windmill-cli 1.662.0 → 1.664.0

package/esm/main.js

@@ -11785,7 +11785,7 @@ var init_OpenAPI = __esm(() => {
     PASSWORD: undefined,
     TOKEN: getEnv2("WM_TOKEN"),
     USERNAME: undefined,
-    VERSION: "1.662.0",
+    VERSION: "1.664.0",
     WITH_CREDENTIALS: true,
     interceptors: {
       request: new Interceptors,
@@ -12114,6 +12114,7 @@ __export(exports_services_gen, {
   testCriticalChannels: () => testCriticalChannels,
   syncNativeTriggers: () => syncNativeTriggers,
   submitOnboardingData: () => submitOnboardingData,
+  storeRawScriptTemp: () => storeRawScriptTemp,
   startMcpOauthPopup: () => startMcpOauthPopup,
   star: () => star,
   signS3Objects: () => signS3Objects,
@@ -12180,6 +12181,7 @@ __export(exports_services_gen, {
   resumeSuspendedJobPost: () => resumeSuspendedJobPost,
   resumeSuspendedJobGet: () => resumeSuspendedJobGet,
   resumeSuspendedFlowAsOwner: () => resumeSuspendedFlowAsOwner,
+  resumeSuspended: () => resumeSuspended,
   resultById: () => resultById,
   restartFlowAtStep: () => restartFlowAtStep,
   resolveNpmPackageVersion: () => resolveNpmPackageVersion,
@@ -12480,6 +12482,7 @@ __export(exports_services_gen, {
   getCriticalAlerts: () => getCriticalAlerts,
   getCountsOfRunningJobsPerTag: () => getCountsOfRunningJobsPerTag,
   getCountsOfJobsWaitingPerTag: () => getCountsOfJobsWaitingPerTag,
+  getCopilotSettingsState: () => getCopilotSettingsState,
   getCopilotInfo: () => getCopilotInfo,
   getConfig: () => getConfig,
   getConcurrencyKey: () => getConcurrencyKey,
@@ -12494,6 +12497,7 @@ __export(exports_services_gen, {
   getCapture: () => getCapture,
   getAuditLog: () => getAuditLog,
   getArgsFromHistoryOrSavedInput: () => getArgsFromHistoryOrSavedInput,
+  getApprovalInfo: () => getApprovalInfo,
   getAppLiteByPath: () => getAppLiteByPath,
   getAppLatestVersion: () => getAppLatestVersion,
   getAppHistoryByPath: () => getAppHistoryByPath,
@@ -12563,6 +12567,7 @@ __export(exports_services_gen, {
   disconnectTeams: () => disconnectTeams,
   disconnectSlack: () => disconnectSlack,
   disconnectAccount: () => disconnectAccount,
+  diffRawScriptsWithDeployed: () => diffRawScriptsWithDeployed,
   deleteWorkspaceSlackOauthConfig: () => deleteWorkspaceSlackOauthConfig,
   deleteWorkspaceDependencies: () => deleteWorkspaceDependencies,
   deleteWorkspace: () => deleteWorkspace,
@@ -13748,6 +13753,14 @@ var backendVersion = () => {
     body: data2.requestBody,
     mediaType: "application/json"
   });
+}, getCopilotSettingsState = (data2) => {
+  return request(OpenAPI, {
+    method: "GET",
+    url: "/w/{workspace}/workspaces/get_copilot_settings_state",
+    path: {
+      workspace: data2.workspace
+    }
+  });
 }, getCopilotInfo = (data2) => {
   return request(OpenAPI, {
     method: "GET",
@@ -15125,6 +15138,26 @@ var backendVersion = () => {
       hash: data2.hash
     }
   });
+}, storeRawScriptTemp = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/scripts/raw_temp/store",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, diffRawScriptsWithDeployed = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/scripts/raw_temp/diff",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
 }, listSelectedJobGroups = (data2) => {
   return request(OpenAPI, {
     method: "POST",
@@ -16771,6 +16804,29 @@ var backendVersion = () => {
       cancel_button_text: data2.cancelButtonText
     }
   });
+}, resumeSuspended = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/jobs_u/flow/resume_suspended/{job_id}",
+    path: {
+      workspace: data2.workspace,
+      job_id: data2.jobId
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, getApprovalInfo = (data2) => {
+  return request(OpenAPI, {
+    method: "GET",
+    url: "/w/{workspace}/jobs_u/flow/approval_info/{job_id}",
+    path: {
+      workspace: data2.workspace,
+      job_id: data2.jobId
+    },
+    query: {
+      token: data2.token
+    }
+  });
 }, resumeSuspendedJobGet = (data2) => {
   return request(OpenAPI, {
     method: "GET",
@@ -24269,6 +24325,15 @@ function isAppPath(p) {
 function isRawAppPath(p) {
   return normalizeSep(p).includes(getFolderSuffixes().raw_app + "/");
 }
+function isFolderResourcePathAnyFormat(p) {
+  const n = normalizeSep(p);
+  for (const suffixes of [DOTTED_SUFFIXES, NON_DOTTED_SUFFIXES]) {
+    if (n.includes(suffixes.flow + "/") || n.includes(suffixes.app + "/") || n.includes(suffixes.raw_app + "/")) {
+      return true;
+    }
+  }
+  return false;
+}
 function isRawAppBackendPath(filePath) {
   const suffixes = getFolderSuffixes();
   const normalizedPath = filePath.replaceAll(SEP2, "/");
@@ -58861,7 +58926,7 @@ var init_tar = __esm(() => {
 });
 
 // src/commands/script/script.ts
-import { readFile as readFile5, writeFile as writeFile4, stat as stat3 } from "node:fs/promises";
+import { readFile as readFile5, writeFile as writeFile4, stat as stat3, mkdir as mkdir3 } from "node:fs/promises";
 import { Buffer as Buffer4 } from "node:buffer";
 import { sep as SEP4 } from "node:path";
 import * as path5 from "node:path";
@@ -58891,7 +58956,7 @@ async function push(opts, filePath) {
   }
   await requireLogin(opts);
   const codebases = await listSyncCodebases(opts);
-  await handleFile(filePath, workspace, [], undefined, opts, await getRawWorkspaceDependencies(), codebases);
+  await handleFile(filePath, workspace, [], undefined, opts, await getRawWorkspaceDependencies(true), codebases);
   info(colors.bold.underline.green(`Script ${filePath} pushed`));
 }
 async function findResourceFile(path6) {
@@ -59437,12 +59502,13 @@ async function bootstrap(opts, scriptPath, language) {
   if (!validatePath(scriptPath)) {
     return;
   }
-  const scriptInitialCode = scriptBootstrapCode[language];
+  const resolvedLanguage = languageAliases[language] ?? language;
+  const scriptInitialCode = scriptBootstrapCode[resolvedLanguage];
   if (scriptInitialCode === undefined) {
     throw new Error("Language unknown");
   }
   const config = await readConfigFile();
-  const extension = filePathExtensionFromContentType(language, config.defaultTs);
+  const extension = filePathExtensionFromContentType(resolvedLanguage, config.defaultTs);
   const scriptCodeFileFullPath = scriptPath + extension;
   const scriptMetadataFileFullPath = scriptPath + ".script.yaml";
   try {
@@ -59467,6 +59533,8 @@ async function bootstrap(opts, scriptPath, language) {
     scriptMetadata.description = opts.description;
   }
   const scriptInitialMetadataYaml = import_yaml5.stringify(scriptMetadata, yamlOptions);
+  const parentDir = path5.dirname(scriptCodeFileFullPath);
+  await mkdir3(parentDir, { recursive: true });
   await writeFile4(scriptCodeFileFullPath, scriptInitialCode, {
     flag: "wx",
     encoding: "utf-8"
@@ -59489,7 +59557,7 @@ async function generateMetadata(opts, scriptPath) {
   await requireLogin(opts);
   opts = await mergeConfigWithConfigFile(opts);
   const codebases = await listSyncCodebases(opts);
-  const rawWorkspaceDependencies = await getRawWorkspaceDependencies();
+  const rawWorkspaceDependencies = await getRawWorkspaceDependencies(true);
   if (scriptPath) {
     await generateScriptMetadataInternal(scriptPath, workspace, opts, false, false, rawWorkspaceDependencies, codebases, false);
   } else {
@@ -59682,7 +59750,7 @@ async function preview(opts, filePath) {
     }
   }
 }
-var import_yaml5, exts, command3, script_default;
+var import_yaml5, exts, languageAliases, command3, script_default;
 var init_script = __esm(async () => {
   init_colors2();
   init_mod3();
@@ -59734,6 +59802,9 @@ var init_script = __esm(async () => {
     ".java",
     ".rb"
   ];
+  languageAliases = {
+    python: "python3"
+  };
   command3 = new Command().description("script related commands").option("--show-archived", "Enable archived scripts in output").option("--json", "Output as JSON (for piping to jq)").action(list2).command("list", "list all scripts").option("--show-archived", "Enable archived scripts in output").option("--json", "Output as JSON (for piping to jq)").action(list2).command("push", "push a local script spec. This overrides any remote versions. Use the script file (.ts, .js, .py, .sh)").arguments("<path:file>").action(push).command("get", "get a script's details").arguments("<path:file>").option("--json", "Output as JSON (for piping to jq)").action(get).command("show", "show a script's content (alias for get)").arguments("<path:file>").action(show).command("run", "run a script by path").arguments("<path:file>").option("-d --data <data:file>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").action(run2).command("preview", "preview a local script without deploying it. Supports both regular and codebase scripts.").arguments("<path:file>").option("-d --data <data:file>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other than the final output. Useful for scripting.").action(preview).command("new", "create a new script").arguments("<path:file> <language:string>").option("--summary <summary:string>", "script summary").option("--description <description:string>", "script description").action(bootstrap).command("bootstrap", "create a new script (alias for new)").arguments("<path:file> <language:string>").option("--summary <summary:string>", "script summary").option("--description <description:string>", "script description").action(bootstrap).command("generate-metadata", "re-generate the metadata file updating the lock and the script schema (for flows, use `wmill flow generate-locks`)").arguments("[script:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("--lock-only", "re-generate only the lock").option("--schema-only", "re-generate only script schema").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateMetadata);
   script_default = command3;
 });
@@ -60772,6 +60843,33 @@ function collectPathScriptPaths(flowValue) {
   return [...paths];
 }
 
