pgkiln 0.43.0 → 0.45.0

package/src/i18n/ru.ts

@@ -390,6 +390,8 @@ export const ru: Record<MessageKey, string> = {
   'facets.stars_up': "{n} звезды и выше",
   'facets.star_up': "1 звезда и выше",
   'facets.clear_short': "Очистить",
+  'facets.show_all': "Показать все ({n})",
+  'facets.total': "Всего строк {n}",
   'smart.placeholder': "Поиск или фильтр…",
   'smart.active': "Действующие фильтры",
   'smart.remove': "Удалить фильтр {filter}",

package/src/i18n/sv.ts

@@ -390,6 +390,8 @@ export const sv: Record<MessageKey, string> = {
   'facets.stars_up': "{n} stjärnor och uppåt",
   'facets.star_up': "1 stjärna och uppåt",
   'facets.clear_short': "Rensa",
+  'facets.show_all': "Visa alla ({n})",
+  'facets.total': "Totalt antal rader {n}",
   'smart.placeholder': "Sök eller filtrera…",
   'smart.active': "Filter som används",
   'smart.remove': "Ta bort filtret {filter}",

package/src/i18n/tr.ts

@@ -390,6 +390,8 @@ export const tr: Record<MessageKey, string> = {
   'facets.stars_up': "{n} yıldız ve üzeri",
   'facets.star_up': "1 yıldız ve üzeri",
   'facets.clear_short': "Temizle",
+  'facets.show_all': "Tümünü göster ({n})",
+  'facets.total': "Toplam satır sayısı {n}",
   'smart.placeholder': "Ara veya süz…",
   'smart.active': "Kullanılan süzgeçler",
   'smart.remove': "{filter} süzgecini kaldır",

package/src/i18n/uk.ts

@@ -390,6 +390,8 @@ export const uk: Record<MessageKey, string> = {
   'facets.stars_up': "{n} зірки й вище",
   'facets.star_up': "1 зірка й вище",
   'facets.clear_short': "Очистити",
+  'facets.show_all': "Показати все ({n})",
+  'facets.total': "Усього рядків {n}",
   'smart.placeholder': "Пошук або фільтр…",
   'smart.active': "Чинні фільтри",
   'smart.remove': "Видалити фільтр {filter}",

package/src/i18n/zh.ts

@@ -390,6 +390,8 @@ export const zh: Record<MessageKey, string> = {
   'facets.stars_up': "{n} 星及以上",
   'facets.star_up': "1 星及以上",
   'facets.clear_short': "清除",
+  'facets.show_all': "显示全部 ({n})",
+  'facets.total': "总行数 {n}",
   'smart.placeholder': "搜索或筛选…",
   'smart.active': "正在使用的筛选器",
   'smart.remove': "删除筛选器 {filter}",

package/src/i18n.ts

@@ -417,6 +417,8 @@ const en = {
   'facets.stars_up': '{n} stars and up',
   'facets.star_up': '1 star and up',
   'facets.clear_short': 'Clear',
+  'facets.show_all': 'Show all ({n})',
+  'facets.total': 'Total row count {n}',
   'smart.placeholder': 'Search or filter…',
   'smart.active': 'Filters in use',
   'smart.remove': 'Remove filter {filter}',
@@ -1121,6 +1123,8 @@ const nl: Record<MessageKey, string> = {
   'facets.stars_up': '{n} sterren of meer',
   'facets.star_up': '1 ster of meer',
   'facets.clear_short': 'Wissen',
+  'facets.show_all': 'Alle tonen ({n})',
+  'facets.total': 'Totaal aantal rijen {n}',
   'smart.placeholder': 'Zoeken of filteren…',
   'smart.active': 'Gebruikte filters',
   'smart.remove': 'Filter {filter} verwijderen',

package/src/metadata.ts

@@ -106,6 +106,12 @@ export interface App {
   authz_schemes: AuthzScheme[];
   app_items: string[];
   app_processes: AppProcess[];
+  /** (102) application computations: run for every page at their point, before the page's own */
+  app_computations: AppComputation[];
+  /** (105) defaults of the built-in component types (runtime/component-settings.ts) */
+  component_settings: import('./runtime/component-settings.ts').ComponentSettings;
+  /** (103) shortcuts: "NAME" in static content, help texts and confirm messages (runtime/shortcuts.ts) */
+  shortcuts?: { name: string; type: 'text' | 'html' | 'function_body'; value: string }[];
   lovs: { name: string; query: string; rest_source?: string | null }[];
   theme: {
     accent?: string; header?: string; nav?: 'side' | 'top'; mode?: 'auto' | 'light' | 'dark'; user_choice?: boolean;
@@ -238,6 +244,11 @@ export interface Computation extends Condition {
   authz: string | null;
 }
 
