windmill-cli 1.673.0 → 1.674.1

package/esm/main.js

@@ -11812,7 +11812,7 @@ var init_OpenAPI = __esm(() => {
     PASSWORD: undefined,
     TOKEN: getEnv2("WM_TOKEN"),
     USERNAME: undefined,
-    VERSION: "1.673.0",
+    VERSION: "1.674.1",
     WITH_CREDENTIALS: true,
     interceptors: {
       request: new Interceptors,
@@ -12139,6 +12139,7 @@ __export(exports_services_gen, {
   testKafkaConnection: () => testKafkaConnection,
   testGcpConnection: () => testGcpConnection,
   testCriticalChannels: () => testCriticalChannels,
+  testAzureKvBackend: () => testAzureKvBackend,
   syncNativeTriggers: () => syncNativeTriggers,
   submitOnboardingData: () => submitOnboardingData,
   storeRawScriptTemp: () => storeRawScriptTemp,
@@ -12247,6 +12248,8 @@ __export(exports_services_gen, {
   moveCapturesAndConfigs: () => moveCapturesAndConfigs,
   migrateSecretsToVault: () => migrateSecretsToVault,
   migrateSecretsToDatabase: () => migrateSecretsToDatabase,
+  migrateSecretsToAzureKv: () => migrateSecretsToAzureKv,
+  migrateSecretsFromAzureKv: () => migrateSecretsFromAzureKv,
   mcpOauthCallback: () => mcpOauthCallback,
   logout: () => logout,
   loginWithOauth: () => loginWithOauth,
@@ -12359,7 +12362,9 @@ __export(exports_services_gen, {
   listAssets: () => listAssets,
   listApps: () => listApps,
   listAppPathsFromWorkspaceRunnable: () => listAppPathsFromWorkspaceRunnable,
+  listAllWorkspaceDependencies: () => listAllWorkspaceDependencies,
   listAllTgoogleTopicSubscriptions: () => listAllTgoogleTopicSubscriptions,
+  listAllDedicatedWithDeps: () => listAllDedicatedWithDeps,
   leaveWorkspace: () => leaveWorkspace,
   leaveInstance: () => leaveInstance,
   isValidPostgresConfiguration: () => isValidPostgresConfiguration,
@@ -13258,6 +13263,27 @@ var backendVersion = () => {
     body: data2.requestBody,
     mediaType: "application/json"
   });
+}, testAzureKvBackend = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/settings/test_azure_kv_backend",
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, migrateSecretsToAzureKv = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/settings/migrate_secrets_to_azure_kv",
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, migrateSecretsFromAzureKv = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/settings/migrate_secrets_from_azure_kv",
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
 }, getCurrentEmail = () => {
   return request(OpenAPI, {
     method: "GET",
@@ -14239,7 +14265,8 @@ var backendVersion = () => {
       value: data2.value,
       broad_filter: data2.broadFilter,
       page: data2.page,
-      per_page: data2.perPage
+      per_page: data2.perPage,
+      label: data2.label
     }
   });
 }, listContextualVariables = (data2) => {
@@ -14626,7 +14653,8 @@ var backendVersion = () => {
       path: data2.path,
       description: data2.description,
       value: data2.value,
-      broad_filter: data2.broadFilter
+      broad_filter: data2.broadFilter,
+      label: data2.label
     }
   });
 }, listSearchResource = (data2) => {
@@ -14910,7 +14938,8 @@ var backendVersion = () => {
       with_deployment_msg: data2.withDeploymentMsg,
       languages: data2.languages,
       without_description: data2.withoutDescription,
-      dedicated_worker: data2.dedicatedWorker
+      dedicated_worker: data2.dedicatedWorker,
+      label: data2.label
     }
   });
 }, listScriptPaths = (data2) => {
@@ -15580,7 +15609,8 @@ var backendVersion = () => {
       include_draft_only: data2.includeDraftOnly,
       with_deployment_msg: data2.withDeploymentMsg,
       without_description: data2.withoutDescription,
-      dedicated_worker: data2.dedicatedWorker
+      dedicated_worker: data2.dedicatedWorker,
+      label: data2.label
     }
   });
 }, getFlowHistory = (data2) => {
@@ -15796,7 +15826,8 @@ var backendVersion = () => {
       created_by: data2.createdBy,
       path_start: data2.pathStart,
       path_exact: data2.pathExact,
-      starred_only: data2.starredOnly
+      starred_only: data2.starredOnly,
+      label: data2.label
     }
   });
 }, getRawAppData = (data2) => {
@@ -15832,7 +15863,8 @@ var backendVersion = () => {
       path_exact: data2.pathExact,
       starred_only: data2.starredOnly,
       include_draft_only: data2.includeDraftOnly,
-      with_deployment_msg: data2.withDeploymentMsg
+      with_deployment_msg: data2.withDeploymentMsg,
+      label: data2.label
     }
   });
 }, createApp = (data2) => {
@@ -17117,7 +17149,8 @@ var backendVersion = () => {
       schedule_path: data2.schedulePath,
       description: data2.description,
       summary: data2.summary,
-      broad_filter: data2.broadFilter
+      broad_filter: data2.broadFilter,
+      label: data2.label
     }
   });
 }, listSchedulesWithJobs = (data2) => {
@@ -17223,7 +17256,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsHttpTrigger = (data2) => {
@@ -17307,7 +17341,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsWebsocketTrigger = (data2) => {
@@ -17391,7 +17426,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsKafkaTrigger = (data2) => {
@@ -17495,7 +17531,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsNatsTrigger = (data2) => {
@@ -17579,7 +17616,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsSqsTrigger = (data2) => {
@@ -17746,7 +17784,8 @@ var backendVersion = () => {
       page: data2.page,
       per_page: data2.perPage,
       path: data2.path,
-      is_flow: data2.isFlow
+      is_flow: data2.isFlow,
+      label: data2.label
     }
   });
 }, existsNativeTrigger = (data2) => {
@@ -17869,7 +17908,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsMqttTrigger = (data2) => {
@@ -17953,7 +17993,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsGcpTrigger = (data2) => {
@@ -18189,7 +18230,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsPostgresTrigger = (data2) => {
@@ -18273,7 +18315,8 @@ var backendVersion = () => {
       per_page: data2.perPage,
       path: data2.path,
       is_flow: data2.isFlow,
-      path_start: data2.pathStart
+      path_start: data2.pathStart,
+      label: data2.label
     }
   });
 }, existsEmailTrigger = (data2) => {
@@ -18688,6 +18731,16 @@ var backendVersion = () => {
     method: "GET",
     url: "/configs/list_available_python_versions"
   });
+}, listAllWorkspaceDependencies = () => {
+  return request(OpenAPI, {
+    method: "GET",
+    url: "/configs/list_all_workspace_dependencies"
+  });
+}, listAllDedicatedWithDeps = () => {
+  return request(OpenAPI, {
+    method: "GET",
+    url: "/configs/list_all_dedicated_with_deps"
+  });
 }, createAgentToken = (data2) => {
   return request(OpenAPI, {
     method: "POST",
