mage-ai 0.9.74__py3-none-any.whl → 0.9.79__py3-none-any.whl

mage_ai/io/config.py

@@ -16,6 +16,8 @@ class ConfigKey(StrEnum):
     List of configuration settings for use with data IO clients.
     """
 
+    AIRTABLE_ACCESS_TOKEN = "AIRTABLE_ACCESS_TOKEN"
+
     ALGOLIA_APP_ID = 'ALGOLIA_APP_ID'
     ALGOLIA_API_KEY = 'ALGOLIA_API_KEY'
     ALGOLIA_INDEX_NAME = 'ALGOLIA_INDEX_NAME'
@@ -64,6 +66,7 @@ class ConfigKey(StrEnum):
     MONGODB_PORT = 'MONGODB_PORT'
     MONGODB_USER = 'MONGODB_USER'
 
+    MSSQL_AUTHENTICATION = 'MSSQL_AUTHENTICATION'
     MSSQL_DATABASE = 'MSSQL_DATABASE'
     MSSQL_DRIVER = 'MSSQL_DRIVER'
     MSSQL_HOST = 'MSSQL_HOST'
@@ -78,6 +81,7 @@ class ConfigKey(StrEnum):
     MYSQL_PASSWORD = 'MYSQL_PASSWORD'
     MYSQL_PORT = 'MYSQL_PORT'
     MYSQL_USER = 'MYSQL_USER'
+    MYSQL_ALLOW_LOCAL_INFILE = 'MYSQL_ALLOW_LOCAL_INFILE'
 
     ORACLEDB_USER = 'ORACLEDB_USER'
     ORACLEDB_PASSWORD = 'ORACLEDB_PASSWORD'
@@ -338,6 +342,7 @@ class VerboseConfigKey(StrEnum):
     Config key headers for the verbose configuration file format.
     """
 
+    AIRTABLE = 'Airtable'
     ALGOLIA = 'Algolia'
     AWS = 'AWS'
     BIGQUERY = 'BigQuery'
@@ -356,6 +361,7 @@ class VerboseConfigKey(StrEnum):
 
 class ConfigFileLoader(BaseConfigLoader):
     KEY_MAP = {
+        ConfigKey.AIRTABLE_ACCESS_TOKEN: VerboseConfigKey.AIRTABLE,
         ConfigKey.ALGOLIA_APP_ID: (
             VerboseConfigKey.ALGOLIA, 'app_id'),
         ConfigKey.ALGOLIA_API_KEY: (

mage_ai/io/mssql.py

@@ -14,6 +14,7 @@ from mage_ai.io.config import BaseConfigLoader, ConfigKey
 from mage_ai.io.constants import UNIQUE_CONFLICT_METHOD_UPDATE
 from mage_ai.io.export_utils import PandasTypes
 from mage_ai.io.sql import BaseSQL
+from mage_ai.shared.hash import extract
 from mage_ai.shared.parsers import encode_complex
 
 MERGE_TABLE_SQL = '''MERGE {table_name} AS t
@@ -37,12 +38,14 @@ class MSSQL(BaseSQL):
         host: str,
         password: str,
         user: str,
+        authentication: str = None,
         schema: str = None,
         port: int = 1433,
         verbose: bool = True,
         **kwargs,
     ) -> None:
         super().__init__(
+            authentication=authentication,
             database=database,
             server=host,
             user=user,
@@ -60,15 +63,19 @@ class MSSQL(BaseSQL):
         database = self.settings['database']
         username = self.settings['user']
         password = self.settings['password']
-        return (
-            f'DRIVER={{{driver}}};'
-            f'SERVER={server};'
-            f'DATABASE={database};'
-            f'UID={username};'
-            f'PWD={password};'
-            'ENCRYPT=yes;'
-            'TrustServerCertificate=yes;'
-        )
+        conn_opts = [
+            f'DRIVER={{{driver}}}',
+            f'SERVER={server}',
+            f'DATABASE={database}',
+            f'UID={username}',
+            f'PWD={password}',
+            'ENCRYPT=yes',
+            'TrustServerCertificate=yes',
+        ]
+        if self.settings.get('authentication'):
+            authentication = self.settings.get('authentication')
+            conn_opts.append(f'Authentication={authentication}')
+        return ';'.join(conn_opts)
 