+// src/utils/relative_imports.ts
+async function extractRelativeImports(code2, scriptPath, language) {
+  try {
+    switch (language) {
+      case "bun":
+      case "nativets":
+      case "deno": {
+        const { parse_ts_relative_imports } = await loadParser("windmill-parser-wasm-ts");
+        return parse_ts_relative_imports(code2, scriptPath);
+      }
+      case "python3": {
+        const { parse_py_relative_imports } = await loadParser("windmill-parser-wasm-py-imports");
+        return parse_py_relative_imports(code2, scriptPath);
+      }
+      default:
+        return [];
+    }
+  } catch (e) {
+    warn(`Failed to parse relative imports for ${scriptPath}: ${e}. Dependency tracking for relative imports will be disabled.`);
+    return [];
+  }
+}
+var init_relative_imports = __esm(async () => {
+  init_log();
+  await init_metadata();
+});
+
 // src/commands/flow/flow_metadata.ts
 import * as path7 from "node:path";
 import { sep as SEP7 } from "node:path";
@@ -60787,7 +60885,7 @@ async function generateFlowHash(rawWorkspaceDependencies, folder, defaultTs) {
   }
   return { ...hashes, [TOP_HASH]: await generateHash(JSON.stringify(hashes)) };
 }
-async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage) {
+async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage, legacyBehaviour, tree) {
   if (folder.endsWith(SEP7)) {
     folder = folder.substring(0, folder.length - 1);
   }
@@ -60795,24 +60893,65 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
   if (!justUpdateMetadataLock && !noStaleMessage) {
     info(`Generating lock for flow ${folder} at ${remote_path}`);
   }
-  const rawWorkspaceDependencies = await getRawWorkspaceDependencies();
   const flowValue = await yamlParseFile(folder + SEP7 + "flow.yaml");
-  const filteredDeps = await filterWorkspaceDependenciesForFlow(flowValue.value, rawWorkspaceDependencies, folder);
-  let hashes = await generateFlowHash(filteredDeps, folder, opts.defaultTs);
+  const folderNormalized = folder.replaceAll(SEP7, "/");
+  const inlineScriptsForTree = extractInlineScripts(structuredClone(flowValue.value.modules), {}, SEP7, opts.defaultTs).filter((s) => !s.is_lock);
+  let filteredDeps = {};
   const conf = await readLockfile();
-  if (await checkifMetadataUptodate(folder, hashes[TOP_HASH], conf, TOP_HASH)) {
-    if (!noStaleMessage) {
-      info(colors.green(`Flow ${remote_path} metadata is up-to-date, skipping`));
+  if (!legacyBehaviour && tree) {
+    if (dryRun) {
+      const inlineScriptPaths = [];
+      for (const script of inlineScriptsForTree) {
+        let content = script.content;
+        if (content.startsWith("!inline ")) {
+          const filePath = folder + SEP7 + content.replace("!inline ", "");
+          try {
+            content = await readFile7(filePath, "utf-8");
+          } catch {
+            continue;
+          }
+        }
+        const treePath = folderNormalized + "/" + path7.basename(script.path, path7.extname(script.path));
+        const language = script.language;
+        const imports = await extractRelativeImports(content, treePath, language);
+        await tree.addNode(treePath, content, language, "", imports, "inline_script", folderNormalized, folder, false);
+        inlineScriptPaths.push(treePath);
+      }
+      const hashes = await generateFlowHash({}, folder, opts.defaultTs);
+      const isDirectlyStale = !await checkifMetadataUptodate(folder, hashes[TOP_HASH], conf, TOP_HASH);
+      await tree.addNode(folderNormalized, "", "bun", "", inlineScriptPaths, "flow", folderNormalized, folder, isDirectlyStale);
+      return;
+    }
+    filteredDeps = await filterWorkspaceDependenciesForFlow(flowValue.value, tree.getMismatchedWorkspaceDeps(), folder);
+  } else {
+    const rawWorkspaceDependencies = await getRawWorkspaceDependencies(true);
+    filteredDeps = await filterWorkspaceDependenciesForFlow(flowValue.value, rawWorkspaceDependencies, folder);
+    const hashes = await generateFlowHash(filteredDeps, folder, opts.defaultTs);
+    const isDirectlyStale = !await checkifMetadataUptodate(folder, hashes[TOP_HASH], conf, TOP_HASH);
+    if (!isDirectlyStale) {
+      if (!noStaleMessage) {
+        info(colors.green(`Flow ${remote_path} metadata is up-to-date, skipping`));
+      }
+      return;
+    } else if (dryRun) {
+      return remote_path;
     }
-    return;
-  } else if (dryRun) {
-    return remote_path;
   }
   if (Object.keys(filteredDeps).length > 0 && !noStaleMessage) {
     info((await blueColor())(`Found workspace dependencies (${workspaceDependenciesLanguages.map((l) => l.filename).join("/")}) for ${folder}, using them`));
   }
   let changedScripts = [];
+  const fileToTreePath = new Map;
+  for (const script of inlineScriptsForTree) {
+    const c = script.content;
+    if (c.startsWith("!inline ")) {
+      const fileName = c.replace("!inline ", "");
+      const treePath = folderNormalized + "/" + path7.basename(script.path, path7.extname(script.path));
+      fileToTreePath.set(fileName, treePath);
+    }
+  }
   if (!justUpdateMetadataLock) {
+    const hashes = await generateFlowHash(filteredDeps, folder, opts.defaultTs);
     for (const [path8, hash2] of Object.entries(hashes)) {
       if (path8 == TOP_HASH) {
         continue;
@@ -60825,14 +60964,21 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
       info(`Recomputing locks of ${changedScripts.join(", ")} in ${folder}`);
     }
     const fileReader = async (path8) => await readFile7(folder + SEP7 + path8, "utf-8");
-    await replaceInlineScripts(flowValue.value.modules, fileReader, exports_log, folder + SEP7, SEP7, changedScripts);
+    const locksToRemove = tree && !legacyBehaviour ? Object.keys(hashes).filter((k) => {
+      if (k === TOP_HASH)
+        return false;
+      const treePath = fileToTreePath.get(k) ?? folderNormalized + "/" + path7.basename(k, path7.extname(k));
+      return tree.isStale(treePath);
+    }) : changedScripts;
+    await replaceInlineScripts(flowValue.value.modules, fileReader, exports_log, folder + SEP7, SEP7, locksToRemove);
     if (flowValue.value.failure_module) {
-      await replaceInlineScripts([flowValue.value.failure_module], fileReader, exports_log, folder + SEP7, SEP7, changedScripts);
+      await replaceInlineScripts([flowValue.value.failure_module], fileReader, exports_log, folder + SEP7, SEP7, locksToRemove);
     }
     if (flowValue.value.preprocessor_module) {
-      await replaceInlineScripts([flowValue.value.preprocessor_module], fileReader, exports_log, folder + SEP7, SEP7, changedScripts);
+      await replaceInlineScripts([flowValue.value.preprocessor_module], fileReader, exports_log, folder + SEP7, SEP7, locksToRemove);
     }
-    flowValue.value = await updateFlow2(workspace, flowValue.value, remote_path, filteredDeps);
+    const tempScriptRefs = tree?.getTempScriptRefs(folderNormalized);
+    flowValue.value = await updateFlow2(workspace, flowValue.value, remote_path, filteredDeps, tempScriptRefs);
     const lockAssigner = newPathAssigner(opts.defaultTs ?? "bun", {
       skipInlineScriptSuffix: getNonDottedPaths()
     });
@@ -60848,15 +60994,22 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
     });
     writeIfChanged(process.cwd() + SEP7 + folder + SEP7 + "flow.yaml", import_yaml8.stringify(flowValue));
   }
-  hashes = await generateFlowHash(filteredDeps, folder, opts.defaultTs);
+  const depsForHash = tree && !legacyBehaviour ? {} : filteredDeps;
+  const finalHashes = await generateFlowHash(depsForHash, folder, opts.defaultTs);
   await clearGlobalLock(folder);
-  for (const [path8, hash2] of Object.entries(hashes)) {
+  for (const [path8, hash2] of Object.entries(finalHashes)) {
     await updateMetadataGlobalLock(folder, hash2, path8);
   }
   if (!noStaleMessage) {
     info(colors.green(`Flow ${remote_path} lockfiles updated`));
   }
-  const updatedScripts = changedScripts.map((p) => {
+  const relocked = tree && !legacyBehaviour ? Object.keys(finalHashes).filter((k) => {
+    if (k === TOP_HASH)
+      return false;
+    const treePath = fileToTreePath.get(k) ?? folderNormalized + "/" + path7.basename(k, path7.extname(k));
+    return tree.isStale(treePath);
+  }) : changedScripts;
+  const updatedScripts = relocked.map((p) => {
     const parts = p.split(SEP7);
     return parts[parts.length - 1].replace(/\.[^.]+$/, "");
   });
@@ -60875,7 +61028,7 @@ async function filterWorkspaceDependenciesForFlow(flowValue, rawWorkspaceDepende
   const scripts = inlineScripts.filter((s) => !s.is_lock).map((s) => ({ content: s.content, language: s.language }));
   return await filterWorkspaceDependenciesForScripts(scripts, rawWorkspaceDependencies, folder, SEP7);
 }
-async function updateFlow2(workspace, flow_value, remotePath, rawWorkspaceDependencies) {
+async function updateFlow2(workspace, flow_value, remotePath, rawWorkspaceDependencies, tempScriptRefs) {
   let rawResponse;
   if (Object.keys(rawWorkspaceDependencies).length > 0) {
     info(colors.blue("Using raw workspace dependencies for flow dependencies"));
@@ -60891,7 +61044,8 @@ async function updateFlow2(workspace, flow_value, remotePath, rawWorkspaceDepend
         flow_value,
         path: remotePath,
         use_local_lockfiles: true,
-        raw_workspace_dependencies: rawWorkspaceDependencies
+        raw_workspace_dependencies: rawWorkspaceDependencies,
+        ...tempScriptRefs && Object.keys(tempScriptRefs).length > 0 ? { temp_script_refs: tempScriptRefs } : {}
       })
     });
   } else {
@@ -60905,7 +61059,8 @@ async function updateFlow2(workspace, flow_value, remotePath, rawWorkspaceDepend
       },
       body: JSON.stringify({
         flow_value,
-        path: remotePath
+        path: remotePath,
+        ...tempScriptRefs && Object.keys(tempScriptRefs).length > 0 ? { temp_script_refs: tempScriptRefs } : {}
       })
     });
   }
@@ -60942,7 +61097,8 @@ var init_flow_metadata = __esm(async () => {
     init_metadata(),
     init_utils(),
     init_script(),
-    init_sync()
+    init_sync(),
+    init_relative_imports()
   ]);
   import_yaml8 = __toESM(require_dist(), 1);
 });
@@ -60965,7 +61121,7 @@ __export(exports_sync, {
   default: () => sync_default,
   FSFSElement: () => FSFSElement
 });
-import { readFile as readFile8, writeFile as writeFile6, readdir as readdir4, stat as stat6, rm, copyFile, mkdir as mkdir3 } from "node:fs/promises";
+import { readFile as readFile8, writeFile as writeFile6, readdir as readdir4, stat as stat6, rm, copyFile, mkdir as mkdir4 } from "node:fs/promises";
 import * as path8 from "node:path";
 import { sep as SEP8 } from "node:path";
 function mergeCliWithEffectiveOptions(cliOpts, effectiveOpts) {
@@ -62268,7 +62424,7 @@ async function pull(opts) {
     throw error2;
   }
   if (opts.stateful) {
-    await mkdir3(path8.join(process.cwd(), ".wmill"), { recursive: true });
+    await mkdir4(path8.join(process.cwd(), ".wmill"), { recursive: true });
   }
   const workspace = await resolveWorkspace(opts, opts.branch);
   await requireLogin(opts);
@@ -62367,13 +62523,13 @@ Both local and remote have been modified.`));
         }
         await writeFile6(target, change.after, "utf-8");
         if (opts.stateful) {
-          await mkdir3(path8.dirname(stateTarget), { recursive: true });
+          await mkdir4(path8.dirname(stateTarget), { recursive: true });
           await copyFile(target, stateTarget);
         }
       } else if (change.name === "added") {
-        await mkdir3(path8.dirname(target), { recursive: true });
+        await mkdir4(path8.dirname(target), { recursive: true });
         if (opts.stateful) {
-          await mkdir3(path8.dirname(stateTarget), { recursive: true });
+          await mkdir4(path8.dirname(stateTarget), { recursive: true });
           info(`Adding ${getTypeStrFromPath(change.path)} ${targetPath}${targetPath !== change.path ? colors.gray(` (branch-specific override for ${change.path})`) : ""}`);
         }
         await writeFile6(target, change.content, "utf-8");
@@ -62412,7 +62568,7 @@ Both local and remote have been modified.`));
     info("All local changes pulled, now updating wmill-lock.yaml");
     await readLockfile();
     const tracker = await buildTracker(changes);
-    const rawWorkspaceDependencies = await getRawWorkspaceDependencies();
+    const rawWorkspaceDependencies = await getRawWorkspaceDependencies(true);
     for (const change of tracker.scripts) {
       await generateScriptMetadataInternal(change, workspace, opts, false, true, rawWorkspaceDependencies, codebases, true);
     }
@@ -62557,7 +62713,7 @@ Push aborted: ${lockIssues.length} script(s) missing locks.`));
   const remote = ZipFSElement(await downloadZip(workspace, opts.plainSecrets, opts.skipVariables, opts.skipResources, opts.skipResourceTypes, opts.skipSecrets, opts.includeSchedules, opts.includeTriggers, opts.includeUsers, opts.includeGroups, opts.includeSettings, opts.includeKey, opts.skipWorkspaceDependencies, opts.defaultTs), !opts.json, opts.defaultTs ?? "bun", resourceTypeToFormatExtension, resourceTypeToIsFileset, false);
   const local = await FSFSElement(path8.join(process.cwd(), ""), codebases, false);
   const changes = await compareDynFSElement(local, remote, await ignoreF(opts), opts.json ?? false, opts, true, codebases, false, specificItems, opts.branch, false);
-  const rawWorkspaceDependencies = await getRawWorkspaceDependencies();
+  const rawWorkspaceDependencies = await getRawWorkspaceDependencies(true);
   const tracker = await buildTracker(changes);
   const staleScripts = [];
   const staleFlows = [];
@@ -62752,7 +62908,7 @@ ${folderList}
                 continue;
               }
               if (stateTarget) {
-                await mkdir3(path8.dirname(stateTarget), { recursive: true });
+                await mkdir4(path8.dirname(stateTarget), { recursive: true });
                 info(`Editing ${getTypeStrFromPath(change.path)} ${change.path}`);
               }
               if (isFileResource(change.path)) {
@@ -62809,7 +62965,7 @@ ${folderList}
                 continue;
               }
               if (stateTarget) {
-                await mkdir3(path8.dirname(stateTarget), { recursive: true });
+                await mkdir4(path8.dirname(stateTarget), { recursive: true });
                 info(`Adding ${getTypeStrFromPath(change.path)} ${change.path}`);
               }
               const obj = parseFromPath(change.path, change.content);
@@ -63351,30 +63507,6 @@ var init_parse_schema = __esm(() => {
 });
 
