windmill-cli 1.693.5 → 1.695.0

package/esm/main.js

@@ -5,25 +5,43 @@ var __getProtoOf = Object.getPrototypeOf;
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toESMCache_node;
+var __toESMCache_esm;
 var __toESM = (mod, isNodeMode, target) => {
+  var canCache = mod != null && typeof mod === "object";
+  if (canCache) {
+    var cache = isNodeMode ? __toESMCache_node ??= new WeakMap : __toESMCache_esm ??= new WeakMap;
+    var cached = cache.get(mod);
+    if (cached)
+      return cached;
+  }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
   const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
   for (let key of __getOwnPropNames(mod))
     if (!__hasOwnProp.call(to, key))
       __defProp(to, key, {
-        get: () => mod[key],
+        get: __accessProp.bind(mod, key),
         enumerable: true
       });
+  if (canCache)
+    cache.set(mod, to);
   return to;
 };
 var __commonJS = (cb, mod) => () => (mod || cb((mod = { exports: {} }).exports, mod), mod.exports);
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, {
       get: all[name],
       enumerable: true,
       configurable: true,
-      set: (newValue) => all[name] = () => newValue
+      set: __exportSetter.bind(all, name)
     });
 };
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
@@ -13185,7 +13203,7 @@ function sameValueZero(a, b) {
 }
 function equal(a, b) {
   const seen = new Map;
-  return function compare(a2, b2) {
+  return function compare3(a2, b2) {
     if (sameValueZero(a2, b2))
       return true;
     if (isPrimitive(a2) || isPrimitive(b2))
@@ -13210,7 +13228,7 @@ function equal(a, b) {
         throw new TypeError("Cannot compare WeakSet instances");
       }
       if (a2 instanceof WeakRef) {
-        return compare(a2.deref(), b2.deref());
+        return compare3(a2.deref(), b2.deref());
       }
       if (seen.get(a2) === b2) {
         return true;
@@ -13232,7 +13250,7 @@ function equal(a, b) {
             return a2.symmetricDifference(b2).size === 0;
           }
           for (const key of aKeys) {
-            if (!b2.has(key) || !compare(a2.get(key), b2.get(key))) {
+            if (!b2.has(key) || !compare3(a2.get(key), b2.get(key))) {
               return false;
             }
           }
@@ -13241,9 +13259,9 @@ function equal(a, b) {
         let unmatchedEntries = a2.size;
         for (const [aKey, aValue] of a2.entries()) {
           for (const [bKey, bValue] of b2.entries()) {
-            if (!compare(aKey, bKey))
+            if (!compare3(aKey, bKey))
               continue;
-            if (aKey === aValue && bKey === bValue || compare(aValue, bValue)) {
+            if (aKey === aValue && bKey === bValue || compare3(aValue, bValue)) {
               unmatchedEntries--;
               break;
             }
@@ -13263,7 +13281,7 @@ function equal(a, b) {
         keys = getKeysDeep(a2).union(getKeysDeep(b2));
       }
       for (const key of keys) {
-        if (!compare(a2[key], b2[key])) {
+        if (!compare3(a2[key], b2[key])) {
           return false;
         }
         if (key in a2 && !(key in b2) || key in b2 && !(key in a2)) {
@@ -16692,7 +16710,7 @@ var init_OpenAPI = __esm(() => {
     PASSWORD: undefined,
     TOKEN: getEnv3("WM_TOKEN"),
     USERNAME: undefined,
-    VERSION: "1.693.4",
+    VERSION: "1.695.0",
     WITH_CREDENTIALS: true,
     interceptors: {
       request: new Interceptors,
