windmill-components 1.677.1 → 1.695.0

package/package/components/raw_apps/RawAppEditorHeader.svelte

@@ -27,7 +27,7 @@ import { AIBtnClasses } from '../copilot/chat/AIButtonStyle';
 import { isRuleActive } from '../../workspaceProtectionRules.svelte';
 import { buildForkEditUrl } from '../../utils/editInFork';
 import { isCloudHosted } from '../../cloud';
-let { summary = $bindable(), policy = $bindable(), diffDrawer = undefined, savedApp = $bindable(undefined), version = $bindable(undefined), newApp, newPath = '', appPath, runnables, data, files, jobs = $bindable(), jobsById = $bindable(), getBundle, canUndo = false, canRedo = false, onUndo = undefined, onRedo = undefined } = $props();
+let { summary = $bindable(), policy = $bindable(), diffDrawer = undefined, savedApp = $bindable(undefined), version = $bindable(undefined), newApp, newPath = '', appPath, runnables, data, files, jobs = $bindable(), jobsById = $bindable(), getBundle, canUndo = false, canRedo = false, onUndo = undefined, onRedo = undefined, onOpenYamlEditor = undefined } = $props();
 let newEditedPath = $state('');
 let deployedValue = $state(undefined); // Value to diff against
 let deployedBy = $state(undefined); // Author
@@ -451,6 +451,11 @@ let moreItems = [
             appExport?.open(app);
         }
     },
+    {
+        displayName: 'Edit in YAML',
+        icon: FileJson,
+        action: () => onOpenYamlEditor?.()
+    },
     {
         displayName: 'Publish to Hub',
         icon: Globe,

package/package/components/raw_apps/RawAppEditorHeader.svelte.d.ts

@@ -33,6 +33,7 @@ interface Props {
     canRedo?: boolean;
     onUndo?: () => void;
     onRedo?: () => void;
+    onOpenYamlEditor?: () => void;
 }
 interface $$__sveltets_2_IsomorphicComponent<Props extends Record<string, any> = any, Events extends Record<string, any> = any, Slots extends Record<string, any> = any, Exports = {}, Bindings = string> {
     new (options: import('svelte').ComponentConstructorOptions<Props>): import('svelte').SvelteComponent<Props, Events, Slots> & {

package/package/components/raw_apps/RawAppInlineScriptEditor.svelte

@@ -10,6 +10,8 @@ import { emptySchema, getLocalSetting, sendUserToast, storeLocalSetting } from '
 import { scriptLangToEditorLang } from '../../scripts';
 import DiffEditor from '../DiffEditor.svelte';
 import CacheTtlPopup from '../apps/editor/inlineScriptsPanel/CacheTtlPopup.svelte';
+import TagPopup from '../apps/editor/inlineScriptsPanel/TagPopup.svelte';
+import DeleteAfterUsePopup from './DeleteAfterUsePopup.svelte';
 import { computeFields } from '../apps/editor/inlineScriptsPanel/utils';
 import EditorBar from '../EditorBar.svelte';
 import { LanguageIcon } from '../common/languageIcons';
@@ -22,7 +24,7 @@ import { Pane, Splitpanes } from 'svelte-splitpanes';
 import { editor as meditor } from 'monaco-editor';
 import { DebugConsole, getDAPClient, debugState, resetDAPClient, getDebugServerUrl, isDebuggable, getDebugFileExtension, fetchContextualVariables, signDebugRequest, getDebugErrorMessage } from '../debug';
 import TextInput from '../text_input/TextInput.svelte';
-let { inlineScript = $bindable(), name = $bindable(undefined), id, fields = $bindable(undefined), path, onRun, editor = $bindable(undefined), lastDeployedCode, onSelectionChange } = $props();
+let { inlineScript = $bindable(), name = $bindable(undefined), id, fields = $bindable(undefined), path, onRun, editor = $bindable(undefined), lastDeployedCode, onSelectionChange, delete_after_secs = $bindable() } = $props();
 let diffEditor = $state();
 let validCode = $state(true);
 async function inferInlineScriptSchema(language, content, schema) {
@@ -74,8 +76,10 @@ let width = $state(0);
 let inferAssetsRes = resource([() => inlineScript?.language, () => inlineScript?.content], async () => inlineScript && inferAssets(inlineScript.language, inlineScript.content));
 let preparedSqlQueries = usePreparedAssetSqlQueries(() => inferAssetsRes.current?.sql_queries, () => $workspaceStore);
 $effect(() => {
-    if (inlineScript && inferAssetsRes.current)
-        inlineScript.assets = inferAssetsRes.current?.assets;
+    if (!inlineScript || !inferAssetsRes.current || inferAssetsRes.current.status === 'error')
+        return;
+    const newAssets = inferAssetsRes.current.assets;
+    inlineScript.assets = newAssets.length > 0 ? newAssets : undefined;
 });
 // Debug mode state
 const DEBUG_BETA_WARNING_KEY = 'debug_beta_warning_confirmed';
@@ -500,8 +504,10 @@ $effect(() => {
 			{/if}
 			<div class="flex w-full flex-row gap-2 items-center justify-end">
 				{#if inlineScript}
+					<TagPopup bind:tag={inlineScript.tag} />
 					<CacheTtlPopup bind:cache_ttl={inlineScript.cache_ttl} />
 				{/if}
+				<DeleteAfterUsePopup bind:delete_after_secs />
 