+/** (102) An application computation: like a page's, for every page of the application. */
+export interface AppComputation extends Omit<Computation, 'point'> {
+  point: 'after_authentication' | 'before_header' | 'after_submit';
+}
+
 export interface Branch extends Condition {
   id: number;
   seq: number;
@@ -349,7 +360,7 @@ const agg = (table: string, fk: string, parent: string, appId: string) =>
 export async function loadApp(alias: string) {
   return runtime.one<App>(
     `select a.id, a.alias, a.name, a.home_page, a.authentication, a.access_control, a.sso_providers, a.local_login, a.remember_me_days, a.login_page, a.password_reset, a.session_group, a.ldap_directories, a.header_name, a.header_auto_create, a.logout_url, a.db_auth_roles, a.db_auth_member_of, a.custom_auth_function, a.custom_auth_code, a.custom_auth_post_code, a.nav_list, a.navbar_list, a.pwa, a.pwa_short_name, a.pwa_icon is not null as pwa_has_icon, a.pwa_offline_pages, a.pwa_offline_submit, a.pwa_push, a.db_role, a.debug, a.debug_level, a.theme,
-            a.availability, a.availability_message, a.availability_users, a.feedback, a.error_function, a.session_warning_seconds,
+            a.availability, a.availability_message, a.availability_users, a.feedback, a.error_function, a.session_warning_seconds, a.component_settings,
             a.language, a.languages, a.language_from, a.date_format, a.timestamp_format, a.time_zone, a.time_zone_auto, a.currency,
             coalesce((select jsonb_agg(jsonb_build_object('name', l.name, 'query', l.query, 'rest_source', l.rest_source)) from meta.lov l where l.app_id = a.id), '[]') as lovs,
             coalesce((select jsonb_agg(jsonb_build_object('page_no', p.page_no, 'name', p.name, 'title', p.title,
@@ -361,6 +372,8 @@ export async function loadApp(alias: string) {
                         from meta.authz_scheme s where s.app_id = a.id), '[]') as authz_schemes,
             coalesce((select jsonb_agg(i.name) from meta.app_item i where i.app_id = a.id), '[]') as app_items,
             ${agg('meta.app_process', 'app_id', 'a', 'a.id')} as app_processes,
+            ${agg('meta.app_computation', 'app_id', 'a', 'a.id')} as app_computations,
+            coalesce((select jsonb_agg(jsonb_build_object('name', s.name, 'type', s.type, 'value', s.value)) from meta.shortcut s where s.app_id = a.id), '[]') as shortcuts,
             ${includes('a.static_includes', 'a.id')} as static_includes,
             coalesce((select jsonb_agg(to_jsonb(x) - 'id' - 'app_id' - 'install_sql') from meta.plugin x where x.app_id = a.id), '[]') as plugins,
             coalesce((select jsonb_agg(jsonb_build_object('name', f.name, 'v', floor(extract(epoch from f.updated_at))::bigint))

package/src/runtime/account.ts

@@ -7,7 +7,7 @@ import { forgetAllRemembered, rememberCookie, rememberedCount } from '../remembe
 import { getSession, loginThrottled, logActivity, saveState, takeFlash } from '../session.ts';
 import { loginWindowMinutes } from '../security.ts';
 import type { PageContext } from './context.ts';
-import { databaseTimeZone, isTheme, matchLanguage, sameOffset, THEME_COOKIE, timeZoneFor, timeZoneNames, validTimeZone } from './locale.ts';
+import { databaseTimeZone, isTheme, matchLanguage, sameOffset, THEME_COOKIE, themeCookieOptions, timeZoneFor, timeZoneNames, validTimeZone } from './locale.ts';
 import { chrome, clientTexts } from './render.ts';
 import { appStyles, choosable, chosenStyleName, styleChoice } from './styles.ts';
 import { loadApp } from '../metadata.ts';
@@ -28,8 +28,8 @@ async function saveStyle(appId: number, username: string, style: string) {
   );
 }
 
-const themeCookie = (reply: FastifyReply, theme: string) =>
-  reply.setCookie(THEME_COOKIE, theme, { path: '/', sameSite: 'lax', secure: process.env.COOKIE_SECURE === 'true', maxAge: 365 * 86400 });
+// (sprint 79) per application: a choice in one application doesn't change another's mode
+const themeCookie = (reply: FastifyReply, theme: string, base: string) => reply.setCookie(THEME_COOKIE, theme, themeCookieOptions(base));
 
 /** My account → Time zone: automatic (the browser's) or one of PostgreSQL's time zones. */
 async function timeZoneField(ctx: PageContext) {
@@ -160,7 +160,7 @@ export async function accountRoutes(app: FastifyInstance) {
     }
     if (theme) {
       ctx.session.state.__THEME = theme;
-      themeCookie(reply, theme);
+      themeCookie(reply, theme, ctx.base);
     }
     if (language) ctx.session.state.__LANG = language;
     // a style variant: only one of the app's own styles ('' = the base colours)
@@ -263,7 +263,7 @@ export async function accountRoutes(app: FastifyInstance) {
     const to = safeNext(a, b.next);
     if (b.__csrf !== session.csrf_token || a.theme?.user_choice === false || !isTheme(b.theme)) return reply.redirect(to, 303);
     session.state.__THEME = b.theme;
-    themeCookie(reply, b.theme);
+    themeCookie(reply, b.theme, `/a/${a.alias}`);
     if (session.username) {
       await runtime.query('update meta.account set theme_pref = $2 where lower(username) = lower($1)', [session.username, b.theme]);
     }