@@ -25082,6 +25100,24 @@ async function requireLogin(opts) {
       throw new Error(`Network error: Could not connect to Windmill server at ${workspace.remote}`);
     }
     if (opts.token || opts.baseUrl) {
+      const isApiError = error2 && typeof error2 === "object" && "name" in error2 && error2.name === "ApiError";
+      if (isApiError) {
+        const status = error2.status;
+        const body = error2.body;
+        let bodyStr = typeof body === "object" && body !== null ? JSON.stringify(body) : String(body ?? "").trim();
+        bodyStr = bodyStr.replace(/\s*[@(]\w+\.rs:\d+[:\d]*\)?/g, "");
+        bodyStr = bodyStr.replace(/^(Permission denied|Not authorized): /, "");
+        if (status === 403) {
+          info(colors.red(`Permission denied: the token is valid but lacks the required scope.${bodyStr ? `
+${bodyStr}` : ""}`));
+        } else if (status === 401) {
+          info(colors.red(`Could not authenticate with the provided credentials. Please check your --token and --base-url and try again.${bodyStr ? `
+${bodyStr}` : ""}`));
+        } else {
+          info(colors.red(`Request failed (${status ?? "unknown"}): ${bodyStr}`));
+        }
+        return process.exit(1);
+      }
       info(colors.red("Could not authenticate with the provided credentials. Please check your --token and --base-url and try again."));
       return process.exit(1);
     }
@@ -30405,7 +30441,7 @@ var require_stream = __commonJS((exports, module) => {
       if (!duplex.push(data3))
         ws.pause();
     });
-    ws.once("error", function error(err) {
+    ws.once("error", function error2(err) {
       if (duplex.destroyed)
         return;
       terminateOnDestroy = false;
@@ -30423,7 +30459,7 @@ var require_stream = __commonJS((exports, module) => {
         return;
       }
       let called = false;
-      ws.once("error", function error(err2) {
+      ws.once("error", function error2(err2) {
         called = true;
         callback(err2);
       });
@@ -30437,7 +30473,7 @@ var require_stream = __commonJS((exports, module) => {
     };
     duplex._final = function(callback) {
       if (ws.readyState === ws.CONNECTING) {
-        ws.once("open", function open() {
+        ws.once("open", function open2() {
           duplex._final(callback);
         });
         return;
@@ -30461,7 +30497,7 @@ var require_stream = __commonJS((exports, module) => {
     };
     duplex._write = function(chunk, encoding, callback) {
       if (ws.readyState === ws.CONNECTING) {
-        ws.once("open", function open() {
+        ws.once("open", function open2() {
           duplex._write(chunk, encoding, callback);
         });
         return;
@@ -35512,7 +35548,7 @@ var require_BufferList = __commonJS((exports, module) => {
       this.tail = null;
       this.length = 0;
     }
-    BufferList.prototype.push = function push(v) {
+    BufferList.prototype.push = function push2(v) {
       var entry = { data: v, next: null };
       if (this.length > 0)
         this.tail.next = entry;
@@ -35543,7 +35579,7 @@ var require_BufferList = __commonJS((exports, module) => {
       this.head = this.tail = null;
       this.length = 0;
     };
-    BufferList.prototype.join = function join(s) {
+    BufferList.prototype.join = function join9(s) {
       if (this.length === 0)
         return "";
       var p = this.head;
@@ -37478,7 +37514,7 @@ var require_nodejsUtils = __commonJS((exports, module) => {
 
