pg_reports 0.8.1 → 0.9.0

data/app/views/pg_reports/dashboard/show.html.erb

@@ -2,11 +2,14 @@
 
 <div class="report-page">
   <nav class="breadcrumb">
-    <%= link_to t("pg_reports.ui.navigation.dashboard"), root_path %>
-    <span>/</span>
+    <%= link_to root_path, class: "breadcrumb-back", title: t("pg_reports.ui.navigation.back") do %>
+      <svg class="icon" aria-hidden="true"><use href="#i-arrow-left"></use></svg>
+      <span><%= t("pg_reports.ui.navigation.dashboard") %></span>
+    <% end %>
+    <span class="breadcrumb-sep">/</span>
     <span><%= @categories[@category][:name] %></span>
-    <span>/</span>
-    <span><%= @report_info[:name] %></span>
+    <span class="breadcrumb-sep">/</span>
+    <span class="breadcrumb-current"><%= @report_info[:name] %></span>
 
     <span class="breadcrumb-spacer"></span>
     <%= render "target_selector" %>
@@ -35,7 +38,7 @@
           <a href="#" onclick="downloadReport('json'); return false;"><%= t("pg_reports.ui.actions.download_json") %></a>
           <% if @documentation && @documentation[:ai_prompt].present? %>
             <div class="dropdown-divider"></div>
-            <a href="#" id="ai-prompt-btn" onclick="copyAiPrompt(this); return false;"><span class="ai-icon">AI</span> <%= t("pg_reports.ui.actions.copy_ai_prompt") %></a>
+            <a href="#" id="ai-prompt-btn" onclick="copyAiPrompt(this); return false;"><span class="ai-icon">AI</span><%= t("pg_reports.ui.actions.copy_ai_prompt") %></a>
           <% end %>
         </div>
       </div>
@@ -45,10 +48,9 @@
           <%= t("pg_reports.ui.actions.send_telegram") %>
         </button>
       <% end %>
-      <button class="btn btn-icon" onclick="showIdeSettingsModal()" title="<%= t("pg_reports.ui.actions.ide_settings_button_title") %>">
-        ⚙️
+      <button type="button" class="btn-icon" onclick="showIdeSettingsModal()" title="<%= t("pg_reports.ui.actions.ide_settings_button_title") %>" aria-label="<%= t("pg_reports.ui.actions.ide_settings_button_title") %>">
+        <svg class="icon icon-lg"><use href="#i-settings"></use></svg>
       </button>
-      <%= link_to t("pg_reports.ui.navigation.back"), root_path, class: "btn btn-secondary" %>
     </div>
   </div>
 
@@ -63,7 +65,7 @@
     <% if @documentation && @documentation[:what].present? %>
       <details class="documentation-section">
         <summary class="documentation-toggle">
-          <span class="toggle-icon">▶</span>
+          <svg class="icon toggle-icon" aria-hidden="true"><use href="#i-chevron-right"></use></svg>
           <span><%= t("pg_reports.ui.documentation.toggle_title") %></span>
         </summary>
         <div class="documentation-content">
@@ -118,7 +120,7 @@
       <div class="filter-section">
         <details class="filter-details">
           <summary class="filter-toggle">
-            <span class="toggle-icon">▶</span>
+            <svg class="icon toggle-icon" aria-hidden="true"><use href="#i-chevron-right"></use></svg>
             <span><%= t("pg_reports.ui.filters.title") %></span>
           </summary>
           <div class="filter-content">
@@ -176,7 +178,7 @@
     </div>
 
     <div id="empty-state" class="empty-state" style="display: none;">
-      <div class="empty-state-icon">✓</div>
+      <svg class="icon empty-state-icon" aria-hidden="true"><use href="#i-check"></use></svg>
       <p><%= t("pg_reports.ui.results.empty_message") %></p>
     </div>
 

data/bin/pg_reports

@@ -23,7 +23,16 @@ options = {
   host: "127.0.0.1",
   mount: "/",
   database_url: nil,
-  server: nil
+  server: nil,
+  config_file: nil
+}
+
+# Per-setting overrides from flags. nil means "unset" — the config file / ENV
+# value is kept. Populated below and forwarded to Standalone.run(overrides:).
+overrides = {
+  allow_raw_query_execution: nil,
+  allow_migration_creation: nil,
+  load_external_fonts: nil
 }
 
 banner = <<~BANNER
@@ -35,6 +44,12 @@ banner = <<~BANNER
   Connection is resolved from --database-url, else DATABASE_URL, else the
   standard libpq env vars (PGHOST, PGPORT, PGUSER, PGPASSWORD, PGDATABASE).
 