 				<Button
 					variant="default"

package/package/components/raw_apps/RawAppInlineScriptEditor.svelte.d.ts

@@ -12,6 +12,7 @@ interface Props {
     onRun: () => Promise<void>;
     editor?: any | undefined;
     lastDeployedCode?: string | undefined;
+    delete_after_secs?: number | undefined;
     /** Called when code is selected in the editor */
     onSelectionChange?: (selection: {
         content: string;
@@ -57,6 +58,6 @@ declare const RawAppInlineScriptEditor: $$__sveltets_2_IsomorphicComponent<Props
     stepOut: () => Promise<void>;
     clearAllBreakpoints: () => void;
     toggleDebugMode: () => void;
-}, "name" | "fields" | "inlineScript" | "editor">;
+}, "name" | "fields" | "inlineScript" | "delete_after_secs" | "editor">;
 type RawAppInlineScriptEditor = InstanceType<typeof RawAppInlineScriptEditor>;
 export default RawAppInlineScriptEditor;

package/package/components/raw_apps/RawAppInlineScriptRunnable.svelte

@@ -156,6 +156,7 @@ $effect(() => {
 					bind:inlineScript={runnable.inlineScript}
 					bind:name={runnable.name}
 					bind:fields={runnable.fields}
+					bind:delete_after_secs={runnable.delete_after_secs}
 					onRun={testPreview}
 					on:delete
 					path={appPath}

package/package/components/raw_apps/RawAppInlineScriptRunnable.svelte.d.ts

@@ -4,6 +4,7 @@ type RunnableWithInlineScript = RunnableWithFields & {
     inlineScript?: InlineScript & {
         language: ScriptLang;
     };
+    delete_after_secs?: number;
 };
 export type Runnable = RunnableWithInlineScript | undefined;
 interface Props {

