Files

Ruben Fiszel 36151a770f fix: validate tarball URL host against registry to prevent SSRF and token exfiltration (#8153 )

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-28 22:03:19 +00:00

.cargo

chore: add mold linker config for aarch64-unknown-linux-gnu

2026-02-08 12:55:51 +00:00

.sqlx

fix: copy deps and remove user auto-add on workspace fork (#8142 )

2026-02-28 07:39:27 +00:00

.vscode

…

api

…

custom_migrations

fix: fix lowercase migration with existing duplicates

2026-01-27 11:52:24 +00:00

generate_mcp_endpoints_tools

feat(mcp): add endpoint tools for scripts, flows, apps, and jobs (#7859 )

2026-02-10 11:30:39 +00:00

migrations

fix: add partial index for fast failure filtering on runs page (#8150 )

2026-02-28 18:18:34 +00:00

parsers

Fix python datatable client requiring explicit types (#8086 )

2026-02-28 07:08:02 +00:00

src

feat: add .npmrc support for private npm registries (#8039 )

2026-02-21 05:29:36 +00:00

tests

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-alerting

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api

fix: add partial index for fast failure filtering on runs page (#8150 )

2026-02-28 18:18:34 +00:00

windmill-api-agent-workers

cargo update with native-tls pin and benchmark feature propagation (#8009 )

2026-02-18 17:35:33 +00:00

windmill-api-assets

feat: Broad filters for search (#8112 )

2026-02-26 14:03:46 +00:00

windmill-api-auth

fix: delete non-session tokens on workspace archive and reject token creation for archived workspaces (#8082 )

2026-02-25 09:04:05 +00:00

windmill-api-client

fix tests

2026-01-09 07:29:07 +00:00

windmill-api-configs

feat: runScript inline for path and hash (#8019 )

2026-02-27 13:59:14 +01:00

windmill-api-debug

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-embeddings

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-flow-conversations

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-flows

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-api-groups

feat: restriction rulesets for workspaces (#7879 )

2026-02-10 16:49:25 +00:00

windmill-api-inputs

fix: add created_by ownership check to update/delete saved inputs (#8038 )

2026-02-21 04:50:24 +00:00

windmill-api-integration-tests

feat: runScript inline for path and hash (#8019 )

2026-02-27 13:59:14 +01:00

windmill-api-jobs

fix: add partial index for fast failure filtering on runs page (#8150 )

2026-02-28 18:18:34 +00:00

windmill-api-npm-proxy

fix: validate tarball URL host against registry to prevent SSRF and token exfiltration (#8153 )

2026-02-28 22:03:19 +00:00

windmill-api-openapi

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-schedule

feat: Broad filters for search (#8112 )

2026-02-26 14:03:46 +00:00

windmill-api-scripts

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-api-settings

feat: Data table as pg resource / trigger (#8088 )

2026-02-25 15:06:12 +00:00

windmill-api-sse

refactor: extract windmill-api into subcrates for parallel compilation (#7845 )

2026-02-07 22:12:55 +00:00

windmill-api-users

feat: add Kubernetes operator and instance settings YAML editor (#7836 )

2026-02-14 22:42:01 +00:00

windmill-api-workers

feat: native mode (#7939 )

2026-02-16 23:36:41 +00:00

windmill-api-workspaces

fix: copy deps and remove user auto-add on workspace fork (#8142 )

2026-02-28 07:39:27 +00:00

windmill-audit

fix(backend): add presigned url support for object storage (#7328 )

2025-12-10 15:35:26 +00:00

windmill-autoscaling

…

windmill-common

feat: runScript inline for path and hash (#8019 )

2026-02-27 13:59:14 +01:00

windmill-dep-map

fix: conditionally skip relock on dep job (#7860 )

2026-02-12 23:02:36 +00:00

windmill-duckdb-ffi-internal

Update duckdb (#8110 )

