Files

hugocasa de5b13b840 feat: add end_user_email claim to OIDC ID tokens (#8401 )

* feat: add end_user_email claim to OIDC ID tokens

When a job is triggered by an app end user, the OIDC ID token now
includes the end_user_email claim automatically. The claim is omitted
for jobs without an end user (regular script/flow runs).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* update ee ref

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-17 00:17:03 +00:00

.cargo

chore: add mold linker config for aarch64-unknown-linux-gnu

2026-02-08 12:55:51 +00:00

.sqlx

feat: add end_user_email claim to OIDC ID tokens (#8401 )

2026-03-17 00:17:03 +00:00

.vscode

…

api

…

custom_migrations

fix: fix lowercase migration with existing duplicates

2026-01-27 11:52:24 +00:00

generate_mcp_endpoints_tools

feat(mcp): add endpoint tools for scripts, flows, apps, and jobs (#7859 )

2026-02-10 11:30:39 +00:00

migrations

feat: add auto_commit option to Kafka triggers with advanced UI badges (#8317 )

2026-03-12 14:00:30 +00:00

parsers

Support T | T[] in debounce (#8340 )

2026-03-13 20:31:25 +00:00

src

test: git sync E2E tests + auto-manage git sync script version (#8253 )

2026-03-12 12:48:38 +00:00

tests

test: add powershell module detection and execution tests (#8373 )

2026-03-15 04:11:43 +00:00

windmill-alerting

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api

chore(main): release 1.658.0 (#8382 )

2026-03-16 15:41:17 +00:00

windmill-api-agent-workers

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058 )

2026-03-05 06:19:51 +00:00

windmill-api-assets

feat: Broad filters for search (#8112 )

2026-02-26 14:03:46 +00:00

windmill-api-auth

fix: skip token expiry notifications for debugger and mcp-oauth tokens (#8316 )

2026-03-11 10:47:21 +00:00

windmill-api-client

…

windmill-api-configs

fix: native mode now properly sets DB pool size and sleep queue (#8332 )

2026-03-11 22:39:15 +00:00

windmill-api-debug

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-embeddings

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-flow-conversations

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-flows

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-api-groups

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058 )

2026-03-05 06:19:51 +00:00

windmill-api-inputs

perf: use two-step query in input history to leverage v2_job index (#8197 )

2026-03-02 21:05:35 +00:00

windmill-api-integration-tests

feat: add auto_commit option to Kafka triggers with advanced UI badges (#8317 )

2026-03-12 14:00:30 +00:00

windmill-api-jobs

perf: optimize job_stats storage for timestamps and zero-memory jobs (#8289 )

2026-03-10 04:59:56 +00:00

windmill-api-npm-proxy

fix: validate tarball URL host against registry to prevent SSRF and token exfiltration (#8153 )

2026-02-28 22:03:19 +00:00

windmill-api-openapi

refactor: extract 12 leaf crates from windmill-api (#7899 )

2026-02-11 10:31:03 +00:00

windmill-api-schedule

feat: Broad filters for search (#8112 )

2026-02-26 14:03:46 +00:00

windmill-api-scripts

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-api-settings

feat: support minimal telemetry mode (#8243 )

2026-03-11 19:12:47 +01:00

windmill-api-sse

refactor: extract windmill-api into subcrates for parallel compilation (#7845 )

2026-02-07 22:12:55 +00:00

windmill-api-users

feat: partition audit log table by day with configurable retention (#8292 )

2026-03-11 00:10:29 +00:00

windmill-api-workers

feat: native mode (#7939 )

2026-02-16 23:36:41 +00:00

windmill-api-workspaces

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058 )

2026-03-05 06:19:51 +00:00

windmill-audit

…

windmill-autoscaling

…

windmill-common

feat: add end_user_email claim to OIDC ID tokens (#8401 )

2026-03-17 00:17:03 +00:00

windmill-dep-map

fix: conditionally skip relock on dep job (#7860 )

2026-02-12 23:02:36 +00:00

windmill-duckdb-ffi-internal

feat: Ducklake typechecker (#8118 )

2026-03-04 10:46:08 +00:00

windmill-git-sync

feat: add git sync support for workspace dependencies (#8144 )

2026-03-10 11:29:11 +00:00

windmill-indexer

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

windmill-jseval

fix: parallel branchall hang on bad stop_after_all_iters_if + results.x.length null (#8276 )

2026-03-09 09:45:35 +00:00

windmill-macros

…

windmill-mcp

feat: hash-based MCP tool names for long paths (#8133 )

2026-03-05 12:04:20 +00:00

windmill-native-triggers

fix(native-triggers): preserve API error response body in HttpRequestError (#8392 )

2026-03-16 15:30:59 +00:00

windmill-oauth

fix: mask secrets in OAuth config debug/log output (#8269 )

