windmill-components 1.613.5 → 1.623.1

package/package/components/icons/LessIcon.svelte

@@ -1,16 +0,0 @@
-<script lang="ts">"use strict";
-let { height = '24px', width = '24px', size = undefined } = $props();
-const derivedWidth = $derived(size ? size : width);
-const derivedHeight = $derived(size ? size : height);
-</script>
-
-<svg
-	fill="#000000"
-	width={derivedWidth}
-	height={derivedHeight}
-	viewBox="0 0 24 24"
-	xmlns="http://www.w3.org/2000/svg"
-	><path
-		d="M21.142 10.843c0-.64.098-1.018.098-1.707 0-1.067-.393-1.411-1.263-1.411h-.641v.755h.196c.444 0 .542.147.542.689 0 .509-.049 1.018-.049 1.608 0 .755.246 1.05.739 1.165v.049c-.493.116-.739.411-.739 1.166 0 .591.049 1.067.049 1.608 0 .558-.114.705-.542.705v.017h-.196v.788h.641c.87 0 1.263-.344 1.263-1.411 0-.706-.098-1.067-.098-1.707 0-.345.213-.706.854-.739v-.853c-.642-.016-.854-.377-.854-.722zm-3.299 1.001c-.493-.196-.952-.312-.952-.64 0-.246.197-.395.558-.395.361 0 .689.148 1.05.411l.657-.87c-.409-.313-.968-.641-1.724-.641-1.115 0-1.871.641-1.871 1.544 0 .804.706 1.214 1.298 1.443.508.196 1.001.361 1.001.689 0 .246-.197.41-.641.41-.41 0-.821-.164-1.263-.509l-.657.952c.492.41 1.247.689 1.871.689 1.313 0 2.019-.689 2.019-1.592-.001-.9-.707-1.277-1.346-1.491zm-11.21 1.854c-.114 0-.262-.098-.262-.41V7.725H4.039c-.886 0-1.279.344-1.279 1.411 0 .706.099 1.101.099 1.707 0 .345-.213.706-.854.739v.853c.641.017.854.378.854.723 0 .606-.099.968-.099 1.674 0 1.067.394 1.411 1.264 1.411h.64v-.755h-.197c-.411 0-.542-.164-.542-.706 0-.541.049-1.001.049-1.607 0-.756-.245-1.05-.738-1.165v-.051c.493-.114.738-.409.738-1.165 0-.59-.049-1.066-.049-1.607 0-.542.114-.689.542-.689h.442v4.711c0 1.001.345 1.657 1.346 1.657.313 0 .559-.05.739-.115l-.165-1.066c-.098.013-.146.013-.196.013zm7.238-1.854c-.509-.196-.969-.312-.969-.64 0-.246.197-.395.558-.395.361 0 .689.148 1.051.411l.656-.87c-.41-.313-.968-.641-1.723-.641-1.116 0-1.872.641-1.872 1.544 0 .804.707 1.214 1.297 1.443.51.196 1.002.361 1.002.689 0 .246-.197.41-.641.41-.41 0-.82-.164-1.264-.509l-.64.952c.492.41 1.247.689 1.871.689 1.313 0 2.019-.689 2.019-1.592.001-.9-.705-1.277-1.345-1.491zm-4.842-2.15c-1.198 0-2.347 1.001-2.314 2.577 0 1.624 1.066 2.576 2.479 2.576.591 0 1.247-.214 1.756-.558l-.492-.87c-.36.213-.706.312-1.066.312-.657 0-1.165-.312-1.297-1.066h2.971c.017-.115.049-.345.049-.607.016-1.33-.707-2.364-2.086-2.364zm-.935 2.068c.099-.655.492-.969.951-.969.592 0 .821.411.821.969H8.094z"
-	/></svg
->

package/package/components/icons/LessIcon.svelte.d.ts

@@ -1,8 +0,0 @@
-interface Props {
-    height?: string;
-    width?: string;
-    size?: number;
-}
-declare const LessIcon: import("svelte").Component<Props, {}, "">;
-type LessIcon = ReturnType<typeof LessIcon>;
-export default LessIcon;

