windmill-cli 1.678.0 → 1.680.0

package/esm/main.js

@@ -11812,7 +11812,7 @@ var init_OpenAPI = __esm(() => {
     PASSWORD: undefined,
     TOKEN: getEnv2("WM_TOKEN"),
     USERNAME: undefined,
-    VERSION: "1.678.0",
+    VERSION: "1.680.0",
     WITH_CREDENTIALS: true,
     interceptors: {
       request: new Interceptors,
@@ -12380,6 +12380,7 @@ __export(exports_services_gen, {
   inviteUser: () => inviteUser,
   installFromWorkspace: () => installFromWorkspace,
   importQueuedJobs: () => importQueuedJobs,
+  importPgDatabase: () => importPgDatabase,
   importInstallation: () => importInstallation,
   importCompletedJobs: () => importCompletedJobs,
   impersonateServiceAccount: () => impersonateServiceAccount,
@@ -12522,6 +12523,7 @@ __export(exports_services_gen, {
   getDependencyMap: () => getDependencyMap,
   getDefaultScripts: () => getDefaultScripts,
   getDbClock: () => getDbClock,
+  getDatatableFullSchema: () => getDatatableFullSchema,
   getCustomTagsForWorkspace: () => getCustomTagsForWorkspace,
   getCustomTags: () => getCustomTags,
   getCurrentEmail: () => getCurrentEmail,
@@ -12560,6 +12562,7 @@ __export(exports_services_gen, {
   fileDownloadParquetAsCsv: () => fileDownloadParquetAsCsv,
   fileDownload: () => fileDownload,
   exportQueuedJobs: () => exportQueuedJobs,
+  exportPgSchema: () => exportPgSchema,
   exportInstanceGroups: () => exportInstanceGroups,
   exportInstallation: () => exportInstallation,
   exportCompletedJobs: () => exportCompletedJobs,
@@ -12609,6 +12612,8 @@ __export(exports_services_gen, {
   editAutoInvite: () => editAutoInvite,
   duckdbConnectionSettingsV2: () => duckdbConnectionSettingsV2,
   duckdbConnectionSettings: () => duckdbConnectionSettings,
+  dropForkedDatatableDatabases: () => dropForkedDatatableDatabases,
+  dropCustomInstanceDb: () => dropCustomInstanceDb,
   downloadOpenapiSpec: () => downloadOpenapiSpec,
   discoverMcpOauth: () => discoverMcpOauth,
   disconnectTeams: () => disconnectTeams,
@@ -12687,6 +12692,7 @@ __export(exports_services_gen, {
   createPostgresTrigger: () => createPostgresTrigger,
   createPostgresReplicationSlot: () => createPostgresReplicationSlot,
   createPostgresPublication: () => createPostgresPublication,
+  createPgDatabase: () => createPgDatabase,
   createNatsTrigger: () => createNatsTrigger,
   createNativeTriggerService: () => createNativeTriggerService,
   createNativeTrigger: () => createNativeTrigger,
@@ -13104,6 +13110,14 @@ var backendVersion = () => {
     body: data2.requestBody,
     mediaType: "application/json"
   });
+}, dropCustomInstanceDb = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/settings/drop_custom_instance_pg_database/{name}",
+    path: {
+      name: data2.name
+    }
+  });
 }, getGlobal = (data2) => {
   return request(OpenAPI, {
     method: "GET",
@@ -14001,6 +14015,56 @@ var backendVersion = () => {
     body: data2.requestBody,
     mediaType: "application/json"
   });
+}, createPgDatabase = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/workspaces/create_pg_database",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, dropForkedDatatableDatabases = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/workspaces/drop_forked_datatable_databases",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, importPgDatabase = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/workspaces/import_pg_database",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, exportPgSchema = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/workspaces/export_pg_schema",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
+}, getDatatableFullSchema = (data2) => {
+  return request(OpenAPI, {
+    method: "POST",
+    url: "/w/{workspace}/workspaces/get_datatable_full_schema",
+    path: {
+      workspace: data2.workspace
+    },
+    body: data2.requestBody,
+    mediaType: "application/json"
+  });
 }, getGitSyncEnabled = (data2) => {
   return request(OpenAPI, {
     method: "GET",
@@ -25166,13 +25230,91 @@ async function createWorkspaceFork2(opts, workspaceName, workspaceId = undefined
   if (alreadyExists) {
     throw new Error(`This forked workspace '${workspaceId}' (${workspaceName}) already exists. Choose a different id`);
   }
+  const forkedDatatables = [];
+  let datatables = [];
+  try {
+    datatables = await listDataTables({
+      workspace: workspace.workspaceId
+    });
+  } catch (e) {
+    info(colors.yellow(`Note: Could not list datatables: ${e.message}`));
+  }
+  if (datatables && datatables.length > 0) {
+    const behavior = opts.datatableBehavior ?? (opts.yes ? "skip" : undefined);
+    if (behavior !== "skip") {
+      info(`
+Found ${datatables.length} datatable(s):`);
+      for (const dt of datatables) {
+        let dtBehavior;
+        if (behavior === "schema_only" || behavior === "schema_and_data") {
+          dtBehavior = behavior;
+        } else {
+          const { Select: Select2 } = await init_select().then(() => exports_select);
+          dtBehavior = await Select2.prompt({
+            message: `Datatable "${dt.name}" (${dt.resource_type}):`,
+            options: [
+              { name: "Keep original (no cloning)", value: "keep_original" },
+              { name: "Clone schema only", value: "schema_only" },
+              { name: "Clone schema and data", value: "schema_and_data" }
+            ]
+          });
+        }
+        if (dtBehavior === "keep_original") {
+          continue;
+        }
+        const newDbName = `${trueWorkspaceId.replace(/-/g, "_")}__${dt.name}`;
+        try {
+          info(colors.blue(`  Creating database "${newDbName}" for datatable "${dt.name}"...`));
+          await createPgDatabase({
+            workspace: workspace.workspaceId,
+            requestBody: {
+              source: `datatable://${dt.name}`,
+              target_dbname: newDbName
+            }
+          });
+          info(colors.blue(`  Importing ${dtBehavior === "schema_only" ? "schema" : "schema + data"}...`));
+          await importPgDatabase({
+            workspace: workspace.workspaceId,
+            requestBody: {
+              source: `datatable://${dt.name}`,
+              target: `datatable://${dt.name}`,
+              target_dbname_override: newDbName,
+              fork_behavior: dtBehavior
+            }
+          });
+          info(colors.green(`  ✓ Datatable "${dt.name}" cloned.`));
+          forkedDatatables.push({ name: dt.name, new_dbname: newDbName });
+        } catch (e) {
+          info(colors.yellow(`  ✗ Failed to clone datatable "${dt.name}": ${e.message}`));
+        }
+      }
+    }
+  }
+  const forkColor = opts.color;
+  try {
+    const gitSyncJobIds = await createWorkspaceForkGitBranch({
+      workspace: workspace.workspaceId,
+      requestBody: {
+        id: trueWorkspaceId,
+        name: opts.createWorkspaceName ?? trueWorkspaceId,
+        color: forkColor
+      }
+    });
+    if (gitSyncJobIds && gitSyncJobIds.length > 0) {
+      info(colors.blue(`Git sync branch creation triggered (${gitSyncJobIds.length} job(s)). These will complete asynchronously.`));
+    }
+  } catch (e) {
+    error(colors.red(`Failed to create git branch for fork: ${e.message}`));
+    throw e;
+  }
   try {
     const result = await createWorkspaceFork({
       workspace: workspace.workspaceId,
       requestBody: {
         id: trueWorkspaceId,
         name: opts.createWorkspaceName ?? trueWorkspaceId,
-        color: undefined
+        color: forkColor,
+        forked_datatables: forkedDatatables
       }
     });
     info(colors.green(`✅ ${result}`));
@@ -25188,8 +25330,8 @@ async function createWorkspaceFork2(opts, workspaceName, workspaceId = undefined
 When doing operations on the forked workspace, it will use the remote setup in gitBranches for the branch it was forked from.
 
 To merge changes back to the parent workspace, you can:
+  - Use the CLI: ` + colors.white(`git checkout ${newBranchName} && wmill workspace merge`) + `
   - Use the Merge UI from the forked workspace home page
-  - Deploy individual items via the Deploy to staging/prod UI
   - Use git: ` + colors.white(`git checkout ${clonedBranchName} && git merge ${newBranchName} && wmill sync push`) + `
   See: https://www.windmill.dev/docs/advanced/workspace_forks`);
 }
@@ -25255,6 +25397,836 @@ var init_fork = __esm(async () => {
   ]);
 });
 
