chore(system): extract queue consumers processing into message handlers

When a flow have both a condition and a precondition, the condition was evaluated twice which lead to double execution triggered.

Fixes

.devcontainer/Dockerfile

@@ -0,0 +1,82 @@
+FROM ubuntu:24.04
+
+ARG BUILDPLATFORM
+ARG DEBIAN_FRONTEND=noninteractive
+
+USER root
+WORKDIR /root
+
+RUN apt update && apt install -y \
+  apt-transport-https ca-certificates gnupg curl wget git zip unzip less zsh net-tools iputils-ping jq lsof
+
+ENV HOME="/root"
+
+# --------------------------------------
+# Git
+# --------------------------------------
+# Need to add the devcontainer workspace folder as a safe directory to enable git 
+# version control system to be enabled in the containers file system.
+RUN git config --global --add safe.directory "/workspaces/kestra"
+# --------------------------------------
+
+# --------------------------------------
+# Oh my zsh
+# --------------------------------------
+RUN sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)" -- \
+  -t robbyrussell \
+  -p git -p node -p npm
+
+ENV SHELL=/bin/zsh
+# --------------------------------------
+
+# --------------------------------------
+# Java
+# --------------------------------------
+ARG OS_ARCHITECTURE
+
+RUN mkdir -p /usr/java
+RUN echo "Building on platform: $BUILDPLATFORM"
+RUN case "$BUILDPLATFORM" in \
+  "linux/amd64") OS_ARCHITECTURE="x64_linux" ;; \
+  "linux/arm64") OS_ARCHITECTURE="aarch64_linux" ;; \
+  "darwin/amd64") OS_ARCHITECTURE="x64_mac" ;; \
+  "darwin/arm64") OS_ARCHITECTURE="aarch64_mac" ;; \
+  *) echo "Unsupported BUILDPLATFORM: $BUILDPLATFORM" && exit 1 ;; \
+  esac && \
+  wget "https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.7%2B6/OpenJDK21U-jdk_${OS_ARCHITECTURE}_hotspot_21.0.7_6.tar.gz" && \
+  mv OpenJDK21U-jdk_${OS_ARCHITECTURE}_hotspot_21.0.7_6.tar.gz openjdk-21.0.7.tar.gz
+RUN tar -xzvf openjdk-21.0.7.tar.gz && \
+  mv jdk-21.0.7+6 jdk-21 && \
+  mv jdk-21 /usr/java/
+ENV JAVA_HOME=/usr/java/jdk-21
+ENV PATH="$PATH:$JAVA_HOME/bin"
+# Will load a custom configuration file for Micronaut
+ENV MICRONAUT_ENVIRONMENTS=local,override
+# Sets the path where you save plugins as Jar and is loaded during the startup process
+ENV KESTRA_PLUGINS_PATH="/workspaces/kestra/local/plugins"
+# --------------------------------------
+
+# --------------------------------------
+# Node.js
+# --------------------------------------
+RUN curl -fsSL https://deb.nodesource.com/setup_22.x -o nodesource_setup.sh \
+  && bash nodesource_setup.sh && apt install -y nodejs
+# Increases JavaScript heap memory to 4GB to prevent heap out of error during startup
+ENV NODE_OPTIONS=--max-old-space-size=4096
+# --------------------------------------
+
+# --------------------------------------
+# Python
+# --------------------------------------
+RUN apt install -y python3 pip python3-venv
+# --------------------------------------
+
+# --------------------------------------
+# SSH 
+# --------------------------------------
+RUN mkdir -p ~/.ssh
+RUN touch ~/.ssh/config
+RUN echo "Host github.com" >> ~/.ssh/config \
+  && echo "    IdentityFile ~/.ssh/id_ed25519" >> ~/.ssh/config
+RUN touch ~/.ssh/id_ed25519
+# --------------------------------------

.devcontainer/README.md

@@ -0,0 +1,146 @@
+# Kestra Devcontainer
+
+This devcontainer provides a quick and easy setup for anyone using VSCode to get up and running quickly with this project to start development on either the frontend or backend. It bootstraps a docker container for you to develop inside of without the need to manually setup the environment.
+
+---
+
+## INSTRUCTIONS
+
+### Setup:
+
+Take a look at this guide to get an idea of what the setup is like as this devcontainer setup follows this approach: https://kestra.io/docs/getting-started/contributing
+
+Once you have this repo cloned to your local system, you will need to install the VSCode extension [Remote Development](https://marketplace.visualstudio.com/items?itemName=ms-vscode-remote.vscode-remote-extensionpack).
+
+Then run the following command from the command palette:
+`Dev Containers: Open Folder in Container...` and select your Kestra root folder.
+
+This will then put you inside a docker container ready for development.
+
+NOTE: you'll need to wait for the gradle build to finish and compile Java files but this process should happen automatically within VSCode.
+
+In the meantime, you can move onto the next step...
+
+---
+
+### Requirements
+
+- Java 21 (LTS versions).
+  > ⚠️ Java 24 and above are not supported yet and will fail with `invalid source release: 21`.
+- Gradle (comes with wrapper `./gradlew`)
+- Docker (optional, for running Kestra in containers)
+
+### Development:
+
+- Navigate into the `ui` folder and run `npm install` to install the dependencies for the frontend project.
+
+- Now go to the `cli/src/main/resources` folder and create a `application-override.yml` file.
+
+Now you have two choices:
+
+`Local mode`:
+
+Runs the Kestra server in local mode which uses a H2 database, so this is the only config you'd need:
+
+```yaml
+micronaut:
+  server:
+    cors:
+      enabled: true
+      configurations:
+        all:
+          allowedOrigins:
+            - http://localhost:5173
+```
+
+You can then open a new terminal and run the following command to start the backend server: `./gradlew runLocal`
+
+`Standalone mode`:
+
+Runs in standalone mode which uses Postgres. Make sure to have a local Postgres instance already running on localhost:
+
+```yaml
+kestra:
+  repository:
+    type: postgres
+  storage:
+    type: local
+    local:
+      base-path: "/app/storage"
+  queue:
+    type: postgres
+  tasks:
+    tmp-dir:
+      path: /tmp/kestra-wd/tmp
+  anonymous-usage-report:
+    enabled: false
+
+datasources:
+  postgres:
+    # It is important to note that you must use the "host.docker.internal" host when connecting to a docker container outside of your devcontainer as attempting to use localhost will only point back to this devcontainer.
+    url: jdbc:postgresql://host.docker.internal:5432/kestra
+    driverClassName: org.postgresql.Driver
+    username: kestra
+    password: k3str4
+
+flyway:
+  datasources:
+    postgres:
+      enabled: true
+      locations:
+        - classpath:migrations/postgres
+      # We must ignore missing migrations as we may delete the wrong ones or delete those that are not used anymore.
+      ignore-migration-patterns: "*:missing,*:future"
+      out-of-order: true
+
+micronaut:
+  server:
+    cors:
+      enabled: true
+      configurations:
+        all:
+          allowedOrigins:
+            - http://localhost:5173
+```
+
+Then add the following settings to the `.vscode/launch.json` file:
+
+```json
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "type": "java",
+      "name": "Kestra Standalone",
+      "request": "launch",
+      "mainClass": "io.kestra.cli.App",
+      "projectName": "cli",
+      "args": "server standalone"
+    }
+  ]
+}
+```
+
+You can then use the VSCode `Run and Debug` extension to start the Kestra server.
+
+Additionally, if you're doing frontend development, you can run `npm run dev` from the `ui` folder after having the above running (which will provide a backend) to access your application from `localhost:5173`. This has the benefit to watch your changes and hot-reload upon doing frontend changes.
+
+#### Plugins
+If you want your plugins to be loaded inside your devcontainer, point the `source` field to a folder containing jars of the plugins you want to embed in the following snippet in `devcontainer.json`:
+```
+"mounts": [
+  {
+    "source": "/absolute/path/to/your/local/jar/plugins/folder",
+    "target": "/workspaces/kestra/local/plugins",
+    "type": "bind"
+  }
+],
+```
+
+---
+
+### GIT
+
+If you want to commit to GitHub, make sure to navigate to the `~/.ssh` folder and either create a new SSH key or override the existing `id_ed25519` file and paste an existing SSH key from your local machine into this file. You will then need to change the permissions of the file by running: `chmod 600 id_ed25519`. This will allow you to then push to GitHub.
+
+---

.devcontainer/devcontainer.json

@@ -0,0 +1,46 @@
+{
+  "name": "kestra",
+  "build": {
+    "context": ".",
+    "dockerfile": "Dockerfile"
+  },
+  "workspaceFolder": "/workspaces/kestra",
+  "forwardPorts": [5173, 8080],
+  "customizations": {
+    "vscode": {
+      "settings": {
+        "terminal.integrated.profiles.linux": {
+          "zsh": {
+            "path": "/bin/zsh"
+          }
+        },
+        "workbench.iconTheme": "vscode-icons",
+        "editor.tabSize": 4,
+        "editor.formatOnSave": true,
+        "files.insertFinalNewline": true,
+        "editor.defaultFormatter": "esbenp.prettier-vscode",
+        "telemetry.telemetryLevel": "off",
+        "editor.bracketPairColorization.enabled": true,
+        "editor.guides.bracketPairs": "active"
+      },
+      "extensions": [
+        "redhat.vscode-yaml",
+        "dbaeumer.vscode-eslint",
+        "vscode-icons-team.vscode-icons",
+        "eamodio.gitlens",
+        "esbenp.prettier-vscode",
+        "aaron-bond.better-comments",
+        "codeandstuff.package-json-upgrade",
+        "andys8.jest-snippets",
+        "oderwat.indent-rainbow",
+        "evondev.indent-rainbow-palettes",
+        "formulahendry.auto-rename-tag",
+        "IronGeek.vscode-env",
+        "yoavbls.pretty-ts-errors",
+        "github.vscode-github-actions",
+        "vscjava.vscode-java-pack",
+        "docker.docker"
+      ]
+    }
+  }
+}

.dockerignore

@@ -1,5 +0,0 @@
-# Ignore everything
-**
-
-# Allow docker directories
-!docker/

.gitattributes

@@ -0,0 +1,9 @@
+# Match the .editorconfig
+*           text=auto eol=lf
+
+# Scripts
+*.bat       text eol=crlf
+*.sh        text eol=lf
+
+# Gradle wrapper
+/gradlew    text eol=lf

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,114 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+We as members, contributors, and leaders pledge to make participation in our
+community a harassment-free experience for everyone, regardless of age, body
+size, visible or invisible disability, ethnicity, sex characteristics, gender
+identity and expression, level of experience, education, socio-economic status,
+nationality, personal appearance, race, religion, or sexual identity
+and orientation.
+
+We pledge to act and interact in ways that contribute to an open, welcoming,
+diverse, inclusive, and healthy community.
+
+## Our Standards
+
+Examples of behavior that contributes to a positive environment for our
+community include:
+
+* Demonstrating empathy and kindness toward other people
+* Being respectful of differing opinions, viewpoints, and experiences
+* Giving and gracefully accepting constructive feedback
+* Accepting responsibility and apologizing to those affected by our mistakes,
+  and learning from the experience
+* Focusing on what is best not just for us as individuals, but for the
+  overall community
+
+Examples of unacceptable behavior include:
+
+* The use of sexualized language or imagery, and sexual attention or
+  advances of any kind
+* Trolling, insulting or derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or email
+  address, without their explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+  professional setting
+
+## Enforcement Responsibilities
+
+Community leaders are responsible for clarifying and enforcing our standards of
+acceptable behavior and will take appropriate and fair corrective action in
+response to any behavior that they deem inappropriate, threatening, offensive,
+or harmful.
+
+Community leaders have the right and responsibility to remove, edit, or reject
+comments, commits, code, wiki edits, issues, and other contributions that are
+not aligned to this Code of Conduct, and will communicate reasons for moderation
+decisions when appropriate.
+
+## Scope
+
+This Code of Conduct applies within all community spaces, and also applies when
+an individual is officially representing the community in public spaces.
+Examples of representing our community include using an official e-mail address,
+posting via an official social media account, or acting as an appointed
+representative at an online or offline event.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported to the community leaders responsible for enforcement at
+hello@kestra.io.
+All complaints will be reviewed and investigated promptly and fairly.
+
+All community leaders are obligated to respect the privacy and security of the
+reporter of any incident.
+
+## Enforcement Guidelines
+
+Community leaders will follow these Community Impact Guidelines in determining
+the consequences for any action they deem in violation of this Code of Conduct:
+
+### 1. Correction
+
+**Community Impact**: Use of inappropriate language or other behavior deemed
+unprofessional or unwelcome in the community.
+
+**Consequence**: A private, written warning from community leaders, providing
+clarity around the nature of the violation and an explanation of why the
+behavior was inappropriate. A public apology may be requested.
+
+### 2. Warning
+
+**Community Impact**: A violation through a single incident or series
+of actions.
+
+**Consequence**: A warning with consequences for continued behavior. No
+interaction with the people involved, including unsolicited interaction with
+those enforcing the Code of Conduct, for a specified period of time. This
+includes avoiding interactions in community spaces as well as external channels
+like social media. Violating these terms may lead to a temporary or
+permanent ban.
+
+### 3. Temporary Ban
+
+**Community Impact**: A serious violation of community standards, including
+sustained inappropriate behavior.
+
+**Consequence**: A temporary ban from any sort of interaction or public
+communication with the community for a specified period of time. No public or
+private interaction with the people involved, including unsolicited interaction
+with those enforcing the Code of Conduct, is allowed during this period.
+Violating these terms may lead to a permanent ban.
+
+### 4. Permanent Ban
+
+**Community Impact**: Demonstrating a pattern of violation of community
+standards, including sustained inappropriate behavior,  harassment of an
+individual, or aggression toward or disparagement of classes of individuals.
+
+**Consequence**: A permanent ban from any sort of public interaction within
+the community.
+

.github/CONTRIBUTING.md

@@ -0,0 +1,142 @@
+## Code of Conduct
+
+This project and everyone participating in it is governed by the
+[Kestra Code of Conduct](https://github.com/kestra-io/kestra/blob/develop/.github/CODE_OF_CONDUCT.md).
+By participating, you are expected to uphold this code. Please report unacceptable behavior
+to <hello@kestra.io>.
+
+## I Want To Contribute
+
+> ### Legal Notice
+> When contributing to this project, you must agree that you have authored 100% of the content, that you have the necessary rights to the content and that the content you contribute may be provided under the project license.
+
+
+### Submit issues
+
+### Reporting bugs
+Bug reports help us make Kestra better for everyone. We provide a preconfigured template for bugs to make it very clear what information we need.
+Please search within our [already reported bugs](https://github.com/kestra-io/kestra/issues?q=is%3Aissue+is%3Aopen+label%3Abug) before raising a new one to make sure you're not raising a duplicate.
+
+### Reporting security issues
+Please do not create a public GitHub issue. If you've found a security issue, please email us directly at hello@kestra.io instead of raising an issue.
+
+
+### Requesting new features
+To request new features, please create an issue on this project.
+If you would like to suggest a new feature, we ask that you please use our issue template. It contains a few essential questions that help us understand the problem you are looking to solve and how you think your recommendation will address it.
+To see what has already been proposed by the community, you can look [here](https://github.com/kestra-io/kestra/issues?q=is%3Aissue+is%3Aopen+label%3Aenhancement).
+Watch out for duplicates! If you are creating a new issue, please check existing open, or recently closed. Having a single voted for issue is far easier for us to prioritize.
+
+### Your First Code Contribution
+
+#### Requirements
+The following dependencies are required to build Kestra locally:
+- Java 21+
+- Node 22+ and npm 10+
+- Python 3, pip and python venv
+- Docker & Docker Compose
+- an IDE (Intellij IDEA, Eclipse or VS Code)
+
+Thanks to the Kestra community, if using VSCode, you can also start development on either the frontend or backend with a bootstrapped docker container without the need to manually set up the environment.
+
+Check out the [README](../.devcontainer/README.md) for set-up instructions and the associated [Dockerfile](../.devcontainer/Dockerfile) in the respository to get started.
+
+To start contributing:
+- [Fork](https://docs.github.com/en/github/getting-started-with-github/fork-a-repo) the repository
+- Clone the fork on your workstation:
+
+```shell
+git clone git@github.com:{YOUR_USERNAME}/kestra.git
+cd kestra
+```
+
+#### Develop on the backend
+The backend is made with [Micronaut](https://micronaut.io).
+
+Open the cloned repository in your favorite IDE. In most of decent IDEs, Gradle build will be detected and all dependencies will be downloaded.
+You can also build it from a terminal using `./gradlew build`, the Gradle wrapper will download the right Gradle version to use.
+
+- You may need to enable java annotation processors since we are using them.
+- On IntelliJ IDEA, click on **Run -> Edit Configurations -> + Add new Configuration** to create a run configuration to start Kestra.
+  - The main class is `io.kestra.cli.App` from module `kestra.cli.main`.
+  - Pass as program arguments the server you want to work with, for example `server local` will start the [standalone local](https://kestra.io/docs/administrator-guide/server-cli#kestra-local-development-server-with-no-dependencies). You can also use `server standalone` and use the provided `docker-compose-ci.yml` Docker compose file to start a standalone server with a real database as a backend that would need to be configured properly.
+  - Configure the following environment variables:
+    - `MICRONAUT_ENVIRONMENTS`: can be set to any string and will load a custom configuration file in `cli/src/main/resources/application-{env}.yml`.
+    - `KESTRA_PLUGINS_PATH`: is the path where you will save plugins as Jar and will be load on startup.
+  - See the screenshot below for an example: ![Intellij IDEA Configuration ](run-app.png)
+  - If you encounter **JavaScript memory heap out** error during startup, configure `NODE_OPTIONS` environment variable with some large value.
+      - Example `NODE_OPTIONS: --max-old-space-size=4096` or `NODE_OPTIONS: --max-old-space-size=8192` ![Intellij IDEA Configuration ](node_option_env_var.png)
+- The server starts by default on port 8080 and is reachable on `http://localhost:8080`
+
+If you want to launch all tests, you need Python and some packages installed on your machine, on Ubuntu you can install them with:
+
+```shell
+sudo apt install python3 pip python3-venv
+python3 -m pip install virtualenv
+```
+
+
+#### Develop on the frontend
+The frontend is made with [Vue.js](https://vuejs.org/) and located on the `/ui` folder.
+
+- `npm install`
+- `npm run dev` will start the development server with hot reload.
+- The server start by default on port 5173 and is reachable on `http://localhost:5173`
+- You can run `npm run build` in order to build the front-end that will be delivered from the backend (without running the `npm run dev`) above.
+
+Now, you need to start a backend server, you could:
+- start a [local server](https://kestra.io/docs/administrator-guide/server-cli#kestra-local-development-server-with-no-dependencies) without a database using this docker-compose file already configured with CORS enabled:
+```yaml
+services:
+  kestra:
+    image: kestra/kestra:latest
+    user: "root"
+    command: server local
+    environment:
+      KESTRA_CONFIGURATION: |
+        micronaut:
+          server:
+            cors:
+              enabled: true
+              configurations:
+                all:
+                  allowedOrigins:
+                    - http://localhost:5173
+    ports:
+      - "8080:8080"
+```
+- start the [Develop backend](#develop-backend) from your IDE, you need to configure CORS restrictions when using the local development npm server, changing the backend configuration allowing the http://localhost:5173 origin in `cli/src/main/resources/application-override.yml`
+
+```yaml
+micronaut:
+  server:
+    cors:
+      enabled: true
+      configurations:
+        all:
+          allowedOrigins:
+            - http://localhost:5173
+```
+
+#### Build and deploy Kestra locally
+
+For testing purposes, you can use the `Makefile` provided at the project's root to build and deploy Kestra locally.
+By default, Kestra will be installed under: `$HOME/.kestra/current`. Set the `KESTRA_HOME` environment variable to override default.
+
+```bash
+# build and install Kestra
+make install
+# install plugins (plugins installation is based on the `.plugins` or `.plugins.override` files located at the root of the project.
+make install-plugins
+# start Kestra in standalone mode with Postgres as backend
+make start-standalone-postgres
+```
+
+Note: the local installation writes logs into the ` ~/.kestra/current/logs/` directory.
+
+#### Develop plugins
+A complete documentation for developing plugin can be found [here](https://kestra.io/docs/plugin-developer-guide/).
+
+### Improving The Documentation
+The main documentation is located in a separate [repository](https://github.com/kestra-io/kestra.io).
+For tasks documentation, they are located directly in the Java source, using [Swagger annotations](https://github.com/swagger-api/swagger-core/wiki/Swagger-2.X---Annotations) (Example: [for Bash tasks](https://github.com/kestra-io/kestra/blob/develop/core/src/main/java/io/kestra/core/tasks/scripts/AbstractBash.java))

.github/ISSUE_TEMPLATE/bug.yml

@@ -0,0 +1,25 @@
+name: Bug report
+description: Report a bug or unexpected behavior in the project
+
+labels: ["bug", "area/backend", "area/frontend"]
+
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting an issue! Please provide a [Minimal Reproducible Example](https://stackoverflow.com/help/minimal-reproducible-example) and share any additional information that may help reproduce, troubleshoot, and hopefully fix the issue, including screenshots, error traceback, and your Kestra server logs. For quick questions, you can contact us directly on [Slack](https://kestra.io/slack). Don't forget to give us a star! ⭐
+  - type: textarea
+    attributes:
+      label: Describe the issue
+      description: A concise description of the issue and how we can reproduce it.
+      placeholder: Describe the issue step by step
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Environment
+      description: Environment information where the problem occurs.
+      value: |
+        - Kestra Version: develop
+    validations:
+      required: false

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,4 @@
+contact_links:
+  - name: Chat
+    url: https://kestra.io/slack
+    about: Chat with us on Slack

.github/ISSUE_TEMPLATE/feature.yml

@@ -0,0 +1,12 @@
+name: Feature request
+description: Suggest a new feature or improvement to enhance the project
+
+labels: ["enhancement", "area/backend", "area/frontend"]
+
+body:
+  - type: textarea
+    attributes:
+      label: Feature description
+      placeholder: Tell us more about your feature request. Don't forget to give us a star! ⭐
+    validations:
+      required: true

.github/dependabot.yml

@@ -0,0 +1,54 @@
+# See GitHub's docs for more information on this file:
+# https://docs.github.com/en/free-pro-team@latest/github/administering-a-repository/configuration-options-for-dependency-updates
+
+version: 2
+updates:
+  # Maintain dependencies for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "08:00"
+      timezone: "Europe/Paris"
+    open-pull-requests-limit: 50
+    labels:
+      - "dependency-upgrade"
+
+  # Maintain dependencies for Gradle modules
+  - package-ecosystem: "gradle"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "08:00"
+      timezone: "Europe/Paris"
+    open-pull-requests-limit: 50
+    labels:
+      - "dependency-upgrade"
+    ignore:
+      - dependency-name: "com.google.protobuf:*"
+        # Ignore versions of Protobuf that are equal to or greater than 4.0.0 as Orc still uses 3
+        versions: [ "[4,)" ]
+
+  # Maintain dependencies for NPM modules
+  - package-ecosystem: "npm"
+    directory: "/ui"
+    schedule:
+      interval: "weekly"
+      day: "wednesday"
+      time: "08:00"
+      timezone: "Europe/Paris"
+    open-pull-requests-limit: 50
+    labels:
+      - "dependency-upgrade"
+    ignore:
+      # Ignore updates of version 1.x, as we're using the beta of 2.x (still in beta)
+      - dependency-name: "vue-virtual-scroller"
+        versions:
+          - "1.x"
+
+      # Ignore updates to monaco-yaml, version is pinned to 5.3.1 due to patch-package script additions
+      - dependency-name: "monaco-yaml"
+        versions:
+          - ">=5.3.2"

.github/pull_request_template.md

@@ -0,0 +1,38 @@
+<!-- Thanks for submitting a Pull Request to Kestra. To help us review your contribution, please follow the guidelines below:
+
+- Make sure that your commits follow the [conventional commits](https://www.conventionalcommits.org/en/v1.0.0/) specification e.g. `feat(ui): add a new navigation menu item` or `fix(core): fix a bug in the core model` or `docs: update the README.md`. This will help us automatically generate the changelog.
+- The title should briefly summarize the proposed changes.
+- Provide a short overview of the change and the value it adds.
+- Share a flow example to help the reviewer understand and QA the change.
+- Use "closes" to automatically close an issue. For example, `closes #1234` will close issue #1234. -->
+
+### What changes are being made and why?
+
+<!-- Please include a brief summary of the changes included in this PR e.g. closes #1234. -->
+
+---
+
+### How the changes have been QAed?
+
+<!-- Include example code that shows how this PR has been QAed. The code should present a complete yet easily reproducible flow.
+
+```yaml
+# Your example flow code here
+```
+
+Note that this is not a replacement for unit tests but rather a way to demonstrate how the changes work in a real-life scenario, as the end-user would experience them.
+
+Remove this section if this change applies to all flows or to the documentation only. -->
+
+---
+
+### Setup Instructions
+
+<!--If there are any setup requirements like API keys or trial accounts, kindly include brief bullet-points-description outlining the setup process below.
+
+- [External System Documentation](URL)
+- Steps to set up the necessary resources
+
+If there are no setup requirements, you can remove this section.
+
+Thank you for your contribution. ❤️ Don't forget to give us a star! ⭐  -->

.github/workflows/auto-translate-ui-keys.yml

@@ -0,0 +1,67 @@
+name: Auto-Translate UI keys and create PR
+
+on:
+  schedule:
+    - cron: "0 9-21/3 * * 1-5"  # Every 3 hours from 9 AM to 9 PM, Monday to Friday
+  workflow_dispatch:
+    inputs:
+      retranslate_modified_keys:
+        description: "Whether to re-translate modified keys even if they already have translations."
+        type: choice
+        options:
+          - "false"
+          - "true"
+        default: "false"
+        required: false
+
+jobs:
+  translations:
+    name: Translations
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+        - uses: actions/checkout@v5
+          name: Checkout
+          with:
+            fetch-depth: 0
+
+        - name: Set up Python
+          uses: actions/setup-python@v6
+          with:
+            python-version: "3.x"
+
+        - name: Install Python dependencies
+          run: pip install gitpython openai
+
+        - name: Generate translations
+          run: python ui/src/translations/generate_translations.py ${{ github.event.inputs.retranslate_modified_keys }}
+          env:
+            OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+
+        - name: Set up Node
+          uses: actions/setup-node@v6
+          with:
+            node-version: "20.x"
+
+        - name: Set up Git
+          run: |
+            git config --global user.name "GitHub Action"
+            git config --global user.email "actions@github.com"
+
+        - name: Commit and create PR
+          env:
+            GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          run: |
+            BRANCH_NAME="chore/update-translations-$(date +%s)"
+            git checkout -b $BRANCH_NAME
+            git add ui/src/translations/*.json
+            if git diff --cached --quiet; then
+              echo "No changes to commit. Exiting with success."
+              exit 0
+            fi
+            git commit -m "chore(core): localize to languages other than english" -m "Extended localization support by adding translations for multiple languages using English as the base. This enhances accessibility and usability for non-English-speaking users while keeping English as the source reference."
+            git push -u origin $BRANCH_NAME || (git push origin --delete $BRANCH_NAME && git push -u origin $BRANCH_NAME)
+            gh pr create --title "Translations from en.json" --body $'This PR was created automatically by a GitHub Action.\n\nSomeone from the @kestra-io/frontend team needs to review and merge.' --base ${{ github.ref_name }} --head $BRANCH_NAME
+
+        - name: Check keys matching
+          run: node ui/src/translations/check.js

.github/workflows/codeql-analysis.yml

@@ -6,11 +6,11 @@
 name: "CodeQL"
 
 on:
-  push:
-    branches: [develop]
   schedule:
     - cron: '0 5 * * 1'
 
+  workflow_dispatch: {}
+
 jobs:
   analyze:
     name: Analyze
@@ -27,7 +27,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v5
       with:
         # We must fetch at least the immediate parents so that if this is
         # a pull request then we can checkout the head.
@@ -40,24 +40,35 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file. 
+        # By default, queries listed here will override any specified in a config file.
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
     # Set up JDK
     - name: Set up JDK
-      uses: actions/setup-java@v1
+      uses: actions/setup-java@v5
+      if: ${{ matrix.language == 'java' }}
       with:
-        java-version: 11
+        distribution: 'temurin'
+        java-version: 21
+
+    - name: Setup gradle
+      if: ${{ matrix.language == 'java' }}
+      uses: gradle/actions/setup-gradle@v5
+
+    - name: Build with Gradle
+      if: ${{ matrix.language == 'java' }}
+      run: ./gradlew testClasses -x :ui:assembleFrontend
 
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      if: ${{ matrix.language != 'java' }}
+      uses: github/codeql-action/autobuild@v4
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -71,4 +82,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v4

.github/workflows/e2e-scheduling.yml

@@ -0,0 +1,15 @@
+name: 'E2E tests scheduling'
+# 'New E2E tests implementation started by Roman. Based on playwright in npm UI project, tests Kestra OSS develop docker image. These tests are written from zero, lets make them unflaky from the start!.'
+on:
+  schedule:
+    - cron: "0 * * * *"  # Every hour
+  workflow_dispatch:
+    inputs:
+      noInputYet:
+        description: 'not input yet.'
+        required: false
+        type: string
+        default: "no input"
+jobs:
+  e2e:
+    uses: kestra-io/actions/.github/workflows/kestra-oss-e2e-tests.yml@main

.github/workflows/global-create-new-release-branch.yml

@@ -0,0 +1,85 @@
+name: Create new release branch
+run-name: "Create new release branch Kestra ${{ github.event.inputs.releaseVersion }} 🚀"
+on:
+  workflow_dispatch:
+    inputs:
+      releaseVersion:
+        description: 'The release version (e.g., 0.21.0)'
+        required: true
+        type: string
+      nextVersion:
+        description: 'The next version (e.g., 0.22.0-SNAPSHOT)'
+        required: true
+        type: string
+env:
+  RELEASE_VERSION: "${{ github.event.inputs.releaseVersion }}"
+  NEXT_VERSION: "${{ github.event.inputs.nextVersion }}"
+jobs:
+  release:
+    name: Release Kestra
+    runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/develop'
+    steps:
+      # Checks
+      - name: Check Inputs
+        run: |
+          if ! [[ "$RELEASE_VERSION" =~ ^[0-9]+(\.[0-9]+)\.0$ ]]; then
+            echo "Invalid release version. Must match regex: ^[0-9]+(\.[0-9]+)\.0$"
+            exit 1
+          fi
+
+          if ! [[ "$NEXT_VERSION" =~ ^[0-9]+(\.[0-9]+)\.0-SNAPSHOT$ ]]; then
+            echo "Invalid next version. Must match regex: ^[0-9]+(\.[0-9]+)\.0-SNAPSHOT$"
+            exit 1;
+          fi
+      # Checkout
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          path: kestra
+
+      # Setup build
+      - uses: kestra-io/actions/composite/setup-build@main
+        id: build
+        with:
+          java-enabled: true
+          node-enabled: true
+          python-enabled: true
+          caches-enabled: true
+
+      - name: Configure Git
+        run: |
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+
+      # Execute
+      - name: Run Gradle Release
+        env:
+          GITHUB_PAT: ${{ secrets.GH_PERSONAL_TOKEN }}
+        run: |
+          # Extract the major and minor versions
+          BASE_VERSION=$(echo "$RELEASE_VERSION" | sed -E 's/^([0-9]+\.[0-9]+)\..*/\1/')
+          PUSH_RELEASE_BRANCH="releases/v${BASE_VERSION}.x"
+
+          cd kestra
+
+          # Create and push release branch
+          git checkout -B "$PUSH_RELEASE_BRANCH";
+          git pull origin "$PUSH_RELEASE_BRANCH" --rebase || echo "No existing branch to pull";
+          git push -u origin "$PUSH_RELEASE_BRANCH";
+
+          # Run gradle release
+          git checkout develop;
+
+          if [[ "$RELEASE_VERSION" == *"-SNAPSHOT" ]]; then
+            ./gradlew release -Prelease.useAutomaticVersion=true \
+            -Prelease.releaseVersion="${RELEASE_VERSION}" \
+            -Prelease.newVersion="${NEXT_VERSION}" \
+            -Prelease.pushReleaseVersionBranch="${PUSH_RELEASE_BRANCH}" \
+            -Prelease.failOnSnapshotDependencies=false
+          else
+            ./gradlew release -Prelease.useAutomaticVersion=true \
+            -Prelease.releaseVersion="${RELEASE_VERSION}" \
+            -Prelease.newVersion="${NEXT_VERSION}" \
+            -Prelease.pushReleaseVersionBranch="${PUSH_RELEASE_BRANCH}"
+          fi

.github/workflows/global-gradle-release-plugins.yml

@@ -0,0 +1,74 @@
+name: Run Gradle Release for Kestra Plugins
+
+on:
+  workflow_dispatch:
+    inputs:
+      releaseVersion:
+        description: 'The release version (e.g., 0.21.0)'
+        required: true
+        type: string
+      nextVersion:
+        description: 'The next version (e.g., 0.22.0-SNAPSHOT)'
+        required: true
+        type: string
+      dryRun:
+        description: 'Use DRY_RUN mode'
+        required: false
+        default: 'false'
+jobs:
+  release:
+    name: Release plugins
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # Setup build
+      - uses: kestra-io/actions/composite/setup-build@main
+        id: build
+        with:
+          java-enabled: true
+          node-enabled: true
+          python-enabled: true
+
+      # Get Plugins List
+      - name: Get Plugins List
+        uses: kestra-io/actions/composite/kestra-oss/kestra-oss-plugins-list@main
+        id: plugins-list
+        with:
+          plugin-version: 'LATEST'
+
+      - name: 'Configure Git'
+        run: |
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+
+      # Execute
+      - name: Run Gradle Release
+        if: ${{ github.event.inputs.dryRun == 'false' }}
+        env:
+          GITHUB_PAT: ${{ secrets.GH_PERSONAL_TOKEN }}
+        run: |
+          chmod +x ./dev-tools/release-plugins.sh;
+
+          ./dev-tools/release-plugins.sh \
+          --release-version=${{github.event.inputs.releaseVersion}} \
+          --next-version=${{github.event.inputs.nextVersion}} \
+          --yes \
+           ${{ steps.plugins-list.outputs.repositories }}
+
+      - name: Run Gradle Release (DRY_RUN)
+        if: ${{ github.event.inputs.dryRun == 'true' }}
+        env:
+          GITHUB_PAT: ${{ secrets.GH_PERSONAL_TOKEN }}
+        run: |
+          chmod +x ./dev-tools/release-plugins.sh;
+
+          ./dev-tools/release-plugins.sh \
+          --release-version=${{github.event.inputs.releaseVersion}} \
+          --next-version=${{github.event.inputs.nextVersion}} \
+          --dry-run \
+          --yes \
+          ${{ steps.plugins-list.outputs.repositories }}