+  Configuration is layered, lowest to highest precedence:
+    PG_REPORTS_* env vars  <  config file  <  the flags below.
+  A config file (--config, else ./pg_reports.rb or config/pg_reports.rb) is
+  plain Ruby calling `PgReports.configure` — the way to set every option that
+  has no flag (thresholds, Telegram, Grafana, dashboard_auth, …).
+
   Options:
 BANNER
 
@@ -45,6 +60,10 @@ parser = OptionParser.new do |o|
   o.on("-m", "--mount PATH", "Path to mount the dashboard at (default: /)") { |v| options[:mount] = v }
   o.on("-d", "--database-url URL", "PostgreSQL connection URL") { |v| options[:database_url] = v }
   o.on("-s", "--server NAME", "Web server to use (e.g. puma, webrick)") { |v| options[:server] = v }
+  o.on("-c", "--config PATH", "Ruby config file to load (default: ./pg_reports.rb or config/pg_reports.rb)") { |v| options[:config_file] = v }
+  o.on("--[no-]allow-raw-query-execution", "Allow running raw SQL / EXPLAIN ANALYZE from the dashboard") { |v| overrides[:allow_raw_query_execution] = v }
+  o.on("--[no-]allow-migration-creation", "Allow the dashboard to write migration files to db/migrate/") { |v| overrides[:allow_migration_creation] = v }
+  o.on("--[no-]external-fonts", "Load Google Fonts in the dashboard (off by default)") { |v| overrides[:load_external_fonts] = v }
   o.on("-h", "--help", "Show this help") do
     puts o
     exit
@@ -70,11 +89,18 @@ when "server"
       host: options[:host],
       mount_path: options[:mount],
       database_url: options[:database_url],
-      server: options[:server]
+      server: options[:server],
+      config_file: options[:config_file],
+      overrides: overrides
     )
   rescue PgReports::Standalone::ServerUnavailable => e
     warn e.message
     exit 1
+  rescue PgReports::Error => e
+    # Config-file and connection problems surface as PgReports::Error with a
+    # human-readable message — print it, not a backtrace.
+    warn "pg_reports: #{e.message}"
+    exit 1
   rescue Interrupt
     warn "\npg_reports: stopped"
   end