+// windmill-utils-internal/src/deploy.ts
+function folderName(path3) {
+  return path3.replace(/^f\//, "");
+}
+function getSubModules(flowModule) {
+  const type = flowModule?.value?.type;
+  if (type === "forloopflow" || type === "whileloopflow") {
+    return [flowModule.value.modules ?? []];
+  } else if (type === "branchall") {
+    return (flowModule.value.branches ?? []).map((branch) => branch.modules ?? []);
+  } else if (type === "branchone") {
+    return [
+      ...(flowModule.value.branches ?? []).map((b) => b.modules ?? []),
+      flowModule.value.default ?? []
+    ];
+  } else if (type === "aiagent") {
+    if (flowModule.value.tools) {
+      return [
+        flowModule.value.tools.filter((t) => t.value?.type === "script" || t.value?.type === "flow").map((t) => ({
+          id: t.id,
+          value: t.value,
+          summary: t.summary
+        }))
+      ];
+    }
+  }
+  return [];
+}
+function getAllSubmodules(flowModule) {
+  return getSubModules(flowModule).map((modules) => modules.flatMap((m) => [m, ...getAllSubmodules(m)])).flat();
+}
+function getAllModules(flowModules, failureModule) {
+  return [
+    ...flowModules,
+    ...flowModules.flatMap((x) => getAllSubmodules(x)),
+    ...failureModule ? [failureModule] : []
+  ];
+}
+function toError(e) {
+  const err = e;
+  return err.body || err.message || String(e);
+}
+async function checkItemExists(provider, kind, path3, workspace) {
+  if (kind === "flow") {
+    return provider.existsFlowByPath({ workspace, path: path3 });
+  } else if (kind === "script") {
+    return provider.existsScriptByPath({ workspace, path: path3 });
+  } else if (kind === "app" || kind === "raw_app") {
+    return provider.existsApp({ workspace, path: path3 });
+  } else if (kind === "variable") {
+    return provider.existsVariable({ workspace, path: path3 });
+  } else if (kind === "resource") {
+    return provider.existsResource({ workspace, path: path3 });
+  } else if (kind === "resource_type") {
+    return provider.existsResourceType({ workspace, path: path3 });
+  } else if (kind === "folder") {
+    return provider.existsFolder({ workspace, name: folderName(path3) });
+  }
+  throw new Error(`Unknown kind: ${kind}`);
+}
+async function deployItem(provider, kind, path3, workspaceFrom, workspaceTo, onBehalfOf) {
+  const preserveOnBehalfOf = onBehalfOf !== undefined;
+  try {
+    const alreadyExists = await checkItemExists(provider, kind, path3, workspaceTo);
+    if (kind === "flow") {
+      const flow = await provider.getFlowByPath({
+        workspace: workspaceFrom,
+        path: path3
+      });
+      getAllModules(flow.value?.modules ?? [], flow.value?.failure_module).forEach((x) => {
+        if (x.value?.type === "script" && x.value.hash != null) {
+          x.value.hash = undefined;
+        }
+      });
+      if (alreadyExists) {
+        await provider.updateFlow({
+          workspace: workspaceTo,
+          path: path3,
+          requestBody: {
+            ...flow,
+            preserve_on_behalf_of: preserveOnBehalfOf,
+            on_behalf_of_email: onBehalfOf
+          }
+        });
+      } else {
+        await provider.createFlow({
+          workspace: workspaceTo,
+          requestBody: {
+            ...flow,
+            preserve_on_behalf_of: preserveOnBehalfOf,
+            on_behalf_of_email: onBehalfOf
+          }
+        });
+      }
+    } else if (kind === "script") {
+      const script = await provider.getScriptByPath({
+        workspace: workspaceFrom,
+        path: path3
+      });
+      let parentHash;
+      if (alreadyExists) {
+        const existing = await provider.getScriptByPath({
+          workspace: workspaceTo,
+          path: path3
+        });
+        parentHash = existing.hash;
+      }
+      await provider.createScript({
+        workspace: workspaceTo,
+        requestBody: {
+          ...script,
+          lock: script.lock,
+          parent_hash: parentHash,
+          preserve_on_behalf_of: preserveOnBehalfOf,
+          on_behalf_of_email: onBehalfOf
+        }
+      });
+    } else if (kind === "app" || kind === "raw_app") {
+      const app = await provider.getAppByPath({
+        workspace: workspaceFrom,
+        path: path3
+      });
+      if (alreadyExists) {
+        if (app.raw_app) {
+          const secret = await provider.getPublicSecretOfLatestVersionOfApp({
+            workspace: workspaceFrom,
+            path: app.path
+          });
+          const js = await provider.getRawAppData({
+            secretWithExtension: `${secret}.js`,
+            workspace: workspaceFrom
+          });
+          const css = await provider.getRawAppData({
+            secretWithExtension: `${secret}.css`,
+            workspace: workspaceFrom
+          });
+          await provider.updateAppRaw({
+            workspace: workspaceTo,
+            path: path3,
+            formData: {
+              app: { ...app, preserve_on_behalf_of: preserveOnBehalfOf },
+              css,
+              js
+            }
+          });
+        } else {
+          await provider.updateApp({
+            workspace: workspaceTo,
+            path: path3,
+            requestBody: {
+              ...app,
+              preserve_on_behalf_of: preserveOnBehalfOf
+            }
+          });
+        }
+      } else {
+        if (app.raw_app) {
+          const secret = await provider.getPublicSecretOfLatestVersionOfApp({
+            workspace: workspaceFrom,
+            path: app.path
+          });
+          const js = await provider.getRawAppData({
+            secretWithExtension: `${secret}.js`,
+            workspace: workspaceFrom
+          });
+          const css = await provider.getRawAppData({
+            secretWithExtension: `${secret}.css`,
+            workspace: workspaceFrom
+          });
+          await provider.createAppRaw({
+            workspace: workspaceTo,
+            formData: {
+              app: { ...app, preserve_on_behalf_of: preserveOnBehalfOf },
+              css,
+              js
+            }
+          });
+        } else {
+          await provider.createApp({
+            workspace: workspaceTo,
+            requestBody: {
+              ...app,
+              preserve_on_behalf_of: preserveOnBehalfOf
+            }
+          });
+        }
+      }
+    } else if (kind === "variable") {
+      const variable = await provider.getVariable({
+        workspace: workspaceFrom,
+        path: path3,
+        decryptSecret: true
+      });
+      if (alreadyExists) {
+        await provider.updateVariable({
+          workspace: workspaceTo,
+          path: path3,
+          requestBody: {
+            path: path3,
+            value: variable.value ?? "",
+            is_secret: variable.is_secret,
+            description: variable.description ?? ""
+          },
+          alreadyEncrypted: false
+        });
+      } else {
+        await provider.createVariable({
+          workspace: workspaceTo,
+          requestBody: {
+            path: path3,
+            value: variable.value ?? "",
+            is_secret: variable.is_secret,
+            description: variable.description ?? ""
+          }
+        });
+      }
+    } else if (kind === "resource") {
+      const resource = await provider.getResource({
+        workspace: workspaceFrom,
+        path: path3
+      });
+      if (alreadyExists) {
+        await provider.updateResource({
+          workspace: workspaceTo,
+          path: path3,
+          requestBody: {
+            path: path3,
+            value: resource.value ?? "",
+            description: resource.description ?? ""
+          }
+        });
+      } else {
+        await provider.createResource({
+          workspace: workspaceTo,
+          requestBody: {
+            path: path3,
+            value: resource.value ?? "",
+            resource_type: resource.resource_type,
+            description: resource.description ?? ""
+          }
+        });
+      }
+    } else if (kind === "resource_type") {
+      const rt = await provider.getResourceType({
+        workspace: workspaceFrom,
+        path: path3
+      });
+      if (alreadyExists) {
+        await provider.updateResourceType({
+          workspace: workspaceTo,
+          path: path3,
+          requestBody: {
+            schema: rt.schema,
+            description: rt.description ?? ""
+          }
+        });
+      } else {
+        await provider.createResourceType({
+          workspace: workspaceTo,
+          requestBody: {
+            name: rt.name,
+            schema: rt.schema,
+            description: rt.description ?? ""
+          }
+        });
+      }
+    } else if (kind === "folder") {
+      const name = folderName(path3);
+      const folder = await provider.getFolder({
+        workspace: workspaceFrom,
+        name
+      });
+      if (alreadyExists) {
+        await provider.updateFolder({
+          workspace: workspaceTo,
+          name,
+          requestBody: {
+            owners: folder.owners,
+            extra_perms: folder.extra_perms,
+            summary: folder.summary ?? undefined
+          }
+        });
+      } else {
+        await provider.createFolder({
+          workspace: workspaceTo,
+          requestBody: {
+            name,
+            owners: folder.owners,
+            extra_perms: folder.extra_perms,
+            summary: folder.summary ?? undefined
+          }
+        });
+      }
+    } else {
+      throw new Error(`Unknown kind: ${kind}`);
+    }
+    return { success: true };
+  } catch (e) {
+    return { success: false, error: toError(e) };
+  }
+}
+async function deleteItemInWorkspace(provider, kind, path3, workspace) {
+  try {
+    if (kind === "script") {
+      await provider.archiveScriptByPath({ workspace, path: path3 });
+    } else if (kind === "flow") {
+      await provider.archiveFlowByPath({
+        workspace,
+        path: path3,
+        requestBody: { archived: true }
+      });
+    } else if (kind === "app" || kind === "raw_app") {
+      await provider.deleteApp({ workspace, path: path3 });
+    } else if (kind === "variable") {
+      await provider.deleteVariable({ workspace, path: path3 });
+    } else if (kind === "resource") {
+      await provider.deleteResource({ workspace, path: path3 });
+    } else if (kind === "resource_type") {
+      await provider.deleteResourceType({ workspace, path: path3 });
+    } else if (kind === "folder") {
+      await provider.deleteFolder({ workspace, name: folderName(path3) });
+    } else {
+      throw new Error(`Deletion not supported for kind: ${kind}`);
+    }
+    return { success: true };
+  } catch (e) {
+    return { success: false, error: toError(e) };
+  }
+}
+async function getOnBehalfOf(provider, kind, path3, workspace) {
+  try {
+    if (kind === "flow") {
+      const flow = await provider.getFlowByPath({ workspace, path: path3 });
+      return flow.on_behalf_of_email;
+    } else if (kind === "script") {
+      const script = await provider.getScriptByPath({ workspace, path: path3 });
+      return script.on_behalf_of_email;
+    } else if (kind === "app" || kind === "raw_app") {
+      const app = await provider.getAppByPath({ workspace, path: path3 });
+      return app.policy?.on_behalf_of_email;
+    }
+  } catch {}
+  return;
+}
+
+// node_modules/@cliffy/prompt/checkbox.js
+var exports_checkbox = {};
+__export(exports_checkbox, {
+  isCheckboxOptionGroup: () => isCheckboxOptionGroup,
+  Checkbox: () => Checkbox
+});
+function areSomeChecked(options) {
+  return options.some((option) => isOptionGroup(option) ? areSomeChecked(option.options) : option.checked);
+}
+function areAllChecked(options) {
+  return options.every((option) => isOptionGroup(option) ? areAllChecked(option.options) : option.checked);
+}
+function flatOptions(options) {
+  return flat(options);
+  function flat(options2, indentLevel = 0, opts = []) {
+    for (const option of options2) {
+      option.indentLevel = indentLevel;
+      if (isOption2(option)) {
+        opts.push(option);
+      }
+      if (isOptionGroup(option)) {
+        flat(option.options, ++indentLevel, opts);
+      }
+    }
+    return opts;
+  }
+}
+function isCheckboxOptionGroup(option) {
+  return isOptionGroup(option);
+}
+var Checkbox;
+var init_checkbox = __esm(async () => {
+  init_equal();
+  init_colors();
+  init__figures();
+  await __promiseAll([
+    init__generic_list(),
+    init__generic_prompt()
+  ]);
+  Checkbox = class Checkbox extends GenericList {
+    settings;
+    options;
+    listIndex;
+    listOffset;
+    confirmSubmit = false;
+    static prompt(options) {
+      return new this(options).prompt();
+    }
+    static inject(value) {
+      GenericPrompt.inject(value);
+    }
+    constructor(options) {
+      super();
+      this.settings = this.getDefaultSettings(options);
+      this.options = this.settings.options.slice();
+      this.listIndex = this.getListIndex();
+      this.listOffset = this.getPageOffset(this.listIndex);
+    }
+    getDefaultSettings(options) {
+      const settings = super.getDefaultSettings(options);
+      return {
+        confirmSubmit: true,
+        ...settings,
+        check: options.check ?? green(Figures.TICK),
+        uncheck: options.uncheck ?? red(Figures.CROSS),
+        partialCheck: options.partialCheck ?? green(Figures.RADIO_ON),
+        minOptions: options.minOptions ?? 0,
+        maxOptions: options.maxOptions ?? Infinity,
+        options: this.mapOptions(options, options.options),
+        keys: {
+          check: [
+            "space"
+          ],
+          checkAll: [
+            "a"
+          ],
+          ...settings.keys ?? {},
+          open: options.keys?.open ?? [
+            "right"
+          ],
+          back: options.keys?.back ?? [
+            "left",
+            "escape"
+          ]
+        }
+      };
+    }
+    mapOptions(promptOptions, options) {
+      return options.map((option) => typeof option === "string" || typeof option === "number" ? this.mapOption(promptOptions, {
+        value: option
+      }) : isCheckboxOptionGroup(option) ? this.mapOptionGroup(promptOptions, option) : this.mapOption(promptOptions, option));
+    }
+    mapOption(options, option) {
+      if (isOption2(option)) {
+        return {
+          ...super.mapOption(options, option),
+          checked: typeof option.checked === "undefined" && options.default && options.default.indexOf(option.value) !== -1 ? true : !!option.checked,
+          icon: typeof option.icon === "undefined" ? true : option.icon
+        };
+      } else {
+        return {
+          ...super.mapOption(options, option),
+          checked: false,
+          icon: false
+        };
+      }
+    }
+    mapOptionGroup(promptOptions, option) {
+      const options = this.mapOptions(promptOptions, option.options);
+      const optionGroup = super.mapOptionGroup(promptOptions, option, false);
+      return {
+        ...optionGroup,
+        get checked() {
+          return areAllChecked(options);
+        },
+        get disabled() {
+          return optionGroup.disabled || options.every((opt) => opt.disabled);
+        },
+        options,
+        icon: typeof option.icon === "undefined" ? true : option.icon
+      };
+    }
+    match() {
+      super.match();
+      if (this.isSearching()) {
+        this.selectSearch();
+      }
+    }
+    getListItemIcon(option) {
+      return this.getCheckboxIcon(option) + super.getListItemIcon(option);
+    }
+    getCheckboxIcon(option) {
+      if (!option.icon) {
+        return "";
+      }
+      const icon = option.checked ? this.settings.check + " " : isOptionGroup(option) && areSomeChecked(option.options) ? this.settings.partialCheck + " " : this.settings.uncheck + " ";
+      return option.disabled ? dim(icon) : icon;
+    }
+    getValue() {
+      return flatOptions(this.settings.options).filter((option) => option.checked).map((option) => option.value);
+    }
+    async handleEvent(event) {
+      const hasConfirmed = this.confirmSubmit;
+      this.confirmSubmit = false;
+      switch (true) {
+        case (this.isKey(this.settings.keys, "check", event) && !this.isSearchSelected()):
+          this.checkValue();
+          break;
+        case this.isKey(this.settings.keys, "submit", event):
+          await this.submit(hasConfirmed);
+          break;
+        case (event.ctrl && this.isKey(this.settings.keys, "checkAll", event)):
+          this.checkAllOption();
+          break;
+        default:
+          await super.handleEvent(event);
+      }
+    }
+    hint() {
+      if (this.confirmSubmit) {
+        const info2 = this.isBackButton(this.selectedOption) ? ` To leave the current group press ${getFiguresByKeys(this.settings.keys.back ?? []).join(", ")}.` : isOptionGroup(this.selectedOption) ? ` To open the selected group press ${getFiguresByKeys(this.settings.keys.open ?? []).join(", ")}.` : ` To check or uncheck the selected option press ${getFiguresByKeys(this.settings.keys.check ?? []).join(", ")}.`;
+        return this.settings.indent + brightBlue(`Press ${getFiguresByKeys(this.settings.keys.submit ?? [])} again to submit.${info2}`);
+      }
+      return super.hint();
+    }
+    async submit(hasConfirmed) {
+      if (!hasConfirmed && this.settings.confirmSubmit && !this.isSearchSelected()) {
+        this.confirmSubmit = true;
+        return;
+      }
+      await super.submit();
+    }
+    checkValue() {
+      const option = this.options.at(this.listIndex);
+      if (!option) {
+        this.setErrorMessage("No option available to select.");
+        return;
+      } else if (option.disabled) {
+        this.setErrorMessage("This option is disabled and cannot be changed.");
+        return;
+      }
+      this.checkOption(option, !option.checked);
+    }
+    checkOption(option, checked) {
+      if (isOption2(option)) {
+        option.checked = checked;
+      } else {
+        for (const childOption of option.options) {
+          this.checkOption(childOption, checked);
+        }
+      }
+    }
+    checkAllOption() {
+      const checked = this.options.some((option) => option.checked);
+      for (const option of this.options) {
+        this.checkOption(option, !checked);
+      }
+    }
+    validate(value) {
+      const options = flatOptions(this.settings.options);
+      const isValidValue = Array.isArray(value) && value.every((val) => options.findIndex((option) => equal(option.value, val)) !== -1);
+      if (!isValidValue) {
+        return false;
+      }
+      if (value.length < this.settings.minOptions) {
+        return `The minimum number of options is ${this.settings.minOptions} but got ${value.length}.`;
+      }
+      if (value.length > this.settings.maxOptions) {
+        return `The maximum number of options is ${this.settings.maxOptions} but got ${value.length}.`;
+      }
+      return true;
+    }
+    transform(value) {
+      return value;
+    }
+    format(value) {
+      return value.map((val) => this.settings.format?.(val) ?? this.getOptionByValue(val)?.name ?? String(val)).join(", ");
+    }
+  };
+});
+
+// src/commands/workspace/merge.ts
+async function mergeWorkspaces(opts) {
+  const workspace = await tryResolveBranchWorkspace(opts);
+  if (!workspace) {
+    throw new Error("Could not resolve workspace from branch name. Make sure you are in a git repo with gitBranches configured.");
+  }
+  const token = workspace.token;
+  if (!token) {
+    throw new Error("Not logged in. Please run 'wmill workspace add' first.");
+  }
+  const remote = workspace.remote;
+  setClient(token, remote.endsWith("/") ? remote.substring(0, remote.length - 1) : remote);
+  const forkWorkspaceId = workspace.workspaceId;
+  const userWorkspaces = await listUserWorkspaces();
+  const forkEntry = userWorkspaces.workspaces?.find((w) => w.id === forkWorkspaceId);
+  if (!forkEntry?.parent_workspace_id) {
+    throw new Error(`Workspace '${forkWorkspaceId}' is not a fork (no parent_workspace_id). ` + `You can only merge from a forked workspace.`);
+  }
+  const parentWorkspaceId = forkEntry.parent_workspace_id;
+  info(`Fork: ${colors.bold(forkWorkspaceId)} → Parent: ${colors.bold(parentWorkspaceId)}`);
+  info("Comparing workspaces...");
+  const comparison = await compareWorkspaces({
+    workspace: parentWorkspaceId,
+    targetWorkspaceId: forkWorkspaceId
+  });
+  if (comparison.skipped_comparison) {
+    info(colors.yellow("This fork was created before change tracking was available. " + "Use the UI or git-based merge instead."));
+    return;
+  }
+  const summary = comparison.summary;
+  if (summary.total_diffs === 0) {
+    info(colors.green("Everything is up to date. No differences found."));
+    return;
+  }
+  info("");
+  info(colors.bold("Comparison Summary:"));
+  const summaryRows = [];
+  if (summary.scripts_changed > 0)
+    summaryRows.push(["Scripts", String(summary.scripts_changed)]);
+  if (summary.flows_changed > 0)
+    summaryRows.push(["Flows", String(summary.flows_changed)]);
+  if (summary.apps_changed > 0)
+    summaryRows.push(["Apps", String(summary.apps_changed)]);
+  if (summary.resources_changed > 0)
+    summaryRows.push(["Resources", String(summary.resources_changed)]);
+  if (summary.variables_changed > 0)
+    summaryRows.push(["Variables", String(summary.variables_changed)]);
+  if (summary.resource_types_changed > 0)
+    summaryRows.push(["Resource Types", String(summary.resource_types_changed)]);
+  if (summary.folders_changed > 0)
+    summaryRows.push(["Folders", String(summary.folders_changed)]);
+  summaryRows.push(["Total", String(summary.total_diffs)]);
+  if (summary.conflicts > 0)
+    summaryRows.push([
+      colors.red("Conflicts"),
+      colors.red(String(summary.conflicts))
+    ]);
+  new Table2().header(["Type", "Changed"]).padding(2).border(true).body(summaryRows).render();
+  const diffs = comparison.diffs.filter((d) => d.has_changes !== false);
+  if (diffs.length === 0) {
+    info(colors.green("No effective changes to deploy."));
+    return;
+  }
+  info("");
+  info(colors.bold("Changed items:"));
+  new Table2().header(["#", "Kind", "Path", "Ahead", "Behind", "Conflict"]).padding(1).border(true).body(diffs.map((d, i) => {
+    const isConflict = d.ahead > 0 && d.behind > 0;
+    return [
+      String(i + 1),
+      d.kind,
+      d.path,
+      d.ahead > 0 ? colors.green(String(d.ahead)) : "0",
+      d.behind > 0 ? colors.yellow(String(d.behind)) : "0",
+      isConflict ? colors.red("YES") : ""
+    ];
+  })).render();
+  let direction;
+  if (opts.direction === "to-parent" || opts.direction === "to-fork") {
+    direction = opts.direction;
+  } else if (opts.direction) {
+    throw new Error(`Invalid direction '${opts.direction}'. Use 'to-parent' or 'to-fork'.`);
+  } else if (opts.yes) {
+    direction = "to-parent";
+  } else {
+    const { Select: Select2 } = await init_select().then(() => exports_select);
+    direction = await Select2.prompt({
+      message: "Deploy direction:",
+      options: [
+        {
+          name: `Deploy to parent (${parentWorkspaceId}) ← fork changes`,
+          value: "to-parent"
+        },
+        {
+          name: `Update fork (${forkWorkspaceId}) ← parent changes`,
+          value: "to-fork"
+        }
+      ]
+    });
+  }
+  info(`
+Direction: ${colors.bold(direction === "to-parent" ? `Fork → Parent (${parentWorkspaceId})` : `Parent → Fork (${forkWorkspaceId})`)}`);
+  const selectableDiffs = diffs.filter((d) => {
+    if (direction === "to-parent") {
+      return d.ahead > 0;
+    } else {
+      return d.behind > 0;
+    }
+  });
+  if (selectableDiffs.length === 0) {
+    info(colors.yellow(`No items to deploy in the '${direction}' direction.`));
+    return;
+  }
+  let selectedDiffs = selectableDiffs;
+  if (opts.all) {
+    selectedDiffs = selectableDiffs;
+  } else if (opts.skipConflicts) {
+    selectedDiffs = selectableDiffs.filter((d) => !(d.ahead > 0 && d.behind > 0));
+  } else if (opts.yes && !opts.include && !opts.exclude) {
+    if (direction === "to-fork") {
+      selectedDiffs = selectableDiffs.filter((d) => !(d.ahead > 0 && d.behind > 0));
+    }
+  } else if (!opts.yes) {
+    const { Checkbox: Checkbox2 } = await init_checkbox().then(() => exports_checkbox);
+    const defaultForToFork = direction === "to-fork";
+    const selectedValues = await Checkbox2.prompt({
+      message: `Select items to deploy (${selectableDiffs.length} available):`,
+      options: selectableDiffs.map((d) => {
+        const isConflict = d.ahead > 0 && d.behind > 0;
+        const label = `${d.kind}:${d.path}${isConflict ? colors.red(" [CONFLICT]") : ""}`;
+        return {
+          name: label,
+          value: `${d.kind}:${d.path}`,
+          checked: defaultForToFork ? !isConflict : true
+        };
+      })
+    });
+    selectedDiffs = selectableDiffs.filter((d) => selectedValues.includes(`${d.kind}:${d.path}`));
+  }
+  if (opts.include) {
+    const includeSet = new Set(opts.include.split(",").map((s) => s.trim()));
+    selectedDiffs = selectedDiffs.filter((d) => includeSet.has(`${d.kind}:${d.path}`));
+  }
+  if (opts.exclude) {
+    const excludeSet = new Set(opts.exclude.split(",").map((s) => s.trim()));
+    selectedDiffs = selectedDiffs.filter((d) => !excludeSet.has(`${d.kind}:${d.path}`));
+  }
+  if (selectedDiffs.length === 0) {
+    info(colors.yellow("No items selected for deployment."));
+    return;
+  }
+  const conflicts = selectedDiffs.filter((d) => d.ahead > 0 && d.behind > 0);
+  if (conflicts.length > 0) {
+    info(colors.yellow(`
+⚠ ${conflicts.length} conflicting item(s) will be deployed (source will overwrite target):`));
+    for (const c of conflicts) {
+      info(colors.yellow(`  - ${c.kind}:${c.path}`));
+    }
+    if (!opts.yes) {
+      const { Confirm: Confirm2 } = await init_confirm().then(() => exports_confirm);
+      const proceed = await Confirm2.prompt("Proceed with deploying conflicting items?");
+      if (!proceed) {
+        info("Aborted.");
+        return;
+      }
+    }
+  }
+  info(`
+Deploying ${colors.bold(String(selectedDiffs.length))} item(s)...`);
+  const sorted = [...selectedDiffs].sort((a, b) => {
+    const aFolder = a.kind === "folder" ? 0 : 1;
+    const bFolder = b.kind === "folder" ? 0 : 1;
+    return aFolder - bFolder;
+  });
+  const workspaceFrom = direction === "to-parent" ? forkWorkspaceId : parentWorkspaceId;
+  const workspaceTo = direction === "to-parent" ? parentWorkspaceId : forkWorkspaceId;
+  let successCount = 0;
+  let failCount = 0;
+  for (const diff2 of sorted) {
+    const label = `${diff2.kind}:${diff2.path}`;
+    const itemDeletedInSource = direction === "to-parent" ? diff2.exists_in_fork === false : diff2.exists_in_source === false;
+    let result;
+    if (itemDeletedInSource) {
+      info(colors.yellow(`  ⌫ ${label} (removing from target)`));
+      result = await deleteItemInWorkspace(provider, diff2.kind, diff2.path, workspaceTo);
+    } else {
+      let onBehalfOf;
+      if (opts.preserveOnBehalfOf) {
+        onBehalfOf = await getOnBehalfOf(provider, diff2.kind, diff2.path, workspaceFrom);
+      }
+      result = await deployItem(provider, diff2.kind, diff2.path, workspaceFrom, workspaceTo, onBehalfOf);
+    }
+    if (result.success) {
+      info(colors.green(`  ✓ ${label}`));
+      successCount++;
+    } else {
+      info(colors.red(`  ✗ ${label}: ${result.error}`));
+      failCount++;
+    }
+  }
+  if (successCount > 0) {
+    try {
+      await resetDiffTally({
+        workspace: parentWorkspaceId,
+        forkWorkspaceId
+      });
+    } catch {}
+  }
+  info("");
+  if (failCount === 0) {
+    info(colors.green(`✅ Successfully deployed ${successCount} item(s) from ${workspaceFrom} to ${workspaceTo}.`));
+  } else {
+    info(colors.yellow(`Deployed ${successCount} item(s), ${colors.red(String(failCount) + " failed")} from ${workspaceFrom} to ${workspaceTo}.`));
+  }
+}
+var provider;
+var init_merge = __esm(async () => {
+  init_colors2();
+  init_mod6();
+  init_log();
+  init_client();
+  init_services_gen();
+  await init_context();
+  provider = {
+    existsFlowByPath,
+    existsScriptByPath,
+    existsApp,
+    existsVariable,
+    existsResource,
+    existsResourceType,
+    existsFolder,
+    getFlowByPath,
+    createFlow,
+    updateFlow,
+    archiveFlowByPath,
+    getScriptByPath,
+    createScript,
+    archiveScriptByPath,
+    getAppByPath,
+    createApp,
+    updateApp,
+    createAppRaw,
+    updateAppRaw,
+    getPublicSecretOfLatestVersionOfApp,
+    getRawAppData,
+    deleteApp,
+    getVariable,
+    createVariable,
+    updateVariable,
+    deleteVariable,
+    getResource,
+    createResource,
+    updateResource,
+    deleteResource,
+    getResourceType,
+    createResourceType,
+    updateResourceType,
+    deleteResourceType,
+    getFolder,
+    createFolder,
+    updateFolder,
+    deleteFolder
+  };
+});
+
 // src/core/conf.ts
 var exports_conf = {};
 __export(exports_conf, {
@@ -25943,11 +26915,12 @@ var init_workspace = __esm(async () => {
     init_confirm(),
     init_input(),
     init_auth(),
-    init_fork()
+    init_fork(),
+    init_merge()
   ]);
   command = new Command().alias("profile").description("workspace related commands").action(list2).command("switch").complete("workspace", async () => (await allWorkspaces()).map((x) => x.name)).description("Switch to another workspace").arguments("<workspace_name:string:workspace>").action(switchC).command("add").description("Add a workspace").arguments("[workspace_name:string] [workspace_id:string] [remote:string]").option("-c --create", "Create the workspace if it does not exist").option("--create-workspace-name <workspace_name:string>", "Specify the workspace name. Ignored if --create is not specified or the workspace already exists. Will default to the workspace id.").option("--create-username <username:string>", "Specify your own username in the newly created workspace. Ignored if --create is not specified, the workspace already exists or automatic username creation is enabled on the instance.", {
     default: "admin"
-  }).action(add).command("remove").description("Remove a workspace").arguments("<workspace_name:string>").action(remove).command("whoami").description("Show the currently active user").action(whoami2).command("list").description("List local workspace profiles").action(list2).command("list-remote").description("List workspaces on the remote server that you have access to").action(listRemote).command("list-forks").description("List forked workspaces on the remote server").action(listForks).command("bind").description("Bind the current Git branch to the active workspace. This adds the branch to gitBranches in wmill.yaml so sync operations use the correct workspace for each branch.").option("--branch, --env <branch:string>", "Specify branch/environment (defaults to current)").action((opts) => bind(opts, true)).command("unbind").description("Remove workspace binding from the current Git branch").option("--branch, --env <branch:string>", "Specify branch/environment (defaults to current)").action((opts) => bind(opts, false)).command("fork").description("Create a forked workspace").arguments("[workspace_name:string] [workspace_id:string]").option("--create-workspace-name <workspace_name:string>", "Specify the workspace name. Ignored if --create is not specified or the workspace already exists. Will default to the workspace id.").action(createWorkspaceFork2).command("delete-fork").description("Delete a forked workspace and git branch").arguments("<fork_name:string>").option("-y --yes", "Skip confirmation prompt").action(deleteWorkspaceFork);
+  }).action(add).command("remove").description("Remove a workspace").arguments("<workspace_name:string>").action(remove).command("whoami").description("Show the currently active user").action(whoami2).command("list").description("List local workspace profiles").action(list2).command("list-remote").description("List workspaces on the remote server that you have access to").action(listRemote).command("list-forks").description("List forked workspaces on the remote server").action(listForks).command("bind").description("Bind the current Git branch to the active workspace. This adds the branch to gitBranches in wmill.yaml so sync operations use the correct workspace for each branch.").option("--branch, --env <branch:string>", "Specify branch/environment (defaults to current)").action((opts) => bind(opts, true)).command("unbind").description("Remove workspace binding from the current Git branch").option("--branch, --env <branch:string>", "Specify branch/environment (defaults to current)").action((opts) => bind(opts, false)).command("fork").description("Create a forked workspace").arguments("[workspace_name:string] [workspace_id:string]").option("--create-workspace-name <workspace_name:string>", "Specify the workspace name. Ignored if --create is not specified or the workspace already exists. Will default to the workspace id.").option("--color <color:string>", "Workspace color (hex code, e.g. #ff0000)").option("--datatable-behavior <behavior:string>", "How to handle datatables: skip, schema_only, or schema_and_data (default: interactive prompt)").option("-y --yes", "Skip interactive prompts (defaults datatable behavior to 'skip')").action(createWorkspaceFork2).command("delete-fork").description("Delete a forked workspace and git branch").arguments("<fork_name:string>").option("-y --yes", "Skip confirmation prompt").action(deleteWorkspaceFork).command("merge").description("Compare and deploy changes between a fork and its parent workspace").option("--direction <direction:string>", "Deploy direction: to-parent or to-fork").option("--all", "Deploy all changed items including conflicts").option("--skip-conflicts", "Skip items modified in both workspaces").option("--include <items:string>", "Comma-separated kind:path items to include (e.g. script:f/test/main,flow:f/my/flow)").option("--exclude <items:string>", "Comma-separated kind:path items to exclude").option("--preserve-on-behalf-of", "Preserve original on_behalf_of/permissioned_as values").option("-y --yes", "Non-interactive mode (deploy without prompts)").action(mergeWorkspaces);
   workspace_default = command;
 });
 
