VALUES ('recovered_critical_error', $1, $2)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "3a94ad52c6b7cde844fa868167248cd9ff63e5fdfa1d93d8fbec32a257b6b05e"
+}
--- a/backend/.sqlx/query-3e64c894c89ef82c4527180b82c4e82c1b7060ba0ca288dc6a7c7afcd76212e8.json
+++ b/backend/.sqlx/query-3e64c894c89ef82c4527180b82c4e82c1b7060ba0ca288dc6a7c7afcd76212e8.json
@@ -1,16 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE kafka_trigger SET enabled = FALSE, error = $1, server_id = NULL, last_server_ping = NULL WHERE workspace_id = $2 AND path = $3",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "3e64c894c89ef82c4527180b82c4e82c1b7060ba0ca288dc6a7c7afcd76212e8"
-}
--- a/backend/.sqlx/query-4996b5af348bc335a5ec14496683cee096e37bdde7bb05c11ee0c4792f70dc60.json
+++ b/backend/.sqlx/query-4996b5af348bc335a5ec14496683cee096e37bdde7bb05c11ee0c4792f70dc60.json
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT raw_flow AS \"raw_flow!: Json<Box<sqlx::types::JsonRawValue>>\"\n            FROM queue_view WHERE id = $1 AND workspace_id = $2 LIMIT 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "raw_flow!: Json<Box<sqlx::types::JsonRawValue>>",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Uuid",
-        "Text"
-      ]
-    },
-    "nullable": [
-      true
-    ]
-  },
-  "hash": "4996b5af348bc335a5ec14496683cee096e37bdde7bb05c11ee0c4792f70dc60"
-}
--- a/backend/.sqlx/query-4a3a8207627418ba7b7eabaccd7ec72884f2a1eacf0ab0e0c6ccbf56c654c14a.json
+++ b/backend/.sqlx/query-4a3a8207627418ba7b7eabaccd7ec72884f2a1eacf0ab0e0c6ccbf56c654c14a.json
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE alerts SET acknowledged = true, acknowledged_workspace = true WHERE resource = $1 AND alert_type = 'critical_error'",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "4a3a8207627418ba7b7eabaccd7ec72884f2a1eacf0ab0e0c6ccbf56c654c14a"
-}
--- a/backend/.sqlx/query-4b923c94f6adcc7a76e8073de5e46b116dba3211487c8408ce2777aafdf94a44.json
+++ b/backend/.sqlx/query-4b923c94f6adcc7a76e8073de5e46b116dba3211487c8408ce2777aafdf94a44.json
@@ -1,19 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "INSERT INTO job (id, workspace_id, raw_code, raw_lock, raw_flow, tag)\n        VALUES ($1, $2, $3, $4, $5, $6)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Uuid",
-        "Varchar",
-        "Text",
-        "Text",
-        "Jsonb",
-        "Varchar"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "4b923c94f6adcc7a76e8073de5e46b116dba3211487c8408ce2777aafdf94a44"
-}
--- a/backend/.sqlx/query-4d22084a5d9860832f30e8f08cbfa1848ed3c1336fa4790f45b8189c4ac97d91.json
+++ b/backend/.sqlx/query-4d22084a5d9860832f30e8f08cbfa1848ed3c1336fa4790f45b8189c4ac97d91.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "INSERT INTO alerts (alert_type, message, acknowledged) VALUES ('critical_error', $1, $2)",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Bool"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "4d22084a5d9860832f30e8f08cbfa1848ed3c1336fa4790f45b8189c4ac97d91"
+}
--- a/backend/.sqlx/query-55cb03040bc2a8c53dd7fbb42bbdcc40f463cbc52d94ed9315cf9a547d4c89f2.json
+++ b/backend/.sqlx/query-55cb03040bc2a8c53dd7fbb42bbdcc40f463cbc52d94ed9315cf9a547d4c89f2.json
@@ -65,8 +65,8 @@
      },
      {
        "ordinal": 12,
-        "name": "ai_resource",
-        "type_info": "Jsonb"
+        "name": "openai_resource_path",
+        "type_info": "Varchar"
      },
      {
        "ordinal": 13,
@@ -117,11 +117,6 @@
        "ordinal": 22,
        "name": "deploy_ui",
        "type_info": "Jsonb"
-      },
-      {
-        "ordinal": 23,
-        "name": "mute_critical_alerts",
-        "type_info": "Bool"
      }
    ],
    "parameters": {
@@ -152,7 +147,6 @@
      true,
      false,
      true,
-      true,
      true
    ]
  },
--- a/backend/.sqlx/query-57111a97ff906fd79ecd8a571212cc4fea9cb9c16fe950f082ad5469bfeefc82.json
+++ b/backend/.sqlx/query-57111a97ff906fd79ecd8a571212cc4fea9cb9c16fe950f082ad5469bfeefc82.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT created_by, CONCAT(coalesce(queue.logs, ''), coalesce(job_logs.logs, '')) as logs, coalesce(job_logs.log_offset, 0) as log_offset, job_logs.log_file_index\n            FROM queue \n            LEFT JOIN job_logs ON job_logs.job_id = queue.id \n            WHERE queue.id = $1 AND queue.workspace_id = $2",
+  "query": "SELECT created_by, CONCAT(coalesce(queue.logs, ''), coalesce(job_logs.logs, '')) as logs, job_logs.log_offset, job_logs.log_file_index\n            FROM queue \n            LEFT JOIN job_logs ON job_logs.job_id = queue.id \n            WHERE queue.id = $1 AND queue.workspace_id = $2",
  "describe": {
    "columns": [
      {
@@ -33,9 +33,9 @@
    "nullable": [
      false,
      null,
-      null,
+      false,
      true
    ]
  },
-  "hash": "b2c30137b3b64f8c3f6aea062e8687e119599641beee0a0d6c89c5d90e82d0db"
+  "hash": "57111a97ff906fd79ecd8a571212cc4fea9cb9c16fe950f082ad5469bfeefc82"
 }
--- a/backend/.sqlx/query-5962733746c81480abe9ab3a6ccf5664130ae7500279055c08db42d67b2822f6.json
+++ b/backend/.sqlx/query-5962733746c81480abe9ab3a6ccf5664130ae7500279055c08db42d67b2822f6.json
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE kafka_trigger SET kafka_resource_path = $1, group_id = $2, topics = $3, script_path = $4, path = $5, is_flow = $6, edited_by = $7, email = $8, edited_at = now(), server_id = NULL, last_server_ping = NULL, error = NULL\n            WHERE workspace_id = $9 AND path = $10",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Varchar",
-        "VarcharArray",
-        "Varchar",
-        "Varchar",
-        "Bool",
-        "Varchar",
-        "Varchar",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "5962733746c81480abe9ab3a6ccf5664130ae7500279055c08db42d67b2822f6"
-}
--- a/backend/.sqlx/query-6268eabd561502a44e273d6391102278974623f7a7bcad6891d7abadf4d3ea03.json
+++ b/backend/.sqlx/query-6268eabd561502a44e273d6391102278974623f7a7bcad6891d7abadf4d3ea03.json
@@ -0,0 +1,15 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE workspace_settings SET openai_resource_path = NULL, code_completion_enabled = $1 WHERE workspace_id = $2",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Bool",
+        "Text"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "6268eabd561502a44e273d6391102278974623f7a7bcad6891d7abadf4d3ea03"
+}
--- a/backend/.sqlx/query-63e54fe57ec439b68eead00a02209f81076c5317d590e1441b557555b4d7ad96.json
+++ b/backend/.sqlx/query-63e54fe57ec439b68eead00a02209f81076c5317d590e1441b557555b4d7ad96.json
@@ -1,26 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "WITH uuid_table as (\n            select gen_random_uuid() as uuid from generate_series(1, $5)\n        )\n        INSERT INTO job\n            (id, workspace_id, raw_code, raw_lock, raw_flow)\n            (SELECT uuid, $1, $2, $3, $4 FROM uuid_table)\n        RETURNING id",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Uuid"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Text",
-        "Text",
-        "Jsonb",
-        "Int4"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "63e54fe57ec439b68eead00a02209f81076c5317d590e1441b557555b4d7ad96"
-}
--- a/backend/.sqlx/query-65da41c7ded54cdee8d33211561c068b72294cc99ff44ed0a13179df508ebc6a.json
+++ b/backend/.sqlx/query-65da41c7ded54cdee8d33211561c068b72294cc99ff44ed0a13179df508ebc6a.json
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE alerts\n         SET\n           acknowledged = true,\n           acknowledged_workspace = CASE\n             WHEN $2::text IS NOT NULL AND workspace_id = $2 THEN true\n             ELSE acknowledged_workspace\n           END\n         WHERE id = $1",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Int4",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "65da41c7ded54cdee8d33211561c068b72294cc99ff44ed0a13179df508ebc6a"
-}
--- a/backend/.sqlx/query-6940ddc5ee8d2a1048213d46f52d964b199604ba66dedbe9f89cea727d726a2d.json
+++ b/backend/.sqlx/query-6940ddc5ee8d2a1048213d46f52d964b199604ba66dedbe9f89cea727d726a2d.json
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings SET ai_resource = NULL, code_completion_enabled = $1 WHERE workspace_id = $2",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Bool",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "6940ddc5ee8d2a1048213d46f52d964b199604ba66dedbe9f89cea727d726a2d"
-}
--- a/backend/.sqlx/query-6d418b5cd7a4df54cfe3ec06e2a957c87f2307a218115ca749ea0e71eca2002e.json
+++ b/backend/.sqlx/query-6d418b5cd7a4df54cfe3ec06e2a957c87f2307a218115ca749ea0e71eca2002e.json
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT EXISTS(SELECT 1 FROM kafka_trigger WHERE path = $1 AND workspace_id = $2)",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "exists",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "6d418b5cd7a4df54cfe3ec06e2a957c87f2307a218115ca749ea0e71eca2002e"
-}
--- a/backend/.sqlx/query-6e70ebf078ac04a2933d2f83791973e8fc108d9f32be8a8501391052d76e191e.json
+++ b/backend/.sqlx/query-6e70ebf078ac04a2933d2f83791973e8fc108d9f32be8a8501391052d76e191e.json
@@ -1,25 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE kafka_trigger SET last_server_ping = now(), error = $1 WHERE workspace_id = $2 AND path = $3 AND server_id = $4 AND enabled IS TRUE RETURNING 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "?column?",
-        "type_info": "Int4"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "6e70ebf078ac04a2933d2f83791973e8fc108d9f32be8a8501391052d76e191e"
-}
--- a/backend/.sqlx/query-6eb076afcf11dba0dfe35ee108c64814f95dbe5376f0539195d24a8ca96ca3e2.json
+++ b/backend/.sqlx/query-6eb076afcf11dba0dfe35ee108c64814f95dbe5376f0539195d24a8ca96ca3e2.json
@@ -1,26 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE kafka_trigger SET enabled = $1, email = $2, edited_by = $3, edited_at = now(), server_id = NULL, last_server_ping = NULL, error = NULL\n        WHERE path = $4 AND workspace_id = $5 RETURNING 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "?column?",
-        "type_info": "Int4"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Bool",
-        "Varchar",
-        "Varchar",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "6eb076afcf11dba0dfe35ee108c64814f95dbe5376f0539195d24a8ca96ca3e2"
-}
--- a/backend/.sqlx/query-7c32176755c6ea2b6ae531860d436caae3fa256fc0803749ec5107632669adb3.json
+++ b/backend/.sqlx/query-7c32176755c6ea2b6ae531860d436caae3fa256fc0803749ec5107632669adb3.json
@@ -1,14 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE alerts \n         SET\n           acknowledged = true,\n           acknowledged_workspace = CASE\n             WHEN $1::text IS NOT NULL THEN true\n             ELSE acknowledged_workspace\n           END\n         WHERE ($1::text IS NOT NULL AND workspace_id = $1)\n            OR ($1::text IS NULL)",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "7c32176755c6ea2b6ae531860d436caae3fa256fc0803749ec5107632669adb3"
-}
--- a/backend/.sqlx/query-7c5a29de07cbe42326a15d4d7fd9714c20b767508e27368be6de38d7b18a3a4d.json
+++ b/backend/.sqlx/query-7c5a29de07cbe42326a15d4d7fd9714c20b767508e27368be6de38d7b18a3a4d.json
@@ -1,55 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT id, alert_type, message, created_at, COALESCE(acknowledged_workspace, false) AS acknowledged, workspace_id\n                 FROM alerts\n                 WHERE workspace_id = $1 AND COALESCE(acknowledged_workspace, false) = $2\n                 ORDER BY created_at DESC\n                 LIMIT $3 OFFSET $4",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "id",
-        "type_info": "Int4"
-      },
-      {
-        "ordinal": 1,
-        "name": "alert_type",
-        "type_info": "Varchar"
-      },
-      {
-        "ordinal": 2,
-        "name": "message",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 3,
-        "name": "created_at",
-        "type_info": "Timestamptz"
-      },
-      {
-        "ordinal": 4,
-        "name": "acknowledged",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 5,
-        "name": "workspace_id",
-        "type_info": "Text"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Bool",
-        "Int8",
-        "Int8"
-      ]
-    },
-    "nullable": [
-      false,
-      false,
-      false,
-      false,
-      null,
-      true
-    ]
-  },
-  "hash": "7c5a29de07cbe42326a15d4d7fd9714c20b767508e27368be6de38d7b18a3a4d"
-}
--- a/backend/.sqlx/query-a1a339c9e744b5661d2b4d1354e593b97b4e007fa9a499b49c3d1ebf9b645a3b.json
+++ b/backend/.sqlx/query-a1a339c9e744b5661d2b4d1354e593b97b4e007fa9a499b49c3d1ebf9b645a3b.json
@@ -1,35 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT raw_code, raw_lock, raw_flow AS \"raw_flow: Json<Box<JsonRawValue>>\"\n            FROM queue_view WHERE id = $1 AND workspace_id = $2 LIMIT 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "raw_code",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 1,
-        "name": "raw_lock",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 2,
-        "name": "raw_flow: Json<Box<JsonRawValue>>",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Uuid",
-        "Text"
-      ]
-    },
-    "nullable": [
-      true,
-      true,
-      true
-    ]
-  },
-  "hash": "a1a339c9e744b5661d2b4d1354e593b97b4e007fa9a499b49c3d1ebf9b645a3b"
-}
--- a/backend/.sqlx/query-a37e9efe197609226af13a7e4f940cadce758f4d3c54f3a6b26756a3df38bab0.json
+++ b/backend/.sqlx/query-a37e9efe197609226af13a7e4f940cadce758f4d3c54f3a6b26756a3df38bab0.json
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT owners FROM folder WHERE name = $1 AND workspace_id = $2",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "owners",
-        "type_info": "VarcharArray"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      false
-    ]
-  },
-  "hash": "a37e9efe197609226af13a7e4f940cadce758f4d3c54f3a6b26756a3df38bab0"
-}
--- a/backend/.sqlx/query-a59fae29ebcc9aa53308b777ead3d2b652618ac454f139db738f4499cb4eb079.json
+++ b/backend/.sqlx/query-a59fae29ebcc9aa53308b777ead3d2b652618ac454f139db738f4499cb4eb079.json
@@ -1,12 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE alerts SET acknowledged = true",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": []
-    },
-    "nullable": []
-  },
-  "hash": "a59fae29ebcc9aa53308b777ead3d2b652618ac454f139db738f4499cb4eb079"
-}
--- a/backend/.sqlx/query-a69ba7471d1a5faa145bebbd17d43e6dbe02e9e92ebbc31a50c99c3a04719284.json
+++ b/backend/.sqlx/query-a69ba7471d1a5faa145bebbd17d43e6dbe02e9e92ebbc31a50c99c3a04719284.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "WITH uuid_table as (\n            select unnest($11::uuid[]) as uuid\n        )\n        INSERT INTO queue \n            (id, script_hash, script_path, job_kind, language, args, tag, created_by, permissioned_as, email, scheduled_for, workspace_id, concurrent_limit, concurrency_time_window_s, timeout, flow_status)\n            (SELECT uuid, $1, $2, $3, $4, ('{ \"uuid\": \"' || uuid || '\" }')::jsonb, $5, $6, $7, $8, $9, $10, $12, $13, $14, $15 FROM uuid_table) \n        RETURNING id",
+  "query": "WITH uuid_table as (\n            select gen_random_uuid() as uuid from generate_series(1, $11)\n        )\n        INSERT INTO queue \n            (id, script_hash, script_path, job_kind, language, args, tag, created_by, permissioned_as, email, scheduled_for, workspace_id, concurrent_limit, concurrency_time_window_s, timeout, raw_code, raw_lock, raw_flow, flow_status)\n            (SELECT uuid, $1, $2, $3, $4, ('{ \"uuid\": \"' || uuid || '\" }')::jsonb, $5, $6, $7, $8, $9, $10, $12, $13, $14, $15, $16, $17, $18 FROM uuid_table) \n        RETURNING id",
  "describe": {
    "columns": [
      {
@@ -69,10 +69,13 @@
        "Varchar",
        "Timestamptz",
        "Varchar",
-        "UuidArray",
        "Int4",
        "Int4",
        "Int4",
+        "Int4",
+        "Text",
+        "Text",
+        "Jsonb",
        "Jsonb"
      ]
    },
@@ -80,5 +83,5 @@
      false
    ]
  },
-  "hash": "337f31c2172194cd594042c561998a03f751b246c40daf056fced0fd91f6dd73"
+  "hash": "a69ba7471d1a5faa145bebbd17d43e6dbe02e9e92ebbc31a50c99c3a04719284"
 }
--- a/backend/.sqlx/query-a7c5008aa7ea43d0afac7d9f19846976ed7af2e90270902f001115e023cb947d.json
+++ b/backend/.sqlx/query-a7c5008aa7ea43d0afac7d9f19846976ed7af2e90270902f001115e023cb947d.json
@@ -0,0 +1,12 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE alerts SET acknowledged = true WHERE acknowledged = false",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": []
+    },
+    "nullable": []
+  },
+  "hash": "a7c5008aa7ea43d0afac7d9f19846976ed7af2e90270902f001115e023cb947d"
+}
--- a/backend/.sqlx/query-aa6907b7266ee437dfbd77a9bf6c047fda88f3e72a0d10323a5e4020cf857c42.json
+++ b/backend/.sqlx/query-aa6907b7266ee437dfbd77a9bf6c047fda88f3e72a0d10323a5e4020cf857c42.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT raw_flow->'failure_module' != 'null'::jsonb\n            FROM queue_view\n            WHERE id = $1",
+  "query": "SELECT raw_flow->'failure_module' != 'null'::jsonb\n            FROM queue\n            WHERE id = $1",
  "describe": {
    "columns": [
      {
@@ -18,5 +18,5 @@
      null
    ]
  },
-  "hash": "202a4fee4e70ff74d150a187a8daec3609328b1e3fe6e4fac20fb6fe91ff1732"
+  "hash": "aa6907b7266ee437dfbd77a9bf6c047fda88f3e72a0d10323a5e4020cf857c42"
 }
--- a/backend/.sqlx/query-acdaa5151f8f7f37bb8c8c5a7d146789887e47db9695fc26b1dfaedd735e1e60.json
+++ b/backend/.sqlx/query-acdaa5151f8f7f37bb8c8c5a7d146789887e47db9695fc26b1dfaedd735e1e60.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT value\n                FROM resource\n                WHERE path = $1 AND workspace_id = $2",
+  "query": "SELECT value\n            FROM resource\n            WHERE path = $1 AND workspace_id = $2",
  "describe": {
    "columns": [
      {
@@ -19,5 +19,5 @@
      true
    ]
  },
-  "hash": "286fa00c088df146c08c1934556f06a4243c66787ab8759a8045e60effd2fb77"
+  "hash": "acdaa5151f8f7f37bb8c8c5a7d146789887e47db9695fc26b1dfaedd735e1e60"
 }
--- a/backend/.sqlx/query-be3ae231557e794172336bc27d725f862dcf039bbb3d75ced9d54c86f53d2580.json
+++ b/backend/.sqlx/query-be3ae231557e794172336bc27d725f862dcf039bbb3d75ced9d54c86f53d2580.json
@@ -0,0 +1,14 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "UPDATE alerts SET acknowledged = true WHERE id = $1",
+  "describe": {
+    "columns": [],
+    "parameters": {
+      "Left": [
+        "Int4"
+      ]
+    },
+    "nullable": []
+  },
+  "hash": "be3ae231557e794172336bc27d725f862dcf039bbb3d75ced9d54c86f53d2580"
+}
--- a/backend/.sqlx/query-c05f21e7027a985e5a657b689a0f5bedefcaa15b7887402c0d5d33cb7b5fb362.json
+++ b/backend/.sqlx/query-c05f21e7027a985e5a657b689a0f5bedefcaa15b7887402c0d5d33cb7b5fb362.json
@@ -1,35 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT raw_code, raw_lock, raw_flow AS \"raw_flow: Json<Box<RawValue>>\"\n            FROM queue_view WHERE id = $1 AND workspace_id = $2 LIMIT 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "raw_code",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 1,
-        "name": "raw_lock",
-        "type_info": "Text"
-      },
-      {
-        "ordinal": 2,
-        "name": "raw_flow: Json<Box<RawValue>>",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Uuid",
-        "Text"
-      ]
-    },
-    "nullable": [
-      true,
-      true,
-      true
-    ]
-  },
-  "hash": "c05f21e7027a985e5a657b689a0f5bedefcaa15b7887402c0d5d33cb7b5fb362"
-}
--- a/backend/.sqlx/query-cc5ab80241b88c5befea279f16c4ec68cec17b31dcd277b321f652917346496b.json
+++ b/backend/.sqlx/query-cc5ab80241b88c5befea279f16c4ec68cec17b31dcd277b321f652917346496b.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT id, alert_type, message, created_at, COALESCE(acknowledged_workspace, false) AS acknowledged, workspace_id\n                 FROM alerts\n                 WHERE workspace_id = $1\n                 ORDER BY created_at DESC\n                 LIMIT $2 OFFSET $3",
+  "query": "SELECT id, alert_type, message, created_at, acknowledged \n             FROM alerts \n             ORDER BY created_at DESC \n             LIMIT $1 OFFSET $2",
  "describe": {
    "columns": [
      {
@@ -27,16 +27,10 @@
        "ordinal": 4,
        "name": "acknowledged",
        "type_info": "Bool"
-      },
-      {
-        "ordinal": 5,
-        "name": "workspace_id",
-        "type_info": "Text"
      }
    ],
    "parameters": {
      "Left": [
-        "Text",
        "Int8",
        "Int8"
      ]
@@ -46,9 +40,8 @@
      false,
      false,
      false,
-      null,
      true
    ]
  },
-  "hash": "777e7084edf9a5d14f299ff479ae43c8ead47a6a531d4b031a1342c9b2f16506"
+  "hash": "cc5ab80241b88c5befea279f16c4ec68cec17b31dcd277b321f652917346496b"
 }
--- a/backend/.sqlx/query-cc8a71abdeccf0787695af32aa21fe73aba65cfdc8329c02b4d257de4d2d168a.json
+++ b/backend/.sqlx/query-cc8a71abdeccf0787695af32aa21fe73aba65cfdc8329c02b4d257de4d2d168a.json
@@ -1,34 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT \n            EXISTS(SELECT 1 FROM websocket_trigger WHERE workspace_id = $1) as \"websocket_used!\", \n            EXISTS(SELECT 1 FROM http_trigger WHERE workspace_id = $1) as \"http_routes_used!\",\n            EXISTS(SELECT 1 FROM kafka_trigger WHERE workspace_id = $1) as \"kafka_used!\"",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "websocket_used!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 1,
-        "name": "http_routes_used!",
-        "type_info": "Bool"
-      },
-      {
-        "ordinal": 2,
-        "name": "kafka_used!",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      null,
-      null,
-      null
-    ]
-  },
-  "hash": "cc8a71abdeccf0787695af32aa21fe73aba65cfdc8329c02b4d257de4d2d168a"
-}
--- a/backend/.sqlx/query-ceb97024ebf1a1c00ea1ed4952f66b229ca4622c537cc252d8ed52b4d24270ee.json
+++ b/backend/.sqlx/query-ceb97024ebf1a1c00ea1ed4952f66b229ca4622c537cc252d8ed52b4d24270ee.json
@@ -1,12 +1,12 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT ai_resource, code_completion_enabled FROM workspace_settings WHERE workspace_id = $1",
+  "query": "SELECT openai_resource_path, code_completion_enabled FROM workspace_settings WHERE workspace_id = $1",
  "describe": {
    "columns": [
      {
        "ordinal": 0,
-        "name": "ai_resource",
-        "type_info": "Jsonb"
+        "name": "openai_resource_path",
+        "type_info": "Varchar"
      },
      {
        "ordinal": 1,
@@ -24,5 +24,5 @@
      false
    ]
  },
-  "hash": "0230bd64d2b6719c3536a106e18a68c7b43b3a9a9efa92b5517132e9c0d8a25b"
+  "hash": "ceb97024ebf1a1c00ea1ed4952f66b229ca4622c537cc252d8ed52b4d24270ee"
 }
--- a/backend/.sqlx/query-ceda377fa534656ac12a7f41db77db1f054ec751855c8db7352b0e9c20b63ef8.json
+++ b/backend/.sqlx/query-ceda377fa534656ac12a7f41db77db1f054ec751855c8db7352b0e9c20b63ef8.json
@@ -1,22 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT ai_resource FROM workspace_settings WHERE workspace_id = $1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "ai_resource",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Text"
-      ]
-    },
-    "nullable": [
-      true
-    ]
-  },
-  "hash": "ceda377fa534656ac12a7f41db77db1f054ec751855c8db7352b0e9c20b63ef8"
-}
--- a/backend/.sqlx/query-d6615719bf8db4b333ed55c9a3c160ad1962668fc3305d8e80ae91ef73614a80.json
+++ b/backend/.sqlx/query-d6615719bf8db4b333ed55c9a3c160ad1962668fc3305d8e80ae91ef73614a80.json
@@ -1,24 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE kafka_trigger SET server_id = $1, last_server_ping = now() WHERE enabled IS TRUE AND workspace_id = $2 AND path = $3 AND (server_id IS NULL OR last_server_ping IS NULL OR last_server_ping < now() - interval '15 seconds') RETURNING true",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "?column?",
-        "type_info": "Bool"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Varchar",
-        "Text",
-        "Text"
-      ]
-    },
-    "nullable": [
-      null
-    ]
-  },
-  "hash": "d6615719bf8db4b333ed55c9a3c160ad1962668fc3305d8e80ae91ef73614a80"
-}
--- a/backend/.sqlx/query-db24f1f6ef1e26b7de7926bd3f32d1fa673c4970c25ff9ad98f0fdf199801b53.json
+++ b/backend/.sqlx/query-db24f1f6ef1e26b7de7926bd3f32d1fa673c4970c25ff9ad98f0fdf199801b53.json
@@ -0,0 +1,28 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT EXISTS(SELECT 1 FROM websocket_trigger WHERE workspace_id = $1) as \"websocket_used!\", EXISTS(SELECT 1 FROM http_trigger WHERE workspace_id = $1) as \"http_routes_used!\"",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "websocket_used!",
+        "type_info": "Bool"
+      },
+      {
+        "ordinal": 1,
+        "name": "http_routes_used!",
+        "type_info": "Bool"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      null,
+      null
+    ]
+  },
+  "hash": "db24f1f6ef1e26b7de7926bd3f32d1fa673c4970c25ff9ad98f0fdf199801b53"
+}
--- a/backend/.sqlx/query-de1abe57b6aa61155f747a3bcb98359f70eade6654b5a884915f07f3ef3fe15e.json
+++ b/backend/.sqlx/query-de1abe57b6aa61155f747a3bcb98359f70eade6654b5a884915f07f3ef3fe15e.json
@@ -1,6 +1,6 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT raw_flow->'modules'->($1)::text->'value'->>'type' = 'flow' FROM queue_view WHERE id = $2 LIMIT 1",
+  "query": "SELECT raw_flow->'modules'->($1)::text->'value'->>'type' = 'flow' FROM queue WHERE id = $2 LIMIT 1",
  "describe": {
    "columns": [
      {
@@ -19,5 +19,5 @@
      null
    ]
  },
-  "hash": "f5c94d89eb8c86916d7c64ffa8ea2de1feecbfde74e9a1374b3668ec72d7bac1"
+  "hash": "de1abe57b6aa61155f747a3bcb98359f70eade6654b5a884915f07f3ef3fe15e"
 }
--- a/backend/.sqlx/query-e0e895527d6807699c918ca87e0b016751c9b5a1dab632dc4abdb1dd6aa1fcbc.json
+++ b/backend/.sqlx/query-e0e895527d6807699c918ca87e0b016751c9b5a1dab632dc4abdb1dd6aa1fcbc.json
@@ -1,23 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "SELECT raw_flow AS \"raw_flow!: Json<Box<JsonRawValue>>\"\n            FROM completed_job_view WHERE id = $1 AND workspace_id = $2 LIMIT 1",
-  "describe": {
-    "columns": [
-      {
-        "ordinal": 0,
-        "name": "raw_flow!: Json<Box<JsonRawValue>>",
-        "type_info": "Jsonb"
-      }
-    ],
-    "parameters": {
-      "Left": [
-        "Uuid",
-        "Text"
-      ]
-    },
-    "nullable": [
-      true
-    ]
-  },
-  "hash": "e0e895527d6807699c918ca87e0b016751c9b5a1dab632dc4abdb1dd6aa1fcbc"
-}
--- a/backend/.sqlx/query-f22168826350797e88153b65a5b1e906a7868f34c062f154b2ee4f24c57aa5c3.json
+++ b/backend/.sqlx/query-f22168826350797e88153b65a5b1e906a7868f34c062f154b2ee4f24c57aa5c3.json
@@ -1,15 +0,0 @@
-{
-  "db_name": "PostgreSQL",
-  "query": "UPDATE workspace_settings SET mute_critical_alerts = $1 WHERE workspace_id = $2",
-  "describe": {
-    "columns": [],
-    "parameters": {
-      "Left": [
-        "Bool",
-        "Text"
-      ]
-    },
-    "nullable": []
-  },
-  "hash": "f22168826350797e88153b65a5b1e906a7868f34c062f154b2ee4f24c57aa5c3"
-}
--- a/backend/.sqlx/query-f8b689ec3e09f14dc02ac9e9f98d252a14d3a2acfadcd9cd6ba27ca9799f4706.json
+++ b/backend/.sqlx/query-f8b689ec3e09f14dc02ac9e9f98d252a14d3a2acfadcd9cd6ba27ca9799f4706.json
@@ -1,12 +1,12 @@
 {
  "db_name": "PostgreSQL",
-  "query": "SELECT mute_critical_alerts FROM workspace_settings WHERE workspace_id = $1",
+  "query": "SELECT openai_resource_path FROM workspace_settings WHERE workspace_id = $1",
  "describe": {
    "columns": [
      {
        "ordinal": 0,
-        "name": "mute_critical_alerts",
-        "type_info": "Bool"
+        "name": "openai_resource_path",
+        "type_info": "Varchar"
      }
    ],
    "parameters": {
@@ -18,5 +18,5 @@
      true
    ]
  },
-  "hash": "e05dbe046e846c092a96b6b0a9d872c721169d418586be2d15cee6b929049098"
+  "hash": "f8b689ec3e09f14dc02ac9e9f98d252a14d3a2acfadcd9cd6ba27ca9799f4706"
 }
--- a/backend/Cargo.lock
+++ b/backend/Cargo.lock
@@ -843,9 +843,9 @@ dependencies = [

