windmill-components 1.542.4 → 1.550.0

package/package/components/workspaceSettings/ModelTokenLimits.svelte

@@ -0,0 +1,165 @@
+<script lang="ts">import { getModelMaxTokens } from '../copilot/lib';
+import { ChevronDown, ChevronUp } from 'lucide-svelte';
+import { slide } from 'svelte/transition';
+const MAX_TOKENS_LIMIT = 2000000;
+let { aiProviders, maxTokensPerModel = $bindable() } = $props();
+let errors = $state({});
+let collapsedProviders = $state({});
+// Group available models by provider
+const modelsByProvider = $derived(Object.entries(aiProviders).reduce((acc, [provider, config]) => {
+    acc[provider] = config.models.map((model) => ({
+        provider: provider,
+        model
+    }));
+    return acc;
+}, {}));
+function getModelKey(provider, model) {
+    return `${provider}:${model}`;
+}
+function getDefaultTokensForModel(provider, model) {
+    return getModelMaxTokens(provider, model);
+}
+function getCurrentTokensForModel(provider, model) {
+    const modelKey = getModelKey(provider, model);
+    return maxTokensPerModel[modelKey] ?? getDefaultTokensForModel(provider, model);
+}
+function updateTokensForModel(provider, model, tokens) {
+    const modelKey = getModelKey(provider, model);
+    if (tokens < 1 || tokens > MAX_TOKENS_LIMIT) {
+        errors[modelKey] = 'Token limit must be between 1 and ' + MAX_TOKENS_LIMIT;
+        return;
+    }
+    const defaultTokens = getDefaultTokensForModel(provider, model);
+    if (tokens === defaultTokens) {
+        // Remove from object if it's the default value
+        const newSettings = { ...maxTokensPerModel };
+        delete newSettings[modelKey];
+        maxTokensPerModel = newSettings;
+    }
+    else {
+        maxTokensPerModel = {
+            ...maxTokensPerModel,
+            [modelKey]: tokens
+        };
+    }
+    errors[modelKey] = '';
+}
+function resetModelToDefault(provider, model) {
+    const modelKey = getModelKey(provider, model);
+    const newSettings = { ...maxTokensPerModel };
+    delete newSettings[modelKey];
+    maxTokensPerModel = newSettings;
+}
+function isModelAtDefault(provider, model) {
+    const currentTokens = getCurrentTokensForModel(provider, model);
+    const defaultTokens = getDefaultTokensForModel(provider, model);
+    return currentTokens === defaultTokens;
+}
+function toggleProvider(provider) {
+    collapsedProviders[provider] = !collapsedProviders[provider];
+}
+function hasCustomSettings(provider, models) {
+    return models.some((m) => !isModelAtDefault(provider, m.model));
+}
+$effect(() => {
+    // Initialize collapsedProviders to true for all providers
+    collapsedProviders = {
+        ...Object.fromEntries(Object.keys(aiProviders).map((provider) => [provider, true]))
+    };
+});
+</script>
+
+{#if Object.keys(aiProviders).length > 0}
+	<div class="flex flex-col gap-4">
+		<div class="flex flex-col gap-1">
+			<p class="font-semibold">Model Output Limits</p>
+			<p class="text-xs text-secondary">
+				Configure maximum token limits for each model. These limits apply to all AI chat
+				interactions in the workspace.
+			</p>
+		</div>
+
+		<div class="flex flex-col gap-3">
+			{#each Object.entries(modelsByProvider).filter(([provider, models]) => models.length > 0) as [provider, models]}
+				{@const isExpanded = !collapsedProviders[provider]}
+				{@const hasCustom = hasCustomSettings(provider, models)}
+				<div class="border border-gray-200 dark:border-gray-700 rounded-md">
+					<button
+						type="button"
+						onclick={() => toggleProvider(provider)}
+						class="w-full px-4 py-3 flex items-center justify-between bg-surface-secondary hover:bg-surface-hover transition-colors rounded-md"
+					>
+						<div class="flex items-center gap-2">
+							<h4 class="font-medium text-sm capitalize">{provider}</h4>
+							{#if hasCustom}
+								<span
+									class="text-xs px-2 py-0.5 bg-blue-100 dark:bg-blue-900 text-blue-700 dark:text-blue-300 rounded"
+								>
+									Modified
+								</span>
+							{/if}
+						</div>
+						{#if isExpanded}
+							<ChevronUp size={16} class="text-gray-500" />
+						{:else}
+							<ChevronDown size={16} class="text-gray-500" />
+						{/if}
+					</button>
+
+					{#if isExpanded}
+						<div transition:slide|local={{ duration: 200 }} class="p-3">
+							<div class="space-y-3">
+								{#each models as { model }}
+									{@const currentTokens = getCurrentTokensForModel(provider as AIProvider, model)}
+									{@const defaultTokens = getDefaultTokensForModel(provider as AIProvider, model)}
+									{@const isAtDefault = isModelAtDefault(provider as AIProvider, model)}
+									<div class="flex flex-col gap-1">
+										<div class="flex items-center gap-3">
+											<div class="flex-1 min-w-0">
+												<span class="text-sm text-primary truncate block">{model}</span>
+											</div>
+											<div class="flex items-center gap-2">
+												<input
+													type="number"
+													min="1"
+													max={MAX_TOKENS_LIMIT}
+													value={currentTokens}
+													oninput={(e) => {
+														const value = parseInt(e.currentTarget.value)
+														if (!isNaN(value)) {
+															updateTokensForModel(provider as AIProvider, model, value)
+														}
+													}}
+													class="w-20 px-2 py-1 text-xs text-center border border-gray-200 dark:border-gray-700 rounded bg-surface focus:outline-none focus:ring-2 focus:ring-blue-500 focus:border-transparent"
+												/>
+												<span class="text-xs text-secondary whitespace-nowrap">tokens</span>
+											</div>
+										</div>
+										{#if !isAtDefault}
+											<div class="text-xs text-tertiary flex flex-row items-center gap-1">
+												<span>Default: {defaultTokens} tokens</span>
+												<button
+													type="button"
+													onclick={() => resetModelToDefault(provider as AIProvider, model)}
+													class="text-xs text-blue-600 hover:text-blue-800 dark:text-blue-400 dark:hover:text-blue-300 whitespace-nowrap"
+													title="Reset to default ({defaultTokens})"
+												>
+													Reset
+												</button>
+											</div>
+											{#if errors[getModelKey(provider as AIProvider, model)]}
+												<div class="text-xs text-red-500"
+													>{errors[getModelKey(provider as AIProvider, model)]}</div
+												>
+											{/if}
+										{/if}
+									</div>
+								{/each}
+							</div>
+						</div>
+					{/if}
+				</div>
+			{/each}
+		</div>
+	</div>
+{/if}