@@ -59226,6 +59279,12 @@ function isAppInlineScriptPath2(filePath) {
 function isFlowInlineScriptPath2(filePath) {
   return isFlowInlineScriptPath(filePath);
 }
+async function computePushMetadataHash(filePath, content) {
+  const remotePath = removeExtensionToPath(filePath).replaceAll(SEP4, "/");
+  const metadataWithType = await parseMetadataFile(remotePath, undefined);
+  const metadataContent = await readFile5(metadataWithType.path, "utf-8");
+  return await generateScriptHash({}, content, metadataContent);
+}
 async function push(opts, filePath) {
   opts = await mergeConfigWithConfigFile(opts);
   const workspace = await resolveWorkspace(opts);
@@ -59243,7 +59302,7 @@ async function push(opts, filePath) {
   try {
     const content = await readFile5(filePath, "utf-8");
     const remotePath = removeExtensionToPath(filePath).replaceAll(SEP4, "/");
-    const contentHash = await generateHash(content + remotePath);
+    const contentHash = await computePushMetadataHash(filePath, content);
     const conf = await readLockfile();
     const hasLockEntry = conf.locks && (conf.locks[remotePath] !== undefined || conf.locks[`${remotePath}.ts`] !== undefined);
     if (!hasLockEntry) {
@@ -59435,7 +59494,8 @@ async function handleFile(path6, workspace, alreadySynced, message, opts, rawWor
       timeout: typed?.timeout,
       on_behalf_of_email: typed?.on_behalf_of_email,
       envs: typed?.envs,
-      modules
+      modules,
+      labels: typed?.labels
     };
     if (remote) {
       if (content === remote.content) {
@@ -59914,7 +59974,7 @@ async function bootstrap(opts, scriptPath, language) {
 }
 async function generateMetadata(opts, scriptPath) {
   warn(colors.yellow('This command is deprecated. Use "wmill generate-metadata" instead.'));
-  info("This command only works for workspace scripts, for flows inline scripts use `wmill flow generate-locks`");
+  info("This command only works for workspace scripts. For flows or apps, run `wmill generate-metadata` from the affected folder.");
   if (scriptPath == "") {
     scriptPath = undefined;
   }
@@ -60214,7 +60274,7 @@ var init_script = __esm(async () => {
   languageAliases = {
     python: "python3"
   };
-  command3 = new Command().description("script related commands").option("--show-archived", "Show archived scripts instead of active ones").option("--json", "Output as JSON (for piping to jq)").action(list3).command("list", "list all scripts").option("--show-archived", "Show archived scripts instead of active ones").option("--json", "Output as JSON (for piping to jq)").action(list3).command("push", "push a local script spec. This overrides any remote versions. Use the script file (.ts, .js, .py, .sh)").arguments("<path:file>").option("--message <message:string>", "Deployment message").action(push).command("get", "get a script's details").arguments("<path:file>").option("--json", "Output as JSON (for piping to jq)").action(get).command("show", "show a script's content (alias for get)").arguments("<path:file>").action(show).command("run", "run a script by path").arguments("<path:file>").option("-d --data <data:file>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").action(run2).command("preview", "preview a local script without deploying it. Supports both regular and codebase scripts.").arguments("<path:file>").option("-d --data <data:file>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other than the final output. Useful for scripting.").action(preview).command("new", "create a new script").arguments("<path:file> <language:string>").option("--summary <summary:string>", "script summary").option("--description <description:string>", "script description").action(bootstrap).command("bootstrap", "create a new script (alias for new)").arguments("<path:file> <language:string>").option("--summary <summary:string>", "script summary").option("--description <description:string>", "script description").action(bootstrap).command("generate-metadata", "re-generate the metadata file updating the lock and the script schema (for flows, use `wmill flow generate-locks`)").arguments("[script:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("--lock-only", "re-generate only the lock").option("--schema-only", "re-generate only script schema").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateMetadata).command("history", "show version history for a script").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(history);
+  command3 = new Command().description("script related commands").option("--show-archived", "Show archived scripts instead of active ones").option("--json", "Output as JSON (for piping to jq)").action(list3).command("list", "list all scripts").option("--show-archived", "Show archived scripts instead of active ones").option("--json", "Output as JSON (for piping to jq)").action(list3).command("push", "push a local script spec. This overrides any remote versions. Use the script file (.ts, .js, .py, .sh)").arguments("<path:file>").option("--message <message:string>", "Deployment message").action(push).command("get", "get a script's details").arguments("<path:file>").option("--json", "Output as JSON (for piping to jq)").action(get).command("show", "show a script's content (alias for get)").arguments("<path:file>").action(show).command("run", "run a script by path").arguments("<path:file>").option("-d --data <data:file>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").action(run2).command("preview", "preview a local script without deploying it. Supports both regular and codebase scripts.").arguments("<path:file>").option("-d --data <data:file>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other than the final output. Useful for scripting.").action(preview).command("new", "create a new script").arguments("<path:file> <language:string>").option("--summary <summary:string>", "script summary").option("--description <description:string>", "script description").action(bootstrap).command("bootstrap", "create a new script (alias for new)").arguments("<path:file> <language:string>").option("--summary <summary:string>", "script summary").option("--description <description:string>", "script description").action(bootstrap).command("generate-metadata", 'DEPRECATED: re-generate script metadata. Use top-level "wmill generate-metadata" instead.').arguments("[script:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("--lock-only", "re-generate only the lock").option("--schema-only", "re-generate only script schema").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateMetadata).command("history", "show version history for a script").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(history);
   script_default = command3;
 });
 