package/package/components/raw_apps/RawAppInputsSpecEditor.svelte

@@ -3,7 +3,7 @@ import { addWhitespaceBeforeCapitals, capitalize, classNames } from '../../utils
 import Tooltip from '../Tooltip.svelte';
 import ToggleButtonGroup from '../common/toggleButton-v2/ToggleButtonGroup.svelte';
 import ToggleButton from '../common/toggleButton-v2/ToggleButton.svelte';
-import { Loader2, Pen, User, Shield } from 'lucide-svelte';
+import { Loader2, Pen, User, Shield, Lock } from 'lucide-svelte';
 import Toggle from '../Toggle.svelte';
 import StaticInputEditor from '../apps/editor/settingsPanel/inputEditor/StaticInputEditor.svelte';
 import { fieldTypeToTsType } from '../apps/utils';
@@ -11,10 +11,22 @@ import Select from '../select/Select.svelte';
 import { userStore, workspaceStore } from '../../stores';
 // Build ctx properties with current user's actual values
 let ctxProperties = $derived([
-    { value: 'username', label: 'Username', subtitle: `string — "${$userStore?.username ?? 'unknown'}"` },
+    {
+        value: 'username',
+        label: 'Username',
+        subtitle: `string — "${$userStore?.username ?? 'unknown'}"`
+    },
     { value: 'email', label: 'Email', subtitle: `string — "${$userStore?.email ?? 'unknown'}"` },
-    { value: 'groups', label: 'Groups', subtitle: `string[] — ${JSON.stringify($userStore?.groups ?? [])}` },
-    { value: 'workspace', label: 'Workspace', subtitle: `string — "${$workspaceStore ?? 'unknown'}"` },
+    {
+        value: 'groups',
+        label: 'Groups',
+        subtitle: `string[] — ${JSON.stringify($userStore?.groups ?? [])}`
+    },
+    {
+        value: 'workspace',
+        label: 'Workspace',
+        subtitle: `string — "${$workspaceStore ?? 'unknown'}"`
+    },
     { value: 'author', label: 'Author', subtitle: `string — "${$userStore?.email ?? 'unknown'}"` }
 ]);
 let { id, componentInput = $bindable(), key, shouldCapitalize = true, resourceOnly = false, tooltip = undefined, fieldType, subFieldType, format, selectOptions, placeholder, customTitle = undefined, displayType = false, allowTypeChange = true, loading = false, documentationLink = undefined } = $props();
@@ -83,7 +95,13 @@ run(() => {
 						{#snippet children({ item })}
 							<ToggleButton {item} value="user" icon={User} iconOnly tooltip="User Input" />
 							<ToggleButton {item} value="static" icon={Pen} iconOnly tooltip="Static" />
-							<ToggleButton {item} value="ctx" icon={Shield} iconOnly tooltip="Context (secure backend value)" />
+							<ToggleButton
+								{item}
+								value="ctx"
+								icon={Shield}
+								iconOnly
+								tooltip="Context (secure backend value)"
+							/>
 						{/snippet}
 					</ToggleButtonGroup>
 				{/if}
@@ -135,5 +153,30 @@ run(() => {
 				>
 			</div>
 		{/if}
+		{#if componentInput?.type === 'user'}
+			<div class="flex flex-row items-center gap-1">
+				<Toggle
+					size="xs"
+					checked={Boolean(componentInput.sensitive)}
+					on:change={(e) => {
+						if (e.detail) {
+							componentInput.sensitive = true
+						} else {
+							delete componentInput.sensitive
+						}
+					}}
+					textClass="!text-tertiary"
+					options={{
+						right: 'sensitive'
+					}}
+				/>
+				<Lock size={12} class="text-tertiary" />
+				<Tooltip
+					>The value is encrypted before being stored in the job's args, so it is not exposed in
+					plaintext to anyone with read access to the job. The script still receives the decrypted
+					value at runtime.</Tooltip
+				>
+			</div>
+		{/if}
 	</div>
 {/if}