data/config/brakeman.ignore

@@ -0,0 +1,97 @@
+{
+  "ignored_warnings": [
+    {
+      "warning_type": "SQL Injection",
+      "warning_code": 0,
+      "fingerprint": "5209397462e689c349f77e534f897c12a8550b9a013bd535153a929c12b944e2",
+      "check_name": "SQL",
+      "message": "Possible SQL injection",
+      "file": "app/controllers/pg_reports/dashboard_controller.rb",
+      "line": 357,
+      "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
+      "code": "ActiveRecord::Base.connection.execute(\"SELECT COUNT(*) FROM (#{substitute_params(retrieve_query_by_hash(params[:query_hash]), (params[:params] or {}))}) AS count_query\")",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "PgReports::DashboardController",
+        "method": "execute_query"
+      },
+      "user_input": "params[:params]",
+      "confidence": "High",
+      "cwe_id": [
+        89
+      ],
+      "note": "Reviewed & accepted: user-query execution feature (execute_query count). Gated by config.allow_raw_query_execution; the query is fetched by hash from an internal registry (retrieve_query_by_hash), parameters are validated/substituted, and SecurityError checks reject dangerous input. Not arbitrary attacker-controlled SQL."
+    },
+    {
+      "warning_type": "SQL Injection",
+      "warning_code": 0,
+      "fingerprint": "52294539b2a9666f9a79f7ad52cdd1dc531a3b71e487e5134174029cd5138571",
+      "check_name": "SQL",
+      "message": "Possible SQL injection",
+      "file": "app/controllers/pg_reports/dashboard_controller.rb",
+      "line": 440,
+      "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
+      "code": "ActiveRecord::Base.connection.execute(\"SELECT COUNT(*) FROM (#{params[:query].to_s}) AS count_query\")",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "PgReports::DashboardController",
+        "method": "run_query"
+      },
+      "user_input": "params[:query]",
+      "confidence": "High",
+      "cwe_id": [
+        89
+      ],
+      "note": "Reviewed & accepted: SQL Console (run_query count). Gated by config.allow_raw_query_execution; the client-typed query passes enforce_select_only! (SELECT-only, no semicolons, keyword denylist) and runs under a bounded statement_timeout. Intentional DBA tooling; same risk profile as execute_query/explain_analyze."
+    },
+    {
+      "warning_type": "Cross-Site Request Forgery",
+      "warning_code": 7,
+      "fingerprint": "b9682cc0e0a1cd86fddef96834d4f71c3558989c2136fe58b5ff51c75b83c8b4",
+      "check_name": "ForgerySetting",
+      "message": "`protect_from_forgery` should be called in `PgReports::MetricsController`",
+      "file": "app/controllers/pg_reports/metrics_controller.rb",
+      "line": 6,
+      "link": "https://brakemanscanner.org/docs/warning_types/cross-site_request_forgery/",
+      "code": null,
+      "render_path": null,
+      "location": {
+        "type": "controller",
+        "controller": "PgReports::MetricsController"
+      },
+      "user_input": null,
+      "confidence": "High",
+      "cwe_id": [
+        352
+      ],
+      "note": "Reviewed & accepted: read-only Prometheus /metrics endpoint. Uses bearer-token auth (config.grafana_metrics_token) with constant-time compare; CSRF protection is not applicable to a GET scrape endpoint."
+    },
+    {
+      "warning_type": "SQL Injection",
+      "warning_code": 0,
+      "fingerprint": "f133378f2542f3c09b527aebcc0939a1d227c46b0ab124be613e1e5aac829c79",
+      "check_name": "SQL",
+      "message": "Possible SQL injection",
+      "file": "app/controllers/pg_reports/dashboard_controller.rb",
+      "line": 278,
+      "link": "https://brakemanscanner.org/docs/warning_types/sql_injection/",
+      "code": "ActiveRecord::Base.connection.execute(\"EXPLAIN (ANALYZE, BUFFERS, FORMAT TEXT) #{substitute_params(retrieve_query_by_hash(params[:query_hash]), (params[:params] or {}))}\")",
+      "render_path": null,
+      "location": {
+        "type": "method",
+        "class": "PgReports::DashboardController",
+        "method": "explain_analyze"
+      },
+      "user_input": "params[:params]",
+      "confidence": "High",
+      "cwe_id": [
+        89
+      ],
+      "note": "Reviewed & accepted: EXPLAIN ANALYZE feature. Same safeguards as execute_query - query resolved by hash from internal registry, params validated, SecurityError guards. Intentional DBA tooling."
+    }
+  ],
+  "updated": "2026-07-10 19:15:00 +0300",
+  "brakeman_version": "8.0.5"
+}