.github/workflows/global-setversion-tag-plugins.yml

@@ -0,0 +1,60 @@
+name: Set Version and Tag Plugins
+
+on:
+  workflow_dispatch:
+    inputs:
+      releaseVersion:
+        description: 'The release version (e.g., 0.21.0)'
+        required: true
+        type: string
+      dryRun:
+        description: 'Use DRY_RUN mode'
+        required: false
+        default: 'false'
+jobs:
+  tag:
+    name: Release plugins
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # Get Plugins List
+      - name: Get Plugins List
+        uses: kestra-io/actions/composite/kestra-oss/kestra-oss-plugins-list@main
+        id: plugins-list
+        with:
+          plugin-version: 'LATEST'
+
+      - name: 'Configure Git'
+        run: |
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+
+      # Execute
+      - name: Set Version and Tag Plugins
+        if: ${{ github.event.inputs.dryRun == 'false' }}
+        env:
+          GITHUB_PAT: ${{ secrets.GH_PERSONAL_TOKEN }}
+        run: |
+          chmod +x ./dev-tools/setversion-tag-plugins.sh;
+
+          ./dev-tools/setversion-tag-plugins.sh \
+          --release-version=${{github.event.inputs.releaseVersion}} \
+          --yes \
+           ${{ steps.plugins-list.outputs.repositories }}
+
+      - name: Set Version and Tag Plugins (DRY_RUN)
+        if: ${{ github.event.inputs.dryRun == 'true' }}
+        env:
+          GITHUB_PAT: ${{ secrets.GH_PERSONAL_TOKEN }}
+        run: |
+          chmod +x ./dev-tools/setversion-tag-plugins.sh;
+
+          ./dev-tools/setversion-tag-plugins.sh \
+          --release-version=${{github.event.inputs.releaseVersion}} \
+          --dry-run \
+          --yes \
+          ${{ steps.plugins-list.outputs.repositories }}

.github/workflows/global-start-release.yml

@@ -0,0 +1,65 @@
+name: Start release
+run-name: "Start release of Kestra ${{ github.event.inputs.releaseVersion }} 🚀"
+on:
+  workflow_dispatch:
+    inputs:
+      releaseVersion:
+        description: 'The release version (e.g., 0.21.1)'
+        required: true
+        type: string
+
+permissions:
+  contents: write
+
+env:
+  RELEASE_VERSION: "${{ github.event.inputs.releaseVersion }}"
+jobs:
+  release:
+    name: Release Kestra
+    runs-on: ubuntu-latest
+    steps:
+      - name: Parse and Check Inputs
+        id: parse-and-check-inputs
+        run: |
+          CURRENT_BRANCH="${{ github.ref_name }}"
+          if ! [[ "$CURRENT_BRANCH" == "develop" ]]; then
+            echo "You can only run this workflow on develop, but you ran it on $CURRENT_BRANCH"
+            exit 1
+          fi
+
+          if ! [[ "$RELEASE_VERSION" =~ ^[0-9]+(\.[0-9]+)(\.[0-9]+)(-rc[0-9])?(-SNAPSHOT)?$ ]]; then
+            echo "Invalid release version. Must match regex: ^[0-9]+(\.[0-9]+)(\.[0-9]+)-(rc[0-9])?(-SNAPSHOT)?$"
+            exit 1
+          fi
+
+          # Extract the major and minor versions
+          BASE_VERSION=$(echo "$RELEASE_VERSION" | sed -E 's/^([0-9]+\.[0-9]+)\..*/\1/')
+          RELEASE_BRANCH="releases/v${BASE_VERSION}.x"
+          echo "release_branch=${RELEASE_BRANCH}" >> $GITHUB_OUTPUT
+
+      # Checkout
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GH_PERSONAL_TOKEN }}
+          ref: ${{ steps.parse-and-check-inputs.outputs.release_branch }}
+
+      # Configure
+      - name: Git - Configure
+        run: |
+          git config --global user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git config --global user.name "github-actions[bot]"
+
+      # Execute
+      - name: Start release by updating version and pushing a new tag
+        env:
+          GITHUB_PAT: ${{ secrets.GH_PERSONAL_TOKEN }}
+        run: |
+          # Update version
+          sed -i "s/^version=.*/version=$RELEASE_VERSION/" ./gradle.properties
+          git add ./gradle.properties
+          git commit -m"chore(version): update to version '$RELEASE_VERSION'"
+          git push
+          git tag -a "v$RELEASE_VERSION" -m"v$RELEASE_VERSION"
+          git push --tags

.github/workflows/main-build.yml

@@ -0,0 +1,90 @@
+name: Main Workflow
+
+on:
+  push:
+    branches:
+      - releases/*
+      - develop
+
+  workflow_dispatch:
+    inputs:
+      skip-test:
+        description: 'Skip test'
+        type: choice
+        required: true
+        default: 'false'
+        options:
+          - "true"
+          - "false"
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}-main
+  cancel-in-progress: true
+
+jobs:
+  backend-tests:
+    name: Backend tests
+    if: ${{ github.event.inputs.skip-test == 'false' || github.event.inputs.skip-test == '' }}
+    uses: kestra-io/actions/.github/workflows/kestra-oss-backend-tests.yml@main
+    secrets:
+      GITHUB_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      GOOGLE_SERVICE_ACCOUNT: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}
+
+  frontend-tests:
+    name: Frontend tests
+    if: ${{ github.event.inputs.skip-test == 'false' || github.event.inputs.skip-test == '' }}
+    uses: kestra-io/actions/.github/workflows/kestra-oss-frontend-tests.yml@main
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      GITHUB_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  publish-develop-docker:
+    name: Publish Docker
+    needs: [backend-tests, frontend-tests]
+    if: "!failure() && !cancelled() && github.ref == 'refs/heads/develop'"
+    uses: kestra-io/actions/.github/workflows/kestra-oss-publish-docker.yml@main
+    with:
+      plugin-version: 'LATEST-SNAPSHOT'
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }}
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
+
+
+  publish-develop-maven:
+    name: Publish develop Maven
+    needs: [ backend-tests, frontend-tests ]
+    if: "!failure() && !cancelled() && github.ref == 'refs/heads/develop'"
+    uses: kestra-io/actions/.github/workflows/kestra-oss-publish-maven.yml@main
+    secrets:
+      SONATYPE_USER: ${{ secrets.SONATYPE_USER }}
+      SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+      SONATYPE_GPG_KEYID: ${{ secrets.SONATYPE_GPG_KEYID }}
+      SONATYPE_GPG_PASSWORD: ${{ secrets.SONATYPE_GPG_PASSWORD }}
+      SONATYPE_GPG_FILE: ${{ secrets.SONATYPE_GPG_FILE }}
+
+  end:
+    runs-on: ubuntu-latest
+    needs: [backend-tests, frontend-tests, publish-develop-docker, publish-develop-maven]
+    if: "always() && github.repository == 'kestra-io/kestra'"
+    steps:
+      - run: echo "end CI of failed or success"
+      - name: Trigger EE Workflow
+        uses: peter-evans/repository-dispatch@5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f # v4
+        if: "!contains(needs.*.result, 'failure') && github.ref == 'refs/heads/develop'"
+        with:
+          token: ${{ secrets.GH_PERSONAL_TOKEN }}
+          repository: kestra-io/kestra-ee
+          event-type: "oss-updated"
+
+      # Slack
+      - run: echo "mark job as failure to forward error to Slack action" && exit 1
+        if: ${{ contains(needs.*.result, 'failure') }}
+      - name: Slack - Notification
+        if: ${{ always() && contains(needs.*.result, 'failure') }}
+        uses: kestra-io/actions/composite/slack-status@main
+        with:
+          webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
+          channel: 'C09FF36GKE1'

.github/workflows/main.yml

@@ -1,240 +0,0 @@
-name: Main
-
-on:
-  push:
-    branches:
-      - master
-      - develop
-      - release
-    tags:
-      - v*
-
-  pull_request:
-    branches:
-      - master
-      - develop
-      - release
-  repository_dispatch:
-    types: [rebuild]
-  workflow_dispatch:
-
-
-jobs:
-  check:
-    name: Check
-    runs-on: ubuntu-latest
-    timeout-minutes: 25
-
-    strategy:
-      matrix:
-        java: ['11']
-
-    steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
-        with:
-          python-version: '3.x'
-          architecture: 'x64'
-      - uses: actions/setup-node@v1
-        with:
-          node-version: '12'
-          check-latest: true
-
-      # Services
-      - name: Build the docker-compose stack
-        run: docker-compose -f docker-compose-ci.yml up -d
-
-      # Caches
-      - name: Gradle cache
-        uses: actions/cache@v2
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle*', '**/gradle*.properties') }}
-          restore-keys: |
-            ${{ runner.os }}-gradle-
-
-      - name: Npm cache
-        uses: actions/cache@v1
-        with:
-          path: ~/.npm
-          key: ${{ runner.os }}-npm-${{ hashFiles('**/package-lock.json') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
-      - name: Node cache
-        uses: actions/cache@v1
-        with:
-          path: node
-          key: ${{ runner.os }}-node-${{ hashFiles('ui/*.gradle') }}
-          restore-keys: |
-            ${{ runner.os }}-node-
-
-      # JDK
-      - name: Set up JDK
-        uses: actions/setup-java@v1
-        with:
-          java-version: ${{ matrix.java }}
-
-      # Gradle check
-      - name: Build with Gradle
-        env:
-          GOOGLE_SERVICE_ACCOUNT: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}
-        run: |
-          python3 -m pip install virtualenv
-          echo $GOOGLE_SERVICE_ACCOUNT | base64 -d > ~/.gcp-service-account.json
-          export GOOGLE_APPLICATION_CREDENTIALS=$HOME/.gcp-service-account.json
-          ./gradlew classes testClasses --parallel --no-daemon
-          ./gradlew check jacoco --no-daemon
-        # --parallel
-
-      # Codecov
-      - uses: codecov/codecov-action@v1
-        with:
-          token: ${{ secrets.CODECOV_TOKEN }}
-#          directory: ./build/reports/jacoco/jacoco/html/index.html
-
-      # Shadow Jar
-      - name: Build jars
-        if: success() && matrix.java == '11'
-        run: ./gradlew executableJar --no-daemon
-
-      # Publish
-      - name: Publish package to Sonatype
-        if: github.ref == 'refs/heads/develop'
-        env:
-          ORG_GRADLE_PROJECT_sonatypeUsername: ${{ secrets.SONATYPE_USER }}
-          ORG_GRADLE_PROJECT_sonatypePassword: ${{ secrets.SONATYPE_PASSWORD }}
-          SONATYPE_GPG_KEYID: ${{ secrets.SONATYPE_GPG_KEYID }}
-          SONATYPE_GPG_PASSWORD: ${{ secrets.SONATYPE_GPG_PASSWORD }}
-          SONATYPE_GPG_FILE: ${{ secrets.SONATYPE_GPG_FILE }}
-        run: |
-          echo "signing.keyId=${SONATYPE_GPG_KEYID}" > ~/.gradle/gradle.properties
-          echo "signing.password=${SONATYPE_GPG_PASSWORD}" >> ~/.gradle/gradle.properties
-          echo "signing.secretKeyRingFile=${HOME}/.gradle/secring.gpg" >> ~/.gradle/gradle.properties
-          echo ${SONATYPE_GPG_FILE} | base64 -d > ~/.gradle/secring.gpg
-          ./gradlew publishToSonatype --parallel --no-daemon
-
-      # Release
-      - name: Release package to Maven Central
-        if: startsWith(github.ref, 'refs/tags/v')
-        env:
-          ORG_GRADLE_PROJECT_sonatypeUsername: ${{ secrets.SONATYPE_USER }}
-          ORG_GRADLE_PROJECT_sonatypePassword: ${{ secrets.SONATYPE_PASSWORD }}
-          SONATYPE_GPG_KEYID: ${{ secrets.SONATYPE_GPG_KEYID }}
-          SONATYPE_GPG_PASSWORD: ${{ secrets.SONATYPE_GPG_PASSWORD }}
-          SONATYPE_GPG_FILE: ${{ secrets.SONATYPE_GPG_FILE }}
-        run: |
-          echo "signing.keyId=${SONATYPE_GPG_KEYID}" > ~/.gradle/gradle.properties
-          echo "signing.password=${SONATYPE_GPG_PASSWORD}" >> ~/.gradle/gradle.properties
-          echo "signing.secretKeyRingFile=${HOME}/.gradle/secring.gpg" >> ~/.gradle/gradle.properties
-          echo ${SONATYPE_GPG_FILE} | base64 -d > ~/.gradle/secring.gpg
-          ./gradlew publishToSonatype closeAndReleaseSonatypeStagingRepository --no-daemon
-
-      # Upload artifacts
-      - name: Upload jar
-        uses: actions/upload-artifact@v1
-        if: success() && matrix.java == '11'
-        with:
-          name: jar
-          path: build/libs/
-
-      - name: Upload Executable
-        uses: actions/upload-artifact@v1
-        if: success() && matrix.java == '11'
-        with:
-          name: exe
-          path: build/executable/
-
-      # Slack
-      - name: Slack notification
-        uses: 8398a7/action-slack@v3
-        if: always()
-        with:
-          status: ${{ job.status }}
-          job_name: Check
-          fields: repo,message,author,action,ref,job,took
-          username: GitHub Actions
-          icon_emoji: ':github-actions:'
-          channel: '#git'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}
-          MATRIX_CONTEXT: ${{ toJson(matrix) }}
-
-  docker:
-    name: Publish docker
-    runs-on: ubuntu-latest
-    needs: check
-    if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/develop' || github.ref == 'refs/heads/release' || startsWith(github.ref, 'refs/tags/v')
-    steps:
-      - uses: actions/checkout@v2
-
-      # Artifact
-      - name: Download executable
-        uses: actions/download-artifact@v1
-        with:
-          name: exe
-
-      - name: Copy exe to image
-        run: |
-          cp exe/* docker/app/kestra && chmod +x docker/app/kestra
-
-      # Vars
-      - name: Set image name
-        id: vars
-        run: |
-          TAG=${GITHUB_REF#refs/*/}
-          if [[ $TAG = "master" ]]
-          then
-            echo ::set-output name=tag::latest
-            echo ::set-output name=plugins::
-          else
-            echo ::set-output name=tag::${TAG}
-            echo ::set-output name=plugins::--repositories=https://s01.oss.sonatype.org/content/repositories/snapshots
-          fi
-
-      # Docker
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v1
-
-      - name: Login to DockerHub
-        uses: docker/login-action@v1
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_PASSWORD }}
-
-      - name: Push to Docker Hub
-        uses: docker/build-push-action@v2
-        with:
-          context: .
-          push: true
-          tags: ${{ format('kestra/kestra:{0}', steps.vars.outputs.tag) }}
-
-      - name: Push to Docker Hub Full
-        uses: docker/build-push-action@v2
-        with:
-          context: .
-          push: true
-          tags: ${{ format('kestra/kestra:{0}-full', steps.vars.outputs.tag) }}
-          build-args: |
-            KESTRA_PLUGINS=${{ steps.vars.outputs.plugins }} io.kestra.storage:storage-gcs:LATEST io.kestra.storage:storage-minio:LATEST io.kestra.plugin:plugin-compress:LATEST io.kestra.plugin:plugin-aws:LATEST io.kestra.plugin:plugin-fs:LATEST io.kestra.plugin:plugin-gcp:LATEST io.kestra.plugin:plugin-googleworkspace:LATEST io.kestra.plugin:plugin-kubernetes:LATEST io.kestra.plugin:plugin-serdes:LATEST io.kestra.plugin:plugin-singer:LATEST io.kestra.plugin:plugin-notifications:LATEST io.kestra.plugin:plugin-crypto:LATEST io.kestra.plugin:plugin-jdbc-mysql:LATEST io.kestra.plugin:plugin-jdbc-postgres:LATEST io.kestra.plugin:plugin-jdbc-vertica:LATEST io.kestra.plugin:plugin-jdbc-clickhouse:LATEST io.kestra.plugin:plugin-jdbc-oracle:LATEST io.kestra.plugin:plugin-script-groovy:LATEST io.kestra.plugin:plugin-script-jython:LATEST io.kestra.plugin:plugin-script-nashorn:LATEST
-            APT_PACKAGES=python3-pip python3-wheel python3-setuptools python3-virtualenv nodejs
-
-      # Slack
-      - name: Slack notification
-        uses: 8398a7/action-slack@v3
-        if: always()
-        with:
-          status: ${{ job.status }}
-          job_name: Publish docker
-          fields: repo,commit,action,ref,job,took
-          username: GitHub Actions
-          icon_emoji: ':github-actions:'
-          channel: '#git'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

.github/workflows/pre-release.yml

@@ -0,0 +1,60 @@
+name: Pre Release
+
+on:
+  push:
+    tags:
+      - 'v*'
+  workflow_dispatch:
+    inputs:
+      skip-test:
+        description: 'Skip test'
+        type: choice
+        required: true
+        default: 'false'
+        options:
+          - "true"
+          - "false"
+
+jobs:
+  build-artifacts:
+    name: Build Artifacts
+    uses: kestra-io/actions/.github/workflows/kestra-oss-build-artifacts.yml@main
+
+  backend-tests:
+    name: Backend tests
+    uses: kestra-io/actions/.github/workflows/kestra-oss-backend-tests.yml@main
+    if: ${{ github.event.inputs.skip-test == 'false' || github.event.inputs.skip-test == '' }}
+    secrets:
+      GITHUB_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      GOOGLE_SERVICE_ACCOUNT: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}
+
+  frontend-tests:
+    name: Frontend tests
+    uses: kestra-io/actions/.github/workflows/kestra-oss-frontend-tests.yml@main
+    if: ${{ github.event.inputs.skip-test == 'false' || github.event.inputs.skip-test == '' }}
+    secrets:
+      GITHUB_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
+  publish-maven:
+    name: Publish Maven
+    needs: [ backend-tests, frontend-tests ]
+    if: "!failure() && !cancelled()"
+    uses: kestra-io/actions/.github/workflows/kestra-oss-publish-maven.yml@main
+    secrets:
+      SONATYPE_USER: ${{ secrets.SONATYPE_USER }}
+      SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
+      SONATYPE_GPG_KEYID: ${{ secrets.SONATYPE_GPG_KEYID }}
+      SONATYPE_GPG_PASSWORD: ${{ secrets.SONATYPE_GPG_PASSWORD }}
+      SONATYPE_GPG_FILE: ${{ secrets.SONATYPE_GPG_FILE }}
+
+  publish-github:
+    name: Github Release
+    needs: [build-artifacts, backend-tests, frontend-tests]
+    if: "!failure() && !cancelled()"
+    uses: kestra-io/actions/.github/workflows/kestra-oss-publish-github.yml@main
+    secrets:
+      GH_PERSONAL_TOKEN: ${{ secrets.GH_PERSONAL_TOKEN }}
+      SLACK_RELEASES_WEBHOOK_URL: ${{ secrets.SLACK_RELEASES_WEBHOOK_URL }}

.github/workflows/pull-request-cleanup.yml

@@ -0,0 +1,16 @@
+name: Pull Request - Delete Docker
+
+on:
+  pull_request:
+    types: [closed]
+# TODO import a reusable one
+jobs:
+  publish:
+    name: Pull Request - Delete Docker
+    if: github.repository == 'kestra-io/kestra' # prevent running on forks
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dataaxiom/ghcr-cleanup-action@v1
+        with:
+          package: kestra-pr
+          delete-tags: ${{ github.event.pull_request.number }}

.github/workflows/pull-request.yml

@@ -0,0 +1,57 @@
+name: Pull Request Workflow
+
+on:
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref_name }}-pr
+  cancel-in-progress: true
+
+jobs:
+  file-changes:
+    if: ${{ github.event.pull_request.draft == false }}
+    name: File changes detection
+    runs-on: ubuntu-latest
+    timeout-minutes: 60
+    outputs:
+      ui: ${{ steps.changes.outputs.ui }}
+      translations: ${{ steps.changes.outputs.translations }}
+      backend: ${{ steps.changes.outputs.backend }}
+    steps:
+      - uses: dorny/paths-filter@v3
+        id: changes
+        with:
+          filters: |
+            ui:
+              - 'ui/**'
+            backend:
+              - '!{ui,.github}/**'
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+  frontend:
+    name: Frontend - Tests
+    needs: [file-changes]
+    if: "needs.file-changes.outputs.ui == 'true'"
+    uses: kestra-io/actions/.github/workflows/kestra-oss-frontend-tests.yml@main
+    secrets:
+      GITHUB_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+
+  backend:
+    name: Backend - Tests
+    needs: file-changes
+    if: "needs.file-changes.outputs.backend == 'true'"
+    uses: kestra-io/actions/.github/workflows/kestra-oss-backend-tests.yml@main
+    secrets:
+      GITHUB_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+      GOOGLE_SERVICE_ACCOUNT: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}
+
+  e2e-tests:
+    name: E2E - Tests
+    uses: kestra-io/actions/.github/workflows/kestra-oss-e2e-tests.yml@main
+
+  generate-pull-request-docker-image:
+    name: Generate PR docker image
+    uses: kestra-io/actions/.github/workflows/kestra-oss-pullrequest-publish-docker.yml@main

.github/workflows/release-docker.yml

@@ -0,0 +1,34 @@
+name: Publish docker
+
+on:
+  workflow_dispatch:
+    inputs:
+      retag-latest:
+        description: 'Retag latest Docker images'
+        required: true
+        type: boolean
+        default: false
+      retag-lts:
+        description: 'Retag LTS Docker images'
+        required: true
+        type: boolean
+        default: false
+      dry-run:
+        description: 'Dry run mode that will not write or release anything'
+        required: true
+        type: boolean
+        default: false
+
+jobs:
+  publish-docker:
+    name: Publish Docker
+    if: startsWith(github.ref, 'refs/tags/v')
+    uses: kestra-io/actions/.github/workflows/kestra-oss-publish-docker.yml@main
+    with:
+      retag-latest: ${{ inputs.retag-latest }}
+      retag-lts: ${{ inputs.retag-lts }}
+      dry-run: ${{ inputs.dry-run }}
+    secrets:
+      DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
+      DOCKERHUB_PASSWORD: ${{ secrets.DOCKERHUB_PASSWORD }}
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }}

.github/workflows/vulnerabilities-check.yml

@@ -0,0 +1,124 @@
+name: Vulnerabilities Checks
+
+on:
+  schedule:
+    - cron: "0 0 * * *"  # Every day
+  workflow_dispatch: {}
+
+env:
+  JAVA_VERSION: '21'
+
+permissions:
+  contents: read
+
+jobs:
+  dependency-check:
+    name: Dependency Check
+    runs-on: ubuntu-latest
+    steps:
+      # Checkout
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # Setup build
+      - uses: kestra-io/actions/composite/setup-build@main
+        id: build
+        with:
+          java-enabled: true
+          node-enabled: true
+
+      # Npm
+      - name: Npm - Install
+        shell: bash
+        working-directory: ui
+        run: npm ci
+
+      # Run OWASP dependency check plugin
+      - name: Gradle Dependency Check
+        env:
+          NVD_API_KEY: ${{ secrets.NIST_APIKEY }}
+        run: |
+          ./gradlew dependencyCheckAggregate
+
+        # Upload dependency check report
+      - name: Upload dependency check report
+        uses: actions/upload-artifact@v5
+        if: ${{ always() }}
+        with:
+          name: dependency-check-report
+          path: build/reports/dependency-check-report.html
+
+  develop-image-check:
+    name: Image Check (develop)
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
+    steps:
+      # Checkout
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # Setup build
+      - uses: kestra-io/actions/composite/setup-build@main
+        id: build
+        with:
+          java-enabled: false
+          node-enabled: false
+
+      # Run Trivy image scan for Docker vulnerabilities, see https://github.com/aquasecurity/trivy-action
+      - name: Docker Vulnerabilities Check
+        uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
+        with:
+          image-ref: kestra/kestra:develop
+          format: 'template'
+          template: '@/contrib/sarif.tpl'
+          severity: 'CRITICAL,HIGH'
+          output: 'trivy-results.sarif'
+          skip-dirs: /app/plugins
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: 'trivy-results.sarif'
+          category: docker-
+
+  latest-image-check:
+    name: Image Check (latest)
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
+    steps:
+      # Checkout
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      # Setup build
+      - uses: kestra-io/actions/composite/setup-build@main
+        id: build
+        with:
+          java-enabled: false
+          node-enabled: false
+
+      # Run Trivy image scan for Docker vulnerabilities, see https://github.com/aquasecurity/trivy-action
+      - name: Docker Vulnerabilities Check
+        uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # 0.33.1
+        with:
+          image-ref: kestra/kestra:latest
+          format: table
+          skip-dirs: /app/plugins
+          scanners: vuln
+          severity: 'CRITICAL,HIGH'
+          output: 'trivy-results.sarif'
+
+      - name: Upload Trivy scan results to GitHub Security tab
+        uses: github/codeql-action/upload-sarif@v4
+        with:
+          sarif_file: 'trivy-results.sarif'
+          category: docker-

.gitignore

@@ -7,6 +7,7 @@ target/
 out/
 .idea
 .vscode
+prettierrc.js
 *.iml
 *.ipr
 *.iws
@@ -14,11 +15,12 @@ out/
 .settings
 .classpath
 .attach*
+**/*.class
+**/bin/*
 
 ### Configurations
 docker-compose.override.yml
-cli/src/main/resources/application-override.yml
-*/src/test/resources/application-test.yml
+cli/src/main/resources/application-*.yml
 /local
 
 ### Javascript
@@ -32,6 +34,10 @@ ui/.env.*.local
 webserver/src/main/resources/ui
 yarn.lock
 ui/coverage
+ui/stats.html
+ui/.frontend-gradle-plugin
+ui/utils/CHANGELOG.md
+ui/test-report.junit.xml
 
 ### Docker
 /.env
@@ -42,4 +48,15 @@ docker/app/confs/*.yml
 docker/app/secrets/*.yml
 
 ### Build
-core/src/main/resources/gradle.properties
+core/src/main/resources/gradle.properties
+.plugins.override
+
+# H2 Database
+/data
+
+# Allure Reports
+**/allure-results/*
+
+*storybook.log
+storybook-static
+/jmh-benchmarks/src/main/resources/gradle.properties

.gitpod.yml

@@ -0,0 +1,9 @@
+
+tasks:
+  - init: ./gradlew build --priority=normal
+
+
+vscode:
+  extensions:
+    - vscjava.vscode-java-pack
+    - ms-azuretools.vscode-docker

.plugins

@@ -0,0 +1,130 @@
+#
+# List of plugins to install locally with: $ make install-plugins
+# Format: <RepositoryName>:<GroupId>:<ArtifactId>:<Version>
+#
+# Uncomment the lines corresponding to the plugins to be installed:
+#plugin-ai:io.kestra.plugin:plugin-ai:LATEST
+#plugin-airbyte:io.kestra.plugin:plugin-airbyte:LATEST
+#plugin-airflow:io.kestra.plugin:plugin-airflow:LATEST
+#plugin-amqp:io.kestra.plugin:plugin-amqp:LATEST
+#plugin-ansible:io.kestra.plugin:plugin-ansible:LATEST
+#plugin-anthropic:io.kestra.plugin:plugin-anthropic:LATEST
+#plugin-aws:io.kestra.plugin:plugin-aws:LATEST
+#plugin-azure:io.kestra.plugin:plugin-azure:LATEST
+#plugin-cassandra:io.kestra.plugin:plugin-cassandra:LATEST
+#plugin-cloudquery:io.kestra.plugin:plugin-cloudquery:LATEST
+#plugin-compress:io.kestra.plugin:plugin-compress:LATEST
+#plugin-couchbase:io.kestra.plugin:plugin-couchbase:LATEST
+#plugin-crypto:io.kestra.plugin:plugin-crypto:LATEST
+#plugin-databricks:io.kestra.plugin:plugin-databricks:LATEST
+#plugin-datahub:io.kestra.plugin:plugin-datahub:LATEST
+#plugin-dataform:io.kestra.plugin:plugin-dataform:LATEST
+#plugin-datagen:io.kestra.plugin:plugin-datagen:LATEST
+#plugin-dbt:io.kestra.plugin:plugin-dbt:LATEST
+#plugin-debezium:io.kestra.plugin:plugin-debezium-db2:LATEST
+#plugin-debezium:io.kestra.plugin:plugin-debezium-mongodb:LATEST
+#plugin-debezium:io.kestra.plugin:plugin-debezium-mysql:LATEST
+#plugin-debezium:io.kestra.plugin:plugin-debezium-oracle:LATEST
+#plugin-debezium:io.kestra.plugin:plugin-debezium-postgres:LATEST
+#plugin-debezium:io.kestra.plugin:plugin-debezium-sqlserver:LATEST
+#plugin-deepseek:io.kestra.plugin:plugin-deepseek:LATEST
+#plugin-docker:io.kestra.plugin:plugin-docker:LATEST
+#plugin-elasticsearch:io.kestra.plugin:plugin-elasticsearch:LATEST
+#plugin-fivetran:io.kestra.plugin:plugin-fivetran:LATEST
+#plugin-fs:io.kestra.plugin:plugin-fs:LATEST
+#plugin-gcp:io.kestra.plugin:plugin-gcp:LATEST
+#plugin-gemini:io.kestra.plugin:plugin-gemini:LATEST
+#plugin-git:io.kestra.plugin:plugin-git:LATEST
+#plugin-github:io.kestra.plugin:plugin-github:LATEST
+#plugin-gitlab:io.kestra.plugin:plugin-gitlab:LATEST
+#plugin-googleworkspace:io.kestra.plugin:plugin-googleworkspace:LATEST
+#plugin-graalvm:io.kestra.plugin:plugin-graalvm:LATEST
+#plugin-graphql:io.kestra.plugin:plugin-graphql:LATEST
+#plugin-hightouch:io.kestra.plugin:plugin-hightouch:LATEST
+#plugin-hubspot:io.kestra.plugin:plugin-hubspot:LATEST
+#plugin-huggingface:io.kestra.plugin:plugin-huggingface:LATEST
+#plugin-influxdb:io.kestra.plugin:plugin-influxdb:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-as400:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-clickhouse:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-db2:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-duckdb:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-druid:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-mariadb:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-mysql:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-oracle:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-pinot:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-postgres:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-redshift:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-snowflake:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-sqlserver:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-trino:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-vectorwise:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-vertica:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-dremio:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-arrow-flight:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-sqlite:LATEST
+#plugin-jdbc:io.kestra.plugin:plugin-jdbc-sybase:LATEST
+#plugin-jenkins:io.kestra.plugin:plugin-jenkins:LATEST
+#plugin-jira:io.kestra.plugin:plugin-jira:LATEST
+#plugin-jms:io.kestra.plugin:plugin-jms:LATEST
+#plugin-kafka:io.kestra.plugin:plugin-kafka:LATEST
+#plugin-kestra:io.kestra.plugin:plugin-kestra:LATEST
+#plugin-kubernetes:io.kestra.plugin:plugin-kubernetes:LATEST
+#plugin-ldap:io.kestra.plugin:plugin-ldap:LATEST
+#plugin-linear:io.kestra.plugin:plugin-linear:LATEST
+#plugin-malloy:io.kestra.plugin:plugin-malloy:LATEST
+#plugin-meilisearch:io.kestra.plugin:plugin-meilisearch:LATEST
+#plugin-minio:io.kestra.plugin:plugin-minio:LATEST
+#plugin-mistral:io.kestra.plugin:plugin-mistral:LATEST
+#plugin-modal:io.kestra.plugin:plugin-modal:LATEST
+#plugin-mongodb:io.kestra.plugin:plugin-mongodb:LATEST
+#plugin-mqtt:io.kestra.plugin:plugin-mqtt:LATEST
+#plugin-nats:io.kestra.plugin:plugin-nats:LATEST
+#plugin-neo4j:io.kestra.plugin:plugin-neo4j:LATEST
+#plugin-notifications:io.kestra.plugin:plugin-notifications:LATEST
+#plugin-notion:io.kestra.plugin:plugin-notion:LATEST
+#plugin-ollama:io.kestra.plugin:plugin-ollama:LATEST
+#plugin-openai:io.kestra.plugin:plugin-openai:LATEST
+#plugin-opensearch:io.kestra.plugin:plugin-opensearch:LATEST
+#plugin-perplexity:io.kestra.plugin:plugin-perplexity:LATEST
+#plugin-powerbi:io.kestra.plugin:plugin-powerbi:LATEST
+#plugin-pulsar:io.kestra.plugin:plugin-pulsar:LATEST
+#plugin-redis:io.kestra.plugin:plugin-redis:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-bun:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-deno:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-go:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-groovy:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-jbang:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-julia:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-jython:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-lua:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-nashorn:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-node:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-perl:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-php:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-powershell:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-python:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-r:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-ruby:LATEST
+#plugin-scripts:io.kestra.plugin:plugin-script-shell:LATEST
+#plugin-serdes:io.kestra.plugin:plugin-serdes:LATEST
+#plugin-servicenow:io.kestra.plugin:plugin-servicenow:LATEST
+#plugin-sifflet:io.kestra.plugin:plugin-sifflet:LATEST
+#plugin-soda:io.kestra.plugin:plugin-soda:LATEST
+#plugin-solace:io.kestra.plugin:plugin-solace:LATEST
+#plugin-spark:io.kestra.plugin:plugin-spark:LATEST
+#plugin-sqlmesh:io.kestra.plugin:plugin-sqlmesh:LATEST
+#plugin-supabase:io.kestra.plugin:plugin-supabase:LATEST
+#plugin-surrealdb:io.kestra.plugin:plugin-surrealdb:LATEST
+#plugin-terraform:io.kestra.plugin:plugin-terraform:LATEST
+#plugin-transform:io.kestra.plugin:plugin-transform-grok:LATEST
+#plugin-transform:io.kestra.plugin:plugin-transform-json:LATEST
+#plugin-tika:io.kestra.plugin:plugin-tika:LATEST
+#plugin-trivy:io.kestra.plugin:plugin-trivy:LATEST
+#plugin-weaviate:io.kestra.plugin:plugin-weaviate:LATEST
+#plugin-zendesk:io.kestra.plugin:plugin-zendesk:LATEST
+#plugin-typesense:io.kestra.plugin:plugin-typesense:LATEST
+#storage-azure:io.kestra.storage:storage-azure:LATEST
+#storage-gcs:io.kestra.storage:storage-gcs:LATEST
+#storage-minio:io.kestra.storage:storage-minio:LATEST
+#storage-s3:io.kestra.storage:storage-s3:LATEST