     def default_schema(self) -> str:
         return self.settings.get('schema') or 'dbo'
@@ -197,9 +204,11 @@ class MSSQL(BaseSQL):
                 TrustServerCertificate='yes',
             ),
         )
+        conn_kwargs = extract(kwargs, ['pool_size', 'max_overflow'])
         engine = create_engine(
             connection_url,
             fast_executemany=True,
+            **conn_kwargs,
         )
 
         unique_conflict_method = kwargs.get('unique_conflict_method')
@@ -242,6 +251,7 @@ class MSSQL(BaseSQL):
                     method=merge_table,
                 )
                 return
+        sql_kwargs = extract(kwargs, ['chunksize', 'method'])
 
         df.to_sql(
             table_name,
@@ -249,6 +259,7 @@ class MSSQL(BaseSQL):
             schema=schema_name,
             if_exists=if_exists or ExportWritePolicy.REPLACE,
             index=False,
+            **sql_kwargs,
         )
 
     def get_type(self, column: Series, dtype: str) -> str:
@@ -313,6 +324,7 @@ class MSSQL(BaseSQL):
     @classmethod
     def with_config(cls, config: BaseConfigLoader) -> 'MSSQL':
         return cls(
+            authentication=config[ConfigKey.MSSQL_AUTHENTICATION],
             database=config[ConfigKey.MSSQL_DATABASE],
             schema=config[ConfigKey.MSSQL_SCHEMA],
             driver=config[ConfigKey.MSSQL_DRIVER],

mage_ai/io/mysql.py

@@ -25,6 +25,7 @@ class MySQL(BaseSQL):
         password: str,
         user: str,
         port: int = 3306,
+        allow_local_infile: bool = False,
         verbose: bool = True,
         **kwargs,
     ) -> None:
@@ -35,18 +36,22 @@ class MySQL(BaseSQL):
             port=port or 3306,
             user=user,
             verbose=verbose,
+            allow_local_infile=allow_local_infile,
             **kwargs,
         )
 
     @classmethod
     def with_config(cls, config: BaseConfigLoader) -> 'MySQL':
-        return cls(
+        conn_kwargs = dict(
             database=config[ConfigKey.MYSQL_DATABASE],
             host=config[ConfigKey.MYSQL_HOST],
             password=config[ConfigKey.MYSQL_PASSWORD],
             port=config[ConfigKey.MYSQL_PORT],
             user=config[ConfigKey.MYSQL_USER],
         )
+        if config[ConfigKey.MYSQL_ALLOW_LOCAL_INFILE] is not None:
+            conn_kwargs['allow_local_infile'] = config[ConfigKey.MYSQL_ALLOW_LOCAL_INFILE]
+        return cls(**conn_kwargs)
 
     def build_create_table_command(
         self,

mage_ai/io/oracledb.py

@@ -244,10 +244,8 @@ FETCH FIRST {limit} ROWS ONLY
             # Remove extraneous surrounding double quotes
             # that get added while performing conversion to string.
             df_[col] = df_[col].apply(lambda x: x.strip('"') if x and isinstance(x, str) else x)
-        df_.replace({np.NaN: None}, inplace=True)
-        values = []
-        for i in range(0, len(df_)):
-            values.append(tuple(df_.fillna('').values[i]))
+        df_.fillna('', inplace=True)
+        values = list(df_.itertuples(index=False, name=None))
 
         # Create values placeholder
         colmn_names = df.columns.tolist()

mage_ai/io/postgres.py

@@ -99,6 +99,8 @@ class Postgres(BaseSQL):
             password = self.settings['password']
             port = self.settings['port']
             user = self.settings['user']
+            keepalives = self.settings.get('keepalives', 1)
+            keepalives_idle = self.settings.get('keepalives_idle', 300)
             if self.settings['connection_method'] == 'ssh_tunnel':
                 ssh_setting = dict(ssh_username=self.settings['ssh_username'])
                 if self.settings['ssh_pkey'] is not None:
@@ -128,19 +130,35 @@ class Postgres(BaseSQL):
                 host = '127.0.0.1'
                 port = self.ssh_tunnel.local_bind_port
 