data/config/locales/en.yml

@@ -591,7 +591,7 @@ en:
         page_title: "PgReports Dashboard"
       navigation:
         dashboard: "Dashboard"
-        back: "← Back"
+        back: "Back"
       database_selector:
         label: "Database"
       target_selector:
@@ -599,39 +599,41 @@ en:
       actions:
         cancel: "Cancel"
         retry: "Retry"
-        copy: "📋 Copy"
-        copy_query: "📋 Copy Query"
-        copy_code: "📋 Copy Code"
+        copy: "Copy"
+        copy_query: "Copy Query"
+        copy_code: "Copy Code"
         copy_to_clipboard_title: "Copy to clipboard"
-        copied_feedback: "✓ Copied!"
+        copied_feedback: "Copied!"
         clear_all: "Clear All"
-        run_report: "▶ Run Report"
-        export: "⬇ Export"
-        download_text: "📄 Text (.txt)"
-        download_csv: "📊 CSV (.csv)"
-        download_json: "📋 JSON (.json)"
-        download: "📥 Download"
+        run_report: "Run Report"
+        export: "Export"
+        download_text: "Text (.txt)"
+        download_csv: "CSV (.csv)"
+        download_json: "JSON (.json)"
+        download: "Download"
         copy_ai_prompt: "Copy Prompt"
-        send_telegram: "📨 Telegram"
+        send_telegram: "Telegram"
         sending: "Sending..."
-        reset_statistics: "🗑️ Reset Statistics"
+        reset_statistics: "Reset Statistics"
         resetting: "Resetting..."
         confirm_reset: "Yes, Reset"
-        create_extension: "⚡ Create Extension"
+        create_extension: "Create Extension"
         creating: "Creating..."
         ide_settings_button_title: "IDE Settings"
-        explain_analyze: "📊 EXPLAIN ANALYZE"
-        execute_query: "▶ Execute Query"
-        create_migration_file: "📁 Create File & Open in IDE"
-        start_monitoring: "▶ Start Monitoring"
-        stop_monitoring: "⏹ Stop Monitoring"
+        explain_analyze: "EXPLAIN ANALYZE"
+        execute_query: "Execute Query"
+        run_query: "SQL Console"
+        create_migration_file: "Create File & Open in IDE"
+        start_monitoring: "Start Monitoring"
+        stop_monitoring: "Stop Monitoring"
         starting: "Starting..."
         stopping: "Stopping..."
-        load_history: "📜 Load History (50)"
+        load_history: "Load History"
+        load_history_unavailable_title: "No stored history — set config.query_monitor_log_file to keep captured queries across restarts"
         loading: "Loading..."
         running: "Running..."
-        save_for_comparison: "📌 Save for Comparison"
-        saved_marker: "📌 Saved"
+        save_for_comparison: "Save for Comparison"
+        saved_marker: "Saved"
       status:
         pg_stat_ready: "Active"
         not_preloaded: "Preload required"
@@ -649,20 +651,24 @@ en:
         create_extension_title: "Create pg_stat_statements extension"
         create_extension_intro: "The pg_stat_statements extension isn't created in this database yet. Click below to create it:"
         create_extension_note: "If the library isn't preloaded, you'll also need to add it to shared_preload_libraries and restart PostgreSQL."
-        reset_stats_title: "⚠️ Reset Statistics"
+        reset_stats_title: "Reset Statistics"
         reset_stats_confirm: "Are you sure you want to reset pg_stat_statements statistics?"
         reset_stats_warning: "This action will clear all collected query statistics and cannot be undone."
-        ide_settings_title: "⚙️ IDE Settings"
-        problem_detected_title: "⚠️ Problem Detected"
-        query_analyzer_title: "📊 Query Analyzer"
+        ide_settings_title: "IDE Settings"
+        problem_detected_title: "Problem Detected"
+        query_analyzer_title: "Query Analyzer"
         query_label: "Query:"
         parameters_label: "Parameters:"
-        migration_title: "🗑️ Drop Index Migration"
+        migration_title: "Drop Index Migration"
         migration_subtitle: "Generated migration to remove the index:"
         migration_warning: "Creating a migration will generate a migration file in your project. Running this migration will drop the index from the database, which may significantly impact application performance."
         migration_warning_dev_only: "This operation should only be performed in a local development environment."
-        query_execution_disabled_title: "⚠️ Query execution is disabled"
+        query_execution_disabled_title: "Query execution is disabled"
+        migration_disabled_title: "Migration creation is disabled"
         query_execution_disabled_intro: "To enable this feature, add to your configuration:"
+        query_execution_disabled_env_note: "...or set the following environment variable instead:"
+        run_query_title: "SQL Console"
+        run_query_placeholder: "SELECT * FROM users LIMIT 10;"
       settings:
         default_ide_label: "Default IDE for source links:"
         ide_show_menu: "Show menu (default)"
@@ -701,24 +707,27 @@ en:
         waiting_for_locks: "waiting for locks"
         percent_used_suffix: "% used"
       categories:
-        requires_pg_stat: "🔒 Requires pg_stat_statements"