package/package/components/icons/MarkdownIcon.svelte

@@ -1,20 +0,0 @@
-<script lang="ts">"use strict";
-let { height = '24px', width = '24px', size = undefined } = $props();
-const derivedWidth = $derived(size ? size : width);
-const derivedHeight = $derived(size ? size : height);
-</script>
-
-<svg
-	width={derivedWidth}
-	height={derivedHeight}
-	viewBox="0 0 24 24"
-	fill="none"
-	xmlns="http://www.w3.org/2000/svg"
->
-	<path
-		fill-rule="evenodd"
-		clip-rule="evenodd"
-		d="M0 8C0 5.79086 1.79086 4 4 4H20C22.2091 4 24 5.79086 24 8V16C24 18.2091 22.2091 20 20 20H4C1.79086 20 0 18.2091 0 16V8ZM4 6C2.89543 6 2 6.89543 2 8V16C2 17.1046 2.89543 18 4 18H20C21.1046 18 22 17.1046 22 16V8C22 6.89543 21.1046 6 20 6H4ZM5.68377 8.05132C6.09211 7.9152 6.54174 8.05566 6.8 8.4L9 11.3333L11.2 8.4C11.4583 8.05566 11.9079 7.9152 12.3162 8.05132C12.7246 8.18743 13 8.56957 13 9V15C13 15.5523 12.5523 16 12 16C11.4477 16 11 15.5523 11 15V12L9.8 13.6C9.61115 13.8518 9.31476 14 9 14C8.68524 14 8.38885 13.8518 8.2 13.6L7 12V15C7 15.5523 6.55228 16 6 16C5.44772 16 5 15.5523 5 15V9C5 8.56957 5.27543 8.18743 5.68377 8.05132ZM18 9C18 8.44772 17.5523 8 17 8C16.4477 8 16 8.44772 16 9V12.5858L15.7071 12.2929C15.3166 11.9024 14.6834 11.9024 14.2929 12.2929C13.9024 12.6834 13.9024 13.3166 14.2929 13.7071L16.2929 15.7071C16.6834 16.0976 17.3166 16.0976 17.7071 15.7071L19.7071 13.7071C20.0976 13.3166 20.0976 12.6834 19.7071 12.2929C19.3166 11.9024 18.6834 11.9024 18.2929 12.2929L18 12.5858V9Z"
-		fill="#000000"
-	/>
-</svg>

package/package/components/icons/MarkdownIcon.svelte.d.ts

@@ -1,8 +0,0 @@
-interface Props {
-    height?: string;
-    width?: string;
-    size?: number;
-}
-declare const MarkdownIcon: import("svelte").Component<Props, {}, "">;
-type MarkdownIcon = ReturnType<typeof MarkdownIcon>;
-export default MarkdownIcon;

package/package/components/icons/SassIcon.svelte

@@ -1,28 +0,0 @@
-<script lang="ts">"use strict";
-let { height = '24px', width = '24px', size = undefined } = $props();
-const derivedWidth = $derived(size ? size : width);
-const derivedHeight = $derived(size ? size : height);
-</script>
-
-<svg
-	width={derivedWidth}
-	height={derivedHeight}
-	viewBox="0 0 410.87 410.87"
-	xmlns="http://www.w3.org/2000/svg"
-	><defs
-		><style>
-			.cls-1 {
-				fill: #c69;
-				fill-rule: evenodd;
-			}
-			.cls-2 {
-				fill: #fff;
-			}</style></defs
-	><path
-		class="cls-1"
-		d="M205.44,0c113.46,0,205.44,91.98,205.44,205.44s-91.98,205.44-205.44,205.44S0,318.89,0,205.44,91.98,0,205.44,0h0Z"
-	/><path
-		class="cls-2"
-		d="M334.3,87.93c-9.3-36.49-69.8-48.48-127.06-28.14-34.08,12.11-70.96,31.11-97.49,55.92-31.54,29.5-36.57,55.17-34.49,65.9,7.31,37.85,59.18,62.6,80.5,80.95v.11c-6.29,3.09-52.3,26.38-63.07,50.19-11.36,25.12,1.81,43.14,10.53,45.57,27.02,7.52,54.74-6,69.64-28.23,14.38-21.45,13.18-49.14,6.93-62.92,8.62-2.27,18.67-3.29,31.44-1.8,36.04,4.21,43.11,26.71,41.76,36.13-1.35,9.42-8.91,14.6-11.44,16.16-2.53,1.56-3.3,2.11-3.09,3.27.31,1.69,1.48,1.63,3.63,1.26,2.97-.5,18.92-7.66,19.61-25.04.87-22.07-20.28-46.76-57.73-46.11-15.42.27-25.12,1.73-32.13,4.34-.52-.59-1.04-1.18-1.59-1.76-23.15-24.7-65.95-42.17-64.14-75.38.66-12.07,4.86-43.86,82.24-82.42,63.39-31.59,114.14-22.89,122.91-3.63,12.53,27.52-27.12,78.67-92.95,86.05-25.08,2.81-38.29-6.91-41.57-10.53-3.46-3.81-3.97-3.98-5.27-3.27-2.1,1.17-.77,4.53,0,6.54,1.97,5.12,10.03,14.19,23.78,18.7,12.1,3.97,41.54,6.15,77.16-7.62,39.88-15.43,71.03-58.35,61.88-94.22ZM164.61,273.87c2.99,11.06,2.66,21.37-.43,30.7-.34,1.04-.72,2.06-1.13,3.08-.41,1.01-.85,2.01-1.33,3-2.38,4.94-5.58,9.56-9.49,13.83-11.94,13.02-28.61,17.95-35.76,13.8-7.72-4.48-3.85-22.84,9.98-37.46,14.89-15.74,36.31-25.86,36.31-25.86l-.03-.06c.62-.33,1.24-.67,1.88-1.02Z"
-	/></svg
->