@@ -60402,7 +60462,7 @@ async function checkRawAppRunnables(backendDir, rawAppYamlPath, defaultTs) {
         path: rawAppYamlPath,
         target: "raw_app_inline_script",
         errors: [
-          `Missing lock for ${language} runnable '${runnableId}'. Run 'wmill app generate-locks' to generate locks.`
+          `Missing lock for ${language} runnable '${runnableId}'. Run 'wmill generate-metadata' to generate locks.`
         ]
       });
     }
@@ -60446,7 +60506,7 @@ async function checkRawAppRunnables(backendDir, rawAppYamlPath, defaultTs) {
         path: rawAppYamlPath,
         target: "raw_app_inline_script",
         errors: [
-          `Missing lock for ${language} runnable '${runnableId}'. Run 'wmill app generate-locks' to generate locks.`
+          `Missing lock for ${language} runnable '${runnableId}'. Run 'wmill generate-metadata' to generate locks.`
         ]
       });
     }
@@ -60514,7 +60574,7 @@ async function checkMissingLocks(opts, directory) {
             path: yamlPath,
             target: "script",
             errors: [
-              `Missing lock for ${language} script. Run 'wmill script generate-metadata' to generate locks.`
+              `Missing lock for ${language} script. Run 'wmill generate-metadata' to generate locks.`
             ]
           });
         }
@@ -60539,7 +60599,7 @@ async function checkMissingLocks(opts, directory) {
             path: flowYamlPath,
             target: "flow_inline_script",
             errors: [
-              `Missing lock for ${script.language} inline script '${script.id}'. Run 'wmill flow generate-locks' to generate locks.`
+              `Missing lock for ${script.language} inline script '${script.id}'. Run 'wmill generate-metadata' to generate locks.`
             ]
           });
         }
@@ -60564,7 +60624,7 @@ async function checkMissingLocks(opts, directory) {
             path: appYamlPath,
             target: "app_inline_script",
             errors: [
-              `Missing lock for ${script.language} inline script at '${script.path}'. Run 'wmill app generate-locks' to generate locks.`
+              `Missing lock for ${script.language} inline script at '${script.path}'. Run 'wmill generate-metadata' to generate locks.`
             ]
           });
         }
@@ -61380,7 +61440,7 @@ async function generateFlowHash(rawWorkspaceDependencies, folder, defaultTs) {
   }
   return { ...hashes, [TOP_HASH]: await generateHash(JSON.stringify(hashes)) };
 }
-async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage, legacyBehaviour, tree) {
+async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage, tree) {
   if (folder.endsWith(SEP7)) {
     folder = folder.substring(0, folder.length - 1);
   }
@@ -61393,7 +61453,7 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
   const inlineScriptsForTree = extractInlineScripts(structuredClone(flowValue.value.modules), {}, SEP7, opts.defaultTs).filter((s) => !s.is_lock);
   let filteredDeps = {};
   const conf = await readLockfile();
-  if (!legacyBehaviour && tree) {
+  if (tree) {
     if (dryRun) {
       const inlineScriptPaths = [];
       for (const script of inlineScriptsForTree) {
@@ -61460,7 +61520,7 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
     }
     const fileReader = async (path8) => await readFile7(folder + SEP7 + path8, "utf-8");
     const currentMapping = extractCurrentMapping(flowValue.value.modules, {}, flowValue.value.failure_module, flowValue.value.preprocessor_module);
-    const locksToRemove = tree && !legacyBehaviour ? Object.keys(hashes).filter((k) => {
+    const locksToRemove = tree ? Object.keys(hashes).filter((k) => {
       if (k === TOP_HASH)
         return false;
       const treePath = fileToTreePath.get(k) ?? folderNormalized + "/" + path7.basename(k, path7.extname(k));
@@ -61496,7 +61556,7 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
     });
     writeIfChanged(process.cwd() + SEP7 + folder + SEP7 + "flow.yaml", import_yaml8.stringify(flowValue, yamlOptions));
   }
-  const depsForHash = tree && !legacyBehaviour ? {} : filteredDeps;
+  const depsForHash = tree ? {} : filteredDeps;
   const finalHashes = await generateFlowHash(depsForHash, folder, opts.defaultTs);
   await clearGlobalLock(folder);
   for (const [path8, hash2] of Object.entries(finalHashes)) {
@@ -61505,7 +61565,7 @@ async function generateFlowLockInternal(folder, dryRun, workspace, opts, justUpd
   if (!noStaleMessage) {
     info(colors.green(`Flow ${remote_path} lockfiles updated`));
   }
-  const relocked = tree && !legacyBehaviour ? Object.keys(finalHashes).filter((k) => {
+  const relocked = tree ? Object.keys(finalHashes).filter((k) => {
     if (k === TOP_HASH)
       return false;
     const treePath = fileToTreePath.get(k) ?? folderNormalized + "/" + path7.basename(k, path7.extname(k));
@@ -61831,7 +61891,7 @@ ${tables3.length > 0 ? tables3.map((t) => `    - ${t}`).join(`
 
