feat(bigquery): add dashboard management UI

Author: simota

.agents/orbit.md

@@ -15,3 +15,4 @@
 | 2026-05-05 | Orbit | split DynamoDB dashboard management UI tasks into a Codex autoloop | `scripts/dynamodb-dashboard-management-autoloop/`, `.gitignore` | ready for guarded operations UI, Query/Scan UI, E2E, docs, and full-management-ui gates |
 | 2026-05-06 | Orbit | split DynamoDB dashboard advanced UI tasks into a Codex autoloop | `scripts/dynamodb-dashboard-advanced-autoloop/`, `.gitignore` | ready for pagination, saved/recent operations, table wizard, validation, delete confirmation, e2e, docs, and full-advanced-ui gates |
 | 2026-05-06 | Orbit | split GCS React dashboard integration into a Codex autoloop | `scripts/gcs-dashboard-react-autoloop/`, `.gitignore` | ready for React route, GCS inspection, guarded management, e2e, docs, and full-react-gcs gates |
+| 2026-05-06 | Orbit | split BigQuery dashboard management UI into a Codex autoloop | `scripts/bigquery-dashboard-management-autoloop/`, `.gitignore` | ready for query runner, dataset/table creation, row insert, job detail, validation, e2e, docs, and full-management-ui gates |

.gitignore

@@ -78,6 +78,17 @@ scripts/bigquery-autoloop/progress.md
 scripts/bigquery-autoloop/done.md
 scripts/bigquery-autoloop/iteration-*.out
 scripts/bigquery-autoloop/prompt-*.*
+scripts/bigquery-dashboard-management-autoloop/.run-loop.lock
+scripts/bigquery-dashboard-management-autoloop/.circuit-state
+scripts/bigquery-dashboard-management-autoloop/runner.jsonl
+scripts/bigquery-dashboard-management-autoloop/runner.log
+scripts/bigquery-dashboard-management-autoloop/state.env
+scripts/bigquery-dashboard-management-autoloop/state.env.sha256
+scripts/bigquery-dashboard-management-autoloop/progress.md
+scripts/bigquery-dashboard-management-autoloop/done.md
+scripts/bigquery-dashboard-management-autoloop/iteration-*.out
+scripts/bigquery-dashboard-management-autoloop/verify-*.out
+scripts/bigquery-dashboard-management-autoloop/prompt-*.*
 scripts/sqs-autoloop/.run-loop.lock
 scripts/sqs-autoloop/.circuit-state
 scripts/sqs-autoloop/runner.jsonl

README.md

@@ -45,6 +45,14 @@ go run ./cmd/devcloud dashboard
 go run ./cmd/devcloud reset
 ```
 
+## BigQuery Dashboard Management
+
+`/dashboard/bigquery` includes a compact local management console for BigQuery development workflows. It keeps the existing catalog browser for projects, datasets, tables, rows, schemas, and jobs, and adds a SQL query runner with `useLegacySql=false`, dry run, max results, result table, selected result JSON, and job reference.
+
+The dashboard can create local datasets and tables and insert local table rows through guarded `datasets.insert`, `tables.insert`, and `tabledata.insertAll` flows. Guided forms cover common fields, raw JSON mode is available for request-shape testing, and the row editor validates JSON before calling insertAll while showing partial insert errors.
+
+Safety boundaries: dashboard mutations go through `/api/bigquery/*` or the local BigQuery REST API path, never direct storage calls. The UI does not persist or log row payloads, credentials, Authorization headers, bearer tokens, or full request bodies. When BigQuery is disabled, query and mutation controls remain unavailable.
+
 ## Configuration
 
 Configuration lives at `.devcloud/config.yaml`. Runtime data is stored under `.devcloud/data` by default.

docs/design-bigquery-compat.md

@@ -706,17 +706,29 @@ GET /api/bigquery/projects/{project}/datasets/{dataset}/tables/{table}/rows?limi
 GET /api/bigquery/projects/{project}/jobs
 GET /api/bigquery/projects/{project}/jobs/{job}
 POST /api/bigquery/projects/{project}/queries
+POST /api/bigquery/projects/{project}/datasets
+POST /api/bigquery/projects/{project}/datasets/{dataset}/tables
+POST /api/bigquery/projects/{project}/datasets/{dataset}/tables/{table}/insertAll
 ```
 