 // node_modules/set-immediate-shim/index.js
 var require_set_immediate_shim = __commonJS((exports, module) => {
-  module.exports = typeof setImmediate === "function" ? setImmediate : function setImmediate() {
+  module.exports = typeof setImmediate === "function" ? setImmediate : function setImmediate2() {
     var args = [].slice.apply(arguments);
     args.splice(1, 0, 0);
     setTimeout.apply(null, args);
@@ -45833,7 +45869,7 @@ var require_headers = __commonJS((exports) => {
     }
     return result;
   };
-  exports.encode = function encode(opts) {
+  exports.encode = function encode2(opts) {
     const buf = b4a.alloc(512);
     let name = opts.name;
     let prefix = "";
@@ -45874,7 +45910,7 @@ var require_headers = __commonJS((exports) => {
     b4a.write(buf, encodeOct(cksum(buf), 6), 148);
     return buf;
   };
-  exports.decode = function decode(buf, filenameEncoding, allowUnknownFormat) {
+  exports.decode = function decode2(buf, filenameEncoding, allowUnknownFormat) {
     let typeflag = buf[156] === 0 ? 0 : buf[156] - ZERO_OFFSET;
     let name = decodeStr(buf, 0, 100, filenameEncoding);
     const mode = decodeOct(buf, 100, 8);
@@ -48785,7 +48821,7 @@ var require_subschema = __commonJS((exports) => {
 