 ## Quick Reference
 
-**Backend runnable:** Add \`backend/<name>.ts\` (or .py, etc.), then run \`wmill app generate-locks\`
+**Backend runnable:** Add \`backend/<name>.ts\` (or .py, etc.), then run \`wmill generate-metadata\`
 
 **Call from frontend:**
 \`\`\`typescript
@@ -63248,7 +63308,7 @@ Push aborted: ${lockIssues.length} script(s) missing locks.`));
     if (autoRegenerate) {
       info("Auto-regenerated metadata for stale scripts:");
     } else {
-      warn("Stale scripts metadata found, you may want to update them using 'wmill script generate-metadata' before pushing:");
+      warn("Stale scripts metadata found, you may want to update them using 'wmill generate-metadata' before pushing:");
     }
     for (const stale of staleScripts) {
       if (autoRegenerate) {
@@ -63269,7 +63329,7 @@ Push aborted: ${lockIssues.length} script(s) missing locks.`));
     if (autoRegenerate) {
       info("Auto-regenerated locks for stale flows:");
     } else {
-      warn("Stale flows locks found, you may want to update them using 'wmill flow generate-locks' before pushing:");
+      warn("Stale flows locks found, you may want to update them using 'wmill generate-metadata' before pushing:");
     }
     for (const stale of staleFlows) {
       if (autoRegenerate) {
@@ -63296,7 +63356,7 @@ Push aborted: ${lockIssues.length} script(s) missing locks.`));
     if (autoRegenerate) {
       info("Auto-regenerated locks for stale apps:");
     } else {
-      warn("Stale apps locks found, you may want to update them using 'wmill app generate-locks' before pushing:");
+      warn("Stale apps locks found, you may want to update them using 'wmill generate-metadata' before pushing:");
     }
     for (const stale of staleApps) {
       if (autoRegenerate) {
@@ -64223,7 +64283,7 @@ async function blueColor() {
   const isWin2 = await getIsWin();
   return isWin2 ? colors.black : colors.blue;
 }
-async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRun, noStaleMessage, rawWorkspaceDependencies, codebases, justUpdateMetadataLock, legacyBehaviour, tree) {
+async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRun, noStaleMessage, rawWorkspaceDependencies, codebases, justUpdateMetadataLock, tree) {
   const isFolderLayout = isModuleEntryPoint(scriptPath);
   const remotePath = isFolderLayout ? getScriptBasePathFromModulePath(scriptPath).replaceAll(SEP9, "/") : scriptPath.substring(0, scriptPath.indexOf(".")).replaceAll(SEP9, "/");
   const language = inferContentTypeFromFilePath(scriptPath, opts.defaultTs);
@@ -64233,11 +64293,11 @@ async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRu
   const filteredRawWorkspaceDependencies = filterWorkspaceDependencies(rawWorkspaceDependencies, scriptContent, language);
   const moduleFolderPath = isFolderLayout ? path9.dirname(scriptPath) : scriptPath.substring(0, scriptPath.indexOf(".")) + getModuleFolderSuffix();
   const hasModules = existsSync4(moduleFolderPath) && statSync(moduleFolderPath).isDirectory();
-  const depsForHash = !legacyBehaviour && tree ? {} : filteredRawWorkspaceDependencies;
+  const depsForHash = tree ? {} : filteredRawWorkspaceDependencies;
   let hash2 = await generateScriptHash(depsForHash, scriptContent, metadataContent);
   let moduleHashes = {};
   if (hasModules) {
-    moduleHashes = await computeModuleHashes(moduleFolderPath, opts.defaultTs, !legacyBehaviour && tree ? {} : rawWorkspaceDependencies, isFolderLayout);
+    moduleHashes = await computeModuleHashes(moduleFolderPath, opts.defaultTs, tree ? {} : rawWorkspaceDependencies, isFolderLayout);
   }
   const hasModuleHashes = Object.keys(moduleHashes).length > 0;
   let checkHash = hash2;
@@ -64249,7 +64309,7 @@ async function generateScriptMetadataInternal(scriptPath, workspace, opts, dryRu
   }
   const conf = await readLockfile();
   const isDirectlyStale = !await checkifMetadataUptodate(remotePath, checkHash, conf, checkSubpath);
-  if (!legacyBehaviour && tree) {
+  if (tree) {
     if (dryRun) {
       const imports = await extractRelativeImports(scriptContent, remotePath, language);
       await tree.addNode(remotePath, scriptContent, language, metadataContent, imports, "script", remotePath, scriptPath, isDirectlyStale);
@@ -65277,7 +65337,7 @@ async function generateAppHash(rawReqs, folder, rawApp, defaultTs) {
   }
   return { ...hashes, [TOP_HASH2]: await generateHash(JSON.stringify(hashes)) };
 }
-async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage, legacyBehaviour, tree) {
+async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, opts, justUpdateMetadataLock, noStaleMessage, tree) {
   if (appFolder.endsWith(SEP11)) {
     appFolder = appFolder.substring(0, appFolder.length - 1);
   }
@@ -65291,7 +65351,7 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
   const folderNormalized = appFolder.replaceAll(SEP11, "/");
   let filteredDeps = {};
   const conf = await readLockfile();
-  if (!legacyBehaviour && tree) {
+  if (tree) {
     if (dryRun) {
       const hashes = await generateAppHash({}, appFolder, rawApp, opts.defaultTs);
       const isDirectlyStale = !await checkifMetadataUptodate(appFolder, hashes[TOP_HASH2], conf, TOP_HASH2);
@@ -65358,7 +65418,7 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
       }
     }
     const tempScriptRefs = tree?.getTempScriptRefs(folderNormalized);
-    if (changedScripts.length > 0 || tree && !legacyBehaviour) {
+    if (changedScripts.length > 0 || tree) {
       if (!noStaleMessage) {
         info(`Recomputing locks of ${changedScripts.join(", ")} in ${appFolder}`);
       }
@@ -65383,7 +65443,7 @@ async function generateAppLocksInternal(appFolder, rawApp, dryRun, workspace, op
       info(colors.gray(`No scripts changed in ${appFolder}`));
     }
   }
-  const depsForHash = tree && !legacyBehaviour ? {} : filteredDeps;
+  const depsForHash = tree ? {} : filteredDeps;
   const finalHashes = await generateAppHash(depsForHash, appFolder, rawApp, opts.defaultTs);
   await clearGlobalLock(appFolder);
   for (const [scriptPath, hash2] of Object.entries(finalHashes)) {
@@ -67884,7 +67944,7 @@ var init_app = __esm(async () => {
     init_generate_agents()
   ]);
   alreadySynced2 = [];