.prettierignore

@@ -0,0 +1 @@
+**/*.*

AGENTS.md

@@ -0,0 +1,305 @@
+# Kestra AGENTS.md
+
+This file provides guidance for AI coding agents working on the Kestra project. Kestra is an open-source data orchestration and scheduling platform built with Java (Micronaut) and Vue.js.
+
+## Repository Layout
+
+- **`core/`**: Core Kestra framework and task definitions
+- **`cli/`**: Command-line interface and server implementation
+- **`webserver/`**: REST API server implementation
+- **`ui/`**: Vue.js frontend application
+- **`jdbc-*`**: Database connector modules (H2, MySQL, PostgreSQL)
+- **`script/`**: Script execution engine
+- **`storage-local/`**: Local file storage implementation
+- **`repository-memory/`**: In-memory repository implementation
+- **`runner-memory/`**: In-memory execution runner
+- **`processor/`**: Task processing engine
+- **`model/`**: Data models and Data Transfer Objects
+- **`platform/`**: Platform-specific implementations
+- **`tests/`**: Integration test framework
+- **`e2e-tests/`**: End-to-end testing suite
+
+## Development Environment
+
+### Prerequisites
+
+- Java 21+
+- Node.js 22+ and npm
+- Python 3, pip, and python venv
+- Docker & Docker Compose
+- Gradle (wrapper included)
+
+### Quick Setup with Devcontainer
+
+The easiest way to get started is using the provided devcontainer:
+
+1. Install VSCode Remote Development extension
+2. Run `Dev Containers: Open Folder in Container...` from command palette
+3. Select the Kestra root folder
+4. Wait for Gradle build to complete
+
+### Manual Setup
+
+1. Clone the repository
+2. Run `./gradlew build` to build the backend
+3. Navigate to `ui/` and run `npm install`
+4. Create configuration files as described below
+
+## Configuration Files
+
+### Backend Configuration
+
+Create `cli/src/main/resources/application-override.yml`:
+
+**Local Mode (H2 database):**
+
+```yaml
+micronaut:
+  server:
+    cors:
+      enabled: true
+      configurations:
+        all:
+          allowedOrigins:
+            - http://localhost:5173
+```
+
+**Standalone Mode (PostgreSQL):**
+
+```yaml
+kestra:
+  repository:
+    type: postgres
+  storage:
+    type: local
+    local:
+      base-path: "/app/storage"
+  queue:
+    type: postgres
+  tasks:
+    tmp-dir:
+      path: /tmp/kestra-wd/tmp
+  anonymous-usage-report:
+    enabled: false
+
+datasources:
+  postgres:
+    url: jdbc:postgresql://host.docker.internal:5432/kestra
+    driverClassName: org.postgresql.Driver
+    username: kestra
+    password: k3str4
+
+flyway:
+  datasources:
+    postgres:
+      enabled: true
+      locations:
+        - classpath:migrations/postgres
+      ignore-migration-patterns: "*:missing,*:future"
+      out-of-order: true
+
+micronaut:
+  server:
+    cors:
+      enabled: true
+      configurations:
+        all:
+          allowedOrigins:
+            - http://localhost:5173
+```
+
+### Frontend Configuration
+
+Create `ui/.env.development.local` for environment variables.
+
+## Running the Application
+
+### Backend
+
+- **Local mode**: `./gradlew runLocal` (uses H2 database)
+- **Standalone mode**: Use VSCode Run and Debug with main class `io.kestra.cli.App` and args `server standalone`
+
+### Frontend
+
+- Navigate to `ui/` directory
+- Run `npm run dev` for development server (port 5173)
+- Run `npm run build` for production build
+
+## Building and Testing
+
+### Backend
+
+```bash
+# Build the project
+./gradlew build
+
+# Run tests
+./gradlew test
+
+# Run specific module tests
+./gradlew :core:test
+
+# Clean build
+./gradlew clean build
+```
+
+### Frontend
+
+```bash
+cd ui
+npm install
+npm run test
+npm run lint
+npm run build
+```
+
+### End-to-End Tests
+
+```bash
+# Build and start E2E tests
+./build-and-start-e2e-tests.sh
+
+# Or use the Makefile
+make install
+make install-plugins
+make start-standalone-postgres
+```
+
+## Development Guidelines
+
+### Java Backend
+
+- Use Java 21 features
+- Follow Micronaut framework patterns
+- Add Swagger annotations for API documentation
+- Use annotation processors (enable in IDE)
+- Set `MICRONAUT_ENVIRONMENTS=local,override` for custom config
+- Set `KESTRA_PLUGINS_PATH` for custom plugin loading
+
+### Vue.js Frontend
+
+- Vue 3 with Composition API
+- TypeScript for type safety
+- Vite for build tooling
+- ESLint and Prettier for code quality
+- Component-based architecture in `src/components/`
+
+### Code Style
+
+- Follow `.editorconfig` settings
+- Use 4 spaces for Java, 2 spaces for YAML/JSON/CSS
+- Enable format on save in VSCode
+- Use Prettier for frontend code formatting
+
+## Testing Strategy
+
+### Backend Testing
+
+- Unit tests in `src/test/java/`
+- Integration tests in `tests/` module
+- Use Micronaut test framework
+- Test both local and standalone modes
+
+### Frontend Testing
+- Unit tests with Jest
+- E2E tests with Playwright
+- Component testing with Storybook
+- Run `npm run test:unit` and `npm run test:e2e`
+
+## Plugin Development
+
+### Creating Plugins
+
+- Follow the [Plugin Developer Guide](https://kestra.io/docs/plugin-developer-guide/)
+- Place JAR files in `KESTRA_PLUGINS_PATH`
+- Use the plugin template structure
+- Test with both local and standalone modes
+
+### Plugin Loading
+
+- Set `KESTRA_PLUGINS_PATH` environment variable
+- Use devcontainer mounts for local development
+- Plugins are loaded at startup
+
+## Common Issues and Solutions
+
+### JavaScript Heap Out of Memory
+
+Set `NODE_OPTIONS=--max-old-space-size=4096` environment variable.
+
+### CORS Issues
+
+Ensure backend CORS is configured for `http://localhost:5173` when using frontend dev server.
+
+### Database Connection Issues
+
+- Use `host.docker.internal` instead of `localhost` when connecting from devcontainer
+- Verify PostgreSQL is running and accessible
+- Check database credentials and permissions
+
+### Gradle Build Issues
+
+- Clear Gradle cache: `./gradlew clean`
+- Check Java version compatibility
+- Verify all dependencies are available
+
+## Pull Request Guidelines
+
+### Before Submitting
+
+1. Run all tests: `./gradlew test` and `npm test`
+2. Check code formatting: `./gradlew spotlessCheck`
+3. Verify CORS configuration if changing API
+4. Test both local and standalone modes
+5. Update documentation for user-facing changes
+
+### Commit Messages
+
+- Follow conventional commit format
+- Use present tense ("Add feature" not "Added feature")
+- Reference issue numbers when applicable
+- Keep commits focused and atomic
+
+### Review Checklist
+
+- [ ] All tests pass
+- [ ] Code follows project style guidelines
+- [ ] Documentation is updated
+- [ ] No breaking changes without migration guide
+- [ ] CORS properly configured if API changes
+- [ ] Both local and standalone modes tested
+
+## Useful Commands
+
+```bash
+# Quick development commands
+./gradlew runLocal                    # Start local backend
+./gradlew :ui:build                   # Build frontend
+./gradlew clean build                 # Clean rebuild
+npm run dev                           # Start frontend dev server
+make install                          # Install Kestra locally
+make start-standalone-postgres        # Start with PostgreSQL
+
+# Testing commands
+./gradlew test                        # Run all backend tests
+./gradlew :core:test                  # Run specific module tests
+npm run test                          # Run frontend tests
+npm run lint                          # Lint frontend code
+```
+
+## Getting Help
+
+- Open a [GitHub issue](https://github.com/kestra-io/kestra/issues)
+- Join the [Kestra Slack community](https://kestra.io/slack)
+- Check the [main documentation](https://kestra.io/docs)
+
+## Environment Variables
+
+| Variable | Description | Default |
+|----------|-------------|---------|
+| `MICRONAUT_ENVIRONMENTS` | Custom config environments | `local,override` |
+| `KESTRA_PLUGINS_PATH` | Path to custom plugins | `/workspaces/kestra/local/plugins` |
+| `NODE_OPTIONS` | Node.js options | `--max-old-space-size=4096` |
+| `JAVA_HOME` | Java installation path | `/usr/java/jdk-21` |
+
+Remember: Always test your changes in both local and standalone modes, and ensure CORS is properly configured for frontend development.

Dockerfile

@@ -1,13 +1,27 @@
-FROM openjdk:11-jre-slim
+FROM eclipse-temurin:21-jre-jammy
 
 ARG KESTRA_PLUGINS=""
 ARG APT_PACKAGES=""
+ARG PYTHON_LIBRARIES=""
 
 WORKDIR /app
-COPY docker /
 
-RUN if [ -n "${APT_PACKAGES}" ]; then apt-get update -y; apt-get install -y --no-install-recommends ${APT_PACKAGES}; apt-get clean && rm -rf /var/lib/apt/lists/* /var/tmp/*; fi && \
-    if [ -n "${KESTRA_PLUGINS}" ]; then /app/kestra plugins install ${KESTRA_PLUGINS}; fi
+RUN groupadd kestra && \
+    useradd -m -g kestra kestra
+
+COPY --chown=kestra:kestra docker /
+
+RUN apt-get update -y && \
+    apt-get upgrade -y && \
+    if [ -n "${APT_PACKAGES}" ]; then apt-get install -y --no-install-recommends ${APT_PACKAGES}; fi && \
+    apt-get clean && \
+    rm -rf /var/lib/apt/lists/* /var/tmp/* /tmp/* && \
+    curl -LsSf https://astral.sh/uv/0.6.17/install.sh | sh && mv /root/.local/bin/uv /bin && mv /root/.local/bin/uvx /bin && \
+    if [ -n "${KESTRA_PLUGINS}" ]; then /app/kestra plugins install ${KESTRA_PLUGINS} && rm -rf /tmp/*; fi && \
+    if [ -n "${PYTHON_LIBRARIES}" ]; then uv pip install --system ${PYTHON_LIBRARIES}; fi && \
+    chown -R kestra:kestra /app
+
+USER kestra
 
 ENTRYPOINT ["docker-entrypoint.sh"]
 

Dockerfile.pr

@@ -0,0 +1,8 @@
+ARG KESTRA_DOCKER_BASE_VERSION=develop
+FROM  kestra/kestra:$KESTRA_DOCKER_BASE_VERSION
+
+USER root
+
+COPY --chown=kestra:kestra docker /
+
+USER kestra

Makefile

@@ -0,0 +1,260 @@
+#
+# Makefile used to build and deploy Kestra locally.
+# By default Kestra will be installed under: $HOME/.kestra/current. Set $KESTRA_HOME to override default.
+#
+# Usage:
+# make install
+# make install-plugins
+# make start-standalone-postgres
+#
+# NOTE: This file is intended for development purposes only.
+
+SHELL := /bin/bash
+
+KESTRA_BASEDIR := $(shell echo $${KESTRA_HOME:-$$HOME/.kestra/current})
+KESTRA_WORKER_THREAD := $(shell echo $${KESTRA_WORKER_THREAD:-4})
+VERSION := $(shell ./gradlew properties -q | awk '/^version:/ {print $$2}')
+GIT_COMMIT := $(shell git rev-parse --short HEAD)
+GIT_BRANCH := $(shell git rev-parse --abbrev-ref HEAD)
+DATE := $(shell date --rfc-3339=seconds)
+PLUGIN_GIT_DIR ?= $(pwd)/..
+PLUGIN_JARS_DIR ?= $(pwd)/locals/plugins
+
+DOCKER_IMAGE = kestra/kestra
+DOCKER_PATH = ./
+
+.SILENT:
+
+.PHONY: clean build build-exec test install
+
+all: clean build-exec install
+
+version:
+	echo "${VERSION}"
+
+clean:
+	./gradlew clean
+
+build: clean
+	./gradlew build
+
+buildSkipTests: clean
+	./gradlew build -x test -x integrationTest -x testCodeCoverageReport --refresh-dependencies
+
+test: clean
+	./gradlew test
+
+build-exec:
+	./gradlew -q executableJar --no-daemon --priority=normal
+
+install: build-exec
+	echo "Installing Kestra: ${KESTRA_BASEDIR}"
+	mkdir -p ${KESTRA_BASEDIR}/bin ${KESTRA_BASEDIR}/plugins ${KESTRA_BASEDIR}/flows ${KESTRA_BASEDIR}/logs
+	cp build/executable/* ${KESTRA_BASEDIR}/bin/kestra && chmod +x ${KESTRA_BASEDIR}/bin
+	VERSION_INSTALLED=$$(${KESTRA_BASEDIR}/bin/kestra --version); \
+	echo "Kestra installed successfully (version=$$VERSION_INSTALLED) 🚀"
+
+# Install plugins for Kestra from (.plugins file).
+install-plugins:
+	if [[ ! -f ".plugins" && ! -f ".plugins.override" ]]; then \
+		echo "[ERROR] file '$$(pwd)/.plugins' and '$$(pwd)/.plugins.override' not found."; \
+		exit 1; \
+	fi; \
+
+	PLUGIN_LIST="./.plugins"; \
+	if [[ -f ".plugins.override" ]]; then \
+		PLUGIN_LIST="./.plugins.override"; \
+	fi; \
+	while IFS= read -r plugin; do \
+		[[ $$plugin =~ ^#.* ]] && continue; \
+		PLUGINS_PATH="${KESTRA_INSTALL_DIR}/plugins"; \
+		CURRENT_PLUGIN=$${plugin/LATEST/"${VERSION}"}; \
+		CURRENT_PLUGIN=$$(echo $$CURRENT_PLUGIN | cut -d':' -f2-); \
+		PLUGIN_FILE="$$PLUGINS_PATH/$$(echo $$CURRENT_PLUGIN | awk -F':' '{print $$2"-"$$3}').jar"; \
+		echo "Installing Kestra plugin $$CURRENT_PLUGIN > ${KESTRA_INSTALL_DIR}/plugins"; \
+		if [ -f "$$PLUGIN_FILE" ]; then \
+		    echo "Plugin already installed in > $$PLUGIN_FILE"; \
+        else \
+		${KESTRA_BASEDIR}/bin/kestra plugins install $$CURRENT_PLUGIN \
+		--plugins ${KESTRA_BASEDIR}/plugins \
+		--repositories=https://central.sonatype.com/repository/maven-snapshots || exit 1; \
+		fi \
+    done < $$PLUGIN_LIST
+
+# Build docker image from Kestra source.
+build-docker: build-exec
+	cp build/executable/* docker/app/kestra && chmod +x docker/app/kestra
+	echo "${DOCKER_IMAGE}:${VERSION}"
+	docker build \
+		--compress \
+		--rm \
+		-f ./Dockerfile \
+		--build-arg="APT_PACKAGES=python3 python-is-python3 python3-pip curl jattach" \
+		--build-arg="PYTHON_LIBRARIES=kestra" \
+		-t ${DOCKER_IMAGE}:${VERSION} ${DOCKER_PATH} || exit 1 ;
+
+# Verify whether Kestra is running
+health:
+	PID=$$(ps aux | grep java | grep 'kestra' | grep -v 'grep' | awk '{print $$2}'); \
+	if [ ! -z "$$PID" ]; then \
+	    echo -e "\n⏳ Waiting for Kestra server..."; \
+        KESTRA_URL=http://localhost:8080; \
+        while [ $$(curl -s -L -o /dev/null -w %{http_code} $$KESTRA_URL) != 200 ]; do \
+          echo -e $$(date) "\tKestra server HTTP state: " $$(curl -k -L -s -o /dev/null -w %{http_code} $$KESTRA_URL) " (waiting for 200)"; \
+          sleep 2; \
+        done; \
+		echo "Kestra is running (pid=$$PID): $$KESTRA_URL 🚀"; \
+	fi
+
+
+# Kill Kestra running process
+kill:
+	PID=$$(ps aux | grep java | grep 'kestra' | grep -v 'grep' | awk '{print $$2}'); \
+	if [ ! -z "$$PID" ]; then \
+		echo "Killing Kestra process (pid=$$PID)."; \
+		kill $$PID; \
+	else \
+		echo "No Kestra process to kill."; \
+	fi
+	docker compose -f ./docker-compose-ci.yml down;
+
+# Default configuration for using Kestra with Postgres as backend.
+define KESTRA_POSTGRES_CONFIGURATION =
+micronaut:
+  server:
+    port: 8080
+datasources:
+  postgres:
+    url: jdbc:postgresql://localhost:5432/kestra_unit
+    driverClassName: org.postgresql.Driver
+    username: kestra
+    password: k3str4
+kestra:
+  encryption:
+    secret-key: 3ywuDa/Ec61VHkOX3RlI9gYq7CaD0mv0Pf3DHtAXA6U=
+  repository:
+    type: postgres
+  storage:
+    type: local
+    local:
+      base-path: "/tmp/kestra/storage"
+  queue:
+    type: postgres
+endef
+export KESTRA_POSTGRES_CONFIGURATION
+
+# Build and deploy Kestra in standalone mode (using Postgres backend)
+--private-start-standalone-postgres:
+	docker compose -f ./docker-compose-ci.yml up postgres -d;
+	echo "Waiting for postgres to be running"
+	until [ "`docker inspect -f {{.State.Running}} kestra-postgres-1`"=="true" ]; do \
+		sleep 1; \
+	done; \
+	rm -rf ${KESTRA_BASEDIR}/bin/confs/ && \
+	mkdir -p ${KESTRA_BASEDIR}/bin/confs/ ${KESTRA_BASEDIR}/logs/ && \
+	touch ${KESTRA_BASEDIR}/bin/confs/application.yml
+	echo "Starting Kestra Standalone server"
+	KESTRA_CONFIGURATION=$$KESTRA_POSTGRES_CONFIGURATION ${KESTRA_BASEDIR}/bin/kestra \
+	server standalone \
+	--worker-thread ${KESTRA_WORKER_THREAD} \
+	--plugins "${KESTRA_BASEDIR}/plugins" \
+	--flow-path "${KESTRA_BASEDIR}/flows" 2>${KESTRA_BASEDIR}/logs/err.log 1>${KESTRA_BASEDIR}/logs/out.log &
+
+start-standalone-postgres: kill --private-start-standalone-postgres health
+
+# Build and deploy Kestra in standalone mode (using In-Memory backend)
+--private-start-standalone-local:
+	rm -f "${KESTRA_BASEDIR}/logs/*.log"; \
+	${KESTRA_BASEDIR}/bin/kestra \
+	server local \
+	--worker-thread ${KESTRA_WORKER_THREAD} \
+	--plugins "${KESTRA_BASEDIR}/plugins" \
+	--flow-path "${KESTRA_BASEDIR}/flows" 2>${KESTRA_BASEDIR}/logs/err.log 1>${KESTRA_BASEDIR}/logs/out.log &
+
+start-standalone-local: kill --private-start-standalone-local health
+
+#checkout all plugins
+clone-plugins:
+	@echo "Using PLUGIN_GIT_DIR: $(PLUGIN_GIT_DIR)"
+	@mkdir -p "$(PLUGIN_GIT_DIR)"
+	@echo "Fetching repository list from GitHub..."
+	@REPOS=$$(gh repo list kestra-io -L 1000 --json name | jq -r .[].name | sort | grep "^plugin-"); \
+		for repo in $$REPOS; do \
+	    if [[ $$repo == plugin-* ]]; then \
+	        if [ -d "$(PLUGIN_GIT_DIR)/$$repo" ]; then \
+	            echo "Skipping: $$repo (Already cloned)"; \
+	        else \
+	            echo "Cloning: $$repo using SSH..."; \
+	            git clone "git@github.com:kestra-io/$$repo.git" "$(PLUGIN_GIT_DIR)/$$repo"; \
+	        fi; \
+	    fi; \
+	done
+	@echo "Done!"
+
+# Pull every plugins in main or master branch
+pull-plugins:
+	@echo "🔍 Pulling repositories in '$(PLUGIN_GIT_DIR)'..."
+	@for repo in "$(PLUGIN_GIT_DIR)"/*; do \
+	    if [ -d "$$repo/.git" ]; then \
+	        branch=$$(git -C "$$repo" rev-parse --abbrev-ref HEAD); \
+	        if [[ "$$branch" == "master" || "$$branch" == "main" ]]; then \
+	            echo "🔄 Pulling: $$(basename "$$repo") (branch: $$branch)"; \
+	            git -C "$$repo" pull; \
+	        else \
+	            echo "❌ Skipping: $$(basename "$$repo") (Not on master or main branch, currently on $$branch)"; \
+	        fi; \
+	    fi; \
+	done
+	@echo "✅ Done pulling!"
+
+# Update all plugins jar
+build-plugins:
+	@echo "🔍 Scanning repositories in '$(PLUGIN_GIT_DIR)'..."
+	@MASTER_REPOS=(); \
+	for repo in "$(PLUGIN_GIT_DIR)"/*; do \
+	    if [ -d "$$repo/.git" ]; then \
+	        branch=$$(git -C "$$repo" rev-parse --abbrev-ref HEAD); \
+	        if [[ "$$branch" == "master" || "$$branch" == "main" ]]; then \
+	            MASTER_REPOS+=("$$repo"); \
+	        else \
+	            echo "❌ Skipping: $$(basename "$$repo") (Not on master or main branch)"; \
+	        fi; \
+	    fi; \
+	done; \
+	\
+	# === STEP 2: Update Repos on Master or Main Branch === \
+	echo "⬇️ Updating repositories on master or main branch..."; \
+	for repo in "$${MASTER_REPOS[@]}"; do \
+	    echo "🔄 Updating: $$(basename "$$repo")"; \
+	    git -C "$$repo" pull --rebase; \
+	done; \
+	\
+	# === STEP 3: Build with Gradle === \
+	echo "⚙️ Building repositories with Gradle..."; \
+	for repo in "$${MASTER_REPOS[@]}"; do \
+	    echo "🔨 Building: $$(basename "$$repo")"; \
+	    gradle clean build -x test shadowJar -p "$$repo"; \
+	done; \
+	\
+	# === STEP 4: Copy Latest JARs (Ignoring javadoc & sources) === \
+	echo "📦 Organizing built JARs..."; \
+	mkdir -p "$(PLUGIN_JARS_DIR)"; \
+	for repo in "$${MASTER_REPOS[@]}"; do \
+	    REPO_NAME=$$(basename "$$repo"); \
+	    \
+	    JARS=($$(find "$$repo" -type f -name "plugin-*.jar" ! -name "*-javadoc.jar" ! -name "*-sources.jar")); \
+	    if [ $${#JARS[@]} -eq 0 ]; then \
+	        echo "⚠️ Warning: No valid plugin JARs found for $$REPO_NAME"; \
+	        continue; \
+	    fi; \
+	    \
+	    for jar in "$${JARS[@]}"; do \
+	        JAR_NAME=$$(basename "$$jar"); \
+	        BASE_NAME=$$(echo "$$JAR_NAME" | sed -E 's/(-[0-9]+.*)?\.jar$$//'); \
+	        rm -f "$(PLUGIN_JARS_DIR)/$$BASE_NAME"-[0-9]*.jar; \
+	        cp "$$jar" "$(PLUGIN_JARS_DIR)/"; \
+	        echo "✅ Copied JAR: $$JAR_NAME"; \
+	    done; \
+	done; \
+	\
+	echo "🎉 Done! All master and main branch repos updated, built, and organized."

README.md

@@ -1,24 +1,235 @@
+<p align="center">
+  <a href="https://www.kestra.io">
+    <img src="https://kestra.io/banner.png"  alt="Kestra workflow orchestrator" />
+  </a>
+</p>
 
-# Kestra
-![Last Version](https://img.shields.io/github/tag-pre/kestra-io/kestra.svg)
-![License](https://img.shields.io/github/license/kestra-io/kestra)
-![Docker Pull](https://img.shields.io/docker/pulls/kestra/kestra.svg)
-![Github Downloads](https://img.shields.io/github/downloads/kestra-io/kestra/total)
-![Github Star](https://img.shields.io/github/stars/kestra-io/kestra.svg)
-[![codecov](https://codecov.io/gh/kestra-io/kestra/branch/develop/graph/badge.svg?token=It6L7BTaWK)](https://codecov.io/gh/kestra-io/kestra)
-![Github Actions](https://github.com/kestra-io/kestra/workflows/Main/badge.svg?branch=master)
+<h1 align="center" style="border-bottom: none">
+    Event-Driven Declarative Orchestration Platform
+</h1>
+
+<div align="center">
+ <a href="https://github.com/kestra-io/kestra/releases"><img src="https://img.shields.io/github/tag-pre/kestra-io/kestra.svg?color=blueviolet" alt="Last Version" /></a>
+  <a href="https://github.com/kestra-io/kestra/blob/develop/LICENSE"><img src="https://img.shields.io/github/license/kestra-io/kestra?color=blueviolet" alt="License" /></a>
+  <a href="https://github.com/kestra-io/kestra/stargazers"><img src="https://img.shields.io/github/stars/kestra-io/kestra?color=blueviolet&logo=github" alt="Github star" /></a> <br>
+<a href="https://kestra.io"><img src="https://img.shields.io/badge/Website-kestra.io-192A4E?color=blueviolet" alt="Kestra infinitely scalable orchestration and scheduling platform"></a>
+<a href="https://kestra.io/slack"><img src="https://img.shields.io/badge/Slack-Join%20Community-blueviolet?logo=slack" alt="Slack"></a>
+</div>
+
+<br />
+
+<p align="center">
+  <a href="https://twitter.com/kestra_io" style="margin: 0 10px;">
+        <img height="25" src="https://kestra.io/twitter.svg" alt="twitter" width="35" height="25" /></a>
+  <a href="https://www.linkedin.com/company/kestra/" style="margin: 0 10px;">
+        <img height="25" src="https://kestra.io/linkedin.svg" alt="linkedin" width="35" height="25" /></a> 
+  <a href="https://www.youtube.com/@kestra-io" style="margin: 0 10px;">
+        <img height="25" src="https://kestra.io/youtube.svg" alt="youtube" width="35" height="25" /></a>
+</p>
+
+<p align="center">
+  <a href="https://trendshift.io/repositories/2714" target="_blank">
+    <img src="https://trendshift.io/api/badge/repositories/2714" alt="kestra-io%2Fkestra | Trendshift" width="250" height="55"/>
+  </a>
+  <a href="https://www.producthunt.com/posts/kestra?embed=true&utm_source=badge-top-post-badge&utm_medium=badge&utm_souce=badge-kestra" target="_blank"><img src="https://api.producthunt.com/widgets/embed-image/v1/top-post-badge.svg?post_id=612077&theme=light&period=daily&t=1740737506162" alt="Kestra - All&#0045;in&#0045;one&#0032;automation&#0032;&#0038;&#0032;orchestration&#0032;platform | Product Hunt" style="width: 250px; height: 54px;" width="250" height="54" /></a>
+</p>
+
+<p align="center">
+    <a href="https://go.kestra.io/video/product-overview" target="_blank">
+        <img src="https://kestra.io/startvideo.png" alt="Get started in 3 minutes with Kestra" width="640px" />
+    </a>
+</p>
+<p align="center" style="color:grey;"><i>Click on the image to learn how to get started with Kestra in 3 minutes.</i></p>
+
+
+## 🌟 What is Kestra?
+
+Kestra is an open-source, event-driven orchestration platform that makes both **scheduled** and **event-driven** workflows easy. By bringing **Infrastructure as Code** best practices to data, process, and microservice orchestration, you can build reliable [workflows](https://kestra.io/docs/getting-started) directly from the UI in just a few lines of YAML.
+
+**Key Features:**
+- **Everything as Code and from the UI:** keep **workflows as code** with a **Git Version Control** integration, even when building them from the UI.
+- **Event-Driven & Scheduled Workflows:** automate both **scheduled** and **real-time** event-driven workflows via a simple `trigger` definition.
+- **Declarative YAML Interface:** define workflows using a simple configuration in the **built-in code editor**.
+- **Rich Plugin Ecosystem:** hundreds of plugins built in to extract data from any database, cloud storage, or API, and **run scripts in any language**.
+- **Intuitive UI & Code Editor:** build and visualize workflows directly from the UI with syntax highlighting, auto-completion and real-time syntax validation.
+- **Scalable:** designed to handle millions of workflows, with high availability and fault tolerance.
+- **Version Control Friendly:** write your workflows from the built-in code Editor and push them to your preferred Git branch directly from Kestra, enabling best practices with CI/CD pipelines and version control systems.
+- **Structure & Resilience**: tame chaos and bring resilience to your workflows with **namespaces**, **labels**, **subflows**, **retries**, **timeout**, **error handling**, **inputs**, **outputs** that generate artifacts in the UI, **variables**, **conditional branching**, **advanced scheduling**, **event triggers**, **backfills**, **dynamic tasks**, **sequential and parallel tasks**, and skip tasks or triggers when needed by setting the flag `disabled` to `true`.
+
+
+🧑‍💻 The YAML definition gets automatically adjusted any time you make changes to a workflow from the UI or via an API call. Therefore, the orchestration logic is **always managed declaratively in code**, even if you modify your workflows in other ways (UI, CI/CD, Terraform, API calls).
 
 
 <p align="center">
-  <img width="460" src="https://kestra.io/logo.svg"  alt="Kestra workflow orchestrator" />
+  <img src="https://kestra.io/adding-tasks.gif" alt="Adding new tasks in the UI">
 </p>
 
-> The modern, scalable orchestrator & scheduler open source platform.
+---
 
-![Kestra orchestrator](https://kestra.io/ui.gif)
+## 🚀 Quick Start
 
-## Documentation
-* The official Kestra documentation can be found under: [kestra.io](https://kestra.io)
+### Launch on AWS (CloudFormation)
+
+Deploy Kestra on AWS using our CloudFormation template:
+
+[![Launch Stack](https://cdn.rawgit.com/buildkite/cloudformation-launch-stack-button-svg/master/launch-stack.svg)](https://console.aws.amazon.com/cloudformation/home#/stacks/create/review?templateURL=https://kestra-deployment-templates.s3.eu-west-3.amazonaws.com/aws/cloudformation/ec2-rds-s3/kestra-oss.yaml&stackName=kestra-oss)
+
+### Get Started Locally in 5 Minutes
+
+#### Launch Kestra in Docker
+
+Make sure that Docker is running. Then, start Kestra in a single command:
+
+```bash
+docker run --pull=always --rm -it -p 8080:8080 --user=root \
+  -v /var/run/docker.sock:/var/run/docker.sock \
+  -v /tmp:/tmp kestra/kestra:latest server local
+```
+
+If you're on Windows and use PowerShell:
+```powershell
+docker run --pull=always --rm -it -p 8080:8080 --user=root `
+    -v "/var/run/docker.sock:/var/run/docker.sock" `
+    -v "C:/Temp:/tmp" kestra/kestra:latest server local
+```
+
+If you're on Windows and use Command Prompt (CMD):
+```cmd
+docker run --pull=always --rm -it -p 8080:8080 --user=root ^
+    -v "/var/run/docker.sock:/var/run/docker.sock" ^
+    -v "C:/Temp:/tmp" kestra/kestra:latest server local
+```
+
+If you're on Windows and use WSL (Linux-based environment in Windows):
+```bash
+docker run --pull=always --rm -it -p 8080:8080 --user=root \
+    -v "/var/run/docker.sock:/var/run/docker.sock" \
+    -v "/mnt/c/Temp:/tmp" kestra/kestra:latest server local
+```
+
+Check our [Installation Guide](https://kestra.io/docs/installation) for other deployment options (Docker Compose, Podman, Kubernetes, AWS, GCP, Azure, and more).
+
+Access the Kestra UI at [http://localhost:8080](http://localhost:8080) and start building your first flow!
+
+#### Your First Hello World Flow
+
+Create a new flow with the following content:
+
+```yaml
+id: hello_world
+namespace: dev
+
+tasks:
+  - id: say_hello
+    type: io.kestra.plugin.core.log.Log
+    message: "Hello, World!"
+```
+
+
+Run the flow and see the output in the UI!
+
+---
+
+## 🧩 Plugin Ecosystem
+
+Kestra's functionality is extended through a rich [ecosystem of plugins](https://kestra.io/plugins) that empower you to run tasks anywhere and code in any language, including Python, Node.js, R, Go, Shell, and more. Here's how Kestra plugins enhance your workflows:
+
+- **Run Anywhere:**
+  - **Local or Remote Execution:** Execute tasks on your local machine, remote servers via SSH, or scale out to serverless containers using [Task Runners](https://kestra.io/docs/task-runners).
+  - **Docker and Kubernetes Support:** Seamlessly run Docker containers within your workflows or launch Kubernetes jobs to handle compute-intensive workloads.
+
+- **Code in Any Language:**
+  - **Scripting Support:** Write scripts in your preferred programming language. Kestra supports Python, Node.js, R, Go, Shell, and others, allowing you to integrate existing codebases and deployment patterns.
+  - **Flexible Automation:** Execute shell commands, run SQL queries against various databases, and make HTTP requests to interact with APIs.
+
+- **Event-Driven and Real-Time Processing:**
+  - **Real-Time Triggers:** React to events from external systems in real-time, such as file arrivals, new messages in message buses (Kafka, Redis, Pulsar, AMQP, MQTT, NATS, AWS SQS, Google Pub/Sub, Azure Event Hubs), and more.
+  - **Custom Events:** Define custom events to trigger flows based on specific conditions or external signals, enabling highly responsive workflows.
+
+- **Cloud Integrations:**
+  - **AWS, Google Cloud, Azure:** Integrate with a variety of cloud services to interact with storage solutions, messaging systems, compute resources, and more.
+  - **Big Data Processing:** Run big data processing tasks using tools like Apache Spark or interact with analytics platforms like Google BigQuery.
+
+- **Monitoring and Notifications:**
+  - **Stay Informed:** Send messages to Slack channels, email notifications, or trigger alerts in PagerDuty to keep your team updated on workflow statuses.
+
+Kestra's plugin ecosystem is continually expanding, allowing you to tailor the platform to your specific needs. Whether you're orchestrating complex data pipelines, automating scripts across multiple environments, or integrating with cloud services, there's likely a plugin to assist. And if not, you can always [build your own plugins](https://kestra.io/docs/plugin-developer-guide/) to extend Kestra's capabilities.
+
+🧑‍💻 **Note:** This is just a glimpse of what Kestra plugins can do. Explore the full list on our [Plugins Page](https://kestra.io/plugins).
+
+---
+
+## 📚 Key Concepts
+
+- **Flows:** the core unit in Kestra, representing a workflow composed of tasks.
+- **Tasks:** individual units of work, such as running a script, moving data, or calling an API.
+- **Namespaces:** logical grouping of flows for organization and isolation.
+- **Triggers:** schedule or events that initiate the execution of flows.
+- **Inputs & Variables:** parameters and dynamic data passed into flows and tasks.
+
+---
+
+## 🎨 Build Workflows Visually
+
+Kestra provides an intuitive UI that allows you to interactively build and visualize your workflows:
+
+- **Drag-and-Drop Interface:** add and rearrange tasks from the Topology Editor.
+- **Real-Time Validation:** instant feedback on your workflow's syntax and structure to catch errors early.
+- **Auto-Completion:** smart suggestions as you type to write flow code quickly and without syntax errors.
+- **Live Topology View:** see your workflow as a Directed Acyclic Graph (DAG) that updates in real-time.
+
+---
+
+
+## 🔧 Extensible and Developer-Friendly
+
+### Plugin Development
+
+Create custom plugins to extend Kestra's capabilities. Check out our [Plugin Developer Guide](https://kestra.io/docs/plugin-developer-guide/) to get started.
+
+### Infrastructure as Code
+
+- **Version Control:** store your flows in Git repositories.
+- **CI/CD Integration:** automate deployment of flows using CI/CD pipelines.
+- **Terraform Provider:** manage Kestra resources with the [official Terraform provider](https://kestra.io/docs/terraform/).
+
+---
+
+## 🌐 Join the Community
+
+Stay connected and get support:
+
+- **Slack:** Join our [Slack community](https://kestra.io/slack) to ask questions and share ideas.
+- **LinkedIn:** Follow us on [LinkedIn](https://www.linkedin.com/company/kestra/) — next to Slack and GitHub, this is our main channel to share updates and product announcements.
+- **YouTube:** Subscribe to our [YouTube channel](https://www.youtube.com/@kestra-io) for educational video content. We publish new videos every week!
+- **X:** Follow us on [X](https://x.com/kestra_io) if you're still active there.
+
+---
+
+## 🤝 Contributing
+
+We welcome contributions of all kinds!
+
+- **Report Issues:** Found a bug or have a feature request? Open an [issue on GitHub](https://github.com/kestra-io/kestra/issues).
+- **Contribute Code:** Check out our [Contributor Guide](https://kestra.io/docs/getting-started/contributing) for initial guidelines, and explore our [good first issues](https://go.kestra.io/contributing) for beginner-friendly tasks to tackle first.
+- **Develop Plugins:** Build and share plugins using our [Plugin Developer Guide](https://kestra.io/docs/plugin-developer-guide/).
+- **Contribute to our Docs:** Contribute edits or updates to keep our [documentation](https://github.com/kestra-io/docs) top-notch.
+
+---
+
+## 📄 License
+
+Kestra is licensed under the Apache 2.0 License © [Kestra Technologies](https://kestra.io).
+
+---
+
+## ⭐️ Stay Updated
+
+Give our repository a star to stay informed about the latest features and updates!
+
+[![Star the Repo](https://kestra.io/star.gif)](https://github.com/kestra-io/kestra)
+
+---
+
+Thank you for considering Kestra for your workflow orchestration needs. We can't wait to see what you'll build!
 