package/package/components/icons/SassIcon.svelte.d.ts

@@ -1,8 +0,0 @@
-interface Props {
-    height?: string;
-    width?: string;
-    size?: number;
-}
-declare const SassIcon: import("svelte").Component<Props, {}, "">;
-type SassIcon = ReturnType<typeof SassIcon>;
-export default SassIcon;

package/package/components/icons/YamlIcon.svelte

@@ -1,20 +0,0 @@
-<script lang="ts">"use strict";
-let { height = '24px', width = '24px', size = undefined } = $props();
-const derivedWidth = $derived(size ? size : width);
-const derivedHeight = $derived(size ? size : height);
-</script>
-
-<svg
-	width={derivedWidth}
-	height={derivedHeight}
-	viewBox="0 0 16 16"
-	fill="none"
-	xmlns="http://www.w3.org/2000/svg"
->
-	<path
-		fill-rule="nonzero"
-		clip-rule="nonzero"
-		d="M0.828288 0.135541C1.17426 -0.103975 1.64888 -0.017679 1.8884 0.328288L3.58007 2.77182L5.48344 0.297431C5.74 -0.0360947 6.21836 -0.0984891 6.55189 0.158069C6.88541 0.414627 6.94781 0.892984 6.69125 1.22651L4.30958 4.32268V7.11115C4.30958 7.53194 3.96846 7.87305 3.54767 7.87305C3.12689 7.87305 2.78577 7.53194 2.78577 7.11115V4.30154L0.635541 1.19565C0.396025 0.849685 0.482321 0.375057 0.828288 0.135541ZM8.88099 6.89044e-05C9.18311 6.89044e-05 9.45669 0.178586 9.57837 0.455123L12.372 6.8043C12.5415 7.18945 12.3666 7.63906 11.9815 7.80853C11.5963 7.978 11.1467 7.80315 10.9772 7.418L10.2835 5.84131H7.47847L6.78473 7.418C6.61526 7.80315 6.16565 7.978 5.7805 7.80853C5.39535 7.63906 5.2205 7.18945 5.38997 6.8043L8.18361 0.455123C8.30528 0.178586 8.57886 6.89044e-05 8.88099 6.89044e-05ZM8.14894 4.31751H9.61303L8.88099 2.65377L8.14894 4.31751ZM9.60471 8.66615C9.92856 8.76179 10.1508 9.05918 10.1508 9.39685V15.2381C10.1508 15.6589 9.80971 16 9.38892 16C8.96813 16 8.62702 15.6589 8.62702 15.2381V11.9768L7.23495 14.1282C7.09962 14.3373 6.8706 14.4671 6.62164 14.4757C6.37268 14.4844 6.13523 14.3707 5.98576 14.1714L4.30958 11.9365V15.2381C4.30958 15.6589 3.96846 16 3.54767 16C3.12689 16 2.78577 15.6589 2.78577 15.2381V9.65082C2.78577 9.32288 2.99562 9.03172 3.30674 8.92802C3.61786 8.82431 3.96043 8.93132 4.1572 9.19368L6.5492 12.383L8.74925 8.98295C8.93269 8.69945 9.28086 8.57051 9.60471 8.66615ZM11.9286 8.63495C12.3494 8.63495 12.6905 8.97607 12.6905 9.39685V14.4762H14.7222C15.143 14.4762 15.4841 14.8173 15.4841 15.2381C15.4841 15.6589 15.143 16 14.7222 16H11.9286C11.5078 16 11.1667 15.6589 11.1667 15.2381V9.39685C11.1667 8.97607 11.5078 8.63495 11.9286 8.63495Z"
-		fill="#000000"
-	/>
-</svg>