package/package/components/raw_apps/RawAppSharedUiDrawer.svelte

@@ -0,0 +1,129 @@
+<script lang="ts">import { workspaceStore } from '../../stores';
+import { WorkspaceService } from '../../gen';
+import { sendUserToast } from '../../toast';
+import Drawer from '../common/drawer/Drawer.svelte';
+import DrawerContent from '../common/drawer/DrawerContent.svelte';
+import Editor from '../Editor.svelte';
+import { Pane, Splitpanes } from 'svelte-splitpanes';
+let open = $state(false);
+let files = $state({});
+let version = $state(0);
+let editedBy = $state('');
+let selected = $state(undefined);
+let loading = $state(false);
+export async function openDrawer() {
+    open = true;
+    await load();
+}
+async function load() {
+    if (!$workspaceStore)
+        return;
+    loading = true;
+    try {
+        const res = (await WorkspaceService.getSharedUi({ workspace: $workspaceStore }));
+        files = res.files ?? {};
+        version = res.version ?? 0;
+        editedBy = res.edited_by ?? '';
+        const keys = Object.keys(files).sort();
+        if (selected === undefined || !(selected in files)) {
+            selected = keys[0];
+        }
+    }
+    catch (e) {
+        sendUserToast(`Failed to load shared UI: ${e}`, true);
+    }
+    finally {
+        loading = false;
+    }
+}
+const sortedPaths = $derived(Object.keys(files).sort());
+function langFromPath(p) {
+    const ext = (p.split('.').pop() ?? '').toLowerCase();
+    if (ext === 'ts')
+        return 'bun';
+    if (ext === 'tsx')
+        return 'tsx';
+    if (ext === 'js')
+        return 'bun';
+    if (ext === 'jsx')
+        return 'jsx';
+    if (ext === 'css')
+        return undefined;
+    if (ext === 'json')
+        return 'json';
+    if (ext === 'html')
+        return undefined;
+    if (ext === 'md')
+        return undefined;
+    return undefined;
+}
+</script>
+
+<Drawer bind:open size="900px">
+	<DrawerContent
+		title="Shared UI folder ({sortedPaths.length} file{sortedPaths.length === 1 ? '' : 's'})"
+		on:close={() => (open = false)}
+		noPadding
+	>
+		<div class="px-3 py-2 text-xs text-tertiary border-b">
+			Read-only view of the workspace's <code>ui/</code> folder. Imports of
+			<code>/ui/&lt;path&gt;</code> are bundled in when you push this raw app. Edits happen via
+			<code>wmill sync</code>.
+			{#if version}
+				Version {version}{#if editedBy}, by <code>{editedBy}</code>{/if}.
+			{/if}
+		</div>
+
+		{#if loading}
+			<div class="flex items-center justify-center h-full text-tertiary">Loading…</div>
+		{:else if sortedPaths.length === 0}
+			<div class="flex flex-col items-center justify-center h-full p-6 text-center text-tertiary">
+				<div class="font-semibold mb-1">No shared UI files yet</div>
+				<div class="text-sm">
+					Create a <code>ui/</code> folder at the root of your sync directory, add files, then run
+					<code>wmill sync push</code>.
+				</div>
+			</div>
+		{:else}
+			<Splitpanes class="!h-full">
+				<Pane size={28} minSize={15}>
+					<div class="overflow-auto h-full divide-y border-r">
+						{#each sortedPaths as p (p)}
+							<button
+								class="w-full text-left px-3 py-2 text-sm font-mono hover:bg-surface-hover {selected ===
+								p
+									? 'bg-surface-selected'
+									: ''}"
+								onclick={() => (selected = p)}
+							>
+								<div class="truncate">{p}</div>
+								<div class="text-2xs text-tertiary">
+									{(files[p]?.length ?? 0).toLocaleString()} chars
+								</div>
+							</button>
+						{/each}
+					</div>
+				</Pane>
+				<Pane size={72}>
+					{#if selected}
+						{#key selected}
+							<Editor
+								class="flex flex-1 grow h-full"
+								path={`/ui/${selected}`}
+								code={files[selected] ?? ''}
+								scriptLang={langFromPath(selected)}
+								disabled={true}
+								automaticLayout
+								fixedOverflowWidgets
+							/>
+						{/key}
+					{:else}
+						<div class="flex items-center justify-center h-full text-tertiary">
+							Select a file to view
+						</div>
+					{/if}
+				</Pane>
+			</Splitpanes>
+		{/if}
+	</DrawerContent>
+</Drawer>

package/package/components/raw_apps/RawAppSharedUiDrawer.svelte.d.ts

@@ -0,0 +1,5 @@
+declare const RawAppSharedUiDrawer: import("svelte").Component<Record<string, never>, {
+    openDrawer: () => Promise<void>;
+}, "">;
+type RawAppSharedUiDrawer = ReturnType<typeof RawAppSharedUiDrawer>;
+export default RawAppSharedUiDrawer;