-            connect_opts = dict(
-                database=database,
-                host=host,
-                password=password,
-                port=port,
-                user=user,
-                keepalives=1,
-                keepalives_idle=300,
+            connect_opts = self.settings.copy()
+            # See recognized keyword parameters for psycopg2.connect()
+            # https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-PARAMKEYWORDS
+            unrecognized_keys = [
+                'dbname',
+                'schema',
+                'connection_method',
+                'ssh_host',
+                'ssh_port',
+                'ssh_username',
+                'ssh_password',
+                'ssh_pkey',
+                "verbose"
+            ]
+            for key in unrecognized_keys:
+                connect_opts.pop(key, None)
+
+            connect_opts.update(
+                {
+                    'database': database,
+                    'host': host,
+                    'password': password,
+                    'port': port,
+                    'user': user,
+                    'keepalives': keepalives,
+                    'keepalives_idle': keepalives_idle,
+                }
             )
 
-            if self.settings.get('connect_timeout'):
-                connect_opts['connect_timeout'] = self.settings['connect_timeout']
-
             try:
                 self._ctx = connect(**connect_opts)
             except Exception:
@@ -277,6 +295,14 @@ class Postgres(BaseSQL):
 
         return 'text'
 
+    @staticmethod
+    def _clean_array_value(val: str) -> str:
+        if val is None or type(val) is not str or len(val) < 2:
+            return val
+        if val[0] == '[' and val[-1] == ']':
+            return str(val).replace('[', '{').replace(']', '}')
+        return val
+
     def upload_dataframe(
         self,
         cursor: _psycopg.cursor,
@@ -298,30 +324,26 @@ class Postgres(BaseSQL):
             # Use COPY command
             use_insert_command = False
 
-        def clean_array_value(val):
-            if val is None or type(val) is not str or len(val) < 2:
-                return val
-            if val[0] == '[' and val[-1] == ']':
-                return '{' + val[1:-1] + '}'
-            return val
-
         def serialize_obj(val):
             if type(val) is dict or type(val) is np.ndarray:
                 return simplejson.dumps(
                     val,
                     default=encode_complex,
+                    ensure_ascii=False,
                     ignore_nan=True,
                 )
             elif type(val) is list and len(val) >= 1 and type(val[0]) is dict:
                 return simplejson.dumps(
                     val,
                     default=encode_complex,
+                    ensure_ascii=False,
                     ignore_nan=True,
                 )
             elif not use_insert_command and type(val) is list:
-                return clean_array_value(simplejson.dumps(
+                return self._clean_array_value(simplejson.dumps(
                     val,
                     default=encode_complex,
+                    ensure_ascii=False,
                     ignore_nan=True,
                 ))
             return val

mage_ai/io/qdrant.py

@@ -107,7 +107,7 @@ class Qdrant(BaseIO):
         Save data into Qdrant.
         Args:
             df (DataFrame): Data to export.
-            document_column (str): Column name containinng documents to export.
+            document_column (str): Column name containing documents to export.
             id_column (str): Column name of the id. Default will use index in df.
             vector_column (str): Column name of the vector. Will use default
             encoder to auto generate query vector to auto generate query vector.

mage_ai/io/redshift.py

@@ -5,6 +5,7 @@ from typing import Dict, Union
 from pandas import DataFrame
 from redshift_connector import connect
 
+from mage_ai.data_preparation.models.block.sql.utils.shared import split_query_string
 from mage_ai.io.base import QUERY_ROW_LIMIT, ExportWritePolicy
 from mage_ai.io.config import BaseConfigLoader, ConfigKey
 from mage_ai.io.export_utils import clean_df_for_export, infer_dtypes
@@ -67,6 +68,18 @@ class Redshift(BaseSQL):
             with self.conn.cursor() as cur:
                 cur.execute(query_string, **kwargs)
 
