pgkiln 0.54.0 → 0.56.0

package/examples/gallery/samples/sample-files.sql

@@ -0,0 +1,160 @@
+-- =====================================================================
+-- Sample app "Sample Files" (App Gallery → Sample Apps)
+--
+-- File upload and download: a file per record in the table's own columns
+-- (name, type, size and date kept beside it), several files per record in a
+-- child table, and a picture cropped in the browser before it is uploaded.
+-- Every download link is bound to the user and the record; files are read
+-- as the application's role and sent as attachments.
+--
+-- Installed by an administrator from the App Gallery, or with
+--   psql "$DATABASE_URL" -1 -f examples/gallery/samples/sample-files.sql
+-- then open /a/sample-files and sign in as demo / demo.
+-- =====================================================================
+
+create or replace function pg_temp.page_id(p_alias text, p_page int) returns int language sql stable as
+  $$ select p.id from meta.page p join meta.app a on a.id = p.app_id where a.alias = p_alias and p.page_no = p_page $$;
+
+-- 1. Schema and data ---------------------------------------------------------
+create schema sample_files;
+
+create table sample_files.document (
+  id        int generated always as identity primary key,
+  title     text not null,
+  category  text not null default 'General' check (category in ('General', 'Contract', 'Invoice', 'Manual')),
+  content   bytea check (octet_length(content) <= 5 * 1024 * 1024),
+  filename  text,
+  mime_type text,
+  file_size int,
+  updated   timestamptz
+);
+
+insert into sample_files.document (title, category, content, filename, mime_type, file_size, updated)
+select t, c, convert_to(body, 'utf8'), f, 'text/plain', octet_length(convert_to(body, 'utf8')), now()
+  from (values
+  ('Read me', 'General', 'readme.txt', E'Sample Files\n\nUpload a PDF, a picture or a text file on the document form.\n'),
+  ('Opening hours', 'Manual', 'opening-hours.txt', E'Monday to Friday 9:00-17:00\nSaturday 10:00-14:00\n')
+  ) as d (t, c, f, body);
+insert into sample_files.document (title, category) values ('Supplier contract (no file yet)', 'Contract');
+
+create table sample_files.folder (
+  id          int generated always as identity primary key,
+  name        text not null unique,
+  description text
+);
+
+create table sample_files.attachment (
+  id        int generated always as identity primary key,
+  folder_id int not null references sample_files.folder on delete cascade,
+  filename  text not null,
+  mime_type text not null,
+  content   bytea not null check (octet_length(content) <= 5 * 1024 * 1024)
+);
+
+insert into sample_files.folder (name, description) values
+  ('Project Alpha', 'Plans and minutes'), ('Office move', 'Floor plans and the moving checklist');
+insert into sample_files.attachment (folder_id, filename, mime_type, content)
+select f.id, a.filename, 'text/plain', convert_to(a.body, 'utf8')
+  from sample_files.folder f join (values
+  ('Project Alpha', 'minutes-week-1.txt', E'Kick-off: scope agreed, next meeting Thursday.\n'),
+  ('Project Alpha', 'plan.txt', E'1. Design\n2. Build\n3. Test\n'),
+  ('Office move', 'checklist.txt', E'- Boxes\n- Labels\n- Network\n')
+  ) as a (folder, filename, body) on a.folder = f.name;
+
+create table sample_files.person (
+  id         int generated always as identity primary key,
+  name       text not null,
+  photo      bytea check (octet_length(photo) <= 2 * 1024 * 1024),
+  photo_name text,
+  photo_mime text
+);
+insert into sample_files.person (name) values ('Ada'), ('Grace'), ('Linus');
+
+-- 2. The application's database role ----------------------------------------
+do $$ begin
+  if not exists (select 1 from pg_roles where rolname = 'app_sample_files') then create role app_sample_files nologin; end if;
+end $$;
+grant app_sample_files to pgkiln_runtime;
+grant usage on schema sample_files to app_sample_files;
+grant select, insert, update, delete on all tables in schema sample_files to app_sample_files;
+
+-- 3. The application ----------------------------------------------------------
+insert into meta.app (alias, name, home_page, authentication, db_role)
+values ('sample-files', 'Sample Files', 1, 'app_users', 'app_sample_files');
+
+insert into meta.app_user (app_id, username, password_hash, roles)
+select id, 'demo', meta.hash_password('demo'), '{}' from meta.app where alias = 'sample-files';
+
+insert into meta.page (app_id, page_no, name, title)
+select id, 1, 'Sample Files', 'Sample Files' from meta.app where alias = 'sample-files';
+
+-- the Report and form wizard: documents (2, 3), folders (4, 5), people (6, 7)
+select meta.generate_page('sample-files', 'report_form', 'sample_files.document', 2, '{"label": "Documents", "form_page": 3, "nav": false}');
+select meta.generate_page('sample-files', 'report_form', 'sample_files.folder', 4, '{"label": "Folders", "form_page": 5, "nav": false}');
+select meta.generate_page('sample-files', 'report_form', 'sample_files.person', 6, '{"label": "People", "form_page": 7, "nav": false}');
+update meta.page set parent_page = 1 where app_id = (select id from meta.app where alias = 'sample-files') and page_no in (2, 4, 6);
+
+-- the reports leave the file contents out
+update meta.region set source = 'select id, title, category, filename, file_size, updated from sample_files.document order by title',
+       config = config || '{"headings": {"file_size": "Size (bytes)"}}'
+ where page_id = pg_temp.page_id('sample-files', 2) and type = 'report';