package/package/components/raw_apps/RawAppSidebar.svelte

@@ -7,9 +7,11 @@ import RawAppHistoryList from './RawAppHistoryList.svelte';
 import Button from '../common/button/Button.svelte';
 import RawAppDataTableList from './RawAppDataTableList.svelte';
 import RawAppDataTableDrawer from './RawAppDataTableDrawer.svelte';
+import RawAppSharedUiDrawer from './RawAppSharedUiDrawer.svelte';
 let { runnables, selectedRunnable = $bindable(), files = $bindable({}), modules, onSelectFile, selectedDocument = $bindable(), historyManager, historySelectedId, onHistorySelect, onHistorySelectCurrent, onManualSnapshot, dataTableRefs = [], onDataTableRefsChange, defaultDatatable = undefined, defaultSchema = undefined, onDefaultChange } = $props();
 let dataTableDrawer = $state();
 let selectedDataTableIndex = $state(undefined);
+let sharedUiDrawer = $state();
 function handleAddDataTable(ref) {
     onDataTableRefsChange?.([...dataTableRefs, ref]);
 }
@@ -57,6 +59,15 @@ function handleSelectPath(path) {
 				<Plus size={12} />
 				<Folder size={12} />
 			</Button>
+			<Button
+				onClick={() => sharedUiDrawer?.openDrawer()}
+				title="Browse the workspace shared ui/ folder"
+				unifiedSize="xs"
+				variant="subtle"
+				btnClasses="px-1 gap-0.5 text-xs"
+			>
+				ui/
+			</Button>
 		</div>
 	{/snippet}
 	<FileExplorer
@@ -96,6 +107,7 @@ function handleSelectPath(path) {
 	onAdd={handleAddDataTable}
 	existingRefs={dataTableRefs}
 />
+<RawAppSharedUiDrawer bind:this={sharedUiDrawer} />
 
 {#if historyManager && onHistorySelect && onManualSnapshot}
 	<div class="py-4"></div>

package/package/components/raw_apps/RawAppYamlEditor.svelte

@@ -0,0 +1,81 @@
+<script lang="ts">import Drawer from '../common/drawer/Drawer.svelte';
+import DrawerContent from '../common/drawer/DrawerContent.svelte';
+import YAML from 'yaml';
+import { Button } from '../common';
+import { sendUserToast } from '../../toast';
+import { Loader2 } from 'lucide-svelte';
+let { drawer = $bindable(), summary, files, runnables, data, onApply } = $props();
+let code = $state('');
+let initialCode = $state('');
+let editor = $state(undefined);
+let hasChanges = $derived(code !== initialCode);
+function reload() {
+    const snapshot = {
+        summary,
+        files: files ?? {},
+        runnables,
+        data
+    };
+    code = YAML.stringify(snapshot);
+    initialCode = code;
+    editor?.setCode(code);
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function apply() {
+    try {
+        const parsed = YAML.parse(code);
+        if (!isPlainObject(parsed)) {
+            throw new Error('Top-level YAML must be a mapping');
+        }
+        const update = {};
+        if (typeof parsed.summary === 'string') {
+            update.summary = parsed.summary;
+        }
+        if (isPlainObject(parsed.files)) {
+            update.files = parsed.files;
+        }
+        if (isPlainObject(parsed.runnables)) {
+            update.runnables = parsed.runnables;
+        }
+        if (isPlainObject(parsed.data)) {
+            update.data = parsed.data;
+        }
+        onApply(update);
+        initialCode = code;
+        sendUserToast('Changes applied');
+    }
+    catch (e) {
+        sendUserToast('Error parsing yaml: ' + e, true);
+    }
+}
+let editorHeight = $state(0);
+</script>
+
+<Drawer on:open={reload} bind:this={drawer} size="800px">
+	<DrawerContent title="Raw app YAML" on:close={() => drawer?.toggleDrawer()}>
+		{#snippet actions()}
+			<Button variant="default" unifiedSize="md" disabled={!hasChanges} on:click={reload}
+				>Reset code</Button
+			>
+			<Button variant="accent" unifiedSize="md" disabled={!hasChanges} on:click={apply}
+				>Apply changes</Button
+			>
+		{/snippet}
+
+		{#await import('../SimpleEditor.svelte')}
+			<Loader2 class="animate-spin" />
+		{:then Module}
+			<div class="h-full w-full overflow-hidden" bind:clientHeight={editorHeight}>
+				<Module.default
+					bind:this={editor}
+					autoHeight
+					minHeight={editorHeight}
+					bind:code
+					lang="yaml"
+				/>
+			</div>
+		{/await}
+	</DrawerContent>
+</Drawer>

