Move nsjail config, overlayfs, tar utilities, S3 operations, and sandbox types from windmill-common and windmill-worker into a dedicated windmill-sandbox crate. S3 logic lives in windmill-ee-private (symlinked s3_ee.rs). Both windmill-api and windmill-worker depend on the new crate. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Windmill API
The API server, exposing functionality to other components and the frontend
This crate exposes both a library as well as a binary target.