-  command11 = new Command().description("app related commands").option("--json", "Output as JSON (for piping to jq)").action(list5).command("list", "list all apps").option("--json", "Output as JSON (for piping to jq)").action(list5).command("get", "get an app's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get3).command("push", "push a local app ").arguments("<file_path:string> <remote_path:string>").action(push4).command("dev", dev_default).command("lint", lint_default2).command("new", new_default).command("generate-agents", generate_agents_default).command("generate-locks", "re-generate the lockfiles for app runnables inline scripts that have changed").arguments("[app_folder:string]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("--default-ts <runtime:string>", "Default TypeScript runtime (bun or deno)").action(async (opts, appFolder) => {
+  command11 = new Command().description("app related commands").option("--json", "Output as JSON (for piping to jq)").action(list5).command("list", "list all apps").option("--json", "Output as JSON (for piping to jq)").action(list5).command("get", "get an app's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get3).command("push", "push a local app ").arguments("<file_path:string> <remote_path:string>").action(push4).command("dev", dev_default).command("lint", lint_default2).command("new", new_default).command("generate-agents", generate_agents_default).command("generate-locks", 'DEPRECATED: re-generate app lockfiles. Use "wmill generate-metadata" instead.').arguments("[app_folder:string]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("--default-ts <runtime:string>", "Default TypeScript runtime (bun or deno)").action(async (opts, appFolder) => {
     warn(colors.yellow('This command is deprecated. Use "wmill generate-metadata" instead.'));
     const { generateLocksCommand: generateLocksCommand2 } = await init_app_metadata().then(() => exports_app_metadata);
     await generateLocksCommand2(opts, appFolder);
@@ -71571,7 +71631,7 @@ var init_flow = __esm(async () => {
   ]);
   import_yaml36 = __toESM(require_dist(), 1);
   alreadySynced3 = [];
-  command21 = new Command().description("flow related commands").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("list", "list all flows").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("get", "get a flow's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get9).command("push", "push a local flow spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").option("--message <message:string>", "Deployment message").action(push11).command("run", "run a flow by path.").arguments("<path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not ouput anything other then the final output. Useful for scripting.").action(run3).command("preview", "preview a local flow without deploying it. Runs the flow definition from local files and uses local PathScripts by default.").arguments("<flow_path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").option("--remote", "Use deployed workspace scripts for PathScript steps instead of local files.").action(preview2).command("generate-locks", "re-generate the lock files of all inline scripts of all updated flows").arguments("[flow:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateLocks).command("new", "create a new empty flow").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("bootstrap", "create a new empty flow (alias for new)").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("history", "Show version history for a flow").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(history2).command("show-version", "Show a specific version of a flow").arguments("<path:string> <version:string>").option("--json", "Output as JSON (for piping to jq)").action(showVersion);
+  command21 = new Command().description("flow related commands").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("list", "list all flows").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("get", "get a flow's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get9).command("push", "push a local flow spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").option("--message <message:string>", "Deployment message").action(push11).command("run", "run a flow by path.").arguments("<path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not ouput anything other then the final output. Useful for scripting.").action(run3).command("preview", "preview a local flow without deploying it. Runs the flow definition from local files and uses local PathScripts by default.").arguments("<flow_path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").option("--remote", "Use deployed workspace scripts for PathScript steps instead of local files.").action(preview2).command("generate-locks", 'DEPRECATED: re-generate flow lock files. Use "wmill generate-metadata" instead.').arguments("[flow:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateLocks).command("new", "create a new empty flow").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("bootstrap", "create a new empty flow (alias for new)").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("history", "Show version history for a flow").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(history2).command("show-version", "Show a specific version of a flow").arguments("<path:string> <version:string>").option("--json", "Output as JSON (for piping to jq)").action(showVersion);
   flow_default = command21;
 });
 
@@ -74524,7 +74584,7 @@ description: MUST use when writing Bash scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -74589,7 +74649,7 @@ description: MUST use when writing BigQuery queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -74616,7 +74676,7 @@ description: MUST use when writing Bun/TypeScript scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -74741,6 +74801,8 @@ const result: S3Object = await wmill.writeS3File(
 
 Import: import * as wmill from 'windmill-client'
 
+workerHasInternalServer(): boolean
+
 /**
  * Initialize the Windmill client with authentication token and base URL
  * @param token - Authentication token (defaults to WM_TOKEN env variable)
@@ -75281,7 +75343,7 @@ description: MUST use when writing Bun Native scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -75404,6 +75466,8 @@ const result: S3Object = await wmill.writeS3File(
 