-## License
-Apache 2.0 © [Nigh Tech](https://nigh.tech)

SECURITY.md

@@ -0,0 +1,33 @@
+# Security Policy
+
+## Supported Versions
+
+We provide security updates for the following versions of Kestra:
+
+- The `latest` release 
+- Up to two previous minor versions released as a backport upon customer request.
+
+If you are using an unsupported version, we recommend upgrading to the `latest` version to receive security fixes.
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in Kestra, please report it to us privately to ensure a responsible disclosure process. You can contact our security team at:
+
+**security@kestra.io**
+
+### Guidelines for Reporting
+- Provide a detailed description of the issue, including steps to reproduce it if possible.
+- Do not disclose the vulnerability publicly until we have confirmed and patched the issue.
+- If you believe the issue has critical severity, please indicate so in your report to help us prioritize.
+
+## Our Commitment
+
+- We will acknowledge your report within **2 business days**.
+- We will work to verify and address the issue as quickly as possible.
+- Once the issue is resolved, we will notify you of the fix.
+
+## Acknowledgments
+
+We are happy to credit those who report vulnerabilities responsibly in our release notes, unless you prefer to remain anonymous. If you would like to be acknowledged, please include this in your report.
+
+Thank you for helping to make Kestra more secure!

build-and-start-e2e-tests.sh

@@ -0,0 +1,47 @@
+#!/bin/bash
+set -e
+
+# E2E main script that can be run on a dev computer or in the CI
+# it will build the backend of the current git repo and the frontend
+# create a docker image out of it
+# run tests on this image
+
+
+LOCAL_IMAGE_VERSION="local-e2e-$(date +%s)"
+
+echo "Running E2E"
+echo "Start time: $(date '+%Y-%m-%d %H:%M:%S')"
+start_time=$(date +%s)
+
+echo ""
+echo "Building the image for this current repository"
+make clean
+make build-docker VERSION=$LOCAL_IMAGE_VERSION
+
+end_time=$(date +%s)
+elapsed=$(( end_time - start_time ))
+
+echo ""
+echo "building elapsed time: ${elapsed} seconds"
+echo ""
+echo "Start time: $(date '+%Y-%m-%d %H:%M:%S')"
+start_time2=$(date +%s)
+
+echo "cd ./ui"
+cd ./ui
+echo "npm i"
+npm i
+
+echo 'sh ./run-e2e-tests.sh --kestra-docker-image-to-test "kestra/kestra:$LOCAL_IMAGE_VERSION"'
+./run-e2e-tests.sh --kestra-docker-image-to-test "kestra/kestra:$LOCAL_IMAGE_VERSION"
+
+end_time2=$(date +%s)
+elapsed2=$(( end_time2 - start_time2 ))
+echo ""
+echo "Tests elapsed time: ${elapsed2} seconds"
+echo ""
+total_elapsed=$(( elapsed + elapsed2 ))
+echo "Total elapsed time: ${total_elapsed} seconds"
+echo ""
+
+exit 0

build.gradle

@@ -1,28 +1,43 @@
+import net.e175.klaus.zip.ZipPrefixer
+import org.owasp.dependencycheck.gradle.extension.AnalyzerExtension
+
+buildscript {
+    repositories {
+        mavenCentral()
+    }
+
+    dependencies {
+        classpath "net.e175.klaus:zip-prefixer:0.3.1"
+    }
+}
+
 plugins {
     // micronaut
     id "java"
     id 'java-library'
     id "idea"
-    id "com.github.johnrengelman.shadow" version "7.0.0"
+    id "com.gradleup.shadow" version "8.3.9"
     id "application"
 
     // test
-    id 'com.adarshr.test-logger' version '3.0.0'
-    id 'org.gradle.test-retry' version '1.3.1'
+    id "com.adarshr.test-logger" version "4.0.0"
+    id "org.sonarqube" version "7.0.1.6134"
+    id 'jacoco-report-aggregation'
 
     // helper
-    id "com.github.ben-manes.versions" version "0.39.0"
+    id "com.github.ben-manes.versions" version "0.53.0"
 
     // front
-    id 'org.siouan.frontend-jdk11' version '5.3.0' apply false
+    id 'com.github.node-gradle.node' version '7.1.0'
 
     // release
-    id "io.github.gradle-nexus.publish-plugin" version "1.1.0"
-    id 'net.researchgate.release' version '2.8.1'
-    id "com.gorylenko.gradle-git-properties" version "2.3.1"
+    id 'net.researchgate.release' version '3.1.0'
+    id "com.gorylenko.gradle-git-properties" version "2.5.3"
     id 'signing'
-    id 'ru.vyarus.pom' version '2.2.0' apply false
-    id 'ru.vyarus.github-info' version '1.3.0' apply false
+    id "com.vanniktech.maven.publish" version "0.34.0"
+
+    // OWASP dependency check
+    id "org.owasp.dependencycheck" version "12.1.8" apply false
 }
 
 idea {
@@ -35,8 +50,17 @@ idea {
 /**********************************************************************************************************************\
  * Main
  **********************************************************************************************************************/
-mainClassName = "io.kestra.cli.App"
-sourceCompatibility = 11
+final mainClassName = "io.kestra.cli.App"
+final targetJavaVersion = JavaVersion.VERSION_21
+
+application {
+    mainClass = mainClassName
+}
+
+java {
+    sourceCompatibility = targetJavaVersion
+    targetCompatibility = targetJavaVersion
+}
 
 dependencies {
     implementation project(":cli")
@@ -47,133 +71,349 @@ dependencies {
  * Dependencies
  **********************************************************************************************************************/
 allprojects {
-    group "io.kestra"
 
-    sourceCompatibility = 11
-
-    repositories {
-        mavenCentral()
+    tasks.withType(GenerateModuleMetadata).configureEach {
+        suppressedValidationErrors.add('enforced-platform')
     }
 
-    // micronaut
-    apply plugin: "java"
-    apply plugin: "java-library"
-    apply plugin: "idea"
-    apply plugin: "jacoco"
+    if (it.name != 'platform') {
+        group = "io.kestra"
 
-    configurations {
-        developmentOnly // for dependencies that are needed for development only
-    }
-
-    //
-    configurations.all {
-        resolutionStrategy {
-            force("org.apache.kafka:kafka-clients:" + kafkaVersion)
-            force("org.apache.kafka:kafka-streams:" + kafkaVersion)
+        java {
+            sourceCompatibility = targetJavaVersion
+            targetCompatibility = targetJavaVersion
         }
-    }
 
-    // dependencies
-    dependencies {
-        // lombok
-        annotationProcessor "org.projectlombok:lombok:" + lombokVersion
-        compileOnly 'org.projectlombok:lombok:' + lombokVersion
+        repositories {
+            mavenCentral()
+        }
 
         // micronaut
-        annotationProcessor platform("io.micronaut:micronaut-bom:$micronautVersion")
-        annotationProcessor "io.micronaut:micronaut-inject-java"
-        annotationProcessor "io.micronaut:micronaut-validation"
-        implementation platform("io.micronaut:micronaut-bom:$micronautVersion")
-        implementation "io.micronaut:micronaut-inject"
-        implementation "io.micronaut:micronaut-validation"
-        implementation "io.micronaut:micronaut-runtime"
-        implementation "javax.annotation:javax.annotation-api"
-        implementation "io.micronaut.data:micronaut-data-model"
-        implementation "io.micronaut:micronaut-management"
-        implementation "io.micrometer:micrometer-core"
-        implementation "io.micronaut.micrometer:micronaut-micrometer-registry-prometheus"
-        api "io.micronaut:micronaut-http-client"
+        apply plugin: "java"
+        apply plugin: "java-library"
+        apply plugin: "idea"
+        apply plugin: "jacoco"
 
-        // logs
-        implementation "org.slf4j:slf4j-api:1.7.30"
-        implementation "ch.qos.logback:logback-classic:1.2.3"
+        configurations {
+            developmentOnly // for dependencies that are needed for development only
+            micronaut
+        }
 
-        // jackson
-        implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind', version: '2.12.3'
-        implementation group: 'com.fasterxml.jackson.dataformat', name: 'jackson-dataformat-yaml', version: '2.12.3'
-        implementation group: 'com.fasterxml.jackson.module', name: 'jackson-module-parameter-names', version: '2.12.3'
-        implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-guava', version: '2.12.3'
+        // dependencies
+        dependencies {
+            // Platform
+            annotationProcessor enforcedPlatform(project(":platform"))
+            implementation enforcedPlatform(project(":platform"))
+            api enforcedPlatform(project(":platform"))
+            micronaut enforcedPlatform(project(":platform"))
 
-        // kestra
-        implementation group: 'com.devskiller.friendly-id', name: 'friendly-id', version: '1.1.0'
-        implementation 'com.github.jknack:handlebars:4.2.0'
-        implementation group: 'net.thisptr', name: 'jackson-jq', version: '1.0.0-preview.20210610'
+            // lombok
+            annotationProcessor "org.projectlombok:lombok"
+            compileOnly 'org.projectlombok:lombok'
 
-        // exposed utils
-        api group: 'com.google.guava', name: 'guava', version: '30.1.1-jre'
-        api group: 'commons-io', name: 'commons-io', version: '2.11.0'
-        api group: 'org.apache.commons', name: 'commons-lang3', version: '3.12.0'
-        api "io.swagger.core.v3:swagger-annotations"
+            // micronaut
+            annotationProcessor "io.micronaut:micronaut-inject-java"
+            annotationProcessor "io.micronaut.validation:micronaut-validation-processor"
+            micronaut "io.micronaut:micronaut-inject"
+            micronaut "io.micronaut.validation:micronaut-validation"
+            micronaut "io.micronaut.beanvalidation:micronaut-hibernate-validator"
+            micronaut "io.micronaut:micronaut-runtime"
+            micronaut "io.micronaut:micronaut-retry"
+            micronaut "io.micronaut:micronaut-jackson-databind"
+            micronaut "io.micronaut.data:micronaut-data-model"
+            micronaut "io.micronaut:micronaut-management"
+            micronaut "io.micrometer:micrometer-core"
+            micronaut "io.micronaut.micrometer:micronaut-micrometer-registry-prometheus"
+            micronaut "io.micronaut:micronaut-http-client"
+            micronaut "io.micronaut.reactor:micronaut-reactor-http-client"
+            micronaut "io.micronaut.tracing:micronaut-tracing-opentelemetry-http"
+
+            // logs
+            implementation "org.slf4j:slf4j-api"
+            implementation "ch.qos.logback:logback-classic"
+            implementation "org.codehaus.janino:janino"
+            implementation group: 'org.apache.logging.log4j', name: 'log4j-to-slf4j'
+            implementation group: 'org.slf4j', name: 'jul-to-slf4j'
+            implementation group: 'org.slf4j', name: 'jcl-over-slf4j'
+            implementation group: 'org.fusesource.jansi', name: 'jansi'
+
+            // OTEL
+            implementation "io.opentelemetry:opentelemetry-exporter-otlp"
+
+            // jackson
+            implementation group: 'com.fasterxml.jackson.core', name: 'jackson-core'
+            implementation group: 'com.fasterxml.jackson.core', name: 'jackson-databind'
+            implementation group: 'com.fasterxml.jackson.core', name: 'jackson-annotations'
+            implementation group: 'com.fasterxml.jackson.dataformat', name: 'jackson-dataformat-yaml'
+            implementation group: 'com.fasterxml.jackson.module', name: 'jackson-module-parameter-names'
+            implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-guava'
+            implementation group: 'com.fasterxml.jackson.datatype', name: 'jackson-datatype-jsr310'
+            implementation group: 'com.fasterxml.uuid', name: 'java-uuid-generator'
+
+            // kestra
+            implementation group: 'com.devskiller.friendly-id', name: 'friendly-id'
+            implementation (group: 'net.thisptr', name: 'jackson-jq') {
+                exclude group: 'com.fasterxml.jackson.core'
+            }
+
+            // exposed utils
+            api group: 'com.google.guava', name: 'guava'
+            api group: 'commons-io', name: 'commons-io'
+            api group: 'org.apache.commons', name: 'commons-lang3'
+            api "io.swagger.core.v3:swagger-annotations"
+        }
     }
 }
 
 /**********************************************************************************************************************\
  * Test
  **********************************************************************************************************************/
-subprojects {
-    apply plugin: "com.adarshr.test-logger"
-    apply plugin: "org.gradle.test-retry"
+subprojects {subProj ->
 
-    dependencies {
-        // lombok
-        testAnnotationProcessor "org.projectlombok:lombok:" + lombokVersion
-        testCompileOnly 'org.projectlombok:lombok:' + lombokVersion
+    if (subProj.name != 'platform' && subProj.name != 'jmh-benchmarks') {
+        apply plugin: "com.adarshr.test-logger"
 
-        // micronaut
-        testAnnotationProcessor platform("io.micronaut:micronaut-bom:$micronautVersion")
-        testAnnotationProcessor "io.micronaut:micronaut-inject-java"
-        testImplementation platform("io.micronaut:micronaut-bom:$micronautVersion")
+        java {
+            sourceCompatibility = targetJavaVersion
+            targetCompatibility = targetJavaVersion
+        }
 
-        testImplementation "org.junit.jupiter:junit-jupiter-api"
-        testImplementation "io.micronaut.test:micronaut-test-junit5"
-        testImplementation "org.junit.jupiter:junit-jupiter-engine"
-        testImplementation "org.junit.jupiter:junit-jupiter-params"
+        dependencies {
+            // Platform
+            testAnnotationProcessor enforcedPlatform(project(":platform"))
+            testImplementation enforcedPlatform(project(":platform"))
 
-        // hamcrest
-        testImplementation 'org.hamcrest:hamcrest:2.2'
-        testImplementation 'org.hamcrest:hamcrest-library:2.2'
-        testImplementation group: 'org.exparity', name: 'hamcrest-date', version: '2.0.7'
+            // lombok
+            testAnnotationProcessor "org.projectlombok:lombok:"
+            testCompileOnly 'org.projectlombok:lombok'
+
+            // micronaut
+            testAnnotationProcessor "io.micronaut:micronaut-inject-java"
+            testAnnotationProcessor "io.micronaut.validation:micronaut-validation-processor"
+            testImplementation "io.micronaut.test:micronaut-test-junit5"
+
+            testImplementation "org.junit.jupiter:junit-jupiter-engine"
+            testImplementation "org.junit.jupiter:junit-jupiter-params"
+            testImplementation "org.junit-pioneer:junit-pioneer"
+            testImplementation 'org.mockito:mockito-junit-jupiter'
+
+            // hamcrest
+            testImplementation 'org.hamcrest:hamcrest'
+            testImplementation 'org.hamcrest:hamcrest-library'
+            testImplementation 'org.exparity:hamcrest-date'
+
+            //assertj
+            testImplementation 'org.assertj:assertj-core'
+        }
+
+        def commonTestConfig = { Test t ->
+            // set Xmx for test workers
+            t.maxHeapSize = '4g'
+
+            // configure en_US default locale for tests
+            t.systemProperty 'user.language', 'en'
+            t.systemProperty 'user.country', 'US'
+
+            t.environment 'SECRET_MY_SECRET', "{\"secretKey\":\"secretValue\"}".bytes.encodeBase64().toString()
+            t.environment 'SECRET_NEW_LINE', "cGFzc3dvcmR2ZXJ5dmVyeXZleXJsb25ncGFzc3dvcmR2ZXJ5dmVyeXZleXJsb25ncGFzc3dvcmR2\nZXJ5dmVyeXZleXJsb25ncGFzc3dvcmR2ZXJ5dmVyeXZleXJsb25ncGFzc3dvcmR2ZXJ5dmVyeXZl\neXJsb25n"
+            t.environment 'SECRET_WEBHOOK_KEY', "secretKey".bytes.encodeBase64().toString()
+            t.environment 'SECRET_NON_B64_SECRET', "some secret value"
+            t.environment 'SECRET_PASSWORD', "cGFzc3dvcmQ="
+            t.environment 'ENV_TEST1', "true"
+            t.environment 'ENV_TEST2', "Pass by env"
+
+
+            if (subProj.name == 'core' || subProj.name == 'jdbc-h2' || subProj.name == 'jdbc-mysql' || subProj.name == 'jdbc-postgres') {
+                // JUnit 5 parallel settings
+                t.systemProperty 'junit.jupiter.execution.parallel.enabled', 'true'
+                t.systemProperty 'junit.jupiter.execution.parallel.mode.default', 'concurrent'
+                t.systemProperty 'junit.jupiter.execution.parallel.mode.classes.default', 'same_thread'
+                t.systemProperty 'junit.jupiter.execution.parallel.config.strategy', 'dynamic'
+            }
+        }
+
+        tasks.register('flakyTest', Test) { Test t ->
+            group = 'verification'
+            description = 'Runs tests tagged @Flaky but does not fail the build.'
+
+            useJUnitPlatform {
+                includeTags 'flaky'
+            }
+            ignoreFailures = true
+
+            reports {
+                junitXml.required = true
+                junitXml.outputPerTestCase = true
+                junitXml.mergeReruns = true
+                junitXml.includeSystemErrLog = true
+                junitXml.outputLocation = layout.buildDirectory.dir("test-results/flakyTest")
+            }
+            commonTestConfig(t)
+
+        }
+
+        test {
+            useJUnitPlatform {
+                excludeTags 'flaky'
+            }
+            reports {
+                junitXml.required = true
+                junitXml.outputPerTestCase = true
+                junitXml.mergeReruns = true
+                junitXml.includeSystemErrLog = true
+                junitXml.outputLocation = layout.buildDirectory.dir("test-results/test")
+            }
+            commonTestConfig(it)
+
+
+            finalizedBy(tasks.named('flakyTest'))
+        }
+
+        testlogger {
+            theme = 'mocha-parallel'
+            showExceptions = true
+            showFullStackTraces = true
+            showCauses = true
+            slowThreshold = 2000
+            showStandardStreams = true
+            showPassedStandardStreams = false
+            showSkippedStandardStreams = true
+        }
     }
+}
 
-    test {
-        useJUnitPlatform()
+/**********************************************************************************************************************\
+ * End-to-End Tests
+ **********************************************************************************************************************/
+def e2eTestsCheck = tasks.register('e2eTestsCheck') {
+    group = 'verification'
+    description = "Runs the 'check' task for all e2e-tests modules"
+    doFirst {
+        project.ext.set("e2e-tests", true)
+    }
+}
 
-        maxHeapSize = "4048m"
-
-        retry {
-            maxRetries = 5
-            maxFailures = 15
+subprojects {
+    // Add e2e-tests modules check tasks to e2eTestsCheck
+    if (project.name.startsWith("e2e-tests")) {
+        test {
+            onlyIf {
+                project.hasProperty("e2e-tests")
+            }
         }
     }
 
-    testlogger {
-        theme 'mocha-parallel'
-        showExceptions true
-        showFullStackTraces true
-        showCauses true
-        slowThreshold 2000
-        showStandardStreams true
-        showPassedStandardStreams false
-        showSkippedStandardStreams true
+    afterEvaluate {
+        // Add e2e-tests modules check tasks to e2eTestsCheck
+        if (project.name.startsWith("e2e-tests")) {
+            e2eTestsCheck.configure {
+                finalizedBy(check)
+            }
+        }
     }
 }
 
+/**********************************************************************************************************************\
+ * Allure Reports
+ **********************************************************************************************************************/
+subprojects {
+    if (it.name != 'platform' && it.name != 'jmh-benchmarks') {
+        dependencies {
+            testImplementation platform("io.qameta.allure:allure-bom")
+            testImplementation "io.qameta.allure:allure-junit5"
+        }
+
+        configurations {
+            agent {
+                canBeResolved = true
+                canBeConsumed = true
+            }
+        }
+
+        dependencies {
+            agent "org.aspectj:aspectjweaver:1.9.24"
+        }
+
+        test {
+            jvmArgs = ["-javaagent:${configurations.agent.singleFile}"]
+        }
+    }
+}
+
+/**********************************************************************************************************************\
+ * Jacoco
+ **********************************************************************************************************************/
+subprojects {
+    if (it.name != 'platform' && it.name != 'jmh-benchmarks') {
+        apply plugin: 'jacoco'
+
+        test {
+            finalizedBy jacocoTestReport
+        }
+
+        jacocoTestReport {
+            dependsOn test
+        }
+    }
+}
+
+tasks.named('check') {
+    dependsOn tasks.named('testCodeCoverageReport', JacocoReport)
+}
+
+tasks.named('testCodeCoverageReport') {
+    dependsOn ':core:copyGradleProperties'
+    dependsOn ':ui:assembleFrontend'
+}
+
+/**********************************************************************************************************************\
+ * Sonar
+ **********************************************************************************************************************/
+subprojects {
+    sonar {
+        properties {
+            property "sonar.coverage.jacoco.xmlReportPaths", "$projectDir.parentFile.path/build/reports/jacoco/testCodeCoverageReport/testCodeCoverageReport.xml,$projectDir.parentFile.path/build/reports/jacoco/test/testCodeCoverageReport.xml"
+        }
+    }
+}
+
+sonar {
+    properties {
+        property "sonar.projectKey", "kestra-io_kestra"
+        property "sonar.organization", "kestra-io"
+        property "sonar.host.url", "https://sonarcloud.io"
+    }
+}
+
+/**********************************************************************************************************************\
+ * OWASP Dependency check
+ **********************************************************************************************************************/
+apply plugin: 'org.owasp.dependencycheck'
+
+dependencyCheck {
+    // fail only on HIGH and CRITICAL vulnerabilities, we may want to lower to 5 (mid-medium) later
+    failBuildOnCVSS = 7
+
+    // disable the .NET assembly analyzer as otherwise it wants to analyze EXE file
+    analyzers(new Action<AnalyzerExtension>() {
+        @Override
+        void execute(AnalyzerExtension analyzerExtension) {
+            analyzerExtension.assemblyEnabled = false
+        }
+    })
+
+    // configure a suppression file
+    suppressionFile = "$projectDir/owasp-dependency-suppressions.xml"
+
+    nvd.apiKey = System.getenv("NVD_API_KEY")
+}
+
 /**********************************************************************************************************************\
  * Micronaut
  **********************************************************************************************************************/
 allprojects {
     gradle.projectsEvaluated {
-        tasks.withType(JavaCompile) {
+        tasks.withType(JavaCompile).configureEach {
             options.encoding = "UTF-8"
             options.compilerArgs.add("-parameters")
             options.compilerArgs.add("-Xlint:all")
@@ -182,7 +422,7 @@ allprojects {
     }
 }
 
-tasks.withType(JavaCompile) {
+tasks.withType(JavaCompile).configureEach {
     options.encoding = "UTF-8"
     options.compilerArgs.add("-parameters")
 }
@@ -202,193 +442,256 @@ run.jvmArgs(
  **********************************************************************************************************************/
 jar {
     manifest {
-        attributes (
+        attributes(
             "Main-Class": mainClassName,
-                "X-Kestra-Title": project.name,
-                "X-Kestra-Group": project.group,
-                "X-Kestra-Version": project.version
+            "X-Kestra-Name": project.name,
+            "X-Kestra-Title": project.name,
+            "X-Kestra-Group": project.group,
+            "X-Kestra-Version": project.version
         )
     }
 }
 
 shadowJar {
-    dependsOn = ['ui:assembleFrontend']
-
     archiveClassifier.set(null)
     mergeServiceFiles()
+    zip64 = true
 }
 
+distZip.dependsOn shadowJar
+distTar.dependsOn shadowJar
+startScripts.dependsOn shadowJar
+startShadowScripts.dependsOn jar
+shadowJar.dependsOn 'ui:assembleFrontend'
+shadowJar.dependsOn jar
+
 /**********************************************************************************************************************\
  * Executable Jar
  **********************************************************************************************************************/
-def executableDir = file("${buildDir}/executable")
-def executable = file("${buildDir}/executable/${project.name}-${project.version}")
+def executableDir = layout.buildDirectory.dir("executable")
+def executable = layout.buildDirectory.file("executable/${project.name}-${project.version}").get().asFile
 
-task writeExecutableJar()  {
-    group "build"
-    description "Write an executable jar from shadow jar"
+tasks.register('writeExecutableJar') {
+    group = "build"
+    description = "Write an executable jar from shadow jar"
     dependsOn = [shadowJar]
 
+    final shadowJarFile =  tasks.shadowJar.outputs.files.singleFile
+    inputs.file shadowJarFile
+    outputs.file executable
+    outputs.cacheIf { true }
+
     doFirst {
-        executableDir.mkdirs()
+        executableDir.get().asFile.mkdirs()
     }
 
     doLast {
-        executable.write("")
-        executable.append("\n: <<END_OF_KESTRA_SELFRUN\r\n")
-        executable.append(file("gradle/jar/selfrun.bat").readBytes())
-        executable.append("\r\nEND_OF_KESTRA_SELFRUN\r\n\n")
-        executable.append(file("gradle/jar/selfrun.sh").readBytes())
-        executable.append(file("${buildDir}/libs/${project.name}-${project.version}.jar").readBytes())
+        executable.setBytes(shadowJarFile.readBytes())
+        ByteArrayOutputStream executableBytes = new ByteArrayOutputStream()
+        executableBytes.write("\n: <<END_OF_KESTRA_SELFRUN\r\n".getBytes())
+        executableBytes.write(file("gradle/jar/selfrun.bat").readBytes())
+        executableBytes.write("\r\n".getBytes())
+        executableBytes.write("END_OF_KESTRA_SELFRUN\r\n\n".getBytes())
+        executableBytes.write(file("gradle/jar/selfrun.sh").readBytes())
+        ZipPrefixer.applyPrefixBytesToZip(executable.toPath(), executableBytes.toByteArray())
         executable.setExecutable(true)
     }
-
 }
 
-task executableJar(type: Zip) {
-    group "build"
-    description "Zip the executable jar"
+tasks.register('executableJar', Zip) {
+    group = "build"
+    description = "Zip the executable jar"
     dependsOn = [writeExecutableJar]
 
     archiveFileName = "${project.name}-${project.version}.zip"
-    destinationDirectory = file("${buildDir}/archives")
+    destinationDirectory = layout.buildDirectory.dir('archives')
 
     from executableDir
     archiveClassifier.set(null)
 }
 
-/**********************************************************************************************************************\
- * Jacoco
- **********************************************************************************************************************/
-subprojects {
-    test {
-        finalizedBy jacocoTestReport
-    }
-
-    jacoco {
-        toolVersion = "0.8.4"
-    }
-
-    jacocoTestReport {
-        getAdditionalSourceDirs().setFrom(files(sourceSets.main.allSource.srcDirs))
-        getSourceDirectories().setFrom(files(sourceSets.main.allSource.srcDirs))
-        getClassDirectories().setFrom(files(sourceSets.main.output))
-    }
-}
-
-
-task jacoco(type: JacocoReport) {
-    dependsOn = subprojects.test
-
-    def javaProject = subprojects.findAll { it.name != 'ui' };
-
-    getAdditionalSourceDirs().setFrom(files(javaProject.sourceSets.main.allSource.srcDirs))
-    getSourceDirectories().setFrom(files(javaProject.sourceSets.main.allSource.srcDirs))
-    getClassDirectories().setFrom(files(javaProject.sourceSets.main.output))
-    getExecutionData().setFrom(files(javaProject.jacocoTestReport.executionData))
-
-    reports {
-        html.required = true
-        xml.required = true
-        csv.required = true
-    }
-}
-
 /**********************************************************************************************************************\
  * Standalone
  **********************************************************************************************************************/
-task runStandalone(type: JavaExec) {
+tasks.register('runLocal', JavaExec) {
     group = "application"
+    description = "Run Kestra as server local"
     classpath = project(":cli").sourceSets.main.runtimeClasspath
     mainClass = mainClassName
-    args 'server', 'standalone'
+    environment 'MICRONAUT_ENVIRONMENTS', 'override'
+    args 'server', 'local', '--plugins', 'local/plugins'
+}
+
+tasks.register('runStandalone', JavaExec) {
+    group = "application"
+    description = "Run Kestra as server local"
+    classpath = project(":cli").sourceSets.main.runtimeClasspath
+    mainClass = mainClassName
+    environment 'MICRONAUT_ENVIRONMENTS', 'override'
+    args 'server', 'standalone', '--plugins', 'local/plugins'
 }
 
 /**********************************************************************************************************************\
  * Publish
  **********************************************************************************************************************/
-nexusPublishing {
-    repositoryDescription = "${project.group}:${rootProject.name}:${project.version}"
-    useStaging = !project.version.endsWith("-SNAPSHOT")
-    repositories {
-        sonatype {
-            nexusUrl.set(uri("https://s01.oss.sonatype.org/service/local/"))
-            snapshotRepositoryUrl.set(uri("https://s01.oss.sonatype.org/content/repositories/snapshots/"))
-        }
-    }
-}
+subprojects {subProject ->
 
-subprojects {
-    apply plugin: "maven-publish"
-    apply plugin: 'signing'
-    apply plugin: 'ru.vyarus.pom'
-    apply plugin: 'ru.vyarus.github-info'
+    if (subProject.name != 'jmh-benchmarks' && subProject.name != rootProject.name) {
+        apply plugin: 'signing'
+        apply plugin: "com.vanniktech.maven.publish"
 
-    javadoc {
-        options {
-            locale = 'en_US'
-            encoding = 'UTF-8'
-        }
-    }
-
-    task sourcesJar(type: Jar) {
-        archiveClassifier.set('sources')
-        from sourceSets.main.allSource
-    }
-
-    task javadocJar(type: Jar) {
-        archiveClassifier.set('javadoc')
-        from javadoc
-    }
-
-    github {
-        user 'kestra-io'
-        license 'Apache'
-        repository 'kestra'
-        site 'https://kestra.io'
-    }
-
-    pom {
-        description 'The modern, scalable orchestrator & scheduler open source platform'
-
-        developers {
-            developer {
-                id "tchiotludo"
-                name "Ludovic Dehon"
+        javadoc {
+            options {
+                locale = 'en_US'
+                encoding = 'UTF-8'
+                addStringOption("Xdoclint:none", "-quiet")
             }
         }
-    }
 
-    publishing {
-        publications {
-            sonatypePublication(MavenPublication) {
-                version project.version
+        tasks.register('sourcesJar', Jar) {
+            dependsOn = [':core:copyGradleProperties']
+            dependsOn = [':ui:assembleFrontend']
+            archiveClassifier.set('sources')
+            from sourceSets.main.allSource
+        }
+        sourcesJar.dependsOn ':core:copyGradleProperties'
+        sourcesJar.dependsOn ':ui:assembleFrontend'
 
-                if (project.name.contains('cli')) {
-                    groupId "io.kestra"
-                    artifactId "kestra"
+        tasks.register('javadocJar', Jar) {
+            archiveClassifier.set('javadoc')
+            from javadoc
+        }
 
-                    artifact shadowJar
-                    artifact executableJar
-                } else {
-                    from components.java
+        tasks.register('testsJar', Jar) {
+            group = 'build'
+            description = 'Build the tests jar'
 
-                    groupId project.group
-                    artifactId project.name
+            archiveClassifier.set('tests')
+            if (sourceSets.matching { it.name == 'test'}) {
+                from sourceSets.named('test').get().output
+            }
+        }
 