2026-03-08 15:44:47 +00:00

windmill-object-store

refactor: extract object store into dedicated crate with filesystem backend (#7996 )

2026-02-18 12:24:45 +00:00

windmill-operator

refactor: switch operator from CRD to ConfigMap (#7972 )

2026-02-17 00:06:56 +00:00

windmill-queue

Support T | T[] in debounce (#8340 )

2026-03-13 20:31:25 +00:00

windmill-runtime-nativets

feat: add preprocessor support for dedicated workers and bunnative scripts (#8284 )

2026-03-10 18:26:02 +00:00

windmill-store

feat: support multiple secret variables during resource creation (#8386 )

2026-03-16 14:10:29 +00:00

windmill-test-utils

feat: add git sync support for workspace dependencies (#8144 )

2026-03-10 11:29:11 +00:00

windmill-trigger

feat: add auto_commit option to Kafka triggers with advanced UI badges (#8317 )

2026-03-12 14:00:30 +00:00

windmill-trigger-email

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-gcp

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-http

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-trigger-kafka

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-mqtt

feat: option to preserve on_behalf_of and edited_by for admins and users in the new wm_deployers group (#8079 )

2026-02-25 12:05:22 +00:00

windmill-trigger-nats

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-postgres

fix: remove duplicate num_columns in test_parse_relation test

2026-02-26 08:36:10 +00:00

windmill-trigger-sqs

fix(backend): pass parent_path for trigger renames in git sync (#8059 )

2026-02-25 09:01:59 +00:00

windmill-trigger-websocket

feat: add auto_commit option to Kafka triggers with advanced UI badges (#8317 )

2026-03-12 14:00:30 +00:00

windmill-types

feat: add workspace dependencies support for powershell (#8395 )

2026-03-16 15:37:28 +00:00

windmill-worker

chore: return structured error object on AI agent max iterations (#8403 )

2026-03-16 23:12:29 +00:00

windmill-worker-volumes

feat: add sandbox annotations, volume mounts, for AI sandbox starting with claude (#8058 )

2026-03-05 06:19:51 +00:00

.devcontainer.json

…

.gitattributes

…

.gitignore

…

.ignore

…

.workmux.yaml

chore: add workmux config for worktree-based development (#8015 )

2026-02-19 10:56:41 +00:00

build.rs

…

Cargo.lock

chore(main): release 1.658.0 (#8382 )

2026-03-16 15:41:17 +00:00

Cargo.toml

chore(main): release 1.658.0 (#8382 )

2026-03-16 15:41:17 +00:00

check_no_symlink.sh

…

CLAUDE.md

refactor: slim down claude instructions for lean context and fast iteration (#8136 )

2026-02-28 07:00:19 +00:00

ee-repo-ref.txt

feat: add end_user_email claim to OIDC ID tokens (#8401 )

2026-03-17 00:17:03 +00:00

LICENSE

…

NOTICE

…

oauth_connect.json

…

oauth_login.json

…

openapi-bundled.yaml

…

openapi-deref.yaml

…

out.json

…

overwrite_migrations.py

…

plot2.py

…

plot.py

…

QUICKJS_MIGRATION_ANALYSIS.md

feat: add QuickJS as alternative JS engine for flow expression evaluation (#7664 )

2026-01-29 01:44:40 +00:00

README.md

…

run_until_fail.sh

…

rustfmt.toml

add Claude Code hooks for formatting and notifications (#7767 )

2026-02-04 11:39:16 +00:00

substitute_ee_code.sh

feat: add windmill-ee-private worktree support to workmux (#8034 )

2026-02-20 17:01:49 +01:00

summarize_schema.py

internal: Improve instructions for claude (#7921 )

2026-02-12 07:19:44 +00:00

summarized_schema.txt

feat: add auto_commit option to Kafka triggers with advanced UI badges (#8317 )

2026-03-12 14:00:30 +00:00

test_debounce_e2e.sh

fix: preserve debouncing settings for flows with preprocessors (#8043 )

2026-02-22 14:16:52 +00:00

test_wac_e2e.sh

feat: workflow-as-code (WAC) v2 (#8172 )

2026-03-09 19:39:24 +00:00

update_sqlx.sh

sqlx

2026-02-12 13:19:05 +00:00

write_latest_ee_ref.sh

replace SELECT * with explicit columns in teams command query (#8129 )

2026-02-27 06:54:33 +00:00

README.md

Windmill Backend

This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.

Components

name	description
windmill-api	The API server, exposing functionality to other components and the frontend
windmill-audit	Contains audit functionality, allowing different components to record important actions
windmill-common	Common code shared by all crates
windmill-queue	Contains job & flow queuing functionality, commonly written to by the API server and read from by workers
windmill-worker	The worker. Used to process and execute flows & jobs.
parsers	Contains code to parse signatures in different langauges.

Compile sqlx for offline ci

cargo sqlx prepare --workspace -- --bin windmill --features enterprise