 // src/utils/metadata.ts
-var exports_metadata = {};
-__export(exports_metadata, {
-  workspaceDependenciesPathToLanguageAndFilename: () => workspaceDependenciesPathToLanguageAndFilename,
-  updateScriptSchema: () => updateScriptSchema,
-  updateMetadataGlobalLock: () => updateMetadataGlobalLock,
-  replaceLock: () => replaceLock,
-  readLockfile: () => readLockfile,
-  parseMetadataFileIfExists: () => parseMetadataFileIfExists,
-  parseMetadataFile: () => parseMetadataFile,
-  normalizeLockPath: () => normalizeLockPath,
-  inferSchema: () => inferSchema,
-  getRawWorkspaceDependencies: () => getRawWorkspaceDependencies,
-  generateScriptMetadataInternal: () => generateScriptMetadataInternal,
-  generateScriptHash: () => generateScriptHash,
-  filterWorkspaceDependenciesForScripts: () => filterWorkspaceDependenciesForScripts,
-  filterWorkspaceDependencies: () => filterWorkspaceDependencies,
-  extractWorkspaceDepsAnnotation: () => extractWorkspaceDepsAnnotation,
-  computeLockCacheKey: () => computeLockCacheKey,
-  clearLockCache: () => clearLockCache,
-  clearGlobalLock: () => clearGlobalLock,
-  checkifMetadataUptodate: () => checkifMetadataUptodate,
-  blueColor: () => blueColor,
-  LockfileGenerationError: () => LockfileGenerationError
-});
 import { sep as SEP9 } from "node:path";
 import { readFile as readFile9, writeFile as writeFile7, stat as stat7, rm as rm2, readdir as readdir5 } from "node:fs/promises";
 import { readFileSync as readFileSync3, existsSync as existsSync4, readdirSync, statSync, writeFileSync as writeFileSync2 } from "node:fs";
@@ -63393,7 +63525,7 @@ function loadParser(pkgName) {
   }
   return p;
 }
-async function getRawWorkspaceDependencies() {
+async function getRawWorkspaceDependencies(legacyBehaviour) {
   const rawWorkspaceDeps = {};
   try {
     const entries = await readdir5("dependencies", { withFileTypes: true });
@@ -63404,9 +63536,13 @@ async function getRawWorkspaceDependencies() {
       const content = await readFile9(filePath, "utf-8");
       for (const lang of workspaceDependenciesLanguages) {
         if (entry.name.endsWith(lang.filename)) {
-          const contentHash = await generateHash(content + filePath);
-          const isUpToDate = await checkifMetadataUptodate(filePath, contentHash, undefined);
-          if (!isUpToDate) {
+          if (legacyBehaviour) {
+            const contentHash = await generateHash(content + filePath);
+            const isUpToDate = await checkifMetadataUptodate(filePath, contentHash, undefined);
+            if (!isUpToDate) {
+              rawWorkspaceDeps[filePath] = content;
+            }
+          } else {
             rawWorkspaceDeps[filePath] = content;
           }
           break;
@@ -63463,7 +63599,7 @@ async function blueColor() {
   const isWin2 = await getIsWin();
   return isWin2 ? colors.black : colors.blue;
 }
-async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRun, noStaleMessage, rawWorkspaceDependencies, codebases, justUpdateMetadataLock) {
+async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRun, noStaleMessage, rawWorkspaceDependencies, codebases, justUpdateMetadataLock, legacyBehaviour, tree) {
   const isFolderLayout = isModuleEntryPoint(scriptPath);
   const remotePath = isFolderLayout ? getScriptBasePathFromModulePath(scriptPath).replaceAll(SEP9, "/") : scriptPath.substring(0, scriptPath.indexOf(".")).replaceAll(SEP9, "/");
   const language = inferContentTypeFromFilePath(scriptPath, opts.defaultTs);
@@ -63473,10 +63609,11 @@ async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRu
   const filteredRawWorkspaceDependencies = filterWorkspaceDependencies(rawWorkspaceDependencies, scriptContent, language);
   const moduleFolderPath = isFolderLayout ? path9.dirname(scriptPath) : scriptPath.substring(0, scriptPath.indexOf(".")) + getModuleFolderSuffix();
   const hasModules = existsSync4(moduleFolderPath) && statSync(moduleFolderPath).isDirectory();
-  let hash2 = await generateScriptHash(filteredRawWorkspaceDependencies, scriptContent, metadataContent);
+  const depsForHash = !legacyBehaviour && tree ? {} : filteredRawWorkspaceDependencies;
+  let hash2 = await generateScriptHash(depsForHash, scriptContent, metadataContent);
   let moduleHashes = {};
   if (hasModules) {
-    moduleHashes = await computeModuleHashes(moduleFolderPath, opts.defaultTs, rawWorkspaceDependencies, isFolderLayout);
+    moduleHashes = await computeModuleHashes(moduleFolderPath, opts.defaultTs, !legacyBehaviour && tree ? {} : rawWorkspaceDependencies, isFolderLayout);
   }
   const hasModuleHashes = Object.keys(moduleHashes).length > 0;
   let checkHash = hash2;
@@ -63487,25 +63624,34 @@ async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRu
     checkSubpath = SCRIPT_TOP_HASH;
   }
   const conf = await readLockfile();
-  if (await checkifMetadataUptodate(remotePath, checkHash, conf, checkSubpath)) {
-    if (!noStaleMessage) {
-      info(colors.green(`Script ${remotePath} metadata is up-to-date, skipping`));
+  const isDirectlyStale = !await checkifMetadataUptodate(remotePath, checkHash, conf, checkSubpath);
+  if (!legacyBehaviour && tree) {
+    if (dryRun) {
+      const imports = await extractRelativeImports(scriptContent, remotePath, language);
+      await tree.addNode(remotePath, scriptContent, language, metadataContent, imports, "script", remotePath, scriptPath, isDirectlyStale);
+      return;
     }
-    return;
-  } else if (dryRun) {
-    let detail = `${remotePath} (${language})`;
-    if (hasModuleHashes) {
-      const changed = [];
-      for (const [modulePath, moduleHash] of Object.entries(moduleHashes)) {
-        if (!await checkifMetadataUptodate(remotePath, moduleHash, conf, modulePath)) {
-          changed.push(modulePath);
-        }
+  } else {
+    if (await checkifMetadataUptodate(remotePath, checkHash, conf, checkSubpath)) {
+      if (!noStaleMessage) {
+        info(colors.green(`Script ${remotePath} metadata is up-to-date, skipping`));
       }
-      if (changed.length > 0) {
-        detail += ` [changed modules: ${changed.join(", ")}]`;
+      return;
+    } else if (dryRun) {
+      let detail = `${remotePath} (${language})`;
+      if (hasModuleHashes) {
+        const changed = [];
+        for (const [modulePath, moduleHash] of Object.entries(moduleHashes)) {
+          if (!await checkifMetadataUptodate(remotePath, moduleHash, conf, modulePath)) {
+            changed.push(modulePath);
+          }
+        }
+        if (changed.length > 0) {
+          detail += ` [changed modules: ${changed.join(", ")}]`;
+        }
       }
+      return detail;
     }
-    return detail;
   }
   if (!justUpdateMetadataLock && !noStaleMessage) {
     info(colors.gray(`Generating metadata for ${scriptPath}`));
@@ -63517,8 +63663,9 @@ async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRu
   if (!opts.schemaOnly && !justUpdateMetadataLock) {
     const hasCodebase = findCodebase(scriptPath, codebases) != null;
     if (!hasCodebase) {
+      const tempScriptRefs = tree?.getTempScriptRefs(remotePath);
       const lockPathOverride = isFolderLayout ? path9.dirname(scriptPath) + "/script.lock" : undefined;
-      await updateScriptLock(workspace, scriptContent, language, remotePath, metadataParsedContent, filteredRawWorkspaceDependencies, lockPathOverride);
+      await updateScriptLock(workspace, scriptContent, language, remotePath, metadataParsedContent, filteredRawWorkspaceDependencies, tempScriptRefs, lockPathOverride);
     } else {
       metadataParsedContent.lock = "";
     }
@@ -63564,7 +63711,7 @@ async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRu
     }
   }
   const metadataContentUsedForHash = newMetadataContent;
-  hash2 = await generateScriptHash(filteredRawWorkspaceDependencies, scriptContent, metadataContentUsedForHash);
+  hash2 = await generateScriptHash(depsForHash, scriptContent, metadataContentUsedForHash);
   if (hasModuleHashes) {
     const sortedEntries = Object.entries(moduleHashes).sort(([a], [b]) => a.localeCompare(b));
     const metaHash = await generateHash(hash2 + JSON.stringify(sortedEntries));
@@ -63650,21 +63797,20 @@ function extractWorkspaceDepsAnnotation(scriptContent, language) {
   const inline = inlineStr.trim().length > 0 ? inlineStr : null;
   return { mode, external, inline };
 }
-async function computeLockCacheKey(scriptContent, language, rawWorkspaceDependencies) {
+async function computeLockCacheKey(scriptContent, language, rawWorkspaceDependencies, tempScriptRefs) {
   const annotation = extractWorkspaceDepsAnnotation(scriptContent, language);
   const annotationStr = annotation ? `${annotation.mode}|${annotation.external.join(",")}|${annotation.inline ?? ""}` : "none";
   const sortedDepsKeys = Object.keys(rawWorkspaceDependencies).sort();
   const depsStr = sortedDepsKeys.map((k) => `${k}=${rawWorkspaceDependencies[k]}`).join(";");
-  return await generateHash(`${language}|${annotationStr}|${depsStr}`);
+  const tempRefsStr = tempScriptRefs ? Object.keys(tempScriptRefs).sort().map((k) => `${k}=${tempScriptRefs[k]}`).join(";") : "";
+  return await generateHash(`${language}|${annotationStr}|${depsStr}|${tempRefsStr}`);
 }
-function clearLockCache() {
-  lockCache.clear();
-}
-async function fetchScriptLock(workspace, scriptContent, language, remotePath, rawWorkspaceDependencies) {
+async function fetchScriptLock(workspace, scriptContent, language, remotePath, rawWorkspaceDependencies, tempScriptRefs) {
   const hasRawDeps = Object.keys(rawWorkspaceDependencies).length > 0;
-  const cacheKey = hasRawDeps ? await computeLockCacheKey(scriptContent, language, rawWorkspaceDependencies) : undefined;
+  const hasTempRefs = tempScriptRefs && Object.keys(tempScriptRefs).length > 0;
+  const cacheKey = hasRawDeps || hasTempRefs ? await computeLockCacheKey(scriptContent, language, rawWorkspaceDependencies, tempScriptRefs) : undefined;
   if (cacheKey && lockCache.has(cacheKey)) {
-    info(`Using cached lockfile for ${remotePath}`);
+    debug(`Using cached lockfile for ${remotePath}`);
     return lockCache.get(cacheKey);
   }
   const extraHeaders = getHeaders2();
@@ -63684,7 +63830,8 @@ async function fetchScriptLock(workspace, scriptContent, language, remotePath, r
         }
       ],
       raw_workspace_dependencies: Object.keys(rawWorkspaceDependencies).length > 0 ? rawWorkspaceDependencies : null,
-      entrypoint: remotePath
+      entrypoint: remotePath,
+      temp_script_refs: tempScriptRefs && Object.keys(tempScriptRefs).length > 0 ? tempScriptRefs : null
     })
   });
   let responseText = "reading response failed";
@@ -63709,15 +63856,15 @@ async function fetchScriptLock(workspace, scriptContent, language, remotePath, r
     throw new LockfileGenerationError(`Failed to generate lockfile:${rawResponse.statusText}, ${responseText}, ${e}`);
   }
 }
-async function updateScriptLock(workspace, scriptContent, language, remotePath, metadataContent, rawWorkspaceDependencies, lockPathOverride) {
+async function updateScriptLock(workspace, scriptContent, language, remotePath, metadataContent, rawWorkspaceDependencies, tempScriptRefs, lockPathOverride) {
   if (!(workspaceDependenciesLanguages.some((l) => l.language == language) && language !== "powershell" || language == "deno" || language == "rust" || language == "ansible")) {
     return;
   }
   if (Object.keys(rawWorkspaceDependencies).length > 0) {
     const dependencyPaths = Object.keys(rawWorkspaceDependencies).join(", ");
-    info(`Generating script lock for ${remotePath} with raw workspace dependencies: ${dependencyPaths}`);
+    debug(`Generating script lock for ${remotePath} with raw workspace dependencies: ${dependencyPaths}`);
   }
-  const lock = await fetchScriptLock(workspace, scriptContent, language, remotePath, rawWorkspaceDependencies);
+  const lock = await fetchScriptLock(workspace, scriptContent, language, remotePath, rawWorkspaceDependencies, tempScriptRefs);
   const lockPath = lockPathOverride ?? remotePath + ".script.lock";
   if (lock != "") {
     await writeFile7(lockPath, lock, "utf-8");
@@ -63756,7 +63903,7 @@ async function updateModuleLocks(workspace, dirPath, relPrefix, scriptRemotePath
       }
       const moduleContent = readFileSync3(fullPath, "utf-8");