-                    artifact sourcesJar
-                    artifact javadocJar
+        //These modules should not be published
+        def unpublishedModules = ["jdbc-mysql", "jdbc-postgres", "webserver"]
+        if (subProject.name in unpublishedModules){
+            return
+        }
+
+        mavenPublishing {
+            publishToMavenCentral(true)
+            signAllPublications()
+
+            coordinates(
+                "${rootProject.group}",
+                subProject.name == "cli" ? rootProject.name : subProject.name,
+                "${rootProject.version}"
+            )
+
+            pom {
+                name        = project.name
+                description = "${project.group}:${project.name}:${rootProject.version}"
+                url         = "https://github.com/kestra-io/${rootProject.name}"
+
+                licenses {
+                    license {
+                        name = "The Apache License, Version 2.0"
+                        url  = "http://www.apache.org/licenses/LICENSE-2.0.txt"
+                    }
+                }
+                developers {
+                    developer {
+                        id    = "tchiotludo"
+                        name  = "Ludovic Dehon"
+                        email = "ldehon@kestra.io"
+                    }
+                }
+                scm {
+                    connection = 'scm:git:'
+                    url = "https://github.com/kestra-io/${rootProject.name}"
+                }
+            }
+        }
+
+        afterEvaluate {
+            publishing {
+                publications {
+                    withType(MavenPublication).configureEach { publication ->
+
+                        if (subProject.name == "platform") {
+                            // Clear all artifacts except the BOM
+                            publication.artifacts.clear()
+                        }
+                    }
+                }
+            }
+        }
+
+        if (subProject.name == 'cli') {
+
+            /* Make sure the special publication is wired *after* every plugin */
+            subProject.afterEvaluate {
+                /* 1. Remove the default java component so Gradle stops expecting
+                       the standard cli-*.jar, sources, javadoc, etc.           */
+                components.removeAll { it.name == "java" }
+
+                /* 2. Replace the publication’s artifacts with shadow + exec */
+                publishing.publications.withType(MavenPublication).configureEach { pub ->
+                    pub.artifacts.clear()
+
+                    // main shadow JAR built at root
+                    pub.artifact(rootProject.tasks.named("shadowJar").get()) {
+                        extension = "jar"
+                    }
+
+                    // executable ZIP built at root
+                    pub.artifact(rootProject.tasks.named("executableJar").get().archiveFile) {
+                        classifier = "exec"
+                        extension  = "zip"
+                    }
+                    pub.artifact(tasks.named("sourcesJar").get())
+                    pub.artifact(tasks.named("javadocJar").get())
+
+                }
+
+                /* 3. Disable Gradle-module metadata for this publication to
+                       avoid the “artifact removed from java component” error. */
+                tasks.withType(GenerateModuleMetadata).configureEach { it.enabled = false }
+
+                /* 4. Make every publish task in :cli wait for the two artifacts */
+                tasks.matching { it.name.startsWith("publish") }.configureEach {
+                    dependsOn rootProject.tasks.named("shadowJar")
+                    dependsOn rootProject.tasks.named("executableJar")
+                }
+            }
+        }
+
+        if (subProject.name != 'platform' && subProject.name != 'cli') {
+            // only if a test source set actually exists (avoids empty artifacts)
+            def hasTests = subProject.extensions.findByName('sourceSets')?.findByName('test') != null
+
+            if (hasTests) {
+                // wire the artifact onto every Maven publication of this subproject
+                publishing {
+                    publications {
+                        withType(MavenPublication).configureEach { pub ->
+                            // keep the normal java component + sources/javadoc already configured
+                            pub.artifact(subProject.tasks.named('testsJar').get())
+                        }
+                    }
+                }
+
+                // make sure publish tasks build the tests jar first
+                tasks.matching { it.name.startsWith('publish') }.configureEach {
+                    dependsOn subProject.tasks.named('testsJar')
                 }
             }
         }
     }
-
-    signing {
-        sign publishing.publications.sonatypePublication
-    }
 }
 
 
+
 /**********************************************************************************************************************\
  * Version
  **********************************************************************************************************************/
@@ -398,10 +701,17 @@ release {
     tagCommitMessage = 'tag version'
     newVersionCommitMessage = 'update snapshot version'
     tagTemplate = 'v${version}'
-    pushReleaseVersionBranch = 'master'
     buildTasks = ['classes']
 
     git {
-        requireBranch = 'release'
+        requireBranch.set('develop')
     }
+
+    // Dynamically set properties with default values
+    failOnSnapshotDependencies = providers.gradleProperty("release.failOnSnapshotDependencies")
+            .map(val -> Boolean.parseBoolean(val))
+            .getOrElse(true)
+
+    pushReleaseVersionBranch = providers.gradleProperty("release.pushReleaseVersionBranch")
+            .getOrElse(null)
 }

cli/build.gradle

@@ -1,3 +1,6 @@
+configurations {
+    implementation.extendsFrom(micronaut)
+}
 dependencies {
     // micronaut
     implementation "info.picocli:picocli"
@@ -6,36 +9,37 @@ dependencies {
     implementation "io.micronaut:micronaut-http-server-netty"
 
     // logs
-    implementation group: 'org.apache.logging.log4j', name: 'log4j-to-slf4j', version: '2.14.1'
-    implementation group: 'org.slf4j', name: 'jul-to-slf4j', version: '1.7.30'
-    implementation 'ch.qos.logback.contrib:logback-json-classic:0.1.5'
-    implementation 'ch.qos.logback.contrib:logback-jackson:0.1.5'
+    implementation 'ch.qos.logback.contrib:logback-json-classic'
+    implementation 'ch.qos.logback.contrib:logback-jackson'
 
-    // plugins
-    implementation 'org.eclipse.aether:aether-api:1.1.0'
-    implementation 'org.eclipse.aether:aether-spi:1.1.0'
-    implementation 'org.eclipse.aether:aether-util:1.1.0'
-    implementation 'org.eclipse.aether:aether-impl:1.1.0'
-    implementation 'org.eclipse.aether:aether-connector-basic:1.1.0'
-    implementation 'org.eclipse.aether:aether-transport-file:1.1.0'
-    implementation 'org.eclipse.aether:aether-transport-http:1.1.0'
-    implementation('org.apache.maven:maven-aether-provider:3.3.9') {
-        // sisu dependency injector is not used
-        exclude group: 'org.eclipse.sisu'
-    }
+    // OTLP metrics
+    implementation "io.micronaut.micrometer:micronaut-micrometer-registry-otlp"
+
+    // aether still use javax.inject
+    compileOnly 'javax.inject:javax.inject:1'
 
     // modules
     implementation project(":core")
+    implementation project(":script")
 
     implementation project(":repository-memory")
-    implementation project(":repository-elasticsearch")
 
     implementation project(":runner-memory")
-    implementation project(":runner-kafka")
 
-    implementation project(":indexer-kafka-elasticsearch")
+    implementation project(":jdbc")
+    implementation project(":jdbc-h2")
+    implementation project(":jdbc-mysql")
+    implementation project(":jdbc-postgres")
 
     implementation project(":storage-local")
 
+    // Kestra server components
+    implementation project(":executor")
+    implementation project(":scheduler")
     implementation project(":webserver")
-}
+    implementation project(":worker")
+
+    //test
+    testImplementation project(':tests')
+    testImplementation "org.wiremock:wiremock-jetty12"
+}

cli/src/main/java/io/kestra/cli/AbstractApiCommand.java

@@ -1,31 +1,67 @@
 package io.kestra.cli;
 
+import io.micronaut.core.annotation.Nullable;
+import io.micronaut.http.HttpHeaders;
 import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
 import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.body.ContextlessMessageBodyHandlerRegistry;
+import io.micronaut.http.body.MessageBodyHandlerRegistry;
+import io.micronaut.http.client.DefaultHttpClientConfiguration;
+import io.micronaut.http.client.HttpClientConfiguration;
 import io.micronaut.http.client.netty.DefaultHttpClient;
-import picocli.CommandLine;
-
+import io.micronaut.http.netty.body.NettyJsonHandler;
+import io.micronaut.json.JsonMapper;
+import jakarta.inject.Inject;
+import jakarta.inject.Named;
+import java.net.URISyntaxException;
 import java.net.URL;
 import java.util.Arrays;
 import java.util.List;
 import java.util.Map;
+import lombok.Builder;
+import lombok.Value;
+import lombok.extern.jackson.Jacksonized;
+import picocli.CommandLine;
 
 public abstract class AbstractApiCommand extends AbstractCommand {
-    @CommandLine.Option(names = {"--server"}, description = "Also write core tasks plugins")
+    @CommandLine.Option(names = {"--server"}, description = "Kestra server url", defaultValue = "http://localhost:8080")
     protected URL server;
 
-    @CommandLine.Option(names = {"--headers"}, description = "Also write core tasks plugins")
+    @CommandLine.Option(names = {"--headers"}, paramLabel = "<name=value>", description = "Headers to add to the request")
     protected Map<CharSequence, CharSequence> headers;
 
-    @CommandLine.Option(names = {"--user"}, description = "<user:password> Server user and password")
+    @CommandLine.Option(names = {"--user"}, paramLabel = "<user:password>", description = "Server user and password")
     protected String user;
 
-    public AbstractApiCommand(boolean withServer) {
-        super(withServer);
+    @CommandLine.Option(names = {"--tenant"}, description = "Tenant identifier (EE only)")
+    protected String tenantId;
+
+    @CommandLine.Option(names = {"--api-token"}, description = "API Token (EE only).")
+    protected String apiToken;
+
+    @Inject
+    @Named("remote-api")
+    @Nullable
+    private HttpClientConfiguration httpClientConfiguration;
+
+    /**
+     * {@inheritDoc}
+     */
+    protected boolean loadExternalPlugins() {
+        return false;
     }
 
-    protected DefaultHttpClient client() {
-        return new DefaultHttpClient(server);
+    protected DefaultHttpClient client() throws URISyntaxException {
+        DefaultHttpClient defaultHttpClient = DefaultHttpClient.builder()
+            .uri(server.toURI())
+            .configuration(httpClientConfiguration != null ? httpClientConfiguration : new DefaultHttpClientConfiguration())
+            .build();
+        MessageBodyHandlerRegistry defaultHandlerRegistry = defaultHttpClient.getHandlerRegistry();
+        if (defaultHandlerRegistry instanceof ContextlessMessageBodyHandlerRegistry modifiableRegistry) {
+            modifiableRegistry.add(MediaType.TEXT_JSON_TYPE, new NettyJsonHandler<>(JsonMapper.createDefault()));
+        }
+        return defaultHttpClient;
     }
 
     protected <T> HttpRequest<T> requestOptions(MutableHttpRequest<T> request) {
@@ -35,12 +71,32 @@ public abstract class AbstractApiCommand extends AbstractCommand {
 
         if (this.user != null) {
             List<String> split = Arrays.asList(this.user.split(":"));
-            String user = split.get(0);
+            String user = split.getFirst();
             String password = String.join(":", split.subList(1, split.size()));
 
             request.basicAuth(user, password);
         }
 
+        if (this.apiToken != null) {
+            request.header(HttpHeaders.AUTHORIZATION, "Bearer " + apiToken);
+        }
+
         return request;
     }
+
+    protected String apiUri(String path, String tenantId) {
+        if (path == null || !path.startsWith("/")) {
+            throw new IllegalArgumentException("'path' must be non-null and start with '/'");
+        }
+
+        return "/api/v1/" + tenantId + path;
+    }
+
+    @Builder
+    @Value
+    @Jacksonized
+    public static class UpdateResult {
+        String id;
+        String namespace;
+    }
 }

cli/src/main/java/io/kestra/cli/AbstractCommand.java

@@ -2,16 +2,19 @@ package io.kestra.cli;
 
 import ch.qos.logback.classic.LoggerContext;
 import com.google.common.collect.ImmutableMap;
+import io.kestra.cli.commands.servers.ServerCommandInterface;
+import io.kestra.cli.services.StartupHookInterface;
+import io.kestra.core.plugins.PluginManager;
+import io.kestra.core.plugins.PluginRegistry;
+import io.kestra.webserver.services.FlowAutoLoaderService;
 import io.micronaut.context.ApplicationContext;
 import io.micronaut.context.env.yaml.YamlPropertySourceLoader;
+import io.micronaut.core.annotation.Introspected;
+import io.micronaut.http.uri.UriBuilder;
 import io.micronaut.management.endpoint.EndpointDefaultConfiguration;
 import io.micronaut.runtime.server.EmbeddedServer;
+import jakarta.inject.Provider;
 import lombok.extern.slf4j.Slf4j;
-import org.apache.http.client.utils.URIBuilder;
-import io.kestra.core.contexts.KestraClassLoader;
-import io.kestra.core.plugins.PluginRegistry;
-import io.kestra.core.plugins.PluginScanner;
-import io.kestra.core.plugins.RegisteredPlugin;
 import io.kestra.core.utils.Rethrow;
 import picocli.CommandLine;
 
@@ -22,38 +25,56 @@ import java.net.URISyntaxException;
 import java.nio.file.Path;
 import java.nio.file.Paths;
 import java.text.MessageFormat;
-import java.util.List;
+import java.time.temporal.ChronoUnit;
 import java.util.Map;
+import java.util.Optional;
 import java.util.concurrent.Callable;
-import javax.inject.Inject;
+import jakarta.inject.Inject;
+import picocli.CommandLine.Command;
+import picocli.CommandLine.Option;
 
-@CommandLine.Command(
-    mixinStandardHelpOptions = true
+@Command(
+    versionProvider = VersionProvider.class,
+    mixinStandardHelpOptions = true,
+    showDefaultValues = true
 )
 @Slf4j
-abstract public class AbstractCommand implements Callable<Integer> {
-    private final boolean withServer;
-
+@Introspected
+public abstract class AbstractCommand implements Callable<Integer> {
     @Inject
     private ApplicationContext applicationContext;
 
     @Inject
     private EndpointDefaultConfiguration endpointConfiguration;
 
-    @CommandLine.Option(names = {"-v", "--verbose"}, description = "Change log level. Multiple -v options increase the verbosity.")
+    @Inject
+    private StartupHookInterface startupHook;
+
+    @Inject
+    private io.kestra.core.utils.VersionProvider versionProvider;
+
+    @Inject
+    protected Provider<PluginRegistry> pluginRegistryProvider;
+
+    @Inject
+    protected Provider<PluginManager> pluginManagerProvider;
+
+    private PluginRegistry pluginRegistry;
+
+    @Option(names = {"-v", "--verbose"}, description = "Change log level. Multiple -v options increase the verbosity.", showDefaultValue = CommandLine.Help.Visibility.NEVER)
     private boolean[] verbose = new boolean[0];
 
-    @CommandLine.Option(names = {"-l", "--log-level"}, description = "Change log level (values: ${COMPLETION-CANDIDATES}; default: ${DEFAULT-VALUE})")
+    @Option(names = {"-l", "--log-level"}, description = "Change log level (values: ${COMPLETION-CANDIDATES})")
     private LogLevel logLevel = LogLevel.INFO;
 
-    @CommandLine.Option(names = {"--internal-log"}, description = "Change also log level for internal log, default: ${DEFAULT-VALUE})")
+    @Option(names = {"--internal-log"}, description = "Change also log level for internal log")
     private boolean internalLog = false;
 
-    @CommandLine.Option(names = {"-c", "--config"}, description = "Path to a configuration file, default: ${DEFAULT-VALUE})")
+    @Option(names = {"-c", "--config"}, description = "Path to a configuration file")
     private Path config = Paths.get(System.getProperty("user.home"), ".kestra/config.yml");
 
-    @CommandLine.Option(names = {"-p", "--plugins"}, description = "Path to plugins directory , default: ${DEFAULT-VALUE})")
-    protected Path pluginsPath = System.getenv("KESTRA_PLUGINS_PATH") != null ? Paths.get(System.getenv("KESTRA_PLUGINS_PATH")) : null;
+    @Option(names = {"-p", "--plugins"}, description = "Path to plugins directory")
+    protected Path pluginsPath = Optional.ofNullable(System.getenv("KESTRA_PLUGINS_PATH")).map(Paths::get).orElse(null);
 
     public enum LogLevel {
         TRACE,
@@ -63,20 +84,51 @@ abstract public class AbstractCommand implements Callable<Integer> {
         ERROR
     }
 
-    public AbstractCommand(boolean withServer) {
-        this.withServer = withServer;
-    }
-
     @Override
     public Integer call() throws Exception {
-        Thread.currentThread().setName(this.getClass().getDeclaredAnnotation(CommandLine.Command.class).name());
+        Thread.currentThread().setName(this.getClass().getDeclaredAnnotation(Command.class).name());
         startLogger();
         sendServerLog();
-        startWebserver();
+        if (this.startupHook != null) {
+            this.startupHook.start(this);
+        }
 
+        if (pluginRegistryProvider != null && this.pluginsPath != null && loadExternalPlugins()) {
+            pluginRegistry = pluginRegistryProvider.get();
+            pluginRegistry.registerIfAbsent(pluginsPath);
+
+            // PluginManager mus only be initialized if a registry is also instantiated
+            if (isPluginManagerEnabled()) {
+                PluginManager manager = pluginManagerProvider.get();
+                manager.start();
+            }
+        }
+
+        startWebserver();
         return 0;
     }
 
+    /**
+     * Specifies whether external plugins must be loaded.
+     * This method can be overridden by concrete commands.
+     *
+     * @return {@code true} if external plugins must be loaded.
+     */
+    protected boolean loadExternalPlugins() {
+        return true;
+    }
+
+    /**
+     * Specifies whether the {@link PluginManager} service must be initialized.
+     * <p>
+     * This method can be overridden by concrete commands.
+     *
+     * @return {@code true} if the {@link PluginManager} service must be initialized.
+     */
+    protected boolean isPluginManagerEnabled() {
+        return true;
+    }
+
     private static String message(String message, Object... format) {
         return CommandLine.Help.Ansi.AUTO.string(
             format.length == 0 ? message : MessageFormat.format(message, format)
@@ -98,8 +150,25 @@ abstract public class AbstractCommand implements Callable<Integer> {
             this.logLevel = LogLevel.TRACE;
         }
 
-        if (this.withServer) {
-            log.info("Starting Kestra with environments {}", applicationContext.getEnvironment().getActiveNames());
+
+        if (this instanceof ServerCommandInterface) {
+            String buildInfo = "";
+            if (versionProvider.getRevision() != null) {
+                buildInfo += " [revision " + versionProvider.getRevision();
+
+                if (versionProvider.getDate() != null) {
+                    buildInfo += " / " + versionProvider.getDate().toLocalDateTime().truncatedTo(ChronoUnit.MINUTES);
+                }
+
+                buildInfo += "]";
+            }
+
+            log.info(
+                "Starting Kestra {} with environments {}{}",
+                versionProvider.getVersion(),
+                applicationContext.getEnvironment().getActiveNames(),
+                buildInfo
+            );
         }
 
         ((LoggerContext) org.slf4j.LoggerFactory.getILoggerFactory())
@@ -109,9 +178,8 @@ abstract public class AbstractCommand implements Callable<Integer> {
                 (
                     this.internalLog && (
                         logger.getName().startsWith("io.kestra") &&
-                            !logger.getName().startsWith("io.kestra.runner.kafka.services"))
+                            !logger.getName().startsWith("io.kestra.ee.runner.kafka.services"))
                 )
-                    || logger.getName().startsWith("flow")
             )
             .forEach(
                 logger -> logger.setLevel(ch.qos.logback.classic.Level.valueOf(this.logLevel.name()))
@@ -119,16 +187,13 @@ abstract public class AbstractCommand implements Callable<Integer> {
     }
 
     private void sendServerLog() {
-        if (log.isTraceEnabled() && KestraClassLoader.instance().getPluginRegistry() != null) {
-            KestraClassLoader.instance()
-                .getPluginRegistry()
-                .getPlugins()
-                .forEach(c -> log.trace(c.toString()));
+        if (log.isTraceEnabled() && pluginRegistry != null) {
+            pluginRegistry.plugins().forEach(c -> log.trace(c.toString()));
         }
     }
 
     private void startWebserver() {
-        if (!this.withServer) {
+        if (!(this instanceof ServerCommandInterface)) {
             return;
         }
 
@@ -140,9 +205,9 @@ abstract public class AbstractCommand implements Callable<Integer> {
                 if (this.endpointConfiguration.getPort().isPresent()) {
                     URI endpoint = null;
                     try {
-                        endpoint = new URIBuilder(server.getURL().toURI())
-                            .setPort(this.endpointConfiguration.getPort().get())
-                            .setPath("/health")
+                        endpoint = UriBuilder.of(server.getURL().toURI())
+                            .port(this.endpointConfiguration.getPort().get())
+                            .path("/health")
                             .build();
                     } catch (URISyntaxException e) {
                         e.printStackTrace();
@@ -151,19 +216,33 @@ abstract public class AbstractCommand implements Callable<Integer> {
                 } else {
                     log.info("Server Running: {}", server.getURL());
                 }
+
+                if (isFlowAutoLoadEnabled()) {
+                    applicationContext
+                        .findBean(FlowAutoLoaderService.class)
+                        .ifPresent(FlowAutoLoaderService::load);
+                }
             });
     }
 
-    protected void shutdownHook(Rethrow.RunnableChecked<Exception> run) {
-        Runtime.getRuntime().addShutdownHook(new Thread(() -> {
-            log.warn("Receiving shutdown ! Try to graceful exit");
+    public boolean isFlowAutoLoadEnabled() {
+        return false;
+    }
 
-            try {
-                run.run();
-            } catch (Exception e) {
-                log.error("Failed to close gracefully!", e);
-            }
-        }));
+    protected void shutdownHook(boolean logShutdown, Rethrow.RunnableChecked<Exception> run) {
+        Runtime.getRuntime().addShutdownHook(new Thread(
+            () -> {
+                if (logShutdown) {
+                    log.warn("Receiving shutdown ! Try to graceful exit");
+                }
+                try {
+                    run.run();
+                } catch (Exception e) {
+                    log.error("Failed to close gracefully!", e);
+                }
+            },
+            "command-shutdown"
+        ));
     }
 
     @SuppressWarnings({"unused"})
@@ -180,19 +259,4 @@ abstract public class AbstractCommand implements Callable<Integer> {
 
         return ImmutableMap.of();
     }
-
-    @SuppressWarnings("unused")
-    public PluginRegistry initPluginRegistry() {
-        if (this.pluginsPath == null || !this.pluginsPath.toFile().exists()) {
-            return null;
-        }
-
-        PluginScanner pluginScanner = new PluginScanner(KestraClassLoader.instance());
-        List<RegisteredPlugin> scan = pluginScanner.scan(this.pluginsPath);
-
-        PluginRegistry pluginRegistry = new PluginRegistry(scan);
-        KestraClassLoader.instance().setPluginRegistry(pluginRegistry);
-
-        return pluginRegistry;
-    }
 }

cli/src/main/java/io/kestra/cli/AbstractValidateCommand.java

@@ -0,0 +1,146 @@
+package io.kestra.cli;
+
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.models.validations.ModelValidator;
+import io.kestra.core.models.validations.ValidateConstraintViolation;
+import io.kestra.core.serializers.YamlParser;
+import io.micronaut.core.type.Argument;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import picocli.CommandLine;
+
+import java.io.IOException;
+import java.nio.charset.Charset;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+import java.util.concurrent.atomic.AtomicInteger;
+import java.util.function.Function;
+import java.util.stream.Collectors;
+import jakarta.validation.ConstraintViolationException;
+
+import static io.kestra.core.utils.Rethrow.throwConsumer;
+import static io.kestra.core.utils.Rethrow.throwFunction;
+
+public abstract class AbstractValidateCommand extends AbstractApiCommand {
+    @CommandLine.Option(names = {"--local"}, description = "If validation should be done locally or using a remote server", defaultValue = "false")
+    protected boolean local;
+
+    @CommandLine.Parameters(index = "0", description = "the directory containing files to check")
+    protected Path directory;
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    /** {@inheritDoc} **/
+    @Override
+    protected boolean loadExternalPlugins() {
+        return local;
+    }
+
+    public static void handleException(ConstraintViolationException e, String resource) {
+        stdErr("\t@|fg(red) Unable to parse {0} due to the following error(s):|@", resource);
+        e.getConstraintViolations()
+            .forEach(constraintViolation -> {
+                stdErr(
+                    "\t- @|bold,yellow {0} : {1} |@",
+                    constraintViolation.getMessage().replace("\n"," - "),
+                    constraintViolation.getPropertyPath()
+                );
+            });
+    }
+
+    public static void handleHttpException(HttpClientResponseException e, String resource) {
+        stdErr("\t@|fg(red) Unable to parse {0}s due to the following error:|@", resource);
+        stdErr(
+            "\t- @|bold,yellow {0}|@",
+            e.getMessage()
+        );
+    }
+
+    public static void handleValidateConstraintViolation(ValidateConstraintViolation validateConstraintViolation, String resource){
+        stdErr("\t@|fg(red) Unable to parse {0}s due to the following error:|@", resource);
+        stdErr(
+            "\t- @|bold,yellow {0}|@",
+            validateConstraintViolation.getConstraints()
+        );
+    }
+
+    public static String buildYamlBody(Path directory) throws IOException {
+        try(var files = Files.walk(directory)) {
+            return files.filter(Files::isRegularFile)
+                .filter(YamlParser::isValidExtension)
+                .map(throwFunction(path -> Files.readString(path, Charset.defaultCharset())))
+                .collect(Collectors.joining("\n---\n"));
+        }
+    }
+
+    // bug in micronaut, we can't inject ModelValidator, so we inject from implementation
+    public Integer call(
+        Class<?> cls,
+        ModelValidator modelValidator,
+        Function<Object, String> identity,
+        Function<Object, List<String>> warningsFunction,
+        Function<Object, List<String>> infosFunction
+    ) throws Exception {
+        super.call();
+
+        AtomicInteger returnCode = new AtomicInteger(0);
+        String clsName = cls.getSimpleName().toLowerCase();
+
+        if(this.local) {
+            try(var files = Files.walk(directory)) {
+                files.filter(Files::isRegularFile)
+                    .filter(YamlParser::isValidExtension)
+                    .forEach(path -> {
+                        try {
+                            Object parse = YamlParser.parse(path.toFile(), cls);
+                            modelValidator.validate(parse);
+                            stdOut("@|green \u2713|@ - " + identity.apply(parse));
+                            List<String> warnings = warningsFunction.apply(parse);
+                            warnings.forEach(warning -> stdOut("@|bold,yellow \u26A0|@ - " + warning));
+                            List<String> infos = infosFunction.apply(parse);
+                            infos.forEach(info -> stdOut("@|bold,blue \u2139|@ - " + info));
+                        } catch (ConstraintViolationException e) {
+                            stdErr("@|red \u2718|@ - " + path);
+                            AbstractValidateCommand.handleException(e, clsName);
+                            returnCode.set(1);
+                        }
+                    });
+            }
+        } else {
+            String body = AbstractValidateCommand.buildYamlBody(directory);
+
+            try(DefaultHttpClient client = client()) {
+                MutableHttpRequest<String> request = HttpRequest
+                    .POST(apiUri("/flows/validate", tenantService.getTenantIdAndAllowEETenants(tenantId)), body).contentType(MediaType.APPLICATION_YAML);
+
+                List<ValidateConstraintViolation> validations = client.toBlocking().retrieve(
+                    this.requestOptions(request),
+                    Argument.listOf(ValidateConstraintViolation.class)
+                );
+
+                validations
+                    .forEach(throwConsumer(validation -> {
+                        if (validation.getConstraints() == null) {
+                            stdOut("@|green \u2713|@ - " + validation.getIdentity());
+                        } else {
+                            stdErr("@|red \u2718|@ - " + validation.getIdentity(directory));
+                            AbstractValidateCommand.handleValidateConstraintViolation(validation, clsName);
+                            returnCode.set(1);
+                        }
+                    }));
+            } catch (HttpClientResponseException e){
+                AbstractValidateCommand.handleHttpException(e, clsName);
+
+                return 1;
+            }
+        }
+
+        return returnCode.get();
+    }
+}

cli/src/main/java/io/kestra/cli/App.java

@@ -1,22 +1,27 @@
 package io.kestra.cli;
 
-import io.micronaut.configuration.picocli.MicronautFactory;
-import io.micronaut.configuration.picocli.PicocliRunner;
-import io.micronaut.context.ApplicationContext;
-import io.micronaut.context.env.Environment;
 import io.kestra.cli.commands.configs.sys.ConfigCommand;
 import io.kestra.cli.commands.flows.FlowCommand;
+import io.kestra.cli.commands.migrations.MigrationCommand;
+import io.kestra.cli.commands.namespaces.NamespaceCommand;
 import io.kestra.cli.commands.plugins.PluginCommand;
 import io.kestra.cli.commands.servers.ServerCommand;
 import io.kestra.cli.commands.sys.SysCommand;
-import io.kestra.core.contexts.KestraApplicationContextBuilder;
-import io.kestra.core.contexts.KestraClassLoader;
+import io.micronaut.configuration.picocli.MicronautFactory;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import io.micronaut.context.ApplicationContext;
+import io.micronaut.context.ApplicationContextBuilder;
+import io.micronaut.context.env.Environment;
+import io.micronaut.core.annotation.Introspected;
 import org.slf4j.bridge.SLF4JBridgeHandler;
 import picocli.CommandLine;
 
+import java.lang.reflect.Field;
 import java.lang.reflect.InvocationTargetException;
 import java.lang.reflect.Method;
+import java.util.HashMap;
 import java.util.List;
+import java.util.Map;
 import java.util.Objects;
 import java.util.concurrent.Callable;
 
@@ -35,11 +40,14 @@ import java.util.concurrent.Callable;
         FlowCommand.class,
         SysCommand.class,
         ConfigCommand.class,
+        NamespaceCommand.class,
+        MigrationCommand.class
     }
 )
+@Introspected
 public class App implements Callable<Integer> {
     public static void main(String[] args) {
-        execute(App.class, args);
+        execute(App.class, new String [] { Environment.CLI }, args);
     }
 
     @Override
@@ -47,26 +55,30 @@ public class App implements Callable<Integer> {
         return PicocliRunner.call(App.class, "--help");
     }
 
-    protected static void execute(Class<?> cls, String... args) {
+    protected static void execute(Class<?> cls, String[] environments, String... args) {
         // Log Bridge
         SLF4JBridgeHandler.removeHandlersForRootLogger();
         SLF4JBridgeHandler.install();
 
-        // Register a ClassLoader with isolation for plugins
-        Thread.currentThread().setContextClassLoader(KestraClassLoader.create(Thread.currentThread().getContextClassLoader()));
-
         // Init ApplicationContext
-        ApplicationContext applicationContext = App.applicationContext(cls, args);
+        ApplicationContext applicationContext = App.applicationContext(cls, environments, args);
 
         // Call Picocli command
-        int exitCode = new CommandLine(cls, new MicronautFactory(applicationContext)).execute(args);
-
+        int exitCode = 0;
+        try {
+             exitCode = new CommandLine(cls, new MicronautFactory(applicationContext)).execute(args);
+        } catch (CommandLine.InitializationException e){
+            System.err.println("Could not initialize picoli ComandLine, err: " + e.getMessage());
+            e.printStackTrace();
+            exitCode = 1;
+        }
         applicationContext.close();
 
         // exit code
         System.exit(Objects.requireNonNullElse(exitCode, 0));
     }
 
+
     /**
      * Create an {@link ApplicationContext} with additional properties based on configuration files (--config) and
      * forced Properties from current command.
@@ -74,34 +86,54 @@ public class App implements Callable<Integer> {
      * @param args args passed to java app
      * @return the application context created
      */
-    protected static ApplicationContext applicationContext(Class<?> mainClass, String[] args) {
-        KestraApplicationContextBuilder builder = new KestraApplicationContextBuilder()
+    protected static ApplicationContext applicationContext(Class<?> mainClass,
+                                                           String[] environments,
+                                                           String[] args) {
+
+        ApplicationContextBuilder builder = ApplicationContext
+            .builder()
             .mainClass(mainClass)
-            .environments(Environment.CLI)
-            .classLoader(KestraClassLoader.instance());
+            .environments(environments);
 
         CommandLine cmd = new CommandLine(mainClass, CommandLine.defaultFactory());
+        continueOnParsingErrors(cmd);
 
         CommandLine.ParseResult parseResult = cmd.parseArgs(args);
         List<CommandLine> parsedCommands = parseResult.asCommandLineList();
 
-        CommandLine commandLine = parsedCommands.get(parsedCommands.size() - 1);
+        CommandLine commandLine = parsedCommands.getLast();
         Class<?> cls = commandLine.getCommandSpec().userObject().getClass();
 
         if (AbstractCommand.class.isAssignableFrom(cls)) {
             // if class have propertiesFromConfig, add configuration files
             builder.properties(getPropertiesFromMethod(cls, "propertiesFromConfig", commandLine.getCommandSpec().userObject()));
 
+            Map<String, Object> properties = new HashMap<>();
+
             // if class have propertiesOverrides, add force properties for this class
-            builder.properties(getPropertiesFromMethod(cls, "propertiesOverrides", null));
+            Map<String, Object> propertiesOverrides = getPropertiesFromMethod(cls, "propertiesOverrides", null);
+            if (propertiesOverrides != null && isPracticalCommand(commandLine)) {
+                properties.putAll(propertiesOverrides);
+            }
 
-            // add plugins registry if plugin path defined
-            builder.pluginRegistry(getPropertiesFromMethod(cls, "initPluginRegistry", commandLine.getCommandSpec().userObject()));
+            // custom server configuration
+            commandLine
+                .getParseResult()
+                .matchedArgs()
+                .stream()
+                .filter(argSpec -> ((Field) argSpec.userObject()).getName().equals("serverPort"))
+                .findFirst()
+                .ifPresent(argSpec -> properties.put("micronaut.server.port", argSpec.getValue()));
+
+            builder.properties(properties);
         }
-
         return builder.build();
     }
 
+    private static void continueOnParsingErrors(CommandLine cmd) {
+        cmd.getCommandSpec().parser().collectErrors(true);
+    }
+
     @SuppressWarnings("unchecked")
     private static <T> T getPropertiesFromMethod(Class<?> cls, String methodName, Object instance) {
         try {
@@ -118,4 +150,12 @@ public class App implements Callable<Integer> {
 
         return null;
     }
+
+    /**
+     * @param commandLine parsed command
+     * @return false if the command is a help or version request, true otherwise
+     */
+    private static boolean isPracticalCommand(CommandLine commandLine) {
+        return !(commandLine.isUsageHelpRequested() || commandLine.isVersionHelpRequested());
+    }
 }

cli/src/main/java/io/kestra/cli/StandAloneRunner.java

@@ -0,0 +1,97 @@
+package io.kestra.cli;
+
+import io.kestra.core.runners.*;
+import io.kestra.core.server.Service;
+import io.kestra.core.utils.Await;
+import io.kestra.core.utils.ExecutorsUtils;
+import io.kestra.executor.DefaultExecutor;
+import io.kestra.worker.DefaultWorker;
+import io.micronaut.context.ApplicationContext;
+import io.micronaut.context.annotation.Value;
+import jakarta.annotation.PreDestroy;
+import jakarta.inject.Inject;
+import lombok.Setter;
+import lombok.extern.slf4j.Slf4j;
+
+import java.time.Duration;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Optional;
+import java.util.UUID;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.TimeoutException;
+import java.util.concurrent.atomic.AtomicBoolean;
+
+@SuppressWarnings("try")
+@Slf4j
+public class StandAloneRunner implements Runnable, AutoCloseable {
+    @Setter protected int workerThread = Math.max(3, Runtime.getRuntime().availableProcessors());
+    @Setter protected boolean schedulerEnabled = true;
+    @Setter protected boolean workerEnabled = true;
+    @Setter protected boolean indexerEnabled = true;
+
+    @Inject
+    private ExecutorsUtils executorsUtils;
+
+    @Inject
+    private ApplicationContext applicationContext;
+
+    @Value("${kestra.server.standalone.running.timeout:PT1M}")
+    private Duration runningTimeout;
+
+    private final List<Service> servers = new ArrayList<>();
+
+    private final AtomicBoolean running = new AtomicBoolean(false);
+
+    private ExecutorService poolExecutor;
+
+    @Override
+    public void run() {
+        running.set(true);
+
+        poolExecutor = executorsUtils.cachedThreadPool("standalone-runner");
+        poolExecutor.execute(applicationContext.getBean(DefaultExecutor.class));
+
+        if (workerEnabled) {
+            // FIXME: For backward-compatibility with Kestra 0.15.x and earliest we still used UUID for Worker ID instead of IdUtils
+            String workerID = UUID.randomUUID().toString();
+            Worker worker = applicationContext.createBean(DefaultWorker.class, workerID, workerThread, null);
+            applicationContext.registerSingleton(worker); //
+            poolExecutor.execute(worker);
+            servers.add(worker);
+        }
+
+        if (schedulerEnabled) {
+            Scheduler scheduler = applicationContext.getBean(Scheduler.class);
+            poolExecutor.execute(scheduler);
+            servers.add(scheduler);
+        }
+
+        if (indexerEnabled) {
+            Indexer indexer = applicationContext.getBean(Indexer.class);
+            poolExecutor.execute(indexer);
+            servers.add(indexer);
+        }
+
+        try {
+            Await.until(() -> servers.stream().allMatch(s -> Optional.ofNullable(s.getState()).orElse(Service.ServiceState.RUNNING).isRunning()), null, runningTimeout);
+        } catch (TimeoutException e) {
+            throw new RuntimeException(
+                servers.stream().filter(s -> !Optional.ofNullable(s.getState()).orElse(Service.ServiceState.RUNNING).isRunning())
+                    .map(Service::getClass)
+                    .toList() + " not started in time");
+        }
+    }
+
+    public boolean isRunning() {
+        return this.running.get();
+    }
+
+    @PreDestroy
+    @Override
+    public void close() throws Exception {
+        if (this.poolExecutor != null) {
+            this.poolExecutor.shutdown();
+        }
+    }
+}

cli/src/main/java/io/kestra/cli/VersionProvider.java

@@ -4,8 +4,8 @@ import io.micronaut.context.event.StartupEvent;
 import io.micronaut.runtime.event.annotation.EventListener;
 import picocli.CommandLine;
 
