Files
windmill/frontend/src/lib/components/common/table/ScriptRow.svelte
wendrul a1cd02d7f8 feat: restriction rulesets for workspaces (#7791)
* Add frontend for the workspace proctection rules

* api to add and update workspace protection rules

* Fix bypasser selection

* Fix Select bug on refocus

* Change rulesets to use bitflags

* Messages for protection rules errors

* claude remove ui for rules

* Hide edit buttons when rule

* No edit refactor pt1

* Update edit buttons to be disabled when rule is active

* Merge deploy ui and rulsets in one tab

* Remove not cleaned line in migration

* multiple fixes

* Remove old protection rule logic

* Add prrotection rule for deploying through Merge UI

* Add Alert on legacy Deploy UI

* Add backend enforcing of workspace rules

* Finish backend blocking on rulsets

* Last changes to api ruleset blocks

* Prepare sqlx

* Remove unused import and argument

* Update SQLx metadata

* fix npm run check

* Re trigger CI

---------

Co-authored-by: windmill-internal-app[bot] <windmill-internal-app[bot]@users.noreply.github.com>
2026-02-05 18:02:41 +00:00

405 lines
11 KiB
Svelte

<script lang="ts">
import { goto } from '$lib/navigation'
import { base } from '$lib/base'
import Dropdown from '$lib/components/DropdownV2.svelte'
import type MoveDrawer from '$lib/components/MoveDrawer.svelte'
import ScheduleEditor from '$lib/components/triggers/schedules/ScheduleEditor.svelte'
import SharedBadge from '$lib/components/SharedBadge.svelte'
import type ShareModal from '$lib/components/ShareModal.svelte'
import { ScriptService, type Script, DraftService } from '$lib/gen'
import { hubBaseUrlStore, userStore, workspaceStore } from '$lib/stores'
import { createEventDispatcher } from 'svelte'
import Badge from '../badge/Badge.svelte'
import Button from '../button/Button.svelte'
import Row from './Row.svelte'
import DraftBadge from '$lib/components/DraftBadge.svelte'
import { sendUserToast } from '$lib/toast'
import { capitalize, copyToClipboard, DELETE, isOwner } from '$lib/utils'
import { isDeployable } from '$lib/utils_deployable'
import type DeployWorkspaceDrawer from '$lib/components/DeployWorkspaceDrawer.svelte'
import { LanguageIcon } from '../languageIcons'
import {
Archive,
Calendar,
Code,
Copy,
Eye,
FolderOpen,
ChevronUpSquare,
GitFork,
List,
Pen,
Share,
Trash,
History,
Globe2
} from 'lucide-svelte'
import ScriptVersionHistory from '$lib/components/ScriptVersionHistory.svelte'
import { Drawer, DrawerContent } from '..'
import NoMainFuncBadge from '$lib/components/NoMainFuncBadge.svelte'
import Tooltip from '$lib/components/Tooltip.svelte'
import { getDeployUiSettings } from '$lib/components/home/deploy_ui'
import { scriptToHubUrl } from '$lib/hub'
interface Props {
script: Script & { canWrite: boolean; use_codebase: boolean }
marked: string | undefined
shareModal: ShareModal
moveDrawer: MoveDrawer
deploymentDrawer: DeployWorkspaceDrawer
deleteConfirmedCallback: (() => void) | undefined
errorHandlerMuted: boolean
showCode: (path: string, summary: string) => void
depth?: number
menuOpen?: boolean
showEditButton?: boolean
}
let {
script,
marked,
shareModal,
moveDrawer,
deploymentDrawer,
deleteConfirmedCallback = $bindable(),
errorHandlerMuted,
showCode,
depth = 0,
menuOpen = $bindable(false),
showEditButton = $bindable(true)
}: Props = $props()
const dispatch = createEventDispatcher()
async function archiveScript(path: string): Promise<void> {
await ScriptService.archiveScriptByPath({ workspace: $workspaceStore!, path })