package/package/components/icons/YamlIcon.svelte.d.ts

@@ -1,8 +0,0 @@
-interface Props {
-    height?: string;
-    width?: string;
-    size?: number;
-}
-declare const YamlIcon: import("svelte").Component<Props, {}, "">;
-type YamlIcon = ReturnType<typeof YamlIcon>;
-export default YamlIcon;

package/package/components/instanceSettings/SecretBackendConfig.svelte

@@ -1,514 +0,0 @@
-<script lang="ts">import { Button } from '../common';
-import Password from '../Password.svelte';
-import { SettingService } from '../../gen';
-import { sendUserToast } from '../../toast';
-import TextInput from '../text_input/TextInput.svelte';
-import { Database, Lock, Server, ArrowLeft, ArrowRight } from 'lucide-svelte';
-import { enterpriseLicense } from '../../stores';
-import ToggleButtonGroup from '../common/toggleButton-v2/ToggleButtonGroup.svelte';
-import ToggleButton from '../common/toggleButton-v2/ToggleButton.svelte';
-import ConfirmationModal from '../common/confirmationModal/ConfirmationModal.svelte';
-import EEOnly from '../EEOnly.svelte';
-let { values, disabled = false } = $props();
-// Initialize default values if not set
-$effect(() => {
-    if (!$values['secret_backend']) {
-        $values['secret_backend'] = { type: 'Database' };
-    }
-});
-let selectedType = $derived($values['secret_backend']?.type ?? 'Database');
-// Derive auth method from current config
-// We check jwt_role === null because setAuthMethod explicitly sets jwt_role to null for token mode
-// and sets token to null for jwt mode. This allows empty token values while still tracking the selection.
-let authMethod = $derived.by(() => {
-    const config = $values['secret_backend'];
-    if (!config || config.type !== 'HashiCorpVault')
-        return 'jwt';
-    // If jwt_role is explicitly null, we're in token mode; otherwise jwt mode
-    return config.jwt_role === null ? 'token' : 'jwt';
-});
-let testingConnection = $state(false);
-let migratingToVault = $state(false);
-let migratingToDatabase = $state(false);
-let migrateToVaultModalOpen = $state(false);
-let migrateToDatabaseModalOpen = $state(false);
-// Check if Vault option should be disabled (non-EE)
-let vaultDisabled = $derived(!$enterpriseLicense);
-function setBackendType(type) {
-    if (!type)
-        return;
-    // Prevent selecting Vault in non-EE
-    if (type === 'HashiCorpVault' && vaultDisabled) {
-        return;
-    }
-    if (type === 'Database') {
-        $values['secret_backend'] = { type: 'Database' };
-    }
-    else if (type === 'HashiCorpVault') {
-        $values['secret_backend'] = {
-            type: 'HashiCorpVault',
-            address: $values['secret_backend']?.address ?? '',
-            mount_path: $values['secret_backend']?.mount_path ?? 'windmill',
-            jwt_role: $values['secret_backend']?.jwt_role ?? 'windmill-secrets',
-            namespace: $values['secret_backend']?.namespace ?? null,
-            token: $values['secret_backend']?.token ?? null
-        };
-    }
-}
-function setAuthMethod(method) {
-    if (!method || !$values['secret_backend'] || $values['secret_backend'].type !== 'HashiCorpVault')
-        return;
-    if (method === 'token') {
-        // Clear JWT role when switching to token auth
-        $values['secret_backend'] = {
-            ...$values['secret_backend'],
-            jwt_role: null,
-            token: $values['secret_backend'].token ?? ''
-        };
-    }
-    else if (method === 'jwt') {
-        // Clear token when switching to JWT auth
-        $values['secret_backend'] = {
-            ...$values['secret_backend'],
-            token: null,
-            jwt_role: $values['secret_backend'].jwt_role ?? 'windmill-secrets'
-        };
-    }
-}
-function getVaultSettings() {
-    return {
-        address: $values['secret_backend'].address,