 [[package]]
 name = "aws-sdk-sts"
-version = "1.50.0"
+version = "1.49.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ada54e5f26ac246dc79727def52f7f8ed38915cb47781e2a72213957dc3a7d5"
+checksum = "53dcf5e7d9bd1517b8b998e170e650047cea8a2b85fe1835abe3210713e541b7"
 dependencies = [
 "aws-credential-types",
 "aws-runtime",
@@ -1032,9 +1032,9 @@ dependencies = [

 [[package]]
 name = "axum"
-version = "0.7.9"
+version = "0.7.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edca88bc138befd0323b20752846e6587272d3b03b0343c8ea28a6f819e6e71f"
+checksum = "504e3947307ac8326a5437504c517c4b56716c9d98fac0028c2acc7ca47d70ae"
 dependencies = [
 "async-trait",
 "axum-core",
@@ -1043,7 +1043,7 @@ dependencies = [
 "http 1.1.0",
 "http-body 1.0.1",
 "http-body-util",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "hyper-util",
 "itoa",
 "matchit",
@@ -1057,7 +1057,7 @@ dependencies = [
 "serde_json",
 "serde_path_to_error",
 "serde_urlencoded",
- "sync_wrapper 1.0.2",
+ "sync_wrapper 1.0.1",
 "tokio",
 "tower 0.5.1",
 "tower-layer",
@@ -1080,7 +1080,7 @@ dependencies = [
 "mime",
 "pin-project-lite",
 "rustversion",
- "sync_wrapper 1.0.2",
+ "sync_wrapper 1.0.1",
 "tower-layer",
 "tower-service",
 "tracing",
@@ -1378,7 +1378,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c2593a3b8b938bd68373196c9832f516be11fa487ef4ae745eb282e6a56a7244"
 dependencies = [
 "once_cell",
- "proc-macro-crate 3.2.0",
+ "proc-macro-crate",
 "proc-macro2",
 "quote",
 "syn 2.0.87",
@@ -1468,9 +1468,9 @@ dependencies = [

 [[package]]
 name = "bytemuck"
-version = "1.20.0"
+version = "1.19.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b37c88a63ffd85d15b406896cc343916d7cf57838a847b3a6f2ca5d39a5695a"
+checksum = "8334215b81e418a0a7bdb8ef0849474f40bb10c8b71f1c4ed315cff49f32494d"
 dependencies = [
 "bytemuck_derive",
 ]
@@ -1598,9 +1598,9 @@ dependencies = [

 [[package]]
 name = "cc"
-version = "1.2.1"
+version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fd9de9f2205d5ef3fd67e685b0df337994ddd4495e2a28d185500d0e1edfea47"
+checksum = "1aeb932158bd710538c73702db6945cb68a8fb08c519e6e12706b94263b36db8"
 dependencies = [
 "jobserver",
 "libc",
@@ -1783,9 +1783,9 @@ dependencies = [

 [[package]]
 name = "comfy-table"
-version = "7.1.3"
+version = "7.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24f165e7b643266ea80cb858aed492ad9280e3e05ce24d4a99d7d7b889b6a4d9"
+checksum = "e0d05af1e006a2407bedef5af410552494ce5be9090444dbbcb57258c1af3d56"
 dependencies = [
 "strum 0.26.3",
 "strum_macros 0.26.4",
@@ -2644,7 +2644,7 @@ dependencies = [
 "error_reporter",
 "http 1.1.0",
 "http-body-util",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "hyper-rustls 0.27.3",
 "hyper-util",
 "ipnet",
@@ -2657,7 +2657,7 @@ dependencies = [
 "tokio-socks",
 "tokio-util",
 "tower 0.4.13",
- "tower-http",
+ "tower-http 0.6.1",
 "tower-service",
 ]

@@ -2776,7 +2776,7 @@ checksum = "22a1abc6bd8af41aa2496ceceef94f4277092c781a9495c437327a17659553a2"
 dependencies = [
 "deno_core",
 "deno_native_certs",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-pemfile 2.2.0",
 "rustls-tokio-stream",
 "rustls-webpki 0.102.8",
@@ -3355,9 +3355,9 @@ dependencies = [

 [[package]]
 name = "flate2"
-version = "1.0.35"
+version = "1.0.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c936bfdafb507ebbf50b8074c54fa31c5be9a1e7e5f467dd659697041407d07c"
+checksum = "a1b589b4dc103969ad3cf85c950899926ec64300a1a46d76c03a6072957036f0"
 dependencies = [
 "crc32fast",
 "libz-sys",
@@ -3945,9 +3945,9 @@ dependencies = [

 [[package]]
 name = "h2"
-version = "0.4.7"
+version = "0.4.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccae279728d634d083c00f6099cb58f01cc99c145b84b8be2f6c74618d79922e"
+checksum = "524e8ac6999421f49a846c2d4411f337e53497d8ec55d67753beffa43c5d9205"
 dependencies = [
 "atomic-waker",
 "bytes",
@@ -4250,14 +4250,14 @@ dependencies = [

 [[package]]
 name = "hyper"
-version = "1.5.1"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "97818827ef4f364230e16705d4706e2897df2bb60617d6ca15d598025a3c481f"
+checksum = "bbbff0a806a4728c99295b254c8838933b5b082d75e3cb70c8dab21fdfbcfa9a"
 dependencies = [
 "bytes",
 "futures-channel",
 "futures-util",
- "h2 0.4.7",
+ "h2 0.4.6",
 "http 1.1.0",
 "http-body 1.0.1",
 "httparse",
@@ -4293,9 +4293,9 @@ checksum = "08afdbb5c31130e3034af566421053ab03787c640246a446327f550d11bcb333"
 dependencies = [
 "futures-util",
 "http 1.1.0",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "hyper-util",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-native-certs 0.8.0",
 "rustls-pki-types",
 "tokio",
@@ -4324,7 +4324,7 @@ checksum = "70206fc6890eaca9fde8a0bf71caa2ddfc9fe045ac9e5c70df101a7dbde866e0"
 dependencies = [
 "bytes",
 "http-body-util",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "hyper-util",
 "native-tls",
 "tokio",
@@ -4343,7 +4343,7 @@ dependencies = [
 "futures-util",
 "http 1.1.0",
 "http-body 1.0.1",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "pin-project-lite",
 "socket2 0.5.7",
 "tokio",
@@ -4669,9 +4669,9 @@ dependencies = [

 [[package]]
 name = "itoa"
-version = "1.0.13"
+version = "1.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "540654e97a3f4470a492cd30ff187bc95d89557a903a2bbf112e2fae98104ef2"
+checksum = "49f1f14873335454500d59611f1cf4a4b0f786f9ac11f4312a78e4cf2566695b"

 [[package]]
 name = "jobserver"
@@ -4831,9 +4831,9 @@ dependencies = [

 [[package]]
 name = "libc"
-version = "0.2.164"
+version = "0.2.162"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "433bfe06b8c75da9b2e3fbea6e5329ff87748f0b144ef75306e674c3f6f7c13f"
+checksum = "18d287de67fe55fd7e1581fe933d965a5a9477b38e949cfa9f8574ef01506398"

 [[package]]
 name = "libgit2-sys"
@@ -5054,7 +5054,7 @@ dependencies = [
 "base64 0.22.1",
 "gethostname",
 "mail-builder",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-pki-types",
 "smtp-proto",
 "tokio",
@@ -5313,7 +5313,7 @@ dependencies = [
 "darling 0.20.10",
 "heck 0.5.0",
 "num-bigint",
- "proc-macro-crate 3.2.0",
+ "proc-macro-crate",
 "proc-macro-error2",
 "proc-macro2",
 "quote",
@@ -5556,27 +5556,6 @@ dependencies = [
 "libc",
 ]

-[[package]]
-name = "num_enum"
-version = "0.5.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f646caf906c20226733ed5b1374287eb97e3c2a5c227ce668c1f2ce20ae57c9"
-dependencies = [
- "num_enum_derive",
-]
-
-[[package]]
-name = "num_enum_derive"
-version = "0.5.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dcbff9bc912032c62bf65ef1d5aea88983b420f4f839db1e9b0c281a25c9c799"
-dependencies = [
- "proc-macro-crate 1.3.1",
- "proc-macro2",
- "quote",
- "syn 1.0.109",
-]
-
 [[package]]
 name = "number_prefix"
 version = "0.4.0"
@@ -5624,7 +5603,7 @@ dependencies = [
 "chrono",
 "futures",
 "humantime",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "itertools 0.13.0",
 "md-5 0.10.6",
 "parking_lot",
@@ -5757,15 +5736,6 @@ version = "0.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ff011a302c396a5197692431fc1948019154afc178baf7d8e37367442a4601cf"

-[[package]]
-name = "openssl-src"
-version = "300.4.1+3.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "faa4eac4138c62414b5622d1b31c5c304f34b406b013c079c2bbc652fdd6678c"
-dependencies = [
- "cc",
-]
-
 [[package]]
 name = "openssl-sys"
 version = "0.9.104"
@@ -5774,7 +5744,6 @@ checksum = "45abf306cbf99debc8195b66b7346498d7b10c210de50418b5ccd7ceba08c741"
 dependencies = [
 "cc",
 "libc",
- "openssl-src",
 "pkg-config",
 "vcpkg",
 ]
@@ -6270,16 +6239,6 @@ dependencies = [
 "elliptic-curve",
 ]

-[[package]]
-name = "proc-macro-crate"
-version = "1.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
-dependencies = [
- "once_cell",
- "toml_edit 0.19.15",
-]
-
 [[package]]
 name = "proc-macro-crate"
 version = "3.2.0"
@@ -6569,7 +6528,7 @@ dependencies = [
 "quinn-proto",
 "quinn-udp",
 "rustc-hash 2.0.0",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "socket2 0.5.7",
 "thiserror 2.0.3",
 "tokio",
@@ -6587,7 +6546,7 @@ dependencies = [
 "rand 0.8.5",
 "ring 0.17.8",
 "rustc-hash 2.0.0",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-pki-types",
 "slab",
 "thiserror 2.0.3",
@@ -6752,38 +6711,6 @@ dependencies = [
 "crossbeam-utils",
 ]

-[[package]]
-name = "rdkafka"
-version = "0.36.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1beea247b9a7600a81d4cc33f659ce1a77e1988323d7d2809c7ed1c21f4c316d"
-dependencies = [
- "futures-channel",
- "futures-util",
- "libc",
- "log",
- "rdkafka-sys",
- "serde",
- "serde_derive",
- "serde_json",
- "slab",
- "tokio",
-]
-
-[[package]]
-name = "rdkafka-sys"
-version = "4.7.0+2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55e0d2f9ba6253f6ec72385e453294f8618e9e15c2c6aba2a5c01ccf9622d615"
-dependencies = [
- "cmake",
- "libc",
- "libz-sys",
- "num_enum",
- "openssl-sys",
- "pkg-config",
-]
-
 [[package]]
 name = "reborrow"
 version = "0.5.5"
@@ -6974,11 +6901,11 @@ dependencies = [
 "encoding_rs",
 "futures-core",
 "futures-util",
- "h2 0.4.7",
+ "h2 0.4.6",
 "http 1.1.0",
 "http-body 1.0.1",
 "http-body-util",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "hyper-rustls 0.27.3",
 "hyper-tls 0.6.0",
 "hyper-util",
@@ -6991,14 +6918,14 @@ dependencies = [
 "percent-encoding",
 "pin-project-lite",
 "quinn",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-native-certs 0.8.0",
 "rustls-pemfile 2.2.0",
 "rustls-pki-types",
 "serde",
 "serde_json",
 "serde_urlencoded",
- "sync_wrapper 1.0.2",
+ "sync_wrapper 1.0.1",
 "system-configuration 0.6.1",
 "tokio",
 "tokio-native-tls",
@@ -7267,9 +7194,9 @@ dependencies = [

 [[package]]
 name = "rustix"
-version = "0.38.41"
+version = "0.38.40"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7f649912bc1495e167a6edee79151c84b1bad49748cb4f1f1167f459f6224f6"
+checksum = "99e4ea3e1cdc4b559b8e5650f9c8e5998e3e5c1343b4eaf034565f32318d63c0"
 dependencies = [
 "bitflags 2.6.0",
 "errno",
@@ -7292,9 +7219,9 @@ dependencies = [