 // node_modules/fast-deep-equal/index.js
 var require_fast_deep_equal = __commonJS((exports, module) => {
-  module.exports = function equal(a, b) {
+  module.exports = function equal2(a, b) {
     if (a === b)
       return true;
     if (a && b && typeof a == "object" && typeof b == "object") {
@@ -48797,7 +48833,7 @@ var require_fast_deep_equal = __commonJS((exports, module) => {
         if (length != b.length)
           return false;
         for (i = length;i-- !== 0; )
-          if (!equal(a[i], b[i]))
+          if (!equal2(a[i], b[i]))
             return false;
         return true;
       }
@@ -48816,7 +48852,7 @@ var require_fast_deep_equal = __commonJS((exports, module) => {
           return false;
       for (i = length;i-- !== 0; ) {
         var key = keys[i];
-        if (!equal(a[key], b[key]))
+        if (!equal2(a[key], b[key]))
           return false;
       }
       return true;
@@ -72316,7 +72352,7 @@ async function pushSchedule(workspace, path19, schedule, localSchedule, permissi
           ...preserveFields
         }
       });
-      if (localSchedule.enabled != schedule.enabled) {
+      if (localSchedule.enabled !== undefined && localSchedule.enabled !== schedule.enabled) {
         info(colors.bold.yellow(`Schedule ${path19} is ${localSchedule.enabled ? "enabled" : "disabled"} locally but not on remote, updating remote`));
         await setScheduleEnabled({
           workspace,
@@ -72351,13 +72387,31 @@ async function enable(opts, path19) {
   opts = await mergeConfigWithConfigFile(opts);
   const workspace = await resolveWorkspace(opts);
   await requireLogin(opts);
-  await setScheduleEnabled({
-    workspace: workspace.workspaceId,
-    path: path19,
-    requestBody: { enabled: true }
-  });
+  try {
+    await setScheduleEnabled({
+      workspace: workspace.workspaceId,
+      path: path19,
+      requestBody: { enabled: true, force: opts.force }
+    });
+  } catch (e) {
+    const conflict = parseForkConflict(e);
+    if (conflict) {
+      error(`Cannot enable schedule '${path19}': the parent workspace '${conflict.parentWorkspaceId}' has the same path configured. ` + `Both crons would fire on every tick and the script would run twice per scheduled time.
+` + `Re-run with --force to enable anyway.`);
+      process.exit(1);
+    }
+    throw e;
+  }
   info(colors.green(`Schedule ${path19} enabled.`));
 }
+function parseForkConflict(e) {
+  const body = e?.body;
+  const raw = typeof body === "string" ? body : e?.message ?? "";
+  const m = String(raw).match(/fork-conflict:([^:]+):(.+)/);
+  if (!m)
+    return;
+  return { kind: m[1], parentWorkspaceId: m[2].trim() };
+}
 async function disable(opts, path19) {
   opts = await mergeConfigWithConfigFile(opts);
   const workspace = await resolveWorkspace(opts);
@@ -72398,7 +72452,7 @@ var init_schedule = __esm(async () => {
     init_types()
   ]);
   import_yaml26 = __toESM(require_dist(), 1);
-  command16 = new Command().description("schedule related commands").option("--json", "Output as JSON (for piping to jq)").action(list9).command("list", "list all schedules").option("--json", "Output as JSON (for piping to jq)").action(list9).command("get", "get a schedule's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get7).command("new", "create a new schedule locally").arguments("<path:string>").action(newSchedule).command("push", "push a local schedule spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").action(push8).command("enable", "Enable a schedule").arguments("<path:string>").action(enable).command("disable", "Disable a schedule").arguments("<path:string>").action(disable).command("set-permissioned-as", "Set the email (run-as user) for a schedule (requires admin or wm_deployers group)").arguments("<path:string> <email:string>").action(async (opts, schedulePath, email) => {
+  command16 = new Command().description("schedule related commands").option("--json", "Output as JSON (for piping to jq)").action(list9).command("list", "list all schedules").option("--json", "Output as JSON (for piping to jq)").action(list9).command("get", "get a schedule's details").arguments("<path:string>").option("--json", "Output as JSON (for piping to jq)").action(get7).command("new", "create a new schedule locally").arguments("<path:string>").action(newSchedule).command("push", "push a local schedule spec. This overrides any remote versions.").arguments("<file_path:string> <remote_path:string>").action(push8).command("enable", "Enable a schedule").option("--force", "Bypass the fork-conflict warning when the parent workspace has the same schedule (acknowledges that both crons will fire)").arguments("<path:string>").action(enable).command("disable", "Disable a schedule").arguments("<path:string>").action(disable).command("set-permissioned-as", "Set the email (run-as user) for a schedule (requires admin or wm_deployers group)").arguments("<path:string> <email:string>").action(async (opts, schedulePath, email) => {
     const workspace = await resolveWorkspace(opts);
     await requireLogin(opts);
     const cache3 = new Map;
@@ -78968,6 +79022,37 @@ Name the parameters by adding comments before the statement:
 -- @name2 (int64) = 0
 SELECT * FROM users WHERE name = @name1 AND age > @name2;
 \`\`\`
+
+## Receiving an S3Object as a script parameter
+
+Declare the arg with type \`(s3object)\`. Windmill renders an S3 file picker for
+it, downloads the file, and binds it as a \`STRING\` JSON parameter — Parquet/CSV
+files are decoded server-side into a JSON array of records, JSON/JSONL pass
+through. Consume with \`JSON_EXTRACT_ARRAY\` / \`JSON_VALUE\`:
+
+\`\`\`sql
+-- @file (s3object)
+SELECT
+  CAST(JSON_VALUE(row, '$.id') AS INT64) AS id,
+  JSON_VALUE(row, '$.name') AS name
+FROM UNNEST(JSON_EXTRACT_ARRAY(@file)) AS row;
+\`\`\`
+
+## Streaming query results to S3
+
+Add a \`-- s3\` directive at the top of the script to stream the result set to S3
+instead of returning rows. Windmill writes the file and returns its \`S3Object\`
+as the script result.
+
+\`\`\`sql
+-- s3 prefix=exports/users format=parquet
+SELECT id, name FROM users;
+\`\`\`
+
+All keys are optional: \`prefix\` (object key prefix), \`storage\` (named storage —
+omit to use the workspace default), \`format\` (\`json\` (default), \`parquet\`, or
+\`csv\`). Use this for large result sets — rows stream directly to S3 instead of
+being buffered, bypassing the 10000-row return cap.
 `,
   "write-script-bun": `---
 name: write-script-bun
@@ -79091,19 +79176,20 @@ export async function preprocessor(event: Event) {
 