+        requires_pg_stat: "Requires pg_stat_statements"
+        pg_stat_missing_reason: "Requires pg_stat_statements, which is not installed on \"%{database}\". Create the extension there, or switch to a database that has it."
+        pg_stat_not_preloaded_reason: "Requires pg_stat_statements. The extension exists on \"%{database}\" but is not in shared_preload_libraries, so it returns no data until PostgreSQL is restarted with it preloaded."
         reports_count_suffix: "reports"
-        primary_only_reason: "🔒 This category only runs on the primary database — it inspects the host application's models. Switch back to the default database to use it."
+        primary_only_reason: "This category only runs on the primary database — it inspects the host application's models. Switch back to the default database to use it."
+        standalone_no_host_app_reason: "Not available in standalone mode — this category inspects the host application's models, and there is no host app when running the dashboard on its own."
       documentation:
-        toggle_title: "📖 What does this report show?"
-        what_section: "📋 What"
-        why_section: "❓ Why It Matters"
-        nuances_section: "⚠️ Nuances"
-        thresholds_section: "📊 Thresholds"
-        threshold_warning_label: "⚠️ Warning:"
-        threshold_critical_label: "🔴 Critical:"
+        toggle_title: "What does this report show?"
+        what_section: "What"
+        why_section: "Why It Matters"
+        nuances_section: "Nuances"
+        thresholds_section: "Thresholds"
+        threshold_warning_label: "Warning:"
+        threshold_critical_label: "Critical:"
         threshold_inverted_note: "(lower is worse)"
       filters:
-        title: "🔍 Filter Parameters"
+        title: "Filter Parameters"
         current_value: "current"
       saved:
-        title: "📌 Saved for Comparison"
-        saved_at_prefix: "▸ Saved:"
+        title: "Saved for Comparison"
+        saved_at_prefix: "Saved:"
         click_to_expand: "Click to expand"
         confirm_clear_all: "Remove all saved records for this report?"
         remove_title: "Remove"
@@ -732,9 +741,9 @@ en:
         execution_time_label: "Execution time:"
         null_placeholder: "<null>"
       sections:
-        recommendation: "💡 Recommendation"
-        detected_issues: "⚠️ Detected Issues"
-        execution_plan: "📊 Execution Plan"
+        recommendation: "Recommendation"
+        detected_issues: "Detected Issues"
+        execution_plan: "Execution Plan"
         line_label: "Line"
         current_label: "Current:"
         threshold_label: "Threshold:"
@@ -742,8 +751,8 @@ en:
         warning_eq: "warning"
         critical_eq: "critical"
       levels:
-        critical: "🔴 Critical"
-        warning: "⚠️ Warning"
+        critical: "Critical"
+        warning: "Warning"
       errors:
         error_prefix: "Error:"
         unable_fetch_metrics: "Unable to fetch database statistics."
@@ -768,13 +777,19 @@ en:
         decode_query_failed: "Failed to decode query"
         explain_analyze_failed: "Failed to run EXPLAIN ANALYZE"
         execute_query_failed: "Failed to execute query"
+        run_query_failed: "Failed to run query"
+        query_required: "Please enter a query"
         create_migration_failed: "Failed to create migration"
-        explain_disabled_toast: "⚠️ EXPLAIN ANALYZE is disabled. Enable in configuration: config.allow_raw_query_execution = true"
-        execute_disabled_toast: "⚠️ Query execution is disabled. Enable in configuration: config.allow_raw_query_execution = true"
+        explain_disabled_toast: "EXPLAIN ANALYZE is disabled. Enable in configuration: config.allow_raw_query_execution = true"
+        execute_disabled_toast: "Query execution is disabled. Enable in configuration: config.allow_raw_query_execution = true"
+        migration_disabled_toast: "Migration creation is disabled. Enable in configuration: config.allow_raw_query_execution = true"
         query_monitoring_error: "Query monitoring error"
         query_hash_required: "Query hash is required"
         query_execution_disabled: "Query execution from dashboard is disabled. Enable it in configuration with 'config.allow_raw_query_execution = true'"
         query_not_found_expired: "Query not found or expired. Please refresh the page."
+        query_monitor_unavailable_standalone: "SQL Query Monitor isn't available in standalone mode — there is no host application process to observe."
+        query_timed_out: "Query timed out after %{ms}ms (statement_timeout). Try narrowing the query or increase config.raw_query_statement_timeout_ms."
+        rate_limit_exceeded: "Too many requests. Please wait a bit before trying again."
         security_violation_prefix: "Security violation:"
         trigger_variables_not_allowed: "Cannot EXPLAIN ANALYZE queries with trigger variables (NEW, OLD). These are only available within trigger functions."
         missing_parameter_values: "Please provide values for all parameter placeholders ($1, $2, etc.)"

data/config/locales/ru.yml

@@ -556,7 +556,7 @@ ru:
         page_title: "PgReports — Дашборд"
       navigation:
         dashboard: "Дашборд"
-        back: "← Назад"
+        back: "Назад"
       database_selector:
         label: "База данных"
       target_selector:
@@ -564,39 +564,41 @@ ru:
       actions:
         cancel: "Отмена"
         retry: "Повторить"
-        copy: "📋 Копировать"
-        copy_query: "📋 Копировать запрос"
-        copy_code: "📋 Копировать код"
+        copy: "Копировать"
+        copy_query: "Копировать запрос"
+        copy_code: "Копировать код"
         copy_to_clipboard_title: "Скопировать в буфер обмена"
-        copied_feedback: "✓ Скопировано!"
+        copied_feedback: "Скопировано!"
         clear_all: "Очистить всё"
-        run_report: "▶ Запустить отчёт"
-        export: "⬇ Экспорт"
-        download_text: "📄 Текст (.txt)"
-        download_csv: "📊 CSV (.csv)"
-        download_json: "📋 JSON (.json)"
-        download: "📥 Скачать"
+        run_report: "Запустить отчёт"
+        export: "Экспорт"
+        download_text: "Текст (.txt)"
+        download_csv: "CSV (.csv)"
+        download_json: "JSON (.json)"
+        download: "Скачать"
         copy_ai_prompt: "Копировать промпт"
-        send_telegram: "📨 Telegram"
+        send_telegram: "Telegram"
         sending: "Отправка..."
-        reset_statistics: "🗑️ Сбросить статистику"
+        reset_statistics: "Сбросить статистику"
         resetting: "Сброс..."
         confirm_reset: "Да, сбросить"
-        create_extension: "⚡ Создать расширение"
+        create_extension: "Создать расширение"
         creating: "Создание..."
         ide_settings_button_title: "Настройки IDE"
-        explain_analyze: "📊 EXPLAIN ANALYZE"
-        execute_query: "▶ Выполнить запрос"
-        create_migration_file: "📁 Создать файл и открыть в IDE"
-        start_monitoring: "▶ Запустить мониторинг"
-        stop_monitoring: "⏹ Остановить мониторинг"
+        explain_analyze: "EXPLAIN ANALYZE"
+        execute_query: "Выполнить запрос"
+        run_query: "SQL-консоль"
+        create_migration_file: "Создать файл и открыть в IDE"
+        start_monitoring: "Запустить мониторинг"
+        stop_monitoring: "Остановить мониторинг"
         starting: "Запуск..."
         stopping: "Остановка..."
-        load_history: "📜 Загрузить историю (50)"
+        load_history: "Загрузить историю"
+        load_history_unavailable_title: "Сохранённой истории нет — задайте config.query_monitor_log_file, чтобы запросы сохранялись между перезапусками"
         loading: "Загрузка..."
         running: "Выполнение..."
-        save_for_comparison: "📌 Сохранить для сравнения"
-        saved_marker: "📌 Сохранено"
+        save_for_comparison: "Сохранить для сравнения"
+        saved_marker: "Сохранено"
       status:
         pg_stat_ready: "Активно"
         not_preloaded: "Требуется предзагрузка"
@@ -614,20 +616,24 @@ ru:
         create_extension_title: "Создание расширения pg_stat_statements"
         create_extension_intro: "Расширение pg_stat_statements ещё не создано в этой базе данных. Нажмите, чтобы создать его:"
         create_extension_note: "Если библиотека не предзагружена, её также нужно добавить в shared_preload_libraries и перезапустить PostgreSQL."
-        reset_stats_title: "⚠️ Сброс статистики"
+        reset_stats_title: "Сброс статистики"
         reset_stats_confirm: "Вы уверены, что хотите сбросить статистику pg_stat_statements?"
         reset_stats_warning: "Это действие очистит всю собранную статистику запросов и не может быть отменено."
-        ide_settings_title: "⚙️ Настройки IDE"
-        problem_detected_title: "⚠️ Обнаружена проблема"
-        query_analyzer_title: "📊 Анализатор запроса"
+        ide_settings_title: "Настройки IDE"
+        problem_detected_title: "Обнаружена проблема"
+        query_analyzer_title: "Анализатор запроса"
         query_label: "Запрос:"
         parameters_label: "Параметры:"
-        migration_title: "🗑️ Миграция удаления индекса"
+        migration_title: "Миграция удаления индекса"
         migration_subtitle: "Сгенерированная миграция для удаления индекса:"
         migration_warning: "Создание миграции сгенерирует файл миграции в вашем проекте. Запуск этой миграции удалит индекс из БД, что может значительно повлиять на производительность приложения."
         migration_warning_dev_only: "Эту операцию следует выполнять только в локальном dev-окружении."
-        query_execution_disabled_title: "⚠️ Выполнение запросов отключено"
+        query_execution_disabled_title: "Выполнение запросов отключено"
+        migration_disabled_title: "Создание миграций отключено"
         query_execution_disabled_intro: "Чтобы включить эту функцию, добавьте в конфигурацию:"
+        query_execution_disabled_env_note: "...или вместо этого установите переменную окружения:"
+        run_query_title: "SQL-консоль"
+        run_query_placeholder: "SELECT * FROM users LIMIT 10;"
       settings:
         default_ide_label: "IDE по умолчанию для ссылок на исходники:"
         ide_show_menu: "Показывать меню (по умолчанию)"
@@ -666,24 +672,27 @@ ru:
         waiting_for_locks: "ждут блокировок"
         percent_used_suffix: "% использовано"
       categories:
-        requires_pg_stat: "🔒 Требуется pg_stat_statements"
+        requires_pg_stat: "Требуется pg_stat_statements"
+        pg_stat_missing_reason: "Требуется pg_stat_statements, но расширение не установлено в базе «%{database}». Создайте его там или переключитесь на базу, где оно есть."
+        pg_stat_not_preloaded_reason: "Требуется pg_stat_statements. Расширение есть в базе «%{database}», но отсутствует в shared_preload_libraries — данных не будет, пока PostgreSQL не перезапустят с ним."
         reports_count_suffix: "отчётов"
-        primary_only_reason: "🔒 Эта категория работает только на первичной базе — она проверяет модели хост-приложения. Чтобы пользоваться, переключитесь обратно на базу по умолчанию."
+        primary_only_reason: "Эта категория работает только на первичной базе — она проверяет модели хост-приложения. Чтобы пользоваться, переключитесь обратно на базу по умолчанию."
+        standalone_no_host_app_reason: "Недоступно в автономном режиме — эта категория проверяет модели хост-приложения, а при самостоятельном запуске дашборда хост-приложения нет."
       documentation:
-        toggle_title: "📖 Что показывает этот отчёт?"
-        what_section: "📋 Что"
-        why_section: "❓ Почему это важно"
-        nuances_section: "⚠️ Нюансы"
-        thresholds_section: "📊 Пороги"
-        threshold_warning_label: "⚠️ Warning:"
-        threshold_critical_label: "🔴 Critical:"
+        toggle_title: "Что показывает этот отчёт?"
+        what_section: "Что"
+        why_section: "Почему это важно"
+        nuances_section: "Нюансы"
+        thresholds_section: "Пороги"
+        threshold_warning_label: "Warning:"
+        threshold_critical_label: "Critical:"
