windmill-components 1.665.1 → 1.677.1

package/package/components/schema/PropertyEditor.svelte

@@ -6,6 +6,7 @@ import Label from '../Label.svelte';
 import NumberTypeNarrowing from '../NumberTypeNarrowing.svelte';
 import StringTypeNarrowing from '../StringTypeNarrowing.svelte';
 import Tooltip from '../Tooltip.svelte';
+import Toggle from '../Toggle.svelte';
 import EditableSchemaForm from '../EditableSchemaForm.svelte';
 import { deepEqual } from 'fast-equals';
 import ToggleButtonGroup from '../common/toggleButton-v2/ToggleButtonGroup.svelte';
@@ -13,7 +14,7 @@ import ToggleButton from '../common/toggleButton-v2/ToggleButton.svelte';
 import { createEventDispatcher, onMount, untrack } from 'svelte';
 import { createDispatcherIfMounted } from '../../createDispatcherIfMounted';
 import TextInput, { inputBaseClass, inputBorderClass } from '../text_input/TextInput.svelte';
-let { description = $bindable(undefined), format = $bindable(undefined), contentEncoding = $bindable(undefined), type = undefined, oneOf = $bindable(), pattern = $bindable(undefined), enum_ = $bindable(undefined), extra = $bindable({}), nonEmpty = $bindable(undefined), minW = true, customErrorMessage = $bindable(undefined), title = $bindable(undefined), placeholder = $bindable(undefined), properties = $bindable(), isFlowInput = false, isAppInput = false, order = $bindable(), itemsType = $bindable(undefined), typeeditor, children } = $props();
+let { description = $bindable(undefined), format = $bindable(undefined), contentEncoding = $bindable(undefined), type = undefined, oneOf = $bindable(), pattern = $bindable(undefined), enum_ = $bindable(undefined), extra = $bindable({}), nonEmpty = $bindable(undefined), minW = true, customErrorMessage = $bindable(undefined), title = $bindable(undefined), placeholder = $bindable(undefined), properties = $bindable(), isFlowInput = false, isAppInput = false, showSensitiveToggle = false, order = $bindable(), itemsType = $bindable(undefined), typeeditor, children } = $props();
 $effect.pre(() => {
     if (description == undefined) {
         description = '';
@@ -221,5 +222,25 @@ $effect(() => {
 		{/if}
 
 		{@render children?.()}
+
+		{#if type == 'object' && showSensitiveToggle}
+			<Toggle
+				size="xs"
+				options={{
+					right: 'Is sensitive',
+					rightTooltip:
+						'The value will be stored as an ephemeral secret variable in the user space of the caller of the job, only viewable by him.'
+				}}
+				checked={extra['password'] ?? false}
+				on:change={(e) => {
+					if (e.detail) {
+						extra['password'] = true
+					} else {
+						extra['password'] = undefined
+					}
+					dispatch('change')
+				}}
+			/>
+		{/if}
 	</div>
 </div>

package/package/components/schema/PropertyEditor.svelte.d.ts

@@ -17,6 +17,7 @@ interface Props {
     nonEmpty?: boolean | undefined;
     isFlowInput?: boolean;
     isAppInput?: boolean;
+    showSensitiveToggle?: boolean;
     order?: string[] | undefined;
     itemsType?: {
         type?: 'string' | 'number' | 'bytes' | 'object' | 'resource';

package/package/components/schema/editable_schema_wrapper.d.ts

@@ -6,6 +6,7 @@ export type EditableSchemaWrapperProps = {
     fullHeight?: boolean;
     formatExtension?: string | undefined;
     isFileset?: boolean | undefined;
+    showSensitiveToggle?: boolean;
     customUi?: {
         noAddPopover?: boolean;
     };

package/package/components/secretArgUtils.d.ts

@@ -0,0 +1,7 @@
+import type { Schema } from '../common';
+/**
+ * Process args before job submission: for non-string fields marked as password/sensitive,
+ * create ephemeral secret variables and replace values with $jsonvar:path references.
+ * String password fields are already handled by PasswordArgInput (uses $var:).
+ */
+export declare function processSecretArgs(args: Record<string, any>, schema: Schema | undefined): Promise<Record<string, any>>;

package/package/components/secretArgUtils.js

@@ -0,0 +1,45 @@
+import { VariableService } from '../gen';
+import { get } from 'svelte/store';
+import { userStore, workspaceStore } from '../stores';
+import { generateRandomString } from '../utils';
+/**
+ * Process args before job submission: for non-string fields marked as password/sensitive,
+ * create ephemeral secret variables and replace values with $jsonvar:path references.
+ * String password fields are already handled by PasswordArgInput (uses $var:).
+ */
+export async function processSecretArgs(args, schema) {
+    if (!schema?.properties)
+        return args;
+    const workspace = get(workspaceStore);
+    const user = get(userStore);
+    if (!workspace || !user)
+        return args;
+    const username = (user.username ?? user.email)?.split('@')[0];
+    if (!username)
+        return args;
+    const userPrefix = `u/${username}/secret_arg/`;
+    const result = { ...args };
+    for (const [key, prop] of Object.entries(schema.properties)) {
+        if (!prop.password)
+            continue;
+        if (prop.type !== 'object')
+            continue; // only object types; strings handled by PasswordArgInput
+        if (result[key] == null || result[key] === undefined)
+            continue;
+        if (typeof result[key] === 'string' && result[key].startsWith('$jsonvar:'))
+            continue; // already processed
+        const path = userPrefix + generateRandomString(12);
+        await VariableService.createVariable({
+            workspace,
+            requestBody: {
+                value: JSON.stringify(result[key]),
+                is_secret: true,
+                path,
+                description: 'Ephemeral secret variable',
+                expires_at: new Date(Date.now() + 1000 * 60 * 60 * 24 * 7).toISOString()
+            }
+        });
+        result[key] = '$jsonvar:' + path;
+    }
+    return result;
+}