       const moduleRemotePath = scriptRemotePath + "/" + relPath;
-      info(colors.gray(`Generating lock for module ${relPath}`));
+      debug(`Generating lock for module ${relPath}`);
       try {
         const lock = await fetchScriptLock(workspace, moduleContent, modLanguage, moduleRemotePath, rawWorkspaceDependencies);
         const baseName = entry.name.replace(/\.[^.]+$/, "");
@@ -64157,7 +64304,8 @@ var init_metadata = __esm(async () => {
   await __promiseAll([
     init_sync(),
     init_utils(),
-    init_utils()
+    init_utils(),
+    init_relative_imports()
   ]);
   import_yaml12 = __toESM(require_dist(), 1);
   _require = createRequire2(import.meta.url);
@@ -64469,7 +64617,7 @@ __export(exports_app_metadata, {
   APP_BACKEND_FOLDER: () => APP_BACKEND_FOLDER
 });
 import path11 from "node:path";
-import { readFile as readFile11, mkdir as mkdir4 } from "node:fs/promises";
+import { readFile as readFile11, mkdir as mkdir5 } from "node:fs/promises";
 import { sep as SEP11 } from "node:path";
 async function generateAppHash(rawReqs, folder, rawApp, defaultTs) {
   const runnablesFolder = rawApp ? path11.join(folder, APP_BACKEND_FOLDER) : folder;
@@ -64495,7 +64643,7 @@ async function generateAppHash(rawReqs, folder, rawApp, defaultTs) {
   }
   return { ...hashes, [TOP_HASH2]: await generateHash(JSON.stringify(hashes)) };
 }
-async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage) {
+async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage, legacyBehaviour, tree) {
   if (appFolder.endsWith(SEP11)) {
     appFolder = appFolder.substring(0, appFolder.length - 1);
   }
@@ -64503,26 +64651,69 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
   if (!justUpdateMetadataLock && !noStaleMessage) {
     info(`Generating locks for app ${appFolder} at ${remote_path}`);
   }
-  const rawWorkspaceDependencies = await getRawWorkspaceDependencies();
   const appFilePath = path11.join(appFolder, rawApp ? "raw_app.yaml" : "app.yaml");
   const appFile = await yamlParseFile(appFilePath);
   const appValue = rawApp ? appFile.runnables : appFile.value;
-  const filteredDeps = await filterWorkspaceDependenciesForApp(appValue, rawWorkspaceDependencies, appFolder);
-  let hashes = await generateAppHash(filteredDeps, appFolder, rawApp, opts.defaultTs);
-  const conf = await init_metadata().then(() => exports_metadata).then((m) => m.readLockfile());
-  if (await checkifMetadataUptodate(appFolder, hashes[TOP_HASH2], conf, TOP_HASH2)) {
-    if (!noStaleMessage) {
-      info(colors.green(`App ${remote_path} metadata is up-to-date, skipping`));
+  const folderNormalized = appFolder.replaceAll(SEP11, "/");
+  let filteredDeps = {};
+  const conf = await readLockfile();
+  if (!legacyBehaviour && tree) {
+    if (dryRun) {
+      const hashes = await generateAppHash({}, appFolder, rawApp, opts.defaultTs);
+      const isDirectlyStale = !await checkifMetadataUptodate(appFolder, hashes[TOP_HASH2], conf, TOP_HASH2);
+      let treeAppValue = structuredClone(appValue);
+      if (rawApp) {
+        const runnablesPath = path11.join(appFolder, APP_BACKEND_FOLDER);
+        const runnablesFromFiles = await loadRunnablesFromBackend(runnablesPath);
+        if (Object.keys(runnablesFromFiles).length > 0) {
+          treeAppValue = runnablesFromFiles;
+        }
+      }
+      const inlineScriptPaths = [];
+      await traverseAndProcessInlineScripts(treeAppValue, async (inlineScript, context) => {
+        if (!inlineScript.content || !inlineScript.language) {
+          return inlineScript;
+        }
+        let content = inlineScript.content;
+        if (typeof content === "string" && content.startsWith("!inline ")) {
+          const filePath = appFolder + SEP11 + content.replace("!inline ", "");
+          try {
+            content = await readFile11(filePath, "utf-8");
+          } catch {
+            return inlineScript;
+          }
+        }
+        const treePath = folderNormalized + "/" + context.path.join("/");
+        const language = inlineScript.language;
+        const imports = await extractRelativeImports(content, treePath, language);
+        await tree.addNode(treePath, content, language, "", imports, "inline_script", folderNormalized, appFolder, false);
+        inlineScriptPaths.push(treePath);
+        return inlineScript;
+      });
+      await tree.addNode(folderNormalized, "", "bun", "", inlineScriptPaths, "app", folderNormalized, appFolder, isDirectlyStale, rawApp);
+      return;
+    }
+    filteredDeps = await filterWorkspaceDependenciesForApp(appValue, tree.getMismatchedWorkspaceDeps(), appFolder);
+  } else {
+    const rawWorkspaceDependencies = await getRawWorkspaceDependencies(true);
+    filteredDeps = await filterWorkspaceDependenciesForApp(appValue, rawWorkspaceDependencies, appFolder);
+    const hashes = await generateAppHash(filteredDeps, appFolder, rawApp, opts.defaultTs);
+    const isDirectlyStale = !await checkifMetadataUptodate(appFolder, hashes[TOP_HASH2], conf, TOP_HASH2);
+    if (!isDirectlyStale) {
+      if (!noStaleMessage) {
+        info(colors.green(`App ${remote_path} metadata is up-to-date, skipping`));
+      }
+      return;
+    } else if (dryRun) {
+      return remote_path;
     }
-    return;
-  } else if (dryRun) {
-    return remote_path;
   }
   if (Object.keys(filteredDeps).length > 0 && !noStaleMessage) {
     info((await blueColor())(`Found workspace dependencies (${workspaceDependenciesLanguages.map((l) => l.filename).join("/")}) for ${appFolder}, using them`));
   }
   let updatedScripts = [];
   if (!justUpdateMetadataLock) {
+    const hashes = await generateAppHash(filteredDeps, appFolder, rawApp, opts.defaultTs);
     const changedScripts = [];
     for (const [scriptPath, hash2] of Object.entries(hashes)) {
       if (scriptPath == TOP_HASH2) {
@@ -64532,7 +64723,8 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
         changedScripts.push(scriptPath);
       }
     }
-    if (changedScripts.length > 0) {
+    const tempScriptRefs = tree?.getTempScriptRefs(folderNormalized);
+    if (changedScripts.length > 0 || tree && !legacyBehaviour) {
       if (!noStaleMessage) {
         info(`Recomputing locks of ${changedScripts.join(", ")} in ${appFolder}`);
       }
@@ -64544,11 +64736,11 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
           runnables = rawAppFile.runnables;
         }
         replaceInlineScripts2(runnables, runnablesPath + SEP11, false);
-        updatedScripts = await updateRawAppRunnables(workspace, runnables, remote_path, appFolder, filteredDeps, opts.defaultTs, noStaleMessage);
+        updatedScripts = await updateRawAppRunnables(workspace, runnables, remote_path, appFolder, filteredDeps, opts.defaultTs, noStaleMessage, tempScriptRefs);
       } else {
         const normalAppFile = appFile;
         replaceInlineScripts2(normalAppFile.value, appFolder + SEP11, false);
-        const result = await updateAppInlineScripts(workspace, normalAppFile.value, remote_path, appFolder, filteredDeps, opts.defaultTs, noStaleMessage);
+        const result = await updateAppInlineScripts(workspace, normalAppFile.value, remote_path, appFolder, filteredDeps, opts.defaultTs, noStaleMessage, tempScriptRefs);
         normalAppFile.value = result.value;
         updatedScripts = result.updatedScripts;
         writeIfChanged(appFilePath, import_yaml17.stringify(appFile, yamlOptions));
@@ -64557,9 +64749,10 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
       info(colors.gray(`No scripts changed in ${appFolder}`));
     }
   }
-  hashes = await generateAppHash(filteredDeps, appFolder, rawApp, opts.defaultTs);
+  const depsForHash = tree && !legacyBehaviour ? {} : filteredDeps;
+  const finalHashes = await generateAppHash(depsForHash, appFolder, rawApp, opts.defaultTs);
   await clearGlobalLock(appFolder);
-  for (const [scriptPath, hash2] of Object.entries(hashes)) {
+  for (const [scriptPath, hash2] of Object.entries(finalHashes)) {
     await updateMetadataGlobalLock(appFolder, hash2, scriptPath);
   }
   if (!noStaleMessage) {
@@ -64607,11 +64800,11 @@ async function traverseAndProcessInlineScripts(obj, processor, currentPath = [])
   }
   return result;
 }
-async function updateRawAppRunnables(workspace, runnables, remotePath, appFolder, rawDeps, defaultTs = "bun", noStaleMessage) {
+async function updateRawAppRunnables(workspace, runnables, remotePath, appFolder, rawDeps, defaultTs = "bun", noStaleMessage, tempScriptRefs) {
   const updatedRunnables = [];
   const runnablesFolder = path11.join(appFolder, APP_BACKEND_FOLDER);
   try {
-    await mkdir4(runnablesFolder, { recursive: true });
+    await mkdir5(runnablesFolder, { recursive: true });
   } catch {}
   const pathAssigner = newRawAppPathAssigner(defaultTs);
   for (const [runnableId, runnable] of Object.entries(runnables)) {
@@ -64649,7 +64842,7 @@ async function updateRawAppRunnables(workspace, runnables, remotePath, appFolder
       info(colors.gray(`Generating lock for runnable ${runnableId} (${language})`));
     }
     try {
-      const lock = await generateInlineScriptLock(workspace, content, language, `${remotePath}/${runnableId}`, rawDeps);
+      const lock = await generateInlineScriptLock(workspace, content, language, `${remotePath}/${runnableId}`, rawDeps, tempScriptRefs);
       const [basePathO, ext2] = pathAssigner.assignPath(runnable.name ?? runnableId, language);
       const basePath = basePathO.replaceAll(SEP11, "/");
       const contentPath = path11.join(runnablesFolder, `${basePath}${ext2}`);
@@ -64676,7 +64869,7 @@ async function updateRawAppRunnables(workspace, runnables, remotePath, appFolder
   }
   return updatedRunnables;
 }
-async function updateAppInlineScripts(workspace, appValue, remotePath, appFolder, rawDeps, defaultTs = "bun", noStaleMessage) {
+async function updateAppInlineScripts(workspace, appValue, remotePath, appFolder, rawDeps, defaultTs = "bun", noStaleMessage, tempScriptRefs) {
   const pathAssigner = newPathAssigner(defaultTs, { skipInlineScriptSuffix: getNonDottedPaths() });
   const updatedScripts = [];
   const processor = async (inlineScript, context) => {
@@ -64697,7 +64890,7 @@ async function updateAppInlineScripts(workspace, appValue, remotePath, appFolder
         if (!noStaleMessage) {
           info(colors.gray(`Generating lock for inline script "${scriptName}" at ${context.path.join(".")} (${language})`));
         }
-        lock = await generateInlineScriptLock(workspace, content, language, scriptPath, rawDeps);
+        lock = await generateInlineScriptLock(workspace, content, language, scriptPath, rawDeps, tempScriptRefs);
       }
       const [basePathO, ext2] = pathAssigner.assignPath(scriptName, language);
       const basePath = basePathO.replaceAll(SEP11, "/");
@@ -64728,7 +64921,7 @@ async function updateAppInlineScripts(workspace, appValue, remotePath, appFolder
   const updatedValue = await traverseAndProcessInlineScripts(appValue, processor);
   return { value: updatedValue, updatedScripts };
 }
-async function generateInlineScriptLock(workspace, content, language, scriptPath, rawWorkspaceDependencies) {
+async function generateInlineScriptLock(workspace, content, language, scriptPath, rawWorkspaceDependencies, tempScriptRefs) {
   const filteredDeps = rawWorkspaceDependencies ? filterWorkspaceDependencies(rawWorkspaceDependencies, content, language) : undefined;
   const extraHeaders = getHeaders2();
   const rawResponse = await fetch(`${workspace.remote}api/w/${workspace.workspaceId}/jobs/run/dependencies`, {
@@ -64747,7 +64940,8 @@ async function generateInlineScriptLock(workspace, content, language, scriptPath
         }
       ],
       raw_workspace_dependencies: filteredDeps && Object.keys(filteredDeps).length > 0 ? filteredDeps : null,
-      entrypoint: scriptPath
+      entrypoint: scriptPath,
+      ...tempScriptRefs && Object.keys(tempScriptRefs).length > 0 ? { temp_script_refs: tempScriptRefs } : {}
     })
   });
   if (!rawResponse.ok) {
@@ -64905,7 +65099,8 @@ var init_app_metadata = __esm(async () => {
     init_app(),
     init_conf(),
     init_context(),
-    init_auth()
+    init_auth(),
+    init_relative_imports()
   ]);
   import_yaml17 = __toESM(require_dist(), 1);
 });
@@ -66349,7 +66544,7 @@ var init_lint2 = __esm(async () => {
 });
 