-        mount_path: $values['secret_backend'].mount_path,
-        jwt_role: $values['secret_backend'].jwt_role,
-        namespace: $values['secret_backend'].namespace || undefined,
-        token: $values['secret_backend'].token || undefined
-    };
-}
-async function testVaultConnection() {
-    if (!$values['secret_backend'] || $values['secret_backend'].type !== 'HashiCorpVault') {
-        return;
-    }
-    testingConnection = true;
-    try {
-        await SettingService.testSecretBackend({
-            requestBody: getVaultSettings()
-        });
-        sendUserToast('Successfully connected to HashiCorp Vault');
-    }
-    catch (error) {
-        sendUserToast('Failed to connect to Vault: ' + error.message, true);
-    }
-    finally {
-        testingConnection = false;
-    }
-}
-async function migrateSecretsToVault() {
-    if (!$values['secret_backend'] || $values['secret_backend'].type !== 'HashiCorpVault') {
-        return;
-    }
-    migratingToVault = true;
-    try {
-        const report = await SettingService.migrateSecretsToVault({
-            requestBody: getVaultSettings()
-        });
-        if (report.failed_count > 0) {
-            sendUserToast(`Migration completed with errors: ${report.migrated_count}/${report.total_secrets} secrets migrated, ${report.failed_count} failed`, true);
-            console.error('Migration failures:', report.failures);
-        }
-        else {
-            sendUserToast(`Successfully migrated ${report.migrated_count}/${report.total_secrets} secrets to Vault`);
-        }
-    }
-    catch (error) {
-        sendUserToast('Failed to migrate secrets to Vault: ' + error.message, true);
-    }
-    finally {
-        migratingToVault = false;
-        migrateToVaultModalOpen = false;
-    }
-}
-async function migrateSecretsToDatabase() {
-    if (!$values['secret_backend'] || $values['secret_backend'].type !== 'HashiCorpVault') {
-        return;
-    }
-    migratingToDatabase = true;
-    try {
-        const report = await SettingService.migrateSecretsToDatabase({
-            requestBody: getVaultSettings()
-        });
-        if (report.failed_count > 0) {
-            sendUserToast(`Migration completed with errors: ${report.migrated_count}/${report.total_secrets} secrets migrated, ${report.failed_count} failed`, true);
-            console.error('Migration failures:', report.failures);
-        }
-        else {
-            sendUserToast(`Successfully migrated ${report.migrated_count}/${report.total_secrets} secrets to database`);
-        }
-    }
-    catch (error) {
-        sendUserToast('Failed to migrate secrets to database: ' + error.message, true);
-    }
-    finally {
-        migratingToDatabase = false;
-        migrateToDatabaseModalOpen = false;
-    }
-}
-function isVaultConfigValid() {
-    if (!$values['secret_backend'] || $values['secret_backend'].type !== 'HashiCorpVault') {
-        return false;
-    }
-    const hasAddress = $values['secret_backend'].address?.trim() !== '';
-    const hasMountPath = $values['secret_backend'].mount_path?.trim() !== '';
-    const hasToken = $values['secret_backend'].token?.trim();
-    const hasJwtRole = $values['secret_backend'].jwt_role?.trim();
-    // Must have address and mount path, plus either token OR jwt_role (not both)
-    return hasAddress && hasMountPath && (hasToken || hasJwtRole);
-}
-// Get the base URL for JWKS endpoint instructions (from instance settings)
-let baseUrl = $derived($values['base_url'] ?? 'https://your-windmill-instance.com');
-</script>
-
-<div class="space-y-6">
-	<!-- Backend Type Selector -->
-	<div class="flex flex-col gap-2">
-		<label class="block text-xs font-semibold text-emphasis">Backend Type</label>
-		<ToggleButtonGroup
-			selected={selectedType}