-import javax.inject.Inject;
-import javax.inject.Singleton;
+import jakarta.inject.Inject;
+import jakarta.inject.Singleton;
 
 class VersionProvider implements CommandLine.IVersionProvider {
     private static io.kestra.core.utils.VersionProvider versionProvider;

cli/src/main/java/io/kestra/cli/commands/AbstractServiceNamespaceUpdateCommand.java

@@ -0,0 +1,18 @@
+package io.kestra.cli.commands;
+
+import io.kestra.cli.AbstractApiCommand;
+import picocli.CommandLine;
+
+import java.nio.file.Path;
+
+public abstract class AbstractServiceNamespaceUpdateCommand extends AbstractApiCommand {
+    @CommandLine.Parameters(index = "0", description = "The namespace to update")
+    public String namespace;
+
+    @CommandLine.Parameters(index = "1", description = "The directory containing flow files for current namespace")
+    public Path directory;
+
+    @CommandLine.Option(names = {"--delete"}, negatable = true, description = "Whether missing should be deleted")
+    public boolean delete = false;
+
+}

cli/src/main/java/io/kestra/cli/commands/configs/sys/ConfigCommand.java

@@ -8,7 +8,7 @@ import picocli.CommandLine;
 
 @CommandLine.Command(
     name = "configs",
-    description = "handle configs",
+    description = "Manage configuration",
     mixinStandardHelpOptions = true,
     subcommands = {
         ConfigPropertiesCommand.class,
@@ -16,10 +16,6 @@ import picocli.CommandLine;
 )
 @Slf4j
 public class ConfigCommand extends AbstractCommand {
-    public ConfigCommand() {
-        super(false);
-    }
-
     @Override
     public Integer call() throws Exception {
         super.call();

cli/src/main/java/io/kestra/cli/commands/configs/sys/ConfigPropertiesCommand.java

@@ -1,33 +1,22 @@
 package io.kestra.cli.commands.configs.sys;
 
-import io.micronaut.context.ApplicationContext;
-import io.micronaut.context.env.Environment;
-import io.micronaut.context.env.PropertySource;
-import io.micronaut.core.order.Ordered;
-import io.micronaut.management.endpoint.env.EnvironmentEndpoint;
-import lombok.extern.slf4j.Slf4j;
 import io.kestra.cli.AbstractCommand;
 import io.kestra.core.serializers.JacksonMapper;
+import io.micronaut.context.ApplicationContext;
+import io.micronaut.management.endpoint.env.EnvironmentEndpoint;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
 import picocli.CommandLine;
 
-import java.util.*;
-import java.util.stream.Collectors;
-import java.util.stream.StreamSupport;
-import javax.inject.Inject;
-
 @CommandLine.Command(
     name = "properties",
-    description = {"Display actual configurations properties."}
+    description = {"Display current configuration properties."}
 )
 @Slf4j
 public class ConfigPropertiesCommand extends AbstractCommand {
     @Inject
     private ApplicationContext applicationContext;
 
-    public ConfigPropertiesCommand() {
-        super(false);
-    }
-
     @Override
     public Integer call() throws Exception {
         super.call();

cli/src/main/java/io/kestra/cli/commands/flows/FlowCommand.java

@@ -10,21 +10,20 @@ import picocli.CommandLine;
 
 @CommandLine.Command(
     name = "flow",
-    description = "handle flows",
+    description = "Manage flows",
     mixinStandardHelpOptions = true,
     subcommands = {
-        ValidateCommand.class,
+        FlowValidateCommand.class,
         FlowTestCommand.class,
         FlowNamespaceCommand.class,
-        FlowDotCommand.class
+        FlowDotCommand.class,
+        FlowExportCommand.class,
+        FlowUpdateCommand.class,
+        FlowUpdatesCommand.class
     }
 )
 @Slf4j
 public class FlowCommand extends AbstractCommand {
-    public FlowCommand() {
-        super(false);
-    }
-
     @SneakyThrows
     @Override
     public Integer call() throws Exception {

cli/src/main/java/io/kestra/cli/commands/flows/FlowCreateCommand.java

@@ -0,0 +1,64 @@
+package io.kestra.cli.commands.flows;
+
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+@CommandLine.Command(
+    name = "create",
+    description = "Create a single flow",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class FlowCreateCommand extends AbstractApiCommand {
+    @CommandLine.Parameters(index = "0", description = "The file containing the flow")
+    public Path flowFile;
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    @SuppressWarnings("deprecation")
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        checkFile();
+
+        String body = Files.readString(flowFile);
+
+        try(DefaultHttpClient client = client()) {
+            MutableHttpRequest<String> request = HttpRequest
+                .POST(apiUri("/flows", tenantService.getTenantId(tenantId)), body).contentType(MediaType.APPLICATION_YAML);
+
+            client.toBlocking().retrieve(
+                this.requestOptions(request),
+                String.class
+            );
+
+            stdOut("Flow successfully created !");
+        } catch (HttpClientResponseException e){
+            AbstractValidateCommand.handleHttpException(e, "flow");
+            return 1;
+        }
+
+
+        return 0;
+    }
+
+    protected void checkFile() {
+        if (!Files.isRegularFile(flowFile)) {
+            throw new IllegalArgumentException("The file '" + flowFile.toFile().getAbsolutePath() + "' is not a file");
+        }
+    }
+}

cli/src/main/java/io/kestra/cli/commands/flows/FlowDeleteCommand.java

@@ -0,0 +1,52 @@
+package io.kestra.cli.commands.flows;
+
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "delete",
+    description = "Delete a single flow",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class FlowDeleteCommand extends AbstractApiCommand {
+
+    @CommandLine.Parameters(index = "0", description = "The namespace of the flow")
+    public String namespace;
+
+    @CommandLine.Parameters(index = "1", description = "The ID of the flow")
+    public String id;
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    @SuppressWarnings("deprecation")
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        try(DefaultHttpClient client = client()) {
+            MutableHttpRequest<String> request = HttpRequest
+                .DELETE(apiUri("/flows/" + namespace + "/" + id, tenantService.getTenantId(tenantId)));
+
+            client.toBlocking().exchange(
+                this.requestOptions(request)
+            );
+
+            stdOut("Flow successfully deleted !");
+        } catch (HttpClientResponseException e){
+            AbstractValidateCommand.handleHttpException(e, "flow");
+            return 1;
+        }
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/flows/FlowDotCommand.java

@@ -3,40 +3,35 @@ package io.kestra.cli.commands.flows;
 import io.kestra.cli.AbstractCommand;
 import io.kestra.core.models.flows.Flow;
 import io.kestra.core.models.hierarchies.GraphCluster;
-import io.kestra.core.serializers.YamlFlowParser;
+import io.kestra.core.serializers.YamlParser;
 import io.kestra.core.services.Graph2DotService;
-import io.kestra.core.services.GraphService;
+import io.kestra.core.utils.GraphUtils;
 import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
 import lombok.extern.slf4j.Slf4j;
 import picocli.CommandLine;
 
 import java.nio.file.Path;
-import javax.inject.Inject;
 
 @CommandLine.Command(
     name = "dot",
-    description = "generate a dot graph from a file"
+    description = "Generate a DOT graph from a file"
 )
 @Slf4j
 public class FlowDotCommand extends AbstractCommand {
-    @CommandLine.Parameters(index = "0", description = "the flow file to display")
-    private Path file;
-
     @Inject
     private ApplicationContext applicationContext;
 
-    public FlowDotCommand() {
-        super(false);
-    }
+    @CommandLine.Parameters(index = "0", description = "The flow file to display")
+    private Path file;
 
     @Override
     public Integer call() throws Exception {
         super.call();
 
-        YamlFlowParser parser = applicationContext.getBean(YamlFlowParser.class);
-        Flow flow = parser.parse(file.toFile());
+        Flow flow = YamlParser.parse(file.toFile(), Flow.class);
 
-        GraphCluster graph = GraphService.of(flow, null);
+        GraphCluster graph = GraphUtils.of(flow, null);
 
         stdOut(Graph2DotService.dot(graph.getGraph()));
 

cli/src/main/java/io/kestra/cli/commands/flows/FlowExportCommand.java

@@ -0,0 +1,60 @@
+package io.kestra.cli.commands.flows;
+
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.HttpResponse;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+@CommandLine.Command(
+    name = "export",
+    description = "Export flows to a ZIP file",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class FlowExportCommand extends AbstractApiCommand {
+    private static final String DEFAULT_FILE_NAME = "flows.zip";
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    @CommandLine.Option(names = {"--namespace"}, description = "The namespace of flows to export")
+    public String namespace;
+
+    @CommandLine.Parameters(index = "0", description = "The directory to export the ZIP file to")
+    public Path directory;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        try(DefaultHttpClient client = client()) {
+            MutableHttpRequest<Object> request = HttpRequest
+                .GET(apiUri("/flows/export/by-query", tenantService.getTenantId(tenantId)) + (namespace != null ? "?namespace=" + namespace : ""))
+                .accept(MediaType.APPLICATION_OCTET_STREAM);
+
+            HttpResponse<byte[]> response = client.toBlocking().exchange(this.requestOptions(request), byte[].class);
+            Path zipFile = Path.of(directory.toString(), DEFAULT_FILE_NAME);
+            zipFile.toFile().createNewFile();
+            Files.write(zipFile, response.body());
+
+            stdOut("Exporting flow(s) for namespace '" + namespace + "' successfully done !");
+        } catch (HttpClientResponseException e) {
+            AbstractValidateCommand.handleHttpException(e, "flow");
+            return 1;
+        }
+
+        return 0;
+    }
+
+}

cli/src/main/java/io/kestra/cli/commands/flows/FlowTestCommand.java

@@ -1,17 +1,19 @@
 package io.kestra.cli.commands.flows;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import io.micronaut.context.annotation.Prototype;
-import lombok.extern.slf4j.Slf4j;
-import org.apache.commons.io.FileUtils;
-import io.kestra.cli.AbstractCommand;
-import io.kestra.core.exceptions.MissingRequiredInput;
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
 import io.kestra.core.models.flows.Flow;
 import io.kestra.core.repositories.FlowRepositoryInterface;
 import io.kestra.core.repositories.LocalFlowRepositoryLoader;
+import io.kestra.core.runners.FlowInputOutput;
 import io.kestra.core.runners.RunnerUtils;
-import io.kestra.runner.memory.MemoryRunner;
+import io.kestra.cli.StandAloneRunner;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import jakarta.validation.ConstraintViolationException;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.io.FileUtils;
 import picocli.CommandLine;
 
 import java.io.IOException;
@@ -23,20 +25,22 @@ import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.concurrent.TimeoutException;
-import javax.inject.Inject;
 
 @CommandLine.Command(
     name = "test",
-    description = "test a flow"
+    description = "Test a flow"
 )
 @Slf4j
-public class FlowTestCommand extends AbstractCommand {
-    @CommandLine.Parameters(index = "0", description = "the flow file to test")
+public class FlowTestCommand extends AbstractApiCommand {
+    @Inject
+    private ApplicationContext applicationContext;
+
+    @CommandLine.Parameters(index = "0", description = "The flow file to test")
     private Path file;
 
     @CommandLine.Parameters(
         index = "1..*",
-        description = "the inputs to pass as key pair value separated by space, " +
+        description = "The inputs to pass as key pair value separated by space, " +
             "for input type file, you need to pass an absolute path."
     )
     private List<String> inputs = new ArrayList<>();
@@ -44,15 +48,8 @@ public class FlowTestCommand extends AbstractCommand {
     @CommandLine.Spec
     CommandLine.Model.CommandSpec spec;
 
-    @Inject
-    private ApplicationContext applicationContext;
-
     private static final SecureRandom random = new SecureRandom();
 
-    public FlowTestCommand() {
-        super(false);
-    }
-
     @SuppressWarnings("unused")
     public static Map<String, Object> propertiesOverrides() {
         return ImmutableMap.of(
@@ -75,12 +72,13 @@ public class FlowTestCommand extends AbstractCommand {
     public Integer call() throws Exception {
         super.call();
 
-        MemoryRunner runner = applicationContext.getBean(MemoryRunner.class);
         LocalFlowRepositoryLoader repositoryLoader = applicationContext.getBean(LocalFlowRepositoryLoader.class);
         FlowRepositoryInterface flowRepository = applicationContext.getBean(FlowRepositoryInterface.class);
+        FlowInputOutput flowInputOutput = applicationContext.getBean(FlowInputOutput.class);
         RunnerUtils runnerUtils = applicationContext.getBean(RunnerUtils.class);
+        TenantIdSelectorService tenantService =  applicationContext.getBean(TenantIdSelectorService.class);
 
-        Map<String, String> inputs = new HashMap<>();
+        Map<String, Object> inputs = new HashMap<>();
 
         for (int i = 0; i < this.inputs.size(); i=i+2) {
             if (this.inputs.size() <= i + 1) {
@@ -90,23 +88,21 @@ public class FlowTestCommand extends AbstractCommand {
             inputs.put(this.inputs.get(i), this.inputs.get(i+1));
         }
 
-        try {
+        try (StandAloneRunner runner = applicationContext.createBean(StandAloneRunner.class);){
             runner.run();
-            repositoryLoader.load(file.toFile());
+            repositoryLoader.load(tenantService.getTenantId(tenantId), file.toFile());
 
-            List<Flow> all = flowRepository.findAll();
+            List<Flow> all = flowRepository.findAllForAllTenants();
             if (all.size() != 1) {
                 throw new IllegalArgumentException("Too many flow found, need 1, found " + all.size());
             }
 
             runnerUtils.runOne(
-                all.get(0),
-                (flow, execution) -> runnerUtils.typedInputs(flow, execution, inputs),
+                all.getFirst(),
+                (flow, execution) -> flowInputOutput.readExecutionInputs(flow, execution, inputs),
                 Duration.ofHours(1)
             );
-
-            runner.close();
-        } catch (MissingRequiredInput e) {
+        } catch (ConstraintViolationException e) {
             throw new CommandLine.ParameterException(this.spec.commandLine(), e.getMessage());
         } catch (IOException | TimeoutException e) {
             throw new IllegalStateException(e);

cli/src/main/java/io/kestra/cli/commands/flows/FlowUpdateCommand.java

@@ -0,0 +1,69 @@
+package io.kestra.cli.commands.flows;
+
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+@CommandLine.Command(
+    name = "update",
+    description = "Update a single flow",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class FlowUpdateCommand extends AbstractApiCommand {
+    @CommandLine.Parameters(index = "0", description = "The file containing the flow")
+    public Path flowFile;
+
+    @CommandLine.Parameters(index = "1", description = "The namespace of the flow")
+    public String namespace;
+
+    @CommandLine.Parameters(index = "2", description = "The ID of the flow")
+    public String id;
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    @SuppressWarnings("deprecation")
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        checkFile();
+
+        String body = Files.readString(flowFile);
+
+        try(DefaultHttpClient client = client()) {
+            MutableHttpRequest<String> request = HttpRequest
+                .PUT(apiUri("/flows/" + namespace + "/" + id, tenantService.getTenantId(tenantId)), body).contentType(MediaType.APPLICATION_YAML);
+
+            client.toBlocking().retrieve(
+                this.requestOptions(request),
+                String.class
+            );
+
+            stdOut("Flow successfully updated !");
+        } catch (HttpClientResponseException e){
+            AbstractValidateCommand.handleHttpException(e, "flow");
+            return 1;
+        }
+
+        return 0;
+    }
+
+    protected void checkFile() {
+        if (!Files.isRegularFile(flowFile)) {
+            throw new IllegalArgumentException("The file '" + flowFile.toFile().getAbsolutePath() + "' is not a file");
+        }
+    }
+}

cli/src/main/java/io/kestra/cli/commands/flows/FlowUpdatesCommand.java

@@ -0,0 +1,95 @@
+package io.kestra.cli.commands.flows;
+
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.serializers.YamlParser;
+import io.micronaut.core.type.Argument;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import jakarta.validation.ConstraintViolationException;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.io.IOException;
+import java.nio.charset.Charset;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+
+import static io.kestra.core.utils.Rethrow.throwFunction;
+
+@CommandLine.Command(
+    name = "updates",
+    description = "Create or update flows from a folder, and optionally delete the ones not present",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class FlowUpdatesCommand extends AbstractApiCommand {
+
+    @CommandLine.Parameters(index = "0", description = "The directory containing files")
+    public Path directory;
+
+    @CommandLine.Option(names = {"--delete"}, negatable = true, description = "Whether missing should be deleted")
+    public boolean delete = false;
+
+    @CommandLine.Option(names = {"--namespace"}, description = "The parent namespace of the flows, if not set, every namespace are allowed.")
+    public String namespace;
+
+    @Inject
+    private TenantIdSelectorService tenantIdSelectorService;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        try (var files = Files.walk(directory)) {
+            List<String> flows = files
+                .filter(Files::isRegularFile)
+                .filter(YamlParser::isValidExtension)
+                .map(throwFunction(path -> Files.readString(path, Charset.defaultCharset())))
+                .toList();
+
+            String body = "";
+            if (flows.isEmpty()) {
+                stdOut("No flow found on '{}'", directory.toFile().getAbsolutePath());
+            } else {
+                body = String.join("\n---\n", flows);
+            }
+            try(DefaultHttpClient client = client()) {
+                String namespaceQuery = "";
+                if (namespace != null) {
+                    namespaceQuery = "&namespace=" + namespace;
+                }
+                MutableHttpRequest<String> request = HttpRequest
+                    .POST(apiUri("/flows/bulk", tenantIdSelectorService.getTenantId(tenantId)) + "?allowNamespaceChild=true&delete=" + delete + namespaceQuery, body).contentType(MediaType.APPLICATION_YAML);
+
+                List<UpdateResult> updated = client.toBlocking().retrieve(
+                    this.requestOptions(request),
+                    Argument.listOf(UpdateResult.class)
+                );
+
+                stdOut(updated.size() + " flow(s) successfully updated !");
+                updated.forEach(flow -> stdOut("- " + flow.getNamespace() + "."  + flow.getId()));
+            } catch (HttpClientResponseException e){
+                AbstractValidateCommand.handleHttpException(e, "flow");
+                return 1;
+            }
+        } catch (ConstraintViolationException e) {
+            AbstractValidateCommand.handleException(e, "flow");
+
+            return 1;
+        }
+
+        return 0;
+    }
+
+    @Override
+    protected boolean loadExternalPlugins() {
+        return false;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/flows/FlowValidateCommand.java

@@ -0,0 +1,52 @@
+package io.kestra.cli.commands.flows;
+
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.models.flows.FlowWithSource;
+import io.kestra.core.models.validations.ModelValidator;
+import io.kestra.core.services.FlowService;
+import jakarta.inject.Inject;
+import picocli.CommandLine;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@CommandLine.Command(
+    name = "validate",
+    description = "Validate a flow"
+)
+public class FlowValidateCommand extends AbstractValidateCommand {
+
+    @Inject
+    private ModelValidator modelValidator;
+
+    @Inject
+    private FlowService flowService;
+
+    @Inject
+    private TenantIdSelectorService tenantIdSelectorService;
+
+
+    @Override
+    public Integer call() throws Exception {
+        return this.call(
+            FlowWithSource.class,
+            modelValidator,
+            (Object object) -> {
+                FlowWithSource flow = (FlowWithSource) object;
+                return flow.getNamespace() + " / " + flow.getId();
+            },
+            (Object object) -> {
+                FlowWithSource flow = (FlowWithSource) object;
+                List<String> warnings = new ArrayList<>();
+                warnings.addAll(flowService.deprecationPaths(flow).stream().map(deprecation -> deprecation + " is deprecated").toList());
+                warnings.addAll(flowService.warnings(flow, tenantIdSelectorService.getTenantIdAndAllowEETenants(tenantId)));
+                return warnings;
+            },
+            (Object object) -> {
+                FlowWithSource flow = (FlowWithSource) object;
+                return flowService.relocations(flow.sourceOrGenerateIfNull()).stream().map(relocation -> relocation.from() + " is replaced by " + relocation.to()).toList();
+            }
+        );
+    }
+}

cli/src/main/java/io/kestra/cli/commands/flows/ValidateCommand.java

@@ -1,59 +0,0 @@
-package io.kestra.cli.commands.flows;
-
-import com.fasterxml.jackson.databind.ObjectMapper;
-import io.kestra.cli.AbstractCommand;
-import io.kestra.core.models.flows.Flow;
-import io.kestra.core.serializers.JacksonMapper;
-import io.kestra.core.serializers.YamlFlowParser;
-import picocli.CommandLine;
-
-import java.nio.file.Path;
-import javax.inject.Inject;
-import javax.validation.ConstraintViolationException;
-
-@CommandLine.Command(
-    name = "validate",
-    description = "validate a flow"
-)
-public class ValidateCommand extends AbstractCommand {
-    private static final ObjectMapper mapper = JacksonMapper.ofYaml();
-
-    @Inject
-    private YamlFlowParser yamlFlowParser;
-
-    @CommandLine.Parameters(index = "0", description = "the flow file to test")
-    private Path file;
-
-    public ValidateCommand() {
-        super(false);
-    }
-
-    @Override
-    public Integer call() throws Exception {
-        super.call();
-
-        try {
-            Flow parse = yamlFlowParser.parse(file.toFile());
-            stdOut(mapper.writeValueAsString(parse));
-        } catch (ConstraintViolationException e) {
-            ValidateCommand.handleException(e);
-
-            return 1;
-        }
-
-        return 0;
-    }
-
-    public static void handleException(ConstraintViolationException e) {
-        stdErr("@|fg(red) Unable to parse flow due to the following error(s):|@");
-        e.getConstraintViolations()
-            .forEach(constraintViolation -> {
-                stdErr(
-                    "- {0} at @|underline,blue {1}|@ with value @|bold,yellow {2}|@ ",
-                    constraintViolation.getMessage(),
-                    constraintViolation.getPropertyPath(),
-                    constraintViolation.getInvalidValue()
-                );
-            });
-    }
-}

cli/src/main/java/io/kestra/cli/commands/flows/namespaces/FlowNamespaceCommand.java

@@ -1,12 +1,15 @@
 package io.kestra.cli.commands.flows.namespaces;
 
+import io.kestra.cli.App;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
 import lombok.extern.slf4j.Slf4j;
 import io.kestra.cli.AbstractCommand;
 import picocli.CommandLine;
 
 @CommandLine.Command(
     name = "namespace",
-    description = "handle namespace flows",
+    description = "Manage namespace flows",
     mixinStandardHelpOptions = true,
     subcommands = {
         FlowNamespaceUpdateCommand.class,
@@ -14,7 +17,13 @@ import picocli.CommandLine;
 )
 @Slf4j
 public class FlowNamespaceCommand extends AbstractCommand {
-    public FlowNamespaceCommand() {
-        super(false);
+    @SneakyThrows
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        PicocliRunner.call(App.class, "flow", "namespace",  "--help");
+
+        return 0;
     }
 }

cli/src/main/java/io/kestra/cli/commands/flows/namespaces/FlowNamespaceUpdateCommand.java

@@ -1,76 +1,79 @@
 package io.kestra.cli.commands.flows.namespaces;
 
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.commands.AbstractServiceNamespaceUpdateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.serializers.YamlParser;
 import io.micronaut.core.type.Argument;
 import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
 import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
 import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import jakarta.validation.ConstraintViolationException;
 import lombok.extern.slf4j.Slf4j;
-import org.apache.commons.io.FilenameUtils;
-import io.kestra.cli.AbstractApiCommand;
-import io.kestra.cli.commands.flows.ValidateCommand;
-import io.kestra.core.models.flows.Flow;
-import io.kestra.core.serializers.YamlFlowParser;
 import picocli.CommandLine;
 
+import java.io.IOException;
+import java.nio.charset.Charset;
 import java.nio.file.Files;
-import java.nio.file.Path;
 import java.util.List;
-import java.util.stream.Collectors;
-import javax.inject.Inject;
-import javax.validation.ConstraintViolationException;
 
 import static io.kestra.core.utils.Rethrow.throwFunction;
 
 @CommandLine.Command(
     name = "update",
-    description = "handle namespace flows",
+    description = "Update flows in namespace",
     mixinStandardHelpOptions = true
 )
 @Slf4j
-public class FlowNamespaceUpdateCommand extends AbstractApiCommand {
+public class FlowNamespaceUpdateCommand extends AbstractServiceNamespaceUpdateCommand {
+
+    @CommandLine.Option(names = {"--override-namespaces"}, negatable = true, description = "Replace namespace of all flows by the one provided")
+    public boolean override = false;
+
     @Inject
-    private YamlFlowParser yamlFlowParser;
-
-    @CommandLine.Parameters(index = "0", description = "the namespace of flow to update")
-    private String namespace;
-
-    @CommandLine.Parameters(index = "1", description = "the directory containing flows to from current namespace")
-    private Path directory;
-
-    public FlowNamespaceUpdateCommand() {
-        super(false);
-    }
+    private TenantIdSelectorService tenantService;
 
+    @SuppressWarnings("deprecation")
     @Override
     public Integer call() throws Exception {
         super.call();
 
-        try {
-            List<Flow> flows = Files.walk(directory)
+        try (var files = Files.walk(directory)) {
+            List<String> flows = files
                 .filter(Files::isRegularFile)
-                .filter(YamlFlowParser::isValidExtension)
-                .map(path -> yamlFlowParser.parse(path.toFile()))
-                .collect(Collectors.toList());
+                .filter(YamlParser::isValidExtension)
+                .map(throwFunction(path -> Files.readString(path, Charset.defaultCharset())))
+                .toList();
 
-            if (flows.size() == 0) {
-                stdErr("No flow found on '{}'", directory.toFile().getAbsolutePath());
-                return 1;
+            String body = "";
+            if (flows.isEmpty()) {
+                stdOut("No flow found on '{}'", directory.toFile().getAbsolutePath());
+            } else {
+                body = String.join("\n---\n", flows);
+            }
+            if (override) {
+                body = body.replaceAll("(?m)^namespace:.+", "namespace: " + namespace);
             }
-
             try(DefaultHttpClient client = client()) {
-                MutableHttpRequest<List<Flow>> request = HttpRequest
-                    .POST("/api/v1/flows/" + namespace, flows);
+                MutableHttpRequest<String> request = HttpRequest
+                    .POST(apiUri("/flows/", tenantService.getTenantIdAndAllowEETenants(tenantId)) + namespace + "?delete=" + delete, body).contentType(MediaType.APPLICATION_YAML);
 
-                List<Flow> updated = client.toBlocking().retrieve(
+                List<UpdateResult> updated = client.toBlocking().retrieve(
                     this.requestOptions(request),
-                    Argument.listOf(Flow.class)
+                    Argument.listOf(UpdateResult.class)
                 );
 
                 stdOut(updated.size() + " flow(s) for namespace '" + namespace + "' successfully updated !");
                 updated.forEach(flow -> stdOut("- " + flow.getNamespace() + "."  + flow.getId()));
+            } catch (HttpClientResponseException e){
+                AbstractValidateCommand.handleHttpException(e, "flow");
+                return 1;
             }
         } catch (ConstraintViolationException e) {
-            ValidateCommand.handleException(e);
+            AbstractValidateCommand.handleException(e, "flow");
 
             return 1;
         }

cli/src/main/java/io/kestra/cli/commands/migrations/MigrationCommand.java

@@ -0,0 +1,31 @@
+package io.kestra.cli.commands.migrations;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.cli.App;
+import io.kestra.cli.commands.migrations.metadata.MetadataMigrationCommand;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "migrate",
+    description = "handle migrations",
+    mixinStandardHelpOptions = true,
+    subcommands = {
+        TenantMigrationCommand.class,
+        MetadataMigrationCommand.class
+    }
+)
+@Slf4j
+public class MigrationCommand extends AbstractCommand {
+    @SneakyThrows
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        PicocliRunner.call(App.class, "migrate",  "--help");
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/migrations/TenantMigrationCommand.java

@@ -0,0 +1,49 @@
+package io.kestra.cli.commands.migrations;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.core.repositories.TenantMigrationInterface;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+import picocli.CommandLine.Option;
+
+@CommandLine.Command(
+    name = "default-tenant",
+    description = "migrate every elements from no tenant to the main tenant"
+)
+@Slf4j
+public class TenantMigrationCommand extends AbstractCommand {
+    @Inject
+    private ApplicationContext applicationContext;
+
+    @Option(names = "--tenant-id", description = "tenant identifier")
+    String tenantId;
+
+    @Option(names = "--tenant-name", description = "tenant name")
+    String tenantName;
+
+    @Option(names = "--dry-run", description = "Preview only, do not update")
+    boolean dryRun;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        if (dryRun) {
+            System.out.println("🧪 Dry-run mode enabled. No changes will be applied.");
+        }
+
+        TenantMigrationService migrationService = this.applicationContext.getBean(TenantMigrationService.class);
+        try {
+            migrationService.migrateTenant(tenantId, tenantName, dryRun);
+            System.out.println("✅ Tenant migration complete.");
+        } catch (Exception e) {
+            System.err.println("❌ Tenant migration failed: " + e.getMessage());
+            e.printStackTrace();
+            return 1;
+        }
+        return 0;
+    }
+
+}

cli/src/main/java/io/kestra/cli/commands/migrations/TenantMigrationService.java

@@ -0,0 +1,56 @@
+package io.kestra.cli.commands.migrations;
+
+import static io.kestra.core.tenant.TenantService.MAIN_TENANT;
+
+import com.github.javaparser.utils.Log;
+import io.kestra.core.exceptions.KestraRuntimeException;
+import io.kestra.core.models.flows.FlowInterface;
+import io.kestra.core.queues.QueueException;
+import io.kestra.core.queues.QueueFactoryInterface;
+import io.kestra.core.queues.QueueInterface;
+import io.kestra.core.repositories.FlowRepositoryInterface;
+import io.kestra.core.repositories.TenantMigrationInterface;
+import jakarta.inject.Inject;
+import jakarta.inject.Named;
+import jakarta.inject.Singleton;
+import lombok.extern.slf4j.Slf4j;
+import org.apache.commons.lang3.StringUtils;
+
+@Singleton
+@Slf4j
+public class TenantMigrationService {
+
+    @Inject
+    private TenantMigrationInterface tenantMigrationInterface;
+
+    @Inject
+    private FlowRepositoryInterface flowRepository;
+
+    @Inject
+    @Named(QueueFactoryInterface.FLOW_NAMED)
+    private QueueInterface<FlowInterface> flowQueue;
+
+    public void migrateTenant(String tenantId, String tenantName, boolean dryRun) {
+        if (StringUtils.isNotBlank(tenantId) && !MAIN_TENANT.equals(tenantId)){
+            throw new KestraRuntimeException("Tenant configuration is an enterprise feature. It can only be main in OSS");
+        }
+
+        Log.info("🔁 Starting tenant migration...");
+        tenantMigrationInterface.migrateTenant(MAIN_TENANT, dryRun);
+        migrateQueue(dryRun);
+    }
+
+    protected void migrateQueue(boolean dryRun) {
+        if (!dryRun){
+            log.info("🔁 Starting restoring queue...");
+            flowRepository.findAllWithSourceForAllTenants().forEach(flow -> {
+                try {
+                    flowQueue.emit(flow);
+                } catch (QueueException e) {
+                    log.warn("Unable to send the flow {} to the queue", flow.uid(), e);
+                }
+            });
+        }
+    }
+
+}

cli/src/main/java/io/kestra/cli/commands/migrations/metadata/KvMetadataMigrationCommand.java

@@ -0,0 +1,30 @@
+package io.kestra.cli.commands.migrations.metadata;
+
+import io.kestra.cli.AbstractCommand;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "kv",
+    description = "populate metadata for KV"
+)
+@Slf4j
+public class KvMetadataMigrationCommand extends AbstractCommand {
+    @Inject
+    private MetadataMigrationService metadataMigrationService;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+        try {
+            metadataMigrationService.kvMigration();
+        } catch (Exception e) {
+            System.err.println("❌ KV Metadata migration failed: " + e.getMessage());
+            e.printStackTrace();
+            return 1;
+        }
+        System.out.println("✅ KV Metadata migration complete.");
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/migrations/metadata/MetadataMigrationCommand.java

@@ -0,0 +1,23 @@
+package io.kestra.cli.commands.migrations.metadata;
+
+import io.kestra.cli.AbstractCommand;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "metadata",
+    description = "populate metadata for entities",
+    subcommands = {
+        KvMetadataMigrationCommand.class,
+        SecretsMetadataMigrationCommand.class
+    }
+)
+@Slf4j
+public class MetadataMigrationCommand extends AbstractCommand {
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/migrations/metadata/MetadataMigrationService.java