+update meta.region set source = E'select f.id, f.name, f.description, count(a.id) as files\n  from sample_files.folder f left join sample_files.attachment a on a.folder_id = f.id\n group by f.id order by f.name'
+ where page_id = pg_temp.page_id('sample-files', 4) and type = 'report';
+update meta.region set source = 'select id, name, photo_name from sample_files.person order by name',
+       config = config || '{"headings": {"photo_name": "Photo"}}'
+ where page_id = pg_temp.page_id('sample-files', 6) and type = 'report';
+
+-- page 3: one file in the document's own columns; its name, type, size and date are kept beside it
+delete from meta.item where page_id = pg_temp.page_id('sample-files', 3) and name in ('P3_FILENAME', 'P3_MIME_TYPE', 'P3_FILE_SIZE', 'P3_UPDATED');
+update meta.item set type = 'file', label = 'File', help = 'A PDF, a picture, a text or a Word file of at most 5 MB.',
+       config = '{"filename_column": "filename", "mime_column": "mime_type", "size_column": "file_size", "updated_column": "updated",
+                  "accept": ".pdf,image/*,.txt,.csv,.docx", "max_mb": 5}'
+ where page_id = pg_temp.page_id('sample-files', 3) and name = 'P3_CONTENT';
+update meta.item set type = 'select', lov = 'STATIC:General,Contract,Invoice,Manual'
+ where page_id = pg_temp.page_id('sample-files', 3) and name = 'P3_CATEGORY';
+
+-- page 5: several files per folder, in the child table sample_files.attachment
+insert into meta.item (page_id, region_id, seq, name, label, type, source_column, help, config)
+select r.page_id, r.id, 100, 'P5_FILES', 'Files', 'file', 'content', 'Up to five files of at most 5 MB each.',
+       '{"multiple": true, "max_files": 5, "max_mb": 5, "table": "sample_files.attachment", "parent_column": "folder_id",
+         "key_column": "id", "filename_column": "filename", "mime_column": "mime_type", "wide": true}'
+  from meta.region r where r.page_id = pg_temp.page_id('sample-files', 5) and r.type = 'form';
+
+-- page 7: a picture, cropped square in the browser before it is uploaded
+delete from meta.item where page_id = pg_temp.page_id('sample-files', 7) and name in ('P7_PHOTO_NAME', 'P7_PHOTO_MIME');
+update meta.item set type = 'file', label = 'Photo', help = 'A picture: choose the square part to keep.',
+       config = '{"filename_column": "photo_name", "mime_column": "photo_mime", "accept": "image/png,image/jpeg,image/webp", "max_mb": 2,
+                  "crop": "1:1", "max_px": 800, "capture": "user"}'
+ where page_id = pg_temp.page_id('sample-files', 7) and name = 'P7_PHOTO';
+
+insert into meta.nav_entry (app_id, seq, label, icon, target_page)
+select a.id, n.seq, n.label, n.icon, n.page
+  from meta.app a, (values (10, 'Home', 'home', 1), (20, 'Documents', 'file', 2), (30, 'Folders', 'folder', 4), (40, 'People', 'users', 6)) as n (seq, label, icon, page)
+ where a.alias = 'sample-files';
+
+insert into meta.list (app_id, name, type, description)
+select id, 'FILE_TOPICS', 'static', 'The pages of Sample Files' from meta.app where alias = 'sample-files';
+
+insert into meta.list_entry (app_id, list_name, seq, label, icon, target_page, description)
+select a.id, 'FILE_TOPICS', e.seq, e.label, e.icon, e.page, e.description
+  from meta.app a, (values
+  (10, 'Documents', 'file', 2, 'A file in the record''s own bytea column, with its name, type, size and date beside it.'),
+  (20, 'Folders', 'folder', 4, 'Several files per record in a child table: add some, remove some, all saved with the record.'),
+  (30, 'People', 'users', 6, 'A photo cropped square in the browser and made smaller before it is uploaded.')
+  ) as e (seq, label, icon, page, description)
+ where a.alias = 'sample-files';
+
+insert into meta.region (page_id, seq, title, type, columns, template, source, config)
+select pg_temp.page_id('sample-files', r.page), r.seq, r.title, r.type, 12, r.template, r.source, r.config::jsonb
+  from (values
+  (1, 10, 'Sample Files', 'static', 'hero',
+   '<p>A file item uploads into a <code>bytea</code> column, or into a child table with a row per file. Choose, drop or paste a file; the server checks its type and size, and the form saves it with the record in one transaction. Download links are bound to the user and the record, the file is read as the application''s role (grants and row level security apply), and it is sent as an attachment, so an uploaded HTML or SVG file never runs in the application.</p>',
+   '{"icon": "file"}'),
+  (1, 20, 'Topics', 'list', 'plain', null, '{"list": "FILE_TOPICS", "template": "cards"}'),
+  (2, 5, 'About this page', 'static', 'plain',
+   '<p class="lead">Open a document: the form shows its file with a download link (pictures with a preview) and a <strong>Remove file</strong> box. The file item''s <code>filename_column</code>, <code>mime_column</code>, <code>size_column</code> and <code>updated_column</code> fill those columns on upload; <code>accept</code> and <code>max_mb</code> limit what may be uploaded.</p>', '{}'),
+  (4, 5, 'About this page', 'static', 'plain',
+   '<p class="lead">Open a folder: <code>"multiple": true</code> with <code>table</code> and <code>parent_column</code> keeps a row per file in <code>sample_files.attachment</code>. The form lists the folder''s files with download links; tick <strong>Remove file</strong> to delete one on save, or add up to five at once.</p>', '{}'),
+  (6, 5, 'About this page', 'static', 'plain',
+   '<p class="lead">Open a person and choose a photo: with <code>"crop": "1:1"</code> the browser asks which square part to keep, and <code>max_px</code> makes it smaller before the upload. On a phone, <code>capture</code> offers the camera.</p>', '{}')
+  ) as r (page, seq, title, type, template, source, config);