package/src/runtime/component-settings.ts

@@ -0,0 +1,42 @@
+// Component settings (migration 105; APEX: Shared Components → Component
+// Settings): an application's defaults for its built-in component types, used
+// where a component sets nothing itself. Every value is bounded here, so a
+// hand-edited or imported setting can't make a page read without limits.
+
+export interface ComponentSettings {
+  report_rows?: number;
+  grid_rows?: number;
+  popup_lov_rows?: number;
+  lov_max_rows?: number;
+  rating_max?: number;
+}
+export type ComponentSetting = keyof ComponentSettings;
+
+export const COMPONENT_SETTINGS: { key: ComponentSetting; label: string; group: string; min: number; max: number; def: number; help: string }[] = [
+  { key: 'report_rows', label: 'Rows per page', group: 'Reports', min: 1, max: 1000, def: 15, help: 'Of a classic or interactive report without its own page size (users can still choose).' },
+  { key: 'grid_rows', label: 'Rows per page', group: 'Interactive grids', min: 1, max: 200, def: 25, help: 'Of an interactive grid without its own page size.' },
+  { key: 'popup_lov_rows', label: 'Rows per page', group: 'Popup lists of values', min: 1, max: 100, def: 25, help: 'In a popup list of values\' dialog, for items without their own page size.' },
+  { key: 'lov_max_rows', label: 'Maximum rows', group: 'Lists of values', min: 1, max: 50_000, def: 5000, help: 'Rows a select list, radio group, checkbox group or popup list reads, for items without their own maximum.' },
+  { key: 'rating_max', label: 'Stars', group: 'Star ratings', min: 3, max: 10, def: 5, help: 'Of a star rating item without its own maximum.' },
+];
+
+/** The value of a setting: the application's (bounded), else the built-in default. */
+export function componentSetting(settings: ComponentSettings | null | undefined, key: ComponentSetting): number {
+  const spec = COMPONENT_SETTINGS.find((s) => s.key === key)!;
+  const n = Math.floor(Number(settings?.[key]));
+  return Number.isFinite(n) && n >= spec.min && n <= spec.max ? n : spec.def;
+}
+
+/** The settings from the builder's form: whole numbers within bounds; empty leaves a setting at its default. */
+export function componentSettingsFrom(form: Record<string, unknown>): { settings: ComponentSettings; problems: string[] } {
+  const settings: ComponentSettings = {};
+  const problems: string[] = [];
+  for (const s of COMPONENT_SETTINGS) {
+    const raw = String(form[s.key] ?? '').trim();
+    if (raw === '') continue;
+    const n = Number(raw);
+    if (!Number.isInteger(n) || n < s.min || n > s.max) problems.push(`${s.group}, ${s.label}: a whole number from ${s.min} to ${s.max.toLocaleString('en')}.`);
+    else settings[s.key] = n;
+  }
+  return { settings, problems };
+}

package/src/runtime/context.ts

@@ -66,6 +66,10 @@ export interface PageContext {
   cacheRefresh?: boolean;
   /** the lazy region the request renders (GET …/region/:id), not as a placeholder */
   loadNow?: number;
+  /** (103) the values of the function-body shortcuts this request used */
+  shortcutValues?: Map<string, string>;
+  /** the whole page is rendered (renderPage), not one region on its own */
+  wholePage?: boolean;
   /** a download process's file, sent instead of the page (processes.ts) */
   download?: Download;
   /** running a background chain (process-jobs.ts): no request, no browser */

