orcheo-studio 0.22.2 → 0.23.1

package/src/features/workflow/components/dialogs/publish-workflow-dialog.tsx

@@ -0,0 +1,121 @@
+import { useState } from "react";
+import { Check, Globe, Lock } from "lucide-react";
+
+import { Button } from "@/design-system/ui/button";
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from "@/design-system/ui/dialog";
+import { cn } from "@/lib/utils";
+
+export type PublishVisibility = "public" | "workspace";
+
+interface PublishOption {
+  value: PublishVisibility;
+  title: string;
+  description: string;
+  icon: typeof Globe;
+}
+
+const PUBLISH_OPTIONS: PublishOption[] = [
+  {
+    value: "public",
+    title: "Public",
+    description:
+      "Anyone with the link can use the workflow. No sign-in required.",
+    icon: Globe,
+  },
+  {
+    value: "workspace",
+    title: "Workspace only",
+    description:
+      "Only signed-in members of this workspace can use the workflow.",
+    icon: Lock,
+  },
+];
+
+interface PublishWorkflowDialogProps {
+  open: boolean;
+  isPending?: boolean;
+  onOpenChange: (open: boolean) => void;
+  onConfirm: (requireLogin: boolean) => Promise<void> | void;
+}
+
+export function PublishWorkflowDialog({
+  open,
+  isPending = false,
+  onOpenChange,
+  onConfirm,
+}: PublishWorkflowDialogProps) {
+  const [selected, setSelected] = useState<PublishVisibility>("public");
+  const handleOpenChange = (nextOpen: boolean) => {
+    if (!nextOpen) {
+      setSelected("public");
+    }
+    onOpenChange(nextOpen);
+  };
+
+  return (
+    <Dialog open={open} onOpenChange={handleOpenChange}>
+      <DialogContent>
+        <DialogHeader>
+          <DialogTitle>Publish workflow</DialogTitle>
+          <DialogDescription>
+            Choose who can access the published chat.
+          </DialogDescription>
+        </DialogHeader>
+        <div className="grid gap-3 py-2">
+          {PUBLISH_OPTIONS.map((option) => {
+            const Icon = option.icon;
+            const isSelected = selected === option.value;
+            return (
+              <button
+                key={option.value}
+                type="button"
+                aria-pressed={isSelected}
+                onClick={() => setSelected(option.value)}
+                disabled={isPending}
+                className={cn(
+                  "flex items-start gap-3 rounded-lg border p-3 text-left transition-colors",
+                  isSelected
+                    ? "border-primary bg-primary/5"
+                    : "border-border hover:bg-muted/40",
+                )}
+              >
+                <Icon className="mt-0.5 h-5 w-5 shrink-0 text-muted-foreground" />
+                <div className="min-w-0 flex-1">
+                  <p className="text-sm font-medium">{option.title}</p>
+                  <p className="text-xs text-muted-foreground">
+                    {option.description}
+                  </p>
+                </div>
+                {isSelected ? (
+                  <Check className="mt-0.5 h-4 w-4 shrink-0 text-primary" />
+                ) : null}
+              </button>
+            );
+          })}
+        </div>
+        <DialogFooter>
+          <Button
+            variant="outline"
+            onClick={() => handleOpenChange(false)}
+            disabled={isPending}
+          >
+            Cancel
+          </Button>
+          <Button
+            onClick={() => void onConfirm(selected === "workspace")}
+            disabled={isPending}
+          >
+            {isPending ? "Publishing..." : "Publish"}
+          </Button>
+        </DialogFooter>
+      </DialogContent>
+    </Dialog>
+  );
+}

package/src/features/workflow/data/templates/candidate-badges.ts

@@ -27,6 +27,33 @@ export interface CandidateBadgeDefinition extends CandidateBadgeSpec {
   templateDefinition: WorkflowTemplateDefinition;
 }
 