 Import: import * as wmill from 'windmill-client'
 
+workerHasInternalServer(): boolean
+
 /**
  * Initialize the Windmill client with authentication token and base URL
  * @param token - Authentication token (defaults to WM_TOKEN env variable)
@@ -75944,7 +76008,7 @@ description: MUST use when writing C# scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76001,7 +76065,7 @@ description: MUST use when writing Deno/TypeScript scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76130,6 +76194,8 @@ const result: S3Object = await wmill.writeS3File(
 
 Import: import * as wmill from 'windmill-client'
 
+workerHasInternalServer(): boolean
+
 /**
  * Initialize the Windmill client with authentication token and base URL
  * @param token - Authentication token (defaults to WM_TOKEN env variable)
@@ -76670,7 +76736,7 @@ description: MUST use when writing DuckDB queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76737,7 +76803,7 @@ description: MUST use when writing Go scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76811,7 +76877,7 @@ description: MUST use when writing GraphQL queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76872,7 +76938,7 @@ description: MUST use when writing Java scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76926,7 +76992,7 @@ description: MUST use when writing MS SQL Server queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76953,7 +77019,7 @@ description: MUST use when writing MySQL queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -76980,7 +77046,7 @@ description: MUST use when writing Native TypeScript scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -77070,6 +77136,8 @@ export async function preprocessor(event: Event) {
 
 Import: import * as wmill from 'windmill-client'
 
+workerHasInternalServer(): boolean
+
 /**
  * Initialize the Windmill client with authentication token and base URL
  * @param token - Authentication token (defaults to WM_TOKEN env variable)
@@ -77610,7 +77678,7 @@ description: MUST use when writing PHP scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -77683,7 +77751,7 @@ description: MUST use when writing PostgreSQL queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -77710,7 +77778,7 @@ description: MUST use when writing PowerShell scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -77781,7 +77849,7 @@ description: MUST use when writing Python scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -77912,6 +77980,8 @@ result: S3Object = wmill.write_s3_file(
 
 Import: import wmill
 
+def worker_has_internal_server() -> bool
+
 def get_mocked_api() -> Optional[dict]
 
 # Get the HTTP client instance.
@@ -77976,7 +78046,10 @@ def run_script_by_path(path: str, args: dict = None, timeout: dt.timedelta | int
 # Run script by hash synchronously and return its result.
 def run_script_by_hash(hash_: str, args: dict = None, timeout: dt.timedelta | int | float | None = None, verbose: bool = False, cleanup: bool = True, assert_result_is_not_none: bool = False) -> Any
 
-# Run a script on the current worker without creating a job
+# Run a script on the current worker without creating a job.
+# 
+# On agent workers (no internal server), falls back to running a normal
+# preview job and waiting for the result.
 def run_inline_script_preview(content: str, language: str, args: dict = None) -> Any
 
 # Wait for a job to complete and return its result.
@@ -78602,7 +78675,7 @@ description: MUST use when writing R scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -78703,7 +78776,7 @@ description: MUST use when writing Rust scripts.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -78794,7 +78867,7 @@ description: MUST use when writing Snowflake queries.
 ## CLI Commands
 
 Place scripts in a folder. After writing, tell the user they can run:
-- \`wmill script generate-metadata\` - Generate .script.yaml and .lock files
+- \`wmill generate-metadata\` - Generate .script.yaml and .lock files
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -78825,7 +78898,7 @@ description: MUST use when creating flows.
 Create a folder ending with \`{{FLOW_SUFFIX}}\` and add a \`flow.yaml\` file with the flow definition.
 For rawscript modules, use \`!inline path/to/script.ts\` for the content key. {{INLINE_SCRIPT_NAMING}}
 After writing, tell the user they can run:
-- \`wmill flow generate-locks <path_to_flow_folder> --yes\` - Generate lock files for the specific flow you modified (e.g. \`wmill flow generate-locks f/my_folder/my_flow{{FLOW_SUFFIX}} --yes\`)
+- \`wmill generate-metadata\` - Generate lock files for the flow you modified
 - \`wmill sync push\` - Deploy to Windmill
 
 Do NOT run these commands yourself. Instead, inform the user that they should run them.
@@ -78973,7 +79046,7 @@ my_app{{RAW_APP_SUFFIX}}/
 ├── backend/               # Backend runnables (server-side scripts)
 │   ├── <id>.<ext>         # Code file (e.g., get_user.ts)
 │   ├── <id>.yaml          # Optional: config for fields, or to reference existing scripts
-│   └── <id>.lock          # Lock file (run 'wmill app generate-locks' to create)
+│   └── <id>.lock          # Lock file (run 'wmill generate-metadata' to create/update)
 └── sql_to_apply/          # SQL migrations (dev only, not synced)
     └── *.sql              # SQL files to apply via dev server
 \`\`\`
@@ -79029,7 +79102,7 @@ export async function main(user_id: string) {
 
 After creating, tell the user they can generate lock files by running:
 \`\`\`bash
-wmill app generate-locks
+wmill generate-metadata
 \`\`\`
 
 ### Optional YAML Configuration
@@ -79187,7 +79260,7 @@ Tell the user they can run these commands (do NOT run them yourself):
 | \`wmill app new\` | Create a new raw app interactively |
 | \`wmill app dev\` | Start dev server with live reload |
 | \`wmill app generate-agents\` | Refresh AGENTS.md and DATATABLES.md |
-| \`wmill app generate-locks\` | Generate lock files for backend runnables |
+| \`wmill generate-metadata\` | Generate lock files for backend runnables |
 | \`wmill sync push\` | Deploy app to Windmill |
 | \`wmill sync pull\` | Pull latest from Windmill |
 