package/src/runtime/devbar.ts

@@ -86,26 +86,28 @@ export function devbarHtml(ctx: PageContext): Raw | '' {
   const level = sessionDebugLevel(ctx.session);
   const appLevel = Number(ctx.app.debug_level ?? 0);
   const page = ctx.page.page_no;
-  const tool = (href: string, label: string, name: string) =>
-    html`<li><a class="devbar-tool" href="${href}" title="${label}" aria-label="${label}">${icon(name)}</a></li>`;
-  const menu = (label: string, name: string, cls: string, body: Raw, hidden = false) =>
-    html`<li${hidden ? raw(' hidden') : ''}><details class="devbar-menu ${cls}"><summary class="devbar-tool" title="${label}" aria-label="${label}">${icon(name)}</summary>
+  // (sprint 79, UI-4; APEX: App 77536, Page 8, Debug ⏻) each tool with a short text; "Icons only" in Settings
+  const text = (s: string) => html`<span class="devbar-text" aria-hidden="true">${s}</span>`;
+  const tool = (href: string, label: string, name: string, short: string) =>
+    html`<li><a class="devbar-tool" href="${href}" title="${label}" aria-label="${label}">${icon(name)}${text(short)}</a></li>`;
+  const menu = (label: string, name: string, cls: string, body: Raw, hidden = false, short = label) =>
+    html`<li${hidden ? raw(' hidden') : ''}><details class="devbar-menu ${cls}"><summary class="devbar-tool" title="${label}" aria-label="${label}">${icon(name)}${text(short)}</summary>
       <div class="devbar-pop" role="group" aria-label="${label}">${body}</div></details></li>`;
   return html`<div class="devbar" data-dock="bottom">
     <nav aria-label="Developer toolbar"><ul class="devbar-tools">
-      ${tool(BUILDER, 'App Builder', 'home')}
-      ${tool(`${BUILDER}/apps/${ctx.app.id}`, `Application ${ctx.app.id}`, 'grid')}
-      ${tool(`${BUILDER}/pages/${ctx.page.id}`, `Edit page ${page}`, 'edit')}
-      ${tool(`${ctx.base}/${page}/devbar/session`, 'Session', 'database')}
-      ${menu('Debug', 'bolt', `devbar-debug-menu${level || appLevel ? ' is-on' : ''}`, html`<form method="post" action="${ctx.base}/${page}/devbar/debug" class="devbar-debug">
+      ${tool(BUILDER, 'App Builder', 'home', 'Home')}
+      ${tool(`${BUILDER}/apps/${ctx.app.id}`, `Application ${ctx.app.id}`, 'grid', `App ${ctx.app.id}`)}
+      ${tool(`${BUILDER}/pages/${ctx.page.id}`, `Edit page ${page}`, 'edit', `Page ${page}`)}
+      ${tool(`${ctx.base}/${page}/devbar/session`, 'Session', 'database', 'Session')}
+      ${menu(`Debug: ${level || appLevel ? 'on' : 'off'}`, 'bolt', `devbar-debug-menu${level || appLevel ? ' is-on' : ''}`, html`<form method="post" action="${ctx.base}/${page}/devbar/debug" class="devbar-debug">
         <input type="hidden" name="__csrf" value="${ctx.session.csrf_token}">
         <label for="devbar-debug">Debug messages</label>
         <select id="devbar-debug" name="level">${DEBUG_LEVELS.map(([n, label]) =>
           html`<option value="${n}"${n === level ? raw(' selected') : ''}>${n === 0 ? (appLevel ? `Application (${appLevel})` : 'Off') : label}</option>`)}</select>
         <button>Set</button>
-      </form>${level || appLevel ? html`<a href="${BUILDER}/apps/${ctx.app.id}/debug">View debug</a>` : ''}`)}
-      <li><button type="button" class="devbar-tool devbar-quick" data-quick-edit="${BUILDER}/pages/${ctx.page.id}" aria-pressed="false" title="Quick edit" aria-label="Quick edit" hidden>${icon('scan')}</button></li>
-      ${tool(`${BUILDER}/apps/${ctx.app.id}/theme`, 'Customize (Theme Roller)', 'sliders')}
+      </form>${level || appLevel ? html`<a href="${BUILDER}/apps/${ctx.app.id}/debug">View debug</a>` : ''}`, false, `Debug ${level || appLevel ? 'on' : 'off'}`)}
+      <li><button type="button" class="devbar-tool devbar-quick" data-quick-edit="${BUILDER}/pages/${ctx.page.id}" aria-pressed="false" title="Quick edit" aria-label="Quick edit" hidden>${icon('scan')}${text('Quick edit')}</button></li>
+      ${tool(`${BUILDER}/apps/${ctx.app.id}/theme`, 'Customize (Theme Roller)', 'sliders', 'Customize')}
       ${menu('Info', 'info', 'devbar-info', html`<dl class="devbar-facts">
         <dt>Application</dt><dd>${ctx.app.name} (${ctx.app.id})</dd>
         <dt>Page</dt><dd>${page}: ${ctx.page.name}</dd>
@@ -115,7 +117,8 @@ export function devbarHtml(ctx: PageContext): Raw | '' {
       ${menu('Settings', 'settings', 'devbar-settings', html`<fieldset class="devbar-dock"><legend>Position</legend>
         ${(['bottom', 'top', 'left', 'right'] as const).map((d) => html`<label><input type="radio" name="devbar-dock" value="${d}"${d === 'bottom' ? raw(' checked') : ''}> ${d[0].toUpperCase() + d.slice(1)}</label>`)}
       </fieldset>
-      <label class="devbar-autohide"><input type="checkbox" name="devbar-autohide" checked> Hide when not used</label>`, true)}
+      <label class="devbar-autohide"><input type="checkbox" name="devbar-autohide" checked> Hide when not used</label>
+      <label class="devbar-autohide"><input type="checkbox" name="devbar-compact"> Icons only</label>`, true)}
     </ul></nav>
   </div>`;
 }

package/src/runtime/documents.ts

@@ -4,21 +4,47 @@ import { isAuthorized, Forbidden } from './authz.ts';
 import { bindValues, stripSemicolon, substitute, type PageContext } from './context.ts';
 import { documentData, documentFilename, documentPdf, fillTemplate, type DocumentTemplate } from './document.ts';
 import { layoutFor, layoutText } from './pdf.ts';
+import { exportDownload, type ExportFormat } from './data-export.ts';
+import type { Process } from '../metadata.ts';
 
 // ?doc=NAME on a page: the document template filled with the page's session
-// state (after the URL's checksummed item values), as the app's role.
+// state (after the URL's checksummed item values), as the app's role; (104)
+// without a template of that name, the report query of it.
+
+/** (104) A report query: a named query printed as PDF, Excel, CSV, JSON, XML or HTML. */
+interface ReportQuery {
+  name: string;
+  description: string | null;
+  query: string;
+  format: ExportFormat;
+  layout: string | null;
+  file_name: string | null;
+  title: string | null;
+  authz: string | null;
+}
 
 export async function renderDocument(ctx: PageContext, name: string) {
   const c = ctx.client!;
   // metadata through the runtime connection: the page's transaction already runs as the app's role
   const tpl = await runtime.one<DocumentTemplate>('select * from meta.document_template where app_id = $1 and name = upper($2)', [ctx.app.id, name.slice(0, 100)]);
-  if (!tpl || !(await isAuthorized(ctx, tpl.authz))) throw new Forbidden(ctx.locale.t('error.document_unavailable'));
+  // (104) without a document template of that name, a report query of it
+  const rq = tpl ? null : await runtime.one<ReportQuery>('select * from meta.report_query where app_id = $1 and name = upper($2)', [ctx.app.id, name.slice(0, 100)]);
+  const found = tpl ?? rq;
+  if (!found || !(await isAuthorized(ctx, found.authz))) throw new Forbidden(ctx.locale.t('error.document_unavailable'));
   // without signing in (a public page of an app that has sign-in) only the documents the page itself offers
   // with a visible document button: ?doc= on any public page would otherwise hand out every template
   if (ctx.app.authentication !== 'none' && !ctx.session.username) {
-    const offered = [...(ctx.vis?.buttons.values() ?? [])].some((b) => b.action === 'document' && (b.document ?? '').toUpperCase() === tpl.name);
+    const offered = [...(ctx.vis?.buttons.values() ?? [])].some((b) => b.action === 'document' && (b.document ?? '').toUpperCase() === found.name);
     if (!offered) throw new Forbidden(ctx.locale.t('error.document_unavailable'));
   }
+  if (!tpl) {
+    const q = rq!;
+    const d = await exportDownload(ctx, { name: q.name, code: q.query } as Process, {
+      export: q.format, layout: q.layout ?? undefined, file_name: q.file_name ?? undefined, title: q.title ?? q.description ?? undefined,
+    });
+    // sent like a download process's file (sandboxed, never shown as a page of the application)
+    return { download: { ...d, inline: false } };
+  }
   const now = new Date().toISOString();
   const data = await savepoint(c, () =>
     documentData(c, stripSemicolon(applyBinds(tpl.query, bindValues(ctx))), {