package/package/components/raw_apps/RawAppYamlEditor.svelte.d.ts

@@ -0,0 +1,20 @@
+import Drawer from '../common/drawer/Drawer.svelte';
+import type { Runnable } from './utils';
+import type { RawAppData } from './dataTableRefUtils';
+export type RawAppYamlUpdate = {
+    summary?: string;
+    files?: Record<string, string>;
+    runnables?: Record<string, Runnable>;
+    data?: RawAppData;
+};
+interface Props {
+    drawer?: Drawer | undefined;
+    summary: string;
+    files: Record<string, string> | undefined;
+    runnables: Record<string, Runnable>;
+    data: RawAppData;
+    onApply: (update: RawAppYamlUpdate) => void;
+}
+declare const RawAppYamlEditor: import("svelte").Component<Props, {}, "drawer">;
+type RawAppYamlEditor = ReturnType<typeof RawAppYamlEditor>;
+export default RawAppYamlEditor;

package/package/components/raw_apps/dataTableRefUtils.d.ts

@@ -18,6 +18,13 @@ export interface RawAppData {
 }
 /** Default data configuration */
 export declare const DEFAULT_DATA: RawAppData;
+export type DataTableWhitelist = {
+    datatables: Set<string>;
+    allTablesDatatables: Set<string>;
+    tables: Map<string, Map<string, Set<string>>>;
+};
+export declare function buildDataTableWhitelist(refs: DataTableRef[]): DataTableWhitelist;
+export declare function isDatatableTableAllowed(whitelist: DataTableWhitelist, datatableName: string, schemaName: string, tableName: string): boolean;
 /**
  * Parse a string ref into a DataTableRef object
  * Format: <datatableName>/<schema>:<table> or <datatableName>/<table> (for public schema)

package/package/components/raw_apps/dataTableRefUtils.js

@@ -4,6 +4,40 @@ export const DEFAULT_DATA = {
     datatable: undefined,
     schema: undefined
 };
+export function buildDataTableWhitelist(refs) {
+    const datatables = new Set();
+    const allTablesDatatables = new Set();
+    const tables = new Map();
+    for (const ref of refs) {
+        datatables.add(ref.datatable);
+        if (!ref.table) {
+            allTablesDatatables.add(ref.datatable);
+            continue;
+        }
+        if (!tables.has(ref.datatable)) {
+            tables.set(ref.datatable, new Map());
+        }
+        const schemaKey = ref.schema ?? 'public';
+        const schemaMap = tables.get(ref.datatable);
+        if (!schemaMap.has(schemaKey)) {
+            schemaMap.set(schemaKey, new Set());
+        }
+        schemaMap.get(schemaKey).add(ref.table);
+    }
+    return { datatables, allTablesDatatables, tables };
+}
+export function isDatatableTableAllowed(whitelist, datatableName, schemaName, tableName) {
+    if (whitelist.datatables.size === 0) {
+        return true;
+    }
+    if (!whitelist.datatables.has(datatableName)) {
+        return false;
+    }
+    if (whitelist.allTablesDatatables.has(datatableName)) {
+        return true;
+    }
+    return whitelist.tables.get(datatableName)?.get(schemaName ?? 'public')?.has(tableName) ?? false;
+}
 /**
  * Parse a string ref into a DataTableRef object
  * Format: <datatableName>/<schema>:<table> or <datatableName>/<table> (for public schema)

package/package/components/raw_apps/dataTableRefUtils.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package/components/raw_apps/dataTableRefUtils.test.js

@@ -0,0 +1,29 @@
+import { describe, expect, it } from 'vitest';
+import { buildDataTableWhitelist, isDatatableTableAllowed } from './dataTableRefUtils';
+describe('datatable whitelist helpers', () => {
+    it('allows every datatable table when no refs are configured', () => {
+        const whitelist = buildDataTableWhitelist([]);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'public', 'users')).toBe(true);
+        expect(isDatatableTableAllowed(whitelist, 'analytics', 'events', 'clicks')).toBe(true);
+    });
+    it('treats datatable-level refs as all tables in that datatable', () => {
+        const whitelist = buildDataTableWhitelist([{ datatable: 'main' }]);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'public', 'users')).toBe(true);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'analytics', 'events')).toBe(true);
+        expect(isDatatableTableAllowed(whitelist, 'other', 'public', 'users')).toBe(false);
+    });
+    it('allows only explicitly listed tables for table-level refs', () => {
+        const whitelist = buildDataTableWhitelist([
+            { datatable: 'main', schema: 'public', table: 'users' },
+            { datatable: 'main', schema: 'analytics', table: 'events' }
+        ]);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'public', 'users')).toBe(true);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'analytics', 'events')).toBe(true);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'public', 'orders')).toBe(false);
+    });
+    it('does not treat an explicit empty schema as public', () => {
+        const whitelist = buildDataTableWhitelist([{ datatable: 'main', schema: '', table: 'users' }]);
+        expect(isDatatableTableAllowed(whitelist, 'main', '', 'users')).toBe(true);
+        expect(isDatatableTableAllowed(whitelist, 'main', 'public', 'users')).toBe(false);
+    });
+});

