pgkiln 0.70.0 → 0.72.0

package/src/builder/i18n/de.ts

@@ -285,6 +285,7 @@ export const de: BuilderMessages = {
   'app.tab.api': 'REST-API',
   'app.tab.settings': 'Einstellungen',
   'app.tab.advisor': 'Advisor',
+  'app.tab.utilities': 'Dienstprogramme',
   'app.lock_refused': 'Änderungen werden abgelehnt, bis die Sperre aufgehoben ist.',
   'app.search_pages': 'Seiten durchsuchen',
   'app.search_placeholder': 'Seitenname oder -nummer',
@@ -318,6 +319,9 @@ export const de: BuilderMessages = {
   'app.table_or_view': 'Tabelle oder View (Mastertabelle für Master-Detail)',
   'app.no_access': '{table} (kein Zugriff für {role})',
   'app.ai_pages': 'Seiten mit KI erstellen',
+  'app.all_page_types': "Alle Seitentypen, Funktionen und Kopien",
+  'app.task.add_feature': "Funktionsseite hinzufügen",
+  'app.task.copy_page': "Seite als Kopie erstellen",
   'app.ai_pages_note': '(beschreiben Sie sie mit eigenen Worten)',
   'app.blank': 'Leere Seite erstellen',
   'app.page_number': 'Seitennummer',
@@ -1682,6 +1686,8 @@ export const de: BuilderMessages = {
   'wsp.mail_service': 'Mail-Dienst',
   'wsp.network': 'Netzwerkzugriff',
   'wsp.queue': 'Mail-Warteschlange',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Traces und Logs der Anwendungen dieses Workspace: {link} (wie die Instanz, aus, oder zusätzlich an einen eigenen Collector des Workspace).',
   'wsp.iso_short_on': 'Isoliert: Seine Anwendungen und sein SQL laufen auf eigenen Datenbank-Logins.',
   'wsp.iso_short_off': 'Gemeinsam.',
   'wsp.admins_change': 'Administratoren ändern das.',

package/src/builder/i18n/en.ts

@@ -288,6 +288,7 @@ export const en = {
   'app.tab.api': 'REST API',
   'app.tab.settings': 'Settings',
   'app.tab.advisor': 'Advisor',
+  'app.tab.utilities': 'Utilities',
   'app.lock_refused': 'Changes are refused until it is unlocked.',
   'app.search_pages': 'Search pages',
   'app.search_placeholder': 'Page name or number',
@@ -321,6 +322,9 @@ export const en = {
   'app.table_or_view': 'Table or view (master table for master detail)',
   'app.no_access': '{table} (no access for {role})',
   'app.ai_pages': 'Create pages with AI',
+  'app.all_page_types': "All page types, features and copies",
+  'app.task.add_feature': "Add feature page",
+  'app.task.copy_page': "Create page as copy",
   'app.ai_pages_note': '(describe them in your own words)',
   'app.blank': 'Create blank page',
   'app.page_number': 'Page number',
@@ -1686,6 +1690,8 @@ export const en = {
   'wsp.mail_service': 'mail service',
   'wsp.network': 'network access',
   'wsp.queue': 'mail queue',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Traces and logs of this workspace\'s applications: {link} (as the instance, off, or also to a collector of the workspace\'s own).',
   'wsp.iso_short_on': 'Isolated: its applications and SQL run on database logins of its own.',
   'wsp.iso_short_off': 'Shared.',
   'wsp.admins_change': 'Administrators change it.',

package/src/builder/i18n/es.ts

@@ -285,6 +285,7 @@ export const es: BuilderMessages = {
   'app.tab.api': 'API REST',
   'app.tab.settings': 'Configuración',
   'app.tab.advisor': 'Asesor',
+  'app.tab.utilities': 'Utilidades',
   'app.lock_refused': 'Los cambios se rechazan hasta que se desbloquee.',
   'app.search_pages': 'Buscar páginas',
   'app.search_placeholder': 'Nombre o número de página',
@@ -318,6 +319,9 @@ export const es: BuilderMessages = {
   'app.table_or_view': 'Tabla o vista (tabla maestra para maestro-detalle)',
   'app.no_access': '{table} (sin acceso para {role})',
   'app.ai_pages': 'Crear páginas con IA',
+  'app.all_page_types': "Todos los tipos de página, funciones y copias",
+  'app.task.add_feature': "Agregar página de función",
+  'app.task.copy_page': "Crear página como copia",
   'app.ai_pages_note': '(descríbalas con sus propias palabras)',
   'app.blank': 'Crear página en blanco',
   'app.page_number': 'Número de página',
@@ -1682,6 +1686,8 @@ export const es: BuilderMessages = {
   'wsp.mail_service': 'servicio de correo',
   'wsp.network': 'acceso a la red',
   'wsp.queue': 'cola de correo',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Trazas y registros de las aplicaciones de este espacio de trabajo: {link} (como la instancia, desactivado, o también a un recolector propio del espacio de trabajo).',
   'wsp.iso_short_on': 'Aislado: sus aplicaciones y su SQL se ejecutan con inicios de sesión de base de datos propios.',
   'wsp.iso_short_off': 'Compartido.',
   'wsp.admins_change': 'Los administradores lo cambian.',