 [[package]]
 name = "rustls"
-version = "0.23.17"
+version = "0.23.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f1a745511c54ba6d4465e8d5dfbd81b45791756de28d4981af70d6dca128f1e"
+checksum = "eee87ff5d9b36712a58574e12e9f0ea80f915a5b0ac518d322b24a465617925e"
 dependencies = [
 "log",
 "once_cell",
@@ -7377,7 +7304,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "22557157d7395bc30727745b365d923f1ecc230c4c80b176545f3f4f08c46e33"
 dependencies = [
 "futures",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "socket2 0.5.7",
 "tokio",
 ]
@@ -7528,9 +7455,9 @@ checksum = "ece8e78b2f38ec51c51f5d475df0a7187ba5111b2a28bdc761ee05b075d40a71"

 [[package]]
 name = "schannel"
-version = "0.1.27"
+version = "0.1.26"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f29ebaa345f945cec9fbbc532eb307f0fdad8161f281b6369539c8d84876b3d"
+checksum = "01227be5826fa0690321a2ba6c5cd57a19cf3f6a09e76973b58e61de6ab9d1c1"
 dependencies = [
 "windows-sys 0.59.0",
 ]
@@ -7721,9 +7648,9 @@ dependencies = [

 [[package]]
 name = "serde_json"
-version = "1.0.133"
+version = "1.0.132"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c7fceb2473b9166b2294ef05efcb65a3db80803f0b03ef86a5fc88a2b85ee377"
+checksum = "d726bfaff4b320266d395898905d0eba0345aae23b54aee3a737e260fd46db03"
 dependencies = [
 "indexmap 2.6.0",
 "itoa",
@@ -8269,7 +8196,7 @@ dependencies = [
 "once_cell",
 "paste",
 "percent-encoding",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-pemfile 2.2.0",
 "serde",
 "serde_json",
@@ -8953,9 +8880,9 @@ checksum = "2047c6ded9c721764247e62cd3b03c09ffc529b2ba5b10ec482ae507a4a70160"

 [[package]]
 name = "sync_wrapper"
-version = "1.0.2"
+version = "1.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+checksum = "a7065abeca94b6a8a577f9bd45aa0867a2238b74e8eb67cf10d492bc39351394"
 dependencies = [
 "futures-core",
 ]
@@ -9543,7 +9470,7 @@ version = "0.26.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0c7bc40d0e5a97695bb96e27995cd3a08538541b0a846f65bba7a359f36700d4"
 dependencies = [
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-pki-types",
 "tokio",
 ]
@@ -9736,9 +9663,26 @@ dependencies = [

 [[package]]
 name = "tower-http"
-version = "0.6.2"
+version = "0.5.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "403fa3b783d4b626a8ad51d766ab03cb6d2dbfc46b1c5d4448395e6628dc9697"
+checksum = "1e9cd434a998747dd2c4276bc96ee2e0c7a2eadf3cae88e52be55a05fa9053f5"
+dependencies = [
+ "bitflags 2.6.0",
+ "bytes",
+ "http 1.1.0",
+ "http-body 1.0.1",
+ "http-body-util",
+ "pin-project-lite",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8437150ab6bbc8c5f0f519e3d5ed4aa883a83dd4cdd3d1b21f9482936046cb97"
 dependencies = [
 "async-compression 0.4.17",
 "bitflags 2.6.0",
@@ -9752,7 +9696,6 @@ dependencies = [
 "tokio-util",
 "tower-layer",
 "tower-service",
- "tracing",
 ]

 [[package]]
@@ -10159,9 +10102,9 @@ checksum = "2f322b60f6b9736017344fa0635d64be2f458fbc04eef65f6be22976dd1ffd5b"

 [[package]]
 name = "unicode-ident"
-version = "1.0.14"
+version = "1.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "adb9e6ca4f869e1180728b7950e35922a7fc6397f7b641499e8f3ef06e50dc83"
+checksum = "e91b56cd4cadaeb79bbf1a5645f6b4f8dc5bde8834ad5894a8db35fda9efa1fe"

 [[package]]
 name = "unicode-normalization"
@@ -10268,7 +10211,7 @@ dependencies = [
 "log",
 "native-tls",
 "once_cell",
- "rustls 0.23.17",
+ "rustls 0.23.16",
 "rustls-pki-types",
 "serde",
 "serde_json",
@@ -10667,7 +10610,7 @@ checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"

 [[package]]
 name = "windmill"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "axum",
@@ -10709,7 +10652,7 @@ dependencies = [

 [[package]]
 name = "windmill-api"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "argon2",
@@ -10736,7 +10679,7 @@ dependencies = [
 "hf-hub",
 "hmac",
 "http 1.1.0",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "itertools 0.13.0",
 "jsonwebtoken",
 "lazy_static",
@@ -10752,7 +10695,6 @@ dependencies = [
 "prometheus",
 "quick_cache",
 "rand 0.8.5",
- "rdkafka",
 "regex",
 "reqwest 0.12.9",
 "rsa 0.7.2",
@@ -10776,7 +10718,7 @@ dependencies = [
 "tokio-util",
 "tower 0.5.1",
 "tower-cookies",
- "tower-http",
+ "tower-http 0.5.2",
 "tracing",
 "tracing-subscriber",
 "ulid",
@@ -10795,7 +10737,7 @@ dependencies = [

 [[package]]
 name = "windmill-api-client"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "base64 0.22.1",
 "chrono",
@@ -10813,7 +10755,7 @@ dependencies = [

 [[package]]
 name = "windmill-audit"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "chrono",
 "serde",
@@ -10826,7 +10768,7 @@ dependencies = [

 [[package]]
 name = "windmill-autoscaling"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "rsmq_async",
@@ -10841,7 +10783,7 @@ dependencies = [

 [[package]]
 name = "windmill-common"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "async-stream",
@@ -10858,7 +10800,7 @@ dependencies = [
 "git-version",
 "hex",
 "hmac",
- "hyper 1.5.1",
+ "hyper 1.5.0",
 "indexmap 2.6.0",
 "itertools 0.13.0",
 "lazy_static",
@@ -10874,7 +10816,7 @@ dependencies = [
 "serde_json",
 "sha2 0.10.8",
 "sqlx",
- "thiserror 2.0.3",
+ "thiserror 1.0.69",
 "tikv-jemalloc-ctl",
 "tokio",
 "tracing",
@@ -10888,7 +10830,7 @@ dependencies = [

 [[package]]
 name = "windmill-git-sync"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "regex",
 "rsmq_async",
@@ -10903,7 +10845,7 @@ dependencies = [

 [[package]]
 name = "windmill-indexer"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "bytes",
@@ -10925,7 +10867,7 @@ dependencies = [

 [[package]]
 name = "windmill-macros"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "itertools 0.13.0",
 "lazy_static",
@@ -10937,7 +10879,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "convert_case 0.6.0",
 "serde",
@@ -10946,7 +10888,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-bash"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -10958,7 +10900,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-go"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "gosyn",
@@ -10970,7 +10912,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-graphql"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -10982,7 +10924,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-php"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "itertools 0.13.0",
@@ -10993,7 +10935,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "itertools 0.13.0",
@@ -11004,7 +10946,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-py-imports"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "async-recursion",
@@ -11022,7 +10964,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-rust"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "convert_case 0.6.0",
@@ -11039,7 +10981,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-sql"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -11051,7 +10993,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-ts"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "lazy_static",
@@ -11069,7 +11011,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-wasm"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "getrandom 0.2.15",
@@ -11090,7 +11032,7 @@ dependencies = [

 [[package]]
 name = "windmill-parser-yaml"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "serde_json",
@@ -11100,7 +11042,7 @@ dependencies = [

 [[package]]
 name = "windmill-queue"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "async-recursion",
@@ -11133,7 +11075,7 @@ dependencies = [

 [[package]]
 name = "windmill-sql-datatype-parser-wasm"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "wasm-bindgen",
 "wasm-bindgen-test",
@@ -11143,7 +11085,7 @@ dependencies = [

 [[package]]
 name = "windmill-worker"
-version = "1.429.0"
+version = "1.423.2"
 dependencies = [
 "anyhow",
 "async-recursion",
--- a/backend/Cargo.toml
+++ b/backend/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "windmill"
-version = "1.429.0"
+version = "1.423.2"
 authors.workspace = true
 edition.workspace = true

@@ -29,7 +29,7 @@ members = [
 ]

 [workspace.package]
-version = "1.429.0"
+version = "1.423.2"
 authors = ["Ruben Fiszel <ruben@windmill.dev>"]
 edition = "2021"

@@ -62,7 +62,6 @@ jemalloc = ["windmill-common/jemalloc", "dep:tikv-jemallocator", "dep:tikv-jemal
 tantivy = ["dep:windmill-indexer", "windmill-api/tantivy"]
 sqlx = ["windmill-worker/sqlx"]
 deno_core = ["windmill-worker/deno_core", "dep:deno_core"]
-kafka = ["windmill-api/kafka"]

 [dependencies]
 anyhow.workspace = true
@@ -140,12 +139,12 @@ headers = "^0"
 hyper = { version = "^1", features = ["full"] }
 tokio = { version = "^1", features = ["full", "tracing"] }
 tower = "^0"
-tower-http = { version = "^0.6", features = ["trace", "cors"] }
+tower-http = { version = "^0.5", features = ["trace", "cors"] }
 tower-cookies = "^0.10"
 serde = "^1"
 serde_json = { version = "^1", features = ["preserve_order", "raw_value"] }
 uuid = { version = "^1", features = ["serde", "v4"] }
-thiserror = "^2"
+thiserror = "^1"
 anyhow = "^1"
 chrono = { version = "0.4.35", features = ["serde"] }
 chrono-tz = "^0"
@@ -267,7 +266,6 @@ tokio-native-tls = "^0"
 openssl = "=0.10"
 mail-parser = "^0"
 matchit = "=0.7.3"
-rdkafka = { version = "0.36.2", features = ["cmake-build", "ssl-vendored"] }

 datafusion = "39.0.0"
 object_store = { version = "0.10.0", features = ["aws", "azure"] }
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-5bb4a7ce8660effc14b4ab96b17ff11f4048bfe9
+0d9c8813acd28848515c736e7b684220b5a785a3
--- a/backend/migrations/20241105133531_alter_openai_resource_path_column_in_workspace_settings.down.sql
+++ b/backend/migrations/20241105133531_alter_openai_resource_path_column_in_workspace_settings.down.sql
@@ -1,7 +0,0 @@
-- Add down migration script here
-ALTER TABLE workspace_settings
-ALTER COLUMN ai_resource TYPE text
-USING ai_resource->>'path';
-
-ALTER TABLE workspace_settings
-RENAME COLUMN ai_resource to openai_resource_path;
--- a/backend/migrations/20241105133531_alter_openai_resource_path_column_in_workspace_settings.up.sql
+++ b/backend/migrations/20241105133531_alter_openai_resource_path_column_in_workspace_settings.up.sql
@@ -1,7 +0,0 @@
-- Add up migration script here
-ALTER TABLE workspace_settings
-ALTER COLUMN openai_resource_path TYPE jsonb
-USING jsonb_build_object('provider', 'openai', 'path', openai_resource_path);
-
-ALTER TABLE workspace_settings
-RENAME COLUMN openai_resource_path TO ai_resource;
--- a/backend/migrations/20241108201445_alert_add_workspace_id.down.sql
+++ b/backend/migrations/20241108201445_alert_add_workspace_id.down.sql
@@ -1,4 +0,0 @@
-ALTER TABLE alerts DROP COLUMN workspace_id;
-ALTER TABLE alerts DROP COLUMN acknowledged_workspace;
-ALTER TABLE alerts DROP COLUMN resource;
-ALTER TABLE workspace_settings DROP COLUMN mute_critical_alerts;
--- a/backend/migrations/20241108201445_alert_add_workspace_id.up.sql
+++ b/backend/migrations/20241108201445_alert_add_workspace_id.up.sql
@@ -1,4 +0,0 @@
-ALTER TABLE alerts ADD COLUMN workspace_id TEXT DEFAULT NULL;
-ALTER TABLE alerts ADD COLUMN acknowledged_workspace BOOL DEFAULT NULL;
-ALTER TABLE alerts ADD COLUMN resource TEXT DEFAULT NULL;
-ALTER TABLE workspace_settings ADD COLUMN mute_critical_alerts BOOL DEFAULT NULL;
--- a/backend/migrations/20241112104946_kafka_triggers.down.sql
+++ b/backend/migrations/20241112104946_kafka_triggers.down.sql
@@ -1,2 +0,0 @@
-- Add down migration script here
-DROP TABLE kafka_trigger;
--- a/backend/migrations/20241112104946_kafka_triggers.up.sql
+++ b/backend/migrations/20241112104946_kafka_triggers.up.sql
@@ -1,69 +0,0 @@
-- Add up migration script here
-- Add up migration script here
-
-CREATE TABLE kafka_trigger (
-    path VARCHAR(255) NOT NULL,
-    kafka_resource_path VARCHAR(255) NOT NULL,
-    topics VARCHAR(255)[] NOT NULL,
-    group_id VARCHAR(255) NOT NULL,
-    script_path VARCHAR(255) NOT NULL,
-    is_flow BOOLEAN NOT NULL,
-    workspace_id VARCHAR(50) NOT NULL,
-    edited_by VARCHAR(50) NOT NULL,
-    email VARCHAR(255) NOT NULL,
-    edited_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
-    extra_perms JSONB NOT NULL DEFAULT '{}',
-    server_id VARCHAR(50) NULL,
-    last_server_ping TIMESTAMPTZ NULL,
-    error TEXT NULL,
-    enabled BOOLEAN NOT NULL,
-    PRIMARY KEY (path, workspace_id)
-);
-
-GRANT ALL ON kafka_trigger TO windmill_user;
-GRANT ALL ON kafka_trigger TO windmill_admin;
-
-ALTER TABLE kafka_trigger ENABLE ROW LEVEL SECURITY;
-
-CREATE POLICY admin_policy ON kafka_trigger FOR ALL TO windmill_admin USING (true);
-
-CREATE POLICY see_folder_extra_perms_user_select ON kafka_trigger FOR SELECT TO windmill_user
-USING (SPLIT_PART(kafka_trigger.path, '/', 1) = 'f' AND SPLIT_PART(kafka_trigger.path, '/', 2) = any(regexp_split_to_array(current_setting('session.folders_read'), ',')::text[]));
-CREATE POLICY see_folder_extra_perms_user_insert ON kafka_trigger FOR INSERT TO windmill_user
-WITH CHECK (SPLIT_PART(kafka_trigger.path, '/', 1) = 'f' AND SPLIT_PART(kafka_trigger.path, '/', 2) = any(regexp_split_to_array(current_setting('session.folders_write'), ',')::text[]));
-CREATE POLICY see_folder_extra_perms_user_update ON kafka_trigger FOR UPDATE TO windmill_user
-USING (SPLIT_PART(kafka_trigger.path, '/', 1) = 'f' AND SPLIT_PART(kafka_trigger.path, '/', 2) = any(regexp_split_to_array(current_setting('session.folders_write'), ',')::text[]));
-CREATE POLICY see_folder_extra_perms_user_delete ON kafka_trigger FOR DELETE TO windmill_user
-USING (SPLIT_PART(kafka_trigger.path, '/', 1) = 'f' AND SPLIT_PART(kafka_trigger.path, '/', 2) = any(regexp_split_to_array(current_setting('session.folders_write'), ',')::text[]));
-
-CREATE POLICY see_own ON kafka_trigger FOR ALL TO windmill_user
-USING (SPLIT_PART(kafka_trigger.path, '/', 1) = 'u' AND SPLIT_PART(kafka_trigger.path, '/', 2) = current_setting('session.user'));
-CREATE POLICY see_member ON kafka_trigger FOR ALL TO windmill_user
-USING (SPLIT_PART(kafka_trigger.path, '/', 1) = 'g' AND SPLIT_PART(kafka_trigger.path, '/', 2) = any(regexp_split_to_array(current_setting('session.groups'), ',')::text[]));
-
-CREATE POLICY see_extra_perms_user_select ON kafka_trigger FOR SELECT TO windmill_user
-USING (extra_perms ? CONCAT('u/', current_setting('session.user')));
-CREATE POLICY see_extra_perms_user_insert ON kafka_trigger FOR INSERT TO windmill_user
-WITH CHECK ((extra_perms ->> CONCAT('u/', current_setting('session.user')))::boolean);
-CREATE POLICY see_extra_perms_user_update ON kafka_trigger FOR UPDATE TO windmill_user
-USING ((extra_perms ->> CONCAT('u/', current_setting('session.user')))::boolean);
-CREATE POLICY see_extra_perms_user_delete ON kafka_trigger FOR DELETE TO windmill_user
-USING ((extra_perms ->> CONCAT('u/', current_setting('session.user')))::boolean);
-
-CREATE POLICY see_extra_perms_groups_select ON kafka_trigger FOR SELECT TO windmill_user
-USING (extra_perms ?| regexp_split_to_array(current_setting('session.pgroups'), ',')::text[]);
-CREATE POLICY see_extra_perms_groups_insert ON kafka_trigger FOR INSERT TO windmill_user
-WITH CHECK (exists(
-    SELECT key, value FROM jsonb_each_text(extra_perms) 
-    WHERE SPLIT_PART(key, '/', 1) = 'g' AND key = ANY(regexp_split_to_array(current_setting('session.pgroups'), ',')::text[])
-    AND value::boolean));
-CREATE POLICY see_extra_perms_groups_update ON kafka_trigger FOR UPDATE TO windmill_user
-USING (exists(
-    SELECT key, value FROM jsonb_each_text(extra_perms) 
-    WHERE SPLIT_PART(key, '/', 1) = 'g' AND key = ANY(regexp_split_to_array(current_setting('session.pgroups'), ',')::text[])
-    AND value::boolean));
-CREATE POLICY see_extra_perms_groups_delete ON kafka_trigger FOR DELETE  TO windmill_user
-USING (exists(
-    SELECT key, value FROM jsonb_each_text(extra_perms) 
-    WHERE SPLIT_PART(key, '/', 1) = 'g' AND key = ANY(regexp_split_to_array(current_setting('session.pgroups'), ',')::text[])
-    AND value::boolean));
--- a/backend/migrations/20241119062608_create_job_and_views.down.sql
+++ b/backend/migrations/20241119062608_create_job_and_views.down.sql
@@ -1,4 +0,0 @@
-- Add down migration script here
-DROP TABLE job CASCADE;
-DROP VIEW queue_view CASCADE;
-DROP VIEW completed_job_view CASCADE;
--- a/backend/migrations/20241119062608_create_job_and_views.up.sql
+++ b/backend/migrations/20241119062608_create_job_and_views.up.sql
@@ -1,38 +0,0 @@
-- Add up migration script here
-CREATE TABLE job (
-  id UUID PRIMARY KEY,
-  raw_code TEXT,
-  raw_lock TEXT,
-  raw_flow jsonb NULL,
-  tag VARCHAR(50),
-  workspace_id VARCHAR(50)
-);
-
-- Create `queue_view` and `completed_job_view` views.
-DO $$
-DECLARE
-  t TEXT;
-BEGIN
-  FOR t IN VALUES ('queue'), ('completed_job') LOOP
-    EXECUTE format(
-      'CREATE OR REPLACE VIEW '||t||'_view AS
-       SELECT %s, job_logs.log_offset, job_logs.log_file_index FROM '||t||'
-       LEFT JOIN job ON '||t||'.id = job.id AND '||t||'.workspace_id = job.workspace_id
-       LEFT JOIN job_logs ON '||t||'.id = job_logs.job_id', (
-        SELECT string_agg(
-          CASE
-            WHEN column_name = 'logs' THEN -- Concatenate logs from base and job_logs.
-              'concat(coalesce('||t||'.logs, ''''), coalesce(job_logs.logs, '''')) as logs'
-            WHEN column_name IN ('raw_code', 'raw_lock', 'raw_flow') THEN -- Coalesce column from base and job.
-              format('coalesce('||t||'.%s, job.%s) as %s', column_name, column_name, column_name)
-            ELSE
-              format('%s.%s', t, column_name)
-          END,
-          ', '
-        )
-        FROM information_schema.columns
-        WHERE table_name = t
-      )
-    );
-  END LOOP;
-END $$;
--- a/backend/migrations/20241120084036_job_grant_all.down.sql
+++ b/backend/migrations/20241120084036_job_grant_all.down.sql
@@ -1 +0,0 @@
-- Add down migration script here
--- a/backend/migrations/20241120084036_job_grant_all.up.sql
+++ b/backend/migrations/20241120084036_job_grant_all.up.sql
@@ -1,3 +0,0 @@
-- Add up migration script here
-GRANT ALL ON job TO windmill_user;
-GRANT ALL ON job TO windmill_admin;
--- a/backend/parsers/windmill-parser-yaml/src/lib.rs
+++ b/backend/parsers/windmill-parser-yaml/src/lib.rs
@@ -198,7 +198,6 @@ pub enum ResourceOrVariablePath {
 pub struct FileResource {
    pub resource_path: ResourceOrVariablePath,
    pub target_path: String,
-    pub mode: Option<u32>,
 }