dispatch('change')
sendUserToast(`Archived script ${path}`)
}
async function unarchiveScript(path: string): Promise<void> {
const r = await ScriptService.getScriptByPath({ workspace: $workspaceStore!, path })
await ScriptService.createScript({
workspace: $workspaceStore!,
requestBody: {
...r,
parent_hash: r.hash,
lock: r.lock
}
})
dispatch('change')
sendUserToast(`Unarchived script ${path}`)
}
async function deleteScript(path: string): Promise<void> {
await ScriptService.deleteScriptByPath({ workspace: $workspaceStore!, path })
dispatch('change')
sendUserToast(`Deleted script ${path}`)
}
let scheduleEditor: ScheduleEditor | undefined = $state(undefined)
const dlt: 'delete' = 'delete'
let versionsDrawerOpen: boolean = $state(false)
</script>
{#if menuOpen}
<ScheduleEditor onUpdate={() => goto('/schedules')} bind:this={scheduleEditor} />
{/if}
<Row
aiId={`script-run-button-${script.path}`}
aiDescription={`Button to access the form to run the script ${script.summary ?? script.path}`}
href={script.draft_only || (script.no_main_func && script.kind !== 'preprocessor')
? `${base}/scripts/edit/${script.path}`
: `${base}/scripts/get/${script.hash}?workspace=${$workspaceStore}`}
kind="script"
{marked}
path={script.path}
summary={script.summary}
{errorHandlerMuted}
workspaceId={$workspaceStore ?? ''}
canFavorite={!script.draft_only}
{depth}
>
{#snippet badges()}
{#if script.lock_error_logs}
<Badge color="red" baseClass="border border-red-200">Deployment failed</Badge>
{/if}
{#if script.archived}
<Badge color="red" baseClass="border">Archived</Badge>
{/if}
{#if script.no_main_func && script.kind !== 'preprocessor'}
<NoMainFuncBadge />
{/if}
{#if script.kind !== 'script'}
<Badge color="blue" baseClass="border"
>{script.kind === 'failure' ? 'Error handler' : capitalize(script.kind)}</Badge
>
{/if}
<SharedBadge canWrite={script.canWrite} extraPerms={script.extra_perms} />
<DraftBadge has_draft={script.has_draft} draft_only={script.draft_only} />
<div class="w-8 center-center">
<LanguageIcon lang={script.language} width={16} height={16} />
</div>
{/snippet}
{#snippet actions()}
<span class="hidden md:inline-flex gap-x-1">
{#if !$userStore?.operator && showEditButton}
{#if script.use_codebase}
<Badge
>bundle<Tooltip
>This script is deployed as a bundle and can only be deployed from the CLI for now</Tooltip
></Badge
>
{:else if script.canWrite && !script.archived}
<div>
<Button
aiId={`edit-script-button-${script.summary?.length > 0 ? script.summary : script.path}`}
aiDescription={`Edits the script ${script.summary?.length > 0 ? script.summary : script.path}`}
variant="subtle"
wrapperClasses="w-20"
unifiedSize="md"
startIcon={{ icon: Pen }}
href="{base}/scripts/edit/{script.path}"
>
Edit
</Button>
</div>
{:else if !script.draft_only}
<div>
<Button
aiId={`fork-script-button-${script.summary ?? script.path}`}
aiDescription={`Fork the script ${script.summary ?? script.path}`}
variant="subtle"
wrapperClasses="w-20"
unifiedSize="md"
startIcon={{ icon: GitFork }}
href="{base}/scripts/add?template={script.path}"
>
Fork
</Button>
</div>
{/if}
{/if}
</span>
<Dropdown
aiId={`script-row-dropdown-${script.summary?.length > 0 ? script.summary : script.path}`}
aiDescription={`Open dropdown for script ${script.summary?.length > 0 ? script.summary : script.path} options`}
items={async () => {
let owner = isOwner(script.path, $userStore, $workspaceStore)
const canEdit = script.canWrite && showEditButton
if (script.draft_only) {
return [
{
displayName: 'View code',
icon: Code,
action: () => {