package/src/runtime/engine.ts

@@ -173,8 +173,8 @@ export async function validate(ctx: PageContext) {
     const v = state[i.name];
     if (!v || !vis.editable.has(i.name) || errors.items[i.name]) continue;
     const label = i.label ?? i.name;
-    if (i.type === 'rating' && !(/^\d{1,2}$/.test(v) && Number(v) >= 1 && Number(v) <= ratingMax(i)))
-      fail(i.name, ctx.locale.t('error.rating', { label, max: ratingMax(i) }));
+    if (i.type === 'rating' && !(/^\d{1,2}$/.test(v) && Number(v) >= 1 && Number(v) <= ratingMax(i, ctx.app.component_settings)))
+      fail(i.name, ctx.locale.t('error.rating', { label, max: ratingMax(i, ctx.app.component_settings) }));
     // a list item posts return values: each must be one its list of values returns (config.any_value: true allows others)
     if (LOV_CHECKED.has(i.type) && i.lov && i.config?.any_value !== true && !(await lovContains(ctx, i.lov, MULTI_VALUE.has(i.type) ? splitValues(v) : [v])))
       fail(i.name, ctx.locale.t('error.lov_value', { label }));

package/src/runtime/facets.ts

@@ -99,6 +99,20 @@ export async function rangeCounts(ctx: PageContext, fs: FacetSource, f: FacetDef
   return res.rows[0] as number[];
 }
 
+/** (sprint 78) Checkbox facet values shown before "Show all" (APEX shows seven). */
+export const FACET_SHOWN = 7;
+
+/** (sprint 78) The rows the report shows: the search and every facet's filter. */
+export async function totalRows(ctx: PageContext, fs: FacetSource): Promise<number> {
+  const p = new SqlParams();
+  const where = othersWhere(ctx, fs, '', p);
+  const c = ctx.client!;
+  const res = await savepoint(c, () =>
+    c.query<{ n: number }>({ text: `select count(*)::int as n from (\n${fs.src}\n) "__q"${where.length ? ` where ${where.join(' and ')}` : ''}`, values: queryValues(p.values) }),
+  );
+  return res.rows[0].n;
+}
+
 export const facetLabel = (ctx: PageContext, f: FacetDef) => f.label ?? ctx.locale.tr(heading(f.column));
 
 /** A star rating drawn with stars, read as "4 stars and up". */
@@ -156,15 +170,24 @@ export async function renderFacets(ctx: PageContext, r: Region): Promise<Raw> {
       // keep selected values visible even when their count dropped to 0
       for (const s of selected) if (s && !values.some((x) => x.v === s)) values.push({ v: s, n: 0 });
       const excluded = f.exclude && ctx.params.get(k.exclude + f.column) === '1';
+      // (sprint 78) a boolean's values as Yes and No, not true and false
+      const bool = fs.cols.get(f.column) === 16;
+      const shown = (v: string) => (bool && (v === 'true' || v === 'false') ? t(v === 'true' ? 'item.yes' : 'item.no') : (toState(v) ?? ''));
       const chart = facetChart(ctx, report, f, label, values.map((x) => ({
-        label: toState(x.v) ?? '', n: x.n,
+        label: shown(x.v), n: x.n,
         apply: (p) => { p.delete(k.values + f.column); p.delete(k.exclude + f.column); p.append(k.values + f.column, x.v); },
       })));
+      const value = (x: { v: string; n: number }) =>
+        html`<label class="check facet-value"><input type="checkbox" form="${formId}" name="${k.values}${f.column}" value="${x.v}"${selected.has(x.v) ? raw(' checked') : ''} data-facet>
+            <span class="facet-label">${shown(x.v)}</span><span class="facet-count">${x.n}</span></label>`;
       groups.push(html`<fieldset class="facet${excluded ? ' facet-excluded' : ''}">
         <legend>${label}${clearLink(f)}</legend>
         ${chart}
-        ${values.map((x) => html`<label class="check facet-value"><input type="checkbox" form="${formId}" name="${k.values}${f.column}" value="${x.v}"${selected.has(x.v) ? raw(' checked') : ''} data-facet>
-            <span class="facet-label">${toState(x.v)}</span><span class="facet-count">${x.n}</span></label>`)}
+        ${values.slice(0, FACET_SHOWN).map(value)}
+        ${values.length > FACET_SHOWN
+          ? html`<details class="facet-more"${values.slice(FACET_SHOWN).some((x) => selected.has(x.v)) ? raw(' open') : ''}><summary>${t('facets.show_all', { n: String(values.length) })}</summary>
+            ${values.slice(FACET_SHOWN).map(value)}</details>`
+          : ''}
         ${f.exclude
           ? html`<label class="check facet-exclude"><input type="checkbox" form="${formId}" name="${k.exclude}${f.column}" value="1"${excluded ? raw(' checked') : ''} data-facet> ${t('facets.exclude')}</label>`
           : ''}
@@ -225,7 +248,15 @@ export async function renderFacets(ctx: PageContext, r: Region): Promise<Raw> {
     html`<form id="${formId}" method="get" action="${ctx.base}/${ctx.page.page_no}">${keep.map(([name, v]) => html`<input type="hidden" name="${name}" value="${v}">`)}</form>`,
   );
   const any = defs.some((f) => active.has(f.column)) || (r.config.search === true && fs.search !== '');
+  // (sprint 78; APEX: the results' "Total Row Count") the rows the filters leave
+  let total: number | null = null;
+  try {
+    total = await totalRows(ctx, fs);
+  } catch {
+    total = null; // the facets' own errors are shown above
+  }
   return html`<div class="facets">
+    ${total !== null ? html`<p class="facet-total" role="status">${t('facets.total', { n: total.toLocaleString(ctx.locale.lang) })}</p>` : ''}
     ${groups}
     <div class="buttons facet-actions">
       <button class="btn btn-hot" form="${formId}">${t('report.apply')}</button>