package/examples/gallery/samples/sample-maps.sql

@@ -0,0 +1,175 @@
+-- =====================================================================
+-- Sample app "Sample Maps" (App Gallery → Sample Apps)
+--
+-- Map regions on Dutch museums, without PostGIS: markers with popups and
+-- clustering; several layers (markers, a route and an area as GeoJSON, a
+-- heat map that starts hidden); a map that filters the report beside it by
+-- distance; and a form with a location item ("Use my location") whose
+-- places show on a map.
+--
+-- Installed by an administrator from the App Gallery, or with
+--   psql "$DATABASE_URL" -1 -f examples/gallery/samples/sample-maps.sql
+-- then open /a/sample-maps and sign in as demo / demo.
+-- =====================================================================
+
+create or replace function pg_temp.page_id(p_alias text, p_page int) returns int language sql stable as
+  $$ select p.id from meta.page p join meta.app a on a.id = p.app_id where a.alias = p_alias and p.page_no = p_page $$;
+create or replace function pg_temp.region_id(p_alias text, p_page int, p_static text) returns int language sql stable as
+  $$ select r.id from meta.region r where r.page_id = pg_temp.page_id(p_alias, p_page) and r.static_id = p_static $$;
+
+-- 1. Schema and data ---------------------------------------------------------
+create schema sample_maps;
+
+create table sample_maps.museum (
+  id       int generated always as identity primary key,
+  name     text not null unique,
+  city     text not null,
+  kind     text not null check (kind in ('Art', 'History', 'Science', 'Maritime', 'Nature')),
+  visitors int not null,
+  lat      numeric(8, 5) not null,
+  lng      numeric(8, 5) not null
+);
+
+insert into sample_maps.museum (name, city, kind, visitors, lat, lng) values
+  ('Rijksmuseum', 'Amsterdam', 'Art', 2500000, 52.36000, 4.88520),
+  ('Van Gogh Museum', 'Amsterdam', 'Art', 2100000, 52.35840, 4.88110),
+  ('Stedelijk Museum', 'Amsterdam', 'Art', 700000, 52.35800, 4.87970),
+  ('Anne Frank House', 'Amsterdam', 'History', 1300000, 52.37520, 4.88400),
+  ('NEMO Science Museum', 'Amsterdam', 'Science', 650000, 52.37380, 4.91230),
+  ('National Maritime Museum', 'Amsterdam', 'Maritime', 400000, 52.37140, 4.91490),
+  ('Mauritshuis', 'The Hague', 'Art', 450000, 52.08040, 4.31430),
+  ('Kunstmuseum Den Haag', 'The Hague', 'Art', 400000, 52.08970, 4.28060),
+  ('Kunsthal', 'Rotterdam', 'Art', 280000, 51.91070, 4.47330),
+  ('Maritime Museum Rotterdam', 'Rotterdam', 'Maritime', 300000, 51.91740, 4.48230),
+  ('Centraal Museum', 'Utrecht', 'Art', 200000, 52.08360, 5.12590),
+  ('Rijksmuseum van Oudheden', 'Leiden', 'History', 230000, 52.15840, 4.48590),
+  ('Naturalis', 'Leiden', 'Nature', 400000, 52.16520, 4.47370),
+  ('Frans Hals Museum', 'Haarlem', 'Art', 200000, 52.37720, 4.63660),
+  ('Teylers Museum', 'Haarlem', 'Science', 150000, 52.38010, 4.64030),
+  ('Kröller-Müller Museum', 'Otterlo', 'Art', 350000, 52.09550, 5.81700),
+  ('Van Abbemuseum', 'Eindhoven', 'Art', 120000, 51.43420, 5.48180),
+  ('Groninger Museum', 'Groningen', 'Art', 250000, 53.21240, 6.56600),
+  ('Bonnefanten', 'Maastricht', 'Art', 120000, 50.84220, 5.70200),
+  ('Zuiderzeemuseum', 'Enkhuizen', 'History', 250000, 52.70360, 5.29410);
+
+-- lines and areas as GeoJSON text (with PostGIS a geometry column works the same way)
+create table sample_maps.shape (
+  id      int generated always as identity primary key,
+  name    text not null,
+  geojson text not null
+);
+
+insert into sample_maps.shape (name, geojson) values
+  ('Museum walk: Anne Frank House to the Rijksmuseum',
+   '{"type": "LineString", "coordinates": [[4.8840, 52.3752], [4.8851, 52.3700], [4.8868, 52.3650], [4.8852, 52.3600], [4.8811, 52.3584]]}'),
+  ('Museumplein',
+   '{"type": "Polygon", "coordinates": [[[4.8790, 52.3590], [4.8850, 52.3590], [4.8855, 52.3565], [4.8795, 52.3560], [4.8790, 52.3590]]]}');
+
+create table sample_maps.place (
+  id       int generated always as identity primary key,
+  name     text not null,
+  note     text,
+  location text check (location ~ '^-?\d{1,2}(\.\d+)?,-?\d{1,3}(\.\d+)?$')
+);
+
+insert into sample_maps.place (name, note, location) values
+  ('Amsterdam Centraal', 'Trains every few minutes', '52.37890,4.90040'),
+  ('Vondelpark', 'Lunch in the park', '52.35800,4.86860');
+
+-- 2. The application's database role ----------------------------------------
+do $$ begin
+  if not exists (select 1 from pg_roles where rolname = 'app_sample_maps') then create role app_sample_maps nologin; end if;
+end $$;
+grant app_sample_maps to pgkiln_runtime;
+grant usage on schema sample_maps to app_sample_maps;
+grant select on sample_maps.museum, sample_maps.shape to app_sample_maps;
+grant select, insert, update, delete on sample_maps.place to app_sample_maps;
+
+-- 3. The application ----------------------------------------------------------
+insert into meta.app (alias, name, home_page, authentication, db_role)
+values ('sample-maps', 'Sample Maps', 1, 'app_users', 'app_sample_maps');
+
+insert into meta.app_user (app_id, username, password_hash, roles)
+select id, 'demo', meta.hash_password('demo'), '{}' from meta.app where alias = 'sample-maps';
+
+insert into meta.page (app_id, page_no, name, title, parent_page)
+select a.id, p.no, p.name, p.name, p.parent
+  from meta.app a, (values (1, 'Sample Maps', null), (2, 'Museums', 1), (3, 'Layers', 1), (4, 'Map and list', 1)) as p (no, name, parent)
+ where a.alias = 'sample-maps';
+
+-- page 5 and its form, page 6: the Report and form wizard on the places
+select meta.generate_page('sample-maps', 'report_form', 'sample_maps.place', 5, '{"label": "My places", "form_page": 6, "nav": false}');
+update meta.page set parent_page = 1 where app_id = (select id from meta.app where alias = 'sample-maps') and page_no = 5;
+update meta.item set type = 'location', help = 'Latitude,longitude; Use my location fills it in from the device.'