+    def execute_query_raw(self, query: str, **kwargs) -> None:
+        """
+        Overwrite execute query to process multiple queries in one string.
+        """
+        results = []
+        with self.conn.cursor() as cursor:
+            for query_string in split_query_string(query):
+                result = cursor.execute(query_string)
+                results.append(result)
+        self.conn.commit()
+        return results
+
     def load(
         self,
         query_string: str,

mage_ai/io/sql.py

@@ -301,6 +301,7 @@ class BaseSQL(BaseSQLConnection):
                     if_exists=if_exists,
                     unique_conflict_method=unique_conflict_method,
                     unique_constraints=unique_constraints,
+                    **kwargs,
                 )
                 return
 

mage_ai/io/utils.py

@@ -29,3 +29,21 @@ def escape_quotes(line: str, single: bool = True, double: bool = True) -> str:
     if double:
         new_line = new_line.replace('\"', '\\"')
     return new_line
+
+
+def map_json_to_airtable(data_types):
+    # Extract the non-null type (ignoring 'null')
+    data_type = next((t for t in data_types if t != 'null'), 'string')
+
+    # Mapping from JSON types to Airtable types
+    type_mapping = {
+        'string': 'multilineText',
+        'integer': 'number',
+        'boolean': 'checkbox',
+        'array': 'multipleSelects',
+        'object': 'singleCollaborator',
+        'number': 'number',
+        'date-time': 'dateTime'
+    }
+
+    return type_mapping.get(data_type, 'str')

mage_ai/orchestration/db/__init__.py

@@ -1,5 +1,6 @@
 import logging
 import os
+from functools import wraps
 from urllib.parse import parse_qs, quote_plus, urlparse
 
 import sqlalchemy
@@ -13,7 +14,7 @@ from mage_ai.orchestration.db.setup import get_postgres_connection_url
 from mage_ai.orchestration.db.utils import get_user_info_from_db_connection_url
 from mage_ai.settings import OTEL_EXPORTER_OTLP_ENDPOINT
 from mage_ai.settings.repo import get_variables_dir
-from mage_ai.shared.environments import is_debug, is_test
+from mage_ai.shared.environments import is_debug, is_test_mage
 
 DB_RETRY_COUNT = 2
 TEST_DB = 'test.db'
@@ -28,7 +29,7 @@ db_kwargs = dict(
 if OTEL_EXPORTER_OTLP_ENDPOINT:
     from opentelemetry.instrumentation.sqlalchemy import SQLAlchemyInstrumentor
 
-if is_test():
+if is_test_mage():
     db_connection_url = f'sqlite:///{TEST_DB}'
     db_kwargs['connect_args']['check_same_thread'] = False
 elif not db_connection_url:
@@ -37,7 +38,7 @@ elif not db_connection_url:
     if pg_db_connection_url:
         db_connection_url = pg_db_connection_url
     else:
-        if is_test():
+        if is_test_mage():
             db_connection_url = f'sqlite:///{TEST_DB}'
         elif os.path.exists(os.path.join('mage_ai', 'orchestration', 'db')):
             # For local dev environment
@@ -169,6 +170,25 @@ def safe_db_query(func):
     return func_with_rollback
 
 
+def safe_db_query_async(func):
+    @wraps(func)
+    async def func_with_rollback_async(*args, **kwargs):
+        retry_count = 0
+        while True:
+            try:
+                return await func(*args, **kwargs)
+            except (
+                sqlalchemy.exc.OperationalError,
+                sqlalchemy.exc.PendingRollbackError,
+                sqlalchemy.exc.InternalError,
+            ) as e:
+                db_connection.session.rollback()
+                if retry_count >= DB_RETRY_COUNT:
+                    raise e
+                retry_count += 1
+    return func_with_rollback_async
+
+
 logging.basicConfig()
 
 if is_debug() and not os.getenv('DISABLE_DATABASE_TERMINAL_OUTPUT'):