@@ -63469,9 +64442,9 @@ Push aborted: ${lockIssues.length} script(s) missing locks.`));
         folderNames.add(parts[1]);
       }
     }
-    for (const folderName of folderNames) {
-      const basePath = path8.join("f", folderName, "folder.meta.yaml");
-      const branchPath = getBranchSpecificPath(`f/${folderName}/folder.meta.yaml`, specificItems, opts.branch);
+    for (const folderName2 of folderNames) {
+      const basePath = path8.join("f", folderName2, "folder.meta.yaml");
+      const branchPath = getBranchSpecificPath(`f/${folderName2}/folder.meta.yaml`, specificItems, opts.branch);
       let found = false;
       if (branchPath) {
         try {
@@ -63486,7 +64459,7 @@ Push aborted: ${lockIssues.length} script(s) missing locks.`));
         } catch {}
       }
       if (!found) {
-        missingFolders.push(folderName);
+        missingFolders.push(folderName2);
       }
     }
   }
@@ -67514,12 +68487,12 @@ CREATE SCHEMA IF NOT EXISTS ${schemaName};
     info(colors.gray("You can configure datatables in Workspace Settings > Windmill Data Tables"));
   }
   await loadNonDottedPathsSetting();
-  const folderName = buildFolderPath(appPath, "raw_app");
-  const appDir = path15.join(process.cwd(), folderName);
+  const folderName2 = buildFolderPath(appPath, "raw_app");
+  const appDir = path15.join(process.cwd(), folderName2);
   try {
     await stat8(appDir);
     const overwrite = await Confirm.prompt({
-      message: `Directory '${folderName}' already exists. Overwrite?`,
+      message: `Directory '${folderName2}' already exists. Overwrite?`,
       default: false
     });
     if (!overwrite) {
@@ -67593,10 +68566,10 @@ This folder is for SQL migration files that will be applied to datatables during
     await writeFile9(path15.join(appDir, "sql_to_apply", `000_create_schema_${schemaName}.sql`), createSchemaSQL, "utf-8");
   }
   info("");
-  info(colors.bold.green(`App created successfully at ${folderName}/`));
+  info(colors.bold.green(`App created successfully at ${folderName2}/`));
   info("");
   info(colors.gray("Directory structure:"));
-  info(colors.gray(`  ${folderName}/`));
+  info(colors.gray(`  ${folderName2}/`));
   info(colors.gray("  ├── AGENTS.md        ← Read this first!"));
   info(colors.gray("  ├── raw_app.yaml"));
   info(colors.gray("  ├── DATATABLES.md"));
@@ -67621,7 +68594,7 @@ This folder is for SQL migration files that will be applied to datatables during
     info("");
   }
   info(colors.bold.cyan("Next steps:"));
-  info(colors.gray(`  1. cd ${folderName}`));
+  info(colors.gray(`  1. cd ${folderName2}`));
   info(colors.gray("  2. npm install"));
   info(colors.bold.white("  3. wmill app dev .") + colors.gray(" (start dev server)"));
   if (createSchemaSQL) {
@@ -68717,91 +69690,6 @@ var init_schedule = __esm(async () => {
   schedule_default = command15;
 });
 