-			onSelected={(v) => setBackendType(v)}
-		>
-			{#snippet children({ item: toggleButton })}
-				<ToggleButton
-					value="Database"
-					label="Database"
-					tooltip="Store secrets encrypted in the database (default)"
-					item={toggleButton}
-				/>
-				<ToggleButton
-					value="HashiCorpVault"
-					label="HashiCorp Vault (Beta)"
-					tooltip={vaultDisabled
-						? 'HashiCorp Vault integration requires Enterprise Edition'
-						: 'Store secrets in HashiCorp Vault (Beta feature)'}
-					item={toggleButton}
-					disabled={vaultDisabled}
-				/>
-			{/snippet}
-		</ToggleButtonGroup>
-		{#if vaultDisabled}
-			<div class="flex items-center gap-1">
-				<EEOnly>HashiCorp Vault integration requires Enterprise Edition</EEOnly>
-			</div>
-		{/if}
-	</div>
-
-	{#if selectedType === 'Database'}
-		<div class="flex items-center gap-2 p-4 bg-surface-secondary rounded-lg">
-			<Database class="text-primary" size={20} />
-			<div>
-				<p class="text-sm font-medium text-emphasis">Database Storage (Default)</p>
-				<p class="text-xs text-secondary">
-					Secrets are encrypted using workspace-specific keys and stored in the PostgreSQL database.
-				</p>
-			</div>
-		</div>
-	{:else if selectedType === 'HashiCorpVault'}
-		<!-- Vault Configuration -->
-		<div class="space-y-4 p-4 border rounded-lg">
-			<div class="flex items-center gap-2 mb-4">
-				<Lock class="text-primary" size={20} />
-				<div>
-					<p class="text-sm font-medium text-emphasis">
-						HashiCorp Vault Configuration
-						<span
-							class="ml-2 px-1.5 py-0.5 text-2xs font-medium bg-yellow-100 text-yellow-800 dark:bg-yellow-900 dark:text-yellow-200 rounded"
-							>Beta</span
-						>
-					</p>
-					<p class="text-xs text-secondary">
-						Store secrets in an external HashiCorp Vault instance.
-					</p>
-				</div>
-			</div>
-
-			<div class="grid grid-cols-1 gap-4">
-				<div class="flex flex-col gap-1">
-					<label for="vault_address" class="block text-xs font-semibold text-emphasis"
-						>Vault Address</label
-					>
-					<TextInput
-						inputProps={{
-							type: 'text',
-							id: 'vault_address',
-							placeholder: 'https://vault.company.com:8200',
-							disabled: disabled
-						}}
-						bind:value={$values['secret_backend'].address}
-					/>
-				</div>
-
-				<div class="flex flex-col gap-1">
-					<label for="vault_mount_path" class="block text-xs font-semibold text-emphasis"
-						>KV Mount Path</label
-					>
-					<span class="text-2xs text-secondary">The KV v2 secrets engine mount path in Vault</span>
-					<TextInput
-						inputProps={{
-							type: 'text',
-							id: 'vault_mount_path',
-							placeholder: 'windmill',
-							disabled: disabled
-						}}
-						bind:value={$values['secret_backend'].mount_path}
-					/>
-				</div>
-
-				<!-- Authentication Method Toggle -->
-				<div class="flex flex-col gap-2">
-					<label class="block text-xs font-semibold text-emphasis">Authentication Method</label>
-					<ToggleButtonGroup
-						selected={authMethod}
-						onSelected={(v) => setAuthMethod(v)}
-					>
-						{#snippet children({ item: toggleButton })}
-							<ToggleButton
-								value="jwt"
-								label="JWT Auth"
-								tooltip="Authenticate using Windmill-signed JWTs (recommended for production)"
-								item={toggleButton}
-								{disabled}
-							/>
-							<ToggleButton
-								value="token"
-								label="Static Token"
-								tooltip="Use a static Vault token (for testing/development)"
-								item={toggleButton}
-								{disabled}
-							/>
-						{/snippet}
-					</ToggleButtonGroup>
-				</div>
-
-				{#if authMethod === 'token'}
-					<div class="flex flex-col gap-1 p-3 bg-surface-secondary rounded-lg">
-						<label for="vault_token" class="block text-xs font-semibold text-emphasis"
-							>Vault Token</label