+ where page_id = pg_temp.page_id('sample-maps', 6) and name = 'P6_LOCATION';
+
+insert into meta.nav_entry (app_id, seq, label, icon, target_page)
+select a.id, n.seq, n.label, n.icon, n.page
+  from meta.app a, (values
+  (10, 'Home', 'home', 1), (20, 'Museums', 'map', 2), (30, 'Layers', 'layers', 3),
+  (40, 'Map and list', 'list', 4), (50, 'My places', 'map', 5)
+  ) as n (seq, label, icon, page)
+ where a.alias = 'sample-maps';
+
+insert into meta.list (app_id, name, type, description)
+select id, 'MAP_TOPICS', 'static', 'The pages of Sample Maps' from meta.app where alias = 'sample-maps';
+
+insert into meta.list_entry (app_id, list_name, seq, label, icon, target_page, description)
+select a.id, 'MAP_TOPICS', e.seq, e.label, e.icon, e.page, e.description
+  from meta.app a, (values
+  (10, 'Museums', 'map', 2, 'Markers from latitude and longitude columns, popups, and clusters that open as you zoom in.'),
+  (20, 'Layers', 'layers', 3, 'Several queries on one map: markers, a route and an area as GeoJSON, a heat map you switch on.'),
+  (30, 'Map and list', 'list', 4, 'Move the map, then show only the museums within that distance in the list beside it.'),
+  (40, 'My places', 'map', 5, 'A form with a location item: Use my location stores latitude,longitude, the map shows them.')
+  ) as e (seq, label, icon, page, description)
+ where a.alias = 'sample-maps';
+
+insert into meta.region (page_id, seq, title, type, columns, template, source, config, static_id)
+select pg_temp.page_id('sample-maps', r.page), r.seq, r.title, r.type, r.cols, r.template, r.source, r.config::jsonb, r.sid
+  from (values
+  -- 1 Home
+  (1, 10, 'Sample Maps', 'static', 12, 'hero',
+   '<p>A map region draws the rows of a SELECT: a place per row from <code>lat</code> and <code>lng</code> columns (or a <code>location</code> column holding <code>latitude,longitude</code>), lines and areas from a <code>geojson</code> column. No GIS extension is needed; with PostGIS a <code>geometry</code> column works too, and filtering by area runs on the server.</p>',
+   '{"icon": "map"}', null),
+  (1, 20, 'Topics', 'list', 12, 'plain', null, '{"list": "MAP_TOPICS", "template": "cards"}', null),
+
+  -- 2 Museums
+  (2, 5, 'About this page', 'static', 12, 'plain',
+   '<p class="lead">One query, one marker per museum: <code>title</code> and <code>body</code> fill the popup. With <code>"cluster": true</code> markers that are close together become one round marker with their number; click it, or zoom in, and they come apart. Below the map the same places are listed, which is also what you get without JavaScript.</p>',
+   '{}', null),
+  (2, 10, 'Museums in the Netherlands', 'map', 12, 'standard',
+   E'select name as title, city || '' · '' || kind || '' · '' || to_char(visitors, ''FM9G999G999'') || '' visitors a year'' as body, lat, lng\n  from sample_maps.museum order by name',
+   '{"cluster": true, "height": "large", "name": "Museums"}', 'museums'),
+
+  -- 3 Layers
+  (3, 5, 'About this page', 'static', 12, 'plain',
+   '<p class="lead">The region''s query is the first layer; <code>layers</code> adds more, each with its own query and settings. The walk and Museumplein come from a <code>geojson</code> column; the visitor heat map (<code>"layer": "heat"</code>, weighted by a <code>weight</code> column) starts hidden: switch it on in the <strong>Layers</strong> legend.</p>',
+   '{}', null),
+  (3, 10, 'Amsterdam', 'map', 12, 'standard',
+   E'select name as title, kind as body, lat, lng from sample_maps.museum where city = ''Amsterdam''',
+   '{"name": "Museums", "height": "large",
+     "layers": [{"name": "Walk and square", "source": "select name as title, geojson from sample_maps.shape"},
+                {"name": "Visitors", "layer": "heat", "hidden": true,
+                 "source": "select lat, lng, visitors / 100000 as weight from sample_maps.museum"}]}', 'layers'),
+
+  -- 4 Map and list
+  (4, 5, 'About this page', 'static', 12, 'plain',
+   '<p class="lead">The map has <code>"report"</code>: the id of the report beside it, and <code>"filter": "distance"</code>. Move or zoom the map and press <strong>Show places within … km of the centre</strong>: the report keeps only the museums within that distance (a removable chip), filtered in its SQL on the server. The report needs position columns like the map''s.</p>',
+   '{}', null),
+  (4, 10, 'Map', 'map', 6, 'standard',
+   'select name as title, city as body, lat, lng from sample_maps.museum', '{"filter": "distance", "zoom": 8}', 'filter-map'),
+  (4, 20, 'Museums', 'report', 6, 'standard',
+   'select name, city, kind, visitors, lat, lng from sample_maps.museum order by visitors desc',
+   '{"hidden": ["lat", "lng"], "page_size": 20, "formats": {"visitors": "999G999G999"}}', 'filter-list'),
+
+  -- 5 My places (the wizard's report follows at seq 10)
+  (5, 5, 'About this page', 'static', 12, 'plain',
+   '<p class="lead">The form''s <strong>Location</strong> is a location item: <em>Use my location</em> asks the browser for the device''s position and stores it as <code>latitude,longitude</code> text, which a check constraint on the column keeps in shape. The map reads the same column.</p>',
+   '{}', null),
+  (5, 20, 'On the map', 'map', 12, 'standard',
+   'select id, name as title, note as body, location from sample_maps.place where location is not null',
+   '{"link": {"page": 6, "items": {"P6_ID": "#id#"}}, "empty": "No place has a location yet."}', null)
+  ) as r (page, seq, title, type, cols, template, source, config, sid);
+
+update meta.region set config = config || jsonb_build_object('report', pg_temp.region_id('sample-maps', 4, 'filter-list'))
+ where id = pg_temp.region_id('sample-maps', 4, 'filter-map');

package/examples/gallery/samples/sample-reporting.sql

@@ -122,7 +122,7 @@ select pg_temp.page_id('sample-reporting', r.page), r.seq, r.title, r.type, r.co
 