package/package/components/workspaceSettings/ModelTokenLimits.svelte.d.ts

@@ -0,0 +1,8 @@
+import type { AIConfig } from '../../gen';
+type $$ComponentProps = {
+    aiProviders: Exclude<AIConfig['providers'], undefined>;
+    maxTokensPerModel: Record<string, number>;
+};
+declare const ModelTokenLimits: import("svelte").Component<$$ComponentProps, {}, "maxTokensPerModel">;
+type ModelTokenLimits = ReturnType<typeof ModelTokenLimits>;
+export default ModelTokenLimits;

package/package/components/workspaceSettings/StorageSettings.svelte

@@ -9,12 +9,15 @@ import Description from '../Description.svelte';
 import ResourcePicker from '../ResourcePicker.svelte';
 import Toggle from '../Toggle.svelte';
 import Tooltip from '../Tooltip.svelte';
-import { convertFrontendToBackendSetting } from '../../workspace_settings';
+import { convertFrontendToBackendSetting, defaultS3AdvancedPermissions } from '../../workspace_settings';
 import { WorkspaceService } from '../../gen';
 import S3FilePicker from '../S3FilePicker.svelte';
 import Portal from '../Portal.svelte';
 import { fade } from 'svelte/transition';
 import Popover from '../meltComponents/Popover.svelte';
+import ClearableInput from '../common/clearableInput/ClearableInput.svelte';
+import MultiSelect from '../select/MultiSelect.svelte';
+import CloseButton from '../common/CloseButton.svelte';
 let { s3ResourceSettings = $bindable() } = $props();
 let s3FileViewer = $state();
 async function editWindmillLFSSettings() {
@@ -186,7 +189,12 @@ async function editWindmillLFSSettings() {
 						}
 						s3ResourceSettings.secondaryStorage.push([
 							`storage_${s3ResourceSettings.secondaryStorage.length + 1}`,
-							{ resourcePath: '', resourceType: 's3', publicResource: false }
+							{
+								resourcePath: '',
+								resourceType: 's3',
+								publicResource: false,
+								advancedPermissions: defaultS3AdvancedPermissions(!!$enterpriseLicense)
+							}
 						])
 						s3ResourceSettings.secondaryStorage = s3ResourceSettings.secondaryStorage
 					}}><Plus size={14} />Add secondary storage</Button
@@ -210,64 +218,128 @@ async function editWindmillLFSSettings() {
 {/if}
 