package/src/runtime/grid.ts

@@ -1,3 +1,4 @@
+import { componentSetting } from './component-settings.ts';
 import pg from 'pg';
 import { literal } from '../binds.ts';
 import { savepoint, type Client } from '../db.ts';
@@ -116,6 +117,17 @@ function control(col: GridColumn, name: string, value: string, label: string) {
   return html`<input type="text" name="${name}" value="${value}"${aria}>`;
 }
 
+/**
+ * (APEX: cell navigation mode) An editable cell's value as text, with its column's format mask or the
+ * option's display value: with JavaScript the cell reads as this text until it is edited (app.css,
+ * app.js); the control holds the raw value. Not for a checkbox, which reads as itself.
+ */
+function cellText(col: GridColumn, value: string, shown: string) {
+  if (col.typeOid === 16 || value === '') return '';
+  const text = col.options ? col.options.find((o) => o.value === value)?.display ?? value : shown;
+  return html`<span class="grid-text${NUMERIC.has(col.typeOid) && !col.options ? ' num' : ''}" aria-hidden="true">${text}</span>`;
+}
+
 /** Width of each leading column (master selection, delete, row actions), see app.css .grid-lead. */
 const LEAD_WIDTH = 44;
 
@@ -169,7 +181,7 @@ export async function renderGrid(ctx: PageContext, r: Region): Promise<Raw> {
   const base = reportState(ctx, r);
   const views = gridViews(r);
   const view: View = views.includes(base.view) ? base.view : 'report';
-  const pageSize = Math.max(1, Math.min(200, Number(r.config.page_size) || 25));
+  const pageSize = Math.max(1, Math.min(200, Number(r.config.page_size) || componentSetting(ctx.app.component_settings, 'grid_rows')));
   // the single row view: one row of the search at a time (r<id>_row=N from 1), or a new row (r<id>_row=new)
   const rowParam = ctx.params.get(key(r, 'row'));
   const adding = view === 'row' && rowParam === 'new';
@@ -240,7 +252,13 @@ export async function renderGrid(ctx: PageContext, r: Region): Promise<Raw> {
   // master-detail: this grid selects rows for detail regions; or it follows a master
   const select = selectRowOf(ctx.page, r);
   const selIdx = select ? fields.findIndex((f) => f.name.toLowerCase() === select.column.toLowerCase()) : -1;
-  const selected = select ? ctx.session.state[select.item] ?? null : null;
+  let selected = select ? ctx.session.state[select.item] ?? null : null;
+  // as in APEX, a page shows the first master row selected: when nothing is selected, or the
+  // selected row is not among the rows shown (after a search or filter); the regions below follow it
+  if (select && selIdx >= 0 && ctx.wholePage && view === 'report' && info.rows.length) {
+    const shown = info.rows.map((row) => toState(row[selIdx]) ?? '');
+    if (selected === null || !shown.includes(selected)) ctx.session.state[select.item] = selected = shown[0];
+  }
   const details = select ? detailsOf(ctx.page, r, ctx.vis!.regions) : [];
   const masterCol = masterColumnOf(r);
   const masterValue = masterItemOf(r) ? ctx.session.state[masterItemOf(r)!] ?? '' : '';
@@ -297,7 +315,7 @@ export async function renderGrid(ctx: PageContext, r: Region): Promise<Raw> {
       return i === -1 ? undefined : (toState(row[i]) ?? '');
     });
 
-  // read-only cells show their column's format mask; editable cells keep the raw value
+  // read-only cells show their column's format mask; an editable cell's control keeps the raw value
   const fmtOf = columnFormats(ctx, r);
   const rows = info.rows.map((row, i) => {
     const pk = toState(row[pkIdx]) ?? '';
@@ -311,7 +329,7 @@ export async function renderGrid(ctx: PageContext, r: Region): Promise<Raw> {
       if (!col.editable) return html`<td class="${colCls(p, pIdx, NUMERIC.has(col.typeOid) ? 'num' : null)}" data-col="${col.ci}" data-label="${lbl}"${hiddenAttr(p)}>${cell(row[col.idx], col.typeOid, fmtOf(col.name))}</td>`;
       const name = `${g}_${i}_c${col.ci}`;
       const value = pi !== undefined ? (col.typeOid === 16 ? (pv(`${g}_${pi}_c${col.ci}`) === 'true' ? 'true' : 'false') : (pv(`${g}_${pi}_c${col.ci}`) ?? dbValue)) : dbValue;
-      return html`<td class="${colCls(p, pIdx)}" data-col="${col.ci}" data-label="${lbl}"${hiddenAttr(p)}>${control(col, name, value, `${lbl}, row ${i + 1}`)}</td>`;
+      return html`<td class="${colCls(p, pIdx)}" data-col="${col.ci}" data-label="${lbl}"${hiddenAttr(p)}>${cellText(col, value, value === dbValue ? cell(row[col.idx], col.typeOid, fmtOf(col.name)) : value)}${control(col, name, value, `${lbl}, row ${i + 1}`)}</td>`;
     });
     const deleted = pi !== undefined && pv(`${g}_${pi}_del`) === 'true';
     const selValue = selIdx >= 0 ? toState(row[selIdx]) ?? '' : null;