   -- 5 Smart filters
   (5, 5, 'About this page', 'static', 12, 'plain',
-   '<p class="lead">A <code>smart_filters</code> region is the compact alternative: one search field above the report, the filters in use as chips and suggestions below it. Type <em>dutch</em> or <em>crime</em> and choose a suggestion.</p>',
+   '<p class="lead">A <code>smart_filters</code> region is the compact alternative: one search field above the report, the filters in use as chips and suggestions below it. Type <em>dutch</em> or <em>crime</em> and choose a suggestion. With <code>"ask": true</code> it also reads a phrase: type <em>novels published between 1850 and 1900</em> and choose <strong>Understood as</strong>.</p>',
    '{}', null),
   (5, 10, 'Search', 'smart_filters', 12, 'plain', null, '{}', 'smart'),
   (5, 20, 'Books', 'report', 12, 'standard',
@@ -144,8 +144,9 @@ select pg_temp.page_id('sample-reporting', r.page), r.seq, r.title, r.type, r.co
 
 update meta.region set config = jsonb_build_object(
     'report', pg_temp.region_id('sample-reporting', 5, 'smart-report'),
-    'placeholder', 'Search or filter the books…',
+    'placeholder', 'Search, filter, or type e.g. novels published between 1850 and 1900',
+    'ask', true,
     'facets', '[{"column": "genre", "label": "Genre"}, {"column": "language", "label": "Language"},
-                {"column": "published", "label": "Published", "type": "range",
+                {"column": "published", "label": "Published", "type": "range", "custom": true,
                  "ranges": [{"to": 1900}, {"from": 1900, "to": 1950}, {"from": 1950}]}]'::jsonb)
  where id = pg_temp.region_id('sample-reporting', 5, 'smart');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pgkiln",
-  "version": "0.54.0",
+  "version": "0.56.0",
   "description": "Open source low-code, SQL-driven application builder for PostgreSQL, inspired by Oracle APEX",
   "keywords": [
     "postgresql",

package/public/builder.css

@@ -1545,3 +1545,21 @@ pre.wrap-pre { white-space: pre-wrap; overflow-wrap: anywhere; }
   .gal-tabs a:nth-child(3) { border-left: 1px solid var(--border); border-top: 0; border-radius: 0 0 0 var(--radius); }
   .gal-tabs a:last-child { border-top: 0; border-radius: 0 0 var(--radius) 0; }
 }
+
+/* ---------------------------------------------------------------- (sprint 121) builder language: status bar menu, sign-in links */
+.ide-status .ide-lang { flex: none; }
+.ide-status .ide-lang > summary { display: inline-flex; align-items: center; gap: 6px; cursor: pointer; color: inherit; padding: 2px 4px; border-radius: 4px; }
+.ide-status .ide-lang > summary:hover, .ide-status .ide-lang[open] > summary { color: var(--chrome-text); background: rgb(255 255 255 / 8%); }
+.ide-status .ide-lang > summary:focus-visible { outline: 2px solid var(--accent); outline-offset: 1px; }
+/* the status bar clips (overflow: hidden): the menu opens fixed, above it */
+.ide-status .ide-lang .menu-panel { position: fixed; top: auto; bottom: 34px; left: auto; right: auto; min-width: 200px; font-size: 13px; white-space: normal; }
+.ide-lang-form button { width: 100%; }
+.ide-lang-form button[aria-current="true"] { font-weight: 600; }
+.ide-lang-form .icon, .ide-lang-pad { width: 1em; height: 1em; flex: none; display: inline-block; }
+.signin-langs ul { display: flex; flex-wrap: wrap; justify-content: center; gap: 0.25rem 1rem; margin: 0; padding: 0.75rem 0 0; list-style: none; font-size: 0.85rem; }
+.signin-langs a { color: var(--muted); text-decoration: none; }
+.signin-langs a:hover { color: var(--accent); text-decoration: underline; }
+.signin-langs a[aria-current="true"] { color: var(--text); font-weight: 600; }
+@media (max-width: 640px) { .ide-status .ide-lang .menu-panel { left: 0.5rem; right: 0.5rem; min-width: 0; } }
+/* long compound words of other languages (Workspace-Dienstprogramme) wrap instead of widening a phone's page */
+.ab-tile > *, .stat span { min-width: 0; overflow-wrap: anywhere; hyphens: auto; }

package/public/worksheet.css

@@ -263,8 +263,9 @@ details.menu.obj-menu > summary::before, details.menu.obj-menu > summary::after
 .lp-chips li { display: flex; align-items: center; border: 1px solid var(--border); border-radius: 999px; background: var(--surface); padding-left: 10px; }
 .lp-chips a { display: inline-flex; align-items: center; gap: 6px; text-decoration: none; color: var(--text); padding: 4px 0; font-size: 13px; }
 .lp-recent li { padding-right: 10px; border-style: dashed; }
-.lp-tabs { display: flex; gap: 0; border-bottom: 1px solid var(--border); margin-bottom: 10px; }
-.lp-tabs [role=tab] { border: 0; background: none; color: var(--muted); padding: 7px 12px; font: inherit; cursor: pointer; }
+.lp-tabs { display: flex; gap: 0; border-bottom: 1px solid var(--border); margin-bottom: 10px; overflow-x: auto; scrollbar-width: none; }
+.lp-tabs [role=tab] { border: 0; background: none; color: var(--muted); padding: 7px 12px; font: inherit; cursor: pointer; white-space: nowrap; }
+@media (max-width: 480px) { .lp-tabs [role=tab] { padding: 7px 8px; } }
 .lp-tabs [role=tab][aria-selected=true] { color: var(--text); box-shadow: inset 0 -2px 0 var(--hot); }
 .js .lp-group > h2 { position: absolute; width: 1px; height: 1px; overflow: hidden; clip-path: inset(50%); }
 .lp-list { list-style: none; margin: 0 0 16px; padding: 0; display: grid; grid-template-columns: repeat(auto-fill, minmax(min(100%, 260px), 1fr)); gap: 8px; }