 #[derive(Debug, Clone)]
@@ -438,65 +437,36 @@ fn count_consecutive_vs(s: &str) -> usize {

 fn parse_file_resource(yaml: &Yaml) -> anyhow::Result<FileResource> {
    if let Yaml::Hash(f) = yaml {
-        let target_path = f
-            .get(&Yaml::String("target".to_string()))
-            .and_then(|x| x.as_str())
-            .map(|x| x.to_string())
-            .ok_or(anyhow!(
-                "No `target` provided for the file. Please input a target path (only relative paths are allowed) where the ansible playbook can read this file.",
-            ))?;
-
-        let mut mode = None;
-        if let Some(u) = f.get(&Yaml::String("mode".to_string())) {
-            let mode_val: u32 = match u {
-                Yaml::Integer(u) => {
-                    u.clone().try_into().map_err(|e| {
-                        anyhow!(
-                            "Invalid value for `mode` permissions property on targeted file to: {}, err: {e}",
-                            target_path
-                        )
-                    })?
-                }
-                Yaml::String(s) => {
-                    let val = if s.starts_with("0b") {
-                        u32::from_str_radix(&s[2..], 2)
-                    } else if s.starts_with("0o") {
-                        u32::from_str_radix(&s[2..], 8)
-                    } else if s.starts_with("0") {
-                        u32::from_str_radix(&s[1..], 8)
-                    } else {
-                        u32::from_str_radix(s, 8)
-                    };
-
-                    val.map_err(|e| anyhow!("Error parsing permission mode value {s}: {e}"))?
-                }
-                _ => {
-                    return Err(anyhow!("Invalid field in `mode`, expected integer like 0o644"));
-                }
-            };
-            if mode_val <= 0o777 {
-                mode = Some(mode_val);
-            } else {
-                return Err(anyhow!("The provided value for `mode` is too big. Make sure that you are using the octal prefix (0o), e.g. `mode: 0o644`"));
-            }
-        }
-
        if let Some(Yaml::String(resource_path)) = f.get(&Yaml::String("resource".to_string())) {
+            let target_path = f
+                .get(&Yaml::String("target".to_string()))
+                .and_then(|x| x.as_str())
+                .map(|x| x.to_string())
+                .ok_or(anyhow!(
+                    "No `target` provided for file resource {}. Please input a target relative path for the ansible playbook to see this file.",
+                    resource_path
+                ))?;
            return Ok(FileResource {
                resource_path: ResourceOrVariablePath::Resource(resource_path.clone()),
                target_path,
-                mode,
            });
        }
        if let Some(Yaml::String(resource_path)) = f.get(&Yaml::String("variable".to_string())) {
+            let target_path = f
+                .get(&Yaml::String("target".to_string()))
+                .and_then(|x| x.as_str())
+                .map(|x| x.to_string())
+                .ok_or(anyhow!(
+                    "No `target` provided for file resource {}. Please input a target relative path for the ansible playbook to see this file.",
+                    resource_path
+                ))?;
            return Ok(FileResource {
                resource_path: ResourceOrVariablePath::Variable(resource_path.clone()),
                target_path,
-                mode,
            });
        }
        return Err(anyhow!(
-            "Files should have a `resource` or `variable` field that will be the contents of the local text file"
+            "File resource should have a `resource` field, linking to a text file resource"
        ));
    }
    return Err(anyhow!("Invalid file resource: Should be a dictionary."));
--- a/backend/src/main.rs
+++ b/backend/src/main.rs
@@ -998,13 +998,13 @@ pub async fn run_workers<R: rsmq_async::RsmqConnection + Send + Sync + Clone + '
        LOCK_CACHE_DIR,
        TMP_LOGS_DIR,
        UV_CACHE_DIR,
+        PY311_CACHE_DIR,
+        PIP_CACHE_DIR,
        TAR_PIP_CACHE_DIR,
        DENO_CACHE_DIR,
        DENO_CACHE_DIR_DEPS,
        DENO_CACHE_DIR_NPM,
        BUN_CACHE_DIR,
-        PY311_CACHE_DIR,
-        PIP_CACHE_DIR,
        BUN_DEPSTAR_CACHE_DIR,
        BUN_BUNDLE_CACHE_DIR,
        GO_CACHE_DIR,
--- a/backend/src/monitor.rs
+++ b/backend/src/monitor.rs
@@ -34,12 +34,12 @@ use windmill_common::{
    error,
    flow_status::FlowStatusModule,
    global_settings::{
-        BASE_URL_SETTING, BUNFIG_INSTALL_SCOPES_SETTING, CRITICAL_ALERT_MUTE_UI_SETTING,
-        CRITICAL_ERROR_CHANNELS_SETTING, DEFAULT_TAGS_PER_WORKSPACE_SETTING,
-        DEFAULT_TAGS_WORKSPACES_SETTING, EXPOSE_DEBUG_METRICS_SETTING, EXPOSE_METRICS_SETTING,
-        EXTRA_PIP_INDEX_URL_SETTING, HUB_BASE_URL_SETTING, JOB_DEFAULT_TIMEOUT_SECS_SETTING,
-        JWT_SECRET_SETTING, KEEP_JOB_DIR_SETTING, LICENSE_KEY_SETTING, NPM_CONFIG_REGISTRY_SETTING,
-        OAUTH_SETTING, PIP_INDEX_URL_SETTING, REQUEST_SIZE_LIMIT_SETTING,
+        BASE_URL_SETTING, BUNFIG_INSTALL_SCOPES_SETTING, CRITICAL_ERROR_CHANNELS_SETTING,
+        DEFAULT_TAGS_PER_WORKSPACE_SETTING, DEFAULT_TAGS_WORKSPACES_SETTING,
+        EXPOSE_DEBUG_METRICS_SETTING, EXPOSE_METRICS_SETTING, EXTRA_PIP_INDEX_URL_SETTING,
+        HUB_BASE_URL_SETTING, JOB_DEFAULT_TIMEOUT_SECS_SETTING, JWT_SECRET_SETTING,
+        KEEP_JOB_DIR_SETTING, LICENSE_KEY_SETTING, NPM_CONFIG_REGISTRY_SETTING, OAUTH_SETTING,
+        PIP_INDEX_URL_SETTING, REQUEST_SIZE_LIMIT_SETTING, CRITICAL_ALERT_MUTE_UI_SETTING,
        REQUIRE_PREEXISTING_USER_FOR_OAUTH_SETTING, RETENTION_PERIOD_SECS_SETTING,
        SAML_METADATA_SETTING, SCIM_TOKEN_SETTING, TIMEOUT_WAIT_RESULT_SETTING,
    },
@@ -54,8 +54,8 @@ use windmill_common::{
        update_min_version, DEFAULT_TAGS_PER_WORKSPACE, DEFAULT_TAGS_WORKSPACES, SMTP_CONFIG,
        WORKER_CONFIG, WORKER_GROUP,
    },
-    BASE_URL, CRITICAL_ALERT_MUTE_UI_ENABLED, CRITICAL_ERROR_CHANNELS, DB, DEFAULT_HUB_BASE_URL,
-    HUB_BASE_URL, JOB_RETENTION_SECS, METRICS_DEBUG_ENABLED, METRICS_ENABLED,
+    BASE_URL, CRITICAL_ERROR_CHANNELS, DB, DEFAULT_HUB_BASE_URL, HUB_BASE_URL, JOB_RETENTION_SECS,
+    METRICS_DEBUG_ENABLED, METRICS_ENABLED, CRITICAL_ALERT_MUTE_UI_ENABLED
 };
 use windmill_queue::cancel_job;
 use windmill_worker::{
@@ -231,20 +231,13 @@ pub async fn load_tag_per_workspace_workspaces(db: &DB) -> error::Result<()> {
 }

 pub async fn reload_critical_alert_mute_ui_setting(db: &DB) -> error::Result<()> {
-    if let Ok(Some(serde_json::Value::Bool(t))) =
-        load_value_from_global_settings(db, CRITICAL_ALERT_MUTE_UI_SETTING).await
-    {
-        CRITICAL_ALERT_MUTE_UI_ENABLED.store(t, Ordering::Relaxed);
-
-        if t {
-            if let Err(e) = sqlx::query!("UPDATE alerts SET acknowledged = true")
-                .execute(db)
-                .await
-            {
-                tracing::error!("Error updating alerts: {}", e.to_string());
-            }
+    let mute = load_value_from_global_settings(db, CRITICAL_ALERT_MUTE_UI_SETTING).await;
+    match mute {
+        Ok(Some(serde_json::Value::Bool(t))) => {
+            CRITICAL_ALERT_MUTE_UI_ENABLED.store(t, Ordering::Relaxed);
        }
-    }
+        _ => (),
+    };
    Ok(())
 }

@@ -1330,7 +1323,7 @@ async fn handle_zombie_jobs<R: rsmq_async::RsmqConnection + Send + Sync + Clone>
                ON CONFLICT (job_id) DO UPDATE SET logs = job_logs.logs || '\nRestarted job after not receiving job''s ping for too long the ' || now() || '\n\n' WHERE job_logs.job_id = $1", r.id)
                .execute(db).await;
            tracing::error!(error_message);
-            report_critical_error(error_message, db.clone(), Some(&r.workspace_id), None).await;
+            report_critical_error(error_message, db.clone()).await;
        }
    }

@@ -1444,7 +1437,7 @@ async fn handle_zombie_flows(
                flow.id, flow.workspace_id
            );
            tracing::error!(error_message);
-            report_critical_error(error_message, db.clone(), Some(&flow.workspace_id), None).await;
+            report_critical_error(error_message, db.clone()).await;
            // if the flow hasn't started and is a zombie, we can simply restart it
            sqlx::query!(
                "UPDATE queue SET running = false, started_at = null WHERE id = $1 AND canceled = false",
@@ -1464,7 +1457,7 @@ async fn handle_zombie_flows(
                    format!("Flow {id} was cancelled because it")
                }
            );
-            report_critical_error(reason.clone(), db.clone(), Some(&flow.workspace_id), None).await;
+            report_critical_error(reason.clone(), db.clone()).await;
            cancel_zombie_flow_job(db, flow, &rsmq, reason).await?;
        }
    }
--- a/backend/tests/fixtures/result_format.sql
+++ b/backend/tests/fixtures/result_format.sql
@@ -1,5 +0,0 @@
-INSERT INTO public.completed_job (
-  id, workspace_id, created_by, created_at, duration_ms, success, flow_status, result, job_kind, language
-) VALUES (
-  '1eecb96a-c8b0-4a3d-b1b6-087878c55e41', 'test-workspace', 'test-user', '2023-01-01 00:00:00', 1000, true, '{"_metadata": {"column_order": ["b", "a"]}}', '[{"a": "second", "b": "first"}]', 'script', 'postgresql'
-)
--- a/backend/tests/worker.rs
+++ b/backend/tests/worker.rs
@@ -1,4 +1,3 @@
-use serde::de::DeserializeOwned;
 use std::str::FromStr;
 use windmill_api_client::types::{NewScript, NewScriptLanguage};

@@ -3613,71 +3612,3 @@ def main():
    run_deployed_relative_imports(&db, content.clone(), ScriptLang::Python3).await;
    run_preview_relative_imports(&db, content, ScriptLang::Python3).await;
 }
-
-#[sqlx::test(fixtures("base", "result_format"))]
-async fn test_result_format(db: Pool<Postgres>) {
-    let ordered_result_job_id = "1eecb96a-c8b0-4a3d-b1b6-087878c55e41";
-
-    set_jwt_secret().await;
-
-    let server = ApiServer::start(db.clone()).await;
-
-    let port = server.addr.port();
-
-    let token = windmill_worker::create_token_for_owner(
-        &db,
-        "test-workspace",
-        "u/test-user",
-        "",
-        100,
-        "",
-        &Uuid::nil(),
-    )
-    .await
-    .unwrap();
-
-    #[derive(Debug, Deserialize)]
-    struct JobResponse {
-        result: Option<Box<serde_json::value::RawValue>>,
-    }
-
-    async fn get_result<T: DeserializeOwned>(url: String) -> T {
-        reqwest::get(url)
-            .await
-            .unwrap()
-            .error_for_status()
-            .unwrap()
-            .json()
-            .await
-            .unwrap()
-    }
-
-    let correct_result = r#"[{"b":"first","a":"second"}]"#;
-
-    let job_response: JobResponse = get_result(format!("http://localhost:{port}/api/w/test-workspace/jobs_u/get/{ordered_result_job_id}?token={token}&no_logs=true")).await;
-    assert_eq!(job_response.result.unwrap().get(), correct_result);
-
-    let job_response: JobResponse = get_result(format!("http://localhost:{port}/api/w/test-workspace/jobs_u/completed/get_result_maybe/{ordered_result_job_id}?token={token}&no_logs=true")).await;
-    assert_eq!(job_response.result.unwrap().get(), correct_result);
-
-    let job_result: Box<serde_json::value::RawValue> = get_result(format!("http://localhost:{port}/api/w/test-workspace/jobs_u/completed/get_result/{ordered_result_job_id}?token={token}&no_logs=true")).await;
-    assert_eq!(job_result.get(), correct_result);
-
-    let response = windmill_api::jobs::run_wait_result(
-        &db,
-        Uuid::parse_str(ordered_result_job_id).unwrap(),
-        "test-workspace".to_string(),
-        None,
-        "test-user",
-    )
-    .await
-    .unwrap();
-    let result: Box<serde_json::value::RawValue> = serde_json::from_slice(
-        &axum::body::to_bytes(response.into_body(), usize::MAX)
-            .await
-            .unwrap()
-            .to_vec(),
-    )
-    .unwrap();
-    assert_eq!(result.get(), correct_result);
-}
--- a/backend/windmill-api/Cargo.toml
+++ b/backend/windmill-api/Cargo.toml
@@ -19,7 +19,6 @@ parquet = ["dep:datafusion", "dep:object_store", "dep:url", "windmill-common/par
 prometheus = ["windmill-common/prometheus", "windmill-queue/prometheus", "dep:prometheus"]
 openidconnect = ["dep:openidconnect"]
 tantivy = ["dep:windmill-indexer"]
-kafka = ["dep:rdkafka"]

 [dependencies]
 windmill-queue.workspace = true
@@ -97,7 +96,6 @@ url = { workspace = true, optional = true}
 jsonwebtoken = { workspace = true }
 matchit.workspace = true
 tokio-tungstenite.workspace = true
-rdkafka = { workspace = true, optional = true }

 pin-project.workspace = true
 http.workspace = true
--- a/backend/windmill-api/openapi-deref.json
+++ b/backend/windmill-api/openapi-deref.json
@@ -1,7 +1,7 @@
 {
  "openapi": "3.0.3",
  "info": {
-    "version": "1.423.2",
+    "version": "1.418.0",
    "title": "Windmill API",
    "contact": {
      "name": "Windmill Team",
@@ -286,7 +286,7 @@
        }
      }
    },
-    "/w/{workspace}/users/get/{username}": {
+    "/w/{workspace}/users/{username}": {
      "get": {
        "summary": "get user (require admin privilege)",
        "operationId": "getUser",
@@ -436,106 +436,6 @@
        }
      }
    },
-    "/users/set_password_of/{user}": {
-      "post": {
-        "summary": "set password for a specific user (require super admin)",
-        "operationId": "setPasswordForUser",
-        "tags": [
-          "user"
-        ],
-        "parameters": [
-          {
-            "name": "user",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            }
-          }
-        ],
-        "requestBody": {
-          "description": "set password",
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "properties": {
-                  "password": {
-                    "type": "string"
-                  }
-                },
-                "required": [
-                  "password"
-                ]
-              }
-            }
-          }
-        },
-        "responses": {
-          "200": {
-            "description": "password set",
-            "content": {
-              "text/plain": {
-                "schema": {
-                  "type": "string"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
-    "/users/set_login_type/{user}": {
-      "post": {
-        "summary": "set login type for a specific user (require super admin)",
-        "operationId": "setLoginTypeForUser",
-        "tags": [
-          "user"
-        ],
-        "parameters": [
-          {
-            "name": "user",
-            "in": "path",
-            "required": true,
-            "schema": {
-              "type": "string"
-            }
-          }
-        ],
-        "requestBody": {
-          "description": "set login type",
-          "required": true,
-          "content": {
-            "application/json": {
-              "schema": {
-                "type": "object",
-                "properties": {
-                  "login_type": {
-                    "type": "string"
-                  }
-                },
-                "required": [
-                  "login_type"
-                ]
-              }
-            }
-          }
-        },
-        "responses": {
-          "200": {
-            "description": "login type set",
-            "content": {
-              "text/plain": {
-                "schema": {
-                  "type": "string"
-                }
-              }
-            }
-          }
-        }
-      }
-    },
    "/users/create": {
      "post": {
        "summary": "create user",
@@ -1205,9 +1105,6 @@
                      },
                      "tls_implicit": {
                        "type": "boolean"
-                      },
-                      "disable_tls": {
-                        "type": "boolean"
                      }
                    },
                    "required": [
@@ -1216,8 +1113,7 @@
                      "password",
                      "port",
                      "from",
-                      "tls_implicit",
-                      "disable_tls"
+                      "tls_implicit"
                    ]
                  }
                },
@@ -2564,8 +2460,8 @@
                    "deploy_to": {
                      "type": "string"
                    },
-                    "ai_resource": {
-                      "$ref": "#/components/schemas/AiResource"
+                    "openai_resource_path": {
+                      "type": "string"
                    },
                    "code_completion_enabled": {
                      "type": "boolean"
@@ -3005,8 +2901,8 @@
                  "code_completion_enabled"
                ],
                "properties": {
-                  "ai_resource": {
-                    "$ref": "#/components/schemas/AiResource"
+                  "openai_resource_path": {
+                    "type": "string"
                  },
                  "code_completion_enabled": {
                    "type": "boolean"
@@ -3050,10 +2946,7 @@
                "schema": {
                  "type": "object",
                  "properties": {
-                    "ai_provider": {
-                      "type": "string"
-                    },
-                    "exists_ai_resource": {
+                    "exists_openai_resource_path": {
                      "type": "boolean"
                    },
                    "code_completion_enabled": {
@@ -3061,8 +2954,7 @@
                    }
                  },
                  "required": [
-                    "ai_provider",
-                    "exists_ai_resource",
+                    "exists_openai_resource_path",
                    "code_completion_enabled"
                  ]
                }
@@ -13268,30 +13160,6 @@
        }
      }
    },
-    "/workers/queue_counts": {
-      "get": {
-        "summary": "get counts of jobs waiting for an executor per tag",
-        "operationId": "getCountsOfJobsWaitingPerTag",
-        "tags": [
-          "worker"
-        ],
-        "responses": {
-          "200": {
-            "description": "queue counts",
-            "content": {
-              "application/json": {
-                "schema": {
-                  "type": "object",
-                  "additionalProperties": {
-                    "type": "integer"
-                  }
-                }
-              }
-            }
-          }
-        }
-      }
-    },
    "/configs/list_worker_groups": {
      "get": {
        "summary": "list worker groups",
@@ -14942,20 +14810,6 @@
            "schema": {
              "type": "string"
            }
-          },
-          {
-            "name": "content_type",
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
-          },
-          {
-            "name": "content_disposition",
-            "in": "query",
-            "schema": {
-              "type": "string"
-            }
          }
        ],
        "requestBody": {
@@ -16262,21 +16116,6 @@
      }
    },
    "schemas": {
-      "AiResource": {
-        "type": "object",
-        "properties": {
-          "path": {
-            "type": "string"
-          },
-          "provider": {
-            "type": "string"
-          }
-        },
-        "required": [
-          "path",
-          "provider"
-        ]
-      },
      "Script": {
        "type": "object",
        "properties": {
@@ -17387,7 +17226,7 @@
              "jobs.disapproval",
              "jobs.delete",
              "account.delete",
-              "ai.request",
+              "openai.request",
              "resources.create",
              "resources.update",
              "resources.delete",
@@ -18228,23 +18067,6 @@
          "route_path": {
            "type": "string"
          },
-          "static_asset_config": {
-            "type": "object",
-            "properties": {
-              "s3": {
-                "type": "string"
-              },
-              "storage": {
-                "type": "string"
-              },
-              "filename": {
-                "type": "string"
-              }
-            },
-            "required": [
-              "s3"
-            ]
-          },
          "is_flow": {
            "type": "boolean"
          },
@@ -18304,23 +18126,6 @@
          "route_path": {
            "type": "string"
          },
-          "static_asset_config": {
-            "type": "object",
-            "properties": {
-              "s3": {
-                "type": "string"
-              },
-              "storage": {
-                "type": "string"
-              },
-              "filename": {
-                "type": "string"
-              }
-            },
-            "required": [
-              "s3"
-            ]
-          },
          "is_flow": {
            "type": "boolean"
          },
@@ -18363,23 +18168,6 @@
          "route_path": {
            "type": "string"
          },
-          "static_asset_config": {
-            "type": "object",
-            "properties": {
-              "s3": {
-                "type": "string"
-              },
-              "storage": {
-                "type": "string"
-              },
-              "filename": {
-                "type": "string"
-              }
-            },
-            "required": [
-              "s3"
-            ]
-          },
          "is_flow": {
            "type": "boolean"
          },
@@ -19129,12 +18917,6 @@
              "type": "object"
            }
          },
-          "s3_inputs": {
-            "type": "array",
-            "items": {
-              "type": "object"
-            }
-          },
          "execution_mode": {
            "type": "string",
            "enum": [
--- a/backend/windmill-api/openapi-deref.yaml
+++ b/backend/windmill-api/openapi-deref.yaml
--- a/backend/windmill-api/openapi.yaml
+++ b/backend/windmill-api/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: "3.0.3"

 info:
-  version: 1.429.0
+  version: 1.423.2
  title: Windmill API

  contact:
@@ -1681,8 +1681,8 @@ paths:
                    type: string
                  deploy_to:
                    type: string
-                  ai_resource:
-                    $ref: "#/components/schemas/AiResource"
+                  openai_resource_path:
+                    type: string
                  code_completion_enabled:
                    type: boolean
                  error_handler:
@@ -1701,8 +1701,6 @@ paths:
                    type: string
                  default_scripts:
                    $ref: "#/components/schemas/WorkspaceDefaultScripts"
-                  mute_critical_alerts:
-                    type: boolean
                required:
                  - code_completion_enabled
                  - automatic_billing
@@ -1968,8 +1966,8 @@ paths:
              required:
                - code_completion_enabled
              properties:
-                ai_resource:
-                  $ref: "#/components/schemas/AiResource"
+                openai_resource_path:
+                  type: string
                code_completion_enabled:
                  type: boolean
      responses:
@@ -1997,15 +1995,12 @@ paths:
              schema:
                type: object
                properties:
-                  ai_provider:
-                    type: string
-                  exists_ai_resource:
+                  exists_openai_resource_path:
                    type: boolean
                  code_completion_enabled:
                    type: boolean
                required:
-                  - ai_provider
-                  - exists_ai_resource
+                  - exists_openai_resource_path
                  - code_completion_enabled