showCode(script.path, script.summary)
}
},
{
displayName: 'Delete',
icon: Trash,
action: (event) => {
// TODO
// @ts-ignore
if (event?.shiftKey) {
deleteScript(script.path)
} else {
deleteConfirmedCallback = () => {
deleteScript(script.path)
}
}
},
type: dlt,
disabled: !canEdit
}
]
}
return [
{
displayName: 'View code',
icon: Code,
action: () => {
showCode(script.path, script.summary)
}
},
{
displayName: 'Duplicate/Fork',
icon: GitFork,
href: `${base}/scripts/add?template=${script.path}`,
disabled: !showEditButton,
hide: $userStore?.operator
},
{
displayName: 'Move/Rename',
icon: FolderOpen,
action: () => {
moveDrawer.openDrawer(script.path, script.summary, 'script')
},
disabled: !owner || script.archived || !canEdit,
hide: $userStore?.operator
},
...(isDeployable('script', script.path, await getDeployUiSettings())
? [
{
displayName: 'Deploy to staging/prod',
icon: ChevronUpSquare,
action: () => {
deploymentDrawer.openDrawer(script.path, 'script')
},
disabled: script.archived,
hide: $userStore?.operator
}
]
: []),
{
displayName: 'View runs',
icon: List,
href: `${base}/runs/${script.path}`
},
{
displayName: 'Versions',
icon: History,
action: () => {
versionsDrawerOpen = true
}
},
{
displayName: 'Audit logs',
icon: Eye,
href: `${base}/audit_logs?resource=${script.path}`,
hide: $userStore?.operator
},
{
displayName: 'Schedule',
icon: Calendar,
action: () => {
scheduleEditor?.openNew(false, script.path)
},
disabled: script.archived,
hide: $userStore?.operator
},
{
displayName: owner ? 'Share' : 'See Permissions',
icon: Share,
action: () => {
shareModal.openDrawer && shareModal.openDrawer(script.path, 'script')
},
disabled: script.archived,
hide: $userStore?.operator
},
{
displayName: 'Copy path',
icon: Copy,
action: () => {
copyToClipboard(script.path)
}
},
{
displayName: 'Publish to Hub',
icon: Globe2,
action: async () => {
const scriptData = await ScriptService.getScriptByPath({
workspace: $workspaceStore!,
path: script.path
})
window.open(
scriptToHubUrl(
scriptData.content,
scriptData.summary,
scriptData.description ?? '',
scriptData.kind,
scriptData.language,
scriptData.schema,
scriptData.lock ?? '',
$hubBaseUrlStore
).toString(),
'_blank'
)
}
},
{
displayName: script.archived ? 'Unarchive' : 'Archive',
icon: Archive,
action: () => {
script.archived
? script.path && unarchiveScript(script.path)
: script.path && archiveScript(script.path)
},
type: 'delete',
disabled: !owner || !canEdit,
hide: $userStore?.operator
},
...(script.has_draft
? [
{
displayName: 'Delete Draft',
icon: Trash,
action: async () => {
await DraftService.deleteDraft({
workspace: $workspaceStore ?? '',
path: script.path,
kind: 'script'
})
dispatch('change')
},
type: DELETE,
disabled: !owner,
hide: $userStore?.operator
}
]
: []),
...($userStore?.is_admin || $userStore?.is_super_admin
? [
{
displayName: 'Delete',
icon: Trash,
action: (event) => {
if (event?.shiftKey) {
deleteScript(script.path)
} else {
deleteConfirmedCallback = () => {
deleteScript(script.path)
}
}
},
type: dlt,
disabled: !canEdit,
hide: $userStore?.operator
}
]
: [])
]
}}
on:open={() => {
menuOpen = true
}}
/>
{/snippet}
</Row>
{#if script}
<Drawer bind:open={versionsDrawerOpen} size="1200px">
<DrawerContent title="Versions History" on:close={() => (versionsDrawerOpen = false)}>
<ScriptVersionHistory
scriptPath={script.path}
openDetails
on:openDetails={(e) => {
if (script) {
goto(`/scripts/get/${e.detail.version}?workspace=${$workspaceStore}`)
}
versionsDrawerOpen = false
}}
/>
</DrawerContent>
</Drawer>
{/if}