+/**
+ * Derive a candidate's group slug from its colleague-candidates directory path.
+ *
+ * Candidates are grouped one level under `colleagues/`: a directory that holds a
+ * `workflow.py` directly (no slash in the id) is independent and returns null,
+ * while a nested path such as `news_desk/feed_curator` belongs to the
+ * `news_desk` group.
+ */
+export const candidateGroupSlug = (
+  candidateId: string | null | undefined,
+): string | null => {
+  if (!candidateId) {
+    return null;
+  }
+  const separator = candidateId.indexOf("/");
+  return separator === -1 ? null : candidateId.slice(0, separator);
+};
+
+/**
+ * Turn an underscored group slug into a display label, e.g.
+ * `news_desk` → `News desk`.
+ */
+export const formatCandidateGroupName = (slug: string): string => {
+  const spaced = slug.replace(/_/g, " ");
+  return spaced.charAt(0).toUpperCase() + spaced.slice(1);
+};
+
 const toStringArray = (value: unknown): string[] | undefined => {
   if (!Array.isArray(value)) {
     return undefined;
@@ -70,6 +97,7 @@ const buildCandidateWorkflow = (
     handle: preserveHandle,
     name: spec.name,
     description: spec.description,
+    candidateGroup: candidateGroupSlug(spec.candidateId),
     avatarEmoji: avatarId,
     createdAt: "2026-01-01T00:00:00Z",
     updatedAt: "2026-01-01T00:00:00Z",

package/src/features/workflow/data/workflow-types.ts

@@ -34,6 +34,12 @@ export interface Workflow {
   id: string;
   handle?: string;
   teamId?: string | null;
+  /**
+   * Group slug for candidate colleagues, derived from the first path segment
+   * of the colleague-candidates directory (e.g. "news_desk"). Null when the
+   * candidate lives directly under `colleagues/` and is therefore independent.
+   */
+  candidateGroup?: string | null;
   name: string;
   description?: string;
   avatarEmoji?: string | null;

package/src/features/workflow/lib/workflow-storage-helpers.ts

@@ -218,8 +218,7 @@ const parseWorkflowMetadata = (
   }
 
   const metadataRecord = metadata as Record<string, unknown>;
-  const workflowMetadata =
-    metadataRecord.workflow ?? metadataRecord.canvas;
+  const workflowMetadata = metadataRecord.workflow ?? metadataRecord.canvas;
   if (!workflowMetadata || typeof workflowMetadata !== "object") {
     return (
       resolveTemplateFallback() ?? {
@@ -232,7 +231,9 @@ const parseWorkflowMetadata = (
   }
 
   const workflowRecord = workflowMetadata as Record<string, unknown>;
-  const snapshotPayload = workflowRecord.snapshot as WorkflowSnapshot | undefined;
+  const snapshotPayload = workflowRecord.snapshot as
+    | WorkflowSnapshot
+    | undefined;
   const summaryPayload = workflowRecord.summary as
     | WorkflowDiffResult["summary"]
     | undefined;
@@ -373,6 +374,7 @@ export const toStoredWorkflow = (
     lastRun: undefined,
     isArchived: workflow.is_archived,
     isPublic: workflow.is_public,
+    requireLogin: workflow.require_login,
     shareUrl: workflow.share_url ?? null,
     chatkitStartScreenPrompts: workflow.chatkit?.start_screen_prompts ?? null,
     chatkitSupportedModels: workflow.chatkit?.supported_models ?? null,

package/src/features/workflow/lib/workflow-storage-versioning.ts

@@ -124,4 +124,8 @@ export const persistRunnableConfig = async (
       }),
     },
   );
+  // The cached workflow still holds the previous runnable config; drop it so the
+  // next fetch reflects the value we just persisted.
+  invalidateWorkflowCache(workflowId);
+  return targetVersion;
 };

package/src/features/workflow/lib/workflow-storage.types.ts

@@ -249,6 +249,7 @@ export interface StoredWorkflow extends Workflow {
   draftAccess?: "personal" | "authenticated" | "workspace";
   isArchived?: boolean;
   isPublic?: boolean;
+  requireLogin?: boolean;
   shareUrl?: string | null;
   chatkitStartScreenPrompts?: ChatKitStartScreenPrompt[] | null;
   chatkitSupportedModels?: ChatKitSupportedModel[] | null;