mage_ai/orchestration/db/migrations/versions/39d36f1dab73_create_genericjob.py

@@ -0,0 +1,47 @@
+"""Create GenericJob
+
+Revision ID: 39d36f1dab73
+Revises: 0227396a216c
+Create Date: 2025-08-27 20:45:29.756869
+
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = '39d36f1dab73'
+down_revision = '0227396a216c'
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.create_table('generic_job',
+    sa.Column('id', sa.Integer(), autoincrement=True, nullable=False),
+    sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=True),
+    sa.Column('updated_at', sa.DateTime(timezone=True), server_default=sa.text('(CURRENT_TIMESTAMP)'), nullable=True),
+    sa.Column('job_type', sa.Enum('CANCEL_PIPELINE_RUN', name='jobtype'), nullable=False),
+    sa.Column('status', sa.Enum('INITIAL', 'QUEUED', 'RUNNING', 'COMPLETED', 'FAILED', name='jobstatus'), nullable=True),
+    sa.Column('payload', sa.JSON(), nullable=True),
+    sa.Column('extra_metadata', sa.JSON(), nullable=True),
+    sa.Column('started_at', sa.DateTime(timezone=True), nullable=True),
+    sa.Column('completed_at', sa.DateTime(timezone=True), nullable=True),
+    sa.Column('repo_path', sa.String(length=255), nullable=True),
+    sa.PrimaryKeyConstraint('id')
+    )
+    with op.batch_alter_table('generic_job', schema=None) as batch_op:
+        batch_op.create_index(batch_op.f('ix_generic_job_job_type'), ['job_type'], unique=False)
+        batch_op.create_index(batch_op.f('ix_generic_job_status'), ['status'], unique=False)
+    # ### end Alembic commands ###
+
+
+def downgrade() -> None:
+    # ### commands auto generated by Alembic - please adjust! ###
+    with op.batch_alter_table('generic_job', schema=None) as batch_op:
+        batch_op.drop_index(batch_op.f('ix_generic_job_status'))
+        batch_op.drop_index(batch_op.f('ix_generic_job_job_type'))
+
+    op.drop_table('generic_job')
+    # ### end Alembic commands ###

mage_ai/orchestration/db/models/oauth.py

@@ -882,4 +882,5 @@ class Oauth2AccessToken(BaseModel):
     def is_valid(self) -> bool:
         return self.token and \
             self.expires and \
-            self.expires >= datetime.utcnow().replace(tzinfo=self.expires.tzinfo)
+            self.expires >= datetime.utcnow().replace(tzinfo=self.expires.tzinfo) and \
+            self.user is not None

mage_ai/orchestration/db/models/schedules.py

@@ -1,4 +1,3 @@
-import asyncio
 import collections
 import traceback
 import uuid
@@ -9,7 +8,6 @@ from typing import DefaultDict, Dict, List
 
 import dateutil.parser
 import pytz
-from croniter import croniter
 from dateutil.relativedelta import relativedelta
 from sqlalchemy import (
     JSON,
@@ -71,6 +69,7 @@ from mage_ai.server.kernel_output_parser import DataType
 from mage_ai.settings.platform import project_platform_activated
 from mage_ai.settings.repo import get_repo_path
 from mage_ai.shared.constants import ENV_PROD
+from mage_ai.shared.croniter import croniter
 from mage_ai.shared.dates import compare
 from mage_ai.shared.enum import StrEnum
 from mage_ai.shared.hash import ignore_keys, index_by, merge_dict
@@ -1400,10 +1399,8 @@ class PipelineRun(PipelineRunProjectPlatformMixin, BaseModel):
 
         from mage_ai.usage_statistics.logger import UsageStatisticLogger
 
-        asyncio.run(
-            UsageStatisticLogger().pipeline_runs_impression(
-                lambda: self.query.filter(self.status == self.PipelineRunStatus.COMPLETED).count(),
-            )
+        UsageStatisticLogger().pipeline_runs_impression_sync(
+            lambda: self.query.filter(self.status == self.PipelineRunStatus.COMPLETED).count(),
         )
 
     @safe_db_query
@@ -1807,6 +1804,111 @@ class BlockRun(BlockRunProjectPlatformMixin, BaseModel):
         )
 