  /w/{workspace}/workspaces/edit_error_handler:
@@ -2332,12 +2327,9 @@ paths:
                    type: boolean
                  websocket_used:
                    type: boolean
-                  kafka_used:
-                    type: boolean
                required:
                  - http_routes_used
                  - websocket_used
-                  - kafka_used

  /w/{workspace}/users/list:
    get:
@@ -2722,112 +2714,6 @@ paths:
                items:
                  $ref: "#/components/schemas/ContextualVariable"

-  /w/{workspace}/workspaces/critical_alerts:
-    get:
-      summary: Get all critical alerts for this workspace
-      operationId: workspaceGetCriticalAlerts
-      tags:
-        - setting
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - in: query
-          name: page
-          schema:
-            type: integer
-            default: 1
-            description: The page number to retrieve (minimum value is 1)
-        - in: query
-          name: page_size
-          schema:
-            type: integer
-            default: 10
-            maximum: 100
-            description: Number of alerts per page (maximum is 100)
-        - in: query
-          name: acknowledged
-          schema:
-            type: boolean
-            nullable: true
-            description: Filter by acknowledgment status; true for acknowledged, false for unacknowledged, and omit for all alerts
-      responses:
-        "200":
-          description: Successfully retrieved all critical alerts
-          content:
-            application/json:
-              schema:
-                type: array
-                items:
-                  $ref: '#/components/schemas/CriticalAlert'
-
-  /w/{workspace}/workspaces/critical_alerts/{id}/acknowledge:
-    post:
-      summary: Acknowledge a critical alert for this workspace
-      operationId: workspaceAcknowledgeCriticalAlert
-      tags:
-        - setting
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - in: path
-          name: id
-          required: true
-          schema:
-            type: integer
-          description: The ID of the critical alert to acknowledge
-      responses:
-        "200":
-          description: Successfully acknowledged the critical alert
-          content:
-            application/json:
-              schema:
-                type: string
-                example: "Critical alert acknowledged"
-
-  /w/{workspace}/workspaces/critical_alerts/acknowledge_all:
-    post:
-      summary: Acknowledge all unacknowledged critical alerts for this workspace
-      operationId: workspaceAcknowledgeAllCriticalAlerts
-      tags:
-        - setting
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      responses:
-        "200":
-          description: Successfully acknowledged all unacknowledged critical alerts.
-          content:
-            application/json:
-              schema:
-                type: string
-                example: "All unacknowledged critical alerts acknowledged"
-
-  /w/{workspace}/workspaces/critical_alerts/mute:
-    post:
-      summary: Mute critical alert UI for this workspace
-      operationId: workspaceMuteCriticalAlertsUI
-      tags:
-        - setting
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      requestBody:
-        description: Boolean flag to mute critical alerts.
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                mute_critical_alerts:
-                  type: boolean
-                  description: Whether critical alerts should be muted.
-                  example: true
-      responses:
-        '200':
-          description: Successfully updated mute critical alert settings.
-          content:
-            application/json:
-              schema:
-                type: string
-                example: "Updated mute critical alert UI settings for workspace: workspace_id"
-
  /oauth/login_callback/{client_name}:
    post:
      security: []
@@ -6165,39 +6051,6 @@ paths:
                required:
                  - database_length

-  /w/{workspace}/jobs/completed/count_jobs:
-    get:
-      summary: count number of completed jobs with filter
-      operationId: countCompletedJobs
-      tags:
-        - job
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - name: completed_after_s_ago
-          in: query
-          schema:
-            type: integer
-        - name: success
-          in: query
-          schema:
-            type: boolean
-        - name: tags
-          in: query
-          schema:
-            type: string
-        - name: all_workspaces
-          in: query
-          schema:
-            type: boolean
-      responses:
-        "200":
-          description: Count of completed jobs
-          content:
-            application/json:
-              schema:
-                type: integer
-
-
  /w/{workspace}/jobs/queue/list_filtered_uuids:
    get:
      summary: get the ids of all jobs matching the given filters
@@ -7688,169 +7541,6 @@ paths:
              schema:
                type: string

-  /w/{workspace}/kafka_triggers/create:
-    post:
-      summary: create kafka trigger
-      operationId: createKafkaTrigger
-      tags:
-        - kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-      requestBody:
-        description: new kafka trigger
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/NewKafkaTrigger"
-      responses:
-        "201":
-          description: kafka trigger created
-          content:
-            text/plain:
-              schema:
-                type: string
-
-  /w/{workspace}/kafka_triggers/update/{path}:
-    post:
-      summary: update kafka trigger
-      operationId: updateKafkaTrigger
-      tags:
-        - kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - $ref: "#/components/parameters/Path"
-      requestBody:
-        description: updated trigger
-        required: true
-        content:
-          application/json:
-            schema:
-              $ref: "#/components/schemas/EditKafkaTrigger"
-      responses:
-        "200":
-          description: kafka trigger updated
-          content:
-            text/plain:
-              schema:
-                type: string
-
-  /w/{workspace}/kafka_triggers/delete/{path}:
-    delete:
-      summary: delete kafka trigger
-      operationId: deleteKafkaTrigger
-      tags:
-        -  kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - $ref: "#/components/parameters/Path"
-      responses:
-        "200":
-          description: kafka trigger deleted
-          content:
-            text/plain:
-              schema:
-                type: string
-
-  /w/{workspace}/kafka_triggers/get/{path}:
-    get:
-      summary: get kafka trigger
-      operationId: getKafkaTrigger
-      tags:
-        - kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - $ref: "#/components/parameters/Path"
-      responses:
-        "200":
-          description: kafka trigger deleted
-          content:
-            application/json:
-              schema:
-                $ref: "#/components/schemas/KafkaTrigger"
-
-  
-  /w/{workspace}/kafka_triggers/list:
-    get:
-      summary: list kafka triggers
-      operationId: listKafkaTriggers
-      tags:
-        - kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-          required: true
-        - $ref: "#/components/parameters/Page"
-        - $ref: "#/components/parameters/PerPage"
-        - name: path
-          description: filter by path
-          in: query
-          schema:
-            type: string
-        - name: is_flow
-          in: query
-          schema:
-            type: boolean
-        - name: path_start
-          in: query
-          schema:
-            type: string
-      responses:
-        "200":
-          description: kafka trigger list
-          content:
-            application/json:
-              schema:
-                type: array
-                items:
-                  $ref: "#/components/schemas/KafkaTrigger"
-
-  
-  /w/{workspace}/kafka_triggers/exists/{path}:
-    get:
-      summary: does kafka trigger exists
-      operationId: existsKafkaTrigger
-      tags:
-        - kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - $ref: "#/components/parameters/Path"
-      responses:
-        "200":
-          description: kafka trigger exists
-          content:
-            application/json:
-              schema:
-                type: boolean
-
-  /w/{workspace}/kafka_triggers/setenabled/{path}:
-    post:
-      summary: set enabled kafka trigger
-      operationId: setKafkaTriggerEnabled
-      tags:
-        - kafka_trigger
-      parameters:
-        - $ref: "#/components/parameters/WorkspaceId"
-        - $ref: "#/components/parameters/Path"
-      requestBody:
-        description: updated kafka trigger enable
-        required: true
-        content:
-          application/json:
-            schema:
-              type: object
-              properties:
-                enabled:
-                  type: boolean
-              required:
-                - enabled
-      responses:
-        "200":
-          description: kafka trigger enabled set
-          content:
-            text/plain:
-              schema:
-                type: string
-

  /groups/list:
    get:
@@ -8720,7 +8410,6 @@ paths:
                raw_app,
                http_trigger,
                websocket_trigger,
-                kafka_trigger,
              ]
      responses:
        "200":
@@ -8759,7 +8448,6 @@ paths:
                raw_app,
                http_trigger,
                websocket_trigger,
-                kafka_trigger,
              ]
      requestBody:
        description: acl to add
@@ -8809,7 +8497,6 @@ paths:
                raw_app,
                http_trigger,
                websocket_trigger,
-                kafka_trigger,
              ]
      requestBody:
        description: acl to add
@@ -10507,16 +10194,6 @@ components:
  schemas:
    $ref: "../../openflow.openapi.yaml#/components/schemas"

-    AiResource:
-      type: object
-      properties:
-        path:
-          type: string
-        provider:
-          type: string
-      required:
-        - path
-        - provider
    Script:
      type: object
      properties:
@@ -11335,7 +11012,7 @@ components:
            - "jobs.disapproval"
            - "jobs.delete"
            - "account.delete"
-            - "ai.request"
+            - "openai.request"
            - "resources.create"
            - "resources.update"
            - "resources.delete"
@@ -12101,8 +11778,6 @@ components:
          type: number
        websocket_count:
          type: number
-        kafka_count:
-          type: number

    WebsocketTrigger:
      type: object
@@ -12274,114 +11949,6 @@ components:
          required: 
            - runnable_result

-    KafkaTrigger:
-      type: object
-      properties:
-        path:
-          type: string
-        edited_by:
-          type: string
-        edited_at:
-          type: string
-          format: date-time
-        script_path:
-          type: string
-        kafka_resource_path:
-          type: string
-        group_id:
-          type: string
-        topics:
-          type: array
-          items:
-            type: string
-        is_flow:
-          type: boolean
-        extra_perms:
-          type: object
-          additionalProperties:
-            type: boolean
-        email:
-          type: string
-        workspace_id:
-          type: string
-        server_id:
-          type: string
-        last_server_ping:
-          type: string
-          format: date-time
-        error:
-          type: string
-        enabled:
-          type: boolean
-        
-      required:
-        - path
-        - edited_by
-        - edited_at
-        - script_path
-        - kafka_resource_path
-        - group_id
-        - topics
-        - extra_perms
-        - is_flow
-        - email
-        - workspace_id
-        - enabled
-
-    NewKafkaTrigger:
-      type: object
-      properties:
-        path:
-          type: string
-        script_path:
-          type: string
-        is_flow:
-          type: boolean
-        kafka_resource_path:
-          type: string
-        group_id:
-          type: string
-        topics:
-          type: array
-          items:
-            type: string
-        enabled:
-          type: boolean
-        
-      required:
-        - path
-        - script_path
-        - is_flow
-        - kafka_resource_path
-        - group_id
-        - topics
-
-    EditKafkaTrigger:
-      type: object
-      properties:
-        kafka_resource_path:
-          type: string
-        group_id:
-          type: string
-        topics:
-          type: array
-          items:
-            type: string
-        path:
-          type: string
-        script_path:
-          type: string
-        is_flow:
-          type: boolean
-              
-      required:
-        - path
-        - script_path
-        - kafka_resource_path
-        - group_id
-        - topics
-        - is_flow
-
    Group:
      type: object
      properties:
@@ -13332,7 +12899,3 @@ components:
          type: boolean
          nullable: true
          description: Acknowledgment status of the alert, can be true, false, or null if not set
-        workspace_id:
-          type: string
-          nullable: true
-          description: Workspace id if the alert is in the scope of a workspace
--- a/backend/windmill-api/src/ai.rs
+++ b/backend/windmill-api/src/ai.rs
@@ -1,507 +0,0 @@
-use crate::{
-    db::{ApiAuthed, DB},
-    variables::decrypt,
-};
-use anthropic::AnthropicCache;
-use axum::{
-    body::Bytes,
-    extract::{Path, Query},
-    response::IntoResponse,
-    routing::post,
-    Extension, Router,
-};
-use lazy_static::lazy_static;
-use mistral::MistralCache;
-use openai::OpenaiCache;
-use quick_cache::sync::Cache;
-use reqwest::{Client, RequestBuilder};
-use serde::{Deserialize, Deserializer};
-use windmill_audit::audit_ee::audit_log;
-use windmill_audit::ActionKind;
-use windmill_common::error::{to_anyhow, Result};
-use windmill_common::variables::build_crypt;
-
-use windmill_common::error::Error;
-
-use serde_json::value::{RawValue, Value};
-use std::collections::HashMap;
-
-lazy_static::lazy_static! {
-    static ref HTTP_CLIENT: Client = reqwest::ClientBuilder::new()
-        .timeout(std::time::Duration::from_secs(60 * 5))
-        .user_agent("windmill/beta")
-        .build().unwrap();
-}
-
-trait AiRequest {
-    fn prepare_request(self, path: &str, body: Bytes) -> Result<RequestBuilder>;
-}
-
-mod openai {
-    use super::*;
-
-    use super::{get_variable_or_self, KeyCache};
-
-    const API_VERSION: &str = "2023-05-15";
-
-    #[derive(Deserialize, Debug)]
-    struct OpenaiResource {
-        api_key: String,
-        organization_id: Option<String>,
-    }
-
-    #[derive(Deserialize, Debug)]
-    struct OpenaiClientCredentialsOauthResource {
-        client_id: String,
-        client_secret: String,
-        token_url: String,
-        user: Option<String>,
-    }
-
-    #[derive(Deserialize, Debug)]
-    #[serde(untagged, rename_all = "snake_case")]
-    enum OpenaiConfig {
-        Resource(OpenaiResource),
-        ClientCredentialsOauthResource(OpenaiClientCredentialsOauthResource),
-    }
-
-    lazy_static::lazy_static! {
-        pub static ref OPENAI_AZURE_BASE_PATH: Option<String> = std::env::var("OPENAI_AZURE_BASE_PATH").ok();
-    }
-
-    #[derive(Deserialize, Debug)]
-    struct OpenaiCredentials {
-        access_token: String,
-    }
-
-    #[derive(Clone, Debug, Deserialize)]
-    pub struct OpenaiCache {
-        api_key: String,
-        organization_id: Option<String>,
-        azure_base_path: Option<String>,
-        user: Option<String>,
-    }
-
-    impl OpenaiCache {
-        pub fn new(
-            api_key: String,
-            organization_id: Option<String>,
-            azure_base_path: Option<String>,
-            user: Option<String>,
-        ) -> Self {
-            Self { api_key, organization_id, azure_base_path, user }
-        }
-    }
-
-    const BASE_URL: &str = "https://api.openai.com/v1";
-    impl AiRequest for OpenaiCache {
-        fn prepare_request(self, openai_path: &str, mut body: Bytes) -> Result<RequestBuilder> {
-            let OpenaiCache { api_key, azure_base_path, organization_id, user } = self;
-            if user.is_some() {
-                tracing::debug!("Adding user to request body");
-                let mut json_body: HashMap<String, Box<RawValue>> = serde_json::from_slice(&body)
-                    .map_err(|e| {
-                    Error::InternalErr(format!("Failed to parse request body: {}", e))
-                })?;
-
-                let user_json_string = serde_json::Value::String(user.unwrap()).to_string(); // makes sure to escape characters
-
-                json_body.insert(
-                    "user".to_string(),
-                    RawValue::from_string(user_json_string)
-                        .map_err(|e| Error::InternalErr(format!("Failed to parse user: {}", e)))?,
-                );
-
-                body = serde_json::to_vec(&json_body)
-                    .map_err(|e| {
-                        Error::InternalErr(format!("Failed to reserialize request body: {}", e))
-                    })?
-                    .into();
-            }
-
-            let base_url = if let Some(base_url) = azure_base_path {
-                base_url
-            } else {
-                BASE_URL.to_string()
-            };
-            let url = format!("{}/{}", base_url, openai_path);
-            let mut request = HTTP_CLIENT
-                .post(url)
-                .header("content-type", "application/json")
-                .body(body);
-
-            if base_url != BASE_URL {
-                request = request
-                    .header("api-key", api_key)
-                    .query(&[("api-version", API_VERSION)])
-            } else {
-                request = request.header("authorization", format!("Bearer {}", api_key))
-            }
-
-            if let Some(org_id) = organization_id {
-                request = request.header("OpenAI-Organization", org_id);
-            }
-
-            Ok(request)
-        }
-    }
-
-    async fn get_openai_key_using_credentials_flow(
-        mut resource: OpenaiClientCredentialsOauthResource,
-        db: &DB,
-        w_id: &str,
-    ) -> Result<String> {
-        resource.client_id = get_variable_or_self(resource.client_id, db, w_id).await?;
-        resource.client_secret = get_variable_or_self(resource.client_secret, db, w_id).await?;
-        resource.token_url = get_variable_or_self(resource.token_url, db, w_id).await?;
-        let mut params = HashMap::new();
-        params.insert("grant_type", "client_credentials");
-        let response = HTTP_CLIENT
-            .post(resource.token_url)
-            .form(&params)
-            .basic_auth(resource.client_id, Some(resource.client_secret))
-            .send()
-            .await
-            .map_err(|err| {
-                Error::InternalErr(format!(
-                    "Failed to get OpenAI credentials using credentials flow: {}",
-                    err
-                ))
-            })?;
-        let response = response.json::<OpenaiCredentials>().await.map_err(|err| {
-            Error::InternalErr(format!(
-                "Failed to parse OpenAI credentials from credentials flow: {}",
-                err
-            ))
-        })?;
-        Ok(response.access_token)
-    }
-
-    pub async fn get_cached_value(db: &DB, w_id: &str, resource: Value) -> Result<KeyCache> {
-        let config = serde_json::from_value(resource)
-            .map_err(|e| Error::InternalErr(format!("validating openai resource {e:#}")))?;
-
-        let mut user = None::<String>;
-        let mut resource = match config {
-            OpenaiConfig::Resource(resource) => {
-                tracing::debug!("Getting OpenAI key from static resource");
-                resource
-            }
-            OpenaiConfig::ClientCredentialsOauthResource(resource) => {
-                tracing::debug!("Getting OpenAI key with client credentials flow");
-                user = resource.user.clone();
-                let token = get_openai_key_using_credentials_flow(resource, db, w_id).await?;
-                OpenaiResource { api_key: token, organization_id: None }
-            }
-        };
-
-        resource.api_key = get_variable_or_self(resource.api_key, db, w_id).await?;
-
-        if let Some(organization_id) = resource.organization_id {
-            resource.organization_id = Some(get_variable_or_self(organization_id, db, w_id).await?);
-        }
-
-        if user.is_some() {
-            user = Some(get_variable_or_self(user.unwrap(), db, w_id).await?);
-        }
-
-        let azure_base_path = sqlx::query_scalar!(
-            "SELECT value
-            FROM global_settings
-            WHERE name = 'openai_azure_base_path'",
-        )
-        .fetch_optional(db)
-        .await?;
-
-        let azure_base_path = if let Some(azure_base_path) = azure_base_path {
-            Some(
-                serde_json::from_value::<String>(azure_base_path).map_err(|e| {
-                    Error::InternalErr(format!("validating openai azure base path {e:#}"))
-                })?,
-            )
-        } else {
-            OPENAI_AZURE_BASE_PATH.clone()
-        };
-
-        let workspace_cache = OpenaiCache::new(
-            resource.api_key.clone(),
-            resource.organization_id.clone(),
-            azure_base_path.clone(),
-            user.clone(),
-        );
-        Ok(KeyCache::Openai(workspace_cache))
-    }
-}
-
-mod anthropic {
-
-    use super::*;
-
-    #[derive(Clone, Deserialize, Debug)]
-    pub struct AnthropicCache {
-        #[serde(rename = "apiKey")]
-        pub api_key: String,
-    }
-
-    const API_VERSION: &str = "2023-06-01";
-
-    impl AnthropicCache {
-        pub fn new(api_key: String) -> Self {
-            Self { api_key }
-        }
-    }
-
-    const BASE_URL: &str = "https://api.anthropic.com";
-    impl AiRequest for AnthropicCache {
-        fn prepare_request(self, anthropic_path: &str, body: Bytes) -> Result<RequestBuilder> {
-            let AnthropicCache { api_key } = self;
-            let url = format!("{}/{}", BASE_URL, anthropic_path);
-            let request = HTTP_CLIENT
-                .post(url)
-                .header("x-api-key", api_key)
-                .header("anthropic-version", API_VERSION)
-                .header("content-type", "application/json")
-                .body(body);
-            Ok(request)
-        }
-    }
-
-    pub async fn get_cached_value(db: &DB, w_id: &str, resource: Value) -> Result<KeyCache> {
-        let mut resource: AnthropicCache = serde_json::from_value(resource)
-            .map_err(|e| Error::InternalErr(format!("validating anthropic resource {e:#}")))?;
-        resource.api_key = get_variable_or_self(resource.api_key, db, w_id).await?;
-        let workspace_cache = AnthropicCache::new(resource.api_key);
-        Ok(KeyCache::Anthropic(workspace_cache))
-    }
-}
-
-mod mistral {
-    use super::*;
-    #[derive(Deserialize, Clone, Debug)]
-    pub struct MistralCache {
-        #[serde(rename = "apiKey")]
-        pub api_key: String,
-    }
-
-    impl MistralCache {
-        pub fn new(api_key: String) -> Self {
-            Self { api_key }
-        }
-    }
-
-    const BASE_URL: &str = "https://api.mistral.ai";
-    impl AiRequest for MistralCache {
-        fn prepare_request(self, mistral_path: &str, body: Bytes) -> Result<RequestBuilder> {
-            let MistralCache { api_key } = self;
-
-            let url = format!("{}/{}", BASE_URL, mistral_path);
-            let request = HTTP_CLIENT
-                .post(url)
-                .header("content-type", "application/json")
-                .header("Accept", "application/json")
-                .header("authorization", format!("Bearer {}", api_key))
-                .body(body);
-            Ok(request)
-        }
-    }
-
-    pub async fn get_cached_value(db: &DB, w_id: &str, resource: Value) -> Result<KeyCache> {
-        let mut resource: MistralCache = serde_json::from_value(resource)
-            .map_err(|e| Error::InternalErr(format!("validating mistral resource {e:#}")))?;
-        resource.api_key = get_variable_or_self(resource.api_key, db, w_id).await?;
-
-        let workspace_cache = MistralCache::new(resource.api_key);
-        Ok(KeyCache::Mistral(workspace_cache))
-    }
-}
-
-#[derive(Clone, Debug)]
-pub enum KeyCache {
-    Openai(OpenaiCache),
-    Anthropic(AnthropicCache),
-    Mistral(MistralCache),
-}
-
-#[derive(Clone, Debug)]
-pub struct AiCache {
-    pub path: String,
-    pub cached_key: KeyCache,
-    pub expires_at: std::time::Instant,
-}
-
-impl AiCache {
-    pub fn new(path: String, cached_key: KeyCache) -> Self {
-        Self {
-            path,
-            cached_key,
-            expires_at: std::time::Instant::now() + std::time::Duration::from_secs(60),
-        }
-    }
-    fn is_expired(&self) -> bool {
-        self.expires_at < std::time::Instant::now()
-    }
-}
-
-lazy_static! {
-    pub static ref AI_KEY_CACHE: Cache<String, AiCache> = Cache::new(500);
-}
-
-struct Variable {
-    value: String,
-    is_secret: bool,
-}
-
-#[derive(Deserialize, Debug)]
-struct ProxyQueryParams {
-    no_cache: Option<bool>,
-}
-
-async fn get_variable_or_self(path: String, db: &DB, w_id: &str) -> Result<String> {
-    if !path.starts_with("$var:") {
-        return Ok(path);
-    }
-    let path = path.strip_prefix("$var:").unwrap().to_string();
-    let mut variable = sqlx::query_as!(
-        Variable,
-        "SELECT value, is_secret
-        FROM variable
-        WHERE path = $1 AND workspace_id = $2",
-        &path,
-        &w_id
-    )
-    .fetch_one(db)
-    .await?;
-    if variable.is_secret {
-        let mc = build_crypt(db, w_id).await?;
-        variable.value = decrypt(&mc, variable.value)?;
-    }
-    Ok(variable.value)
-}
-
-#[derive(Deserialize, Debug)]
-pub struct AiResource {
-    pub path: String,
-    #[serde(deserialize_with = "check_if_valid_ai_provider")]
-    pub provider: String,
-}
-
-fn check_if_valid_ai_provider<'de, D>(provider: D) -> std::result::Result<String, D::Error>
-where
-    D: Deserializer<'de>,
-{
-    let provider = String::deserialize(provider)?;
-    match provider.as_str() {
-        "anthropic" | "openai" | "mistral" => Ok(provider),
-        _ => Err(serde::de::Error::custom(
-            "Only the following Ai providers are supported: openai, anthropic and mistral"
-                .to_string(),
-        )),
-    }
-}
-
-pub fn workspaced_service() -> Router {
-    let router = Router::new().route("/proxy/*ai", post(proxy));
-
-    router
-}
-
-async fn proxy(
-    authed: ApiAuthed,
-    Extension(db): Extension<DB>,
-    Path((w_id, ai_path)): Path<(String, String)>,
-    Query(query_params): Query<ProxyQueryParams>,
-    body: Bytes,
-) -> impl IntoResponse {
-    let workspace_cache = AI_KEY_CACHE.get(&w_id);
-    let ai_cache = match workspace_cache {
-        Some(cache) if !cache.is_expired() && !query_params.no_cache.unwrap_or(false) => {
-            cache.cached_key
-        }
-        _ => {
-            let ai_resource = sqlx::query_scalar!(
-                "SELECT ai_resource FROM workspace_settings WHERE workspace_id = $1",
-                &w_id
-            )
-            .fetch_one(&db)
-            .await?;
-
-            if ai_resource.is_none() {
-                return Err(Error::InternalErr("AI resource not configured".to_string()));
-            }
-
-            let ai_resource = serde_json::from_value::<AiResource>(ai_resource.unwrap())
-                .map_err(|e| Error::BadRequest(e.to_string()))?;
-            let ai_resource_path = ai_resource.path;
-
-            let resource = sqlx::query_scalar!(
-                "SELECT value
-                FROM resource
-                WHERE path = $1 AND workspace_id = $2",
-                &ai_resource_path,
-                &w_id
-            )
-            .fetch_optional(&db)
-            .await?
-            .ok_or_else(|| {
-                Error::InternalErr(format!(
-                    "Could not find the {} resource at path {ai_resource_path}, update the resource path in the workspace settings", ai_resource.provider
-                ))
-            })?;
-
-            if resource.is_none() {
-                return Err(Error::InternalErr(format!(
-                    "{} resource missing value",
-                    ai_resource.provider
-                )));
-            }
-
-            let resource = resource.unwrap();
-
-            let ai_cache = match ai_resource.provider.as_str() {
-                "openai" => openai::get_cached_value(&db, &w_id, resource).await,
-                "anthropic" => anthropic::get_cached_value(&db, &w_id, resource).await,
-                "mistral" => mistral::get_cached_value(&db, &w_id, resource).await,
-                provider => {
-                    return Err(Error::BadRequest(format!("{} is not supported", provider)))
-                }
-            };
-            let ai_cache = ai_cache?;
-            AI_KEY_CACHE.insert(
-                w_id.clone(),
-                AiCache::new(ai_resource_path, ai_cache.clone()),
-            );
-            ai_cache
-        }
-    };
-    let (path, request) = match ai_cache {
-        KeyCache::Openai(cached) => ("openai_path", cached.prepare_request(&ai_path, body)),
-        KeyCache::Anthropic(cached) => ("anthropic_path", cached.prepare_request(&ai_path, body)),
-        KeyCache::Mistral(cached) => ("mistral_path", cached.prepare_request(&ai_path, body)),
-    };
-
-    let response = request?.send().await.map_err(to_anyhow)?;
-
-    let mut tx = db.begin().await?;
-
-    audit_log(
-        &mut *tx,
-        &authed,
-        "ai.request",
-        ActionKind::Execute,
-        &w_id,
-        Some(&authed.email),
-        Some([(path, &format!("{:?}", ai_path)[..])].into()),
-    )
-    .await?;
-    tx.commit().await?;
-
-    if response.error_for_status_ref().is_err() {
-        let err_msg = response.text().await.unwrap_or("".to_string());
-        return Err(Error::AiError(err_msg));
-    }
-
-    let status_code = response.status();
-    let headers = response.headers().clone();
-    let stream = response.bytes_stream();
-    Ok((status_code, headers, axum::body::Body::from_stream(stream)))
-}
--- a/backend/windmill-api/src/apps.rs
+++ b/backend/windmill-api/src/apps.rs
@@ -8,6 +8,11 @@ use std::collections::HashMap;
 * LICENSE-AGPL for a copy of the license.
 */

+#[cfg(feature = "parquet")]
+use crate::{job_helpers_ee::{
+    get_random_file_name, get_s3_resource, get_workspace_s3_resource, upload_file_internal,
+    UploadFileResponse,
+}, users::fetch_api_authed_from_permissioned_as};
 use crate::{
    db::{ApiAuthed, DB},
    resources::get_resource_value_interpolated_internal,
@@ -17,14 +22,6 @@ use crate::{
    webhook_util::{WebhookMessage, WebhookShared},
    HTTP_CLIENT,
 };
-#[cfg(feature = "parquet")]
-use crate::{
-    job_helpers_ee::{
-        get_random_file_name, get_s3_resource, get_workspace_s3_resource, upload_file_internal,
-        UploadFileResponse,
-    },
-    users::fetch_api_authed_from_permissioned_as,
-};
 use axum::{
    extract::{Extension, Json, Path, Query},
    response::IntoResponse,
@@ -1291,6 +1288,7 @@ async fn upload_s3_file_from_app() -> Result<()> {
    ));
 }

+
 #[cfg(feature = "parquet")]
 #[derive(Debug, Deserialize, Clone)]
 struct UploadFileToS3Query {
@@ -1355,14 +1353,9 @@ async fn upload_s3_file_from_app(
        let (username, permissioned_as, email) =
            get_on_behalf_details_from_policy_and_authed(&policy, &opt_authed).await?;

-        let on_behalf_authed = fetch_api_authed_from_permissioned_as(
-            permissioned_as,
-            email,
-            &w_id,
-            &db,
-            Some(username),
-        )
-        .await?;
+        let on_behalf_authed =
+            fetch_api_authed_from_permissioned_as(permissioned_as, email, &w_id, &db, username)
+                .await?;

        if let Some(file_key) = query.file_key {
            // file key is provided => requires workspace, user or list policy and must match the regex
--- a/backend/windmill-api/src/granular_acls.rs
+++ b/backend/windmill-api/src/granular_acls.rs
@@ -23,7 +23,7 @@ use windmill_common::{
    utils::{not_found_if_none, StripPath},
 };

-const KINDS: [&str; 12] = [
+const KINDS: [&str; 10] = [
    "script",
    "group_",
    "resource",
@@ -34,8 +34,6 @@ const KINDS: [&str; 12] = [
    "app",
    "raw_app",
    "http_trigger",
-    "websocket_trigger",
-    "kafka_trigger",
 ];

 pub fn workspaced_service() -> Router {
@@ -88,26 +86,6 @@ async fn add_granular_acl(
        }
    }

-    if kind == "folder" {
-        if let Some(obj) = sqlx::query_scalar!(
-            "SELECT owners FROM folder WHERE name = $1 AND workspace_id = $2",
-            path, 
-            w_id
-        )
-
-        .fetch_optional(&mut *tx)
-        .await?
-        {
-            if obj.contains(&owner) {
-                if write != Some(true) {
-                    return Err(Error::BadRequest(
-                        "Cannot remove write permission for folder owner".to_string(),
-                    ));
-                }
-            }
-        }
-    }
-
    let obj_o = sqlx::query_scalar::<_, serde_json::Value>(&format!(
        "UPDATE {kind} SET extra_perms = jsonb_set(extra_perms, $1, to_jsonb($2), \
         true) WHERE {identifier} = $3 AND workspace_id = $4 RETURNING extra_perms"
--- a/backend/windmill-api/src/http_triggers.rs
+++ b/backend/windmill-api/src/http_triggers.rs
@@ -507,7 +507,7 @@ async fn get_http_route_trigger(
        trigger.email.clone(),
        &trigger.workspace_id,
        &db,
-        Some(username_override.unwrap_or("anonymous".to_string())),
+        username_override.unwrap_or("anonymous".to_string()),
    )
    .await?;

--- a/backend/windmill-api/src/jobs.rs
+++ b/backend/windmill-api/src/jobs.rs
@@ -21,7 +21,10 @@ use tokio::time::Instant;
 use tower::ServiceBuilder;
 use windmill_common::error::JsonResult;
 use windmill_common::flow_status::{JobResult, RestartedFrom};
-use windmill_common::jobs::{format_completed_job_result, format_result, ENTRYPOINT_OVERRIDE};
+use windmill_common::jobs::{
+    format_completed_job_result, format_result, CompletedJobWithFormattedResult, FormattedResult,
+    ENTRYPOINT_OVERRIDE,
+};
 use windmill_common::worker::{CLOUD_HOSTED, TMP_DIR};

 #[cfg(all(feature = "enterprise", feature = "parquet"))]
@@ -203,7 +206,6 @@ pub fn workspaced_service() -> Router {
        .route("/queue/list_filtered_uuids", get(list_filtered_uuids))
        .route("/queue/cancel_selection", post(cancel_selection))
        .route("/completed/count", get(count_completed_jobs))
-        .route("/completed/count_jobs", get(count_completed_jobs_detail))
        .route(
            "/completed/list",
            get(list_completed_jobs).layer(cors.clone()),
@@ -680,18 +682,23 @@ async fn get_job(
 }

 lazy_static::lazy_static! {
-    static ref GET_COMPLETED_JOB_QUERY_NO_LOGS: String = generate_get_job_query(true, "completed_job_view");
-    static ref GET_COMPLETED_JOB_QUERY: String = generate_get_job_query(false, "completed_job_view");
-    static ref GET_QUEUED_JOB_QUERY_NO_LOGS: String = generate_get_job_query(true, "queue_view");
-    static ref GET_QUEUED_JOB_QUERY: String = generate_get_job_query(false, "queue_view");
+    static ref GET_COMPLETED_JOB_QUERY_NO_LOGS: String = generate_get_job_query(true, "completed_job");
+    static ref GET_COMPLETED_JOB_QUERY: String = generate_get_job_query(false, "completed_job");
+    static ref GET_QUEUED_JOB_QUERY_NO_LOGS: String = generate_get_job_query(true, "queue");
+    static ref GET_QUEUED_JOB_QUERY: String = generate_get_job_query(false, "queue");
 }
 fn generate_get_job_query(no_logs: bool, table: &str) -> String {
    let log_expr = if no_logs {
        "null".to_string()
    } else {
-        format!("right({table}.logs, 20000)")
+        format!("right(concat(coalesce({table}.logs, ''), job_logs.logs), 20000)")
    };
-    let additional_fields = if table == "completed_job_view" {
+    let join = if no_logs {
+        "".to_string()
+    } else {
+        format!("LEFT JOIN job_logs ON {table}.id = job_logs.job_id")
+    };
+    let additional_fields = if table == "completed_job" {
        "duration_ms,      
        success,        
        result,    
@@ -725,6 +732,7 @@ fn generate_get_job_query(no_logs: bool, table: &str) -> String {
    schedule_path, permissioned_as, flow_status, raw_flow, is_flow_step, language,
    raw_lock, email, visible_to_owner, mem_peak, tag, priority, {additional_fields}
    FROM {table}
+    {join}
    WHERE id = $1 AND {table}.workspace_id = $2");
 }
 pub async fn get_queued_job_ex(
@@ -735,11 +743,7 @@ pub async fn get_queued_job_ex(
    // first optional is if authed need to be checked, second is the opt_authed itself
    opt_authed: Option<&Option<ApiAuthed>>,
 ) -> error::Result<Option<JobExtended<QueuedJob>>> {
-    let query = if no_logs {
-        &*GET_QUEUED_JOB_QUERY_NO_LOGS
-    } else {
-        &*GET_QUEUED_JOB_QUERY
-    };
+    let query = if no_logs { &*GET_QUEUED_JOB_QUERY_NO_LOGS } else { &*GET_QUEUED_JOB_QUERY };
    let job = sqlx::query_as::<_, JobExtended<QueuedJob>>(query)
        .bind(job_id)
        .bind(workspace_id)
@@ -764,11 +768,7 @@ pub async fn get_completed_job_ex(
    // first optional is if authed need to be checked, second is the opt_authed itself
    opt_authed: Option<&Option<ApiAuthed>>,
 ) -> error::Result<Option<JobExtended<CompletedJob>>> {
-    let query = if no_logs {
-        &*GET_COMPLETED_JOB_QUERY_NO_LOGS
-    } else {
-        &*GET_COMPLETED_JOB_QUERY
-    };
+    let query = if no_logs { &*GET_COMPLETED_JOB_QUERY_NO_LOGS } else { &*GET_COMPLETED_JOB_QUERY };
    let cjob = sqlx::query_as::<_, JobExtended<CompletedJob>>(query)
        .bind(job_id)
        .bind(workspace_id)
@@ -784,7 +784,13 @@ pub async fn get_completed_job_ex(
    }

    if let Some(mut cjob) = cjob {
-        cjob.inner = format_completed_job_result(cjob.inner);
+        let CompletedJobWithFormattedResult { mut cj, result } = format_completed_job_result(cjob.inner);
+        cj.result = match result {
+            Some(FormattedResult::RawValue(rv)) => rv,
+            Some(FormattedResult::Vec(v)) => Some(to_raw_value(&v)),
+            None => None,
+        }.map(sqlx::types::Json);
+        cjob.inner = cj;
        return Ok(Some(cjob));
    }

@@ -943,7 +949,7 @@ async fn get_job_logs(
        Ok(content_plain(Body::from(logs)))
    } else {
        let text = sqlx::query!(
-            "SELECT created_by, CONCAT(coalesce(queue.logs, ''), coalesce(job_logs.logs, '')) as logs, coalesce(job_logs.log_offset, 0) as log_offset, job_logs.log_file_index
+            "SELECT created_by, CONCAT(coalesce(queue.logs, ''), coalesce(job_logs.logs, '')) as logs, job_logs.log_offset, job_logs.log_file_index
            FROM queue 
            LEFT JOIN job_logs ON job_logs.job_id = queue.id 
            WHERE queue.id = $1 AND queue.workspace_id = $2",
@@ -964,14 +970,10 @@ async fn get_job_logs(
        log_job_view(&db, opt_authed.as_ref(), &w_id, &id).await?;

        #[cfg(all(feature = "enterprise", feature = "parquet"))]
-        if let Some(r) =
-            get_logs_from_store(text.log_offset.unwrap_or(0), &logs, &text.log_file_index).await
-        {
+        if let Some(r) = get_logs_from_store(text.log_offset, &logs, &text.log_file_index).await {
            return r.map(content_plain);
        }
-        if let Some(r) =
-            get_logs_from_disk(text.log_offset.unwrap_or(0), &logs, &text.log_file_index).await
-        {
+        if let Some(r) = get_logs_from_disk(text.log_offset, &logs, &text.log_file_index).await {
            return r.map(content_plain);
        }

@@ -1590,54 +1592,6 @@ async fn count_queue_jobs(
    ))
 }

-#[derive(Deserialize)]
-pub struct CountCompletedJobsQuery {
-    completed_after_s_ago: Option<i64>,
-    success: Option<bool>,
-    tags: Option<String>,
-    all_workspaces: Option<bool>,
-}
-
-async fn count_completed_jobs_detail(
-    Extension(db): Extension<DB>,
-    Path(w_id): Path<String>,
-    Query(query): Query<CountCompletedJobsQuery>,
-) -> error::JsonResult<i64> {
-    let mut sqlb = SqlBuilder::select_from("completed_job");
-    sqlb.field("COUNT(*) as count");
-
-    if !query.all_workspaces.unwrap_or(false) {
-        sqlb.and_where_eq("workspace_id", "?".bind(&w_id));
-    }
-
-    if let Some(after_s_ago) = query.completed_after_s_ago {
-        let after = Utc::now() - chrono::Duration::seconds(after_s_ago);
-        sqlb.and_where_gt(
-            "started_at + duration_ms / 1000 * interval '1 second'",
-            "?".bind(&after.to_rfc3339()),
-        );
-    }
-
-    if let Some(success) = query.success {
-        sqlb.and_where_eq("success", "?".bind(&success));
-    }
-
-    if let Some(tags) = query.tags {
-        sqlb.and_where_in(
-            "tag",
-            &tags
-                .split(",")
-                .map(|t| format!("'{}'", t))
-                .collect::<Vec<_>>(),
-        );
-    }
-
-    let sql = sqlb.sql()?;
-    let stats = sqlx::query_scalar::<_, i64>(&sql).fetch_one(&db).await?;
-
-    Ok(Json(stats))
-}
-
 async fn count_completed_jobs(
    Extension(db): Extension<DB>,
    Path(w_id): Path<String>,
@@ -2307,13 +2261,6 @@ pub struct JobExtended<T> {
    #[serde(flatten)]
    inner: T,

-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub raw_code: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub raw_lock: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub raw_flow: Option<sqlx::types::Json<Box<RawValue>>>,
-
    #[sqlx(skip)]
    #[serde(skip_serializing_if = "Option::is_none")]
    pub self_wait_time_ms: Option<i64>,
@@ -2323,19 +2270,8 @@ pub struct JobExtended<T> {
 }

 impl<T> JobExtended<T> {
-    pub fn new(
-        self_wait_time_ms: Option<i64>,
-        aggregate_wait_time_ms: Option<i64>,
-        inner: T,
-    ) -> Self {
-        Self {
-            inner,
-            raw_code: None,
-            raw_lock: None,
-            raw_flow: None,
-            self_wait_time_ms,
-            aggregate_wait_time_ms,
-        }
+    pub fn new(self_wait_time_ms: Option<i64>, aggregate_wait_time_ms: Option<i64>, inner: T) -> Self {
+        Self { inner, self_wait_time_ms, aggregate_wait_time_ms }
    }
 }