 ### UI Surface
 
 - Project/dataset/table navigator.
 - Schema inspector.
 - Row preview table.
-- Job list and job detail.
-- Query editor for local GoogleSQL subset.
-- Query results table.
+- SQL query runner for the local GoogleSQL subset with `useLegacySql=false`, dry run, max results, result table, selected result JSON, and job reference.
+- Guarded BigQuery dashboard management controls for `datasets.insert`, `tables.insert`, and `tabledata.insertAll`.
+- Guided create dataset/table fields plus raw JSON mode for local request shapes.
+- Insert row JSON editor with client-side validation and partial insert error display.
+- Job list, recent query metadata, selected job JSON, and job detail.
 - Error panel showing BigQuery-style `reason`, `location`, and `message`.
+- Disabled BigQuery state keeps mutation and query controls unavailable.
+
+Dashboard safety boundaries:
+
+- All mutations go through `/api/bigquery/*` or the local BigQuery REST API path; dashboard code does not call storage directly.
+- Row payloads, credentials, Authorization headers, bearer tokens, and full request bodies are not persisted or logged by dashboard management flows.
+- Selected job JSON shown in the dashboard redacts query parameter values from the UI detail view.
 
 ## Implementation Plan
 

internal/dashboard/assets/react/assets/index-BGtXVHIp.js

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>devcloud Dashboard</title>
-    <script type="module" crossorigin src="/dashboard/assets/index-CF9eU0ES.js"></script>
+    <script type="module" crossorigin src="/dashboard/assets/index-BGtXVHIp.js"></script>
     <link rel="stylesheet" crossorigin href="/dashboard/assets/index-CFkAsiRY.css">
   </head>
   <body>

internal/dashboard/assets/react/assets/index-CF9eU0ES.js

@@ -436,7 +436,19 @@ func (s *Server) handleBigQueryProjectResource(w http.ResponseWriter, r *http.Re
 			methodNotAllowed(w, "POST")
 			return
 		}
-		s.forwardBigQueryQuery(w, r, projectID)
+		s.forwardBigQueryRequest(w, r, "/bigquery/v2/projects/"+url.PathEscape(projectID)+"/queries")
+		return
+	}
+	if len(parts) == 2 && parts[1] == "datasets" && r.Method == http.MethodPost {
+		s.forwardBigQueryRequest(w, r, "/bigquery/v2/projects/"+url.PathEscape(projectID)+"/datasets")
+		return
+	}
+	if len(parts) == 4 && parts[1] == "datasets" && parts[3] == "tables" && r.Method == http.MethodPost {
+		s.forwardBigQueryRequest(w, r, "/bigquery/v2/projects/"+url.PathEscape(projectID)+"/datasets/"+url.PathEscape(parts[2])+"/tables")
+		return
+	}
+	if len(parts) == 6 && parts[1] == "datasets" && parts[3] == "tables" && parts[5] == "insertAll" && r.Method == http.MethodPost {
+		s.forwardBigQueryRequest(w, r, "/bigquery/v2/projects/"+url.PathEscape(projectID)+"/datasets/"+url.PathEscape(parts[2])+"/tables/"+url.PathEscape(parts[4])+"/insertAll")
 		return
 	}
 	if r.Method != http.MethodGet {
@@ -502,14 +514,13 @@ func (s *Server) handleBigQueryProjectResource(w http.ResponseWriter, r *http.Re
 	}
 }
 
-func (s *Server) forwardBigQueryQuery(w http.ResponseWriter, r *http.Request, projectID string) {
-	queryURL := &url.URL{
-		Path:     "/bigquery/v2/projects/" + url.PathEscape(projectID) + "/queries",
+func (s *Server) forwardBigQueryRequest(w http.ResponseWriter, r *http.Request, path string) {
+	forwardURL := &url.URL{
+		Path:     path,
 		RawQuery: r.URL.RawQuery,
 	}
 	req := r.Clone(r.Context())
-	req.Method = http.MethodPost
-	req.URL = queryURL
+	req.URL = forwardURL
 	req.RequestURI = ""
 	req.Body = r.Body
 	req.Header = r.Header.Clone()