 // src/commands/app/new.ts
-import { stat as stat8, writeFile as writeFile9, mkdir as mkdir5 } from "node:fs/promises";
+import { stat as stat8, writeFile as writeFile9, mkdir as mkdir6 } from "node:fs/promises";
 import path15 from "node:path";
 function validateAppPath(appPath) {
   if (!appPath.startsWith("u/") && !appPath.startsWith("f/")) {
@@ -66567,9 +66762,9 @@ CREATE SCHEMA IF NOT EXISTS ${schemaName};
       return;
     }
   } catch {}
-  await mkdir5(appDir, { recursive: true });
-  await mkdir5(path15.join(appDir, "backend"), { recursive: true });
-  await mkdir5(path15.join(appDir, "sql_to_apply"), { recursive: true });
+  await mkdir6(appDir, { recursive: true });
+  await mkdir6(path15.join(appDir, "backend"), { recursive: true });
+  await mkdir6(path15.join(appDir, "sql_to_apply"), { recursive: true });
   const rawAppConfig = {
     summary
   };
@@ -67043,7 +67238,7 @@ var init_app = __esm(async () => {
 });
 
 // src/commands/folder/folder.ts
-import { stat as stat9, readdir as readdir7, writeFile as writeFile10, mkdir as mkdir6 } from "node:fs/promises";
+import { stat as stat9, readdir as readdir7, writeFile as writeFile10, mkdir as mkdir7 } from "node:fs/promises";
 import { sep as SEP14 } from "node:path";
 async function list5(opts) {
   const workspace = await resolveWorkspace(opts);
@@ -67077,7 +67272,7 @@ async function newFolder(opts, name) {
     owners: [],
     extra_perms: {}
   };
-  await mkdir6(dirPath, { recursive: true });
+  await mkdir7(dirPath, { recursive: true });
   await writeFile10(filePath, import_yaml23.stringify(template), {
     flag: "wx",
     encoding: "utf-8"
@@ -68322,7 +68517,7 @@ var init_settings = __esm(async () => {
 });
 