-						>
-						<span class="text-2xs text-secondary"
-							>Static token for authentication. Recommended only for testing/development.</span
-						>
-						<Password bind:password={$values['secret_backend'].token} small {disabled} />
-					</div>
-				{:else}
-					<div class="flex flex-col gap-2 p-3 bg-surface-secondary rounded-lg">
-						<label for="vault_jwt_role" class="block text-xs font-semibold text-emphasis"
-							>JWT Auth Role</label
-						>
-						<span class="text-2xs text-secondary"
-							>The JWT authentication role configured in Vault.</span
-						>
-						<TextInput
-							inputProps={{
-								type: 'text',
-								id: 'vault_jwt_role',
-								placeholder: 'windmill-secrets',
-								disabled: disabled
-							}}
-							bind:value={$values['secret_backend'].jwt_role}
-						/>
-
-						<!-- Vault JWT Setup Instructions -->
-						<details class="mt-2">
-							<summary class="text-xs font-medium text-secondary cursor-pointer hover:text-primary"
-								>Vault JWT Setup Instructions</summary
-							>
-							<div class="mt-2 p-2 bg-surface rounded text-2xs text-secondary space-y-2">
-								<p>Configure Vault to accept JWTs from Windmill:</p>
-								<div class="bg-gray-100 dark:bg-gray-800 p-2 rounded font-mono text-2xs overflow-x-auto">
-									<pre># Enable JWT auth method
-vault auth enable jwt
-
-# Configure JWT auth with Windmill's JWKS endpoint
-vault write auth/jwt/config \
-  jwks_url="{baseUrl}/.well-known/jwks.json" \
-  bound_issuer="{baseUrl}"
-
-# Create a policy for Windmill secrets
-vault policy write windmill-secrets - &lt;&lt;EOF
-path "windmill/data/*" &#123;
-  capabilities = ["create", "read", "update", "delete"]
-&#125;
-path "windmill/metadata/*" &#123;
-  capabilities = ["list", "delete"]
-&#125;
-EOF
-
-# Create the JWT role
-vault write auth/jwt/role/windmill-secrets \
-  role_type="jwt" \
-  bound_audiences="{baseUrl}" \
-  user_claim="email" \
-  policies="windmill-secrets" \
-  ttl="1h"</pre>
-								</div>
-								<p class="text-yellow-600 dark:text-yellow-400">
-									Replace <code>windmill-secrets</code> with your role name if different.
-								</p>
-							</div>
-						</details>
-					</div>
-				{/if}
-
-				<div class="flex flex-col gap-1">
-					<label for="vault_namespace" class="block text-xs font-semibold text-emphasis"
-						>Namespace (optional)</label
-					>
-					<span class="text-2xs text-secondary"
-						>Vault Enterprise namespace (leave empty if not using namespaces)</span
-					>
-					<TextInput
-						inputProps={{
-							type: 'text',
-							id: 'vault_namespace',
-							placeholder: 'admin/my-namespace',
-							disabled: disabled
-						}}
-						bind:value={$values['secret_backend'].namespace}
-					/>
-				</div>
-			</div>
-
-			<!-- Action Buttons -->
-			<div class="flex flex-col gap-4 pt-4 border-t">
-				<div class="flex gap-2">
-					<Button
-						unifiedSize="md"
-						variant="accent"
-						onclick={testVaultConnection}
-						disabled={disabled || !isVaultConfigValid() || testingConnection}
-						loading={testingConnection}
-						startIcon={{ icon: Server }}
-					>
-						Test Connection
-					</Button>
-				</div>
-
-				<!-- Migration Section -->
-				<div class="flex flex-col gap-4 pt-4 border-t">
-					<label class="block text-xs font-semibold text-emphasis">Secret Migration</label>
-					<span class="text-2xs text-secondary">
-						Migrate secrets between the database and HashiCorp Vault. Original values are NOT
-						deleted to allow for rollback.
-					</span>
-
-					<div class="flex gap-4">
-						<!-- Database to Vault -->
-						<div class="flex-1 p-3 border rounded-lg">
-							<div class="flex items-center gap-2 mb-2">
-								<Database size={16} />
-								<ArrowRight size={16} />
-								<Lock size={16} />