2026-02-26 10:34:10 +00:00

windmill-git-sync

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-indexer

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

windmill-jseval

fix: use main runtime handle in QuickJS eval to prevent connection pool poisoning (#8106 )

2026-02-26 08:45:37 +00:00

windmill-macros

Allow empty lines in annotations (#7394 )

2025-12-16 19:07:19 +02:00

windmill-mcp

fix compile

2026-02-10 23:34:15 +00:00

windmill-native-triggers

feat: populate baseUrl and userId in Nextcloud resource from OAuth (#8132 )

2026-02-28 07:03:15 +00:00

windmill-oauth

refactor: oauth (#7998 )

2026-02-18 17:27:15 +00:00

windmill-object-store

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

windmill-operator

refactor: switch operator from CRD to ConfigMap (#7972 )

2026-02-17 00:06:56 +00:00

windmill-queue

feat: runScript inline for path and hash (#8019 )

2026-02-27 13:59:14 +01:00

windmill-runtime-nativets

feat: dedicated nativets (#8021 )

2026-02-20 16:28:40 +00:00

windmill-store

feat: Broad filters for search (#8112 )

2026-02-26 14:03:46 +00:00

windmill-test-utils

feat: runScript inline for path and hash (#8019 )

2026-02-27 13:59:14 +01:00

windmill-trigger

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-trigger-email

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-gcp

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-http

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-trigger-kafka

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-mqtt

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-trigger-nats

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-postgres

fix: remove duplicate num_columns in test_parse_relation test

2026-02-26 08:36:10 +00:00

windmill-trigger-sqs

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-websocket

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-types

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-worker

Fix python datatable client requiring explicit types (#8086 )

2026-02-28 07:08:02 +00:00

.devcontainer.json

…

.gitattributes

…

.gitignore

fix: do not request unecessarily get_scheduled_for

2025-09-26 15:06:42 +00:00

.ignore

…

.workmux.yaml

chore: add workmux config for worktree-based development (#8015 )

2026-02-19 10:56:41 +00:00

build.rs

…

Cargo.lock

fix: validate tarball URL host against registry to prevent SSRF and token exfiltration (#8153 )

2026-02-28 22:03:19 +00:00

Cargo.toml

Fix python datatable client requiring explicit types (#8086 )

2026-02-28 07:08:02 +00:00

check_no_symlink.sh

…

CLAUDE.md

refactor: slim down claude instructions for lean context and fast iteration (#8136 )

2026-02-28 07:00:19 +00:00

ee-repo-ref.txt

replace SELECT * with explicit columns in teams command query (#8129 )

2026-02-27 06:54:33 +00:00

LICENSE

…

NOTICE

…

oauth_connect.json

fix: apify oauth (#6902 )

2025-10-23 20:15:34 +00:00

oauth_login.json

…

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

fix extra migration startup issue

2025-09-02 20:15:37 +00:00

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

feat: add QuickJS as alternative JS engine for flow expression evaluation (#7664 )

2026-01-29 01:44:40 +00:00

README.md

…

run_until_fail.sh

DuckDB test to ensure FFI doesn't crash on simple query (#7147 )

2025-11-15 11:56:45 +00:00

rustfmt.toml

add Claude Code hooks for formatting and notifications (#7767 )

2026-02-04 11:39:16 +00:00

substitute_ee_code.sh

feat: add windmill-ee-private worktree support to workmux (#8034 )

2026-02-20 17:01:49 +01:00

summarize_schema.py

internal: Improve instructions for claude (#7921 )

2026-02-12 07:19:44 +00:00

summarized_schema.txt

feat: add fileset resource type support

2026-02-23 17:50:37 +00:00

test_debounce_e2e.sh

fix: preserve debouncing settings for flows with preprocessors (#8043 )

2026-02-22 14:16:52 +00:00

update_sqlx.sh

sqlx

2026-02-12 13:19:05 +00:00

write_latest_ee_ref.sh

replace SELECT * with explicit columns in teams command query (#8129 )

2026-02-27 06:54:33 +00:00

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise