windmill-components 1.677.1 → 1.687.0

package/package/components/InstanceSettings.svelte

@@ -132,12 +132,13 @@ export async function saveSettings() {
         return false;
     });
     let shouldReloadPage = false;
+    let willRestart = false;
     if ($values) {
         // Trim license key before saving
         if ($values['license_key'] && typeof $values['license_key'] === 'string') {
             $values['license_key'] = $values['license_key'].trim();
         }
-        // Check which settings require a page reload
+        // Check which settings require a page reload or server restart
         const allSettings = [...Object.values(settings), scimSamlSetting].flat();
         let licenseKeySet = false;
         for (const s of allSettings) {
@@ -148,6 +149,9 @@ export async function saveSettings() {
                 if (s.requiresReloadOnChange) {
                     shouldReloadPage = true;
                 }
+                if (s.triggersRestart) {
+                    willRestart = true;
+                }
             }
         }
         // Build the full global_settings object for the bulk PUT
@@ -181,6 +185,10 @@ export async function saveSettings() {
         await sleep(1000);
         window.location.reload();
     }
+    else if (willRestart) {
+        sendUserToast('Settings updated. Servers are restarting and changes may take up to a minute to fully propagate.', false, [], undefined, 8000);
+        dispatch('saved');
+    }
     else {
         sendUserToast('Settings updated');
         dispatch('saved');
@@ -437,6 +445,7 @@ export async function saveCategorySettings(category) {
         $values['license_key'] = $values['license_key'].trim();
     }
     let shouldReloadPage = false;
+    let willRestart = false;
     const categorySettings = getSettingsForCategory(category);
     let licenseKeySet = false;
     await Promise.all(categorySettings
@@ -452,6 +461,8 @@ export async function saveCategorySettings(category) {
             licenseKeySet = true;
         if (x.requiresReloadOnChange)
             shouldReloadPage = true;
+        if (x.triggersRestart)
+            willRestart = true;
         let value = $values?.[x.key];
         if (x.fieldType === 'codearea' && typeof value === 'string' && value.trim() === '') {
             value = undefined;
@@ -505,6 +516,10 @@ export async function saveCategorySettings(category) {
         await sleep(1000);
         window.location.reload();
     }
+    else if (willRestart) {
+        sendUserToast('Settings updated. Servers are restarting and changes may take up to a minute to fully propagate.', false, [], undefined, 8000);
+        dispatch('saved');
+    }
     else {
         sendUserToast('Settings updated');
         dispatch('saved');
@@ -525,8 +540,12 @@ const sensitiveKeys = new Set([
     'jwt_secret',
     'workspace_registries'
 ]);
-// Settings that should never appear in YAML export/import
-const excludedKeys = new Set([]);
+// Settings that should never appear in YAML export/import.
+// `worker_configs` is a legacy ghost key: worker configs live in the `config`
+// table (managed from /workers), not in `global_settings`. Older DBs may
+// still carry a stale `global_settings.worker_configs` row; filter it here
+// so it never round-trips through this editor.
+const excludedKeys = new Set(['worker_configs']);
 // Nested fields inside object-valued settings that contain secrets.
 // Each entry maps a top-level key to its sensitive sub-field names.
 const nestedSensitiveFields = {

package/package/components/Login.svelte

@@ -68,6 +68,7 @@ let showPassword = $state(false);
 let logins = $state(undefined);
 let saml = $state(undefined);
 let smtpConfigured = $state(undefined);
+let disablePasswordLogin = $state(false);
 async function login() {
     if (!email || !password) {
         sendUserToast('Please fill in both email and password', true);
@@ -155,21 +156,32 @@ async function redirectUser() {
     }
 }
 async function loadLogins() {
-    try {
-        const allLogins = await OauthService.listOauthLogins();
-        logins = allLogins.oauth.map((login) => ({
+    const [loginsResult, disabledResult] = await Promise.allSettled([
+        OauthService.listOauthLogins(),
+        UserService.isPasswordLoginDisabled()
+    ]);
+    if (disabledResult.status === 'fulfilled') {
+        disablePasswordLogin = disabledResult.value ?? false;
+    }
+    else {
+        disablePasswordLogin = false;
+        console.error('Could not load password login setting', disabledResult.reason);
+    }
+    if (loginsResult.status === 'fulfilled') {
+        logins = loginsResult.value.oauth.map((login) => ({
             type: login.type,
             displayName: login.display_name || login.type
         }));
-        saml = allLogins.saml;
-        showPassword = (logins.length == 0 && !saml) || (email != undefined && email.length > 0);
+        saml = loginsResult.value.saml;
     }
-    catch (e) {
+    else {
         logins = [];
         saml = undefined;
-        showPassword = true;
-        console.error('Could not load logins', e);
+        console.error('Could not load logins', loginsResult.reason);
     }
+    showPassword =
+        !disablePasswordLogin &&
+            ((logins?.length === 0 && !saml) || (email != undefined && email.length > 0));
 }
 loadLogins();
 $effect(() => {
@@ -323,7 +335,7 @@ $effect(() => {
 			</Button>
 		{/if}
 	</div>
-	{#if saml || (logins && logins.length > 0)}
+	{#if !disablePasswordLogin && (saml || (logins && logins.length > 0))}
 		<div class={classNames('center-center', logins && logins.length > 0 ? 'mt-6' : '')}>
 			<Button
 				size="xs"
@@ -337,7 +349,7 @@ $effect(() => {
 		</div>
 	{/if}
 
-	{#if showPassword}
+	{#if showPassword && !disablePasswordLogin}
 		<div>
 			{#if firstTime}
 				<p class="text-xs text-center w-full pb-4 text-secondary">

package/package/components/ModuleTest.svelte

@@ -85,7 +85,8 @@ function jobDone(testJob) {
                 ...flowStateStore.val[mod.id],
                 previewResult: testJob.result,
                 previewSuccess: testJob.success,
-                previewJobId: testJob.id
+                previewJobId: testJob.id,
+                previewLogs: testJob['logs']
             };
         }
         stepHistoryLoader?.resetInitial(mod.id);

package/package/components/NoMainFuncBadge.svelte

@@ -6,5 +6,5 @@ import { Badge } from './common';
 	{#snippet text()}
 		Library script (no exported main function)
 	{/snippet}
-	<Badge small color="yellow" baseClass="border border-indigo-200">Library</Badge>
+	<Badge small color="yellow" baseClass="border">Library</Badge>
 </Popover>

package/package/components/OffboardItemsBox.svelte

@@ -0,0 +1,56 @@
+<script lang="ts">import { ChevronDown, ChevronRight } from 'lucide-svelte';
+import { flattenPaths, itemHref, kindLabel } from './offboarding-utils';
+let { title, paths, variant = 'default', description, headerExtra } = $props();
+let expanded = $state(false);
+let isWarning = $derived(variant === 'warning');
+</script>
+
+<div
+	class={isWarning
+		? 'bg-yellow-50 dark:bg-yellow-900/20 border border-yellow-200 dark:border-yellow-700/40 rounded-md p-3'
+		: 'bg-surface-secondary rounded-md p-3'}
+>
+	<div class="flex items-center justify-between gap-2">
+		<button class="flex items-center gap-1 text-left" onclick={() => (expanded = !expanded)}>
+			{#if expanded}<ChevronDown size={14} />{:else}<ChevronRight size={14} />{/if}
+			<span
+				class={isWarning
+					? 'text-xs font-medium text-yellow-800 dark:text-yellow-100/90'
+					: 'text-xs font-medium text-primary'}>{title}</span
+			>
+		</button>
+		{#if headerExtra}
+			{@render headerExtra()}
+		{/if}
+	</div>
+	{#if description}
+		<p
+			class="{isWarning
+				? 'text-yellow-700 dark:text-yellow-100/70'
+				: 'text-tertiary'} text-xs mt-1 ml-5"
+		>
+			{description}
+		</p>
+	{/if}
+	{#if expanded}
+		<ul
+			class="mt-1.5 ml-5 text-xs {isWarning
+				? 'text-yellow-800 dark:text-yellow-100/90'
+				: 'text-secondary'} max-h-40 overflow-y-auto flex flex-col gap-0.5"
+		>
+			{#each flattenPaths(paths) as { kind, path }}
+				<li class="flex gap-1.5"
+					><span
+						class="{isWarning
+							? 'text-yellow-600 dark:text-yellow-300'
+							: 'text-tertiary'} w-24 shrink-0">{kindLabel(kind)}</span
+					>{#if itemHref(kind, path)}<a
+							href={itemHref(kind, path)}
+							target="_blank"
+							class="truncate hover:underline text-blue-500 dark:text-blue-400">{path}</a
+						>{:else}<span class="truncate">{path}</span>{/if}</li
+				>
+			{/each}
+		</ul>
+	{/if}
+</div>

package/package/components/OffboardItemsBox.svelte.d.ts

@@ -0,0 +1,12 @@
+import type { OffboardAffectedPaths } from '../gen';
+import type { Snippet } from 'svelte';
+type Props = {
+    title: string;
+    paths: OffboardAffectedPaths;
+    variant?: 'default' | 'warning';
+    description?: string;
+    headerExtra?: Snippet;
+};
+declare const OffboardItemsBox: import("svelte").Component<Props, {}, "">;
+type OffboardItemsBox = ReturnType<typeof OffboardItemsBox>;
+export default OffboardItemsBox;

package/package/components/OffboardReassignControls.svelte

@@ -0,0 +1,47 @@
+<script lang="ts">import Select from './select/Select.svelte';
+import ToggleButtonGroup from './common/toggleButton-v2/ToggleButtonGroup.svelte';
+import ToggleButton from './common/toggleButton-v2/ToggleButton.svelte';
+let { username, targetKind = $bindable(), selectedUser = $bindable(), selectedFolder = $bindable(), selectedOperator = $bindable(), users, folders, showTargetSelector = true, size = 'md' } = $props();
+$effect(() => {
+    if (targetKind === 'user' && selectedUser && !selectedOperator) {
+        selectedOperator = selectedUser;
+    }
+});
+</script>
+
+{#if showTargetSelector}
+	<div class={size === 'sm' ? 'mb-2' : ''}>
+		<span
+			class={size === 'sm'
+				? 'text-xs font-medium text-secondary block mb-1'
+				: 'text-sm font-medium text-primary block mb-1.5'}>Move u/{username}/* items to</span
+		>
+		<ToggleButtonGroup
+			selected={targetKind}
+			onSelected={(value) => {
+				targetKind = value
+			}}
+			class={size === 'sm' ? 'mb-1.5' : 'mb-2'}
+		>
+			{#snippet children({ item })}
+				<ToggleButton value="user" label="User" small {item} />
+				<ToggleButton value="folder" label="Folder" small {item} />
+			{/snippet}
+		</ToggleButtonGroup>
+		{#if targetKind === 'user'}
+			<Select items={users} bind:value={selectedUser} placeholder="Select a user..." {size} />
+		{:else}
+			<Select items={folders} bind:value={selectedFolder} placeholder="Select a folder..." {size} />
+		{/if}
+	</div>
+{/if}
+
+<div>
+	<span
+		class={size === 'sm'
+			? 'text-xs font-medium text-secondary block mb-0.5'
+			: 'text-sm font-medium text-primary block mb-1.5'}
+		>Update triggers/runnables permissions to</span
+	>
+	<Select items={users} bind:value={selectedOperator} placeholder="Select a user..." {size} />
+</div>

package/package/components/OffboardReassignControls.svelte.d.ts

@@ -0,0 +1,20 @@
+type Props = {
+    username: string;
+    targetKind: 'user' | 'folder';
+    selectedUser: string | undefined;
+    selectedFolder: string | undefined;
+    selectedOperator: string | undefined;
+    users: Array<{
+        label: string;
+        value: string;
+    }>;
+    folders: Array<{
+        label: string;
+        value: string;
+    }>;
+    showTargetSelector?: boolean;
+    size?: 'sm' | 'md';
+};
+declare const OffboardReassignControls: import("svelte").Component<Props, {}, "targetKind" | "selectedUser" | "selectedFolder" | "selectedOperator">;
+type OffboardReassignControls = ReturnType<typeof OffboardReassignControls>;
+export default OffboardReassignControls;

package/package/components/OffboardWorkspaceSection.svelte

@@ -0,0 +1,110 @@
+<script lang="ts">import { Alert, Button } from './common';
+import { ChevronDown, ChevronRight, Download } from 'lucide-svelte';
+import OffboardItemsBox from './OffboardItemsBox.svelte';
+import OffboardReassignControls from './OffboardReassignControls.svelte';
+import { countPaths, pl, downloadCsv, flattenPaths } from './offboarding-utils';
+let { preview, username, deleteUser = true, targetKind = $bindable(), selectedUser = $bindable(), selectedFolder = $bindable(), selectedOperator = $bindable(), users, folders, size = 'md', csvFilename = `offboard-${username}.csv`, instanceLevel = false } = $props();
+let ownedCount = $derived(countPaths(preview.owned));
+let onBehalfCount = $derived(countPaths(preview.executing_on_behalf));
+let referencingCount = $derived(countPaths(preview.referencing));
+function downloadAffectedCsv() {
+    if (!preview.referencing)
+        return;
+    const rows = [['type', 'path']];
+    for (const { kind, path } of flattenPaths(preview.referencing)) {
+        rows.push([kind, path]);
+    }
+    downloadCsv(rows, csvFilename);
+}
+let tokensExpanded = $state(false);
+</script>
+
+<div class="flex flex-col gap-2">
+	{#if ownedCount > 0}
+		<OffboardItemsBox title="u/{username}/* items ({ownedCount})" paths={preview.owned} />
+	{/if}
+	{#if onBehalfCount > 0}
+		<OffboardItemsBox
+			title="Permissioned as u/{username} ({onBehalfCount})"
+			paths={preview.executing_on_behalf}
+		/>
+	{/if}
+	{#if deleteUser && (!instanceLevel || (preview.tokens?.length ?? 0) > 0)}
+		<div
+			class="bg-yellow-50 dark:bg-yellow-900/20 border border-yellow-200 dark:border-yellow-700/40 rounded-md p-3"
+		>
+			{#if (preview.tokens?.length ?? 0) > 0}
+				<button
+					class="flex items-center gap-1 w-full text-left"
+					onclick={() => (tokensExpanded = !tokensExpanded)}
+				>
+					{#if tokensExpanded}<ChevronDown size={14} />{:else}<ChevronRight size={14} />{/if}
+					<span class="text-xs font-medium text-yellow-800 dark:text-yellow-100/90"
+						>Tokens ({preview.tokens?.length})</span
+					>
+				</button>
+				<p class="text-xs text-yellow-700 dark:text-yellow-100/70 mt-1 ml-5">
+					All workspace tokens for this user will be deleted. This may break webhooks and HTTP
+					triggers using these tokens.
+				</p>
+			{:else}
+				<p class="text-xs font-medium text-yellow-800 dark:text-yellow-100/90">Tokens</p>
+				<p class="text-xs text-yellow-700 dark:text-yellow-100/70 mt-1">
+					All workspace tokens for this user will be deleted. This may break webhooks and HTTP
+					triggers using these tokens.
+				</p>
+			{/if}
+			{#if tokensExpanded && (preview.tokens?.length ?? 0) > 0}
+				<div
+					class="flex flex-col gap-0.5 text-xs text-yellow-800 dark:text-yellow-100/90 mt-1.5 ml-5"
+				>
+					{#each preview.tokens ?? [] as token}
+						<span>{token.label || '(no label)'}: {token.scopes?.join(', ') || '(no scopes)'}</span>
+					{/each}
+				</div>
+			{/if}
+		</div>
+	{/if}
+	{#if referencingCount > 0}
+		<OffboardItemsBox
+			title="Referencing items ({referencingCount})"
+			paths={preview.referencing}
+			variant="warning"
+			description="These items reference u/{username}/* paths and may break after reassignment. Check them and update manually."
+		>
+			{#snippet headerExtra()}
+				<Button
+					variant="subtle"
+					size="xs2"
+					startIcon={{ icon: Download }}
+					onclick={downloadAffectedCsv}>CSV</Button
+				>
+			{/snippet}
+		</OffboardItemsBox>
+	{/if}
+</div>
+
+{#if preview.http_triggers > 0 || preview.email_triggers > 0}
+	<Alert type="warning" title="Webhook and email trigger URLs will change">
+		<p class="text-xs">
+			{#if preview.http_triggers > 0}{pl(preview.http_triggers, 'HTTP trigger')} will have new webhook
+				URLs.
+			{/if}
+			{#if preview.email_triggers > 0}{pl(preview.email_triggers, 'email trigger')} will have new addresses.
+			{/if}
+			Update any external integrations that reference these endpoints.
+		</p>
+	</Alert>
+{/if}
+
+<OffboardReassignControls
+	{username}
+	bind:targetKind
+	bind:selectedUser
+	bind:selectedFolder
+	bind:selectedOperator
+	{users}
+	{folders}
+	showTargetSelector={ownedCount > 0 || onBehalfCount > 0}
+	{size}
+/>

package/package/components/OffboardWorkspaceSection.svelte.d.ts

@@ -0,0 +1,24 @@
+import type { OffboardPreview } from '../gen/types.gen';
+type Props = {
+    preview: OffboardPreview;
+    username: string;
+    deleteUser?: boolean;
+    targetKind: 'user' | 'folder';
+    selectedUser: string | undefined;
+    selectedFolder: string | undefined;
+    selectedOperator: string | undefined;
+    users: Array<{
+        label: string;
+        value: string;
+    }>;
+    folders: Array<{
+        label: string;
+        value: string;
+    }>;
+    size?: 'sm' | 'md';
+    csvFilename?: string;
+    instanceLevel?: boolean;
+};
+declare const OffboardWorkspaceSection: import("svelte").Component<Props, {}, "targetKind" | "selectedUser" | "selectedFolder" | "selectedOperator">;
+type OffboardWorkspaceSection = ReturnType<typeof OffboardWorkspaceSection>;
+export default OffboardWorkspaceSection;

package/package/components/OnBehalfOfSelector.svelte

@@ -19,7 +19,7 @@ import Modal from './common/modal/Modal.svelte';
 import { userStore } from '../stores';
 import { UserService } from '../gen';
 import TextInput from './text_input/TextInput.svelte';
-let { targetWorkspace, targetValue, selected, onSelect, kind, canPreserve, customValue, isDeployment = true } = $props();
+let { targetWorkspace, targetValue, selected, onSelect, kind, canPreserve, customValue, isDeployment = true, folderDefault = undefined } = $props();
 const isTrigger = $derived(kind === 'trigger');
 let label = $derived(isTrigger
     ? 'Set the user this will be permissioned as:'
@@ -62,12 +62,22 @@ let filteredUsers = $derived(searchQuery
             (u.name?.toLowerCase()?.includes(q) ?? false));
     })
     : activeUsers);
-// Preselect "target" when available and user has permission to preserve
+// Preselect "target" when available and user has permission to preserve.
+// When no target is set but a folder default is, preselect that as a custom value.
+// We track `users.length` so the effect re-runs once the async user list loads.
 $effect(() => {
-    if (selected === undefined && targetValue && canPreserve) {
+    if (selected !== undefined || !canPreserve)
+        return;
+    if (targetValue) {
         onSelect('target');
     }
+    else if (folderDefault && users.length > 0) {
+        const username = folderDefault.startsWith('u/') ? folderDefault.slice(2) : folderDefault;
+        const email = users.find((u) => u.username === username)?.email ?? folderDefault;
+        onSelect('custom', { email, permissionedAs: folderDefault });
+    }
 });
+const isFolderDefaultSelected = $derived(selected === 'custom' && folderDefault !== undefined && customValue === folderDefault);
 function openModal() {
     loadUsers();
     searchQuery = '';
@@ -95,6 +105,14 @@ let selectedDisplayName = $derived.by(() => {
 			{#if selectedDisplayName}
 				<span class="text-xs truncate max-w-24">{selectedDisplayName}</span>
 			{/if}
+			{#if isFolderDefaultSelected}
+				<span
+					class="text-[10px] px-1 py-0.5 rounded bg-blue-50 dark:bg-blue-950/50 text-blue-700 dark:text-blue-300 border border-blue-200 dark:border-blue-900"
+					title="From this folder's default_permissioned_as rule"
+				>
+					folder default
+				</span>
+			{/if}
 		</span>
 	{/snippet}
 	{#snippet content({ close: closePopover })}