package/src/builder/advisor.ts

@@ -453,7 +453,7 @@ export async function advisorRoutes(app: FastifyInstance) {
           <span class="hit-snippet">${f.entry ? html`<b>${f.field}:</b> ` : ''}${f.message}</span>
         </li>`)}</ul>`
       : html`<div class="alert alert-success" role="status">No problems found.</div>`;
-    const main = html`${appHeader(a, 'advisor')}
+    const main = html`${appHeader(a, 'advisor', s)}
       ${region('Advisor', html`<p class="muted u-mt0">Checked ${checked} pieces of SQL as the role <code>${a.db_role ?? '(owner)'}</code> (planned with EXPLAIN and rolled back, nothing is run), and every reference to pages, items, lists of values, authorization schemes and report layouts.
           ${plpgsqlCheck ? 'PL/pgSQL functions were checked with plpgsql_check.' : html`Install the <code>plpgsql_check</code> extension to check PL/pgSQL functions too.`}</p>
         <p><span class="tag tag-error">${count('error')} errors</span> <span class="tag tag-warning">${count('warning')} warnings</span> <span class="tag tag-info">${count('info')} notes</span>

package/src/builder/ai-agents.ts

@@ -223,7 +223,7 @@ export async function aiAgentRoutes(app: FastifyInstance) {
     const agents = (a.ai_agents ?? []) as AiAgent[];
     const tools = (a.ai_tools ?? []) as AiTool[];
     const problems = definitionProblems(agents, tools);
-    const main = html`${appHeader(a, 'shared')}
+    const main = html`${appHeader(a, 'shared', s)}
       <div class="title-row"><h1>AI Agents</h1></div>
       <p class="muted u-mt0">An agent answers in an AI assistant region and acts only through the tools you give it: SQL queries (read-only, as the application's database role, so row level security applies), PL/pgSQL functions, REST data sources, JavaScript actions in the browser, and links to pages (pgkiln builds the URL and its checksum, only for pages the user may open). What users type and the tools' results go to the agent's AI service. <a href="${BASE}/apps/${a.id}/ai">AI usage</a> lists every tool call.</p>
       ${problems.length ? html`<div class="alert alert-error" role="alert">${problems.join(' ')}</div>` : ''}
@@ -250,7 +250,7 @@ export async function aiAgentRoutes(app: FastifyInstance) {
     const x = name ? ((a.ai_agents ?? []) as AiAgent[]).find((g) => g.name === name) : {};
     if (!x) return reply.code(404).send('Not found');
     const title = name || 'New agent';
-    const main = html`${appHeader(a, 'shared')}<div class="title-row"><h1 class="ai-name">${title}</h1></div>${region('AI agent', await agentForm(a, s, x, name, []))}`;
+    const main = html`${appHeader(a, 'shared', s)}<div class="title-row"><h1 class="ai-name">${title}</h1></div>${region('AI agent', await agentForm(a, s, x, name, []))}`;
     return send(reply, s, shell(s, title, crumbs(a, title), main));
   });
 
@@ -273,7 +273,7 @@ export async function aiAgentRoutes(app: FastifyInstance) {
       return [];
     });
     if (problems.length) {
-      const main = html`${appHeader(a, 'shared')}<div class="title-row"><h1 class="ai-name">${original || 'New agent'}</h1></div>${region('AI agent', await agentForm(a, s, x, original, problems))}`;
+      const main = html`${appHeader(a, 'shared', s)}<div class="title-row"><h1 class="ai-name">${original || 'New agent'}</h1></div>${region('AI agent', await agentForm(a, s, x, original, problems))}`;
       return send(reply.code(422), s, shell(s, original || 'New agent', crumbs(a, original || 'New agent'), main));
     }
     if (original && original !== x.name)
@@ -305,7 +305,7 @@ export async function aiAgentRoutes(app: FastifyInstance) {
     const x = name ? ((a.ai_tools ?? []) as AiTool[]).find((t) => t.name === name) : {};
     if (!x) return reply.code(404).send('Not found');
     const title = name || 'New tool';
-    const main = html`${appHeader(a, 'shared')}<div class="title-row"><h1 class="ai-name">${title}</h1></div>${region('AI tool', await toolForm(a, s, x, name, []))}`;
+    const main = html`${appHeader(a, 'shared', s)}<div class="title-row"><h1 class="ai-name">${title}</h1></div>${region('AI tool', await toolForm(a, s, x, name, []))}`;
     return send(reply, s, shell(s, title, crumbs(a, title), main));
   });
 