-// src/commands/worker-groups/worker-groups.ts
-async function getInstance(opts) {
-  const instances = await allInstances();
-  const instanceName = await getActiveInstance(opts);
-  const instance = instances.find((i) => i.name === instanceName);
-  if (instance) {
-    setClient(instance.token, instance.remote.slice(0, instance.remote.length - 1));
-  }
-  return instance;
-}
-function removeWorkerPrefix(name) {
-  if (name.startsWith("worker__")) {
-    return name.substring(8);
-  }
-  return name;
-}
-async function displayWorkerGroups(opts) {
-  info("2 actions available, pull and push.");
-  const activeInstance = await getActiveInstance({});
-  if (activeInstance) {
-    info("Active instance: " + activeInstance);
-    const instance = await getInstance({});
-    if (instance) {
-      const wGroups = await listWorkerGroups();
-      new Table2().header(["name", "config"]).padding(2).border(true).body(wGroups.map((x) => [removeWorkerPrefix(x.name), JSON.stringify(x.config, null, 2)])).render();
-    } else {
-      error(`Instance ${activeInstance} not found`);
-    }
-  } else {
-    info("No active instance found");
-    info("Use 'wmill instance add' to add a new instance");
-  }
-}
-async function pullWorkerGroups(opts) {
-  await pickInstance(opts, true);
-  const totalChanges = await pullInstanceConfigs(opts, true) ?? 0;
-  if (totalChanges === 0) {
-    info("No changes to apply");
-    return;
-  }
-  let confirm = true;
-  if (opts.yes !== true) {
-    confirm = await Confirm.prompt({
-      message: `Do you want to pul these ${totalChanges} instance-level changes?`,
-      default: true
-    });
-  }
-  if (confirm) {
-    await pullInstanceConfigs(opts, false);
-  }
-}
-async function pushWorkerGroups(opts) {
-  await pickInstance(opts, true);
-  const totalChanges = await pushInstanceConfigs(opts, true) ?? 0;
-  if (totalChanges === 0) {
-    info("No changes to apply");
-    return;
-  }
-  let confirm = true;
-  if (opts.yes !== true) {
-    confirm = await Confirm.prompt({
-      message: `Do you want to apply these ${totalChanges} instance-level changes?`,
-      default: true
-    });
-  }
-  if (confirm) {
-    await pushInstanceConfigs(opts, false);
-  }
-}
-var command16, worker_groups_default;
-var init_worker_groups = __esm(async () => {
-  init_mod3();
-  init_mod6();
-  init_log();
-  init_client();
-  init_services_gen();
-  await __promiseAll([
-    init_confirm(),
-    init_instance(),
-    init_settings()
-  ]);
-  command16 = new Command().description("display worker groups, pull and push worker groups configs").action(displayWorkerGroups).command("pull").description("Pull worker groups (similar to `wmill instance pull --skip-users --skip-settings --skip-groups`)").option("--instance", "Name of the instance to push to, override the active instance").option("--base-url", "Base url to be passed to the instance settings instead of the local one").option("--yes", "Pull without needing confirmation").action(pullWorkerGroups).command("push").description("Push instance settings, users, configs, group and overwrite remote").option("--instance [instance]", "Name of the instance to push to, override the active instance").option("--base-url [baseUrl]", "If used with --token, will be used as the base url for the instance").option("--yes", "Push without needing confirmation").action(pushWorkerGroups);
-  worker_groups_default = command16;
-});
-
 // src/utils/local_encryption.ts
 import crypto3 from "node:crypto";
 function encode2(input) {
@@ -69265,12 +70153,7 @@ async function readLocalConfigs(opts) {
   return localConfigs;
 }
 async function pullInstanceConfigs(opts, preview2 = false) {
-  const remoteConfigs = (await listConfigs()).map((x) => {
-    return {
-      ...x,
-      name: removeWorkerPrefix(x.name)
-    };
-  });
+  const remoteConfigs = await listWorkerGroups();
   if (preview2) {
     const localConfigs = await readLocalConfigs(opts);
     return compareInstanceObjects(remoteConfigs, localConfigs, "name", "config");
@@ -69281,12 +70164,7 @@ async function pullInstanceConfigs(opts, preview2 = false) {
   }
 }
 async function pushInstanceConfigs(opts, preview2 = false) {
-  const remoteConfigs = (await listConfigs()).map((x) => {
-    return {
-      ...x,
-      name: removeWorkerPrefix(x.name)
-    };
-  });
+  const remoteConfigs = await listWorkerGroups();
   const localConfigs = await readLocalConfigs(opts);
   if (preview2) {
     return compareInstanceObjects(localConfigs, remoteConfigs, "name", "config");
@@ -69299,7 +70177,7 @@ async function pushInstanceConfigs(opts, preview2 = false) {
       }
       try {
         await updateConfig({
-          name: config.name.startsWith("worker__") ? config.name : `worker__${config.name}`,
+          name: `worker__${config.name}`,
           requestBody: config.config
         });
       } catch (err) {
@@ -69311,7 +70189,7 @@ async function pushInstanceConfigs(opts, preview2 = false) {
       if (!localMatch) {
         try {
           await deleteConfig({
-            name: removeConfig.name
+            name: `worker__${removeConfig.name}`
           });
         } catch (err) {
           error(`Failed to delete config ${removeConfig.name}: ${err}`);
@@ -69332,8 +70210,7 @@ var init_settings = __esm(async () => {
     init_confirm(),
     init_instance(),
     init_types(),
-    init_utils(),
-    init_worker_groups()
+    init_utils()
   ]);
   import_yaml28 = __toESM(require_dist(), 1);
   instanceSettingsPath = INSTANCE_SETTINGS_PATH;
@@ -69841,7 +70718,7 @@ async function whoami3(opts) {
     error(colors.red(`Failed to retrieve whoami information: ${error2.message}`));
   }
 }
-var import_yaml29, command17, instance_default;
+var import_yaml29, command16, instance_default;
 var init_instance = __esm(async () => {
   init_colors2();
   init_mod3();
@@ -69865,7 +70742,7 @@ var init_instance = __esm(async () => {
     init_workspace()
   ]);
   import_yaml29 = __toESM(require_dist(), 1);
-  command17 = new Command().description("sync local with a remote instance or the opposite (push or pull)").action(async () => {
+  command16 = new Command().description("sync local with a remote instance or the opposite (push or pull)").action(async () => {
     info("4 actions available, add, remove, switch, pull and push. Use -h to display help.");
     const activeInstance = await getActiveInstance({});
     new Table2().header(["name", "remote", "token"]).padding(2).border(true).body((await allInstances()).map((x) => [
@@ -69890,8 +70767,8 @@ var init_instance = __esm(async () => {
     });
     await removeInstance(choice);
     info(colors.green.underline(`Removed instance ${choice}`));
-  }).command("switch").complete("instance", async () => (await allInstances()).map((x) => x.name)).arguments("<instance:string:instance>").description("Switch the current instance").action(switchI).command("pull").description("Pull instance settings, users, configs, instance groups and overwrite local").option("--yes", "Pull without needing confirmation").option("--dry-run", "Perform a dry run without making changes").option("--skip-users", "Skip pulling users").option("--skip-settings", "Skip pulling settings").option("--skip-configs", "Skip pulling configs (worker groups and SMTP)").option("--skip-groups", "Skip pulling instance groups").option("--include-workspaces", "Also pull workspaces").option("--folder-per-instance", "Create a folder per instance").option("--instance <instance:string>", "Name of the instance to pull from, override the active instance").option("--prefix <prefix:string>", "Prefix of the local workspaces to pull, used to create the folders when using --include-workspaces").option("--prefix-settings", "Store instance yamls inside prefixed folders when using --prefix and --folder-per-instance").action(instancePull).command("push").description("Push instance settings, users, configs, group and overwrite remote").option("--yes", "Push without needing confirmation").option("--dry-run", "Perform a dry run without making changes").option("--skip-users", "Skip pushing users").option("--skip-settings", "Skip pushing settings").option("--skip-configs", "Skip pushing configs (worker groups and SMTP)").option("--skip-groups", "Skip pushing instance groups").option("--include-workspaces", "Also push workspaces").option("--folder-per-instance", "Create a folder per instance").option("--instance <instance:string>", "Name of the instance to push to, override the active instance").option("--prefix <prefix:string>", "Prefix of the local workspaces folders to push").option("--prefix-settings", "Store instance yamls inside prefixed folders when using --prefix and --folder-per-instance").action(instancePush).command("whoami").description("Display information about the currently logged-in user").action(whoami3).command("get-config").description("Dump the current instance config (global settings + worker configs) as YAML").option("-o, --output-file <file:string>", "Write YAML to a file instead of stdout").option("--show-secrets", "Include sensitive fields (license key, JWT secret) without prompting").option("--instance <instance:string>", "Name of the instance, override the active instance").action(getConfig2);
-  instance_default = command17;
+  }).command("switch").complete("instance", async () => (await allInstances()).map((x) => x.name)).arguments("<instance:string:instance>").description("Switch the current instance").action(switchI).command("pull").description("Pull instance settings, users, configs, instance groups and overwrite local").option("--yes", "Pull without needing confirmation").option("--dry-run", "Perform a dry run without making changes").option("--skip-users", "Skip pulling users").option("--skip-settings", "Skip pulling settings").option("--skip-configs", "Skip pulling configs (worker groups)").option("--skip-groups", "Skip pulling instance groups").option("--include-workspaces", "Also pull workspaces").option("--folder-per-instance", "Create a folder per instance").option("--instance <instance:string>", "Name of the instance to pull from, override the active instance").option("--prefix <prefix:string>", "Prefix of the local workspaces to pull, used to create the folders when using --include-workspaces").option("--prefix-settings", "Store instance yamls inside prefixed folders when using --prefix and --folder-per-instance").action(instancePull).command("push").description("Push instance settings, users, configs, group and overwrite remote").option("--yes", "Push without needing confirmation").option("--dry-run", "Perform a dry run without making changes").option("--skip-users", "Skip pushing users").option("--skip-settings", "Skip pushing settings").option("--skip-configs", "Skip pushing configs (worker groups)").option("--skip-groups", "Skip pushing instance groups").option("--include-workspaces", "Also push workspaces").option("--folder-per-instance", "Create a folder per instance").option("--instance <instance:string>", "Name of the instance to push to, override the active instance").option("--prefix <prefix:string>", "Prefix of the local workspaces folders to push").option("--prefix-settings", "Store instance yamls inside prefixed folders when using --prefix and --folder-per-instance").action(instancePush).command("whoami").description("Display information about the currently logged-in user").action(whoami3).command("get-config").description("Dump the current instance config (global settings + worker configs) as YAML").option("-o, --output-file <file:string>", "Write YAML to a file instead of stdout").option("--show-secrets", "Include sensitive fields (license key, JWT secret) without prompting").option("--instance <instance:string>", "Name of the instance, override the active instance").action(getConfig2);
+  instance_default = command16;
 });
 