@@ -79198,7 +79271,7 @@ Tell the user they can run these commands (do NOT run them yourself):
 3. **Keep runnables focused** - one function per file
 4. **Use descriptive IDs** - \`get_user.ts\` not \`a.ts\`
 5. **Always whitelist tables** - add to \`data.tables\` before querying
-6. **Generate locks** - tell the user to run \`wmill app generate-locks\` after adding/modifying backend runnables
+6. **Generate locks** - tell the user to run \`wmill generate-metadata\` after adding/modifying backend runnables
 `,
   triggers: `---
 name: triggers
@@ -79575,10 +79648,6 @@ app related commands
   - \`--fix\` - Attempt to fix common issues (not implemented yet)
 - \`app new\` - create a new raw app from a template
 - \`app generate-agents [app_folder:string]\` - regenerate AGENTS.md and DATATABLES.md from remote workspace
-- \`app generate-locks [app_folder:string]\` - re-generate the lockfiles for app runnables inline scripts that have changed
-  - \`--yes\` - Skip confirmation prompt
-  - \`--dry-run\` - Perform a dry run without making changes
-  - \`--default-ts <runtime:string>\` - Default TypeScript runtime (bun or deno)
 
 ### audit
 
@@ -79647,11 +79716,6 @@ flow related commands
   - \`-d --data <data:string>\` - Inputs specified as a JSON string or a file using @<filename> or stdin using @-.
   - \`-s --silent\` - Do not output anything other then the final output. Useful for scripting.
   - \`--remote\` - Use deployed workspace scripts for PathScript steps instead of local files.
-- \`flow generate-locks [flow:file]\` - re-generate the lock files of all inline scripts of all updated flows
-  - \`--yes\` - Skip confirmation prompt
-  - \`--dry-run\` - Perform a dry run without making changes
-  - \`-i --includes <patterns:file[]>\` - Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)
-  - \`-e --excludes <patterns:file[]>\` - Comma separated patterns to specify which file to NOT take into account.
 - \`flow new <flow_path:string>\` - create a new empty flow
   - \`--summary <summary:string>\` - flow summary
   - \`--description <description:string>\` - flow description
@@ -79935,13 +79999,6 @@ script related commands
 - \`script bootstrap <path:file> <language:string>\` - create a new script (alias for new)
   - \`--summary <summary:string>\` - script summary
   - \`--description <description:string>\` - script description
-- \`script generate-metadata [script:file]\` - re-generate the metadata file updating the lock and the script schema (for flows, use \`wmill flow generate-locks\`)
-  - \`--yes\` - Skip confirmation prompt
-  - \`--dry-run\` - Perform a dry run without making changes
-  - \`--lock-only\` - re-generate only the lock
-  - \`--schema-only\` - re-generate only script schema
-  - \`-i --includes <patterns:file[]>\` - Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)
-  - \`-e --excludes <patterns:file[]>\` - Comma separated patterns to specify which file to NOT take into account.
 - \`script history <path:string>\` - show version history for a script
   - \`--json\` - Output as JSON (for piping to jq)
 