 {#snippet permissionBtn(storage: NonNullable<S3ResourceSettings['secondaryStorage']>[number][1])}
-	<Popover closeOnOtherPopoverOpen>
+	<Popover closeOnOtherPopoverOpen placement="left">
 		<svelte:fragment slot="trigger">
 			<Button variant="border" btnClasses="px-2.5" color="dark" size="sm">
 				<Shield size={16} /> Permissions <ChevronDown size={14} />
 			</Button>
 		</svelte:fragment>
 		<svelte:fragment slot="content">
-			<div class="flex flex-col gap-3 mx-4 pb-4 w-[40rem]">
-				{#if storage.resourceType == 's3'}
-					<div class="flex flex-col mt-5 mb-1 gap-1">
-						<!-- this can be removed once parent moves to runes -->
-						<!-- svelte-ignore binding_property_non_reactive -->
-						<Toggle
-							disabled={emptyString(storage.resourcePath)}
-							bind:checked={storage.publicResource}
-							options={{
-								right:
-									'S3 resource details and content can be accessed by all users of this workspace',
-								rightTooltip:
-									'If set, all users of this workspace will have access the to entire content of the S3 bucket, as well as the resource details and the "open preview" button. This effectively by-pass the permissions set on the resource and makes it public to everyone.'
-							}}
-						/>
-						{#if storage.publicResource === true}
-							<div class="pt-2"></div>
+			<div class="flex flex-col gap-3 mx-4 pb-4 pt-5 w-[48rem]">
+				{#if !$enterpriseLicense}
+					<Alert
+						type={storage.advancedPermissions ? 'error' : 'info'}
+						title="Advanced permission rules are an Enterprise feature"
+					>
+						Consider upgrading to Windmill EE to use advanced permission rules to control access to
+						your object storage at a more granular level.</Alert
+					>
+				{/if}
+				<Toggle
+					bind:checked={
+						() => !!storage.advancedPermissions,
+						(v) => {
+							storage.advancedPermissions = v
+								? defaultS3AdvancedPermissions(!!$enterpriseLicense)
+								: undefined
+							if (v) storage.publicResource = false
+						}
+					}
+					options={{
+						right: 'Enable advanced permission rules',
+						rightTooltip: 'Control precisely which paths are allowed to your users.'
+					}}
+					disabled={!storage.advancedPermissions && !$enterpriseLicense}
+				/>
+				{#if storage.advancedPermissions}
+					{@render advancedPermissionsEditor(storage.advancedPermissions)}
+				{/if}
+				{#if !storage.advancedPermissions}
+					{#if storage.resourceType == 's3'}
+						<div class="flex flex-col mt-2 mb-1 gap-1">
+							<Toggle
+								disabled={emptyString(storage.resourcePath)}
+								bind:checked={storage.publicResource}
+								options={{
+									right:
+										'S3 resource details and content can be accessed by all users of this workspace',
+									rightTooltip:
+										'If set, all users of this workspace will have access the to entire content of the S3 bucket, as well as the resource details and the "open preview" button. This effectively by-pass the permissions set on the resource and makes it public to everyone.'
+								}}
+							/>
+							{#if storage.publicResource === true}
+								<div class="pt-2"></div>
 