 // src/commands/user/user.ts
@@ -70246,7 +71123,7 @@ async function pushInstanceGroups(opts, preview2 = false) {
     info(colors.green("Groups pushed to the instance"));
   }
 }
-var import_yaml31, INSTANCE_USERS_PATH = "instance_users.yaml", instanceUsersPath, INSTANCE_GROUPS_PATH = "instance_groups.yaml", instanceGroupsPath, command18, user_default;
+var import_yaml31, INSTANCE_USERS_PATH = "instance_users.yaml", instanceUsersPath, INSTANCE_GROUPS_PATH = "instance_groups.yaml", instanceGroupsPath, command17, user_default;
 var init_user = __esm(async () => {
   init_colors2();
   init_mod3();
@@ -70262,12 +71139,12 @@ var init_user = __esm(async () => {
   import_yaml31 = __toESM(require_dist(), 1);
   instanceUsersPath = INSTANCE_USERS_PATH;
   instanceGroupsPath = INSTANCE_GROUPS_PATH;
-  command18 = new Command().description("user related commands").action(list10).command("add", "Create a user").arguments("<email:string> [password:string]").option("--superadmin", "Specify to make the new user superadmin.").option("--company <company:string>", "Specify to set the company of the new user.").option("--name <name:string>", "Specify to set the name of the new user.").action(add3).command("remove", "Delete a user").arguments("<email:string>").action(remove2).command("create-token", "Create a new API token for the authenticated user").option("--email <email:string>", "Specify credentials to use for authentication. This will not be stored. It will only be used to exchange for a token with the API server, which will not be stored either.", {
+  command17 = new Command().description("user related commands").action(list10).command("add", "Create a user").arguments("<email:string> [password:string]").option("--superadmin", "Specify to make the new user superadmin.").option("--company <company:string>", "Specify to set the company of the new user.").option("--name <name:string>", "Specify to set the name of the new user.").action(add3).command("remove", "Delete a user").arguments("<email:string>").action(remove2).command("create-token", "Create a new API token for the authenticated user").option("--email <email:string>", "Specify credentials to use for authentication. This will not be stored. It will only be used to exchange for a token with the API server, which will not be stored either.", {
     depends: ["password"]
   }).option("--password <password:string>", "Specify credentials to use for authentication. This will not be stored. It will only be used to exchange for a token with the API server, which will not be stored either.", {
     depends: ["email"]
   }).action(createToken2);
-  user_default = command18;
+  user_default = command17;
 });
 
 // src/commands/dependencies/dependencies.ts
@@ -70316,7 +71193,7 @@ async function pushWorkspaceDependencies(workspace, path18, _befObj, newDependen
   });
   info(colors.green(`Successfully pushed ${displayName} for ${language}`));
 }
-var command19, dependencies_default;
+var command18, dependencies_default;
 var init_dependencies = __esm(async () => {
   init_colors2();
   init_mod3();
@@ -70327,8 +71204,8 @@ var init_dependencies = __esm(async () => {
     init_context(),
     init_metadata()
   ]);
-  command19 = new Command().alias("deps").description("workspace dependencies related commands").command("push", "Push workspace dependencies from a local file").arguments("<file_path:string>").action(push9);
-  dependencies_default = command19;
+  command18 = new Command().alias("deps").description("workspace dependencies related commands").command("push", "Push workspace dependencies from a local file").arguments("<file_path:string>").action(push9);
+  dependencies_default = command18;
 });
 
 // src/commands/trigger/trigger.ts
@@ -70671,7 +71548,7 @@ async function push10(opts, filePath, remotePath) {
   await pushTrigger(triggerKind, workspace.workspaceId, remotePath, undefined, parseFromFile(filePath));
   console.log(colors.bold.underline.green("Trigger pushed"));
 }
-var import_yaml33, triggerTemplates, TRIGGER_SKIP_FIELDS, command20, trigger_default;
+var import_yaml33, triggerTemplates, TRIGGER_SKIP_FIELDS, command19, trigger_default;
 var init_trigger = __esm(async () => {
   init_services_gen();
   init_mod3();
@@ -70768,8 +71645,8 @@ var init_trigger = __esm(async () => {
     }
   };
   TRIGGER_SKIP_FIELDS = new Set(["workspace_id", "extra_perms", "edited_by", "edited_at"]);
-  command20 = new Command().description("trigger related commands").option("--json", "Output as JSON (for piping to jq)").action(list11).command("list", "list all triggers").option("--json", "Output as JSON (for piping to jq)").action(list11).command("get", "get a trigger's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").option("--kind <kind:string>", "Trigger kind (http, websocket, kafka, nats, postgres, mqtt, sqs, gcp, email). Recommended for faster lookup").action(get8).command("new", "create a new trigger locally").arguments("<path:string>").option("--kind <kind:string>", "Trigger kind (required: http, websocket, kafka, nats, postgres, mqtt, sqs, gcp, email)").action(newTrigger).command("push", "push a local trigger spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").action(push10);
-  trigger_default = command20;
+  command19 = new Command().description("trigger related commands").option("--json", "Output as JSON (for piping to jq)").action(list11).command("list", "list all triggers").option("--json", "Output as JSON (for piping to jq)").action(list11).command("get", "get a trigger's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").option("--kind <kind:string>", "Trigger kind (http, websocket, kafka, nats, postgres, mqtt, sqs, gcp, email). Recommended for faster lookup").action(get8).command("new", "create a new trigger locally").arguments("<path:string>").option("--kind <kind:string>", "Trigger kind (required: http, websocket, kafka, nats, postgres, mqtt, sqs, gcp, email)").action(newTrigger).command("push", "push a local trigger spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").action(push10);
+  trigger_default = command19;
 });
 
 // src/types.ts
@@ -71673,7 +72550,7 @@ async function showVersion(opts, flowPath, version) {
     console.log(JSON.stringify(flow.value, null, 2));
   }
 }
-var import_yaml36, alreadySynced3, command21, flow_default;
+var import_yaml36, alreadySynced3, command20, flow_default;
 var init_flow = __esm(async () => {
   init_colors2();
   init_mod3();
@@ -71698,8 +72575,8 @@ var init_flow = __esm(async () => {
   ]);
   import_yaml36 = __toESM(require_dist(), 1);
   alreadySynced3 = [];
-  command21 = new Command().description("flow related commands").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("list", "list all flows").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("get", "get a flow's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get9).command("push", "push a local flow spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").option("--message <message:string>", "Deployment message").action(push11).command("run", "run a flow by path.").arguments("<path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not ouput anything other then the final output. Useful for scripting.").action(run3).command("preview", "preview a local flow without deploying it. Runs the flow definition from local files and uses local PathScripts by default.").arguments("<flow_path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").option("--remote", "Use deployed workspace scripts for PathScript steps instead of local files.").action(preview2).command("generate-locks", 'DEPRECATED: re-generate flow lock files. Use "wmill generate-metadata" instead.').arguments("[flow:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateLocks).command("new", "create a new empty flow").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("bootstrap", "create a new empty flow (alias for new)").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("history", "Show version history for a flow").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(history2).command("show-version", "Show a specific version of a flow").arguments("<path:string> <version:string>").option("--json", "Output as JSON (for piping to jq)").action(showVersion);
-  flow_default = command21;
+  command20 = new Command().description("flow related commands").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("list", "list all flows").option("--show-archived", "Enable archived flows in output").option("--json", "Output as JSON (for piping to jq)").action(list12).command("get", "get a flow's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get9).command("push", "push a local flow spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").option("--message <message:string>", "Deployment message").action(push11).command("run", "run a flow by path.").arguments("<path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not ouput anything other then the final output. Useful for scripting.").action(run3).command("preview", "preview a local flow without deploying it. Runs the flow definition from local files and uses local PathScripts by default.").arguments("<flow_path:string>").option("-d --data <data:string>", "Inputs specified as a JSON string or a file using @<filename> or stdin using @-.").option("-s --silent", "Do not output anything other then the final output. Useful for scripting.").option("--remote", "Use deployed workspace scripts for PathScript steps instead of local files.").action(preview2).command("generate-locks", 'DEPRECATED: re-generate flow lock files. Use "wmill generate-metadata" instead.').arguments("[flow:file]").option("--yes", "Skip confirmation prompt").option("--dry-run", "Perform a dry run without making changes").option("-i --includes <patterns:file[]>", "Comma separated patterns to specify which file to take into account (among files that are compatible with windmill). Patterns can include * (any string until '/') and ** (any string)").option("-e --excludes <patterns:file[]>", "Comma separated patterns to specify which file to NOT take into account.").action(generateLocks).command("new", "create a new empty flow").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("bootstrap", "create a new empty flow (alias for new)").arguments("<flow_path:string>").option("--summary <summary:string>", "flow summary").option("--description <description:string>", "flow description").action(bootstrap2).command("history", "Show version history for a flow").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(history2).command("show-version", "Show a specific version of a flow").arguments("<path:string> <version:string>").option("--json", "Output as JSON (for piping to jq)").action(showVersion);
+  flow_default = command20;
 });
 
 // src/commands/gitsync-settings/converter.ts
@@ -72638,15 +73515,15 @@ __export(exports_gitsync_settings, {
   pullGitSyncSettings: () => pullGitSyncSettings,
   default: () => gitsync_settings_default
 });
-var command23, gitsync_settings_default;
+var command22, gitsync_settings_default;
 var init_gitsync_settings = __esm(async () => {
   init_mod3();
   await __promiseAll([
     init_pull2(),
     init_push()
   ]);
-  command23 = new Command().description("Manage git-sync settings between local wmill.yaml and Windmill backend").command("pull").description("Pull git-sync settings from Windmill backend to local wmill.yaml").option("--repository <repo:string>", "Specify repository path (e.g., u/user/repo)").option("--default", "Write settings to top-level defaults instead of overrides").option("--replace", "Replace existing settings (non-interactive mode)").option("--override", "Add branch-specific override (non-interactive mode)").option("--diff", "Show differences without applying changes").option("--json-output", "Output in JSON format").option("--with-backend-settings <json:string>", "Use provided JSON settings instead of querying backend (for testing)").option("--yes", "Skip interactive prompts and use default behavior").option("--promotion <branch:string>", "Use promotionOverrides from the specified branch instead of regular overrides").action(pullGitSyncSettings).command("push").description("Push git-sync settings from local wmill.yaml to Windmill backend").option("--repository <repo:string>", "Specify repository path (e.g., u/user/repo)").option("--diff", "Show what would be pushed without applying changes").option("--json-output", "Output in JSON format").option("--with-backend-settings <json:string>", "Use provided JSON settings instead of querying backend (for testing)").option("--yes", "Skip interactive prompts and use default behavior").option("--promotion <branch:string>", "Use promotionOverrides from the specified branch instead of regular overrides").action(pushGitSyncSettings);
-  gitsync_settings_default = command23;
+  command22 = new Command().description("Manage git-sync settings between local wmill.yaml and Windmill backend").command("pull").description("Pull git-sync settings from Windmill backend to local wmill.yaml").option("--repository <repo:string>", "Specify repository path (e.g., u/user/repo)").option("--default", "Write settings to top-level defaults instead of overrides").option("--replace", "Replace existing settings (non-interactive mode)").option("--override", "Add branch-specific override (non-interactive mode)").option("--diff", "Show differences without applying changes").option("--json-output", "Output in JSON format").option("--with-backend-settings <json:string>", "Use provided JSON settings instead of querying backend (for testing)").option("--yes", "Skip interactive prompts and use default behavior").option("--promotion <branch:string>", "Use promotionOverrides from the specified branch instead of regular overrides").action(pullGitSyncSettings).command("push").description("Push git-sync settings from local wmill.yaml to Windmill backend").option("--repository <repo:string>", "Specify repository path (e.g., u/user/repo)").option("--diff", "Show what would be pushed without applying changes").option("--json-output", "Output in JSON format").option("--with-backend-settings <json:string>", "Use provided JSON settings instead of querying backend (for testing)").option("--yes", "Skip interactive prompts and use default behavior").option("--promotion <branch:string>", "Use promotionOverrides from the specified branch instead of regular overrides").action(pushGitSyncSettings);
+  gitsync_settings_default = command22;
 });
 
