add cloud quota usage display and version pruning (#8433)

* feat: add cloud quota usage display and version pruning

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: hard-delete pruned scripts so quota actually decreases

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: update quota error messages to reference workspace settings

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: rubenfiszel

backend/.sqlx/query-5a219a2532517869578c4504ff3153c43903f929ae5d62fbba12610f89c36d55.json

@@ -452,7 +452,7 @@ async fn create_flow(
                 .await?;
         if nb_flows.unwrap_or(0) >= 1000 {
             return Err(Error::BadRequest(
-                    "You have reached the maximum number of flows (1000) on cloud. Contact support@windmill.dev to increase the limit"
+                    "You have reached the maximum number of flows (1000) on cloud. Check your usage in Workspace Settings > General > Cloud Quotas. Contact support@windmill.dev to increase the limit"
                         .to_string(),
                 ));
         }

backend/.sqlx/query-9517395ac7230ab7c40c03ddd2a95fd6118b329a4421c9e8022df90ff7e775c8.json

@@ -636,7 +636,7 @@ async fn create_script_internal<'c>(
                 .await?;
         if nb_scripts.unwrap_or(0) >= 5000 {
             return Err(Error::BadRequest(
-                    "You have reached the maximum number of scripts (5000) on cloud. Contact support@windmill.dev to increase the limit"
+                    "You have reached the maximum number of scripts (5000) on cloud. Check your usage in Workspace Settings > General > Cloud Quotas. Contact support@windmill.dev to increase the limit"
                         .to_string(),
                 ));
         }

backend/.sqlx/query-d592ba371d4ad6e7f1bcffc01749f4753b6fe4e42413cce3d55f92797c856f35.json