 // src/commands/instance/instance.ts
-import { readFile as readFile13, writeFile as writeFile15, readdir as readdir8, mkdir as mkdir7, rm as rm3, stat as stat13 } from "node:fs/promises";
+import { readFile as readFile13, writeFile as writeFile15, readdir as readdir8, mkdir as mkdir8, rm as rm3, stat as stat13 } from "node:fs/promises";
 import { appendFile } from "node:fs/promises";
 import * as path17 from "node:path";
 async function allInstances() {
@@ -68501,7 +68696,7 @@ async function instancePull(opts) {
     if (confirm) {
       if (uChanges > 0) {
         if (opts.folderPerInstance && opts.prefixSettings) {
-          await mkdir7(path17.join(rootDir, opts.prefix), {
+          await mkdir8(path17.join(rootDir, opts.prefix), {
             recursive: true
           });
         }
@@ -68535,7 +68730,7 @@ Pulling all workspaces`);
       info(`
 Pulling workspace ` + remoteWorkspace.id);
       const workspaceName = opts?.folderPerInstance ? instance.prefix + "/" + remoteWorkspace.id : instance.prefix + "_" + remoteWorkspace.id;
-      await mkdir7(path17.join(rootDir, workspaceName), {
+      await mkdir8(path17.join(rootDir, workspaceName), {
         recursive: true
       });
       process.chdir(path17.join(rootDir, workspaceName));
@@ -68719,7 +68914,7 @@ Pushing workspace ` + localWorkspace.id);
 async function getLocalWorkspaces(rootDir, localPrefix, folderPerInstance) {
   const localWorkspaces = [];
   if (!await stat13(localPrefix).catch(() => null)) {
-    await mkdir7(localPrefix);
+    await mkdir8(localPrefix);
   }
   if (folderPerInstance) {
     const prefixEntries = await readdir8(rootDir + "/" + localPrefix, { withFileTypes: true });
@@ -69393,7 +69588,8 @@ async function pushNativeTrigger(workspace, filePath, _remoteTrigger, localTrigg
       script_path: result.script_path,
       is_flow: result.is_flow,
       service_config: result.service_config,
-      error: result.error
+      error: result.error,
+      summary: result.summary
     };
     debug(`Native trigger ${serviceName}/${externalId} exists on remote`);
   } catch {
@@ -69402,18 +69598,21 @@ async function pushNativeTrigger(workspace, filePath, _remoteTrigger, localTrigg
   const triggerData = {
     script_path: localTrigger.script_path,
     is_flow: localTrigger.is_flow,
-    service_config: localTrigger.service_config
+    service_config: localTrigger.service_config,
+    summary: localTrigger.summary
   };
   if (remoteTrigger) {
     const localCompare = {
       script_path: localTrigger.script_path,
       is_flow: localTrigger.is_flow,
-      service_config: localTrigger.service_config
+      service_config: localTrigger.service_config,
+      summary: localTrigger.summary
     };
     const remoteCompare = {
       script_path: remoteTrigger.script_path,
       is_flow: remoteTrigger.is_flow,
-      service_config: remoteTrigger.service_config
+      service_config: remoteTrigger.service_config,
+      summary: remoteTrigger.summary
     };
     if (isSuperset(localCompare, remoteCompare)) {
       debug(`Native trigger ${serviceName}/${externalId} is up to date`);
@@ -70353,6 +70552,10 @@ async function generateLocks(opts, folder) {
       }
     }
     if (hasAny) {
+      if (opts.dryRun) {
+        info(colors.gray("Dry run complete."));
+        return;
+      }
       if (!opts.yes && !await Confirm.prompt({
         message: "Update the locks of the inline scripts of the above flows?",
         default: true
@@ -70408,7 +70611,7 @@ var init_flow = __esm(async () => {
   ]);
   import_yaml36 = __toESM(require_dist(), 1);
   alreadySynced3 = [];
-  command21 = new Command().description("flow related commands").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list11).command("list", "list all flows").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list11).command("get", "get a flow's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get9).command("push", "push a local flow spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").action(push11).command("run", "run a flow by path.").arguments("<path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not ouput anything other then the final output. Useful for scripting.").action(run3).command("preview", "preview a local flow without deploying it. Runs the flow definition from local files and uses local PathScripts by default.").arguments("<flow_path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").option("--remote", "Use deployed workspace scripts for PathScript steps instead of local files.").action(preview2).command("generate-locks", "re-generate the lock files of all inline scripts of all updated flows").arguments("[flow:file]").option("--yes", "Skip confirmation prompt").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateLocks).command("new", "create a new empty flow").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("bootstrap", "create a new empty flow (alias for new)").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2);
+  command21 = new Command().description("flow related commands").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list11).command("list", "list all flows").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list11).command("get", "get a flow's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get9).command("push", "push a local flow spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").action(push11).command("run", "run a flow by path.").arguments("<path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not ouput anything other then the final output. Useful for scripting.").action(run3).command("preview", "preview a local flow without deploying it. Runs the flow definition from local files and uses local PathScripts by default.").arguments("<flow_path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").option("--remote", "Use deployed workspace scripts for PathScript steps instead of local files.").action(preview2).command("generate-locks", "re-generate the lock files of all inline scripts of all updated flows").arguments("[flow:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateLocks).command("new", "create a new empty flow").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("bootstrap", "create a new empty flow (alias for new)").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2);
   flow_default = command21;
 });
 
@@ -71359,6 +71562,277 @@ var init_gitsync_settings = __esm(async () => {
   gitsync_settings_default = command23;
 });
 
+// src/utils/dependency_tree.ts
+async function uploadScripts(tree, workspace) {
+  const scriptHashes = {};
+  const workspaceDeps = [];
+  for (const path19 of tree.allPaths()) {
+    const content = tree.getContent(path19);
+    const itemType = tree.getItemType(path19);
+    if (itemType === "dependencies") {
+      if (content === undefined)
+        continue;
+      const info2 = workspaceDependenciesPathToLanguageAndFilename(path19);
+      if (info2) {
+        const hash2 = await generateHash(content);
+        workspaceDeps.push({ path: path19, language: info2.language, name: info2.name, hash: hash2 });
+      }
+    } else if (itemType === "script") {
+      if (!content)
+        continue;
+      const hash2 = await generateHash(content);
+      scriptHashes[path19] = hash2;
+    }
+  }
+  if (Object.keys(scriptHashes).length === 0 && workspaceDeps.length === 0)
+    return;
+  const mismatched = await diffRawScriptsWithDeployed({
+    workspace: workspace.workspaceId,
+    requestBody: {
+      scripts: scriptHashes,
+      workspace_deps: workspaceDeps
+    }
+  });
+  for (const path19 of mismatched) {
+    const content = tree.getContent(path19);
+    const itemType = tree.getItemType(path19);
+    if (itemType === "dependencies") {
+      if (content !== undefined) {
+        tree.setContentHash(path19, "mismatched");
+      }
+    } else if (content) {
+      const hash2 = await storeRawScriptTemp({
+        workspace: workspace.workspaceId,
+        requestBody: content
+      });
+      tree.setContentHash(path19, hash2);
+    }
+  }
+}
+
+class DoubleLinkedDependencyTree {
+  nodes = new Map;
+  workspaceDeps = {};
+  setWorkspaceDeps(deps) {
+    this.workspaceDeps = deps;
+  }
+  async addNode(path19, content, language, metadata, imports, itemType, folder, originalPath, isDirectlyStale, isRawApp) {
+    const hasWorkspaceDeps = itemType === "script" || itemType === "inline_script";
+    const filteredDeps = hasWorkspaceDeps ? filterWorkspaceDependencies(this.workspaceDeps, content, language) : {};
+    const stalenessHash = await generateScriptHash({}, content, metadata);
+    if (!this.nodes.has(path19)) {
+      this.nodes.set(path19, {
+        content: "",
+        stalenessHash: "",
+        language: "deno",
+        metadata: "",
+        imports: new Set,
+        importedBy: new Set,
+        itemType: "script",
+        folder: "",
+        originalPath: "",
+        isDirectlyStale: false
+      });
+    }
+    const node = this.nodes.get(path19);
+    node.content = content;
+    node.stalenessHash = stalenessHash;
+    node.language = language;
+    node.metadata = metadata;
+    node.itemType = itemType;
+    node.folder = folder;
+    node.originalPath = originalPath;
+    node.isDirectlyStale = isDirectlyStale;
+    node.isRawApp = isRawApp;
+    const filteredDepsPaths = Object.keys(filteredDeps);
+    for (const depsPath of filteredDepsPaths) {
+      if (!this.nodes.has(depsPath)) {
+        const depsInfo = workspaceDependenciesPathToLanguageAndFilename(depsPath);
+        const contentHash = await generateHash(filteredDeps[depsPath] + depsPath);
+        const isUpToDate = await checkifMetadataUptodate(depsPath, contentHash, undefined);
+        this.nodes.set(depsPath, {
+          content: filteredDeps[depsPath],
+          stalenessHash: "",
+          language: depsInfo?.language ?? "deno",
+          metadata: "",
+          imports: new Set,
+          importedBy: new Set,
+          itemType: "dependencies",
+          folder: "",
+          originalPath: depsPath,
+          isDirectlyStale: !isUpToDate
+        });
+      }
+    }
+    const allImports = [...imports, ...filteredDepsPaths];
+    for (const importPath of allImports) {
+      node.imports.add(importPath);
+      if (!this.nodes.has(importPath)) {
+        this.nodes.set(importPath, {
+          content: "",
+          stalenessHash: "",
+          language: "deno",
+          metadata: "",
+          imports: new Set,
+          importedBy: new Set,
+          itemType: "script",
+          folder: "",
+          originalPath: "",
+          isDirectlyStale: false
+        });
+      }
+      this.nodes.get(importPath).importedBy.add(path19);
+    }
+  }
+  getContent(path19) {
+    return this.nodes.get(path19)?.content;
+  }
+  getStalenessHash(path19) {
+    return this.nodes.get(path19)?.stalenessHash;
+  }
+  getContentHash(path19) {
+    return this.nodes.get(path19)?.contentHash;
+  }
+  setContentHash(path19, hash2) {
+    const node = this.nodes.get(path19);
+    if (node) {
+      node.contentHash = hash2;
+    }
+  }
+  getLanguage(path19) {
+    return this.nodes.get(path19)?.language;
+  }
+  getMetadata(path19) {
+    return this.nodes.get(path19)?.metadata;
+  }
+  getStaleReason(path19) {
+    return this.nodes.get(path19)?.staleReason;
+  }
+  getItemType(path19) {
+    return this.nodes.get(path19)?.itemType;
+  }
+  getFolder(path19) {
+    return this.nodes.get(path19)?.folder;
+  }
+  getIsRawApp(path19) {
+    return this.nodes.get(path19)?.isRawApp;
+  }
+  getIsDirectlyStale(path19) {
+    return this.nodes.get(path19)?.isDirectlyStale ?? false;
+  }
+  getOriginalPath(path19) {
+    return this.nodes.get(path19)?.originalPath;
+  }
+  getImports(path19) {
+    return this.nodes.get(path19)?.imports;
+  }
+  isStale(path19) {
+    return this.nodes.get(path19)?.staleReason !== undefined;
+  }
+  propagateStaleness() {
+    const directlyStale = new Set;
+    for (const [path19, node] of this.nodes.entries()) {
+      if (node.isDirectlyStale) {
+        directlyStale.add(path19);
+        node.staleReason = "content changed";
+      }
+    }
+    const allStale = new Set(directlyStale);
+    const queue = [...directlyStale];
+    const visited = new Set;
+    while (queue.length > 0) {
+      const scriptPath = queue.shift();
+      if (visited.has(scriptPath))
+        continue;
+      visited.add(scriptPath);
+      const node = this.nodes.get(scriptPath);
+      if (!node)
+        continue;
+      for (const importer of node.importedBy) {
+        if (!allStale.has(importer)) {
+          allStale.add(importer);
+          queue.push(importer);
+          const importerNode = this.nodes.get(importer);
+          if (importerNode)
+            importerNode.staleReason = `depends on ${scriptPath}`;
+        }
+      }
+    }
+  }
+  traverseTransitive(scriptPath, callback) {
+    const queue = [scriptPath];
+    const visited = new Set;
+    while (queue.length > 0) {
+      const current = queue.shift();
+      if (visited.has(current))
+        continue;
+      visited.add(current);
+      const node = this.nodes.get(current);
+      if (!node)
+        continue;
+      for (const importPath of node.imports) {
+        const importNode = this.nodes.get(importPath);
+        if (importNode) {
+          const stop = callback(importPath, importNode);
+          if (!stop) {
+            queue.push(importPath);
+          }
+        }
+      }
+    }
+  }
+  allPaths() {
+    return this.nodes.keys();
+  }
+  *stalePaths() {
+    for (const [path19, node] of this.nodes.entries()) {
+      if (node.staleReason) {
+        yield path19;
+      }
+    }
+  }
+  has(path19) {
+    return this.nodes.has(path19);
+  }
+  getMismatchedWorkspaceDeps() {
+    const result = {};
+    for (const [path19, node] of this.nodes.entries()) {
+      if (node.itemType === "dependencies" && node.contentHash && node.content !== undefined) {
+        result[path19] = node.content;
+      }
+    }
+    return result;
+  }
+  getTempScriptRefs(scriptPath) {
+    const result = {};
+    this.traverseTransitive(scriptPath, (_path, node) => {
+      if (node.contentHash) {
+        result[_path] = node.contentHash;
+      }
+    });
+    return result;
+  }
+  async persistDepsHashes(depsPaths) {
+    for (const path19 of depsPaths) {
+      const node = this.nodes.get(path19);
+      if (node?.itemType === "dependencies" && node.content !== undefined) {
+        const hash2 = await generateHash(node.content + path19);
+        await updateMetadataGlobalLock(path19, hash2);
+      }
+    }
+  }
+  get size() {
+    return this.nodes.size;
+  }
+}
+var init_dependency_tree = __esm(async () => {
+  init_services_gen();
+  await __promiseAll([
+    init_metadata(),
+    init_utils()
+  ]);
+});
+
 // src/main.ts
 init_mod3();
 