 // src/utils/dependency_tree.ts
@@ -74194,8 +75071,8 @@ async function pull2(opts) {
     await pushResourceType(workspace.workspaceId, x.name + ".resource-type.json", undefined, x);
   }
 }
-var command22 = new Command().name("hub").description("Hub related commands. EXPERIMENTAL. INTERNAL USE ONLY.").command("pull").description("pull any supported definitions. EXPERIMENTAL.").action(pull2);
-var hub_default = command22;
+var command21 = new Command().name("hub").description("Hub related commands. EXPERIMENTAL. INTERNAL USE ONLY.").command("pull").description("pull any supported definitions. EXPERIMENTAL.").action(pull2);
+var hub_default = command21;
 
 // src/main.ts
 await __promiseAll([
@@ -74204,10 +75081,93 @@ await __promiseAll([
   init_trigger(),
   init_sync(),
   init_gitsync_settings(),
+  init_instance()
+]);
+
+// src/commands/worker-groups/worker-groups.ts
+init_mod3();
+init_mod6();
+init_log();
+init_client();
+init_services_gen();
+await __promiseAll([
+  init_confirm(),
   init_instance(),
-  init_worker_groups(),
-  init_lint()
+  init_settings()
 ]);
+async function getInstance(opts) {
+  const instances = await allInstances();
+  const instanceName = await getActiveInstance(opts);
+  const instance = instances.find((i) => i.name === instanceName);
+  if (instance) {
+    setClient(instance.token, instance.remote.slice(0, instance.remote.length - 1));
+  }
+  return instance;
+}
+function removeWorkerPrefix(name) {
+  if (name.startsWith("worker__")) {
+    return name.substring(8);
+  }
+  return name;
+}
+async function displayWorkerGroups(opts) {
+  info("2 actions available, pull and push.");
+  const activeInstance = await getActiveInstance({});
+  if (activeInstance) {
+    info("Active instance: " + activeInstance);
+    const instance = await getInstance({});
+    if (instance) {
+      const wGroups = await listWorkerGroups();
+      new Table2().header(["name", "config"]).padding(2).border(true).body(wGroups.map((x) => [removeWorkerPrefix(x.name), JSON.stringify(x.config, null, 2)])).render();
+    } else {
+      error(`Instance ${activeInstance} not found`);
+    }
+  } else {
+    info("No active instance found");
+    info("Use 'wmill instance add' to add a new instance");
+  }
+}
+async function pullWorkerGroups(opts) {
+  await pickInstance(opts, true);
+  const totalChanges = await pullInstanceConfigs(opts, true) ?? 0;
+  if (totalChanges === 0) {
+    info("No changes to apply");
+    return;
+  }
+  let confirm = true;
+  if (opts.yes !== true) {
+    confirm = await Confirm.prompt({
+      message: `Do you want to pul these ${totalChanges} instance-level changes?`,
+      default: true
+    });
+  }
+  if (confirm) {
+    await pullInstanceConfigs(opts, false);
+  }
+}
+async function pushWorkerGroups(opts) {
+  await pickInstance(opts, true);
+  const totalChanges = await pushInstanceConfigs(opts, true) ?? 0;
+  if (totalChanges === 0) {
+    info("No changes to apply");
+    return;
+  }
+  let confirm = true;
+  if (opts.yes !== true) {
+    confirm = await Confirm.prompt({
+      message: `Do you want to apply these ${totalChanges} instance-level changes?`,
+      default: true
+    });
+  }
+  if (confirm) {
+    await pushInstanceConfigs(opts, false);
+  }
+}
+var command23 = new Command().description("display worker groups, pull and push worker groups configs").action(displayWorkerGroups).command("pull").description("Pull worker groups (similar to `wmill instance pull --skip-users --skip-settings --skip-groups`)").option("--instance", "Name of the instance to push to, override the active instance").option("--base-url", "Base url to be passed to the instance settings instead of the local one").option("--yes", "Pull without needing confirmation").action(pullWorkerGroups).command("push").description("Push worker groups (similar to `wmill instance push --skip-users --skip-settings --skip-groups`)").option("--instance [instance]", "Name of the instance to push to, override the active instance").option("--base-url [baseUrl]", "If used with --token, will be used as the base url for the instance").option("--yes", "Push without needing confirmation").action(pushWorkerGroups);
+var worker_groups_default = command23;
+
+// src/main.ts
+await init_lint();
 
 // src/commands/dev/dev.ts
 init_mod3();
@@ -79080,7 +80040,7 @@ Reference a specific resource using \`$res:\` prefix:
 