@@ -158,6 +158,8 @@ pub fn workspaced_service() -> Router {
             post(update_protection_rule).delete(delete_protection_rule),
         )
         .route("/log_chat", post(log_ai_chat))
+        .route("/cloud_quotas", get(get_cloud_quotas))
+        .route("/prune_versions", post(prune_versions))
 }
 pub fn global_service() -> Router {
     Router::new()
@@ -5398,3 +5400,199 @@ async fn log_ai_chat(
     .await?;
     Ok(StatusCode::NO_CONTENT)
 }
+
+#[derive(Serialize)]
+struct QuotaInfo {
+    used: i64,
+    limit: i64,
+    prunable: i64,
+}
+
+#[derive(Serialize)]
+struct CloudQuotas {
+    scripts: QuotaInfo,
+    flows: QuotaInfo,
+    apps: QuotaInfo,
+    variables: QuotaInfo,
+    resources: QuotaInfo,
+}
+
+async fn get_cloud_quotas(
+    authed: ApiAuthed,
+    Extension(db): Extension<DB>,
+    Path(w_id): Path<String>,
+) -> JsonResult<CloudQuotas> {
+    require_admin(authed.is_admin, &authed.username)?;
+
+    if !*CLOUD_HOSTED {
+        return Err(Error::BadRequest(
+            "Cloud quotas are only available on cloud-hosted instances".to_string(),
+        ));
+    }
+
+    let scripts_used =
+        sqlx::query_scalar!("SELECT COUNT(*) FROM script WHERE workspace_id = $1", &w_id)
+            .fetch_one(&db)
+            .await?
+            .unwrap_or(0);
+
+    let scripts_prunable = sqlx::query_scalar!(
+        "SELECT COUNT(*) FROM script s WHERE s.workspace_id = $1 AND s.hash NOT IN (
+            SELECT DISTINCT ON (path) hash FROM script
+            WHERE workspace_id = $1 AND deleted = false AND draft_only IS NOT TRUE
+            ORDER BY path, created_at DESC
+        )",
+        &w_id
+    )
+    .fetch_one(&db)
+    .await?
+    .unwrap_or(0);
+
+    let flows_used =
+        sqlx::query_scalar!("SELECT COUNT(*) FROM flow WHERE workspace_id = $1", &w_id)
+            .fetch_one(&db)
+            .await?
+            .unwrap_or(0);
+
+    let flows_prunable = sqlx::query_scalar!(
+        "SELECT COUNT(*) FROM flow_version fv
+        JOIN flow f ON f.workspace_id = fv.workspace_id AND f.path = fv.path
+        WHERE fv.workspace_id = $1 AND fv.id != f.versions[array_upper(f.versions, 1)]",
+        &w_id
+    )
+    .fetch_one(&db)
+    .await?
+    .unwrap_or(0);
+
+    let apps_used = sqlx::query_scalar!("SELECT COUNT(*) FROM app WHERE workspace_id = $1", &w_id)
+        .fetch_one(&db)
+        .await?
+        .unwrap_or(0);
+
+    let apps_prunable = sqlx::query_scalar!(
+        "SELECT COUNT(*) FROM app_version av
+        JOIN app a ON a.id = av.app_id
+        WHERE a.workspace_id = $1 AND av.id != a.versions[array_upper(a.versions, 1)]",
+        &w_id
+    )
+    .fetch_one(&db)
+    .await?
+    .unwrap_or(0);
+
+    let variables_used = sqlx::query_scalar!(
+        "SELECT COUNT(*) FROM variable WHERE workspace_id = $1",
+        &w_id
+    )
+    .fetch_one(&db)
+    .await?
+    .unwrap_or(0);
+
+    let resources_used = sqlx::query_scalar!(
+        "SELECT COUNT(*) FROM resource WHERE workspace_id = $1",
+        &w_id
+    )
+    .fetch_one(&db)
+    .await?
+    .unwrap_or(0);
+
+    Ok(Json(CloudQuotas {
+        scripts: QuotaInfo { used: scripts_used, limit: 5000, prunable: scripts_prunable },
+        flows: QuotaInfo { used: flows_used, limit: 1000, prunable: flows_prunable },
+        apps: QuotaInfo { used: apps_used, limit: 1000, prunable: apps_prunable },
+        variables: QuotaInfo { used: variables_used, limit: 10000, prunable: 0 },
+        resources: QuotaInfo { used: resources_used, limit: 10000, prunable: 0 },
+    }))
+}
+
+#[derive(Deserialize)]
+struct PruneVersionsRequest {
+    resource_type: String,
+}
+
+#[derive(Serialize)]
+struct PruneVersionsResponse {
+    pruned: u64,
+}
+
+async fn prune_versions(
+    authed: ApiAuthed,
+    Extension(db): Extension<DB>,
+    Path(w_id): Path<String>,
+    Json(req): Json<PruneVersionsRequest>,
+) -> JsonResult<PruneVersionsResponse> {
+    require_admin(authed.is_admin, &authed.username)?;
+
+    if !*CLOUD_HOSTED {
+        return Err(Error::BadRequest(
+            "Version pruning is only available on cloud-hosted instances".to_string(),
+        ));
+    }
+
+    let pruned = match req.resource_type.as_str() {
+        "scripts" => {
+            let result = sqlx::query(
+                "DELETE FROM script
+                WHERE workspace_id = $1 AND hash NOT IN (
+                    SELECT DISTINCT ON (path) hash FROM script
+                    WHERE workspace_id = $1 AND deleted = false AND draft_only IS NOT TRUE
+                    ORDER BY path, created_at DESC
+                )",
+            )
+            .bind(&w_id)
+            .execute(&db)
+            .await?;
+            result.rows_affected()
+        }
+        "flows" => {
+            let deleted = sqlx::query(
+                "DELETE FROM flow_version fv
+                USING flow f
+                WHERE fv.workspace_id = f.workspace_id AND fv.path = f.path
+                AND fv.workspace_id = $1
+                AND fv.id != f.versions[array_upper(f.versions, 1)]",
+            )
+            .bind(&w_id)
+            .execute(&db)
+            .await?;
+
+            sqlx::query(
+                "UPDATE flow SET versions = ARRAY[versions[array_upper(versions, 1)]]
+                WHERE workspace_id = $1 AND array_length(versions, 1) > 1",
+            )
+            .bind(&w_id)
+            .execute(&db)
+            .await?;
+
+            deleted.rows_affected()
+        }
+        "apps" => {
+            let deleted = sqlx::query(
+                "DELETE FROM app_version av
+                USING app a
+                WHERE av.app_id = a.id AND a.workspace_id = $1
+                AND av.id != a.versions[array_upper(a.versions, 1)]",
+            )
+            .bind(&w_id)
+            .execute(&db)
+            .await?;
+
+            sqlx::query(
+                "UPDATE app SET versions = ARRAY[versions[array_upper(versions, 1)]]
+                WHERE workspace_id = $1 AND array_length(versions, 1) > 1",
+            )
+            .bind(&w_id)
+            .execute(&db)
+            .await?;
+
+            deleted.rows_affected()
+        }
+        _ => {
+            return Err(Error::BadRequest(format!(
+                "Invalid resource type '{}'. Must be 'scripts', 'flows', or 'apps'",
+                req.resource_type
+            )));
+        }
+    };
+
+    Ok(Json(PruneVersionsResponse { pruned }))
+}