PRODUCTION · INTERNAL ORCHESTRATION LAYER

One place to run every internal script, flow, and tool.

Maestro is the orchestration layer behind your-policy.ai — a self-hosted Windmill instance where Claude builds and deploys smaller integrations, internal apps, and recurring jobs without standing up a new Railway service and GitHub repo for each one. Staff-only, gated behind IDP SSO.

Windmill · self-hosted SSO + Cloudflare Access maestro.your-policy.ai ↗
CAPABILITIES
01 · Scripts & Flows
⚙️
Internal · Windmill
Code-first automation in 20+ languages

Every job is a small script (Python, TypeScript, Go, Bash, SQL, and more) or a flow chaining scripts together. Claude authors them via the wmill CLI and an MCP connection, then deploys live with an auto-generated webhook URL. Every run is logged with inputs, outputs, and timing.

Languages Python · TypeScript · Go · Bash · SQL · more
Triggers Webhook · schedule (cron) · manual · flow step
Authoring wmill CLI + MCP server (Claude-driven)
Observability Per-run logs, inputs, outputs, timing
Open Maestro ↗
02 · Internal Apps
🪟
Internal · Staff UI
Staff-facing UIs over the same logic

Where a job needs a human in the loop, Windmill renders a small app UI on top of the same script — forms, tables, action buttons, all wired to the underlying code with no separate frontend. Useful for one-off staff tools that don't need their own service, repo, or deploy pipeline.

Pattern Script + form → published app route
Audience YourPolicy staff (SSO-gated)
Iteration Edit script → live immediately
Use Lookups, audits, one-click actions
Internal · SSO required
03 · Shared Resources
🔐
Internal · Centralized
One place for credentials and connections

Credentials for our AMS, CRM, data lake, IDP, and telephony platform live as shared Windmill resources, referenced by name from any script. Rotating a secret updates every job that uses it. No copy-pasting tokens between repos, no per-project Railway env vars.

Systems AMS · CRM · data lake · IDP · telephony
Storage Windmill resources (encrypted, scoped)
Access Referenced by name in any script or flow
Rotation Update once, propagates everywhere
Internal · admin only
Platform
Windmill Self-hosted
Infrastructure
Railway PostgreSQL Server + Worker
Access
Cloudflare Access Microsoft Entra SSO @your-policy.com
Authoring
wmill CLI MCP server Python · TS · Go · Bash · SQL

Maestro is an internal platform at YourPolicy — staff-only, behind SSO. Built on Windmill, deployed on Railway, wired into the systems we already use.