 ## S3 Object Operations
 
-Windmill provides built-in support for S3-compatible storage operations.
-
-### S3Object Type
+Windmill provides built-in support for S3-compatible storage operations. The \`wmill.S3Object\` type covers both the \`s3://storage/key\` URI form (\`s3:///key\` for the workspace default storage) and the \`{ s3, storage? }\` record form — always use it instead of redefining your own.
 
-The S3Object type represents a file in S3 storage:
+### Receiving an S3Object as a script parameter
 
 \`\`\`typescript
-type S3Object = {
-  s3: string; // Path within the bucket
-};
+import * as wmill from "windmill-client";
+
+export async function main(file: wmill.S3Object) {
+  const content = await wmill.loadS3File(file);
+  // ...
+}
 \`\`\`
 
-## TypeScript Operations
+### S3 operations
 
 \`\`\`typescript
 import * as wmill from "windmill-client";
@@ -79115,7 +79201,7 @@ const content: Uint8Array = await wmill.loadS3File(s3object);
 const blob: Blob = await wmill.loadS3FileStream(s3object);
 
 // Write file to S3
-const result: S3Object = await wmill.writeS3File(
+const result: wmill.S3Object = await wmill.writeS3File(
   s3object, // Target path (or undefined to auto-generate)
   fileContent, // string or Blob
   s3ResourcePath // Optional: specific S3 resource to use
@@ -79781,19 +79867,20 @@ export async function preprocessor(event: Event) {
 
 ## S3 Object Operations
 
-Windmill provides built-in support for S3-compatible storage operations.
-
-### S3Object Type
+Windmill provides built-in support for S3-compatible storage operations. The \`wmill.S3Object\` type covers both the \`s3://storage/key\` URI form (\`s3:///key\` for the workspace default storage) and the \`{ s3, storage? }\` record form — always use it instead of redefining your own.
 
-The S3Object type represents a file in S3 storage:
+### Receiving an S3Object as a script parameter
 
 \`\`\`typescript
-type S3Object = {
-  s3: string; // Path within the bucket
-};
+import * as wmill from "windmill-client";
+
+export async function main(file: wmill.S3Object) {
+  const content = await wmill.loadS3File(file);
+  // ...
+}
 \`\`\`
 
-## TypeScript Operations
+### S3 operations
 
 \`\`\`typescript
 import * as wmill from "windmill-client";
@@ -79805,7 +79892,7 @@ const content: Uint8Array = await wmill.loadS3File(s3object);
 const blob: Blob = await wmill.loadS3FileStream(s3object);
 
 // Write file to S3
-const result: S3Object = await wmill.writeS3File(
+const result: wmill.S3Object = await wmill.writeS3File(
   s3object, // Target path (or undefined to auto-generate)
   fileContent, // string or Blob
   s3ResourcePath // Optional: specific S3 resource to use
@@ -80559,19 +80646,20 @@ export async function preprocessor(event: Event) {
 
 ## S3 Object Operations
 
-Windmill provides built-in support for S3-compatible storage operations.
-
-### S3Object Type
+Windmill provides built-in support for S3-compatible storage operations. The \`wmill.S3Object\` type covers both the \`s3://storage/key\` URI form (\`s3:///key\` for the workspace default storage) and the \`{ s3, storage? }\` record form — always use it instead of redefining your own.
 
-The S3Object type represents a file in S3 storage:
+### Receiving an S3Object as a script parameter
 
 \`\`\`typescript
-type S3Object = {
-  s3: string; // Path within the bucket
-};
+import * as wmill from "windmill-client";
+
+export async function main(file: wmill.S3Object) {
+  const content = await wmill.loadS3File(file);
+  // ...
+}
 \`\`\`
 
-## TypeScript Operations
+### S3 operations
 
 \`\`\`typescript
 import * as wmill from "windmill-client";
@@ -80583,7 +80671,7 @@ const content: Uint8Array = await wmill.loadS3File(s3object);
 const blob: Blob = await wmill.loadS3FileStream(s3object);
 