internal/dashboard/assets/react/index.html

@@ -1225,13 +1225,55 @@ func TestBigQueryDashboardPageAndAPIExposeCatalog(t *testing.T) {
 	if jobs.Code != http.StatusOK || !strings.Contains(jobs.Body.String(), `"state":"DONE"`) {
 		t.Fatalf("BigQuery jobs = %d body=%s", jobs.Code, jobs.Body.String())
 	}
+	jobDetail := performRequest(routes, http.MethodGet, "/api/bigquery/projects/devcloud/jobs/devcloud_query_")
+	if jobDetail.Code != http.StatusNotFound {
+		t.Fatalf("BigQuery unknown job detail = %d body=%s", jobDetail.Code, jobDetail.Body.String())
+	}
 	query := performRequestWithBody(routes, http.MethodPost, "/api/bigquery/projects/devcloud/queries", `{
 		"query":"SELECT id, name FROM `+"`devcloud.analytics.people`"+` WHERE age >= 30",
 		"useLegacySql":false
 	}`)
 	if query.Code != http.StatusOK || !strings.Contains(query.Body.String(), `"kind":"bigquery#queryResponse"`) || !strings.Contains(query.Body.String(), `"totalRows":"1"`) {
 		t.Fatalf("BigQuery dashboard query = %d body=%s", query.Code, query.Body.String())
 	}
+	var queryPayload struct {
+		JobReference struct {
+			JobID string `json:"jobId"`
+		} `json:"jobReference"`
+	}
+	if err := json.Unmarshal(query.Body.Bytes(), &queryPayload); err != nil {
+		t.Fatalf("decode BigQuery dashboard query response: %v", err)
+	}
+	queryJobDetail := performRequest(routes, http.MethodGet, "/api/bigquery/projects/devcloud/jobs/"+queryPayload.JobReference.JobID)
+	if queryJobDetail.Code != http.StatusOK || !strings.Contains(queryJobDetail.Body.String(), `"jobId":"`+queryPayload.JobReference.JobID+`"`) || !strings.Contains(queryJobDetail.Body.String(), `"state":"DONE"`) {
+		t.Fatalf("BigQuery query job detail = %d body=%s", queryJobDetail.Code, queryJobDetail.Body.String())
+	}
+	managementDataset := performRequestWithBody(routes, http.MethodPost, "/api/bigquery/projects/devcloud/datasets", `{
+		"datasetReference":{"datasetId":"dashboard_ops"},
+		"location":"US",
+		"friendlyName":"Dashboard Ops"
+	}`)
+	if managementDataset.Code != http.StatusOK || !strings.Contains(managementDataset.Body.String(), `"datasetId":"dashboard_ops"`) {
+		t.Fatalf("BigQuery dashboard dataset create = %d body=%s", managementDataset.Code, managementDataset.Body.String())
+	}
+	managementTable := performRequestWithBody(routes, http.MethodPost, "/api/bigquery/projects/devcloud/datasets/dashboard_ops/tables", `{
+		"tableReference":{"tableId":"events"},
+		"schema":{"fields":[{"name":"event_id","type":"STRING","mode":"REQUIRED"},{"name":"count","type":"INTEGER"}]}
+	}`)
+	if managementTable.Code != http.StatusOK || !strings.Contains(managementTable.Body.String(), `"tableId":"events"`) {
+		t.Fatalf("BigQuery dashboard table create = %d body=%s", managementTable.Code, managementTable.Body.String())
+	}
+	managementInsert := performRequestWithBody(routes, http.MethodPost, "/api/bigquery/projects/devcloud/datasets/dashboard_ops/tables/events/insertAll", `{
+		"skipInvalidRows":true,
+		"rows":[{"insertId":"event-1","json":{"event_id":"signup","count":1}}]
+	}`)
+	if managementInsert.Code != http.StatusOK || !strings.Contains(managementInsert.Body.String(), `"kind":"bigquery#tableDataInsertAllResponse"`) {
+		t.Fatalf("BigQuery dashboard insertAll = %d body=%s", managementInsert.Code, managementInsert.Body.String())
+	}
+	managementRows := performRequest(routes, http.MethodGet, "/api/bigquery/projects/devcloud/datasets/dashboard_ops/tables/events/rows?limit=1")
+	if managementRows.Code != http.StatusOK || !strings.Contains(managementRows.Body.String(), `"event_id":"signup"`) {
+		t.Fatalf("BigQuery dashboard inserted rows = %d body=%s", managementRows.Code, managementRows.Body.String())
+	}
 }
 
 func reactAssetPath(t *testing.T, indexHTML string) string {

internal/dashboard/server.go

@@ -158,6 +158,12 @@ services:
     enabled: true
     project: ${PROJECT}
     location: ${LOCATION}
+  redshift:
+    enabled: false
+  sqs:
+    enabled: false
+  pubsub:
+    enabled: false
 EOF
 
   run_check "devcloud binary builds" go build -o "${TMP_DIR}/devcloud" ./cmd/devcloud