package/src/runtime/items.ts

@@ -8,6 +8,8 @@ import type { Item } from '../metadata.ts';
 import { bindValues, publicError, stripSemicolon, toState, type PageContext } from './context.ts';
 import { canPreview, fileInfo, fileList, fileUrl, formatSize, isMultiple, maxFiles, removals } from './files.ts';
 import { restSql } from './rest-sources.ts';
+import { expandShortcuts } from './shortcuts.ts';
+import { componentSetting, type ComponentSettings } from './component-settings.ts';
 import { markdownHtml, sanitizeHtml } from '../richtext.ts';
 import { qrSvg, type Ecc } from '../qrcode.ts';
 import { formatNumber, isPlainNumber, maskError } from '../numformat.ts';
@@ -77,9 +79,10 @@ async function lovColumns(ctx: PageContext, sql: string) {
 
 /** Rows of a popup LOV's dialog: at most 100 per page. */
 export const POPUP_PAGE_MAX = 100;
-export const popupPageSize = (item: Item, asked?: unknown) => {
-  const n = Math.floor(Number(asked ?? item.config?.page_size ?? 25));
-  return Number.isFinite(n) && n >= 1 ? Math.min(n, POPUP_PAGE_MAX) : 25;
+export const popupPageSize = (item: Item, asked?: unknown, settings?: ComponentSettings) => {
+  const def = componentSetting(settings, 'popup_lov_rows');
+  const n = Math.floor(Number(asked ?? item.config?.page_size ?? def));
+  return Number.isFinite(n) && n >= 1 ? Math.min(n, POPUP_PAGE_MAX) : def;
 };
 
 export interface LovPage {
@@ -160,9 +163,9 @@ export const LOV_CHECKED = new Set(['select', 'radio', 'checkbox_group', 'multis
 
 /** Rows a list of values reads when its item sets no config.max_rows (1 to 50,000). */
 export const LOV_MAX_ROWS = 5000;
-export const lovMax = (item: Item) => {
+export const lovMax = (item: Item, settings?: ComponentSettings) => {
   const n = Math.floor(Number(item.config?.max_rows));
-  return Number.isFinite(n) && n >= 1 ? Math.min(n, 50_000) : LOV_MAX_ROWS;
+  return Number.isFinite(n) && n >= 1 ? Math.min(n, 50_000) : settings ? componentSetting(settings, 'lov_max_rows') : LOV_MAX_ROWS;
 };
 
 const LOV_TYPES = new Set(['select', 'radio', 'checkbox_group', 'multiselect', 'popup_lov', 'combobox']);
@@ -174,7 +177,7 @@ export const splitValues = (v: string) => (v ? v.split(':') : []);
 /** A combobox holds several values (colon-separated) unless {"multiple": false}. */
 export const comboMultiple = (item: Item) => item.config?.multiple !== false;
 /** The highest star of a rating item ({"max": 5}, 3 to 10). */
-export const ratingMax = (item: Item) => Math.min(Math.max(Math.round(Number(item.config?.max)) || 5, 3), 10);
+export const ratingMax = (item: Item, settings?: ComponentSettings) => Math.min(Math.max(Math.round(Number(item.config?.max)) || componentSetting(settings, 'rating_max'), 3), 10);
 /** A date range item's value "from:to" (ISO dates, either may be empty). */
 export const splitRange = (v: string | null | undefined): [string, string] => {
   const [from = '', to = ''] = (v ?? '').split(':');
@@ -226,7 +229,7 @@ export async function renderItem(ctx: PageContext, item: Item, hiddenByDa = fals
   let lovError: Raw | '' = '';
   if (hasLov(item)) {
     try {
-      options = await lovOptions(ctx, item.lov, lovMax(item));
+      options = await lovOptions(ctx, item.lov, lovMax(item, ctx.app.component_settings));
     } catch (e) {
       lovError = html`<small class="error">${await publicError(ctx, e, `list of values of ${item.name}`)}</small>`;
     }
@@ -249,9 +252,9 @@ export async function renderItem(ctx: PageContext, item: Item, hiddenByDa = fals
     // rebuilt from the allow-list every time: the value may come from the table, not from this form
     control = html`<div class="display-value rich-text" id="${id}">${raw((item.type === 'markdown' ? markdownHtml(value) : sanitizeHtml(value)) || ' ')}</div>`;
   } else if (!editable && item.type === 'rating') {
-    const n = /^\d+$/.test(value) ? Math.min(Number(value), ratingMax(item)) : 0;
+    const n = /^\d+$/.test(value) ? Math.min(Number(value), ratingMax(item, ctx.app.component_settings)) : 0;
     control = n
-      ? html`<div class="display-value rating-value" id="${id}"><span aria-hidden="true">${'★'.repeat(n)}<span class="rating-off">${'★'.repeat(ratingMax(item) - n)}</span></span><span class="sr-only">${ctx.locale.t('item.rating_of', { n, max: ratingMax(item) })}</span></div>`
+      ? html`<div class="display-value rating-value" id="${id}"><span aria-hidden="true">${'★'.repeat(n)}<span class="rating-off">${'★'.repeat(ratingMax(item, ctx.app.component_settings) - n)}</span></span><span class="sr-only">${ctx.locale.t('item.rating_of', { n, max: ratingMax(item, ctx.app.component_settings) })}</span></div>`
       : html`<div class="display-value" id="${id}"> </div>`;
   } else if (!editable && item.type === 'combobox') {
     const values = comboMultiple(item) ? splitValues(value) : value ? [value] : [];
@@ -352,7 +355,7 @@ export async function renderItem(ctx: PageContext, item: Item, hiddenByDa = fals
       case 'rating': {
         // radio buttons (keyboard and screen readers as usual); CSS draws them as stars
         useLegend = true;
-        const max = ratingMax(item);
+        const max = ratingMax(item, ctx.app.component_settings);
         const stars = [];
         for (let n = 1; n <= max; n++)
           stars.push(
@@ -461,7 +464,7 @@ export async function renderItem(ctx: PageContext, item: Item, hiddenByDa = fals
   const tag = useLegend ? 'fieldset' : 'div';
   return html`${raw(`<${tag}`)} class="field field-${item.type}${error ? ' has-error' : ''}${editable ? '' : ' readonly'}${templateClasses('item', item.template_options)}" data-item="${item.name}"${attrs}${pluginAttrs}>
     ${labelHtml}${control}${lovError}
-    ${item.help ? html`<small class="help" id="${id}_help">${item.help}</small>` : ''}
+    ${item.help ? html`<small class="help" id="${id}_help">${await expandShortcuts(ctx, item.help, 'text')}</small>` : ''}
     ${error ? html`<small class="error" id="${id}_error">${error}</small>` : ''}
   ${raw(`</${tag}>`)}`;
 }