 // Write file to S3
-const result: S3Object = await wmill.writeS3File(
+const result: wmill.S3Object = await wmill.writeS3File(
   s3object, // Target path (or undefined to auto-generate)
   fileContent, // string or Blob
   s3ResourcePath // Optional: specific S3 resource to use
@@ -81220,6 +81308,30 @@ SELECT * FROM read_parquet('s3:///path/to/file.parquet');
 -- JSON files
 SELECT * FROM read_json('s3:///path/to/file.json');
 \`\`\`
+
+### Receiving an S3Object as a script parameter
+
+Declare the arg with type \`(s3object)\`. Windmill renders an S3 file picker for it
+and binds the arg as the bare \`s3://storage/key\` URI, which DuckDB's reader
+functions consume directly:
+
+\`\`\`sql
+-- $file (s3object)
+SELECT * FROM read_parquet($file);
+\`\`\`
+
+Works with any DuckDB reader: \`read_csv($file)\`, \`read_json($file)\`, etc.
+
+### Writing query results to S3
+
+DuckDB writes to S3 natively via \`COPY ... TO\`:
+
+\`\`\`sql
+COPY (SELECT * FROM users) TO 's3:///exports/users.parquet' (FORMAT PARQUET);
+\`\`\`
+
+Use this instead of the \`-- s3\` streaming directive supported by the other SQL
+dialects — that directive is not available in DuckDB.
 `,
   "write-script-go": `---
 name: write-script-go
@@ -81536,6 +81648,36 @@ Name the parameters by adding comments before the statement:
 -- @P2 name2 (int) = 0
 SELECT * FROM users WHERE name = @P1 AND age > @P2;
 \`\`\`
+
+## Receiving an S3Object as a script parameter
+
+Declare the arg with type \`(s3object)\`. Windmill renders an S3 file picker for
+it, downloads the file, and binds it as \`nvarchar(max)\` JSON text — Parquet/CSV
+files are decoded server-side into a JSON array of records, JSON/JSONL pass
+through. Consume with \`OPENJSON\`:
+
+\`\`\`sql
+-- @P1 file (s3object)
+SELECT id, name
+FROM OPENJSON(@P1)
+WITH (id INT, name NVARCHAR(200));
+\`\`\`
+
+## Streaming query results to S3
+
+Add a \`-- s3\` directive at the top of the script to stream the result set to S3
+instead of returning rows. Windmill writes the file and returns its \`S3Object\`
+as the script result.
+
+\`\`\`sql
+-- s3 prefix=exports/users format=parquet
+SELECT id, name FROM users;
+\`\`\`
+
+All keys are optional: \`prefix\` (object key prefix), \`storage\` (named storage —
+omit to use the workspace default), \`format\` (\`json\` (default), \`parquet\`, or
+\`csv\`). Use this for large result sets — rows stream directly to S3 instead of
+being buffered as the script return value.
 `,
   "write-script-mysql": `---
 name: write-script-mysql
@@ -81588,6 +81730,37 @@ Name the parameters by adding comments before the statement:
 -- ? name2 (int) = 0
 SELECT * FROM users WHERE name = ? AND age > ?;
 \`\`\`
+
+## Receiving an S3Object as a script parameter
+
+Declare the arg with type \`(s3object)\`. Windmill renders an S3 file picker for
+it, downloads the file, and binds it as JSON text — Parquet/CSV files are
+decoded server-side into a JSON array of records, JSON/JSONL pass through.
+Consume with \`JSON_TABLE\`:
+
+\`\`\`sql
+-- ? file (s3object)
+SELECT id, name
+FROM JSON_TABLE(?, '$[*]'
+  COLUMNS (id INT PATH '$.id', name VARCHAR(200) PATH '$.name')
+) AS r;
+\`\`\`
+
+## Streaming query results to S3
+
+Add a \`-- s3\` directive at the top of the script to stream the result set to S3
+instead of returning rows. Windmill writes the file and returns its \`S3Object\`
+as the script result.
+
+\`\`\`sql
+-- s3 prefix=exports/users format=parquet
+SELECT id, name FROM users;
+\`\`\`
+
+All keys are optional: \`prefix\` (object key prefix), \`storage\` (named storage —
+omit to use the workspace default), \`format\` (\`json\` (default), \`parquet\`, or
+\`csv\`). Use this for large result sets — rows stream directly to S3 instead of
+being buffered as the script return value.
 `,
   "write-script-nativets": `---
 name: write-script-nativets
@@ -82395,6 +82568,35 @@ Name the parameters by adding comments at the beginning of the script (without s
 -- $2 name2 = default_value
 SELECT * FROM users WHERE name = $1::TEXT AND age > $2::INT;
 \`\`\`
+
+## Receiving an S3Object as a script parameter
+
+Declare the arg with type \`(s3object)\`. Windmill renders an S3 file picker for
+it, downloads the file, and binds it as a \`jsonb\` parameter — Parquet/CSV files
+are decoded server-side into a JSON array of records, JSON/JSONL pass through.
+Consume with \`jsonb_to_recordset\` (or any \`jsonb\` API):
+
+\`\`\`sql
+-- $1 file (s3object)
+SELECT *
+FROM jsonb_to_recordset($1::jsonb) AS r(id INT, name TEXT);
+\`\`\`
+
+## Streaming query results to S3
+
+Add a \`-- s3\` directive at the top of the script to stream the result set to S3
+instead of returning rows. Windmill writes the file and returns its \`S3Object\`
+as the script result.
+
+\`\`\`sql
+-- s3 prefix=exports/users format=parquet
+SELECT id, name FROM users;
+\`\`\`
+
+All keys are optional: \`prefix\` (object key prefix), \`storage\` (named storage —
+omit to use the workspace default), \`format\` (\`json\` (default), \`parquet\`, or
+\`csv\`). Use this for large result sets — rows stream directly to S3 instead of
+being buffered as the script return value.
 `,
   "write-script-powershell": `---
 name: write-script-powershell
@@ -82632,6 +82834,21 @@ def preprocessor(event: Event):
 