package/src/features/workflow/pages/workflow/components/workflow-tab-content.tsx

@@ -4,6 +4,7 @@ import {
   AlertTriangle,
   Copy,
   ExternalLink,
+  LoaderCircle,
   Play,
   RefreshCw,
   UserMinus,
@@ -25,8 +26,15 @@ import {
 } from "@/design-system/ui/alert-dialog";
 import { Button } from "@/design-system/ui/button";
 import { Switch } from "@/design-system/ui/switch";
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipProvider,
+  TooltipTrigger,
+} from "@/design-system/ui/tooltip";
 import { toast } from "@/hooks/use-toast";
 import { ConfirmDeleteWorkflowDialog } from "@features/workflow/components/dialogs/confirm-delete-workflow-dialog";
+import { PublishWorkflowDialog } from "@features/workflow/components/dialogs/publish-workflow-dialog";
 import { UpdateWorkflowDialog } from "@features/workflow/components/dialogs/update-workflow-dialog";
 import { deleteWorkflow } from "@features/workflow/lib/workflow-storage";
 import {
@@ -57,10 +65,12 @@ export interface WorkflowTabContentProps {
   isLoading: boolean;
   loadError: string | null;
   isRunPending: boolean;
+  isRunning: boolean;
   onRunWorkflow: () => Promise<void>;
   onSaveConfig: (nextConfig: WorkflowRunnableConfig | null) => Promise<void>;
   hasCronTriggerNode: boolean;
   initialIsPublished: boolean;
+  initialRequireLogin: boolean;
   initialShareUrl: string | null;
   missingCredentials?: string[];
 }
@@ -186,10 +196,12 @@ export function WorkflowTabContent({
   isLoading,
   loadError,
   isRunPending,
+  isRunning,
   onRunWorkflow,
   onSaveConfig,
   hasCronTriggerNode,
   initialIsPublished,
+  initialRequireLogin,
   initialShareUrl,
   missingCredentials = [],
 }: WorkflowTabContentProps) {
@@ -198,9 +210,11 @@ export function WorkflowTabContent({
   const latestVersion = versions.at(-1);
   const [isConfigOpen, setIsConfigOpen] = useState(false);
   const [isPublished, setIsPublished] = useState(initialIsPublished);
+  const [requireLogin, setRequireLogin] = useState(initialRequireLogin);
   const [isScheduled, setIsScheduled] = useState(false);
   const [shareUrl, setShareUrl] = useState<string | null>(initialShareUrl);
   const [isPublishPending, setIsPublishPending] = useState(false);
+  const [isPublishDialogOpen, setIsPublishDialogOpen] = useState(false);
   const [isSchedulePending, setIsSchedulePending] = useState(false);
   const [diagramSvg, setDiagramSvg] = useState<string | null>(null);
   const [diagramError, setDiagramError] = useState<string | null>(null);
@@ -216,12 +230,14 @@ export function WorkflowTabContent({
     if (!workflowId) {
       setIsPublished(false);
       setIsScheduled(false);
+      setRequireLogin(false);
       setShareUrl(null);
       return;
     }
     setIsPublished(initialIsPublished);
+    setRequireLogin(initialRequireLogin);
     setShareUrl(initialShareUrl);
-  }, [initialIsPublished, initialShareUrl, workflowId]);
+  }, [initialIsPublished, initialRequireLogin, initialShareUrl, workflowId]);
 
   useEffect(() => {
     if (!workflowId) {
@@ -375,6 +391,8 @@ export function WorkflowTabContent({
 
   const canConfigure = Boolean(workflowId);
   const canRun = Boolean(workflowId && latestVersion);
+  const runButtonDisabled = !canRun || isRunPending || isRunning;
+  const runButtonLabel = isRunPending || isRunning ? "Running..." : "Run";
   const latestConfig = latestVersion?.runnableConfig ?? null;
   const canToggleSchedule = hasCronTriggerNode || isScheduled;
 
@@ -409,33 +427,60 @@ export function WorkflowTabContent({
       return;
     }
 
+    if (nextValue) {
+      setIsPublishDialogOpen(true);
+      return;
+    }
+
     setIsPublishPending(true);
     try {
-      if (nextValue) {
-        const result = await publishWorkflow(workflowId, { actor: "studio" });
-        setIsPublished(true);
-        setShareUrl(result.shareUrl);
-        toast({
-          title: "Workflow published",
-          description:
-            result.message ??
-            "Workflow is now public and available via its chat URL.",
-        });
-      } else {
-        await unpublishWorkflow(workflowId, "studio");
-        setIsPublished(false);
-        setShareUrl(null);
-        toast({
-          title: "Workflow unpublished",
-          description: "Workflow is now private.",
-        });
-      }
+      await unpublishWorkflow(workflowId, "studio");
+      setIsPublished(false);
+      setRequireLogin(false);
+      setShareUrl(null);
+      toast({
+        title: "Workflow unpublished",
+        description: "Workflow is now private.",
+      });
     } catch (error) {
-      setIsPublished(!nextValue);
+      setIsPublished(true);
       toast({
-        title: nextValue
-          ? "Failed to publish workflow"
-          : "Failed to unpublish workflow",
+        title: "Failed to unpublish workflow",
+        description: getErrorMessage(error, "Unable to update publish status."),
+        variant: "destructive",
+      });
+    } finally {
+      setIsPublishPending(false);
+    }
+  };
+
+  const handleConfirmPublish = async (requireLogin: boolean) => {
+    if (!workflowId) {
+      return;
+    }
+
+    setIsPublishPending(true);
+    try {
+      const result = await publishWorkflow(workflowId, {
+        actor: "studio",
+        requireLogin,
+      });
+      setIsPublished(true);
+      setRequireLogin(result.workflow.require_login);
+      setShareUrl(result.shareUrl);
+      setIsPublishDialogOpen(false);
+      toast({
+        title: "Workflow published",
+        description:
+          result.message ??
+          (requireLogin
+            ? "Workflow is now available to signed-in workspace members."
+            : "Workflow is now public and available via its chat URL."),
+      });
+    } catch (error) {
+      setIsPublished(false);
+      toast({
+        title: "Failed to publish workflow",
         description: getErrorMessage(error, "Unable to update publish status."),
         variant: "destructive",
       });
@@ -537,15 +582,31 @@ export function WorkflowTabContent({
             </p>
           </div>
           <div className="flex items-center gap-4">
-            <div className="flex items-center gap-2">
-              <span className="text-sm text-muted-foreground">Publish</span>
-              <Switch
-                aria-label="Publish workflow"
-                checked={isPublished}
-                onCheckedChange={(checked) => void handlePublishToggle(checked)}
-                disabled={isPublishPending}
-              />
-            </div>
+            <TooltipProvider>
+              <Tooltip>
+                <TooltipTrigger asChild>
+                  <div className="flex items-center gap-2">
+                    <span className="text-sm text-muted-foreground">
+                      Publish
+                    </span>
+                    <Switch
+                      aria-label="Publish workflow"
+                      checked={isPublished}
+                      onCheckedChange={(checked) =>
+                        void handlePublishToggle(checked)
+                      }
+                      disabled={isPublishPending}
+                    />
+                  </div>
+                </TooltipTrigger>
+                <TooltipContent className="max-w-xs">
+                  Expose this workflow through a shareable chat URL. When
+                  publishing, choose <strong>Public</strong> (anyone with the
+                  link) or <strong>Workspace only</strong> (sign-in required for
+                  members of this workspace).
+                </TooltipContent>
+              </Tooltip>
+            </TooltipProvider>
             <div className="flex items-center gap-2">
               <span className="text-sm text-muted-foreground">Schedule</span>
               <Switch
@@ -578,16 +639,23 @@ export function WorkflowTabContent({
             ) : null}
             <Button
               onClick={() => {
+                if (isRunPending || isRunning) {
+                  return;
+                }
                 if (hasMissingCredentials) {
                   setIsMissingCredentialsDialogOpen(true);
                   return;
                 }
                 void onRunWorkflow();
               }}
-              disabled={!canRun || isRunPending}
+              disabled={runButtonDisabled}
             >
-              <Play className="mr-1.5 h-4 w-4" />
-              {isRunPending ? "Running..." : "Run"}
+              {isRunPending || isRunning ? (
+                <LoaderCircle className="mr-1.5 h-4 w-4 animate-spin" />
+              ) : (
+                <Play className="mr-1.5 h-4 w-4" />
+              )}
+              {runButtonLabel}
             </Button>
             <Button
               variant="outline"
@@ -599,11 +667,21 @@ export function WorkflowTabContent({
           </div>
         </div>
 