package/src/runtime/locale.ts

@@ -44,7 +44,10 @@ export interface Locale {
   timeZoneFrom: 'user' | 'browser' | 'app' | 'database';
 }
 
-export const THEME_COOKIE = 'pgkiln_theme';
+/** (sprint 79) The light/dark choice of a user who is not signed in, per application (path /a/<alias>). */
+export const THEME_COOKIE = 'pgkiln_mode';
+/** The cookie's options: the application's path, a year. */
+export const themeCookieOptions = (base: string) => ({ path: base, sameSite: 'lax' as const, secure: process.env.COOKIE_SECURE === 'true', maxAge: 365 * 86400 });
 const THEMES: ThemeMode[] = ['auto', 'light', 'dark'];
 export const isTheme = (v: unknown): v is ThemeMode => THEMES.includes(v as ThemeMode);
 

package/src/runtime/logic.ts

@@ -1,7 +1,7 @@
 import { randomBytes } from 'node:crypto';
 import { applyBinds } from '../binds.ts';
 import { runtime, savepoint } from '../db.ts';
-import type { Branch, Computation, Condition } from '../metadata.ts';
+import type { AppComputation, Branch, Computation, Condition } from '../metadata.ts';
 import { isAuthorized, sqlTrue } from './authz.ts';
 import { bindValues, dbg, publicError, stripSemicolon, substitute, timed, toState, type PageContext } from './context.ts';
 import { pageHref } from './links.ts';
@@ -112,19 +112,24 @@ export class ComputationFailed extends Error {}
  * items only. Before the page is shown, an error becomes a message on the
  * page; after a submit, it stops the submit (ComputationFailed).
  */
-export async function runComputations(ctx: PageContext, point: Computation['point']) {
+export async function runComputations(ctx: PageContext, point: AppComputation['point']) {
   const names = new Set([...ctx.app.app_items, ...ctx.page.items.map((i) => i.name)]);
-  for (const comp of ctx.page.computations ?? []) {
-    if (comp.point !== point) continue;
-    const where = `computation of ${comp.item_name}`;
+  // (102) the application's computations of the point first (as in APEX), then the page's
+  const comps: { comp: Computation | AppComputation; app: boolean }[] = [
+    ...(ctx.app.app_computations ?? []).filter((c) => c.point === point).map((comp) => ({ comp, app: true })),
+    ...(ctx.page.computations ?? []).filter((c) => c.point === point).map((comp) => ({ comp, app: false })),
+  ];
+  for (const { comp, app } of comps) {
+    const where = `${app ? 'application computation' : 'computation'} of ${comp.item_name}`;
     if (!names.has(comp.item_name)) {
-      ctx.errors.page.push(ctx.locale.t('logic.unknown_item', { item: comp.item_name }));
+      // an application computation of a page item computes it on that item's page only
+      if (!app) ctx.errors.page.push(ctx.locale.t('logic.unknown_item', { item: comp.item_name }));
       continue;
     }
     if (!(await isAuthorized(ctx, comp.authz))) continue;
     if (!(await conditionHolds(ctx, comp, `condition of the ${where}`))) continue;
     try {
-      ctx.session.state[comp.item_name] = await timed(ctx, 6, 'computation', `computation of ${comp.item_name} (${comp.type})`, () => computeValue(ctx, comp));
+      ctx.session.state[comp.item_name] = await timed(ctx, 6, 'computation', `${where} (${comp.type})`, () => computeValue(ctx, comp));
       dbg(ctx, 9, 'computation', () => `${comp.item_name} := ${ctx.page.items.some((i) => i.name === comp.item_name && i.type === 'password') ? '(password, not shown)' : JSON.stringify((ctx.session.state[comp.item_name] ?? '').slice(0, 200))}`);
     } catch (e) {
       const message = await publicError(ctx, e, where);