@@ -337,7 +337,7 @@ export async function aiAgentRoutes(app: FastifyInstance) {
       return [];
     });
     if (problems.length) {
-      const main = html`${appHeader(a, 'shared')}<div class="title-row"><h1 class="ai-name">${original || 'New tool'}</h1></div>${region('AI tool', await toolForm(a, s, x, original, problems))}`;
+      const main = html`${appHeader(a, 'shared', s)}<div class="title-row"><h1 class="ai-name">${original || 'New tool'}</h1></div>${region('AI tool', await toolForm(a, s, x, original, problems))}`;
       return send(reply.code(422), s, shell(s, original || 'New tool', crumbs(a, original || 'New tool'), main));
     }
     flash(s, 'AI tool saved.');

package/src/builder/ai-builder.ts

@@ -142,7 +142,7 @@ const SQL_SCHEMA = {
 
 async function workshopPage(s: Session, reply: FastifyReply, out: { question?: string; schema?: string; sql?: string; error?: string; result?: Raw }) {
   const list = await schemas(s);
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('ai')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('ai', s)}
     ${await serviceBox(s)}
     <p><a href="${BASE}/sql/ai/describe">Describe tables for AI ▸</a> <span class="muted">(better answers: say what tables and columns mean)</span></p>
     ${out.result ?? ''}
@@ -178,7 +178,7 @@ async function describePage(s: Session, reply: FastifyReply, schema: string, tab
   const t = table ? tables.find((x) => x.table === table) : undefined;
   const noted = new Set((await owner.query<{ t: string }>(`select distinct table_name as t from meta.ai_table_note where schema_name = $1`, [schema])).rows.map((r) => r.t));
   const value = (col: string, current: string | null) => (draft ? (col === '' ? draft.table : draft.columns?.[col]) ?? current ?? '' : current ?? '');
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('ai')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('ai', s)}
     <p><a href="${BASE}/sql/ai">◂ SQL Workshop AI</a></p>
     ${message ?? ''}
     ${region('Describe tables for AI', html`
@@ -225,7 +225,7 @@ async function pagesPage(s: Session, reply: FastifyReply, a: any, description: s
   const tables = (await wizardTables(a.db_role)).filter((t) => t.access).map((t) => t.t);
   const svc = await builderService();
   const kindOptions = WIZARD_KINDS.map(([k, label]): [string, string] => [k, label]);
-  const main = html`${appHeader(a, 'pages')}
+  const main = html`${appHeader(a, 'pages', s)}
     ${message ?? ''}
     ${region('Create pages with AI', html`
       <p class="muted u-mt0">Describe the pages you want. The App Builder's AI service proposes pages of the create page wizards for tables and views the application's role (${a.db_role ?? 'the owner'}) can read; you check the proposals and create the ones you tick. Table and column names, types and <a href="${BASE}/sql/ai/describe">descriptions</a> are sent to the service, never rows.</p>

package/src/builder/api.ts

@@ -116,7 +116,7 @@ async function apiPage(s: Session, a: any, issued?: { token: string; username: s
   ].join('\n');
 
   const check = (ok: boolean, text: Raw | string) => html`<li>${ok ? '✓' : '✗'} ${text}</li>`;
-  const main = html`${appHeader(a, 'api')}
+  const main = html`${appHeader(a, 'api', s)}
     <div class="columns">
       ${region('Setup', html`
         <p class="muted u-mt0">PostgREST runs next to pgkiln and serves the <code>${API_SCHEMA}</code> schema over HTTP. Requests carry a JWT whose <code>role</code> claim is this application’s API role; row level security uses the same <code>meta.app_user()</code> and <code>meta.has_role()</code> as the web pages.</p>

package/src/builder/autorest.ts

@@ -167,7 +167,7 @@ async function listPage(s: Session, q: Record<string, unknown>, problems: string
       <div class="buttons"><button class="btn btn-hot"${usable.length ? '' : raw(' disabled')}>${icon('bolt')} Enable</button></div>
       ${usable.length ? '' : html`<p class="muted">No application of this workspace has a database role to run as.</p>`}
     </form>`;
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('rest')}${restNav('autorest')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('rest', s)}${restNav('autorest')}
     <p class="muted">RESTful Services: publish a table or view as REST endpoints (AutoREST). Rows come paged as JSON, with filters; a primary key gives single-row GET, PUT and DELETE. Requests run as the publishing application's database role with the caller as <code>meta.app_user()</code>, so its grants and row level security apply. For tailored endpoints with your own SQL or PL/pgSQL, create a <a href="${BASE}/sql/rest/modules">module</a>.</p>
     ${region('Published objects', table)}
     ${region('Enable a table or view', form)}`;
@@ -227,7 +227,7 @@ async function detailPage(s: Session, o: Row, problems: string[] = []) {
   ].filter(Boolean).join('\n');
   const fetchEx = `const res = await fetch('${base}?limit=10'${o.auth === 'public' ? '' : `, {\n  headers: { Authorization: \`Bearer \${token}\` },\n}`});\nconst { items, has_more } = await res.json();`;
   const openapi = `${publicUrl()}/a/${o.app_alias}/autorest/openapi.json`;
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('rest')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('rest', s)}
     <h2 class="u-mb1 wrap-anywhere">${o.schema_name}.${o.object_name} <span class="muted small">${info ? kindLabel(info.kind) : ''} · ${o.enabled ? 'enabled' : 'disabled'}</span></h2>
     ${errorList(problems)}
     ${!o.enabled ? html`<div class="alert alert-info" role="status">Disabled: the endpoints answer 404.</div>` : ''}

package/src/builder/availability.ts

@@ -40,7 +40,7 @@ export async function availabilityRoutes(app: FastifyInstance) {
           'Run only: the builder refuses changes to the application (pages, shared components, settings, restores) until it is set back here. pgkiln import --replace still deploys it.')}
       </div>
       <div class="buttons"><button class="btn btn-hot">Save</button></div></form>`);
-    const main = html`${appHeader(a, 'settings')}<div class="ide-body">${body}</div>`;
+    const main = html`${appHeader(a, 'settings', s)}<div class="ide-body">${body}</div>`;
     return send(reply, s, shell(s, `${a.name} availability`, [['App Builder', BASE], [a.name, `${BASE}/apps/${a.id}`], ['Availability']], main));
   });
 

package/src/builder/backups.ts

@@ -66,7 +66,7 @@ export async function backupRoutes(app: FastifyInstance) {
           <div class="form-grid">${input('keep', 'Backups to keep', a.backups_keep, { type: 'number', help: '0 to 500; 0 makes no backups at all (also not before an import).' })}</div>
           <div class="buttons"><button class="btn">Save</button></div></form>`)}
       </div>`;
-    const main = html`${appHeader(a, 'pages')}<div class="ide-body">${body}</div>`;
+    const main = html`${appHeader(a, 'pages', s)}<div class="ide-body">${body}</div>`;
     return send(reply, s, shell(s, `${a.name} backups`, [['App Builder', BASE], [a.name, `${BASE}/apps/${a.id}`], ['Backups']], main));
   });
 