+        {(isRunPending || isRunning) && (
+          <div
+            role="status"
+            className="rounded-md border border-primary/30 bg-primary/5 px-3 py-2 text-sm text-primary"
+          >
+            Workflow run in progress. Check the latest record on the Trace tab
+            for live status.
+          </div>
+        )}
+
         {isPublished && shareUrl && (
           <div className="flex items-center justify-between rounded-md border border-border/60 bg-muted/20 px-3 py-2">
             <div className="min-w-0">
               <p className="text-xs uppercase tracking-wide text-muted-foreground">
-                Public URL
+                {requireLogin ? "Members-only URL" : "Public URL"}
               </p>
               <a
                 href={shareUrl}
@@ -728,6 +806,13 @@ export function WorkflowTabContent({
         />
       ) : null}
 
+      <PublishWorkflowDialog
+        open={isPublishDialogOpen}
+        isPending={isPublishPending}
+        onOpenChange={setIsPublishDialogOpen}
+        onConfirm={handleConfirmPublish}
+      />
+
       <AlertDialog
         open={isMissingCredentialsDialogOpen}
         onOpenChange={setIsMissingCredentialsDialogOpen}

package/src/features/workflow/pages/workflow/hooks/controller/build-layout-props.ts

@@ -83,12 +83,14 @@ export function buildWorkflowLayoutProps(
     isLoading: core.metadata.isWorkflowLoading,
     loadError: core.metadata.workflowLoadError,
     isRunPending: execution.isRunPending,
+    isRunning: core.execution.isRunning,
     onRunWorkflow: execution.handleRunPersistedWorkflow,
     onSaveConfig: resources.saver.handleSaveWorkflowConfig,
     hasCronTriggerNode: hasSchedulableCronTrigger(
       core.metadata.workflowVersions ?? [],
     ),
     initialIsPublished: core.metadata.isWorkflowPublic,
+    initialRequireLogin: core.metadata.workflowRequireLogin,
     initialShareUrl: core.metadata.workflowShareUrl,
     missingCredentials: resources.credentialReadiness.missingCredentials,
   };

package/src/features/workflow/pages/workflow/hooks/controller/use-workflow-lifecycle.ts

@@ -18,6 +18,7 @@ export function useWorkflowLifecycle(
     setChatkitStartScreenPrompts: core.metadata.setChatkitStartScreenPrompts,
     setChatkitSupportedModels: core.metadata.setChatkitSupportedModels,
     setIsWorkflowPublic: core.metadata.setIsWorkflowPublic,
+    setWorkflowRequireLogin: core.metadata.setWorkflowRequireLogin,
     setWorkflowShareUrl: core.metadata.setWorkflowShareUrl,
     setIsWorkflowLoading: core.metadata.setIsWorkflowLoading,
     setWorkflowLoadError: core.metadata.setWorkflowLoadError,