@@ -0,0 +1,89 @@
+package io.kestra.cli.commands.migrations.metadata;
+
+import io.kestra.core.models.kv.PersistedKvMetadata;
+import io.kestra.core.repositories.FlowRepositoryInterface;
+import io.kestra.core.repositories.KvMetadataRepositoryInterface;
+import io.kestra.core.storages.FileAttributes;
+import io.kestra.core.storages.StorageContext;
+import io.kestra.core.storages.StorageInterface;
+import io.kestra.core.storages.kv.InternalKVStore;
+import io.kestra.core.storages.kv.KVEntry;
+import io.kestra.core.tenant.TenantService;
+import jakarta.inject.Inject;
+import jakarta.inject.Singleton;
+
+import java.io.FileNotFoundException;
+import java.io.IOException;
+import java.net.URI;
+import java.time.Instant;
+import java.util.Collections;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.stream.Collectors;
+
+import static io.kestra.core.utils.Rethrow.throwConsumer;
+import static io.kestra.core.utils.Rethrow.throwFunction;
+
+@Singleton
+public class MetadataMigrationService {
+    @Inject
+    private TenantService tenantService;
+
+    @Inject
+    private FlowRepositoryInterface flowRepository;
+
+    @Inject
+    private KvMetadataRepositoryInterface kvMetadataRepository;
+
+    @Inject
+    private StorageInterface storageInterface;
+
+    protected Map<String, List<String>> namespacesPerTenant() {
+        String tenantId = tenantService.resolveTenant();
+        return Map.of(tenantId, flowRepository.findDistinctNamespace(tenantId));
+    }
+
+    public void kvMigration() throws IOException {
+        this.namespacesPerTenant().entrySet().stream()
+            .flatMap(namespacesForTenant -> namespacesForTenant.getValue().stream().map(namespace -> Map.entry(namespacesForTenant.getKey(), namespace)))
+            .flatMap(throwFunction(namespaceForTenant -> {
+                InternalKVStore kvStore = new InternalKVStore(namespaceForTenant.getKey(), namespaceForTenant.getValue(), storageInterface, kvMetadataRepository);
+                List<FileAttributes> list = listAllFromStorage(storageInterface, namespaceForTenant.getKey(), namespaceForTenant.getValue());
+                Map<Boolean, List<KVEntry>> entriesByIsExpired = list.stream()
+                    .map(throwFunction(fileAttributes -> KVEntry.from(namespaceForTenant.getValue(), fileAttributes)))
+                    .collect(Collectors.partitioningBy(kvEntry -> Optional.ofNullable(kvEntry.expirationDate()).map(expirationDate -> Instant.now().isAfter(expirationDate)).orElse(false)));
+
+                entriesByIsExpired.get(true).forEach(kvEntry -> {
+                    try {
+                        storageInterface.delete(
+                            namespaceForTenant.getKey(),
+                            namespaceForTenant.getValue(),
+                            kvStore.storageUri(kvEntry.key())
+                        );
+                    } catch (IOException e) {
+                        throw new RuntimeException(e);
+                    }
+                });
+
+                return entriesByIsExpired.get(false).stream().map(kvEntry -> PersistedKvMetadata.from(namespaceForTenant.getKey(), kvEntry));
+            }))
+            .forEach(throwConsumer(kvMetadata -> {
+                if (kvMetadataRepository.findByName(kvMetadata.getTenantId(), kvMetadata.getNamespace(), kvMetadata.getName()).isEmpty()) {
+                    kvMetadataRepository.save(kvMetadata);
+                }
+            }));
+    }
+
+    public void secretMigration() throws Exception {
+        throw new UnsupportedOperationException("Secret migration is not needed in the OSS version");
+    }
+
+    private static List<FileAttributes> listAllFromStorage(StorageInterface storage, String tenant, String namespace) throws IOException {
+        try {
+            return storage.list(tenant, namespace, URI.create(StorageContext.KESTRA_PROTOCOL + StorageContext.kvPrefix(namespace)));
+        } catch (FileNotFoundException e) {
+            return Collections.emptyList();
+        }
+    }
+}

cli/src/main/java/io/kestra/cli/commands/migrations/metadata/SecretsMetadataMigrationCommand.java

@@ -0,0 +1,30 @@
+package io.kestra.cli.commands.migrations.metadata;
+
+import io.kestra.cli.AbstractCommand;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "secrets",
+    description = "populate metadata for secrets"
+)
+@Slf4j
+public class SecretsMetadataMigrationCommand extends AbstractCommand {
+    @Inject
+    private MetadataMigrationService metadataMigrationService;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+        try {
+            metadataMigrationService.secretMigration();
+        } catch (Exception e) {
+            System.err.println("❌ Secrets Metadata migration failed: " + e.getMessage());
+            e.printStackTrace();
+            return 1;
+        }
+        System.out.println("✅ Secrets Metadata migration complete.");
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/namespaces/NamespaceCommand.java

@@ -0,0 +1,32 @@
+package io.kestra.cli.commands.namespaces;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.cli.App;
+import io.kestra.cli.commands.namespaces.files.NamespaceFilesCommand;
+import io.kestra.cli.commands.namespaces.kv.KvCommand;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "namespace",
+    description = "Manage namespaces",
+    mixinStandardHelpOptions = true,
+    subcommands = {
+        NamespaceFilesCommand.class,
+        KvCommand.class
+    }
+)
+@Slf4j
+public class NamespaceCommand extends AbstractCommand {
+    @SneakyThrows
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        PicocliRunner.call(App.class, "namespace", "--help");
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/namespaces/files/NamespaceFilesCommand.java

@@ -0,0 +1,29 @@
+package io.kestra.cli.commands.namespaces.files;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.cli.App;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "files",
+    description = "Manage namespace files",
+    mixinStandardHelpOptions = true,
+    subcommands = {
+        NamespaceFilesUpdateCommand.class,
+    }
+)
+@Slf4j
+public class NamespaceFilesCommand extends AbstractCommand {
+    @SneakyThrows
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        PicocliRunner.call(App.class, "namespace", "files",  "--help");
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/namespaces/files/NamespaceFilesUpdateCommand.java

@@ -0,0 +1,84 @@
+package io.kestra.cli.commands.namespaces.files;
+
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.AbstractValidateCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.utils.KestraIgnore;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.client.exceptions.HttpClientResponseException;
+import io.micronaut.http.client.multipart.MultipartBody;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+
+@CommandLine.Command(
+    name = "update",
+    description = "Update namespace files",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class NamespaceFilesUpdateCommand extends AbstractApiCommand {
+    @CommandLine.Parameters(index = "0", description = "The namespace to update")
+    public String namespace;
+
+    @CommandLine.Parameters(index = "1", description = "The local directory containing files for current namespace")
+    public Path from;
+
+    @CommandLine.Parameters(index = "2", description = "The remote namespace path to upload files to", defaultValue = "/")
+    public String to;
+
+    @CommandLine.Option(names = {"--delete"}, negatable = true, description = "Whether missing should be deleted")
+    public boolean delete = false;
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    private static final String KESTRA_IGNORE_FILE = ".kestraignore";
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+        to = to.startsWith("/") ? to : "/" + to;
+        to = to.endsWith("/") ? to : to + "/";
+
+        try (var files = Files.walk(from); DefaultHttpClient client = client()) {
+            if (delete) {
+                client.toBlocking().exchange(this.requestOptions(HttpRequest.DELETE(apiUri("/namespaces/", tenantService.getTenantIdAndAllowEETenants(tenantId)) + namespace + "/files?path=" + to, null)));
+            }
+
+            KestraIgnore kestraIgnore = new KestraIgnore(from);
+
+            List<Path> paths = files
+                .filter(Files::isRegularFile)
+                .filter(path -> !kestraIgnore.isIgnoredFile(path.toString(), true))
+                .toList();
+            paths.forEach(path -> {
+                MultipartBody body = MultipartBody.builder()
+                    .addPart("fileContent", path.toFile())
+                    .build();
+                String relativizedPath = from.relativize(path).toString();
+                String destination = to + relativizedPath;
+                client.toBlocking().exchange(
+                    this.requestOptions(
+                        HttpRequest.POST(
+                            apiUri("/namespaces/", tenantService.getTenantIdAndAllowEETenants(tenantId)) + namespace + "/files?path=" + destination,
+                            body
+                        ).contentType(MediaType.MULTIPART_FORM_DATA)
+                    )
+                );
+                stdOut("Successfully uploaded {0} to {1}", path.toString(), destination);
+            });
+        } catch (HttpClientResponseException e) {
+            AbstractValidateCommand.handleHttpException(e, "namespace");
+            return 1;
+        }
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/namespaces/kv/KvCommand.java

@@ -0,0 +1,29 @@
+package io.kestra.cli.commands.namespaces.kv;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.cli.App;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "kv",
+    description = "Manage KV Store",
+    mixinStandardHelpOptions = true,
+    subcommands = {
+        KvUpdateCommand.class,
+    }
+)
+@Slf4j
+public class KvCommand extends AbstractCommand {
+    @SneakyThrows
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        PicocliRunner.call(App.class, "namespace", "kv",  "--help");
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/namespaces/kv/KvUpdateCommand.java

@@ -0,0 +1,95 @@
+package io.kestra.cli.commands.namespaces.kv;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import io.kestra.cli.AbstractApiCommand;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.serializers.JacksonMapper;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.MediaType;
+import io.micronaut.http.MutableHttpRequest;
+import io.micronaut.http.client.netty.DefaultHttpClient;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+import picocli.CommandLine.Option;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.time.Duration;
+
+@CommandLine.Command(
+    name = "update",
+    description = "Update value for a KV Store key",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class KvUpdateCommand extends AbstractApiCommand {
+
+    @CommandLine.Parameters(index = "0", description = "The namespace to update")
+    public String namespace;
+
+    @CommandLine.Parameters(index = "1", description = "The key to update")
+    public String key;
+
+    @CommandLine.Parameters(index = "2", description = "The value to assign to the key. If the value is an object, it must be in JSON format. If the value must be read from file, use -f parameter.")
+    public String value;
+
+    @Option(names = {"-e", "--expiration"}, description = "The duration after which the key should expire.")
+    public String expiration;
+
+    @Option(names = {"-t", "--type"}, description = "The type of the value. Optional and useful to override the deduced type (eg. numbers, booleans or JSON as full string). Valid values: ${COMPLETION-CANDIDATES}.")
+    public Type type;
+
+    @Option(names = {"-f", "--file-value"}, description = "The file from which to read the value to set. If this is provided, it will take precedence over any specified value.")
+    public Path fileValue;
+
+    @Inject
+    private TenantIdSelectorService tenantService;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        if (fileValue != null) {
+            value = Files.readString(Path.of(fileValue.toString().trim()));
+        }
+
+        if (isLiteral(value) || type == Type.STRING) {
+            value = wrapAsJsonLiteral(value);
+        }
+
+        Duration ttl = expiration == null ? null : Duration.parse(expiration);
+        MutableHttpRequest<String> request = HttpRequest
+            .PUT(apiUri("/namespaces/", tenantService.getTenantId(tenantId)) + namespace + "/kv/" + key, value)
+            .contentType(MediaType.TEXT_PLAIN);
+
+        if (ttl != null) {
+            request.header("ttl", ttl.toString());
+        }
+
+        try (DefaultHttpClient client = client()) {
+            client.toBlocking().exchange(this.requestOptions(request));
+        }
+        return 0;
+    }
+
+    private static boolean isLiteral(final String input) {
+        // use ION mapper to properly handle timestamp
+        ObjectMapper mapper = JacksonMapper.ofIon();
+        try {
+            mapper.readTree(input);
+            return false;
+        } catch (JsonProcessingException e) {
+            return true;
+        }
+    }
+
+    public static String wrapAsJsonLiteral(final String input) {
+        return "\"" + input.replace("\"", "\\\"") + "\"";
+    }
+
+    enum Type {
+        STRING, NUMBER, BOOLEAN, DATETIME, DATE, DURATION, JSON;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/plugins/PluginCommand.java

@@ -1,35 +1,37 @@
 package io.kestra.cli.commands.plugins;
 
-import io.micronaut.configuration.picocli.PicocliRunner;
-import lombok.SneakyThrows;
-import lombok.extern.slf4j.Slf4j;
 import io.kestra.cli.AbstractCommand;
 import io.kestra.cli.App;
-import picocli.CommandLine;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
+import picocli.CommandLine.Command;
 
-@CommandLine.Command(
+@Command(
     name = "plugins",
-    description = "handle plugins",
+    description = "Manage plugins",
     mixinStandardHelpOptions = true,
     subcommands = {
         PluginInstallCommand.class,
+        PluginUninstallCommand.class,
         PluginListCommand.class,
-        PluginDocCommand.class
+        PluginDocCommand.class,
+        PluginSearchCommand.class
     }
 )
-@Slf4j
 public class PluginCommand extends AbstractCommand {
-    public PluginCommand() {
-        super(false);
-    }
 
     @SneakyThrows
     @Override
     public Integer call() throws Exception {
         super.call();
 
-        PicocliRunner.call(App.class, "plugins",  "--help");
+        PicocliRunner.call(App.class, "plugins", "--help");
 
         return 0;
     }
+
+    @Override
+    protected boolean loadExternalPlugins() {
+        return false;
+    }
 }

cli/src/main/java/io/kestra/cli/commands/plugins/PluginDocCommand.java

@@ -1,72 +1,122 @@
 package io.kestra.cli.commands.plugins;
 
-import com.google.common.base.Charsets;
+import com.google.common.io.Files;
 import io.kestra.cli.AbstractCommand;
 import io.kestra.core.docs.DocumentationGenerator;
-import io.kestra.core.plugins.PluginScanner;
+import io.kestra.core.plugins.PluginRegistry;
 import io.kestra.core.plugins.RegisteredPlugin;
+import io.kestra.core.serializers.JacksonMapper;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
 import picocli.CommandLine;
 
 import java.io.File;
 import java.io.IOException;
+import java.nio.charset.StandardCharsets;
 import java.nio.file.Path;
 import java.nio.file.Paths;
-import java.util.ArrayList;
+import java.util.Base64;
 import java.util.List;
 
+import static io.kestra.core.models.Plugin.isDeprecated;
+
 @CommandLine.Command(
     name = "doc",
-    description = "write documentation for all plugins currently installed"
+    description = "Generate documentation for all plugins currently installed"
 )
 public class PluginDocCommand extends AbstractCommand {
-    @CommandLine.Parameters(index = "0", description = "Path to write documentations files")
-    private Path output = Paths.get(System.getProperty("user.dir"), "docs");
+    @Inject
+    private ApplicationContext applicationContext;
 
-    public PluginDocCommand() {
-        super(false);
-    }
+    @CommandLine.Parameters(index = "0", description = "Path to write documentation files")
+    private Path output = Paths.get(System.getProperty("user.dir"), "docs");
 
     @CommandLine.Option(names = {"--core"}, description = "Also write core tasks docs files")
     private boolean core = false;
 
+    @CommandLine.Option(names = {"--icons"}, description = "Also write icon for each task")
+    private boolean icons = false;
+
+    @CommandLine.Option(names = {"--schema"}, description = "Also write JSON Schema for each task")
+    private boolean schema = false;
+
+    @CommandLine.Option(names = {"--skip-deprecated"},description = "Skip deprecated plugins when generating documentations")
+    private boolean skipDeprecated = false;
+
     @Override
     public Integer call() throws Exception {
         super.call();
+        DocumentationGenerator documentationGenerator = applicationContext.getBean(DocumentationGenerator.class);
 
-        PluginScanner pluginScanner = new PluginScanner(PluginDocCommand.class.getClassLoader());
-        List<RegisteredPlugin> scan = new ArrayList<>(pluginScanner.scan(this.pluginsPath));
+        PluginRegistry registry = pluginRegistryProvider.get();
+        List<RegisteredPlugin> plugins = core ? registry.plugins() : registry.externalPlugins();
+        if (skipDeprecated) {
+            plugins = plugins.stream()
+                .filter(plugin -> !isDeprecated(plugin.getClass()))
+                .toList();
+        }
+        boolean hasFailures = false;
 
-        if (core) {
-            PluginScanner corePluginScanner = new PluginScanner(PluginDocCommand.class.getClassLoader());
-            scan.add(corePluginScanner.scan());
+        for (RegisteredPlugin registeredPlugin : plugins) {
+            try {
+                documentationGenerator
+                    .generate(registeredPlugin)
+                    .forEach(s -> {
+                            File file = Paths.get(output.toAbsolutePath().toString(), s.getPath()).toFile();
+
+                            if (!file.getParentFile().exists()) {
+                                //noinspection ResultOfMethodCallIgnored
+                                file.getParentFile().mkdirs();
+                            }
+
+                            try {
+                                Files
+                                    .asCharSink(
+                                        file,
+                                        StandardCharsets.UTF_8
+                                    ).write(s.getBody());
+                                stdOut("Generate doc in: {0}", file);
+
+                                if (s.getIcon() != null && this.icons) {
+                                    File iconFile = new File(
+                                        file.getParent(),
+                                        file.getName().substring(0, file.getName().lastIndexOf(".")) + ".svg"
+                                    );
+
+                                    Files
+                                        .asByteSink(iconFile)
+                                        .write(Base64.getDecoder().decode(s.getIcon().getBytes(StandardCharsets.UTF_8)));
+                                    stdOut("Generate icon in: {0}", iconFile);
+                                }
+
+                                if (this.schema && s.getSchema() != null) {
+                                    File jsonSchemaFile = new File(
+                                        file.getParent(),
+                                        file.getName().substring(0, file.getName().lastIndexOf(".")) + ".json"
+                                    );
+
+                                    Files
+                                        .asByteSink(jsonSchemaFile)
+                                        .write(JacksonMapper.ofJson().writeValueAsBytes(s.getSchema()));
+                                    stdOut("Generate json schema in: {0}", jsonSchemaFile);
+                                }
+                            } catch (IOException e) {
+                                throw new RuntimeException(e);
+                            }
+                        }
+                    );
+            } catch (Error e) {
+                stdErr("Failure to generate documentation for plugin {0}: {1}", registeredPlugin.name(), e);
+                hasFailures = true;
+            }
         }
 
-        for (RegisteredPlugin registeredPlugin : scan) {
-            DocumentationGenerator
-                .generate(registeredPlugin)
-                .forEach(s -> {
-                        File file = Paths.get(output.toAbsolutePath().toString(), s.getPath()).toFile();
+        return hasFailures ? 1 : 0;
+    }
 
-                        if (!file.getParentFile().exists()) {
-                            //noinspection ResultOfMethodCallIgnored
-                            file.getParentFile().mkdirs();
-                        }
-
-                        try {
-                            com.google.common.io.Files
-                                .asCharSink(
-                                    file,
-                                    Charsets.UTF_8
-                                ).write(s.getBody());
-
-                            stdOut("Generate doc in: {0}", file);
-                        } catch (IOException e) {
-                            throw new RuntimeException(e);
-                        }
-                    }
-                );
-        }
-
-        return 0;
+    /** {@inheritDoc} **/
+    @Override
+    protected boolean isPluginManagerEnabled() {
+        return false;
     }
 }

cli/src/main/java/io/kestra/cli/commands/plugins/PluginInstallCommand.java

@@ -1,77 +1,137 @@
 package io.kestra.cli.commands.plugins;
 
-import org.apache.commons.io.FilenameUtils;
+import io.kestra.core.contexts.MavenPluginRepositoryConfig;
+import io.kestra.core.exceptions.KestraRuntimeException;
+import io.kestra.core.plugins.LocalPluginManager;
+import io.kestra.core.plugins.MavenPluginDownloader;
+import io.kestra.core.plugins.PluginArtifact;
+import io.kestra.core.plugins.PluginCatalogService;
+import io.kestra.core.plugins.PluginManager;
+import io.micronaut.http.client.HttpClient;
+import io.micronaut.http.client.annotation.Client;
+import io.micronaut.http.uri.UriBuilder;
 import io.kestra.cli.AbstractCommand;
-import io.kestra.cli.plugins.PluginDownloader;
-import io.kestra.cli.plugins.RepositoryConfig;
 import io.kestra.core.utils.IdUtils;
+import jakarta.inject.Provider;
 import picocli.CommandLine;
 
 import java.net.URI;
-import java.net.URL;
-import java.nio.file.Files;
-import java.nio.file.Paths;
-import java.nio.file.StandardCopyOption;
 import java.util.ArrayList;
 import java.util.Arrays;
 import java.util.List;
-import javax.inject.Inject;
+import java.util.Objects;
 
-@CommandLine.Command(
+import jakarta.inject.Inject;
+import picocli.CommandLine.Command;
+import picocli.CommandLine.Parameters;
+import picocli.CommandLine.Option;
+import picocli.CommandLine.Spec;
+
+@Command(
     name = "install",
-    description = "install a plugin"
+    description = "Install plugins"
 )
 public class PluginInstallCommand extends AbstractCommand {
-    @CommandLine.Parameters(index = "0..*", description = "the plugins to install")
+
+    @Option(names = {"--locally"}, description = "Specifies if plugins must be installed locally. If set to false the installation depends on your Kestra configuration.")
+    boolean locally = true;
+
+    @Option(names = {"--all"}, description = "Install all available plugins")
+    boolean all = false;
+
+    @Parameters(index = "0..*", description = "Plugins to install. Represented as Maven artifact coordinates (i.e., <groupId>:<artifactId>:(<version>|LATEST)")
     List<String> dependencies = new ArrayList<>();
 
-    @CommandLine.Option(names = {"--repositories"}, description = "url to additional maven repositories")
+    @Option(names = {"--repositories"}, description = "URL to additional Maven repositories")
     private URI[] repositories;
 
-    @CommandLine.Spec
+    @Spec
     CommandLine.Model.CommandSpec spec;
 
     @Inject
-    PluginDownloader pluginDownloader;
+    Provider<MavenPluginDownloader> mavenPluginRepositoryProvider;
 
-    public PluginInstallCommand() {
-        super(false);
-    }
+    @Inject
+    Provider<PluginCatalogService> pluginCatalogService;
 
     @Override
     public Integer call() throws Exception {
         super.call();
 
-        if (this.pluginsPath == null) {
+        if (this.locally && this.pluginsPath == null) {
             throw new CommandLine.ParameterException(this.spec.commandLine(), "Missing required options '--plugins' " +
                 "or environment variable 'KESTRA_PLUGINS_PATH"
             );
         }
 
-        if (!pluginsPath.toFile().exists()) {
-            if (!pluginsPath.toFile().mkdir()) {
-                throw new RuntimeException("Cannot create directory: " + pluginsPath.toFile().getAbsolutePath());
-            }
-        }
-
+        List<MavenPluginRepositoryConfig> repositoryConfigs = List.of();
         if (repositories != null) {
-            Arrays.stream(repositories)
-                .forEach(s -> pluginDownloader.addRepository(new RepositoryConfig(IdUtils.create(), "default", s.toString())));
+            repositoryConfigs = Arrays.stream(repositories)
+                .map(uri -> {
+                    MavenPluginRepositoryConfig.MavenPluginRepositoryConfigBuilder builder = MavenPluginRepositoryConfig
+                        .builder()
+                        .id(IdUtils.create());
+
+                    String userInfo = uri.getUserInfo();
+                    if (userInfo != null) {
+                        String[] userInfoParts = userInfo.split(":");
+                        builder = builder.basicAuth(new MavenPluginRepositoryConfig.BasicAuth(
+                            userInfoParts[0],
+                            userInfoParts[1]
+                        ));
+                    }
+                    builder.url(UriBuilder.of(uri).userInfo(null).build().toString());
+                    return builder.build();
+                }).toList();
         }
 
-        List<URL> resolveUrl = pluginDownloader.resolve(dependencies);
-        stdOut("Resolved Plugin(s) with {0}", resolveUrl);
-
-        for (URL url: resolveUrl) {
-            Files.copy(
-                Paths.get(url.toURI()),
-                Paths.get(pluginsPath.toString(), FilenameUtils.getName(url.toString())),
-                StandardCopyOption.REPLACE_EXISTING
-            );
+        if (all) {
+            PluginCatalogService service = pluginCatalogService.get();
+            dependencies = service.get().stream().map(Objects::toString).toList();
         }
 
-        stdOut("Successfully installed plugins {0} into {1}", dependencies, pluginsPath);
+        if (dependencies.isEmpty()) {
+            stdErr("Error: No plugin to install.");
+            return CommandLine.ExitCode.OK;
+        }
 
-        return 0;
+        final List<PluginArtifact> pluginArtifacts;
+        try {
+           pluginArtifacts = dependencies.stream().map(PluginArtifact::fromCoordinates).toList();
+        } catch (IllegalArgumentException e) {
+            stdErr(e.getMessage());
+            return CommandLine.ExitCode.USAGE;
+        }
+
+        try (final PluginManager pluginManager = getPluginManager()) {
+
+            List<PluginArtifact> installed;
+            if (all) {
+                installed = new ArrayList<>(pluginArtifacts.size());
+                for (PluginArtifact pluginArtifact : pluginArtifacts) {
+                    try {
+                        installed.add(pluginManager.install(pluginArtifact, repositoryConfigs, false, pluginsPath));
+                    } catch (KestraRuntimeException e) {
+                        String cause = e.getCause() != null ? e.getCause().getMessage() : e.getMessage();
+                        stdErr("Failed to install plugin {0}. Cause: {1}", pluginArtifact, cause);
+                    }
+                }
+            } else {
+                installed = pluginManager.install(pluginArtifacts, repositoryConfigs, false, pluginsPath);
+            }
+
+            List<URI> uris = installed.stream().map(PluginArtifact::uri).toList();
+            stdOut("Successfully installed plugins {0} into {1}", dependencies, uris);
+            return CommandLine.ExitCode.OK;
+        }
+    }
+
+    private PluginManager getPluginManager() {
+        return locally ? new LocalPluginManager(mavenPluginRepositoryProvider.get()) : this.pluginManagerProvider.get();
+    }
+
+    @Override
+    protected boolean loadExternalPlugins() {
+        return false;
     }
 }

cli/src/main/java/io/kestra/cli/commands/plugins/PluginListCommand.java

@@ -1,28 +1,31 @@
 package io.kestra.cli.commands.plugins;
 
 import io.kestra.cli.AbstractCommand;
-import io.kestra.core.contexts.KestraClassLoader;
-import io.kestra.core.plugins.PluginScanner;
+import io.kestra.core.plugins.PluginRegistry;
 import io.kestra.core.plugins.RegisteredPlugin;
+import jakarta.inject.Inject;
+import jakarta.inject.Provider;
 import picocli.CommandLine;
+import picocli.CommandLine.Command;
+import picocli.CommandLine.Option;
+import picocli.CommandLine.Spec;
 
 import java.util.List;
 
-@CommandLine.Command(
+@Command(
     name = "list",
-    description = "list all plugins already installed"
+    description = "List all plugins already installed"
 )
 public class PluginListCommand extends AbstractCommand {
-    @CommandLine.Spec
+    @Spec
     CommandLine.Model.CommandSpec spec;
 
-    public PluginListCommand() {
-        super(false);
-    }
-
-    @CommandLine.Option(names = {"--core"}, description = "Also write core tasks plugins")
+    @Option(names = {"--core"}, description = "Also write core tasks plugins")
     private boolean core = false;
 
+    @Inject
+    private PluginRegistry registry;
+
     @Override
     public Integer call() throws Exception {
         super.call();
@@ -33,15 +36,9 @@ public class PluginListCommand extends AbstractCommand {
             );
         }
 
-        PluginScanner pluginScanner = new PluginScanner(KestraClassLoader.instance());
-        List<RegisteredPlugin> scan = pluginScanner.scan(this.pluginsPath);
+        List<RegisteredPlugin> plugins = core ? registry.plugins() : registry.externalPlugins();
 
-        if (core) {
-            PluginScanner corePluginScanner = new PluginScanner(PluginDocCommand.class.getClassLoader());
-            scan.add(corePluginScanner.scan());
-        }
-
-        scan.forEach(registeredPlugin -> stdOut(registeredPlugin.toString()));
+        plugins.forEach(registeredPlugin -> stdOut(registeredPlugin.toString()));
 
         return 0;
     }

cli/src/main/java/io/kestra/cli/commands/plugins/PluginSearchCommand.java

@@ -0,0 +1,149 @@
+package io.kestra.cli.commands.plugins;
+
+import io.kestra.cli.AbstractCommand;
+import io.micronaut.core.type.Argument;
+import io.micronaut.http.HttpRequest;
+import io.micronaut.http.client.HttpClient;
+import io.micronaut.http.client.annotation.Client;
+import jakarta.inject.Inject;
+import picocli.CommandLine.Command;
+import picocli.CommandLine.Parameters;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@Command(
+    name = "search",
+    description = "Search for available Kestra plugins"
+)
+public class PluginSearchCommand extends AbstractCommand {
+    @Inject
+    @Client("api")
+    private HttpClient httpClient;
+
+    private static final ObjectMapper MAPPER = new ObjectMapper();
+    private static final char SPACE = ' ';
+
+    @Parameters(index = "0", description = "Search term (optional)", defaultValue = "")
+    private String searchTerm;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        try {
+            JsonNode root = fetchPlugins();
+            List<PluginInfo> plugins = findPlugins(root);
+            printResults(plugins);
+            return 0;
+        } catch (Exception e) {
+            stdOut("Error processing plugins: {0}", e.getMessage());
+            return 1;
+        }
+    }
+
+    private JsonNode fetchPlugins() throws Exception {
+        String response = httpClient.toBlocking()
+            .retrieve(
+                HttpRequest.GET("/v1/plugins")
+                    .header("Accept", "application/json")
+            );
+        return MAPPER.readTree(response);
+    }
+
+    private List<PluginInfo> findPlugins(JsonNode root) {
+        String searchTermLower = searchTerm.toLowerCase();
+        List<PluginInfo> plugins = new ArrayList<>();
+
+        for (JsonNode plugin : root) {
+            if (matchesSearch(plugin, searchTermLower)) {
+                plugins.add(new PluginInfo(
+                    plugin.path("name").asText(),
+                    plugin.path("title").asText(),
+                    plugin.path("group").asText(),
+                    plugin.path("version").asText("")
+                ));
+            }
+        }
+
+        plugins.sort((p1, p2) -> p1.name.compareToIgnoreCase(p2.name));
+        return plugins;
+    }
+
+    private boolean matchesSearch(JsonNode plugin, String term) {
+        if (term.isEmpty()) {
+            return true;
+        }
+
+        return plugin.path("name").asText().toLowerCase().contains(term) ||
+            plugin.path("title").asText().toLowerCase().contains(term) ||
+            plugin.path("group").asText().toLowerCase().contains(term);
+    }
+
+    private void printResults(List<PluginInfo> plugins) {
+        if (plugins.isEmpty()) {
+            stdOut("No plugins found{0}",
+                searchTerm.isEmpty() ? "" : " matching '" + searchTerm + "'");
+            return;
+        }
+
+        stdOut("\nFound {0} plugins{1}",
+            plugins.size(),
+            searchTerm.isEmpty() ? "" : " matching '" + searchTerm + "'"
+        );
+
+        printPluginsTable(plugins);
+    }
+
+    private void printPluginsTable(List<PluginInfo> plugins) {
+        int maxName = 4, maxTitle = 5, maxGroup = 5;
+        for (PluginInfo plugin : plugins) {
+            maxName = Math.max(maxName, plugin.name.length());
+            maxTitle = Math.max(maxTitle, plugin.title.length());
+            maxGroup = Math.max(maxGroup, plugin.group.length());
+        }
+
+        StringBuilder namePad = new StringBuilder(maxName);
+        StringBuilder titlePad = new StringBuilder(maxTitle);
+        StringBuilder groupPad = new StringBuilder(maxGroup);
+
+        stdOut("");
+        printRow(namePad, titlePad, groupPad, "NAME", "TITLE", "GROUP", "VERSION",
+            maxName, maxTitle, maxGroup);
+
+        for (PluginInfo plugin : plugins) {
+            printRow(namePad, titlePad, groupPad, plugin.name, plugin.title, plugin.group, plugin.version,
+                maxName, maxTitle, maxGroup);
+        }
+        stdOut("");
+    }
+
+    private void printRow(StringBuilder namePad, StringBuilder titlePad, StringBuilder groupPad,
+                          String name, String title, String group, String version,
+                          int maxName, int maxTitle, int maxGroup) {
+        stdOut("{0}  {1}  {2}  {3}",
+            pad(namePad, name, maxName),
+            pad(titlePad, title, maxTitle),
+            pad(groupPad, group, maxGroup),
+            version
+        );
+    }
+
+    private String pad(StringBuilder sb, String str, int length) {
+        sb.setLength(0);
+        sb.append(str);
+        while (sb.length() < length) {
+            sb.append(SPACE);
+        }
+        return sb.toString();
+    }
+
+    private record PluginInfo(String name, String title, String group, String version) {}
+
+    @Override
+    protected boolean loadExternalPlugins() {
+        return false;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/plugins/PluginUninstallCommand.java

@@ -0,0 +1,69 @@
+package io.kestra.cli.commands.plugins;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.core.plugins.LocalPluginManager;
+import io.kestra.core.plugins.MavenPluginDownloader;
+import io.kestra.core.plugins.PluginArtifact;
+import io.kestra.core.plugins.PluginManager;
+import jakarta.inject.Inject;
+import jakarta.inject.Provider;
+import picocli.CommandLine;
+import picocli.CommandLine.Parameters;
+import picocli.CommandLine.Spec;
+
+import java.net.URI;
+import java.util.ArrayList;
+import java.util.List;
+
+@CommandLine.Command(
+    name = "uninstall",
+    description = "Uninstall plugins"
+)
+public class PluginUninstallCommand extends AbstractCommand {
+    @Parameters(index = "0..*", description = "The plugins to uninstall. Represented as Maven artifact coordinates (i.e., <groupId>:<artifactId>:(<version>|LATEST)")
+    List<String> dependencies = new ArrayList<>();
+
+    @Spec
+    CommandLine.Model.CommandSpec spec;
+
+    @Inject
+    Provider<MavenPluginDownloader> mavenPluginRepositoryProvider;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        List<PluginArtifact> pluginArtifacts;
+        try {
+            pluginArtifacts = dependencies.stream().map(PluginArtifact::fromCoordinates).toList();
+        } catch (IllegalArgumentException e) {
+            stdErr(e.getMessage());
+            return CommandLine.ExitCode.USAGE;
+        }
+
+        final PluginManager pluginManager;
+
+        // If a PLUGIN_PATH is provided, then use the LocalPluginManager
+        if (pluginsPath != null) {
+            pluginManager = new LocalPluginManager(mavenPluginRepositoryProvider.get());
+        } else {
+            // Otherwise, we delegate to the configured plugin-manager.
+            pluginManager = this.pluginManagerProvider.get();
+        }
+
+        List<PluginArtifact> uninstalled = pluginManager.uninstall(
+            pluginArtifacts,
+            false,
+            pluginsPath
+        );
+
+        List<URI> uris = uninstalled.stream().map(PluginArtifact::uri).toList();
+        stdOut("Successfully uninstalled plugins {0} from {1}", dependencies, uris);
+        return CommandLine.ExitCode.OK;
+    }
+
+    @Override
+    protected boolean loadExternalPlugins() {
+        return false;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/servers/AbstractServerCommand.java