-							<Alert type="warning" title="S3 bucket content and resource details are shared">
-								S3 resource public access is ON, which means that the entire content of the S3
-								bucket will be accessible to all the users of this workspace regardless of whether
-								they have access the resource or not. Similarly, certain Windmill SDK endpoints can
-								be used in scripts to access the resource details, including public and private
-								keys.
-							</Alert>
-						{/if}
-					</div>
-				{:else}
-					<div class="flex flex-col mt-5 mb-1 gap-1">
-						<!-- this can be removed once parent moves to runes -->
-						<!-- svelte-ignore binding_property_non_reactive -->
-						<Toggle
-							disabled={emptyString(storage.resourcePath)}
-							bind:checked={storage.publicResource}
-							options={{
-								right: 'object storage content can be accessed by all users of this workspace',
-								rightTooltip:
-									'If set, all users of this workspace will have access the to entire content of the object storage.'
-							}}
-						/>
-						{#if storage.publicResource === true}
-							<div class="pt-2"></div>
-							<Alert type="warning" title="object content">
-								object public access is ON, which means that the entire content of the object store
-								will be accessible to all the users of this workspace regardless of whether they
-								have access the resource or not.
-							</Alert>
-						{/if}
-					</div>
+								<Alert
+									type="warning"
+									title="(Legacy) S3 bucket content and resource details are shared"
+								>
+									S3 resource public access is ON, which means that the entire content of the S3
+									bucket will be accessible to all the users of this workspace regardless of whether
+									they have access the resource or not. Similarly, certain Windmill SDK endpoints
+									can be used in scripts to access the resource details, including public and
+									private keys.
+								</Alert>
+							{/if}
+						</div>
+					{:else}
+						<div class="flex flex-col mt-5 mb-1 gap-1 max-w-[40rem]">
+							<Toggle
+								disabled={emptyString(storage.resourcePath)}
+								bind:checked={storage.publicResource}
+								options={{
+									right: 'object storage content can be accessed by all users of this workspace',
+									rightTooltip:
+										'If set, all users of this workspace will have access the to entire content of the object storage.'
+								}}
+							/>
+							{#if storage.publicResource === true}
+								<div class="pt-2"></div>
+								<Alert
+									type="warning"
+									title="(Legacy) Object storage content and resource details are shared"
+								>
+									object public access is ON, which means that the entire content of the object
+									store will be accessible to all the users of this workspace regardless of whether
+									they have access the resource or not.
+								</Alert>
+							{/if}
+						</div>
+					{/if}
 				{/if}
 			</div>
 		</svelte:fragment>
 	</Popover>
 {/snippet}
+
+{#snippet advancedPermissionsEditor(rules: S3ResourceSettingsItem['advancedPermissions'])}
+	<Alert title="Standard Unix-style glob syntax is supported">
+		The following will be interpolated :
+		<ul class="list-disc pl-6">
+			<li><code>{'{username}'}</code> : Nickname of the user doing the request</li>
+			<li><code>{'{group}'}</code> : Any group that the user belongs to</li>
+			<li><code>{'{folder_read}'}</code> : Any folder that the user has read access to</li>
+			<li><code>{'{folder_write}'}</code> : Any folder that the user has write access to</li>
+		</ul>
+		<br />
+		Note that changes may take up to 1 minute to propagate due to cache invalidation
+	</Alert>
+	{#each rules ?? [] as item, idx}
+		<div class="flex gap-2">
+			<ClearableInput bind:value={item.pattern} placeholder="Pattern" />
+			<MultiSelect
+				items={[{ value: 'read' }, { value: 'write' }, { value: 'delete' }, { value: 'list' }]}
+				bind:value={item.allow}
+				disablePortal
+				class="w-[20rem]"
+				placeholder="Deny all access"
+				hideMainClearBtn
+			/>
+			<CloseButton onClick={() => rules?.splice(idx, 1)} />
+		</div>
+	{/each}
+	<Button size="xs" variant="border" on:click={() => rules?.push({ pattern: '', allow: [] })}>
+		<Plus size={14} />
+		Add permission rule
+	</Button>
+{/snippet}

package/package/gen/core/OpenAPI.js

@@ -21,7 +21,7 @@ export const OpenAPI = {
     PASSWORD: undefined,
     TOKEN: undefined,
     USERNAME: undefined,
-    VERSION: '1.542.0',
+    VERSION: '1.549.1',
     WITH_CREDENTIALS: false,
     interceptors: {
         request: new Interceptors(),