package/src/features/workflow/pages/workflow/hooks/use-workflow-loader.ts

@@ -28,6 +28,7 @@ interface UseWorkflowLoaderParams {
     SetStateAction<ChatKitSupportedModel[] | null>
   >;
   setIsWorkflowPublic: Dispatch<SetStateAction<boolean>>;
+  setWorkflowRequireLogin: Dispatch<SetStateAction<boolean>>;
   setWorkflowShareUrl: Dispatch<SetStateAction<string | null>>;
   setIsWorkflowLoading: Dispatch<SetStateAction<boolean>>;
   setWorkflowLoadError: Dispatch<SetStateAction<string | null>>;
@@ -46,6 +47,7 @@ export function useWorkflowLoader({
   setChatkitStartScreenPrompts,
   setChatkitSupportedModels,
   setIsWorkflowPublic,
+  setWorkflowRequireLogin,
   setWorkflowShareUrl,
   setIsWorkflowLoading,
   setWorkflowLoadError,
@@ -67,6 +69,7 @@ export function useWorkflowLoader({
       setChatkitStartScreenPrompts(null);
       setChatkitSupportedModels(null);
       setIsWorkflowPublic(false);
+      setWorkflowRequireLogin(false);
       setWorkflowShareUrl(null);
       setExecutions([]);
       setActiveExecutionId(null);
@@ -102,6 +105,7 @@ export function useWorkflowLoader({
           );
           setChatkitSupportedModels(persisted.chatkitSupportedModels ?? null);
           setIsWorkflowPublic(persisted.isPublic ?? false);
+          setWorkflowRequireLogin(persisted.requireLogin ?? false);
           setWorkflowShareUrl(persisted.shareUrl ?? null);
           setExecutions([]);
           setActiveExecutionId(null);
@@ -124,6 +128,7 @@ export function useWorkflowLoader({
           setChatkitStartScreenPrompts(null);
           setChatkitSupportedModels(null);
           setIsWorkflowPublic(false);
+          setWorkflowRequireLogin(false);
           setWorkflowShareUrl(null);
           setExecutions([]);
           setActiveExecutionId(null);

package/src/features/workflow/pages/workflow/hooks/use-workflow-metadata-state.ts

@@ -21,6 +21,7 @@ export function useWorkflowMetadataState() {
     null,
   );
   const [isWorkflowPublic, setIsWorkflowPublic] = useState(false);
+  const [workflowRequireLogin, setWorkflowRequireLogin] = useState(false);
   const [workflowShareUrl, setWorkflowShareUrl] = useState<string | null>(null);
   const [chatkitStartScreenPrompts, setChatkitStartScreenPrompts] = useState<
     ChatKitStartScreenPrompt[] | null
@@ -46,6 +47,8 @@ export function useWorkflowMetadataState() {
     setWorkflowLoadError,
     isWorkflowPublic,
     setIsWorkflowPublic,
+    workflowRequireLogin,
+    setWorkflowRequireLogin,
     workflowShareUrl,
     setWorkflowShareUrl,
     chatkitStartScreenPrompts,

package/src/features/workflow/pages/workflow/hooks/use-workflow-saver.ts

@@ -58,11 +58,20 @@ export function useWorkflowSaver(
       }
 
       try {
-        await persistRunnableConfig(
+        const targetVersion = await persistRunnableConfig(
           currentWorkflowId,
           "studio",
           runnableConfig,
         );
+        // Keep the in-memory versions in sync so reopening the config sheet
+        // shows the saved values without a page refresh.
+        setWorkflowVersions((versions) =>
+          versions.map((version) =>
+            version.versionNumber === targetVersion
+              ? { ...version, runnableConfig }
+              : version,
+          ),
+        );
         toast({
           title: "Workflow config saved",
           description: `Saved config for "${workflowName}".`,
@@ -76,7 +85,7 @@ export function useWorkflowSaver(
         });
       }
     },
-    [currentWorkflowId, workflowName],
+    [currentWorkflowId, setWorkflowVersions, workflowName],
   );
 
   const handleSaveWorkflowDetails = useCallback(async () => {