@@ -0,0 +1,29 @@
+package io.kestra.cli.commands.servers;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.core.contexts.KestraContext;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+@Slf4j
+public abstract class AbstractServerCommand extends AbstractCommand implements ServerCommandInterface {
+    @CommandLine.Option(names = {"--port"}, description = "The port to bind")
+    Integer serverPort;
+
+    @Override
+    public Integer call()  throws Exception {
+        log.info("Machine information: {} available cpu(s), {}MB max memory, Java version {}", Runtime.getRuntime().availableProcessors(), maxMemoryInMB(), Runtime.version());
+
+        this.shutdownHook(true, () -> KestraContext.getContext().shutdown());
+
+        return super.call();
+    }
+
+    private long maxMemoryInMB() {
+        return Runtime.getRuntime().maxMemory() / 1024 / 1024;
+    }
+
+    protected static int defaultWorkerThread() {
+        return Runtime.getRuntime().availableProcessors() * 8;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/servers/ExecutorCommand.java

@@ -1,29 +1,50 @@
 package io.kestra.cli.commands.servers;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
 import io.kestra.core.models.ServerType;
-import io.kestra.core.runners.AbstractExecutor;
+import io.kestra.core.runners.Executor;
+import io.kestra.core.services.SkipExecutionService;
+import io.kestra.core.services.StartExecutorService;
 import io.kestra.core.utils.Await;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
 import picocli.CommandLine;
 
+import java.util.Collections;
+import java.util.List;
 import java.util.Map;
-import javax.inject.Inject;
 
 @CommandLine.Command(
     name = "executor",
-    description = "start an executor"
+    description = "Start the Kestra executor"
 )
-@Slf4j
-public class ExecutorCommand extends AbstractCommand {
+public class ExecutorCommand extends AbstractServerCommand {
     @Inject
     private ApplicationContext applicationContext;
 
-    public ExecutorCommand() {
-        super(true);
-    }
+    @Inject
+    private SkipExecutionService skipExecutionService;
+
+    @Inject
+    private StartExecutorService startExecutorService;
+
+    @CommandLine.Option(names = {"--skip-executions"}, split=",", description = "The list of execution identifiers to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipExecutions = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-flows"}, split=",", description = "The list of flow identifiers (tenant|namespace|flowId) to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipFlows = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-namespaces"}, split=",", description = "The list of namespace identifiers (tenant|namespace) to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipNamespaces = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-tenants"}, split=",", description = "The list of tenants to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipTenants = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--start-executors"}, split=",", description = "The list of Kafka Stream executors to start, separated by a command. Use it only with the Kafka queue, for debugging purpose.")
+    private List<String> startExecutors = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--not-start-executors"}, split=",", description = "The list of Kafka Stream executors to not start, separated by a command. Use it only with the Kafka queue, for debugging purpose.")
+    private List<String> notStartExecutors = Collections.emptyList();
 
     @SuppressWarnings("unused")
     public static Map<String, Object> propertiesOverrides() {
@@ -34,14 +55,17 @@ public class ExecutorCommand extends AbstractCommand {
 
     @Override
     public Integer call() throws Exception {
+        this.skipExecutionService.setSkipExecutions(skipExecutions);
+        this.skipExecutionService.setSkipFlows(skipFlows);
+        this.skipExecutionService.setSkipNamespaces(skipNamespaces);
+        this.skipExecutionService.setSkipTenants(skipTenants);
+
+        this.startExecutorService.applyOptions(startExecutors, notStartExecutors);
+
         super.call();
 
-        AbstractExecutor abstractExecutor = applicationContext.getBean(AbstractExecutor.class);
-        abstractExecutor.run();
-
-        log.info("Executor started");
-
-        this.shutdownHook(abstractExecutor::close);
+        Executor executorService = applicationContext.getBean(Executor.class);
+        executorService.run();
 
         Await.until(() -> !this.applicationContext.isRunning());
 

cli/src/main/java/io/kestra/cli/commands/servers/IndexerCommand.java

@@ -1,30 +1,30 @@
 package io.kestra.cli.commands.servers;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
 import io.kestra.core.models.ServerType;
 import io.kestra.core.runners.Indexer;
-import io.kestra.core.runners.IndexerInterface;
 import io.kestra.core.utils.Await;
+import io.kestra.core.services.SkipExecutionService;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
 import picocli.CommandLine;
 
+import java.util.Collections;
+import java.util.List;
 import java.util.Map;
-import javax.inject.Inject;
 
 @CommandLine.Command(
     name = "indexer",
-    description = "start an indexer"
+    description = "Start the Kestra indexer"
 )
-@Slf4j
-public class IndexerCommand extends AbstractCommand {
+public class IndexerCommand extends AbstractServerCommand {
     @Inject
     private ApplicationContext applicationContext;
+    @Inject
+    private SkipExecutionService skipExecutionService;
 
-    public IndexerCommand() {
-        super(true);
-    }
+    @CommandLine.Option(names = {"--skip-indexer-records"}, split=",", description = "a list of indexer record keys, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipIndexerRecords = Collections.emptyList();
 
     @SuppressWarnings("unused")
     public static Map<String, Object> propertiesOverrides() {
@@ -35,15 +35,13 @@ public class IndexerCommand extends AbstractCommand {
 
     @Override
     public Integer call() throws Exception {
+        this.skipExecutionService.setSkipIndexerRecords(skipIndexerRecords);
+
         super.call();
 
-        IndexerInterface indexer = applicationContext.getBean(IndexerInterface.class);
+        Indexer indexer = applicationContext.getBean(Indexer.class);
         indexer.run();
 
-        log.info("Indexer started");
-
-        this.shutdownHook(indexer::close);
-
         Await.until(() -> !this.applicationContext.isRunning());
 
         return 0;

cli/src/main/java/io/kestra/cli/commands/servers/LocalCommand.java

@@ -0,0 +1,43 @@
+package io.kestra.cli.commands.servers;
+
+import com.google.common.collect.ImmutableMap;
+import io.kestra.core.models.ServerType;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import picocli.CommandLine;
+
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.util.Map;
+
+@CommandLine.Command(
+    name = "local",
+    description = "Start the local development server"
+)
+public class LocalCommand extends StandAloneCommand {
+    // @FIXME: Keep it for bug in micronaut that need to have inject on top level command to inject on abstract classe
+    @Inject
+    private ApplicationContext applicationContext;
+
+    @SuppressWarnings("unused")
+    public static Map<String, Object> propertiesOverrides() {
+        Path data = Paths.get("").toAbsolutePath().resolve("data");
+
+        //noinspection ResultOfMethodCallIgnored
+        data.toFile().mkdirs();
+
+        return ImmutableMap.of(
+            "kestra.server-type", ServerType.STANDALONE,
+            "kestra.repository.type", "h2",
+            "kestra.queue.type", "h2",
+            "kestra.storage.type", "local",
+            "kestra.storage.local.base-path", data.toString(),
+            "datasources.h2.url", "jdbc:h2:file:" + data.resolve("database") + ";TIME ZONE=UTC;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;LOCK_TIMEOUT=30000",
+            "datasources.h2.username", "sa",
+            "datasources.h2.password", "",
+            "datasources.h2.driverClassName", "org.h2.Driver",
+            "endpoints.all.port", "${random.port}"
+        );
+    }
+
+}

cli/src/main/java/io/kestra/cli/commands/servers/SchedulerCommand.java

@@ -1,30 +1,25 @@
 package io.kestra.cli.commands.servers;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
 import io.kestra.core.models.ServerType;
-import io.kestra.core.schedulers.AbstractScheduler;
+import io.kestra.scheduler.AbstractScheduler;
 import io.kestra.core.utils.Await;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
 import picocli.CommandLine;
 
 import java.util.Map;
-import javax.inject.Inject;
 
 @CommandLine.Command(
     name = "scheduler",
-    description = "start an scheduler"
+    description = "Start the Kestra scheduler"
 )
 @Slf4j
-public class SchedulerCommand extends AbstractCommand {
+public class SchedulerCommand extends AbstractServerCommand {
     @Inject
     private ApplicationContext applicationContext;
 
-    public SchedulerCommand() {
-        super(true);
-    }
-
     @SuppressWarnings("unused")
     public static Map<String, Object> propertiesOverrides() {
         return ImmutableMap.of(
@@ -39,10 +34,6 @@ public class SchedulerCommand extends AbstractCommand {
         AbstractScheduler scheduler = applicationContext.getBean(AbstractScheduler.class);
         scheduler.run();
 
-        log.info("Scheduler started");
-
-        this.shutdownHook(scheduler::close);
-
         Await.until(() -> !this.applicationContext.isRunning());
 
         return 0;

cli/src/main/java/io/kestra/cli/commands/servers/ServerCommand.java

@@ -9,7 +9,7 @@ import picocli.CommandLine;
 
 @CommandLine.Command(
     name = "server",
-    description = "handle servers",
+    description = "Manage servers",
     mixinStandardHelpOptions = true,
     subcommands = {
         ExecutorCommand.class,
@@ -18,14 +18,11 @@ import picocli.CommandLine;
         StandAloneCommand.class,
         WebServerCommand.class,
         WorkerCommand.class,
+        LocalCommand.class,
     }
 )
 @Slf4j
 public class ServerCommand extends AbstractCommand {
-    public ServerCommand() {
-        super(false);
-    }
-
     @SneakyThrows
     @Override
     public Integer call() throws Exception {

cli/src/main/java/io/kestra/cli/commands/servers/ServerCommandInterface.java

@@ -0,0 +1,4 @@
+package io.kestra.cli.commands.servers;
+
+public interface ServerCommandInterface {
+}

cli/src/main/java/io/kestra/cli/commands/servers/StandAloneCommand.java

@@ -1,40 +1,86 @@
 package io.kestra.cli.commands.servers;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
+import io.kestra.cli.services.FileChangedEventListener;
+import io.kestra.cli.services.TenantIdSelectorService;
+import io.kestra.core.contexts.KestraContext;
 import io.kestra.core.models.ServerType;
 import io.kestra.core.repositories.LocalFlowRepositoryLoader;
-import io.kestra.core.runners.AbstractExecutor;
-import io.kestra.core.runners.StandAloneRunner;
+import io.kestra.cli.StandAloneRunner;
+import io.kestra.core.services.SkipExecutionService;
+import io.kestra.core.services.StartExecutorService;
 import io.kestra.core.utils.Await;
-import io.kestra.runner.kafka.KafkaExecutor;
+import io.micronaut.context.ApplicationContext;
+import jakarta.annotation.Nullable;
+import jakarta.inject.Inject;
 import picocli.CommandLine;
 
 import java.io.File;
 import java.io.IOException;
+import java.util.Collections;
+import java.util.List;
 import java.util.Map;
-import java.util.Optional;
-import javax.inject.Inject;
 
 @CommandLine.Command(
     name = "standalone",
-    description = "start a standalone server"
+    description = "Start the standalone all-in-one server"
 )
-@Slf4j
-public class StandAloneCommand extends AbstractCommand {
+public class StandAloneCommand extends AbstractServerCommand {
     @CommandLine.Spec
     CommandLine.Model.CommandSpec spec;
 
     @Inject
     private ApplicationContext applicationContext;
 
+    @Inject
+    private SkipExecutionService skipExecutionService;
+
+    @Inject
+    private StartExecutorService startExecutorService;
+
+    @Inject
+    @Nullable
+    private FileChangedEventListener fileWatcher;
+
     @CommandLine.Option(names = {"-f", "--flow-path"}, description = "the flow path containing flow to inject at startup (when running with a memory flow repository)")
     private File flowPath;
 
-    public StandAloneCommand() {
-        super(true);
+    @CommandLine.Option(names = "--tenant", description = "Tenant identifier, Required to load flows from path with the enterprise edition")
+    private String tenantId;
+
+    @CommandLine.Option(names = {"--worker-thread"}, description = "the number of worker threads, defaults to eight times the number of available processors. Set it to 0 to avoid starting a worker.")
+    private int workerThread = defaultWorkerThread();
+
+    @CommandLine.Option(names = {"--skip-executions"}, split=",", description = "a list of execution identifiers to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipExecutions = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-flows"}, split=",", description = "a list of flow identifiers (namespace.flowId) to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipFlows = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-namespaces"}, split=",", description = "a list of namespace identifiers (tenant|namespace) to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipNamespaces = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-tenants"}, split=",", description = "a list of tenants to skip, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipTenants = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--skip-indexer-records"}, split=",", description = "a list of indexer record keys, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipIndexerRecords = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--no-tutorials"}, description = "Flag to disable auto-loading of tutorial flows.")
+    boolean tutorialsDisabled = false;
+
+    @CommandLine.Option(names = {"--start-executors"}, split=",", description = "a list of Kafka Stream executors to start, separated by a command. Use it only with the Kafka queue, for debugging purpose.")
+    private List<String> startExecutors = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--not-start-executors"}, split=",", description = "a list of Kafka Stream executors to not start, separated by a command. Use it only with the Kafka queue, for debugging purpose.")
+    private List<String> notStartExecutors = Collections.emptyList();
+
+    @CommandLine.Option(names = {"--no-indexer"}, description = "Flag to disable starting an embedded indexer.")
+    boolean indexerDisabled = false;
+
+    @Override
+    public boolean isFlowAutoLoadEnabled() {
+        return !tutorialsDisabled;
     }
 
     @SuppressWarnings("unused")
@@ -46,23 +92,47 @@ public class StandAloneCommand extends AbstractCommand {
 
     @Override
     public Integer call() throws Exception {
+        this.skipExecutionService.setSkipExecutions(skipExecutions);
+        this.skipExecutionService.setSkipFlows(skipFlows);
+        this.skipExecutionService.setSkipNamespaces(skipNamespaces);
+        this.skipExecutionService.setSkipTenants(skipTenants);
+        this.skipExecutionService.setSkipIndexerRecords(skipIndexerRecords);
+        this.startExecutorService.applyOptions(startExecutors, notStartExecutors);
+
+        KestraContext.getContext().injectWorkerConfigs(workerThread, null);
+
         super.call();
 
         if (flowPath != null) {
             try {
                 LocalFlowRepositoryLoader localFlowRepositoryLoader = applicationContext.getBean(LocalFlowRepositoryLoader.class);
-                localFlowRepositoryLoader.load(this.flowPath);
+                TenantIdSelectorService tenantIdSelectorService = applicationContext.getBean(TenantIdSelectorService.class);
+                localFlowRepositoryLoader.load(tenantIdSelectorService.getTenantId(this.tenantId), this.flowPath);
             } catch (IOException e) {
                 throw new CommandLine.ParameterException(this.spec.commandLine(), "Invalid flow path", e);
             }
         }
 
-        StandAloneRunner standAloneRunner = applicationContext.getBean(StandAloneRunner.class);
-        standAloneRunner.run();
+        try (StandAloneRunner standAloneRunner = applicationContext.getBean(StandAloneRunner.class)) {
 
-        this.shutdownHook(standAloneRunner::close);
+            if (this.workerThread == 0) {
+                standAloneRunner.setWorkerEnabled(false);
+            } else {
+                standAloneRunner.setWorkerThread(this.workerThread);
+            }
 
-        Await.until(() -> !this.applicationContext.isRunning());
+            if (this.indexerDisabled) {
+                standAloneRunner.setIndexerEnabled(false);
+            }
+
+            standAloneRunner.run();
+
+            if (fileWatcher != null) {
+                fileWatcher.startListeningFromConfig();
+            }
+
+            Await.until(() -> !this.applicationContext.isRunning());
+        }
 
         return 0;
     }

cli/src/main/java/io/kestra/cli/commands/servers/WebServerCommand.java

@@ -1,27 +1,51 @@
 package io.kestra.cli.commands.servers;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
 import io.kestra.core.models.ServerType;
+import io.kestra.core.runners.Indexer;
 import io.kestra.core.utils.Await;
+import io.kestra.core.utils.ExecutorsUtils;
+import io.kestra.core.services.SkipExecutionService;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
 import picocli.CommandLine;
+import picocli.CommandLine.Option;
 
+import java.util.Collections;
+import java.util.List;
 import java.util.Map;
-import javax.inject.Inject;
+import java.util.concurrent.ExecutorService;
 
 @CommandLine.Command(
     name = "webserver",
-    description = "start the webserver"
+    description = "Start the Kestra webserver"
 )
 @Slf4j
-public class WebServerCommand extends AbstractCommand {
+public class WebServerCommand extends AbstractServerCommand {
+    private ExecutorService poolExecutor;
+
     @Inject
     private ApplicationContext applicationContext;
 
-    public WebServerCommand() {
-        super(true);
+    @Inject
+    private ExecutorsUtils executorsUtils;
+
+    @Inject
+    private SkipExecutionService skipExecutionService;
+
+    @Option(names = {"--no-tutorials"}, description = "Flag to disable auto-loading of tutorial flows.")
+    private boolean tutorialsDisabled = false;
+
+    @Option(names = {"--no-indexer"}, description = "Flag to disable starting an embedded indexer.")
+    private boolean indexerDisabled = false;
+
+    @CommandLine.Option(names = {"--skip-indexer-records"}, split=",", description = "a list of indexer record keys, separated by a coma; for troubleshooting purpose only")
+    private List<String> skipIndexerRecords = Collections.emptyList();
+
+    @Override
+    public boolean isFlowAutoLoadEnabled() {
+        return !tutorialsDisabled;
     }
 
     @SuppressWarnings("unused")
@@ -33,16 +57,20 @@ public class WebServerCommand extends AbstractCommand {
 
     @Override
     public Integer call() throws Exception {
+        this.skipExecutionService.setSkipIndexerRecords(skipIndexerRecords);
+
         super.call();
 
+        // start the indexer
+        if (!indexerDisabled) {
+            log.info("Starting an embedded indexer, this can be disabled by using `--no-indexer`.");
+            poolExecutor = executorsUtils.cachedThreadPool("webserver-indexer");
+            poolExecutor.execute(applicationContext.getBean(Indexer.class));
+            shutdownHook(false, () -> poolExecutor.shutdown());
+        }
+
         log.info("Webserver started");
-
-        this.shutdownHook(() -> {
-            this.applicationContext.close();
-        });
-
         Await.until(() -> !this.applicationContext.isRunning());
-
         return 0;
     }
 }

cli/src/main/java/io/kestra/cli/commands/servers/WorkerCommand.java

@@ -1,32 +1,32 @@
 package io.kestra.cli.commands.servers;
 
 import com.google.common.collect.ImmutableMap;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
+import io.kestra.core.contexts.KestraContext;
 import io.kestra.core.models.ServerType;
 import io.kestra.core.runners.Worker;
 import io.kestra.core.utils.Await;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
 import picocli.CommandLine;
+import picocli.CommandLine.Option;
 
 import java.util.Map;
-import javax.inject.Inject;
+import java.util.UUID;
 
 @CommandLine.Command(
     name = "worker",
-    description = "start a worker"
+    description = "Start the Kestra worker"
 )
-@Slf4j
-public class WorkerCommand extends AbstractCommand {
+public class WorkerCommand extends AbstractServerCommand {
+
     @Inject
     private ApplicationContext applicationContext;
 
-    @CommandLine.Option(names = {"-t", "--thread"}, description = "the number of concurrent threads to launch")
-    private int thread = Runtime.getRuntime().availableProcessors();
+    @Option(names = {"-t", "--thread"}, description = "The max number of worker threads, defaults to eight times the number of available processors")
+    private int thread = defaultWorkerThread();
 
-    public WorkerCommand() {
-        super(true);
-    }
+    @Option(names = {"-g", "--worker-group"}, description = "The worker group key, must match the regex [a-zA-Z0-9_-]+ (EE only)")
+    private String workerGroupKey = null;
 
     @SuppressWarnings("unused")
     public static Map<String, Object> propertiesOverrides() {
@@ -37,19 +37,28 @@ public class WorkerCommand extends AbstractCommand {
 
     @Override
     public Integer call() throws Exception {
+
+        KestraContext.getContext().injectWorkerConfigs(thread, workerGroupKey);
+
         super.call();
 
-        Worker worker = new Worker(applicationContext, this.thread);
+        if (this.workerGroupKey != null && !this.workerGroupKey.matches("[a-zA-Z0-9_-]+")) {
+            throw new IllegalArgumentException("The --worker-group option must match the [a-zA-Z0-9_-]+ pattern");
+        }
+
+        // FIXME: For backward-compatibility with Kestra 0.15.x and earliest we still used UUID for Worker ID instead of IdUtils
+        String workerID = UUID.randomUUID().toString();
+        Worker worker = applicationContext.createBean(Worker.class, workerID, this.thread, this.workerGroupKey);
         applicationContext.registerSingleton(worker);
 
         worker.run();
 
-        log.info("Workers started with {} thread(s)", this.thread);
-
-        this.shutdownHook(worker::close);
-
         Await.until(() -> !this.applicationContext.isRunning());
 
         return 0;
     }
+
+    public String workerGroupKey() {
+        return workerGroupKey;
+    }
 }

cli/src/main/java/io/kestra/cli/commands/sys/FlowListenersRestoreCommand.java

@@ -1,52 +0,0 @@
-package io.kestra.cli.commands.sys;
-
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import io.kestra.cli.AbstractCommand;
-import io.kestra.core.services.FlowListenersInterface;
-import io.kestra.core.utils.Await;
-import picocli.CommandLine;
-
-import java.time.Duration;
-import java.time.ZonedDateTime;
-import java.util.concurrent.atomic.AtomicReference;
-import javax.inject.Inject;
-
-@CommandLine.Command(
-    name = "restore-flow-listeners",
-    description = {"restore state-store for FlowListeners",
-        "Mostly usefull in case of restore of flow queue, the state store need to be init to avoid sending old revisions."
-    }
-)
-@Slf4j
-public class FlowListenersRestoreCommand extends AbstractCommand {
-    @Inject
-    private ApplicationContext applicationContext;
-
-    @CommandLine.Option(names = {"--timeout"}, description = "Timeout before quit, considering we complete the restore")
-    private Duration timeout = Duration.ofSeconds(15);
-
-    public FlowListenersRestoreCommand() {
-        super(false);
-    }
-
-    @Override
-    public Integer call() throws Exception {
-        super.call();
-
-        FlowListenersInterface flowListeners = applicationContext.getBean(FlowListenersInterface.class);
-
-        AtomicReference<ZonedDateTime> lastTime = new AtomicReference<>(ZonedDateTime.now());
-
-        flowListeners.listen(flows -> {
-            stdOut("Received {0} flows", flows.size());
-
-            lastTime.set(ZonedDateTime.now());
-        });
-
-        // we can't know when it's over to wait no more flow received
-        Await.until(() -> lastTime.get().compareTo(ZonedDateTime.now().minus(this.timeout)) < 0);
-
-        return 0;
-    }
-}

cli/src/main/java/io/kestra/cli/commands/sys/ReindexCommand.java

@@ -0,0 +1,49 @@
+package io.kestra.cli.commands.sys;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.core.models.flows.Flow;
+import io.kestra.core.models.flows.GenericFlow;
+import io.kestra.core.repositories.FlowRepositoryInterface;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.util.List;
+import java.util.Objects;
+
+@CommandLine.Command(
+    name = "reindex",
+    description = "Reindex all records of a type: read them from the database then update them",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class ReindexCommand extends AbstractCommand {
+    @Inject
+    private ApplicationContext applicationContext;
+
+    @CommandLine.Option(names = {"-t", "--type"}, description = "The type of the records to reindex, only 'flow' is supported for now.")
+    private String type;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        if ("flow".equals(type)) {
+            FlowRepositoryInterface flowRepository = applicationContext.getBean(FlowRepositoryInterface.class);
+
+            List<Flow> allFlow = flowRepository.findAllForAllTenants();
+            allFlow.stream()
+                .map(flow -> flowRepository.findByIdWithSource(flow.getTenantId(), flow.getNamespace(), flow.getId()).orElse(null))
+                .filter(Objects::nonNull)
+                .forEach(flow -> flowRepository.update(GenericFlow.of(flow), flow));
+
+            stdOut("Successfully reindex " + allFlow.size() + " flow(s).");
+        }
+        else {
+            throw new IllegalArgumentException("Reindexing type '" + type + "' is not supported");
+        }
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/sys/RestoreQueueCommand.java

@@ -1,64 +0,0 @@
-package io.kestra.cli.commands.sys;
-
-import io.kestra.cli.AbstractCommand;
-import io.kestra.cli.services.RestoreQueueService;
-import io.micronaut.context.ApplicationContext;
-import lombok.extern.slf4j.Slf4j;
-import picocli.CommandLine;
-
-import javax.inject.Inject;
-
-@CommandLine.Command(
-    name = "restore-queue",
-    description = {"send all data from a repository to kafka.",
-        "Mostly useful to send all flows, templates & triggers from repository to kafka in case of restore."
-    }
-)
-@Slf4j
-public class RestoreQueueCommand extends AbstractCommand {
-    @Inject
-    private ApplicationContext applicationContext;
-
-    @CommandLine.Option(names = {"--no-recreate"}, description = "Don't drop the topic and recreate it")
-    private boolean noRecreate = false;
-
-    @CommandLine.Option(names = {"--no-flows"}, description = "Don't send flows")
-    private boolean noFlows = false;
-
-    @CommandLine.Option(names = {"--no-templates"}, description = "Don't send templates")
-    private boolean noTemplates = false;
-
-    @CommandLine.Option(names = {"--no-triggers"}, description = "Don't send triggers")
-    private boolean noTriggers = false;
-
-    public RestoreQueueCommand() {
-        super(false);
-    }
-
-    @Override
-    public Integer call() throws Exception {
-        super.call();
-
-        RestoreQueueService restoreQueueService = applicationContext.getBean(RestoreQueueService.class);
-
-        // flows
-        if (!noFlows) {
-            int size = restoreQueueService.flows(noRecreate);
-            stdOut("Successfully send {0} flows", size);
-        }
-
-        // templates
-        if (!this.noTemplates) {
-            int size = restoreQueueService.templates(noRecreate);
-            stdOut("Successfully send {0} templates", size);
-        }
-
-        // trigger
-        if (!this.noTriggers) {
-            int size = restoreQueueService.triggers(noRecreate);
-            stdOut("Successfully send {0} triggers", size);
-        }
-
-        return 0;
-    }
-}

cli/src/main/java/io/kestra/cli/commands/sys/SubmitQueuedCommand.java

@@ -0,0 +1,67 @@
+package io.kestra.cli.commands.sys;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.core.models.executions.Execution;
+import io.kestra.core.models.flows.State;
+import io.kestra.core.queues.QueueFactoryInterface;
+import io.kestra.core.queues.QueueInterface;
+import io.kestra.core.runners.ExecutionQueued;
+import io.kestra.core.services.ConcurrencyLimitService;
+import io.kestra.jdbc.runner.AbstractJdbcExecutionQueuedStateStore;
+import io.micronaut.context.ApplicationContext;
+import jakarta.inject.Inject;
+import jakarta.inject.Named;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.util.Optional;
+
+@CommandLine.Command(
+    name = "submit-queued-execution",
+    description = {"Submit all queued execution to the executor",
+        "All queued execution will be submitted to the executor. Warning, if there is still running executions and concurrency limit configured, the executions may be queued again."
+    }
+)
+@Slf4j
+public class SubmitQueuedCommand extends AbstractCommand {
+    @Inject
+    private ApplicationContext applicationContext;
+
+    @Inject
+    @Named(QueueFactoryInterface.EXECUTION_NAMED)
+    private QueueInterface<Execution> executionQueue;
+
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        Optional<String> queueType = applicationContext.getProperty("kestra.queue.type", String.class);
+        if (queueType.isEmpty()) {
+            stdOut("Unable to submit queued executions, the 'kestra.queue.type' configuration is not set");
+            return 0;
+        }
+
+        int cpt = 0;
+        if (queueType.get().equals("kafka")) {
+            stdOut("Unable to submit queued executions, the 'kestra.queue.type' configuration is set to 'kafka', use the corresponding sys-ee command");
+            return 1;
+        }
+        else if (queueType.get().equals("postgres") || queueType.get().equals("mysql") || queueType.get().equals("h2")) {
+            var executionQueuedStorage = applicationContext.getBean(AbstractJdbcExecutionQueuedStateStore.class);
+            var concurrencyLimitService = applicationContext.getBean(ConcurrencyLimitService.class);
+
+            for (ExecutionQueued queued : executionQueuedStorage.getAllForAllTenants()) {
+                Execution restart = concurrencyLimitService.unqueue(queued.getExecution(), State.Type.RUNNING);
+                executionQueue.emit(restart);
+                cpt++;
+            }
+        }
+        else {
+            stdOut("Unable to submit queued executions, the 'kestra.queue.type' is set to an unknown type '{0}'", queueType.get());
+            return 1;
+        }
+
+        stdOut("Successfully submitted {0} queued executions", cpt);
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/sys/SysCommand.java

@@ -1,5 +1,6 @@
 package io.kestra.cli.commands.sys;
 
+import io.kestra.cli.commands.sys.database.DatabaseCommand;
 import io.micronaut.configuration.picocli.PicocliRunner;
 import lombok.extern.slf4j.Slf4j;
 import io.kestra.cli.AbstractCommand;
@@ -8,19 +9,16 @@ import picocli.CommandLine;
 
 @CommandLine.Command(
     name = "sys",
-    description = "handle systems maintenance",
+    description = "Manage system maintenance mode",
     mixinStandardHelpOptions = true,
     subcommands = {
-        RestoreQueueCommand.class,
-        FlowListenersRestoreCommand.class
+        ReindexCommand.class,
+        DatabaseCommand.class,
+        SubmitQueuedCommand.class,
     }
 )
 @Slf4j
 public class SysCommand extends AbstractCommand {
-    public SysCommand() {
-        super(false);
-    }
-
     @Override
     public Integer call() throws Exception {
         super.call();

cli/src/main/java/io/kestra/cli/commands/sys/database/DatabaseCommand.java

@@ -0,0 +1,27 @@
+package io.kestra.cli.commands.sys.database;
+
+import io.kestra.cli.AbstractCommand;
+import io.kestra.cli.App;
+import io.micronaut.configuration.picocli.PicocliRunner;
+import lombok.SneakyThrows;
+import picocli.CommandLine;
+
+@CommandLine.Command(
+    name = "database",
+    description = "Manage Kestra database",
+    mixinStandardHelpOptions = true,
+    subcommands = {
+        DatabaseMigrateCommand.class,
+    }
+)
+public class DatabaseCommand extends AbstractCommand {
+    @SneakyThrows
+    @Override
+    public Integer call() throws Exception {
+        super.call();
+
+        PicocliRunner.call(App.class, "sys", "database", "--help");
+
+        return 0;
+    }
+}

cli/src/main/java/io/kestra/cli/commands/sys/database/DatabaseMigrateCommand.java

@@ -0,0 +1,32 @@
+package io.kestra.cli.commands.sys.database;
+
+import io.kestra.cli.AbstractCommand;
+import lombok.extern.slf4j.Slf4j;
+import picocli.CommandLine;
+
+import java.util.Map;
+
+@CommandLine.Command(
+    name = "migrate",
+    description = "Force database schema migration.\nKestra uses Flyway to manage database schema evolution, this command will run Flyway then exit.",
+    mixinStandardHelpOptions = true
+)
+@Slf4j
+public class DatabaseMigrateCommand extends AbstractCommand {
+    @Override
+    public Integer call() throws Exception {
+        // Flyway will run automatically
+        super.call();
+        stdOut("Successfully run the database schema migration.");
+        return 0;
+    }
+
+    public static Map<String, Object> propertiesOverrides() {
+        // Forcing the props to enabled Flyway: it allows to disable Flyway globally and still using this command.
+        return Map.of(
+            "flyway.datasources.postgres.enabled", "true",
+            "flyway.datasources.mysql.enabled", "true",
+            "flyway.datasources.h2.enabled", "true"
+        );
+    }
+}

cli/src/main/java/io/kestra/cli/listeners/DeleteConfigurationApplicationListeners.java

@@ -10,8 +10,8 @@ import lombok.extern.slf4j.Slf4j;
 import java.io.IOException;
 import java.nio.file.Files;
 import java.nio.file.Path;
-import javax.inject.Inject;
-import javax.inject.Singleton;
+import jakarta.inject.Inject;
+import jakarta.inject.Singleton;
 
 import static io.kestra.core.utils.Rethrow.throwConsumer;
 

cli/src/main/java/io/kestra/cli/listeners/GracefulEmbeddedServiceShutdownListener.java

@@ -0,0 +1,69 @@
+package io.kestra.cli.listeners;
+
+import io.kestra.core.server.LocalServiceState;
+import io.kestra.core.server.Service;
+import io.kestra.core.server.ServiceRegistry;
+import io.micronaut.context.annotation.Requires;
+import io.micronaut.context.event.ApplicationEventListener;
+import io.micronaut.context.event.ShutdownEvent;
+import io.micronaut.core.annotation.Order;
+import io.micronaut.core.order.Ordered;
+import jakarta.inject.Inject;
+import jakarta.inject.Singleton;
+import lombok.extern.slf4j.Slf4j;
+
+import java.util.List;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ForkJoinPool;
+
+/**
+ * Global application shutdown handler.
+ * This handler gets effectively invoked before {@link jakarta.annotation.PreDestroy} does.
+ */
+@Singleton
+@Slf4j
+@Order(Ordered.LOWEST_PRECEDENCE)
+@Requires(property = "kestra.server-type")
+public class GracefulEmbeddedServiceShutdownListener implements ApplicationEventListener<ShutdownEvent> {
+    @Inject
+    ServiceRegistry serviceRegistry;
+
+    /**
+     * {@inheritDoc}
+     **/
+    @Override
+    public boolean supports(ShutdownEvent event) {
+        return ApplicationEventListener.super.supports(event);
+    }
+
+    /**
+     * Wait for services' close actions
+     *
+     * @param event the event to respond to
+     */
+    @Override
+    public void onApplicationEvent(ShutdownEvent event) {
+        List<LocalServiceState> states = serviceRegistry.all();
+        if (states.isEmpty()) {
+            return;
+        }
+
+        log.debug("Shutdown event received");
+
+        List<CompletableFuture<Void>> futures = states.stream()
+            .map(state -> CompletableFuture.runAsync(() -> closeService(state), ForkJoinPool.commonPool()))
+            .toList();
+
+        // Wait for all services to close, before shutting down the embedded server
+        CompletableFuture.allOf(futures.toArray(new CompletableFuture[0])).join();
+    }
+
+    private void closeService(LocalServiceState state) {
+        final Service service = state.service();
+        try {
+            service.unwrap().close();
+        } catch (Exception e) {
+            log.error("[Service id={}, type={}] Unexpected error on close", service.getId(), service.getType(), e);
+        }
+    }
+}

cli/src/main/java/io/kestra/cli/logger/StackdriverJsonLayout.java

@@ -10,6 +10,7 @@ import java.util.LinkedHashMap;
 import java.util.Map;
 import java.util.concurrent.TimeUnit;
 
+@SuppressWarnings("this-escape")
 @Data
 public class StackdriverJsonLayout extends JsonLayout {
     private static final String SEVERITY_ATTRIBUTE = "severity";