-							</div>
-							<p class="text-xs font-medium mb-2">Database → Vault</p>
-							<p class="text-2xs text-secondary mb-3">
-								Decrypt secrets from database and store in Vault
-							</p>
-							<Button
-								unifiedSize="sm"
-								variant="default"
-								onclick={() => (migrateToVaultModalOpen = true)}
-								disabled={disabled || !isVaultConfigValid() || migratingToVault}
-								startIcon={{ icon: ArrowRight }}
-							>
-								Migrate to Vault
-							</Button>
-						</div>
-
-						<!-- Vault to Database -->
-						<div class="flex-1 p-3 border rounded-lg">
-							<div class="flex items-center gap-2 mb-2">
-								<Lock size={16} />
-								<ArrowLeft size={16} />
-								<Database size={16} />
-							</div>
-							<p class="text-xs font-medium mb-2">Vault → Database</p>
-							<p class="text-2xs text-secondary mb-3">
-								Read secrets from Vault and encrypt in database
-							</p>
-							<Button
-								unifiedSize="sm"
-								variant="default"
-								onclick={() => (migrateToDatabaseModalOpen = true)}
-								disabled={disabled || !isVaultConfigValid() || migratingToDatabase}
-								startIcon={{ icon: ArrowLeft }}
-							>
-								Migrate to Database
-							</Button>
-						</div>
-					</div>
-				</div>
-			</div>
-		</div>
-	{/if}
-</div>
-
-<!-- Migrate to Vault Modal -->
-<ConfirmationModal
-	title="Migrate Secrets to Vault"
-	confirmationText="Migrate"
-	open={migrateToVaultModalOpen}
-	loading={migratingToVault}
-	type="reload"
-	onCanceled={() => {
-		migrateToVaultModalOpen = false
-	}}
-	onConfirmed={migrateSecretsToVault}
->
-	{#snippet children()}
-		<div class="flex flex-col gap-2">
-			<p>
-				This will migrate all existing secrets from the database to HashiCorp Vault. The process
-				will:
-			</p>
-			<ol class="list-decimal list-inside text-sm space-y-1">
-				<li>Read all encrypted secrets from the database</li>
-				<li>Decrypt them using the workspace encryption keys</li>
-				<li>Store them in HashiCorp Vault under the configured mount path</li>
-			</ol>
-			<p class="text-yellow-600 dark:text-yellow-400 text-sm mt-2">
-				Note: Database values are NOT deleted automatically. You can manually clear them after
-				verifying the migration was successful.
-			</p>
-			<p>Are you sure you want to proceed?</p>
-		</div>
-	{/snippet}
-</ConfirmationModal>
-
-<!-- Migrate to Database Modal -->
-<ConfirmationModal
-	title="Migrate Secrets to Database"
-	confirmationText="Migrate"
-	open={migrateToDatabaseModalOpen}
-	loading={migratingToDatabase}
-	type="reload"
-	onCanceled={() => {
-		migrateToDatabaseModalOpen = false
-	}}
-	onConfirmed={migrateSecretsToDatabase}
->
-	{#snippet children()}
-		<div class="flex flex-col gap-2">
-			<p>
-				This will migrate all secrets from HashiCorp Vault back to the database. The process will:
-			</p>
-			<ol class="list-decimal list-inside text-sm space-y-1">
-				<li>List all secrets in Vault for each workspace</li>
-				<li>Read each secret value from Vault</li>
-				<li>Encrypt and store them in the database</li>
-			</ol>
-			<p class="text-yellow-600 dark:text-yellow-400 text-sm mt-2">
-				Note: Vault values are NOT deleted automatically. Only secrets that already exist in the
-				database will be updated.
-			</p>
-			<p>Are you sure you want to proceed?</p>
-		</div>
-	{/snippet}
-</ConfirmationModal>

package/package/components/instanceSettings/SecretBackendConfig.svelte.d.ts

@@ -1,8 +0,0 @@
-import type { Writable } from 'svelte/store';
-interface Props {
-    values: Writable<Record<string, any>>;
-    disabled?: boolean;
-}
-declare const SecretBackendConfig: import("svelte").Component<Props, {}, "">;
-type SecretBackendConfig = ReturnType<typeof SecretBackendConfig>;
-export default SecretBackendConfig;