         threshold_inverted_note: "(меньше — хуже)"
       filters:
-        title: "🔍 Параметры фильтрации"
+        title: "Параметры фильтрации"
         current_value: "сейчас"
       saved:
-        title: "📌 Сохранено для сравнения"
-        saved_at_prefix: "▸ Сохранено:"
+        title: "Сохранено для сравнения"
+        saved_at_prefix: "Сохранено:"
         click_to_expand: "Нажмите, чтобы развернуть"
         confirm_clear_all: "Удалить все сохранённые записи для этого отчёта?"
         remove_title: "Удалить"
@@ -697,9 +706,9 @@ ru:
         execution_time_label: "Время выполнения:"
         null_placeholder: "<null>"
       sections:
-        recommendation: "💡 Рекомендация"
-        detected_issues: "⚠️ Обнаруженные проблемы"
-        execution_plan: "📊 План выполнения"
+        recommendation: "Рекомендация"
+        detected_issues: "Обнаруженные проблемы"
+        execution_plan: "План выполнения"
         line_label: "Строка"
         current_label: "Текущее:"
         threshold_label: "Порог:"
@@ -707,8 +716,8 @@ ru:
         warning_eq: "warning"
         critical_eq: "critical"
       levels:
-        critical: "🔴 Критично"
-        warning: "⚠️ Внимание"
+        critical: "Критично"
+        warning: "Внимание"
       errors:
         error_prefix: "Ошибка:"
         unable_fetch_metrics: "Не удалось получить статистику БД."
@@ -733,13 +742,19 @@ ru:
         decode_query_failed: "Не удалось декодировать запрос"
         explain_analyze_failed: "Не удалось выполнить EXPLAIN ANALYZE"
         execute_query_failed: "Не удалось выполнить запрос"
+        run_query_failed: "Не удалось выполнить запрос"
+        query_required: "Введите запрос"
         create_migration_failed: "Не удалось создать миграцию"
-        explain_disabled_toast: "⚠️ EXPLAIN ANALYZE отключен. Включите в конфигурации: config.allow_raw_query_execution = true"
-        execute_disabled_toast: "⚠️ Выполнение запросов отключено. Включите в конфигурации: config.allow_raw_query_execution = true"
+        explain_disabled_toast: "EXPLAIN ANALYZE отключен. Включите в конфигурации: config.allow_raw_query_execution = true"
+        execute_disabled_toast: "Выполнение запросов отключено. Включите в конфигурации: config.allow_raw_query_execution = true"
+        migration_disabled_toast: "Создание миграций отключено. Включите в конфигурации: config.allow_raw_query_execution = true"
         query_monitoring_error: "Ошибка мониторинга запросов"
         query_hash_required: "Требуется хэш запроса"
         query_execution_disabled: "Выполнение запросов из дашборда отключено. Включите в конфигурации: 'config.allow_raw_query_execution = true'"
         query_not_found_expired: "Запрос не найден или истёк срок действия. Обновите страницу."
+        query_monitor_unavailable_standalone: "SQL Query Monitor недоступен в автономном режиме — нет процесса основного приложения для наблюдения."
+        query_timed_out: "Превышено время ожидания запроса (%{ms} мс, statement_timeout). Сузьте запрос или увеличьте config.raw_query_statement_timeout_ms."
+        rate_limit_exceeded: "Слишком много запросов. Подождите немного и попробуйте снова."
         security_violation_prefix: "Нарушение безопасности:"
         trigger_variables_not_allowed: "Нельзя выполнить EXPLAIN ANALYZE для запросов с триггерными переменными (NEW, OLD). Они доступны только в контексте триггерных функций."
         missing_parameter_values: "Укажите значения для всех плейсхолдеров параметров ($1, $2 и т.д.)"