package/package/components/OnBehalfOfSelector.svelte.d.ts

@@ -25,6 +25,13 @@ interface Props {
     customValue?: string | undefined;
     /** When false, labels say "current" instead of "target" and modal text refers to "this workspace" */
     isDeployment?: boolean;
+    /**
+     * Folder default permissioned_as for this item path — resolved by the parent via
+     * `useFolderDefaultPermissionedAs`. When set and no explicit choice has been made,
+     * the selector preselects `'custom'` with this value and shows a "folder default"
+     * badge so the user sees where the value came from.
+     */
+    folderDefault?: string | undefined;
 }
 declare const OnBehalfOfSelector: import("svelte").Component<Props, {}, "">;
 type OnBehalfOfSelector = ReturnType<typeof OnBehalfOfSelector>;

package/package/components/QueueAlerts.svelte

@@ -7,13 +7,12 @@ import MultiSelect from './select/MultiSelect.svelte';
 import { Plus, Edit3, Save, X, Trash, ExternalLink } from 'lucide-svelte';
 import { sendUserToast } from '../toast';
 import { twMerge } from 'tailwind-merge';
-import { ConfigService } from '../gen';
+import { ConfigService, SettingService } from '../gen';
 import Tooltip from './Tooltip.svelte';
 import Badge from './common/badge/Badge.svelte';
 import { enterpriseLicense } from '../stores';
 let queueAlertConfig = $state([]);
 let availableTags = $state([]);
-let configName = 'alert__job_queue_waiting';
 let editingRowIndex = $state(-1);
 let editForm = $state({
     tags_to_monitor: [],
@@ -37,7 +36,7 @@ onMount(async () => {
 });
 async function fetchConfig() {
     try {
-        const response = await ConfigService.getConfig({ name: configName });
+        const response = await SettingService.getGlobal({ key: 'alert_job_queue_waiting' });
         queueAlertConfig = response?.alerts || [];
         expandedTagRows = [];
     }
@@ -47,11 +46,12 @@ async function fetchConfig() {
 }
 async function fetchWorkerTags() {
     try {
-        const response = await ConfigService.listConfigs();
+        const response = await ConfigService.listWorkerGroups();
         const workerTagsSet = new Set();
-        response.forEach((config) => {
-            if (config.name.startsWith('worker__') && Array.isArray(config.config?.worker_tags)) {
-                config?.config?.worker_tags.forEach((tag) => workerTagsSet.add(tag));
+        response.forEach((wg) => {
+            const config = wg.config;
+            if (Array.isArray(config?.worker_tags)) {
+                config.worker_tags.forEach((tag) => workerTagsSet.add(tag));
             }
         });
         return Array.from(workerTagsSet);
@@ -163,9 +163,9 @@ async function addNewAlert() {
     }
 }
 async function saveQueueAlertConfig() {
-    await ConfigService.updateConfig({
-        name: configName,
-        requestBody: { alerts: queueAlertConfig }
+    await SettingService.setGlobal({
+        key: 'alert_job_queue_waiting',
+        requestBody: { value: { alerts: queueAlertConfig } }
     });
 }
 function safeSelectItems(items) {

package/package/components/ResourcePicker.svelte

@@ -70,9 +70,9 @@ async function loadResources(resourceType) {
         }));
         if (datatableAsPgResource && resourceType === 'postgresql') {
             try {
-                const datatables = await WorkspaceService.listDataTables({
+                const datatables = (await WorkspaceService.listDataTables({
                     workspace: effectiveWorkspace
-                });
+                })).map((d) => d.name);
                 for (const dt of datatables) {
                     nc.push({
                         value: `datatable://${dt}`,