 
+class GenericJob(BaseModel):
+    class JobStatus(StrEnum):
+        INITIAL = 'initial'
+        QUEUED = 'queued'
+        RUNNING = 'running'
+        COMPLETED = 'completed'
+        FAILED = 'failed'
+
+    class JobType(StrEnum):
+        CANCEL_PIPELINE_RUN = 'cancel_pipeline_run'
+
+    job_type = Column(Enum(JobType), nullable=False, index=True)
+    status = Column(Enum(JobStatus), default=JobStatus.INITIAL, index=True)
+    payload = Column(JSON)  # Job-specific data (e.g., pipeline_run_id)
+    extra_metadata = Column(JSON)  # Additional metadata for the job
+    started_at = Column(DateTime(timezone=True))
+    completed_at = Column(DateTime(timezone=True))
+    repo_path = Column(String(255))
+
+    @classproperty
+    def repo_query(cls):
+        return cls.query.filter(
+            or_(
+                GenericJob.repo_path == get_repo_path(),
+                GenericJob.repo_path.is_(None),
+            )
+        )
+
+    @classmethod
+    @safe_db_query
+    def enqueue_cancel_pipeline_run(
+        cls,
+        pipeline_run_id: int,
+        cancelled_block_run_ids: List,
+        repo_path: str = None,
+    ) -> 'GenericJob':
+        """Enqueue a job to cancel a pipeline run."""
+        if repo_path is None:
+            repo_path = get_repo_path()
+
+        job = cls.create(
+            job_type=cls.JobType.CANCEL_PIPELINE_RUN,
+            payload=dict(
+                pipeline_run_id=pipeline_run_id,
+                cancelled_block_run_ids=cancelled_block_run_ids,
+            ),
+            repo_path=repo_path,
+            status=cls.JobStatus.INITIAL
+        )
+        return job
+
+    @classmethod
+    @safe_db_query
+    def get_jobs_with_initial_status(
+        cls,
+        limit: int = 10,
+        repo_path: str = None,
+    ) -> List['GenericJob']:
+        """Get up to N jobs with INITIAL status for processing."""
+        query = cls.repo_query.filter(
+            cls.status == cls.JobStatus.INITIAL,
+        )
+
+        if repo_path:
+            query = query.filter(cls.repo_path == repo_path)
+
+        jobs = query.order_by(cls.created_at.asc()).limit(limit).all()
+
+        return jobs
+
+    @safe_db_query
+    def mark_completed(self):
+        """Mark the job as completed successfully."""
+        self.update(
+            status=self.JobStatus.COMPLETED,
+            completed_at=datetime.now(tz=pytz.UTC)
+        )
+
+    @safe_db_query
+    def mark_failed(self, metadata: dict = None):
+        """Mark the job as failed."""
+        self.update(
+            status=self.JobStatus.FAILED,
+            completed_at=datetime.now(tz=pytz.UTC),
+            extra_metadata=metadata or {}
+        )
+
+    @safe_db_query
+    def mark_queued(self):
+        """Mark the job as queued."""
+        self.update(
+            status=self.JobStatus.QUEUED,
+        )
+
+    @safe_db_query
+    def mark_running(self):
+        """Mark the job as queued."""
+        self.update(
+            status=self.JobStatus.RUNNING,
+        )
+
+    def __repr__(self):
+        return f'GenericJob(id={self.id}, type={self.job_type}, status={self.status})'
+
+
 class EventMatcher(BaseModel):
     class EventType(StrEnum):
         AWS_EVENT = 'aws_event'

mage_ai/orchestration/db/models/schedules_project_platform.py

@@ -5,7 +5,6 @@ from typing import Dict, List
 
 import dateutil.parser
 import pytz
-from croniter import croniter
 from dateutil.relativedelta import relativedelta
 from sqlalchemy import or_
 from sqlalchemy.sql import func
@@ -28,6 +27,7 @@ from mage_ai.settings.platform.utils import (
     get_pipeline_from_platform_async,
 )
 from mage_ai.shared.constants import ENV_PROD
+from mage_ai.shared.croniter import croniter
 from mage_ai.shared.dates import compare
 from mage_ai.shared.hash import merge_dict
 from mage_ai.shared.utils import clean_name

mage_ai/orchestration/db/models/secrets.py

@@ -3,7 +3,8 @@ from typing import Optional
 from sqlalchemy import Column, String, Text, UniqueConstraint, or_
 
 from mage_ai.orchestration.db import safe_db_query
-from mage_ai.orchestration.db.models.base import BaseModel
+from mage_ai.orchestration.db.models.base import BaseModel, classproperty
+from mage_ai.settings.repo import get_repo_path
 
 
 class Secret(BaseModel):
@@ -15,6 +16,15 @@ class Secret(BaseModel):
     key_uuid = Column(String(255), nullable=True)
     __table_args__ = (UniqueConstraint('name', 'key_uuid', name='name_key_uuid_uc'),)
 
+    @classproperty
+    def repo_query(cls):
+        return cls.query.filter(
+            or_(
+                Secret.repo_name == get_repo_path(),
+                Secret.repo_name.is_(None),
+            )
+        )
+
     @classmethod
     @safe_db_query
     def get_secret(cls, name: str, key_uuid: str) -> Optional['Secret']: