windmill-components 1.655.2 → 1.665.1

package/package/components/ScriptEditor.svelte.d.ts

@@ -1,5 +1,5 @@
 import type { Schema, SupportedLanguage } from '../common';
-import { type Preview } from '../gen';
+import { type Preview, type ScriptModule } from '../gen';
 import Editor from './Editor.svelte';
 import DiffEditor from './DiffEditor.svelte';
 import type { ScriptEditorWhitelabelCustomUi } from './custom_ui';
@@ -11,7 +11,7 @@ interface Props {
     path: string | undefined;
     lang: Preview['language'];
     kind?: string | undefined;
-    template?: 'pgsql' | 'mysql' | 'script' | 'docker' | 'powershell' | 'bunnative' | 'claudesandbox';
+    template?: 'pgsql' | 'mysql' | 'script' | 'docker' | 'powershell' | 'bunnative' | 'claudesandbox' | 'wac_python' | 'wac_typescript';
     tag: string | undefined;
     initialArgs?: Record<string, any>;
     fixedOverflowWidgets?: boolean;
@@ -34,6 +34,9 @@ interface Props {
     lastDeployedCode?: string | undefined;
     disableAi?: boolean;
     assets?: AssetWithAltAccessType[];
+    modules?: {
+        [key: string]: ScriptModule;
+    } | null;
     editorBarRight?: import('svelte').Snippet;
     enablePreprocessorSnippet?: boolean;
 }
@@ -71,6 +74,7 @@ declare const ScriptEditor: $$__sveltets_2_IsomorphicComponent<Props, {
 } & {
     [evt: string]: CustomEvent<any>;
 }, {}, {
+    flushModuleState: () => void;
     setArgs: (nargs: Record<string, any>) => void;
     runTest: () => Promise<string>;
     inferSchema: (code: string, { nlang, resetArgs, applyInitialArgs }?: {
@@ -81,6 +85,6 @@ declare const ScriptEditor: $$__sveltets_2_IsomorphicComponent<Props, {
     setCollaborationMode: () => Promise<void>;
     disableCollaboration: () => void;
     updateArgs: (newArgs: Record<string, any>) => Promise<void>;
-}, "args" | "code" | "assets" | "schema" | "selectedTab" | "editor" | "hasPreprocessor" | "diffEditor" | "captureTable">;
+}, "modules" | "args" | "code" | "assets" | "schema" | "selectedTab" | "editor" | "hasPreprocessor" | "diffEditor" | "captureTable">;
 type ScriptEditor = InstanceType<typeof ScriptEditor>;
 export default ScriptEditor;

package/package/components/SuperadminSettings.svelte

@@ -16,6 +16,7 @@ let innerComponent = $state();
 let uptodateVersion = $state(undefined);
 let yamlMode = $state(false);
 let hasUnsavedChanges = $state(false);
+let hasAnyInvalid = $state(false);
 let showCloseConfirmModal = $state(false);
 let diffData = $state({ original: '', modified: '' });
 let inlineDiff = $state(false);
@@ -132,8 +133,10 @@ function handleReviewChanges() {
 			bind:this={innerComponent}
 			closeDrawer={handleClose}
 			showHeaderInfo={false}
+			{disableChatOffset}
 			bind:yamlMode
 			bind:hasUnsavedChanges
+			bind:hasAnyInvalid
 		/>
 	</DrawerContent>
 </Drawer>
@@ -146,7 +149,7 @@ function handleReviewChanges() {
 				options={{ right: 'Unified' }}
 				size="xs"
 			/>
-			<SaveButton onSave={handleSaveAndCloseDiff} disabled={!hasUnsavedChanges} size="xs" />
+			<SaveButton onSave={handleSaveAndCloseDiff} disabled={!hasUnsavedChanges || hasAnyInvalid} size="xs" />
 		{/snippet}
 		<!-- DiffEditor reacts to inlineDiff changes via $effect — no {#key} needed -->
 		<div class="h-full">

package/package/components/SuperadminSettingsInner.svelte

@@ -16,7 +16,7 @@ import { truncate } from '../utils';
 import ToggleButtonGroup from './common/toggleButton-v2/ToggleButtonGroup.svelte';
 import ToggleButton from './common/toggleButton-v2/ToggleButton.svelte';
 import { userStore, workspaceStore } from '../stores';
-import { ExternalLink, Pencil, UserMinus, UserPlus } from 'lucide-svelte';
+import { Ban, CheckCircle2, ExternalLink, Pencil, UserMinus, UserPlus } from 'lucide-svelte';
 import DropdownV2 from './DropdownV2.svelte';
 import Popover from './meltComponents/Popover.svelte';
 import ConfirmationModal from './common/confirmationModal/ConfirmationModal.svelte';
@@ -31,8 +31,9 @@ import { instanceSettingsNavigationGroups, tabToCategoryMap, tabToAuthSubTab, ca
 import TextInput from './text_input/TextInput.svelte';
 import SettingsPageHeader from './settings/SettingsPageHeader.svelte';
 import SettingsSearchInput from './instanceSettings/SettingsSearchInput.svelte';
+import InstanceAISettings from './instanceSettings/InstanceAISettings.svelte';
 let filter = $state('');
-let { closeDrawer, showHeaderInfo = true, yamlMode = $bindable(false), hasUnsavedChanges = $bindable(false) } = $props();
+let { closeDrawer, showHeaderInfo = true, disableChatOffset = false, yamlMode = $bindable(false), hasUnsavedChanges = $bindable(false), hasAnyInvalid = $bindable(false) } = $props();
 function removeHash() {
     const index = page.url.href.lastIndexOf('#');
     if (index === -1)
@@ -47,6 +48,8 @@ let users = $state([]);
 let filteredUsers = $state([]);
 let deleteConfirmedCallback = $state(undefined);
 let deleteUserEmail = $state('');
+let disableConfirmedCallback = $state(undefined);
+let disableUserEmail = $state('');
 let editWrappers = $state({});
 let activeOnly = $state(false);
 async function listUsers(activeOnly) {
@@ -201,7 +204,9 @@ onDestroy(() => {
 		<div class="flex-1 min-w-0 h-full">
 			<div class="h-full overflow-auto bg-surface">
 				<div class="h-fit px-8 py-4">
-					{#if tab === 'users' && !yamlMode}
+					{#if tab === 'ai' && !yamlMode}
+						<InstanceAISettings {disableChatOffset} />
+					{:else if tab === 'users' && !yamlMode}
 						<div class="h-full">
 							{#if !automateUsernameCreation && !isCloudHosted()}
 								<div class="mb-4">
@@ -256,9 +261,9 @@ onDestroy(() => {
 								/><Toggle
 									bind:checked={activeOnly}
 									options={{
-										left: 'Show active users only',
+										left: 'Recently active only',
 										leftTooltip:
-											'An active user is a user who has performed at least one action in the last 30 days'
+											'Show only users who have logged in or performed an action in the last 30 days'
 									}}
 								/>
 
@@ -310,13 +315,25 @@ onDestroy(() => {
 									</Head>
 									<tbody>
 										{#if filteredUsers && users}
-											{#each filteredUsers.slice(0, nbDisplayed) as { email, super_admin, devops, login_type, name, username, operator_only }, i (email)}
-												<tr class={i % 2 === 0 ? 'bg-surface-tertiary' : 'bg-surface'}>
-													<Cell first class="max-w-[200px]"
-														><a href="mailto:{email}" title={email} class="truncate block"
-															>{email}</a
-														></Cell
-													>
+											{#each filteredUsers.slice(0, nbDisplayed) as { email, super_admin, devops, login_type, name, username, operator_only, role_source, disabled }, i (email)}
+												<tr
+													class="{i % 2 === 0 ? 'bg-surface-tertiary' : 'bg-surface'} {disabled
+														? 'opacity-60'
+														: ''}"
+												>
+													<Cell first class="max-w-[250px]">
+														<div class="flex items-center gap-1.5">
+															<a href="mailto:{email}" title={email} class="truncate block"
+																>{email}</a
+															>
+															{#if disabled}
+																<span
+																	class="text-2xs px-1.5 py-0.5 rounded bg-red-100 text-red-600 dark:bg-red-900 dark:text-red-300 whitespace-nowrap"
+																	>Disabled</span
+																>
+															{/if}
+														</div>
+													</Cell>
 													{#if automateUsernameCreation}
 														<Cell class="max-w-[150px]">
 															{#if username}
@@ -354,65 +371,96 @@ onDestroy(() => {
 														</Cell>
 													{/if}
 													<Cell>
-														<ToggleButtonGroup
-															selected={super_admin ? 'super_admin' : devops ? 'devops' : 'user'}
-															on:selected={async (e) => {
-																if (email == $userStore?.email) {
-																	sendUserToast('You cannot demote yourself', true)
-																	listUsers(activeOnly)
-																	return
-																}
+														<div class="flex flex-col items-start">
+															{#key `${super_admin}_${devops}_${role_source}`}
+																<ToggleButtonGroup
+																	selected={super_admin
+																		? 'super_admin'
+																		: devops
+																			? 'devops'
+																			: 'user'}
+																	on:selected={async (e) => {
+																		if (email == $userStore?.email) {
+																			sendUserToast('You cannot demote yourself', true)
+																			listUsers(activeOnly)
+																			return
+																		}
 
-																let role = e.detail
+																		let role = e.detail
 
-																if (role === 'super_admin') {
-																	await UserService.globalUserUpdate({
-																		email,
-																		requestBody: {
-																			is_super_admin: true,
-																			is_devops: false
+																		if (role === 'super_admin') {
+																			await UserService.globalUserUpdate({
+																				email,
+																				requestBody: {
+																					is_super_admin: true,
+																					is_devops: false
+																				}
+																			})
 																		}
-																	})
-																}
-																if (role === 'devops') {
-																	await UserService.globalUserUpdate({
-																		email,
-																		requestBody: {
-																			is_super_admin: false,
-																			is_devops: true
+																		if (role === 'devops') {
+																			await UserService.globalUserUpdate({
+																				email,
+																				requestBody: {
+																					is_super_admin: false,
+																					is_devops: true
+																				}
+																			})
 																		}
-																	})
-																}
-																if (role === 'user') {
-																	await UserService.globalUserUpdate({
-																		email,
-																		requestBody: {
-																			is_super_admin: false,
-																			is_devops: false
+																		if (role === 'user') {
+																			await UserService.globalUserUpdate({
+																				email,
+																				requestBody: {
+																					is_super_admin: false,
+																					is_devops: false
+																				}
+																			})
 																		}
-																	})
-																}
-																sendUserToast('User updated')
-																listUsers(activeOnly)
-															}}
-														>
-															{#snippet children({ item })}
-																<ToggleButton value={'user'} small label="User" {item} />
-																<ToggleButton
-																	value={'devops'}
-																	small
-																	label="Devops"
-																	tooltip="Devops is a role that grants visibilty similar to that of a super admin, but without giving all rights. For example devops users can see service logs and crtical alerts. You can think of it as a 'readonly' super admin"
-																	{item}
-																/>
-																<ToggleButton
-																	value={'super_admin'}
-																	small
-																	label="Superadmin"
-																	{item}
-																/>
-															{/snippet}
-														</ToggleButtonGroup>
+																		sendUserToast('User updated')
+																		listUsers(activeOnly)
+																	}}
+																>
+																	{#snippet children({ item })}
+																		<ToggleButton
+																			value={'user'}
+																			small
+																			label="User"
+																			disabled={role_source === 'instance_group' &&
+																				(super_admin || devops)}
+																			tooltip={role_source === 'instance_group' &&
+																			(super_admin || devops)
+																				? 'Role is set by an instance group. Remove the user from the group to demote to "User".'
+																				: undefined}
+																			showTooltipIcon={role_source === 'instance_group' &&
+																				(super_admin || devops)}
+																			{item}
+																		/>
+																		<ToggleButton
+																			value={'devops'}
+																			small
+																			label="Devops"
+																			tooltip="Devops is a role that grants visibilty similar to that of a super admin, but without giving all rights. For example devops users can see service logs and crtical alerts. You can think of it as a 'readonly' super admin"
+																			{item}
+																		/>
+																		<ToggleButton
+																			value={'super_admin'}
+																			small
+																			label="Superadmin"
+																			{item}
+																		/>
+																	{/snippet}
+																</ToggleButtonGroup>
+															{/key}
+															{#if role_source === 'instance_group' && (super_admin || devops)}
+																<a
+																	href="{base}/groups"
+																	class="text-2xs text-tertiary mt-0.5 ml-1 hover:underline"
+																	title="Role set by instance group. You can upgrade to a higher role manually, but demoting to &quot;User&quot; requires removing them from the group."
+																	onclick={() => closeDrawer?.()}
+																>
+																	Set by instance group
+																</a>
+															{/if}
+														</div>
 													</Cell>
 													<Cell last>
 														<div class="flex items-center justify-end">
@@ -446,6 +494,39 @@ onDestroy(() => {
 																			if (btn instanceof HTMLElement) btn.click()
 																		}
 																	},
+																	{
+																		displayName: disabled ? 'Enable' : 'Disable',
+																		icon: disabled ? CheckCircle2 : Ban,
+																		action: () => {
+																			if (!disabled) {
+																				disableUserEmail = email
+																				disableConfirmedCallback = async () => {
+																					try {
+																						await UserService.globalUserUpdate({
+																							email,
+																							requestBody: { disabled: true }
+																						})
+																						sendUserToast('User disabled')
+																						listUsers(activeOnly)
+																					} catch (e) {
+																						sendUserToast('Failed to disable user', true)
+																					}
+																				}
+																			} else {
+																				UserService.globalUserUpdate({
+																					email,
+																					requestBody: { disabled: false }
+																				})
+																					.then(() => {
+																						sendUserToast('User enabled')
+																						listUsers(activeOnly)
+																					})
+																					.catch(() => {
+																						sendUserToast('Failed to enable user', true)
+																					})
+																			}
+																		}
+																	},
 																	{
 																		displayName: 'Remove',
 																		icon: UserMinus,
@@ -478,6 +559,7 @@ onDestroy(() => {
 							hideTabs
 							bind:yamlMode
 							bind:hasUnsavedChanges
+							bind:hasAnyInvalid
 							tab={instanceSettingsCategory}
 							{authSubTab}
 							{closeDrawer}
@@ -509,6 +591,33 @@ onDestroy(() => {
 	}}
 >
 	<div class="flex flex-col w-full space-y-4">
-		<span>Are you sure you want to remove <b>{deleteUserEmail}</b>?</span>
+		<span
+			>Are you sure you want to remove <b>{deleteUserEmail}</b>? They will be removed from all
+			workspaces and instance groups, and all their sessions and tokens will be revoked. This action
+			is irreversible. Their workspace content (scripts, flows, apps) will not be deleted.</span
+		>
+	</div>
+</ConfirmationModal>
+<ConfirmationModal
+	open={Boolean(disableConfirmedCallback)}
+	title="Disable user"
+	confirmationText="Disable"
+	on:canceled={() => {
+		disableConfirmedCallback = undefined
+		listUsers(activeOnly)
+	}}
+	on:confirmed={() => {
+		if (disableConfirmedCallback) {
+			disableConfirmedCallback()
+		}
+		disableConfirmedCallback = undefined
+	}}
+>
+	<div class="flex flex-col w-full space-y-4">
+		<span
+			>Are you sure you want to disable <b>{disableUserEmail}</b>? All their active sessions and
+			tokens will be revoked immediately. They will be unable to log in until re-enabled. Their
+			workspace memberships and content will be preserved.</span
+		>
 	</div>
 </ConfirmationModal>

package/package/components/SuperadminSettingsInner.svelte.d.ts

@@ -1,8 +1,10 @@
 declare const SuperadminSettingsInner: import("svelte").Component<{
     closeDrawer: any;
     showHeaderInfo?: boolean;
+    disableChatOffset?: boolean;
     yamlMode?: boolean;
     hasUnsavedChanges?: boolean;
+    hasAnyInvalid?: boolean;
 }, {
     saveSettings: () => Promise<void> | undefined;
     discardAll: () => void;
@@ -11,6 +13,6 @@ declare const SuperadminSettingsInner: import("svelte").Component<{
         original: string;
         modified: string;
     };
-}, "hasUnsavedChanges" | "yamlMode">;
+}, "hasUnsavedChanges" | "yamlMode" | "hasAnyInvalid">;
 type SuperadminSettingsInner = ReturnType<typeof SuperadminSettingsInner>;
 export default SuperadminSettingsInner;

package/package/components/SyncResourceTypes.svelte

@@ -0,0 +1,31 @@
+<script lang="ts">import { superadmin } from '../stores';
+import { usePromise } from '../svelte5Utils.svelte';
+import { sendUserToast } from '../toast';
+import Button from './common/button/Button.svelte';
+let { onSynced = undefined } = $props();
+let hubRtSync = usePromise(async () => {
+    const res = await fetch('/api/settings/sync_cached_resource_types', { method: 'POST' });
+    if (!res.ok) {
+        const body = await res.text();
+        throw new Error(body || res.statusText);
+    }
+    sendUserToast('Hub resource types sync completed');
+    onSynced?.();
+}, { loadInit: false });
+</script>
+
+{#if $superadmin}
+	<Button
+		loading={hubRtSync.status === 'loading'}
+		onClick={() => hubRtSync.refresh()}
+		size="xs"
+		variant="default"
+	>
+		Sync resource types with Hub
+	</Button>
+	{#if hubRtSync.status === 'error'}
+		<span class="text-red-400 dark:text-red-500 text-xs">
+			Error syncing resource types: {hubRtSync.error?.message ?? JSON.stringify(hubRtSync.error)}
+		</span>
+	{/if}
+{/if}

package/package/components/SyncResourceTypes.svelte.d.ts

@@ -0,0 +1,6 @@
+interface Props {
+    onSynced?: () => void;
+}
+declare const SyncResourceTypes: import("svelte").Component<Props, {}, "">;
+type SyncResourceTypes = ReturnType<typeof SyncResourceTypes>;
+export default SyncResourceTypes;

package/package/components/TimelineBar.svelte

@@ -2,24 +2,24 @@
 import { base } from '../base';
 import { ExternalLink } from 'lucide-svelte';
 import Popover from './Popover.svelte';
-let { position = 'center', total, min, started_at, len, id, running, concat = false, gray = false } = $props();
+let { position = 'center', total, min, started_at, len, id, running, concat = false, gray = false, spacerClass = '' } = $props();
 </script>
 