 Windmill provides built-in support for S3-compatible storage operations.
 
+### Receiving an S3Object as a script parameter
+
+To accept a file from S3 as input to a script, type the parameter with \`S3Object\` (imported from \`wmill\`):
+
+\`\`\`python
+import wmill
+from wmill import S3Object
+
+def main(file: S3Object):
+    content = wmill.load_s3_file(file)
+    # ...
+\`\`\`
+
+### S3 operations
+
 \`\`\`python
 import wmill
 
@@ -83636,6 +83853,37 @@ Name the parameters by adding comments before the statement:
 -- ? name2 (number) = 0
 SELECT * FROM users WHERE name = ? AND age > ?;
 \`\`\`
+
+## Receiving an S3Object as a script parameter
+
+Declare the arg with type \`(s3object)\`. Windmill renders an S3 file picker for
+it, downloads the file, and binds it as JSON text — Parquet/CSV files are
+decoded server-side into a JSON array of records, JSON/JSONL pass through.
+Wrap the bind with \`PARSE_JSON(?)\` and walk it with \`LATERAL FLATTEN\`:
+
+\`\`\`sql
+-- ? file (s3object)
+SELECT
+  v.value:id::NUMBER AS id,
+  v.value:name::STRING AS name
+FROM LATERAL FLATTEN(input => PARSE_JSON(?)) v;
+\`\`\`
+
+## Streaming query results to S3
+
+Add a \`-- s3\` directive at the top of the script to stream the result set to S3
+instead of returning rows. Windmill writes the file and returns its \`S3Object\`
+as the script result.
+
+\`\`\`sql
+-- s3 prefix=exports/users format=parquet
+SELECT id, name FROM users;
+\`\`\`
+
+All keys are optional: \`prefix\` (object key prefix), \`storage\` (named storage —
+omit to use the workspace default), \`format\` (\`json\` (default), \`parquet\`, or
+\`csv\`). Use this for large result sets — rows stream directly to S3 instead of
+being buffered, bypassing the 10000-row return cap.
 `,
   "write-flow": `---
 name: write-flow
@@ -85544,6 +85792,7 @@ schedule related commands
 - \`schedule new <path:string>\` - create a new schedule locally
 - \`schedule push <file_path:string> <remote_path:string>\` - push a local schedule spec. This overrides any remote versions.
 - \`schedule enable <path:string>\` - Enable a schedule
+  - \`--force\` - Bypass the fork-conflict warning when the parent workspace has the same schedule (acknowledges that both crons will fire)
 - \`schedule disable <path:string>\` - Disable a schedule
 - \`schedule set-permissioned-as <path:string> <email:string>\` - Set the email (run-as user) for a schedule (requires admin or wm_deployers group)
 
@@ -88690,7 +88939,7 @@ var config_default = command35;
 
 // src/main.ts
 await init_context();
-var VERSION = "1.693.4";
+var VERSION = "1.695.0";
 async function checkVersionSafe(cmd) {
   const mainCommand = cmd.getMainCommand();
   const upgradeCommand = mainCommand.getCommand("upgrade");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windmill-cli",
-  "version": "1.693.5",
+  "version": "1.695.0",
   "description": "CLI for Windmill",
   "license": "Apache 2.0",
   "type": "module",