package/package/gen/schemas.gen.d.ts

@@ -657,6 +657,23 @@ export declare const $FlowStatusModule: {
                 readonly type: "boolean";
             };
         };
+        readonly flow_jobs_duration: {
+            readonly type: "object";
+            readonly properties: {
+                readonly started_at: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                    };
+                };
+                readonly duration_ms: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "integer";
+                    };
+                };
+            };
+        };
         readonly branch_chosen: {
             readonly type: "object";
             readonly properties: {
@@ -848,6 +865,14 @@ export declare const $AIConfig: {
                 readonly type: "string";
             };
         };
+        readonly max_tokens_per_model: {
+            readonly type: "object";
+            readonly additionalProperties: {
+                readonly type: "integer";
+                readonly minimum: 1;
+                readonly maximum: 2000000;
+            };
+        };
     };
 };
 export declare const $Alert: {
@@ -1825,6 +1850,9 @@ export declare const $EditVariable: {
 export declare const $AuditLog: {
     readonly type: "object";
     readonly properties: {
+        readonly workspace_id: {
+            readonly type: "string";
+        };
         readonly id: {
             readonly type: "integer";
         };
@@ -1853,7 +1881,7 @@ export declare const $AuditLog: {
             readonly type: "string";
         };
     };
-    readonly required: readonly ["id", "timestamp", "username", "operation", "action_kind"];
+    readonly required: readonly ["workspace_id", "id", "timestamp", "username", "operation", "action_kind"];
 };
 export declare const $MainArgSignature: {
     readonly type: "object";
@@ -2994,6 +3022,9 @@ export declare const $WebsocketTrigger: {
         readonly can_return_message: {
             readonly type: "boolean";
         };
+        readonly can_return_error_result: {
+            readonly type: "boolean";
+        };
         readonly error_handler_path: {
             readonly type: "string";
         };
@@ -3004,7 +3035,7 @@ export declare const $WebsocketTrigger: {
             readonly $ref: "#/components/schemas/Retry";
         };
     };
-    readonly required: readonly ["url", "enabled", "filters", "can_return_message"];
+    readonly required: readonly ["url", "enabled", "filters", "can_return_message", "can_return_error_result"];
 };
 export declare const $NewWebsocketTrigger: {
     readonly type: "object";
@@ -3049,6 +3080,9 @@ export declare const $NewWebsocketTrigger: {
         readonly can_return_message: {
             readonly type: "boolean";
         };
+        readonly can_return_error_result: {
+            readonly type: "boolean";
+        };
         readonly error_handler_path: {
             readonly type: "string";
         };
@@ -3059,7 +3093,7 @@ export declare const $NewWebsocketTrigger: {
             readonly $ref: "#/components/schemas/Retry";
         };
     };
-    readonly required: readonly ["path", "script_path", "url", "is_flow", "filters", "can_return_message"];
+    readonly required: readonly ["path", "script_path", "url", "is_flow", "filters", "can_return_message", "can_return_error_result"];
 };
 export declare const $EditWebsocketTrigger: {
     readonly type: "object";
@@ -3101,6 +3135,9 @@ export declare const $EditWebsocketTrigger: {
         readonly can_return_message: {
             readonly type: "boolean";
         };
+        readonly can_return_error_result: {
+            readonly type: "boolean";
+        };
         readonly error_handler_path: {
             readonly type: "string";
         };
@@ -3111,7 +3148,7 @@ export declare const $EditWebsocketTrigger: {
             readonly $ref: "#/components/schemas/Retry";
         };
     };
-    readonly required: readonly ["path", "script_path", "url", "is_flow", "filters", "can_return_message"];
+    readonly required: readonly ["path", "script_path", "url", "is_flow", "filters", "can_return_message", "can_return_error_result"];
 };
 export declare const $WebsocketTriggerInitialMessage: {
     readonly anyOf: readonly [{
@@ -3443,6 +3480,13 @@ export declare const $GcpTriggerData: {
         readonly auto_acknowledge_msg: {
             readonly type: "boolean";
         };
+        readonly ack_deadline: {
+            readonly type: "integer";
+            readonly format: "int32";
+            readonly minimum: 10;
+            readonly maximum: 600;
+            readonly description: "Time in seconds within which the message must be acknowledged. If not provided, defaults to the subscription's acknowledgment deadline (600 seconds).";
+        };
         readonly error_handler_path: {