@@ -2637,10 +2573,7 @@ impl UnifiedJob {
 impl<'a> From<UnifiedJob> for Job {
    fn from(uj: UnifiedJob) -> Self {
        match uj.typ.as_ref() {
-            "CompletedJob" => Job::CompletedJob(JobExtended::new(
-                uj.self_wait_time_ms,
-                uj.aggregate_wait_time_ms,
-                CompletedJob {
+            "CompletedJob" => Job::CompletedJob(JobExtended::new(uj.self_wait_time_ms, uj.aggregate_wait_time_ms, CompletedJob {
                    workspace_id: uj.workspace_id,
                    id: uj.id,
                    parent_job: uj.parent_job,
@@ -2658,10 +2591,12 @@ impl<'a> From<UnifiedJob> for Job {
                    deleted: uj.deleted,
                    canceled: uj.canceled,
                    canceled_by: uj.canceled_by,
+                    raw_code: None,
                    canceled_reason: None,
                    job_kind: uj.job_kind,
                    schedule_path: uj.schedule_path,
                    permissioned_as: uj.permissioned_as,
+                    raw_flow: None,
                    is_flow_step: uj.is_flow_step,
                    language: uj.language,
                    is_skipped: uj.is_skipped,
@@ -2671,12 +2606,8 @@ impl<'a> From<UnifiedJob> for Job {
                    tag: uj.tag,
                    priority: uj.priority,
                    labels: uj.labels,
-                },
-            )),
-            "QueuedJob" => Job::QueuedJob(JobExtended::new(
-                uj.self_wait_time_ms,
-                uj.aggregate_wait_time_ms,
-                QueuedJob {
+            })),
+            "QueuedJob" => Job::QueuedJob(JobExtended::new(uj.self_wait_time_ms, uj.aggregate_wait_time_ms, QueuedJob {
                    workspace_id: uj.workspace_id,
                    id: uj.id,
                    parent_job: uj.parent_job,
@@ -2690,6 +2621,8 @@ impl<'a> From<UnifiedJob> for Job {
                    scheduled_for: uj.scheduled_for.unwrap(),
                    logs: None,
                    flow_status: None,
+                    raw_code: None,
+                    raw_lock: None,
                    canceled: uj.canceled,
                    canceled_by: uj.canceled_by,
                    canceled_reason: None,
@@ -2697,6 +2630,7 @@ impl<'a> From<UnifiedJob> for Job {
                    job_kind: uj.job_kind,
                    schedule_path: uj.schedule_path,
                    permissioned_as: uj.permissioned_as,
+                    raw_flow: None,
                    is_flow_step: uj.is_flow_step,
                    language: uj.language,
                    same_worker: false,
@@ -2714,8 +2648,7 @@ impl<'a> From<UnifiedJob> for Job {
                    flow_step_id: None,
                    cache_ttl: None,
                    priority: uj.priority,
-                },
-            )),
+            })),
            t => panic!("job type {} not valid", t),
        }
    }
@@ -3166,15 +3099,15 @@ pub async fn run_workflow_as_code(
    }

    let job = not_found_if_none(job, "Queued Job", &job_id.to_string())?;
-    let JobExtended { inner: job, raw_code, raw_lock, .. } = job;
+    let JobExtended { inner: job, .. } = job;
    let (job_payload, tag, _delete_after_use, timeout) = match job.job_kind {
        JobKind::Preview => (
            JobPayload::Code(RawCode {
                hash: None,
-                content: raw_code.unwrap_or_default(),
+                content: job.raw_code.unwrap_or_default(),
                path: job.script_path,
                language: job.language.unwrap_or_else(|| ScriptLang::Deno),
-                lock: raw_lock,
+                lock: job.raw_lock,
                custom_concurrency_key: windmill_queue::custom_concurrency_key(&db, job.id)
                    .await
                    .map_err(to_anyhow)?,
@@ -3339,7 +3272,7 @@ pub struct WindmillCompositeResult {
    windmill_content_type: Option<String>,
    result: Option<Box<RawValue>>,
 }
-pub async fn run_wait_result(
+async fn run_wait_result(
    db: &DB,
    uuid: Uuid,
    w_id: String,
@@ -3386,13 +3319,15 @@ pub async fn run_wait_result(
            .bind(&w_id)
            .fetch_optional(db)
            .await?;
-            if let Some(mut raw_result) = row {
-                format_result(
+            if let Some(raw_result) = row {
+                result = match format_result(
                    raw_result.language.as_ref(),
-                    raw_result.flow_status.as_ref(),
-                    raw_result.result.as_mut(),
-                );
-                result = raw_result.result.map(|x| x.0);
+                    raw_result.flow_status.map(|x| x.0),
+                    raw_result.result.map(|x| x.0),
+                ) {
+                    FormattedResult::RawValue(rv) => rv,
+                    FormattedResult::Vec(v) => Some(to_raw_value(&v)),
+                };
            }
        }

@@ -4391,7 +4326,7 @@ async fn add_batch_jobs(
        raw_code,
        raw_lock,
        raw_flow,
-        flow_status,
+        flow_status
    ) = match batch_info.kind.as_str() {
        "script" => {
            if let Some(path) = batch_info.path {
@@ -4482,19 +4417,19 @@ async fn add_batch_jobs(
            add_virtual_items_if_necessary(&mut value.modules);
            let flow_status = FlowStatus::new(&value);
            (
-                None,                            // script_hash
-                path,                            // script_path
-                job_kind,                        // job_kind
-                None,                            // language
-                None,                            // dedicated_worker
-                value.concurrency_key.clone(),   // custom_concurrency_key
-                value.concurrent_limit.clone(),  // concurrent_limit
-                value.concurrency_time_window_s, // concurrency_time_window_s
-                None,                            // timeout
-                None,                            // raw_code
-                None,                            // raw_lock
-                Some(value),                     // raw_flow
-                Some(flow_status),               // flow_status
+                None,                             // script_hash
+                path,                             // script_path
+                job_kind,                         // job_kind
+                None,                             // language
+                None,                             // dedicated_worker
+                value.concurrency_key.clone(),    // custom_concurrency_key
+                value.concurrent_limit.clone(),   // concurrent_limit
+                value.concurrency_time_window_s,  // concurrency_time_window_s
+                None,                             // timeout
+                None,                             // raw_code
+                None,                             // raw_lock
+                Some(value),                      // raw_flow
+                Some(flow_status),                // flow_status
            )
        }
        "noop" => (
@@ -4534,28 +4469,11 @@ async fn add_batch_jobs(

    let uuids = sqlx::query_scalar!(
        r#"WITH uuid_table as (
-            select gen_random_uuid() as uuid from generate_series(1, $5)
-        )
-        INSERT INTO job
-            (id, workspace_id, raw_code, raw_lock, raw_flow)
-            (SELECT uuid, $1, $2, $3, $4 FROM uuid_table)
-        RETURNING id"#,
-        w_id,
-        raw_code,
-        raw_lock,
-        raw_flow.map(sqlx::types::Json) as Option<sqlx::types::Json<FlowValue>>,
-        n
-    )
-    .fetch_all(&db)
-    .await?;
-
-    let uuids = sqlx::query_scalar!(
-        r#"WITH uuid_table as (
-            select unnest($11::uuid[]) as uuid
+            select gen_random_uuid() as uuid from generate_series(1, $11)
        )
        INSERT INTO queue 
-            (id, script_hash, script_path, job_kind, language, args, tag, created_by, permissioned_as, email, scheduled_for, workspace_id, concurrent_limit, concurrency_time_window_s, timeout, flow_status)
-            (SELECT uuid, $1, $2, $3, $4, ('{ "uuid": "' || uuid || '" }')::jsonb, $5, $6, $7, $8, $9, $10, $12, $13, $14, $15 FROM uuid_table) 
+            (id, script_hash, script_path, job_kind, language, args, tag, created_by, permissioned_as, email, scheduled_for, workspace_id, concurrent_limit, concurrency_time_window_s, timeout, raw_code, raw_lock, raw_flow, flow_status)
+            (SELECT uuid, $1, $2, $3, $4, ('{ "uuid": "' || uuid || '" }')::jsonb, $5, $6, $7, $8, $9, $10, $12, $13, $14, $15, $16, $17, $18 FROM uuid_table) 
        RETURNING id"#,
            hash.map(|h| h.0),
            path,
@@ -4567,10 +4485,13 @@ async fn add_batch_jobs(
            authed.email,
            Utc::now(),
            w_id,
-            &uuids,
+            n,
            concurrent_limit,
            concurrent_time_window_s,
            timeout,
+            raw_code,
+            raw_lock,
+            raw_flow.map(sqlx::types::Json) as Option<sqlx::types::Json<FlowValue>>,
            flow_status.map(sqlx::types::Json) as Option<sqlx::types::Json<FlowStatus>>
        )
        .fetch_all(&db)
@@ -5150,7 +5071,8 @@ async fn get_completed_job<'a>(
    Extension(db): Extension<DB>,
    Path((w_id, id)): Path<(String, Uuid)>,
 ) -> error::Result<Response> {
-    let job_o = get_completed_job_ex(&db, &w_id, id, false, Some(&opt_authed)).await?;
+    let job_o = get_completed_job_ex(&db, &w_id, id, false, Some(&opt_authed))
+        .await?;

    let cj = not_found_if_none(job_o, "Completed Job", id.to_string())?;
    let response = Json(cj).into_response();
@@ -5213,7 +5135,7 @@ async fn get_completed_job_result(
            .await?
    };

-    let mut raw_result = not_found_if_none(result_o, "Completed Job", id.to_string())?;
+    let raw_result = not_found_if_none(result_o, "Completed Job", id.to_string())?;

    if opt_authed.is_none() && raw_result.created_by.unwrap_or_default() != "anonymous" {
        match (suspended_job, resume_id, approver, secret) {
@@ -5253,15 +5175,15 @@ async fn get_completed_job_result(
        }
    }

-    format_result(
+    let result = format_result(
        raw_result.language.as_ref(),
-        raw_result.flow_status.as_ref(),
-        raw_result.result.as_mut(),
+        raw_result.flow_status.map(|x| x.0),
+        raw_result.result.map(|x| x.0),
    );

    log_job_view(&db, opt_authed.as_ref(), &w_id, &id).await?;

-    Ok(Json(raw_result.result).into_response())
+    Ok(Json(result).into_response())
 }

 #[derive(Deserialize)]
@@ -5307,7 +5229,7 @@ struct CompletedJobResult {
    started: Option<bool>,
    success: Option<bool>,
    completed: bool,
-    result: Option<sqlx::types::Json<Box<RawValue>>>,
+    result: Option<FormattedResult>,
 }

 #[derive(Deserialize)]
@@ -5329,11 +5251,11 @@ async fn get_completed_job_result_maybe(
    .fetch_optional(&db)
    .await?;

-    if let Some(mut res) = result_o {
-        format_result(
+    if let Some(res) = result_o {
+        let result = format_result(
            res.language.as_ref(),
-            res.flow_status.as_ref(),
-            res.result.as_mut(),
+            res.flow_status.map(|x| x.0),
+            res.result.map(|x| x.0),
        );
        if opt_authed.is_none() && res.created_by != "anonymous" {
            return Err(Error::BadRequest(
@@ -5347,7 +5269,7 @@ async fn get_completed_job_result_maybe(
            started: Some(true),
            success: Some(res.success),
            completed: true,
-            result: res.result,
+            result: Some(result),
        })
        .into_response())
    } else if get_started.is_some_and(|x| x) {
--- a/backend/windmill-api/src/kafka_triggers_ee.rs
+++ b/backend/windmill-api/src/kafka_triggers_ee.rs
@@ -1,14 +0,0 @@
-use crate::db::DB;
-use axum::Router;
-
-pub fn workspaced_service() -> Router {
-    Router::new()
-}
-
-pub async fn start_kafka_consumers(
-    _db: DB,
-    _rsmq: Option<rsmq_async::MultiplexedRsmq>,
-    mut _killpill_rx: tokio::sync::broadcast::Receiver<()>,
-) -> () {
-    // implementation is not open source
-}
--- a/backend/windmill-api/src/lib.rs
+++ b/backend/windmill-api/src/lib.rs
@@ -62,16 +62,13 @@ mod http_triggers;
 mod indexer_ee;
 mod inputs;
 mod integration;
-mod ai;
-
 #[cfg(feature = "parquet")]
 mod job_helpers_ee;
 pub mod job_metrics;
 pub mod jobs;
-#[cfg(all(feature = "enterprise", feature = "kafka"))]
-mod kafka_triggers_ee;
 pub mod oauth2_ee;
 mod oidc_ee;
+mod openai;
 mod raw_apps;
 mod resources;
 mod saml_ee;
@@ -97,7 +94,6 @@ mod workspaces_ee;

 pub const DEFAULT_BODY_LIMIT: usize = 2097152 * 100; // 200MB

-
 lazy_static::lazy_static! {

    pub static ref REQUEST_SIZE_LIMIT: Arc<RwLock<usize>> = Arc::new(RwLock::new(DEFAULT_BODY_LIMIT));
@@ -237,9 +233,6 @@ pub async fn run_server(
        }
    }

-    // #[cfg(feature = "kafka")]
-    // start_listening().await;
-
    let job_helpers_service = {
        #[cfg(feature = "parquet")]
        {
@@ -252,27 +245,9 @@ pub async fn run_server(
        }
    };

-    let kafka_triggers_service = {
-        #[cfg(all(feature = "enterprise", feature = "kafka"))]
-        {
-            kafka_triggers_ee::workspaced_service()
-        }
-
-        #[cfg(not(all(feature = "enterprise", feature = "kafka")))]
-        {
-            Router::new()
-        }
-    };
-
    if !*CLOUD_HOSTED {
        let ws_killpill_rx = rx.resubscribe();
-        websocket_triggers::start_websockets(db.clone(), rsmq.clone(), ws_killpill_rx).await;
-
-        #[cfg(all(feature = "enterprise", feature = "kafka"))]
-        {
-            let kafka_killpill_rx = rx.resubscribe();
-            kafka_triggers_ee::start_kafka_consumers(db.clone(), rsmq, kafka_killpill_rx).await;
-        }
+        websocket_triggers::start_websockets(db.clone(), rsmq, ws_killpill_rx).await;
    }

    // build our application with a route
@@ -303,7 +278,7 @@ pub async fn run_server(
                        .nest("/job_helpers", job_helpers_service)
                        .nest("/jobs", jobs::workspaced_service())
                        .nest("/oauth", oauth2_ee::workspaced_service())
-                        .nest("/ai", ai::workspaced_service())
+                        .nest("/openai", openai::workspaced_service())
                        .nest("/raw_apps", raw_apps::workspaced_service())
                        .nest("/resources", resources::workspaced_service())
                        .nest("/schedules", schedule::workspaced_service())
@@ -319,8 +294,7 @@ pub async fn run_server(
                        .nest(
                            "/websocket_triggers",
                            websocket_triggers::workspaced_service(),
-                        )
-                        .nest("/kafka_triggers", kafka_triggers_service),
+                        ),
                )
                .nest("/workspaces", workspaces::global_service())
                .nest(
@@ -345,7 +319,10 @@ pub async fn run_server(
                    "/srch/w/:workspace_id/index",
                    indexer_ee::workspaced_service(),
                )
-                .nest("/srch/index", indexer_ee::global_service())
+                .nest(
+                    "/srch/index",
+                    indexer_ee::global_service(),
+                )
                .nest("/oidc", oidc_ee::global_service())
                .nest(
                    "/saml",
--- a/backend/windmill-api/src/openai.rs
+++ b/backend/windmill-api/src/openai.rs
@@ -0,0 +1,344 @@
+use std::collections::HashMap;
+
+use crate::db::{ApiAuthed, DB};
+
+use axum::{
+    body::Bytes,
+    extract::{Extension, Path, Query},
+    response::IntoResponse,
+    routing::post,
+    Router,
+};
+use quick_cache::sync::Cache;
+use reqwest::Client;
+use serde_json::value::RawValue;
+use windmill_audit::audit_ee::audit_log;
+use windmill_audit::ActionKind;
+use windmill_common::{
+    error::{to_anyhow, Error},
+    variables::build_crypt,
+};
+
+use crate::variables::decrypt;
+use serde::Deserialize;
+
+lazy_static::lazy_static! {
+    static ref HTTP_CLIENT: Client = reqwest::ClientBuilder::new()
+        .timeout(std::time::Duration::from_secs(60 * 5))
+        .user_agent("windmill/beta")
+        .build().unwrap();
+}
+
+pub fn workspaced_service() -> Router {
+    let router = Router::new().route("/proxy/*openai_path", post(proxy));
+
+    router
+}
+
+#[derive(Deserialize)]
+struct OpenaiResource {
+    api_key: String,
+    organization_id: Option<String>,
+}
+
+#[derive(Deserialize)]
+struct OpenaiClientCredentialsOauthResource {
+    client_id: String,
+    client_secret: String,
+    token_url: String,
+    user: Option<String>,
+}
+
+#[derive(Deserialize)]
+#[serde(untagged)]
+enum OpenaiConfig {
+    Resource(OpenaiResource),
+    ClientCredentialsOauthResource(OpenaiClientCredentialsOauthResource),
+}
+
+struct Variable {
+    value: String,
+    is_secret: bool,
+}
+async fn get_variable_or_self(path: String, db: &DB, w_id: &String) -> Result<String, Error> {
+    if !path.starts_with("$var:") {
+        return Ok(path);
+    }
+    let path = path.strip_prefix("$var:").unwrap().to_string();
+    let mut variable = sqlx::query_as!(
+        Variable,
+        "SELECT value, is_secret
+        FROM variable
+        WHERE path = $1 AND workspace_id = $2",
+        &path,
+        &w_id
+    )
+    .fetch_one(db)
+    .await?;
+    if variable.is_secret {
+        let mc = build_crypt(&db, &w_id).await?;
+        variable.value = decrypt(&mc, variable.value)?;
+    }
+    Ok(variable.value)
+}
+
+lazy_static::lazy_static! {
+    pub static ref OPENAI_AZURE_BASE_PATH: Option<String> = std::env::var("OPENAI_AZURE_BASE_PATH").ok();
+    static ref OPENAI_KEY_CACHE: Cache<String, OpenaiKeyCache> = Cache::new(500);
+}
+
+#[derive(Deserialize)]
+struct OpenaiCredentials {
+    access_token: String,
+}
+async fn get_openai_key_using_credentials_flow(
+    mut resource: OpenaiClientCredentialsOauthResource,
+    db: &DB,
+    w_id: &String,
+) -> Result<String, Error> {
+    resource.client_id = get_variable_or_self(resource.client_id, &db, &w_id).await?;
+    resource.client_secret = get_variable_or_self(resource.client_secret, &db, &w_id).await?;
+    resource.token_url = get_variable_or_self(resource.token_url, &db, &w_id).await?;
+    let mut params = HashMap::new();
+    params.insert("grant_type", "client_credentials");
+    let response = HTTP_CLIENT
+        .post(resource.token_url)
+        .form(&params)
+        .basic_auth(resource.client_id, Some(resource.client_secret))
+        .send()
+        .await
+        .map_err(|err| {
+            Error::InternalErr(format!(
+                "Failed to get OpenAI credentials using credentials flow: {}",
+                err
+            ))
+        })?;
+    let response = response.json::<OpenaiCredentials>().await.map_err(|err| {
+        Error::InternalErr(format!(
+            "Failed to parse OpenAI credentials from credentials flow: {}",
+            err
+        ))
+    })?;
+    Ok(response.access_token)
+}
+
+#[derive(Clone)]
+struct OpenaiKeyCache {
+    api_key: String,
+    organization_id: Option<String>,
+    azure_base_path: Option<String>,
+    user: Option<String>,
+    expires_at: std::time::Instant,
+}
+
+impl OpenaiKeyCache {
+    fn new(
+        api_key: String,
+        organization_id: Option<String>,
+        azure_base_path: Option<String>,
+        expires_at: std::time::Instant,
+        user: Option<String>,
+    ) -> Self {
+        Self { api_key, organization_id, azure_base_path, expires_at, user }
+    }
+    fn is_expired(&self) -> bool {
+        self.expires_at < std::time::Instant::now()
+    }
+}
+
+#[derive(Deserialize)]
+struct ProxyQueryParams {
+    no_cache: Option<bool>,
+}
+async fn proxy(
+    authed: ApiAuthed,
+    Extension(db): Extension<DB>,
+    Path((w_id, openai_path)): Path<(String, String)>,
+    Query(query_params): Query<ProxyQueryParams>,
+    mut body: Bytes,
+) -> impl IntoResponse {
+    let workspace_cache = OPENAI_KEY_CACHE.get(&w_id);
+    let (api_key, organization_id, azure_base_path, user) = if query_params
+        .no_cache
+        .unwrap_or(false)
+        || workspace_cache.is_none()
+        || workspace_cache.clone().unwrap().is_expired()
+    {
+        let openai_resource_path = sqlx::query_scalar!(
+            "SELECT openai_resource_path FROM workspace_settings WHERE workspace_id = $1",
+            &w_id
+        )
+        .fetch_one(&db)
+        .await?;
+
+        if openai_resource_path.is_none() {
+            return Err(Error::InternalErr(
+                "OpenAI resource not configured".to_string(),
+            ));
+        }
+
+        let openai_resource_path = openai_resource_path.unwrap();
+
+        let resource = sqlx::query_scalar!(
+            "SELECT value
+            FROM resource
+            WHERE path = $1 AND workspace_id = $2",
+            &openai_resource_path,
+            &w_id
+        )
+        .fetch_optional(&db)
+        .await?
+        .ok_or_else(|| {
+            Error::InternalErr(format!(
+                "Could not find the OpenAI resource at path {openai_resource_path}, update the resource path in the workspace settings"
+            ))
+        })?;
+
+        if resource.is_none() {
+            return Err(Error::InternalErr(
+                "OpenAI resource missing value".to_string(),
+            ));
+        }
+
+        let config: OpenaiConfig = serde_json::from_value(resource.unwrap())
+            .map_err(|e| Error::InternalErr(format!("validating openai resource {e:#}")))?;
+
+        let mut user = None::<String>;
+        let mut resource = match config {
+            OpenaiConfig::Resource(resource) => {
+                tracing::debug!("Getting OpenAI key from static resource");
+                resource
+            }
+            OpenaiConfig::ClientCredentialsOauthResource(resource) => {
+                tracing::debug!("Getting OpenAI key with client credentials flow");
+                user = resource.user.clone();
+                let token = get_openai_key_using_credentials_flow(resource, &db, &w_id).await?;
+                OpenaiResource { api_key: token, organization_id: None }
+            }
+        };
+
+        resource.api_key = get_variable_or_self(resource.api_key, &db, &w_id).await?;
+
+        if resource.organization_id.is_some() {
+            resource.organization_id =
+                Some(get_variable_or_self(resource.organization_id.unwrap(), &db, &w_id).await?);
+        }
+
+        if user.is_some() {
+            user = Some(get_variable_or_self(user.unwrap(), &db, &w_id).await?);
+        }
+
+        let expires_at = std::time::Instant::now() + std::time::Duration::from_secs(60);
+
+        let azure_base_path = sqlx::query_scalar!(
+            "SELECT value
+            FROM global_settings
+            WHERE name = 'openai_azure_base_path'",
+        )
+        .fetch_optional(&db)
+        .await?;
+
+        let azure_base_path = if let Some(azure_base_path) = azure_base_path {
+            Some(
+                serde_json::from_value::<String>(azure_base_path).map_err(|e| {
+                    Error::InternalErr(format!("validating openai azure base path {e:#}"))
+                })?,
+            )
+        } else {
+            OPENAI_AZURE_BASE_PATH.clone()
+        };
+
+        let workspace_cache = OpenaiKeyCache::new(
+            resource.api_key.clone(),
+            resource.organization_id.clone(),
+            azure_base_path.clone(),
+            expires_at,
+            user.clone(),
+        );
+        OPENAI_KEY_CACHE.insert(w_id.clone(), workspace_cache);
+        (
+            resource.api_key,
+            resource.organization_id,
+            azure_base_path,
+            user,
+        )
+    } else {
+        tracing::debug!("Using cached OpenAI key");
+        let workspace_cache = workspace_cache.unwrap();
+        (
+            workspace_cache.api_key.clone(),
+            workspace_cache.organization_id.clone(),
+            workspace_cache.azure_base_path.clone(),
+            workspace_cache.user.clone(),
+        )
+    };
+
+    if user.is_some() {
+        tracing::debug!("Adding user to request body");
+        let mut json_body: HashMap<String, Box<RawValue>> = serde_json::from_slice(&body)
+            .map_err(|e| Error::InternalErr(format!("Failed to parse request body: {}", e)))?;
+
+        let user_json_string = serde_json::Value::String(user.unwrap()).to_string(); // makes sure to escape characters
+
+        json_body.insert(
+            "user".to_string(),
+            RawValue::from_string(user_json_string)
+                .map_err(|e| Error::InternalErr(format!("Failed to parse user: {}", e)))?,
+        );
+
+        body = serde_json::to_vec(&json_body)
+            .map_err(|e| Error::InternalErr(format!("Failed to reserialize request body: {}", e)))?
+            .into();
+    }
+
+    let base_url = if let Some(base_url) = azure_base_path {
+        base_url
+    } else {
+        "https://api.openai.com/v1".to_string()
+    };
+
+    let url = format!("{}/{}", base_url, openai_path);
+    let mut request = HTTP_CLIENT
+        .post(url)
+        .header("content-type", "application/json")
+        .body(body);
+
+    if base_url != "https://api.openai.com/v1" {
+        request = request
+            .header("api-key", api_key)
+            .query(&[("api-version", "2023-05-15")])
+    } else {
+        request = request.header("authorization", format!("Bearer {}", api_key))
+    }
+
+    if let Some(org_id) = organization_id {
+        request = request.header("OpenAI-Organization", org_id);
+    }
+
+    let response = request.send().await.map_err(to_anyhow)?;
+
+    let mut tx = db.begin().await?;
+    audit_log(
+        &mut *tx,
+        &authed,
+        "openai.request",
+        ActionKind::Execute,
+        &w_id,
+        Some(&authed.email),
+        Some([("openai_path", &format!("{:?}", openai_path)[..])].into()),
+    )
+    .await?;
+    tx.commit().await?;
+
+    if response.error_for_status_ref().is_err() {
+        return Err(Error::OpenAIError(
+            response.text().await.unwrap_or("".to_string()),
+        ));
+    }
+
+    let status_code = response.status();
+    let headers = response.headers().clone();
+    let stream = response.bytes_stream();
+
+    Ok((status_code, headers, axum::body::Body::from_stream(stream)))
+}
--- a/backend/windmill-api/src/resources.rs
+++ b/backend/windmill-api/src/resources.rs
@@ -300,7 +300,7 @@ async fn get_resource(
    .await?;
    tx.commit().await?;
    if resource_o.is_none() {
-        explain_resource_perm_error(&path, &w_id, &db, &authed).await?;
+        explain_resource_perm_error(&path, &w_id, &db).await?;
    }
    let resource = not_found_if_none(resource_o, "Resource", path)?;
    Ok(Json(resource))
@@ -343,7 +343,7 @@ async fn get_resource_value(