package/package/components/raw_apps/datatableUtils.svelte.js

@@ -13,7 +13,7 @@ export function createDatatablesResource(getWorkspace) {
         if (!workspace)
             return [];
         try {
-            return await WorkspaceService.listDataTables({ workspace });
+            return (await WorkspaceService.listDataTables({ workspace })).map((d) => d.name);
         }
         catch (e) {
             console.error('Failed to load datatables:', e);

package/package/components/raw_apps/rawAppPolicy.d.ts

@@ -5,6 +5,7 @@ type RunnableWithInlineScript = RunnableWithFields & {
     inlineScript?: InlineScript & {
         language: ScriptLang;
     };
+    delete_after_secs?: number;
 };
 export type Runnable = RunnableWithInlineScript | undefined;
 export {};

package/package/components/raw_apps/rawAppPolicy.js

@@ -10,6 +10,19 @@ export async function updateRawAppPolicy(runnables, currentPolicy) {
         triggerables_v2
     };
 }
+function extraFields(runnable, fields) {
+    const out = {};
+    if (typeof runnable.delete_after_secs === 'number' && runnable.delete_after_secs >= 0)
+        out.delete_after_secs = runnable.delete_after_secs;
+    const sensitive_inputs = Object.entries(fields)
+        .map(([k, v]) => (v['sensitive'] ? k : undefined))
+        .filter(Boolean);
+    if (sensitive_inputs.length > 0)
+        out.sensitive_inputs = sensitive_inputs;
+    if (runnable.inlineScript?.tag)
+        out.tag = runnable.inlineScript.tag;
+    return out;
+}
 async function processRunnable(id, runnable, fields) {
     const staticInputs = collectStaticFields(fields);
     const allowUserResources = Object.entries(fields)
@@ -25,7 +38,8 @@ async function processRunnable(id, runnable, fields) {
             {
                 static_inputs: staticInputs,
                 one_of_inputs: {},
-                allow_user_resources: allowUserResources
+                allow_user_resources: allowUserResources,
+                ...extraFields(runnable, fields)
             }
         ];
     }
@@ -36,7 +50,8 @@ async function processRunnable(id, runnable, fields) {
             {
                 static_inputs: staticInputs,
                 one_of_inputs: {},
-                allow_user_resources: allowUserResources
+                allow_user_resources: allowUserResources,
+                ...extraFields(runnable, fields)
             }
         ];
     }

package/package/components/resources/resourceTypesFilter.d.ts

@@ -0,0 +1,19 @@
+import { Boxes, FileText } from 'lucide-svelte';
+export declare function buildResourceTypesFilterSchema(): {
+    _default_: {
+        type: "string";
+        hidden: true;
+    };
+    name: {
+        type: "string";
+        label: string;
+        icon: typeof Boxes;
+        description: string;
+    };
+    description: {
+        type: "string";
+        label: string;
+        icon: typeof FileText;
+        description: string;
+    };
+};

package/package/components/resources/resourceTypesFilter.js

@@ -0,0 +1,21 @@
+import { Boxes, FileText } from 'lucide-svelte';
+export function buildResourceTypesFilterSchema() {
+    return {
+        _default_: {
+            type: 'string',
+            hidden: true
+        },
+        name: {
+            type: 'string',
+            label: 'Name',
+            icon: Boxes,
+            description: 'Search in resource type name'
+        },
+        description: {
+            type: 'string',
+            label: 'Description',
+            icon: FileText,
+            description: 'Search in resource type description'
+        }
+    };
+}