 ## OpenFlow Schema
 
-{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_use":{"type":"boolean","description":"If true, this step's result is deleted after use to save memory"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
+{"OpenFlow":{"type":"object","description":"Top-level flow definition containing metadata, configuration, and the flow structure","properties":{"summary":{"type":"string","description":"Short description of what this flow does"},"description":{"type":"string","description":"Detailed documentation for this flow"},"value":{"$ref":"#/components/schemas/FlowValue"},"schema":{"type":"object","description":"JSON Schema for flow inputs. Use this to define input parameters, their types, defaults, and validation. For resource inputs, set type to 'object' and format to 'resource-<type>' (e.g., 'resource-stripe')"},"on_behalf_of_email":{"type":"string","description":"The flow will be run with the permissions of the user with this email."}},"required":["summary","value"]},"FlowValue":{"type":"object","description":"The flow structure containing modules and optional preprocessor/failure handlers","properties":{"modules":{"type":"array","description":"Array of steps that execute in sequence. Each step can be a script, subflow, loop, or branch","items":{"$ref":"#/components/schemas/FlowModule"}},"failure_module":{"description":"Special module that executes when the flow fails. Receives error object with message, name, stack, and step_id. Must have id 'failure'. Only supports script/rawscript types","$ref":"#/components/schemas/FlowModule"},"preprocessor_module":{"description":"Special module that runs before the first step on external triggers. Must have id 'preprocessor'. Only supports script/rawscript types. Cannot reference other step results","$ref":"#/components/schemas/FlowModule"},"same_worker":{"type":"boolean","description":"If true, all steps run on the same worker for better performance"},"concurrent_limit":{"type":"number","description":"Maximum number of concurrent executions of this flow"},"concurrency_key":{"type":"string","description":"Expression to group concurrent executions (e.g., by user ID)"},"concurrency_time_window_s":{"type":"number","description":"Time window in seconds for concurrent_limit"},"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce flow executions"},"debounce_key":{"type":"string","description":"Expression to group debounced executions"},"debounce_args_to_accumulate":{"type":"array","description":"Arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds that a job can be debounced"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of times a job can be debounced"},"skip_expr":{"type":"string","description":"JavaScript expression to conditionally skip the entire flow"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for flow results"},"cache_ignore_s3_path":{"type":"boolean"},"delete_after_secs":{"type":"integer","description":"If set, delete the flow job's args, result and logs after this many seconds following job completion"},"flow_env":{"type":"object","description":"Environment variables available to all steps. Values can be strings, JSON values, or special references: '$var:path' (workspace variable) or '$res:path' (resource).","additionalProperties":{}},"priority":{"type":"number","description":"Execution priority (higher numbers run first)"},"early_return":{"type":"string","description":"JavaScript expression to return early from the flow"},"chat_input_enabled":{"type":"boolean","description":"Whether this flow accepts chat-style input"},"notes":{"type":"array","description":"Sticky notes attached to the flow","items":{"$ref":"#/components/schemas/FlowNote"}},"groups":{"type":"array","description":"Semantic groups of modules for organizational purposes","items":{"$ref":"#/components/schemas/FlowGroup"}}},"required":["modules"]},"Retry":{"type":"object","description":"Retry configuration for failed module executions","properties":{"constant":{"type":"object","description":"Retry with constant delay between attempts","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"seconds":{"type":"integer","description":"Seconds to wait between retries"}}},"exponential":{"type":"object","description":"Retry with exponential backoff (delay doubles each time)","properties":{"attempts":{"type":"integer","description":"Number of retry attempts"},"multiplier":{"type":"integer","description":"Multiplier for exponential backoff"},"seconds":{"type":"integer","minimum":1,"description":"Initial delay in seconds"},"random_factor":{"type":"integer","minimum":0,"maximum":100,"description":"Random jitter percentage (0-100) to avoid thundering herd"}}},"retry_if":{"$ref":"#/components/schemas/RetryIf"}}},"FlowNote":{"type":"object","description":"A sticky note attached to a flow for documentation and annotation","properties":{"id":{"type":"string","description":"Unique identifier for the note"},"text":{"type":"string","description":"Content of the note"},"position":{"type":"object","description":"Position of the note in the flow editor","properties":{"x":{"type":"number","description":"X coordinate"},"y":{"type":"number","description":"Y coordinate"}},"required":["x","y"]},"size":{"type":"object","description":"Size of the note in the flow editor","properties":{"width":{"type":"number","description":"Width in pixels"},"height":{"type":"number","description":"Height in pixels"}},"required":["width","height"]},"color":{"type":"string","description":"Color of the note (e.g., \\"yellow\\", \\"#ffff00\\")"},"type":{"type":"string","enum":["free","group"],"description":"Type of note - 'free' for standalone notes, 'group' for notes that group other nodes"},"locked":{"type":"boolean","default":false,"description":"Whether the note is locked and cannot be edited or moved"},"contained_node_ids":{"type":"array","items":{"type":"string"},"description":"For group notes, the IDs of nodes contained within this group"}},"required":["id","text","color","type"]},"FlowGroup":{"type":"object","description":"A semantic group of flow modules for organizational purposes. Does not affect execution \\u2014 modules remain in their original position in the flow. Groups provide naming and collapsibility in the editor. Members are computed dynamically from all nodes on paths between start_id and end_id.","properties":{"summary":{"type":"string","description":"Display name for this group"},"note":{"type":"string","description":"Markdown note shown below the group header"},"autocollapse":{"type":"boolean","default":false,"description":"If true, this group is collapsed by default in the flow editor. UI hint only."},"start_id":{"type":"string","description":"ID of the first flow module in this group (topological entry point)"},"end_id":{"type":"string","description":"ID of the last flow module in this group (topological exit point)"},"color":{"type":"string","description":"Color for the group in the flow editor"}},"required":["start_id","end_id"]},"RetryIf":{"type":"object","description":"Conditional retry based on error or result","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to retry. Has access to 'result' and 'error' variables"}},"required":["expr"]},"StopAfterIf":{"type":"object","description":"Early termination condition for a module","properties":{"skip_if_stopped":{"type":"boolean","description":"If true, following steps are skipped when this condition triggers"},"expr":{"type":"string","description":"JavaScript expression evaluated after the module runs. Can use 'result' (step's result) or 'flow_input'. Return true to stop"},"error_message":{"type":"string","nullable":true,"description":"Custom error message when stopping with an error. Mutually exclusive with skip_if_stopped. If set to a non-empty string, the flow stops with this error. If empty string, a default error message is used. If null or omitted, no error is raised."}},"required":["expr"]},"FlowModule":{"type":"object","description":"A single step in a flow. Can be a script, subflow, loop, or branch","properties":{"id":{"type":"string","description":"Unique identifier for this step. Used to reference results via 'results.step_id'. Must be a valid identifier (alphanumeric, underscore, hyphen)"},"value":{"$ref":"#/components/schemas/FlowModuleValue"},"stop_after_if":{"description":"Early termination condition evaluated after this step completes","$ref":"#/components/schemas/StopAfterIf"},"stop_after_all_iters_if":{"description":"For loops only - early termination condition evaluated after all iterations complete","$ref":"#/components/schemas/StopAfterIf"},"skip_if":{"type":"object","description":"Conditionally skip this step based on previous results or flow inputs","properties":{"expr":{"type":"string","description":"JavaScript expression that returns true to skip. Can use 'flow_input' or 'results.<step_id>'"}},"required":["expr"]},"sleep":{"description":"Delay before executing this step (in seconds or as expression)","$ref":"#/components/schemas/InputTransform"},"cache_ttl":{"type":"number","description":"Cache duration in seconds for this step's results"},"cache_ignore_s3_path":{"type":"boolean"},"timeout":{"description":"Maximum execution time in seconds (static value or expression)","$ref":"#/components/schemas/InputTransform"},"delete_after_secs":{"type":"integer","description":"If set, delete the step's args, result and logs after this many seconds following job completion"},"summary":{"type":"string","description":"Short description of what this step does"},"mock":{"type":"object","description":"Mock configuration for testing without executing the actual step","properties":{"enabled":{"type":"boolean","description":"If true, return mock value instead of executing"},"return_value":{"description":"Value to return when mocked"}}},"suspend":{"type":"object","description":"Configuration for approval/resume steps that wait for user input","properties":{"required_events":{"type":"integer","description":"Number of approvals required before continuing"},"timeout":{"type":"integer","description":"Timeout in seconds before auto-continuing or canceling"},"resume_form":{"type":"object","description":"Form schema for collecting input when resuming","properties":{"schema":{"type":"object","description":"JSON Schema for the resume form"}}},"user_auth_required":{"type":"boolean","description":"If true, only authenticated users can approve"},"user_groups_required":{"description":"Expression or list of groups that can approve","$ref":"#/components/schemas/InputTransform"},"self_approval_disabled":{"type":"boolean","description":"If true, the user who started the flow cannot approve"},"hide_cancel":{"type":"boolean","description":"If true, hide the cancel button on the approval form"},"continue_on_disapprove_timeout":{"type":"boolean","description":"If true, continue flow on timeout instead of canceling"}}},"priority":{"type":"number","description":"Execution priority for this step (higher numbers run first)"},"continue_on_error":{"type":"boolean","description":"If true, flow continues even if this step fails"},"retry":{"description":"Retry configuration if this step fails","$ref":"#/components/schemas/Retry"},"debouncing":{"description":"Debounce configuration for this step (EE only)","type":"object","properties":{"debounce_delay_s":{"type":"integer","description":"Delay in seconds to debounce this step's executions across flow runs"},"debounce_key":{"type":"string","description":"Expression to group debounced executions. Supports $workspace and $args[name]. Default: $workspace/flow/<flow_path>-<step_id>"},"debounce_args_to_accumulate":{"type":"array","description":"Array-type arguments to accumulate across debounced executions","items":{"type":"string"}},"max_total_debouncing_time":{"type":"integer","description":"Maximum total time in seconds before forced execution"},"max_total_debounces_amount":{"type":"integer","description":"Maximum number of debounces before forced execution"}}}},"required":["value","id"]},"InputTransform":{"description":"Maps input parameters for a step. Can be a static value or a JavaScript expression that references previous results or flow inputs","oneOf":[{"$ref":"#/components/schemas/StaticTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"StaticTransform":{"type":"object","description":"Static value passed directly to the step. Use for hardcoded values or resource references like '$res:path/to/resource'","properties":{"value":{"description":"The static value. For resources, use format '$res:path/to/resource'"},"type":{"type":"string","enum":["static"]}},"required":["type"]},"JavascriptTransform":{"type":"object","description":"JavaScript expression evaluated at runtime. Can reference previous step results via 'results.step_id' or flow inputs via 'flow_input.property'. Inside loops, use 'flow_input.iter.value' for the current iteration value","properties":{"expr":{"type":"string","description":"JavaScript expression returning the value. Available variables - results (object with all previous step results), flow_input (flow inputs), flow_input.iter (in loops)"},"type":{"type":"string","enum":["javascript"]}},"required":["expr","type"]},"AiTransform":{"type":"object","description":"Value resolved by the AI runtime for this input. The AI engine decides how to satisfy the parameter.","properties":{"type":{"type":"string","enum":["ai"]}},"required":["type"]},"AIProviderKind":{"type":"string","description":"Supported AI provider types","enum":["openai","azure_openai","anthropic","mistral","deepseek","googleai","groq","openrouter","togetherai","customai","aws_bedrock"]},"ProviderConfig":{"type":"object","description":"Complete AI provider configuration with resource reference and model selection","properties":{"kind":{"$ref":"#/components/schemas/AIProviderKind"},"resource":{"type":"string","description":"Resource reference in format '$res:{resource_path}' pointing to provider credentials"},"model":{"type":"string","description":"Model identifier (e.g., 'gpt-4', 'claude-3-opus-20240229', 'gemini-pro')"}},"required":["kind","resource","model"]},"StaticProviderTransform":{"type":"object","description":"Static provider configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/ProviderConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"ProviderTransform":{"description":"Provider configuration - can be static (ProviderConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticProviderTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticProviderTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"MemoryOff":{"type":"object","description":"No conversation memory/context","properties":{"kind":{"type":"string","enum":["off"]}},"required":["kind"]},"MemoryAuto":{"type":"object","description":"Automatic context management","properties":{"kind":{"type":"string","enum":["auto"]},"context_length":{"type":"integer","description":"Maximum number of messages to retain in context"},"memory_id":{"type":"string","description":"Identifier for persistent memory across agent invocations"}},"required":["kind"]},"MemoryMessage":{"type":"object","description":"A single message in conversation history","properties":{"role":{"type":"string","enum":["user","assistant","system"]},"content":{"type":"string"}},"required":["role","content"]},"MemoryManual":{"type":"object","description":"Explicit message history","properties":{"kind":{"type":"string","enum":["manual"]},"messages":{"type":"array","items":{"$ref":"#/components/schemas/MemoryMessage"}}},"required":["kind","messages"]},"MemoryConfig":{"description":"Conversation memory configuration","oneOf":[{"$ref":"#/components/schemas/MemoryOff"},{"$ref":"#/components/schemas/MemoryAuto"},{"$ref":"#/components/schemas/MemoryManual"}],"discriminator":{"propertyName":"kind","mapping":{"off":"#/components/schemas/MemoryOff","auto":"#/components/schemas/MemoryAuto","manual":"#/components/schemas/MemoryManual"}}},"StaticMemoryTransform":{"type":"object","description":"Static memory configuration passed directly to the AI agent","properties":{"value":{"$ref":"#/components/schemas/MemoryConfig"},"type":{"type":"string","enum":["static"]}},"required":["type","value"]},"MemoryTransform":{"description":"Memory configuration - can be static (MemoryConfig), JavaScript expression, or AI-determined","oneOf":[{"$ref":"#/components/schemas/StaticMemoryTransform"},{"$ref":"#/components/schemas/JavascriptTransform"},{"$ref":"#/components/schemas/AiTransform"}],"discriminator":{"propertyName":"type","mapping":{"static":"#/components/schemas/StaticMemoryTransform","javascript":"#/components/schemas/JavascriptTransform","ai":"#/components/schemas/AiTransform"}}},"FlowModuleValue":{"description":"The actual implementation of a flow step. Can be a script (inline or referenced), subflow, loop, branch, or special module type","oneOf":[{"$ref":"#/components/schemas/RawScript"},{"$ref":"#/components/schemas/PathScript"},{"$ref":"#/components/schemas/PathFlow"},{"$ref":"#/components/schemas/ForloopFlow"},{"$ref":"#/components/schemas/WhileloopFlow"},{"$ref":"#/components/schemas/BranchOne"},{"$ref":"#/components/schemas/BranchAll"},{"$ref":"#/components/schemas/Identity"},{"$ref":"#/components/schemas/AiAgent"}],"discriminator":{"propertyName":"type","mapping":{"rawscript":"#/components/schemas/RawScript","script":"#/components/schemas/PathScript","flow":"#/components/schemas/PathFlow","forloopflow":"#/components/schemas/ForloopFlow","whileloopflow":"#/components/schemas/WhileloopFlow","branchone":"#/components/schemas/BranchOne","branchall":"#/components/schemas/BranchAll","identity":"#/components/schemas/Identity","aiagent":"#/components/schemas/AiAgent"}}},"RawScript":{"type":"object","description":"Inline script with code defined directly in the flow. Use 'bun' as default language if unspecified. The script receives arguments from input_transforms","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"content":{"type":"string","description":"The script source code. Should export a 'main' function"},"language":{"type":"string","description":"Programming language for this script","enum":["deno","bun","python3","go","bash","powershell","postgresql","mysql","bigquery","snowflake","mssql","oracledb","graphql","nativets","php","rust","ansible","csharp","nu","java","ruby","rlang","duckdb"]},"path":{"type":"string","description":"Optional path for saving this script"},"lock":{"type":"string","description":"Lock file content for dependencies"},"type":{"type":"string","enum":["rawscript"]},"tag":{"type":"string","description":"Worker group tag for execution routing"},"concurrent_limit":{"type":"number","description":"Maximum concurrent executions of this script"},"concurrency_time_window_s":{"type":"number","description":"Time window for concurrent_limit"},"custom_concurrency_key":{"type":"string","description":"Custom key for grouping concurrent executions"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"},"assets":{"type":"array","description":"External resources this script accesses (S3 objects, resources, etc.)","items":{"type":"object","required":["path","kind"],"properties":{"path":{"type":"string","description":"Path to the asset"},"kind":{"type":"string","description":"Type of asset","enum":["s3object","resource","ducklake","datatable","volume"]},"access_type":{"type":"string","nullable":true,"description":"Access level for this asset","enum":["r","w","rw"]},"alt_access_type":{"type":"string","nullable":true,"description":"Alternative access level","enum":["r","w","rw"]}}}}},"required":["type","content","language","input_transforms"]},"PathScript":{"type":"object","description":"Reference to an existing script by path. Use this when calling a previously saved script instead of writing inline code","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the script's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the script in the workspace (e.g., 'f/scripts/send_email')"},"hash":{"type":"string","description":"Optional specific version hash of the script to use"},"type":{"type":"string","enum":["script"]},"tag_override":{"type":"string","description":"Override the script's default worker group tag"},"is_trigger":{"type":"boolean","description":"If true, this script is a trigger that can start the flow"}},"required":["type","path","input_transforms"]},"PathFlow":{"type":"object","description":"Reference to an existing flow by path. Use this to call another flow as a subflow","properties":{"input_transforms":{"type":"object","description":"Map of parameter names to their values (static or JavaScript expressions). These become the subflow's input arguments","additionalProperties":{"$ref":"#/components/schemas/InputTransform"}},"path":{"type":"string","description":"Path to the flow in the workspace (e.g., 'f/flows/process_user')"},"type":{"type":"string","enum":["flow"]}},"required":["type","path","input_transforms"]},"ForloopFlow":{"type":"object","description":"Executes nested modules in a loop over an iterator. Inside the loop, use 'flow_input.iter.value' to access the current iteration value, and 'flow_input.iter.index' for the index. Supports parallel execution for better performance on I/O-bound operations","properties":{"modules":{"type":"array","description":"Steps to execute for each iteration. These can reference the iteration value via 'flow_input.iter.value'","items":{"$ref":"#/components/schemas/FlowModule"}},"iterator":{"description":"JavaScript expression that returns an array to iterate over. Can reference 'results.step_id' or 'flow_input'","$ref":"#/components/schemas/InputTransform"},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["forloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (faster for I/O-bound operations). Use with parallelism to control concurrency"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true. Limits resource usage. Can be static number or expression","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","iterator","skip_failures","type"]},"WhileloopFlow":{"type":"object","description":"Executes nested modules repeatedly while a condition is true. The loop checks the condition after each iteration. Use stop_after_if on modules to control loop termination","properties":{"modules":{"type":"array","description":"Steps to execute in each iteration. Use stop_after_if to control when the loop ends","items":{"$ref":"#/components/schemas/FlowModule"}},"skip_failures":{"type":"boolean","description":"If true, iteration failures don't stop the loop. Failed iterations return null"},"type":{"type":"string","enum":["whileloopflow"]},"parallel":{"type":"boolean","description":"If true, iterations run concurrently (use with caution in while loops)"},"parallelism":{"description":"Maximum number of concurrent iterations when parallel=true","$ref":"#/components/schemas/InputTransform"},"squash":{"type":"boolean"}},"required":["modules","skip_failures","type"]},"BranchOne":{"type":"object","description":"Conditional branching where only the first matching branch executes. Branches are evaluated in order, and the first one with a true expression runs. If no branches match, the default branch executes","properties":{"branches":{"type":"array","description":"Array of branches to evaluate in order. The first branch with expr evaluating to true executes","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch condition"},"expr":{"type":"string","description":"JavaScript expression that returns boolean. Can use 'results.step_id' or 'flow_input'. First true expr wins"},"modules":{"type":"array","description":"Steps to execute if this branch's expr is true","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules","expr"]}},"default":{"type":"array","description":"Steps to execute if no branch expressions match","items":{"$ref":"#/components/schemas/FlowModule"}},"type":{"type":"string","enum":["branchone"]}},"required":["branches","default","type"]},"BranchAll":{"type":"object","description":"Parallel branching where all branches execute simultaneously. Unlike BranchOne, all branches run regardless of conditions. Useful for executing independent tasks concurrently","properties":{"branches":{"type":"array","description":"Array of branches that all execute (either in parallel or sequentially)","items":{"type":"object","properties":{"summary":{"type":"string","description":"Short description of this branch's purpose"},"skip_failure":{"type":"boolean","description":"If true, failure in this branch doesn't fail the entire flow"},"modules":{"type":"array","description":"Steps to execute in this branch","items":{"$ref":"#/components/schemas/FlowModule"}}},"required":["modules"]}},"type":{"type":"string","enum":["branchall"]},"parallel":{"type":"boolean","description":"If true, all branches execute concurrently. If false, they execute sequentially"}},"required":["branches","type"]},"AgentTool":{"type":"object","description":"A tool available to an AI agent. Can be a flow module or an external MCP (Model Context Protocol) tool","properties":{"id":{"type":"string","description":"Unique identifier for this tool. Cannot contain spaces - use underscores instead (e.g., 'get_user_data' not 'get user data')"},"summary":{"type":"string","description":"Short description of what this tool does (shown to the AI)"},"value":{"$ref":"#/components/schemas/ToolValue"}},"required":["id","value"]},"ToolValue":{"description":"The implementation of a tool. Can be a flow module (script/flow) or an MCP tool reference","oneOf":[{"$ref":"#/components/schemas/FlowModuleTool"},{"$ref":"#/components/schemas/McpToolValue"},{"$ref":"#/components/schemas/WebsearchToolValue"}],"discriminator":{"propertyName":"tool_type","mapping":{"flowmodule":"#/components/schemas/FlowModuleTool","mcp":"#/components/schemas/McpToolValue","websearch":"#/components/schemas/WebsearchToolValue"}}},"FlowModuleTool":{"description":"A tool implemented as a flow module (script, flow, etc.). The AI can call this like any other flow module","allOf":[{"type":"object","properties":{"tool_type":{"type":"string","enum":["flowmodule"]}},"required":["tool_type"]},{"$ref":"#/components/schemas/FlowModuleValue"}]},"WebsearchToolValue":{"type":"object","description":"A tool implemented as a websearch tool. The AI can call this like any other websearch tool","properties":{"tool_type":{"type":"string","enum":["websearch"]}},"required":["tool_type"]},"McpToolValue":{"type":"object","description":"Reference to an external MCP (Model Context Protocol) tool. The AI can call tools from MCP servers","properties":{"tool_type":{"type":"string","enum":["mcp"]},"resource_path":{"type":"string","description":"Path to the MCP resource/server configuration"},"include_tools":{"type":"array","description":"Whitelist of specific tools to include from this MCP server","items":{"type":"string"}},"exclude_tools":{"type":"array","description":"Blacklist of tools to exclude from this MCP server","items":{"type":"string"}}},"required":["tool_type","resource_path"]},"AiAgent":{"type":"object","description":"AI agent step that can use tools to accomplish tasks. The agent receives inputs and can call any of its configured tools to complete the task","properties":{"input_transforms":{"type":"object","description":"Input parameters for the AI agent mapped to their values","properties":{"provider":{"$ref":"#/components/schemas/ProviderTransform"},"output_type":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Output format type.\\nValid values: 'text' (default) - plain text response, 'image' - image generation\\n"},"user_message":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"The user's prompt/message to the AI agent. Supports variable interpolation with flow.input syntax."},"system_prompt":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"System instructions that guide the AI's behavior, persona, and response style. Optional."},"streaming":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Boolean. If true, stream the AI response incrementally.\\nStreaming events include: token_delta, tool_call, tool_call_arguments, tool_execution, tool_result\\n"},"memory":{"$ref":"#/components/schemas/MemoryTransform"},"output_schema":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"JSON Schema object defining structured output format. Used when you need the AI to return data in a specific shape.\\nSupports standard JSON Schema properties: type, properties, required, items, enum, pattern, minLength, maxLength, minimum, maximum, etc.\\nExample: { type: 'object', properties: { name: { type: 'string' }, age: { type: 'integer' } }, required: ['name'] }\\n"},"user_attachments":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Array of file references (images or PDFs) for the AI agent.\\nFormat: Array<{ bucket: string, key: string }> - S3 object references\\nExample: [{ bucket: 'my-bucket', key: 'documents/report.pdf' }]\\n"},"max_completion_tokens":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Integer. Maximum number of tokens the AI will generate in its response.\\nRange: 1 to 4,294,967,295. Typical values: 256-4096 for most use cases.\\n"},"temperature":{"allOf":[{"$ref":"#/components/schemas/InputTransform"}],"description":"Float. Controls randomness/creativity of responses.\\nRange: 0.0 to 2.0 (provider-dependent)\\n- 0.0 = deterministic, focused responses\\n- 0.7 = balanced (common default)\\n- 1.0+ = more creative/random\\n"}},"required":["provider","user_message","output_type"]},"tools":{"type":"array","description":"Array of tools the agent can use. The agent decides which tools to call based on the task","items":{"$ref":"#/components/schemas/AgentTool"}},"type":{"type":"string","enum":["aiagent"]},"parallel":{"type":"boolean","description":"If true, the agent can execute multiple tool calls in parallel"}},"required":["tools","type","input_transforms"]},"Identity":{"type":"object","description":"Pass-through module that returns its input unchanged. Useful for flow structure or as a placeholder","properties":{"type":{"type":"string","enum":["identity"]},"flow":{"type":"boolean","description":"If true, marks this as a flow identity (special handling)"}},"required":["type"]},"FlowStatus":{"type":"object","properties":{"step":{"type":"integer"},"modules":{"type":"array","items":{"$ref":"#/components/schemas/FlowStatusModule"}},"user_states":{"additionalProperties":true},"preprocessor_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"}]},"failure_module":{"allOf":[{"$ref":"#/components/schemas/FlowStatusModule"},{"type":"object","properties":{"parent_module":{"type":"string"}}}]},"retry":{"type":"object","properties":{"fail_count":{"type":"integer"},"failed_jobs":{"type":"array","items":{"type":"string","format":"uuid"}}}}},"required":["step","modules","failure_module"]},"FlowStatusModule":{"type":"object","properties":{"type":{"type":"string","enum":["WaitingForPriorSteps","WaitingForEvents","WaitingForExecutor","InProgress","Success","Failure"]},"id":{"type":"string"},"job":{"type":"string","format":"uuid"},"count":{"type":"integer"},"progress":{"type":"integer"},"iterator":{"type":"object","properties":{"index":{"type":"integer"},"itered":{"type":"array","items":{}},"itered_len":{"type":"integer"},"args":{}}},"flow_jobs":{"type":"array","items":{"type":"string"}},"flow_jobs_success":{"type":"array","items":{"type":"boolean"}},"flow_jobs_duration":{"type":"object","properties":{"started_at":{"type":"array","items":{"type":"string"}},"duration_ms":{"type":"array","items":{"type":"integer"}}}},"branch_chosen":{"type":"object","properties":{"type":{"type":"string","enum":["branch","default"]},"branch":{"type":"integer"}},"required":["type"]},"branchall":{"type":"object","properties":{"branch":{"type":"integer"},"len":{"type":"integer"}},"required":["branch","len"]},"approvers":{"type":"array","items":{"type":"object","properties":{"resume_id":{"type":"integer"},"approver":{"type":"string"}},"required":["resume_id","approver"]}},"failed_retries":{"type":"array","items":{"type":"string","format":"uuid"}},"skipped":{"type":"boolean"},"agent_actions":{"type":"array","items":{"type":"object","oneOf":[{"type":"object","properties":{"job_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"type":{"type":"string","enum":["tool_call"]},"module_id":{"type":"string"}},"required":["job_id","function_name","type","module_id"]},{"type":"object","properties":{"call_id":{"type":"string","format":"uuid"},"function_name":{"type":"string"},"resource_path":{"type":"string"},"type":{"type":"string","enum":["mcp_tool_call"]},"arguments":{"type":"object"}},"required":["call_id","function_name","resource_path","type"]},{"type":"object","properties":{"type":{"type":"string","enum":["web_search"]}},"required":["type"]},{"type":"object","properties":{"type":{"type":"string","enum":["message"]}},"required":["content","type"]}]}},"agent_actions_success":{"type":"array","items":{"type":"boolean"}}},"required":["type"]}}`,
   "raw-app": `---
 name: raw-app
 description: MUST use when creating raw apps.
@@ -79907,7 +80867,7 @@ sync local with a remote instance or the opposite (push or pull)
   - \`--dry-run\` - Perform a dry run without making changes
   - \`--skip-users\` - Skip pulling users
   - \`--skip-settings\` - Skip pulling settings
-  - \`--skip-configs\` - Skip pulling configs (worker groups and SMTP)
+  - \`--skip-configs\` - Skip pulling configs (worker groups)
   - \`--skip-groups\` - Skip pulling instance groups
   - \`--include-workspaces\` - Also pull workspaces
   - \`--folder-per-instance\` - Create a folder per instance
@@ -79919,7 +80879,7 @@ sync local with a remote instance or the opposite (push or pull)
   - \`--dry-run\` - Perform a dry run without making changes
   - \`--skip-users\` - Skip pushing users
   - \`--skip-settings\` - Skip pushing settings
-  - \`--skip-configs\` - Skip pushing configs (worker groups and SMTP)
+  - \`--skip-configs\` - Skip pushing configs (worker groups)
   - \`--skip-groups\` - Skip pushing instance groups
   - \`--include-workspaces\` - Also push workspaces
   - \`--folder-per-instance\` - Create a folder per instance
@@ -80223,7 +81183,7 @@ display worker groups, pull and push worker groups configs
   - \`--instance\` - Name of the instance to push to, override the active instance
   - \`--base-url\` - Base url to be passed to the instance settings instead of the local one
   - \`--yes\` - Pull without needing confirmation
-- \`worker-groups push\` - Push instance settings, users, configs, group and overwrite remote
+- \`worker-groups push\` - Push worker groups (similar to \`wmill instance push --skip-users --skip-settings --skip-groups\`)
   - \`--instance [instance]\` - Name of the instance to push to, override the active instance
   - \`--base-url [baseUrl]\` - If used with --token, will be used as the base url for the instance
   - \`--yes\` - Push without needing confirmation
@@ -80260,8 +81220,19 @@ workspace related commands
   - \`--branch, --env <branch:string>\` - Specify branch/environment (defaults to current)
 - \`workspace fork [workspace_name:string] [workspace_id:string]\` - Create a forked workspace
   - \`--create-workspace-name <workspace_name:string>\` - Specify the workspace name. Ignored if --create is not specified or the workspace already exists. Will default to the workspace id.
+  - \`--color <color:string>\` - Workspace color (hex code, e.g. #ff0000)
+  - \`--datatable-behavior <behavior:string>\` - How to handle datatables: skip, schema_only, or schema_and_data (default: interactive prompt)
+  - \`-y --yes\` - Skip interactive prompts (defaults datatable behavior to 'skip')
 - \`workspace delete-fork <fork_name:string>\` - Delete a forked workspace and git branch
   - \`-y --yes\` - Skip confirmation prompt
+- \`workspace merge\` - Compare and deploy changes between a fork and its parent workspace
+  - \`--direction <direction:string>\` - Deploy direction: to-parent or to-fork
+  - \`--all\` - Deploy all changed items including conflicts
+  - \`--skip-conflicts\` - Skip items modified in both workspaces
+  - \`--include <items:string>\` - Comma-separated kind:path items to include (e.g. script:f/test/main,flow:f/my/flow)
+  - \`--exclude <items:string>\` - Comma-separated kind:path items to exclude
+  - \`--preserve-on-behalf-of\` - Preserve original on_behalf_of/permissioned_as values
+  - \`-y --yes\` - Non-interactive mode (deploy without prompts)
 