@@ -80153,6 +80210,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   gcp_resource_path:
     type: string
     description: Path to the GCP resource containing service account credentials for
@@ -80250,6 +80311,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   route_path:
     type: string
     description: The URL route path that will trigger this endpoint (e.g., 'api/myendpoint').
@@ -80380,6 +80445,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   kafka_resource_path:
     type: string
     description: Path to the Kafka resource containing connection configuration
@@ -80479,6 +80548,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   mqtt_resource_path:
     type: string
     description: Path to the MQTT resource containing broker connection configuration
@@ -80569,6 +80642,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   nats_resource_path:
     type: string
     description: Path to the NATS resource containing connection configuration
@@ -80646,6 +80723,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   postgres_resource_path:
     type: string
     description: Path to the PostgreSQL resource containing connection configuration
@@ -80824,6 +80905,10 @@ properties:
     type: string
     description: Path to a script that validates scheduled datetimes. Receives scheduled_for
       datetime and returns boolean to skip (true) or run (false)
+  labels:
+    type: array
+    items:
+      type: string
 required:
 - schedule
 - script_path
@@ -80843,6 +80928,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   queue_url:
     type: string
     description: The full URL of the AWS SQS queue to poll for messages
@@ -80919,6 +81008,10 @@ properties:
   is_flow:
     type: boolean
     description: True if script_path points to a flow, false if it points to a script
+  labels:
+    type: array
+    items:
+      type: string
   url:
     type: string
     description: The WebSocket URL to connect to (can be a static URL or computed
@@ -80956,6 +81049,21 @@ properties:
   can_return_error_result:
     type: boolean
     description: If true, error results are sent back through the WebSocket
+  heartbeat:
+    type: object
+    properties:
+      interval_secs:
+        type: integer
+        minimum: 1
+        description: Interval in seconds between heartbeat messages
+      message:
+        type: string
+        description: Message to send as heartbeat. Use {{state}} as a placeholder
+          for a value extracted from incoming messages (see state_field).
+      state_field:
+        type: string
+        description: Optional. Top-level JSON field to extract from incoming messages.
+          The extracted value replaces {{state}} in the heartbeat message.
   error_handler_path:
     type: string
     description: Path to a script or flow to run when the triggered job fails
@@ -82416,7 +82524,7 @@ async function generateMetadata2(opts, folder) {
       return !isD && !exts.some((ext2) => p.endsWith(ext2)) || ignore(p, isD) || isFolderResourcePathAnyFormat(p) || isScriptModulePath(p) && !isModuleEntryPoint(p);
     }, false, {});
     for (const e of Object.keys(scriptElems)) {
-      await generateScriptMetadataInternal(e, workspace, opts, true, true, rawWorkspaceDependencies, codebases, false, false, tree);
+      await generateScriptMetadataInternal(e, workspace, opts, true, true, rawWorkspaceDependencies, codebases, false, tree);
     }
   }
   if (!skipFlows) {
@@ -82424,7 +82532,7 @@ async function generateMetadata2(opts, folder) {
       return ignore(p, isD) || !isD && !p.endsWith(SEP21 + "flow.yaml") && !p.endsWith(SEP21 + "flow.json");
     }, false, {})).map((x) => x.substring(0, x.lastIndexOf(SEP21)));
     for (const flowFolder of flowElems) {
-      await generateFlowLockInternal(flowFolder, true, workspace, opts, false, true, false, tree);
+      await generateFlowLockInternal(flowFolder, true, workspace, opts, false, true, tree);
     }
   }
   if (!skipApps) {
@@ -82434,10 +82542,10 @@ async function generateMetadata2(opts, folder) {
     const rawAppFolders = getAppFolders(elems, "raw_app.yaml");
     const appFolders = getAppFolders(elems, "app.yaml");
     for (const appFolder of rawAppFolders) {
-      await generateAppLocksInternal(appFolder, true, true, workspace, opts, false, true, false, tree);
+      await generateAppLocksInternal(appFolder, true, true, workspace, opts, false, true, tree);
     }
     for (const appFolder of appFolders) {
-      await generateAppLocksInternal(appFolder, false, true, workspace, opts, false, true, false, tree);
+      await generateAppLocksInternal(appFolder, false, true, workspace, opts, false, true, tree);
     }
   }
   tree.propagateStaleness();
@@ -82558,7 +82666,7 @@ async function generateMetadata2(opts, folder) {
     current++;
     info(`${formatProgress(current)} script ${item.path}`);
     try {
-      await generateScriptMetadataInternal(item.path, workspace, opts, false, true, mismatchedWorkspaceDeps, codebases, false, false, tree);
+      await generateScriptMetadataInternal(item.path, workspace, opts, false, true, mismatchedWorkspaceDeps, codebases, false, tree);
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
       errors.push({ path: item.path, error: msg });
@@ -82568,7 +82676,7 @@ async function generateMetadata2(opts, folder) {
   for (const item of flows) {
     current++;
     try {
-      const result2 = await generateFlowLockInternal(item.folder.replaceAll("/", SEP21), false, workspace, opts, false, true, false, tree);
+      const result2 = await generateFlowLockInternal(item.folder.replaceAll("/", SEP21), false, workspace, opts, false, true, tree);
       const flowResult = result2;
       const scriptsInfo = flowResult?.updatedScripts?.length ? colors.dim(colors.white(`: ${flowResult.updatedScripts.join(", ")}`)) : "";
       info(`${formatProgress(current)} flow   ${item.path}${scriptsInfo}`);
@@ -82582,7 +82690,7 @@ async function generateMetadata2(opts, folder) {
   for (const item of apps2) {
     current++;
     try {
-      const result2 = await generateAppLocksInternal(item.folder.replaceAll("/", SEP21), item.isRawApp, false, workspace, opts, false, true, false, tree);
+      const result2 = await generateAppLocksInternal(item.folder.replaceAll("/", SEP21), item.isRawApp, false, workspace, opts, false, true, tree);
       const appResult = result2;
       const scriptsInfo = appResult?.updatedScripts?.length ? colors.dim(colors.white(`: ${appResult.updatedScripts.join(", ")}`)) : "";
       info(`${formatProgress(current)} app    ${item.path}${scriptsInfo}`);
@@ -82698,7 +82806,7 @@ var config_default = command35;
 
 // src/main.ts
 await init_context();
-var VERSION = "1.673.0";
+var VERSION = "1.674.1";
 var command36 = new Command().name("wmill").action(() => info(`Welcome to Windmill CLI ${VERSION}. Use -h for help.`)).description("Windmill CLI").globalOption("--workspace <workspace:string>", "Specify the target workspace. This overrides the default workspace.").globalOption("--debug --verbose", "Show debug/verbose logs").globalOption("--show-diffs", "Show diff informations when syncing (may show sensitive informations)").globalOption("--token <token:string>", "Specify an API token. This will override any stored token.").globalOption("--base-url <baseUrl:string>", "Specify the base URL of the API. If used, --token and --workspace are required and no local remote/workspace already set will be used.").globalOption("--config-dir <configDir:string>", "Specify a custom config directory. Overrides WMILL_CONFIG_DIR environment variable and default ~/.config location.").env("HEADERS <headers:string>", `Specify headers to use for all requests. e.g: "HEADERS='h1: v1, h2: v2'"`).version(VERSION).versionOption(false).command("init", init_default).command("app", app_default).command("flow", flow_default).command("script", script_default).command("workspace", workspace_default).command("resource", resource_default).command("resource-type", resource_type_default).command("user", user_default).command("variable", variable_default).command("hub", hub_default).command("folder", folder_default).command("schedule", schedule_default).command("trigger", trigger_default).command("dev", dev_default2).command("sync", sync_default).command("lint", lint_default).command("gitsync-settings", gitsync_settings_default).command("instance", instance_default).command("worker-groups", worker_groups_default).command("workers", workers_default).command("queues", queues_default).command("dependencies", dependencies_default).command("jobs", jobs_default).command("job", job_default).command("group", group_default).command("audit", audit_default).command("token", token_default).command("generate-metadata", generate_metadata_default).command("docs", docs_default).command("config", config_default).command("version --version", "Show version information").action(async (opts) => {
   console.log("CLI version: " + VERSION);
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windmill-cli",
-  "version": "1.673.0",
+  "version": "1.674.1",
   "description": "CLI for Windmill",
   "license": "Apache 2.0",
   "type": "module",