@@ -73051,7 +73525,7 @@ await __promiseAll([
   init_resource_type()
 ]);
 var import_yaml40 = __toESM(require_dist(), 1);
-import { stat as stat16, writeFile as writeFile19, rm as rm4, mkdir as mkdir8 } from "node:fs/promises";
+import { stat as stat16, writeFile as writeFile19, rm as rm4, mkdir as mkdir9 } from "node:fs/promises";
 
 // src/guidance/skills.ts
 var SKILLS = [
@@ -73786,7 +74260,7 @@ workflow<T>(fn: (...args: any[]) => Promise<T>): void
  * await step("notify", () => sendEmail(urls.approvalPage));
  * const { value, approver } = await waitForApproval({ timeout: 3600 });
  */
-waitForApproval(options?: { timeout?: number; form?: object; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
+waitForApproval(options?: { timeout?: number; form?: object; selfApproval?: boolean; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
 
 /**
  * Process items in parallel with optional concurrency control.
@@ -74449,7 +74923,7 @@ workflow<T>(fn: (...args: any[]) => Promise<T>): void
  * await step("notify", () => sendEmail(urls.approvalPage));
  * const { value, approver } = await waitForApproval({ timeout: 3600 });
  */
-waitForApproval(options?: { timeout?: number; form?: object; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
+waitForApproval(options?: { timeout?: number; form?: object; selfApproval?: boolean; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
 
 /**
  * Process items in parallel with optional concurrency control.
@@ -75175,7 +75649,7 @@ workflow<T>(fn: (...args: any[]) => Promise<T>): void
  * await step("notify", () => sendEmail(urls.approvalPage));
  * const { value, approver } = await waitForApproval({ timeout: 3600 });
  */
-waitForApproval(options?: { timeout?: number; form?: object; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
+waitForApproval(options?: { timeout?: number; form?: object; selfApproval?: boolean; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
 
 /**
  * Process items in parallel with optional concurrency control.
@@ -76115,7 +76589,7 @@ workflow<T>(fn: (...args: any[]) => Promise<T>): void
  * await step("notify", () => sendEmail(urls.approvalPage));
  * const { value, approver } = await waitForApproval({ timeout: 3600 });
  */
-waitForApproval(options?: { timeout?: number; form?: object; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
+waitForApproval(options?: { timeout?: number; form?: object; selfApproval?: boolean; }): PromiseLike<{ value: any; approver: string; approved: boolean }>
 
 /**
  * Process items in parallel with optional concurrency control.
@@ -77124,12 +77598,17 @@ async def sleep(seconds: int)
 # 
 # Returns a dict with \`\`value\`\` (form data), \`\`approver\`\`, and \`\`approved\`\`.
 # 
+# Args:
+#     timeout: Approval timeout in seconds (default 1800).
+#     form: Optional form schema for the approval page.
+#     self_approval: Whether the user who triggered the flow can approve it (default True).
+# 
 # Example::
 # 
 #     urls = await step("urls", lambda: get_resume_urls())
 #     await step("notify", lambda: send_email(urls["approvalPage"]))
 #     result = await wait_for_approval(timeout=3600)
-async def wait_for_approval(timeout: int = 1800, form: dict | None = None) -> dict
+async def wait_for_approval(timeout: int = 1800, form: dict | None = None, self_approval: bool = True) -> dict
 
 # Process items in parallel with optional concurrency control.
 # 
@@ -77400,7 +77879,7 @@ Reference a specific resource using \`$res:\` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"number","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"number","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"number","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","description":"Custom error message shown when stopping"}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_use":{"type":"boolean","description":"If true, this step's result is deleted after use to save memory"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_images":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of image references for vision-capable models.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_use":{"type":"boolean","description":"If true, this step's result is deleted after use to save memory"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_images":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of image references for vision-capable models.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'images/photo.jpg' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
   "raw-app": `---
 name: raw-app
 description: MUST use when creating raw apps.
@@ -78091,6 +78570,7 @@ flow related commands
   - \`--remote\` - Use deployed workspace scripts for PathScript steps instead of local files.
 - \`flow generate-locks [flow:file]\` - re-generate the lock files of all inline scripts of all updated flows
   - \`--yes\` - Skip confirmation prompt
+  - \`--dry-run\` - Perform a dry run without making changes
   - \`-i --includes <patterns:file[]>\` - Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)
   - \`-e --excludes <patterns:file[]>\` - Comma separated patterns to specify which file to NOT take into account.
 - \`flow new <flow_path:string>\` - create a new empty flow
@@ -78133,6 +78613,7 @@ Generate metadata (locks, schemas) for all scripts, flows, and apps
 - \`--skip-scripts\` - Skip processing scripts
 - \`--skip-flows\` - Skip processing flows
 - \`--skip-apps\` - Skip processing apps
+- \`--strict-folder-boundaries\` - Only update items inside the specified folder (requires folder argument)
 - \`-i --includes <patterns:file[]>\` - Comma separated patterns to specify which files to include
 - \`-e --excludes <patterns:file[]>\` - Comma separated patterns to specify which files to exclude
 