 `
 };
@@ -82873,12 +83844,12 @@ var config_default = command35;
 
 // src/main.ts
 await init_context();
-var VERSION = "1.678.0";
+var VERSION = "1.680.0";
 var command36 = new Command().name("wmill").action(() => info(`Welcome to Windmill CLI ${VERSION}. Use -h for help.`)).description("Windmill CLI").globalOption("--workspace <workspace:string>", "Specify the target workspace. This overrides the default workspace.").globalOption("--debug --verbose", "Show debug/verbose logs").globalOption("--show-diffs", "Show diff informations when syncing (may show sensitive informations)").globalOption("--token <token:string>", "Specify an API token. This will override any stored token.").globalOption("--base-url <baseUrl:string>", "Specify the base URL of the API. If used, --token and --workspace are required and no local remote/workspace already set will be used.").globalOption("--config-dir <configDir:string>", "Specify a custom config directory. Overrides WMILL_CONFIG_DIR environment variable and default ~/.config location.").env("HEADERS <headers:string>", `Specify headers to use for all requests. e.g: "HEADERS='h1: v1, h2: v2'"`).version(VERSION).versionOption(false).command("init", init_default).command("app", app_default).command("flow", flow_default).command("script", script_default).command("workspace", workspace_default).command("resource", resource_default).command("resource-type", resource_type_default).command("user", user_default).command("variable", variable_default).command("hub", hub_default).command("folder", folder_default).command("schedule", schedule_default).command("trigger", trigger_default).command("dev", dev_default2).command("sync", sync_default).command("lint", lint_default).command("gitsync-settings", gitsync_settings_default).command("instance", instance_default).command("worker-groups", worker_groups_default).command("workers", workers_default).command("queues", queues_default).command("dependencies", dependencies_default).command("jobs", jobs_default).command("job", job_default).command("group", group_default).command("audit", audit_default).command("token", token_default).command("generate-metadata", generate_metadata_default).command("docs", docs_default).command("config", config_default).command("version --version", "Show version information").action(async (opts) => {
   console.log("CLI version: " + VERSION);
   try {
-    const provider = new NpmProvider({ package: "windmill-cli" });
-    const versions = await provider.getVersions("windmill-cli");
+    const provider2 = new NpmProvider({ package: "windmill-cli" });
+    const versions = await provider2.getVersions("windmill-cli");
     if (versions.latest !== VERSION) {
       console.log(`CLI is outdated. Latest version ${versions.latest} is available. Run \`wmill upgrade\` to update.`);
     } else {