    tx.commit().await?;
    if value_o.is_none() {
-        explain_resource_perm_error(&path, &w_id, &db, &authed).await?;
+        explain_resource_perm_error(&path, &w_id, &db).await?;
    }

    let value = not_found_if_none(value_o, "Resource", path)?;
@@ -354,7 +354,6 @@ async fn explain_resource_perm_error(
    path: &str,
    w_id: &str,
    db: &sqlx::Pool<Postgres>,
-    authed: &ApiAuthed,
 ) -> windmill_common::error::Result<()> {
    let extra_perms = sqlx::query_scalar!(
        "SELECT extra_perms from resource WHERE path = $1 AND workspace_id = $2",
@@ -379,12 +378,12 @@ async fn explain_resource_perm_error(
        .fetch_optional(db)
        .await?;
        return Err(Error::NotAuthorized(format!(
-            "Resource exists but you don't have access to it:\nresource perms: {}\nfolder perms: {}\nauthed as: {authed:?}",
+            "Resource exists but you don't have access to it:\nresource perms: {}\nfolder perms: {}",
            serde_json::to_string_pretty(&extra_perms).unwrap_or_default(), serde_json::to_string_pretty(&folder_extra_perms).unwrap_or_default()
        )));
    } else {
        return Err(Error::NotAuthorized(format!(
-            "Resource exists but you don't have access to it:\nresource perms: {}\nauthed as: {authed:?}",
+            "Resource exists but you don't have access to it:\nresource perms: {}",
            serde_json::to_string_pretty(&extra_perms).unwrap_or_default()
        )));
    }
@@ -458,7 +457,7 @@ pub async fn get_resource_value_interpolated_internal(
    .await?;
    tx.commit().await?;
    if value_o.is_none() {
-        explain_resource_perm_error(path, workspace, db, &authed).await?;
+        explain_resource_perm_error(path, workspace, db).await?;
    }

    let value = not_found_if_none(value_o, "Resource", path)?;
--- a/backend/windmill-api/src/settings.rs
+++ b/backend/windmill-api/src/settings.rs
@@ -434,15 +434,67 @@ pub async fn test_critical_channels() -> Result<String> {
    Ok("Critical channels require EE".to_string())
 }

+use serde::Serialize;
+
+#[derive(Serialize)]
+pub struct CriticalAlert {
+    id: i32,
+    alert_type: String,
+    message: String,
+    created_at: chrono::DateTime<chrono::Utc>,
+    acknowledged: Option<bool>,
+}
+
+#[cfg(feature = "enterprise")]
+#[derive(Deserialize)]
+pub struct AlertQueryParams {
+    pub page: Option<i32>,
+    pub page_size: Option<i32>,
+    pub acknowledged: Option<bool>,
+}
+
 #[cfg(feature = "enterprise")]
 pub async fn get_critical_alerts(
    Extension(db): Extension<DB>,
    authed: ApiAuthed,
-    Query(params): Query<crate::utils::AlertQueryParams>,
-) -> JsonResult<Vec<crate::utils::CriticalAlert>> {
+    Query(params): Query<AlertQueryParams>,
+) -> JsonResult<Vec<CriticalAlert>> {
    require_super_admin(&db, &authed.email).await?;

-    crate::utils::get_critical_alerts(db, params, None).await
+    // Default pagination values if not provided
+    let page = params.page.unwrap_or(1).max(1);
+    let page_size = params.page_size.unwrap_or(10).min(100) as i64;
+    let offset = ((page - 1) * page_size as i32) as i64;
+
+    let alerts = if let Some(acknowledged) = params.acknowledged {
+        sqlx::query_as!(
+            CriticalAlert,
+            "SELECT id, alert_type, message, created_at, acknowledged 
+             FROM alerts 
+             WHERE acknowledged = $1
+             ORDER BY created_at DESC 
+             LIMIT $2 OFFSET $3",
+            acknowledged,
+            page_size,
+            offset
+        )
+        .fetch_all(&db)
+        .await?
+    } else {
+        sqlx::query_as!(
+            CriticalAlert,
+            "SELECT id, alert_type, message, created_at, acknowledged 
+             FROM alerts 
+             ORDER BY created_at DESC 
+             LIMIT $1 OFFSET $2",
+            page_size,
+            offset
+        )
+        .fetch_all(&db)
+        .await?
+    };
+
+    Ok(Json(alerts))
 }

 #[cfg(not(feature = "enterprise"))]
@@ -458,7 +510,15 @@ pub async fn acknowledge_critical_alert(
 ) -> error::Result<String> {
    require_super_admin(&db, &authed.email).await?;
    
-    crate::utils::acknowledge_critical_alert(db, None, id).await
+    sqlx::query!(
+        "UPDATE alerts SET acknowledged = true WHERE id = $1",
+        id
+    )
+    .execute(&db)
+    .await?;
+    
+    tracing::info!("Acknowledged critical alert with id: {}", id);
+    Ok("Critical alert acknowledged".to_string())
 }

 #[cfg(not(feature = "enterprise"))]
@@ -473,7 +533,14 @@ pub async fn acknowledge_all_critical_alerts(
 ) -> error::Result<String> {
    require_super_admin(&db, &authed.email).await?;

-    crate::utils::acknowledge_all_critical_alerts(db, None).await
+    sqlx::query!(
+        "UPDATE alerts SET acknowledged = true WHERE acknowledged = false"
+    )
+    .execute(&db)
+    .await?;
+
+    tracing::info!("Acknowledged all unacknowledged critical alerts");
+    Ok("All unacknowledged critical alerts acknowledged".to_string())
 }

 #[cfg(not(feature = "enterprise"))]
--- a/backend/windmill-api/src/triggers.rs
+++ b/backend/windmill-api/src/triggers.rs
@@ -18,7 +18,6 @@ pub struct TriggersCount {
    webhook_count: i64,
    email_count: i64,
    websocket_count: i64,
-    kafka_count: i64,
 }
 pub(crate) async fn get_triggers_count_internal(
    db: &DB,
@@ -65,16 +64,6 @@ pub(crate) async fn get_triggers_count_internal(
    .await?
    .unwrap_or(0);

-    let kafka_count = sqlx::query_scalar!(
-        "SELECT COUNT(*) FROM kafka_trigger WHERE script_path = $1 AND is_flow = $2 AND workspace_id = $3",
-        path,
-        is_flow,
-        w_id
-    )
-    .fetch_one(db)
-    .await?
-    .unwrap_or(0);
-
    let webhook_count = (if is_flow {
        sqlx::query_scalar!(
            "SELECT COUNT(*) FROM token WHERE label LIKE 'webhook-%' AND workspace_id = $1 AND scopes @> ARRAY['run:flow/' || $2]::text[]",
@@ -116,7 +105,6 @@ pub(crate) async fn get_triggers_count_internal(
        webhook_count,
        email_count,
        websocket_count,
-        kafka_count,
    }))
 }

--- a/backend/windmill-api/src/users.rs
+++ b/backend/windmill-api/src/users.rs
@@ -746,7 +746,7 @@ pub async fn fetch_api_authed(
    email: String,
    w_id: &str,
    db: &DB,
-    username_override: Option<String>,
+    username_override: String,
 ) -> error::Result<ApiAuthed> {
    let permissioned_as = username_to_permissioned_as(username.as_str());
    fetch_api_authed_from_permissioned_as(permissioned_as, email, w_id, db, username_override).await
@@ -757,7 +757,7 @@ pub async fn fetch_api_authed_from_permissioned_as(
    email: String,
    w_id: &str,
    db: &DB,
-    username_override: Option<String>,
+    username_override: String,
 ) -> error::Result<ApiAuthed> {
    let authed =
        fetch_authed_from_permissioned_as(permissioned_as, email.clone(), w_id, db).await?;
@@ -769,7 +769,7 @@ pub async fn fetch_api_authed_from_permissioned_as(
        groups: authed.groups,
        folders: authed.folders,
        scopes: authed.scopes,
-        username_override: username_override,
+        username_override: Some(username_override),
    })
 }

--- a/backend/windmill-api/src/utils.rs
+++ b/backend/windmill-api/src/utils.rs
@@ -16,12 +16,6 @@ use windmill_common::{
    DB,
 };

-#[cfg(feature = "enterprise")]
-use windmill_common::error::JsonResult;
-
-#[cfg(feature = "enterprise")]
-use axum::Json;
-
 #[derive(Deserialize)]
 pub struct WithStarredInfoQuery {
    pub with_starred_info: Option<bool>,
@@ -168,159 +162,3 @@ pub fn content_plain(body: Body) -> Response {
        .body(body)
        .unwrap()
 }
-
-use serde::Serialize;
-
-#[derive(Serialize)]
-pub struct CriticalAlert {
-    id: i32,
-    alert_type: String,
-    message: String,
-    created_at: chrono::DateTime<chrono::Utc>,
-    acknowledged: Option<bool>,
-    workspace_id: Option<String>,
-}
-
-#[cfg(feature = "enterprise")]
-#[derive(Deserialize, Debug)]
-pub struct AlertQueryParams {
-    pub page: Option<i32>,
-    pub page_size: Option<i32>,
-    pub acknowledged: Option<bool>,
-}
-
-#[cfg(feature = "enterprise")]
-pub async fn get_critical_alerts(
-    db: DB,
-    params: AlertQueryParams,
-    workspace_id: Option<String>,
-) -> JsonResult<Vec<CriticalAlert>> {
-    let page = params.page.unwrap_or(1).max(1);
-    let page_size = params.page_size.unwrap_or(10).min(100) as i64;
-    let offset = ((page - 1) * page_size as i32) as i64;
-
-    let alerts = if let Some(workspace_id) = workspace_id {
-        // `workspace_id` is provided => workspace admin
-        if params.acknowledged.is_none() {
-            // Case: return all rows where `workspace_id` matches
-            sqlx::query_as!(
-                CriticalAlert,
-                "SELECT id, alert_type, message, created_at, COALESCE(acknowledged_workspace, false) AS acknowledged, workspace_id
-                 FROM alerts
-                 WHERE workspace_id = $1
-                 ORDER BY created_at DESC
-                 LIMIT $2 OFFSET $3",
-                workspace_id,
-                page_size,
-                offset
-            )
-            .fetch_all(&db)
-            .await?
-        } else {
-            // Case: return rows where `acknowledged_workspace` matches `params.acknowledged`
-            sqlx::query_as!(
-                CriticalAlert,
-                "SELECT id, alert_type, message, created_at, COALESCE(acknowledged_workspace, false) AS acknowledged, workspace_id
-                 FROM alerts
-                 WHERE workspace_id = $1 AND COALESCE(acknowledged_workspace, false) = $2
-                 ORDER BY created_at DESC
-                 LIMIT $3 OFFSET $4",
-                workspace_id,
-                params.acknowledged,
-                page_size,
-                offset
-            )
-            .fetch_all(&db)
-            .await?
-        }
-    } else {
-        // `workspace_id` is not provided => superadmin
-        if params.acknowledged.is_none() {
-            // Case: Return all rows unfiltered with global acknowledged as acknowledged
-            sqlx::query_as!(
-                CriticalAlert,
-                "SELECT id, alert_type, message, created_at, COALESCE(acknowledged, false) AS acknowledged, workspace_id
-                 FROM alerts
-                 ORDER BY created_at DESC
-                 LIMIT $1 OFFSET $2",
-                page_size,
-                offset
-            )
-            .fetch_all(&db)
-            .await?
-        } else {
-            // Case: Return rows where global acknowledged matches params.acknowledged
-            sqlx::query_as!(
-                CriticalAlert,
-                "SELECT id, alert_type, message, created_at, COALESCE(acknowledged, false) AS acknowledged, workspace_id
-                 FROM alerts
-                 WHERE COALESCE(acknowledged, false) = $1
-                 ORDER BY created_at DESC
-                 LIMIT $2 OFFSET $3",
-                params.acknowledged,
-                page_size,
-                offset
-            )
-            .fetch_all(&db)
-            .await?
-        }
-    };
-
-    Ok(Json(alerts))
-}
-
-#[cfg(feature = "enterprise")]
-pub async fn acknowledge_critical_alert(
-    db: DB,
-    workspace_id: Option<String>,
-    id: i32,
-) -> error::Result<String> {
-    sqlx::query!(
-        "UPDATE alerts
-         SET
-           acknowledged = true,
-           acknowledged_workspace = CASE
-             WHEN $2::text IS NOT NULL AND workspace_id = $2 THEN true
-             ELSE acknowledged_workspace
-           END
-         WHERE id = $1",
-        id,
-        workspace_id
-    )
-    .execute(&db)
-    .await?;
-
-    tracing::info!(
-        "Acknowledged critical alert with id: {}{}",
-        id,
-        workspace_id.map_or_else(|| "".to_string(), |w| format!(" for workspace_id: {}", w))
-    );
-    Ok("Critical alert acknowledged".to_string())
-}
-
-#[cfg(feature = "enterprise")]
-pub async fn acknowledge_all_critical_alerts(
-    db: DB,
-    workspace_id: Option<String>,
-) -> error::Result<String> {
-    sqlx::query!(
-        "UPDATE alerts 
-         SET
-           acknowledged = true,
-           acknowledged_workspace = CASE
-             WHEN $1::text IS NOT NULL THEN true
-             ELSE acknowledged_workspace
-           END
-         WHERE ($1::text IS NOT NULL AND workspace_id = $1)
-            OR ($1::text IS NULL)",
-        workspace_id
-    )
-    .execute(&db)
-    .await?;
-
-    tracing::info!(
-        "Acknowledged all unacknowledged critical alerts{}",
-        workspace_id.map_or_else(|| "".to_string(), |w| format!(" for workspace_id: {}", w))
-    );
-    Ok("All unacknowledged critical alerts acknowledged".to_string())
-}
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
pyranota	ca72c97a32	Create dirs	2024-11-15 01:55:16 +00:00
pyranota	9a5baa8e53	Merge branch 'main' into python-uv	2024-11-14 12:51:10 +00:00
pyranota	0e3d835609	Disable UV for ansible Will be enabled later. Needs proper testing and its better to split onto 2 PRs with first modifying python and second ansible	2024-11-14 12:45:32 +00:00
pyranota	7a8a0bb163	Revert docker-image.yml	2024-11-14 11:47:56 +00:00
pyranota	deff3b0045	Change TMP for windows	2024-11-14 11:39:52 +00:00
pyranota	1b885ce2c2	Merge branch 'python-uv' of github.com:windmill-labs/windmill into python-uv	2024-11-14 11:30:21 +00:00
pyranota	cec82a9cd2	Dont pin python to specific version	2024-11-14 11:30:02 +00:00
pyranota	8a792c9c9d	Merge branch 'main' into python-uv	2024-11-14 10:08:09 +00:00
pyranota	0ea405415e	Merge branch 'main' into python-uv	2024-11-13 22:08:22 +00:00
Alexander Petric	d598731913	fixing for windows	2024-11-13 17:07:14 -05:00
pyranota	5a96d64183	Merge branch 'main' into python-uv	2024-11-13 18:39:10 +00:00
pyranota	a017459e12	Remove line from Dockerfile We dont need it and to trigger build	2024-11-13 18:38:49 +00:00
Ruben Fiszel	eff3e1c43a	Update python_executor.rs	2024-11-03 02:57:00 +01:00
Ruben Fiszel	844acbf00b	Merge branch 'main' into python-uv	2024-11-02 19:48:30 +01:00
pyranota	e0040fe3b3	Merge branch 'main' into python-uv	2024-10-31 14:03:32 +00:00
pyranota	d0bad936f0	Merge branch 'main' into python-uv	2024-10-31 09:50:25 +00:00
pyranota	63340e6ce2	Merge branch 'main' into python-uv	2024-10-31 08:53:45 +00:00
pyranota	c839bae160	Fix flock and windows	2024-10-29 17:51:18 +00:00
pyranota	253452013c	Merge branch 'python-uv' of github.com:windmill-labs/windmill into python-uv	2024-10-29 17:35:18 +00:00
pyranota	af70339d07	Fix NSJAIL INDEX_URL	2024-10-29 17:34:52 +00:00
pyranota	a01c26f0e2	Merge branch 'main' into python-uv	2024-10-29 17:26:25 +00:00
pyranota	b1bcdae01d	Merge branch 'python-uv' of github.com:windmill-labs/windmill into python-uv	2024-10-23 12:04:53 +00:00
pyranota	b1a4f2ab50	Add --link-mode=copy and remove -v	2024-10-23 12:04:27 +00:00
Ruben Fiszel	1ad54e887e	Update docker-image.yml	2024-10-23 11:41:46 +02:00
Ruben Fiszel	a446660345	Update docker-image.yml	2024-10-23 11:41:01 +02:00
Ruben Fiszel	c21182f502	Update Dockerfile	2024-10-23 11:40:04 +02:00
pyranota	54698b3eef	Merge branch 'main' into python-uv	2024-10-23 09:37:29 +00:00
pyranota	59e8004f99	Return deleted flag	2024-10-22 16:57:15 +00:00
pyranota	1271a65b5a	Handle flags for NSJAIL	2024-10-22 16:00:43 +00:00
pyranota	414b9c338b	Remove unused import	2024-10-22 16:00:07 +00:00
pyranota	53909750ef	Support S3	2024-10-22 15:47:47 +00:00
pyranota	60e7fa764c	Initially refactor cache (No S3)	2024-10-22 15:31:56 +00:00
pyranota	a0c86ef4c7	Pip fallback overwrite UV's cache	2024-10-22 14:27:32 +00:00
pyranota	5805554ac8	Fix backend compilation error	2024-10-22 14:15:19 +00:00
pyranota	bd7607d162	Remove `--disable-pip-version-check` Reason: warning: pip's `--disable-pip-version-check` has no effect	2024-10-21 18:23:39 +00:00
pyranota	7985a7bafa	Refactor fallback no_uv disable compile and install where no_uv_install and no_uv_compile are a bit more specific	2024-10-21 18:16:10 +00:00
pyranota	13896a5741	Integrate with NSJAIL and prepare fallbacks	2024-10-21 18:08:35 +00:00
pyranota	e881ed5e00	Merge branch 'main' into python-uv	2024-10-17 13:18:58 +00:00
pyranota	d6a654aaff	feat: Handle `pip install` by `uv` Dirty and untested, but already something working	2024-10-10 12:51:57 +00:00