@@ -79590,10 +80071,10 @@ Current Git branch: ${colors.bold(currentBranch)}`));
       info(colors.green("Created CLAUDE.md"));
     }
     try {
-      await mkdir8(".claude/skills", { recursive: true });
+      await mkdir9(".claude/skills", { recursive: true });
       await Promise.all(SKILLS.map(async (skill) => {
         const skillDir = `.claude/skills/${skill.name}`;
-        await mkdir8(skillDir, { recursive: true });
+        await mkdir9(skillDir, { recursive: true });
         let skillContent = SKILL_CONTENT[skill.name];
         if (skillContent) {
           if (nonDottedPaths) {
@@ -79826,7 +80307,8 @@ await __promiseAll([
   init_app_metadata(),
   init_sync(),
   init_script(),
-  init_codebase()
+  init_codebase(),
+  init_dependency_tree()
 ]);
 import { sep as SEP21 } from "node:path";
 async function generateMetadata2(opts, folder) {
@@ -79836,10 +80318,9 @@ async function generateMetadata2(opts, folder) {
   const workspace = await resolveWorkspace(opts);
   await requireLogin(opts);
   opts = await mergeConfigWithConfigFile(opts);
-  const rawWorkspaceDependencies = await getRawWorkspaceDependencies();
+  const rawWorkspaceDependencies = await getRawWorkspaceDependencies(false);
   const codebases = await listSyncCodebases(opts);
   const ignore = await ignoreF(opts);
-  const staleItems = [];
   const skipScripts = opts.skipScripts ?? false;
   const skipFlows = opts.skipFlows ?? opts.schemaOnly ?? false;
   const skipApps = opts.skipApps ?? opts.schemaOnly ?? false;
@@ -79854,27 +80335,23 @@ async function generateMetadata2(opts, folder) {
     info(colors.yellow("Nothing to check (all types skipped)"));
     return;
   }
-  info(colors.gray(`Checking ${checking.join(", ")}...`));
+  info(`Checking ${checking.join(", ")}...`);
+  const tree = new DoubleLinkedDependencyTree;
+  tree.setWorkspaceDeps(rawWorkspaceDependencies);
   if (!skipScripts) {
     const scriptElems = await elementsToMap(await FSFSElement(process.cwd(), codebases, false), (p, isD) => {
-      return !isD && !exts.some((ext2) => p.endsWith(ext2)) || ignore(p, isD) || isFlowPath(p) || isAppPath(p) || isRawAppPath(p) || isScriptModulePath(p) && !isModuleEntryPoint(p);
+      return !isD && !exts.some((ext2) => p.endsWith(ext2)) || ignore(p, isD) || isFolderResourcePathAnyFormat(p) || isScriptModulePath(p) && !isModuleEntryPoint(p);
     }, false, {});
     for (const e of Object.keys(scriptElems)) {
-      const candidate = await generateScriptMetadataInternal(e, workspace, opts, true, true, rawWorkspaceDependencies, codebases, false);
-      if (candidate) {
-        staleItems.push({ type: "script", path: candidate, folder: e });
-      }
+      await generateScriptMetadataInternal(e, workspace, opts, true, true, rawWorkspaceDependencies, codebases, false, false, tree);
     }
   }
   if (!skipFlows) {
     const flowElems = Object.keys(await elementsToMap(await FSFSElement(process.cwd(), [], true), (p, isD) => {
       return ignore(p, isD) || !isD && !p.endsWith(SEP21 + "flow.yaml") && !p.endsWith(SEP21 + "flow.json");
     }, false, {})).map((x) => x.substring(0, x.lastIndexOf(SEP21)));
-    for (const folder2 of flowElems) {
-      const candidate = await generateFlowLockInternal(folder2, true, workspace, opts, false, true);
-      if (candidate) {
-        staleItems.push({ type: "flow", path: candidate, folder: folder2 });
-      }
+    for (const flowFolder of flowElems) {
+      await generateFlowLockInternal(flowFolder, true, workspace, opts, false, true, false, tree);
     }
   }
   if (!skipApps) {
@@ -79884,16 +80361,37 @@ async function generateMetadata2(opts, folder) {
     const rawAppFolders = getAppFolders(elems, "raw_app.yaml");
     const appFolders = getAppFolders(elems, "app.yaml");
     for (const appFolder of rawAppFolders) {
-      const candidate = await generateAppLocksInternal(appFolder, true, true, workspace, opts, false, true);
-      if (candidate) {
-        staleItems.push({ type: "app", path: candidate, folder: appFolder, isRawApp: true });
-      }
+      await generateAppLocksInternal(appFolder, true, true, workspace, opts, false, true, false, tree);
     }
     for (const appFolder of appFolders) {
-      const candidate = await generateAppLocksInternal(appFolder, false, true, workspace, opts, false, true);
-      if (candidate) {
-        staleItems.push({ type: "app", path: candidate, folder: appFolder, isRawApp: false });
-      }
+      await generateAppLocksInternal(appFolder, false, true, workspace, opts, false, true, false, tree);
+    }
+  }
+  tree.propagateStaleness();
+  try {
+    await uploadScripts(tree, workspace);
+  } catch (e) {
+    warn(colors.yellow(`Failed to upload scripts to temp storage (backend may be too old): ${e}. ` + `Locks will be generated using deployed script versions only — locally modified ` + `relative imports may not be reflected.`));
+  }
+  const staleItems = [];
+  const seenFolders = new Set;
+  for (const p of tree.allPaths()) {
+    const staleReason = tree.getStaleReason(p);
+    if (!staleReason)
+      continue;
+    const itemType = tree.getItemType(p);
+    const itemFolder = tree.getFolder(p);
+    if (itemType === "dependencies") {
+      staleItems.push({ type: itemType, path: p, folder: itemFolder, staleReason });
+    } else if (itemType === "inline_script") {
+      continue;
+    } else if (itemType === "script") {
+      const originalPath = tree.getOriginalPath(p);
+      staleItems.push({ type: itemType, path: originalPath, folder: itemFolder, staleReason });
+    } else if (!seenFolders.has(itemFolder)) {
+      seenFolders.add(itemFolder);
+      const originalPath = tree.getOriginalPath(p);
+      staleItems.push({ type: itemType, path: originalPath, folder: itemFolder, isRawApp: tree.getIsRawApp(p), staleReason });
     }
   }
   let filteredItems = staleItems;
@@ -79902,10 +80400,43 @@ async function generateMetadata2(opts, folder) {
     if (folder.endsWith("/")) {
       folder = folder.substring(0, folder.length - 1);
     }
-    filteredItems = staleItems.filter((item) => {
+    const folderNoExt = folder.replace(/\.[^/.]+$/, "");
+    const isInsideFolder = (item) => {
       const normalizedFolder = item.folder.replaceAll("\\", "/");
-      return normalizedFolder === folder || normalizedFolder.startsWith(folder + "/");
-    });
+      const normalizedPath = item.path.replaceAll("\\", "/");
+      return normalizedFolder === folder || normalizedFolder.startsWith(folder + "/") || normalizedPath === folder || normalizedPath === folderNoExt;
+    };
+    const isPathInFolder = (p) => p.startsWith(folder + "/") || p === folder || p === folderNoExt;
+    const touchesFolder = (treePath) => {
+      if (isPathInFolder(treePath))
+        return true;
+      let found = false;
+      tree.traverseTransitive(treePath, (importPath) => {
+        if (isPathInFolder(importPath)) {
+          found = true;
+          return true;
+        }
+      });
+      return found;
+    };
+    const isRelevant = (item) => {
+      if (isInsideFolder(item))
+        return true;
+      if (item.type === "dependencies")
+        return true;
+      const treePath = (item.type === "script" ? item.path.replace(/\.[^/.]+$/, "") : item.folder).replaceAll("\\", "/");
+      return touchesFolder(treePath);
+    };
+    if (opts.strictFolderBoundaries) {
+      filteredItems = staleItems.filter(isInsideFolder);
+      const excludedStale = staleItems.filter((item) => !isInsideFolder(item) && isRelevant(item) && item.type !== "dependencies");
+      for (const item of excludedStale) {
+        const normalizedPath = item.path.replaceAll("\\", "/");
+        warn(colors.yellow(`Warning: ${normalizedPath} depends on something inside "${folder}" but is outside it — skipped due to --strict-folder-boundaries. Next generate-metadata will not detect it as stale.`));
+      }
+    } else {
+      filteredItems = staleItems.filter(isRelevant);
+    }
   }
   if (filteredItems.length === 0) {
     info(colors.green("All metadata up-to-date"));
@@ -79914,26 +80445,22 @@ async function generateMetadata2(opts, folder) {
   const scripts = filteredItems.filter((i) => i.type === "script");
   const flows = filteredItems.filter((i) => i.type === "flow");
   const apps2 = filteredItems.filter((i) => i.type === "app");
+  const deps = filteredItems.filter((i) => i.type === "dependencies");
   info("");
-  info(`Found ${filteredItems.length} item(s) with stale metadata:`);
-  if (scripts.length > 0) {
-    info(colors.gray(`  Scripts (${scripts.length}):`));
-    for (const item of scripts) {
-      info(colors.yellow(`    ${item.path}`));
-    }
-  }
-  if (flows.length > 0) {
-    info(colors.gray(`  Flows (${flows.length}):`));
-    for (const item of flows) {
-      info(colors.yellow(`    ${item.path}`));
-    }
-  }
-  if (apps2.length > 0) {
-    info(colors.gray(`  Apps (${apps2.length}):`));
-    for (const item of apps2) {
-      info(colors.yellow(`    ${item.path}`));
+  info(`Found ${colors.bold(String(filteredItems.length))} item(s) with stale metadata:`);
+  const printItems = (label, items) => {
+    if (items.length === 0)
+      return;
+    info(`  ${label} (${items.length}):`);
+    for (const item of items) {
+      const reason = item.staleReason ? colors.dim(colors.white(` — ${item.staleReason}`)) : "";
+      info(`    ~ ${item.path}` + reason);
     }
-  }
+  };
+  printItems("Workspace dependencies", deps);
+  printItems("Scripts", scripts);
+  printItems("Flows", flows);
+  printItems("Apps", apps2);
   if (opts.dryRun) {
     return;
   }
@@ -79945,34 +80472,38 @@ async function generateMetadata2(opts, folder) {
     return;
   }
   info("");
-  const total = filteredItems.length;
+  const mismatchedWorkspaceDeps = tree.getMismatchedWorkspaceDeps();
+  const total = filteredItems.length - deps.length;
   const maxWidth = `[${total}/${total}]`.length;
   let current = 0;
   const formatProgress = (n) => {
-    const bracket = `[${n}/${total}]`;
-    return colors.gray(bracket.padEnd(maxWidth, " "));
+    return colors.dim(colors.white(`[${n}/${total}]`.padEnd(maxWidth, " ")));
   };
   for (const item of scripts) {
     current++;
-    info(`${formatProgress(current)} script ${colors.cyan(item.path)}`);
-    await generateScriptMetadataInternal(item.folder, workspace, opts, false, true, rawWorkspaceDependencies, codebases, false);
+    info(`${formatProgress(current)} script ${item.path}`);
+    await generateScriptMetadataInternal(item.path, workspace, opts, false, true, mismatchedWorkspaceDeps, codebases, false, false, tree);
   }
   for (const item of flows) {
     current++;
-    const result = await generateFlowLockInternal(item.folder, false, workspace, opts, false, true);
-    const scriptsInfo = result?.updatedScripts?.length ? `: ${colors.gray(result.updatedScripts.join(", "))}` : "";
-    info(`${formatProgress(current)} flow   ${colors.cyan(item.path)}${scriptsInfo}`);
+    const result = await generateFlowLockInternal(item.folder.replaceAll("/", SEP21), false, workspace, opts, false, true, false, tree);
+    const flowResult = result;
+    const scriptsInfo = flowResult?.updatedScripts?.length ? colors.dim(colors.white(`: ${flowResult.updatedScripts.join(", ")}`)) : "";
+    info(`${formatProgress(current)} flow   ${item.path}${scriptsInfo}`);
   }
   for (const item of apps2) {
     current++;
-    const result = await generateAppLocksInternal(item.folder, item.isRawApp, false, workspace, opts, false, true);
-    const scriptsInfo = result?.updatedScripts?.length ? `: ${colors.gray(result.updatedScripts.join(", "))}` : "";
-    info(`${formatProgress(current)} app    ${colors.cyan(item.path)}${scriptsInfo}`);
+    const result = await generateAppLocksInternal(item.folder.replaceAll("/", SEP21), item.isRawApp, false, workspace, opts, false, true, false, tree);
+    const appResult = result;
+    const scriptsInfo = appResult?.updatedScripts?.length ? colors.dim(colors.white(`: ${appResult.updatedScripts.join(", ")}`)) : "";
+    info(`${formatProgress(current)} app    ${item.path}${scriptsInfo}`);
   }
+  const allStaleDeps = staleItems.filter((i) => i.type === "dependencies");
+  await tree.persistDepsHashes(allStaleDeps.map((d) => d.path));
   info("");
-  info(colors.green(`Done. Updated ${total} item(s).`));
+  info(`Done. Updated ${colors.bold(String(total))} item(s).`);
 }
-var command29 = new Command().description("Generate metadata (locks, schemas) for all scripts, flows, and apps").arguments("[folder:string]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Show what would be updated without making changes").option("--lock-only", "Re-generate only the lock files").option("--schema-only", "Re-generate only script schemas (skips flows and apps)").option("--skip-scripts", "Skip processing scripts").option("--skip-flows", "Skip processing flows").option("--skip-apps", "Skip processing apps").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which files to include").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which files to exclude").action(generateMetadata2);
+var command29 = new Command().description("Generate metadata (locks, schemas) for all scripts, flows, and apps").arguments("[folder:string]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Show what would be updated without making changes").option("--lock-only", "Re-generate only the lock files").option("--schema-only", "Re-generate only script schemas (skips flows and apps)").option("--skip-scripts", "Skip processing scripts").option("--skip-flows", "Skip processing flows").option("--skip-apps", "Skip processing apps").option("--strict-folder-boundaries", "Only update items inside the specified folder (requires folder argument)").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which files to include").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which files to exclude").action(generateMetadata2);
 var generate_metadata_default = command29;
 
 // src/commands/docs/docs.ts
@@ -80050,7 +80581,7 @@ var docs_default = command30;
 
 // src/main.ts
 await init_context();
-var VERSION = "1.662.0";
+var VERSION = "1.664.0";
 var command31 = new Command().name("wmill").action(() => info(`Welcome to Windmill CLI ${VERSION}. Use -h for help.`)).description("Windmill CLI").globalOption("--workspace <workspace:string>", "Specify the target workspace. This overrides the default workspace.").globalOption("--debug --verbose", "Show debug/verbose logs").globalOption("--show-diffs", "Show diff informations when syncing (may show sensitive informations)").globalOption("--token <token:string>", "Specify an API token. This will override any stored token.").globalOption("--base-url <baseUrl:string>", "Specify the base URL of the API. If used, --token and --workspace are required and no local remote/workspace already set will be used.").globalOption("--config-dir <configDir:string>", "Specify a custom config directory. Overrides WMILL_CONFIG_DIR environment variable and default ~/.config location.").env("HEADERS <headers:string>", `Specify headers to use for all requests. e.g: "HEADERS='h1: v1, h2: v2'"`).version(VERSION).versionOption(false).command("init", init_default).command("app", app_default).command("flow", flow_default).command("script", script_default).command("workspace", workspace_default).command("resource", resource_default).command("resource-type", resource_type_default).command("user", user_default).command("variable", variable_default).command("hub", hub_default).command("folder", folder_default).command("schedule", schedule_default).command("trigger", trigger_default).command("dev", dev_default2).command("sync", sync_default).command("lint", lint_default).command("gitsync-settings", gitsync_settings_default).command("instance", instance_default).command("worker-groups", worker_groups_default).command("workers", workers_default).command("queues", queues_default).command("dependencies", dependencies_default).command("jobs", jobs_default).command("generate-metadata", generate_metadata_default).command("docs", docs_default).command("version --version", "Show version information").action(async (opts) => {
   console.log("CLI version: " + VERSION);
   try {