             readonly type: "string";
         };
@@ -4439,6 +4483,31 @@ export declare const $Workspace: {
     };
     readonly required: readonly ["id", "name", "owner", "created_at"];
 };
+export declare const $DependencyMap: {
+    readonly type: "object";
+    readonly properties: {
+        readonly workspace_id: {
+            readonly type: "string";
+            readonly nullable: true;
+        };
+        readonly importer_path: {
+            readonly type: "string";
+            readonly nullable: true;
+        };
+        readonly importer_kind: {
+            readonly type: "string";
+            readonly nullable: true;
+        };
+        readonly imported_path: {
+            readonly type: "string";
+            readonly nullable: true;
+        };
+        readonly importer_node_id: {
+            readonly type: "string";
+            readonly nullable: true;
+        };
+    };
+};
 export declare const $WorkspaceInvite: {
     readonly type: "object";
     readonly properties: {
@@ -4964,6 +5033,12 @@ export declare const $LargeFileStorage: {
         readonly public_resource: {
             readonly type: "boolean";
         };
+        readonly advanced_permissions: {
+            readonly type: "array";
+            readonly items: {
+                readonly $ref: "#/components/schemas/S3PermissionRule";
+            };
+        };
         readonly secondary_storage: {
             readonly type: "object";
             readonly additionalProperties: {
@@ -5030,6 +5105,56 @@ export declare const $DucklakeSettings: {
         };
     };
 };
+export declare const $DynamicInputData: {
+    readonly type: "object";
+    readonly properties: {
+        readonly entrypoint_function: {
+            readonly type: "string";
+            readonly description: "Name of the function to execute for dynamic select";
+        };
+        readonly args: {
+            readonly type: "object";
+            readonly description: "Arguments to pass to the function";
+        };
+        readonly runnable_ref: {
+            readonly type: "object";
+            readonly oneOf: readonly [{
+                readonly type: "object";
+                readonly properties: {
+                    readonly source: {
+                        readonly type: "string";
+                        readonly enum: readonly ["deployed"];
+                    };
+                    readonly path: {
+                        readonly type: "string";
+                        readonly description: "Path to the deployed script or flow";
+                    };
+                    readonly runnable_kind: {
+                        readonly $ref: "#/components/schemas/RunnableKind";
+                    };
+                };
+                readonly required: readonly ["source", "path", "runnable_kind"];
+            }, {
+                readonly type: "object";
+                readonly properties: {
+                    readonly source: {
+                        readonly type: "string";
+                        readonly enum: readonly ["inline"];
+                    };
+                    readonly code: {
+                        readonly type: "string";
+                        readonly description: "Code content for inline execution";
+                    };
+                    readonly language: {
+                        readonly $ref: "#/components/schemas/ScriptLang";
+                    };
+                };
+                readonly required: readonly ["source", "code"];
+            }];
+        };
+    };
+    readonly required: readonly ["entrypoint_function", "runnable_ref"];
+};
 export declare const $WindmillLargeFile: {
     readonly type: "object";
     readonly properties: {
@@ -5154,6 +5279,18 @@ export declare const $WorkspaceDefaultScripts: {
         };
     };
 };
+export declare const $S3PermissionRule: {
+    readonly type: "object";
+    readonly properties: {
+        readonly pattern: {
+            readonly type: "string";
+        };
+        readonly allow: {
+            readonly type: "string";
+        };
+    };
+    readonly required: readonly ["pattern", "allow"];
+};
 export declare const $GitRepositorySettings: {
     readonly type: "object";
     readonly properties: {
@@ -5210,18 +5347,6 @@ export declare const $GitRepositorySettings: {
     };
     readonly required: readonly ["script_path", "git_repo_resource_path"];
 };
-export declare const $UploadFilePart: {
-    readonly type: "object";
-    readonly properties: {
-        readonly part_number: {
-            readonly type: "integer";
-        };
-        readonly tag: {
-            readonly type: "string";
-        };
-    };
-    readonly required: readonly ["part_number", "tag"];
-};
 export declare const $MetricMetadata: {
     readonly type: "object";
     readonly properties: {