 {#if min && started_at != undefined}
 	{#if !concat}
-		<div style="width: {((started_at - min) / total) * 100}%" class="h-4"></div>
+		<div style="width: {((started_at - min) / total) * 100}%" class="h-5 {spacerClass}"></div>
 	{/if}
 	<Popover
 		style="width: {(len / total) * 100}%"
-		class="h-4 relative {gray
+		class="h-5 relative {gray
 			? 'bg-gray-300 dark:bg-gray-600'
 			: running
 				? 'bg-blue-400/90'
 				: 'bg-blue-500/90'} {position == 'left'
-			? 'rounded-l-sm'
+			? 'rounded-l-md'
 			: position == 'right'
-				? 'rounded-r-sm'
-				: 'rounded-sm'} center-center text-white text-2xs whitespace-nowrap hover:outline outline-1 outline-black"
+				? 'rounded-r-md'
+				: 'rounded-md'} center-center text-white text-2xs whitespace-nowrap hover:outline outline-1 outline-black"
 	>
 		{#snippet text()}
 			<a href="{base}/run/{id}" class="inline-flex items-center gap-1" target="_blank"
@@ -28,9 +28,15 @@ let { position = 'center', total, min, started_at, len, id, running, concat = fa
 		{/snippet}
 		{#if len > 0}
 			{@const narrow = len / total < 0.09}
-			{@const endPos = started_at != undefined && min != undefined ? (started_at - min + len) / total : 1}
+			{@const endPos =
+				started_at != undefined && min != undefined ? (started_at - min + len) / total : 1}
 			{@const nearStart = endPos < 0.15}
-			<span class={narrow ? (nearStart ? 'absolute left-full ml-2 text-primary font-mono' : 'absolute right-full mr-1 text-primary font-mono') : 'font-mono'}
+			<span
+				class={narrow
+					? nearStart
+						? 'absolute left-full ml-2 text-primary font-mono'
+						: 'absolute right-full mr-1 text-primary font-mono'
+					: 'font-mono'}
 				>{#if len}{msToSec(len, 1)}s{/if}</span
 			>
 		{/if}

package/package/components/TimelineBar.svelte.d.ts

@@ -8,6 +8,7 @@ interface Props {
     running: boolean;
     concat?: boolean;
     gray?: boolean;
+    spacerClass?: string;
 }
 declare const TimelineBar: import("svelte").Component<Props, {}, "">;
 type TimelineBar = ReturnType<typeof TimelineBar>;

package/package/components/WorkerGroup.svelte

@@ -126,7 +126,12 @@ let workspaceTag = $state('');
 let { name, config = $bindable(), activeWorkers, customTags, workers, isAgent = false, defaultTagPerWorkspace = undefined, width = 0, shouldAutoOpenDrawer = false, onDrawerOpened = () => { }, onDeleted = () => { }, onOpenYamlEditor = undefined, selectGroup = undefined } = $props();
 let workspaces = $state([]);
 async function listWorkspaces() {
-    workspaces = await WorkspaceService.listWorkspacesAsSuperAdmin();
+    try {
+        workspaces = await WorkspaceService.listWorkspacesAsSuperAdmin();
+    }
+    catch (e) {
+        console.error('Failed to list workspaces', e);
+    }
 }
 // Centralized permission logic
 let canEditConfig = $derived($superadmin || $devopsRole);
@@ -172,7 +177,9 @@ let isNativeMode = $derived(config?.native_mode === true ||
     name === 'native' ||
     (workers.length > 0 &&
         workers.some(([_, pings]) => pings.some((p) => p.native_mode === true))));
-let nonNativeTags = $derived((nconfig?.worker_tags ?? []).filter((t) => !nativeTags.includes(t) && t !== 'flow'));
+let nonNativeTags = $derived((nconfig?.worker_tags ?? []).filter((t) => !nativeTags.some((nt) => t === nt || t.startsWith(`${nt}-`)) &&
+    t !== 'flow' &&
+    !t.startsWith('flow-')));
 let isAutoNativeMode = $derived(name === 'native');
 let isNativeModeEnabled = $derived(nconfig?.native_mode === true || isAutoNativeMode);
 $effect(() => {
@@ -449,8 +456,8 @@ $effect(() => {
 						<Alert size="xs" type="warning" title="Non-native tags detected">
 							This worker group has native mode enabled but includes non-native tags: {nonNativeTags.join(
 								', '
-							)}. Non-native jobs will be failed. This is fine if those custom tags are only used
-							for native language jobs.
+							)}. This is fine if jobs sent to those tags are native only, otherwise they will be
+							failed.
 						</Alert>
 					{/if}
 					{#if isNativeModeEnabled && nconfig?.worker_tags != undefined && !nconfig.worker_tags.includes(defaultTagPerWorkspace && workspaceTag ? `flow-${workspaceTag}` : 'flow')}