package/src/builder/changelog.ts

@@ -106,7 +106,7 @@ async function listPage(s: Session, q: Record<string, unknown>) {
         ${exp ? html`<input type="hidden" name="app" value="${exp.id}">` : ''}
         <div class="buttons"><button class="btn btn-hot">${icon('download')} Download migration</button></div></form>`
     : '';
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('changes')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('changes', s)}
     <p class="muted">The change log (Liquibase, Flyway): DDL run from the SQL Worksheet, Table Properties and Schema Comparison is kept as change sets per schema, with who ran it and when. Download them as a migration for another database: Flyway versioned files, a Liquibase formatted SQL changelog or a plain script. Only statements that succeeded are kept; data changes (INSERT, UPDATE, DELETE) are not.</p>
     ${nav}
     ${schema ? region(`Change sets of ${schema}`, html`${exportPick}${table}${downloads}`) : region('Change sets', table)}`;

package/src/builder/data-modeler.ts

@@ -87,7 +87,7 @@ async function listPage(req: Req, reply: FastifyReply) {
         <small class="help">Names separated by commas or spaces; <code>*</code> for all, <code>ord*</code> for those starting with ord. You can add more later.</small></div>
     </div>
     <div class="buttons"><button class="btn btn-hot">${icon('plus')} Create diagram</button></div></form>`;
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler', s)}
     <p class="muted u-mt0">Relational diagrams of a schema's tables and views: their columns, keys and the foreign keys between them. From a diagram: its DDL and a data dictionary.</p>
     ${region('Diagrams', list)}<div class="u-spacer"></div>${region('Create diagram', create)}`;
   return send(reply, s, shell(s, 'Data Modeler', [['SQL Workshop', `${BASE}/sql`], ['Data Modeler']], main, 'sql'));
@@ -102,7 +102,7 @@ async function diagramPage(req: Req, reply: FastifyReply) {
   const m = await model(s, d);
   const crumbs: [string, string?][] = [['SQL Workshop', `${BASE}/sql`], ['Data Modeler', M], [d.name]];
   if (!m) {
-    const main = html`<h1 class="u-mb1">${d.name}</h1>${workshopTabs('modeler')}<div class="alert alert-error" role="alert">The schema ${d.schema_name} doesn't exist any more, or this workspace can't use it.</div>
+    const main = html`<h1 class="u-mb1">${d.name}</h1>${workshopTabs('modeler', s)}<div class="alert alert-error" role="alert">The schema ${d.schema_name} doesn't exist any more, or this workspace can't use it.</div>
       <form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-danger" data-confirm="Delete the diagram ${d.name}?">${icon('trash')} Delete the diagram</button></form>`;
     return send(reply, s, shell(s, d.name, crumbs, main, 'sql'));
   }
@@ -151,7 +151,7 @@ async function diagramPage(req: Req, reply: FastifyReply) {
   const settings = html`<details class="dm-settings"><summary>Rename or delete the diagram</summary>
     <form method="post" action="${M}/${d.id}/rename" class="dm-search-row">${csrf(s)}<label class="sr-only" for="f_rename">Name</label><input id="f_rename" name="name" value="${d.name}" maxlength="120" required><button class="btn">${icon('edit')} Rename</button></form>
     <form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-danger" data-confirm="Delete the diagram ${d.name}? The tables stay as they are.">${icon('trash')} Delete diagram</button></form></details>`;
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler')}
+  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler', s)}
     <div class="dm-head"><h2 class="dm-name">${d.name}</h2><span class="muted small">Schema ${d.schema_name} · ${tables.length} objects · updated ${when(d.updated_at)} by ${d.updated_by ?? d.created_by}</span></div>
     ${missing.length ? html`<div class="alert alert-error" role="alert">Not in ${d.schema_name} any more: ${missing.join(', ')}. Saving the diagram leaves them out.</div>` : ''}
     ${toolbar}
@@ -353,7 +353,7 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     const script = diagramDdl(d.schema_name, new Set(m.tables.map((t) => t.name)), await readSchema(m.db.pool, d.schema_name));
     if (req.query.download === '1')
       return reply.header('content-disposition', `attachment; filename="${fileName(d.name)}.sql"`).type('application/sql; charset=utf-8').send(script);
-    const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler')}
+    const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler', s)}
       ${region(`DDL of ${d.name}`, html`<p class="muted u-mt0">The CREATE statements of the diagram's ${m.tables.length} objects in schema ${d.schema_name}: tables, their keys, indexes, triggers, row level security, policies, comments and grants, and views. Review before running.</p>
         <pre class="source" data-code-view="sql" tabindex="0" aria-label="DDL">${script}</pre>
         <form method="post" action="${BASE}/sql">${csrf(s)}<input type="hidden" name="sql" value="${script}">

package/src/builder/data-security.ts

@@ -171,7 +171,7 @@ async function page(req: Req, reply: FastifyReply) {
   }
   const title = `Security of ${cur.schema}.${cur.table}`;
   const objUrl = `${BASE}/sql/objects?${new URLSearchParams({ schema: cur.schema, k: 'table', o: ref })}`;
-  const main = html`<h1 class="u-mb1">${title}</h1>${workshopTabs('objects')}${form(s, cur, def, { ref, sql, warnings, errors, output })}`;
+  const main = html`<h1 class="u-mb1">${title}</h1>${workshopTabs('objects', s)}${form(s, cur, def, { ref, sql, warnings, errors, output })}`;
   return send(reply, s, shell(s, title, [['SQL Workshop', `${BASE}/sql`], ['Object Browser', `${BASE}/sql/objects`], [`${cur.schema}.${cur.table}`, objUrl], ['Security']], main, 'sql'));
 }