package/src/builder/i18n/fr.ts

@@ -285,6 +285,7 @@ export const fr: BuilderMessages = {
   'app.tab.api': 'API REST',
   'app.tab.settings': 'Paramètres',
   'app.tab.advisor': 'Conseiller',
+  'app.tab.utilities': 'Utilitaires',
   'app.lock_refused': "Les modifications sont refusées jusqu'à son déverrouillage.",
   'app.search_pages': 'Rechercher des pages',
   'app.search_placeholder': 'Nom ou numéro de page',
@@ -318,6 +319,9 @@ export const fr: BuilderMessages = {
   'app.table_or_view': 'Table ou vue (table maître pour maître-détail)',
   'app.no_access': '{table} (aucun accès pour {role})',
   'app.ai_pages': "Créer des pages avec l'IA",
+  'app.all_page_types': "Tous les types de page, fonctionnalités et copies",
+  'app.task.add_feature': "Ajouter une page de fonctionnalité",
+  'app.task.copy_page': "Créer une page par copie",
   'app.ai_pages_note': '(décrivez-les avec vos propres mots)',
   'app.blank': 'Créer une page vierge',
   'app.page_number': 'Numéro de page',
@@ -1682,6 +1686,8 @@ export const fr: BuilderMessages = {
   'wsp.mail_service': 'service de messagerie',
   'wsp.network': 'accès réseau',
   'wsp.queue': 'file des e-mails',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Traces et journaux des applications de cet espace de travail : {link} (comme l\'instance, désactivé, ou aussi vers un collecteur propre à l\'espace de travail).',
   'wsp.iso_short_on': 'Isolé : ses applications et son SQL s’exécutent sur des connexions de base de données propres.',
   'wsp.iso_short_off': 'Partagé.',
   'wsp.admins_change': 'Les administrateurs le modifient.',

package/src/builder/i18n/it.ts

@@ -285,6 +285,7 @@ export const it: BuilderMessages = {
   'app.tab.api': 'API REST',
   'app.tab.settings': 'Impostazioni',
   'app.tab.advisor': 'Advisor',
+  'app.tab.utilities': 'Utilità',
   'app.lock_refused': 'Le modifiche vengono rifiutate finché non viene sbloccata.',
   'app.search_pages': 'Cerca pagine',
   'app.search_placeholder': 'Nome o numero della pagina',
@@ -318,6 +319,9 @@ export const it: BuilderMessages = {
   'app.table_or_view': 'Tabella o vista (tabella master per master-dettaglio)',
   'app.no_access': '{table} (nessun accesso per {role})',
   'app.ai_pages': 'Crea pagine con l’AI',
+  'app.all_page_types': "Tutti i tipi di pagina, funzionalità e copie",
+  'app.task.add_feature': "Aggiungi pagina di funzionalità",
+  'app.task.copy_page': "Crea pagina come copia",
   'app.ai_pages_note': '(descriverle con parole proprie)',
   'app.blank': 'Crea pagina vuota',
   'app.page_number': 'Numero di pagina',
@@ -1682,6 +1686,8 @@ export const it: BuilderMessages = {
   'wsp.mail_service': 'servizio di posta',
   'wsp.network': 'accesso di rete',
   'wsp.queue': 'coda di posta',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Tracce e log delle applicazioni di questo workspace: {link} (come l\'istanza, disattivato, o anche verso un collector proprio del workspace).',
   'wsp.iso_short_on': 'Isolato: le sue applicazioni e il suo SQL vengono eseguiti su login del database propri.',
   'wsp.iso_short_off': 'Condiviso.',
   'wsp.admins_change': 'Lo modificano gli amministratori.',

package/src/builder/i18n/ja.ts

@@ -285,6 +285,7 @@ export const ja: BuilderMessages = {
   'app.tab.api': 'REST API',
   'app.tab.settings': '設定',
   'app.tab.advisor': 'アドバイザ',
+  'app.tab.utilities': 'ユーティリティ',
   'app.lock_refused': 'ロックが解除されるまで、変更は拒否されます。',
   'app.search_pages': 'ページの検索',
   'app.search_placeholder': 'ページ名または番号',
@@ -318,6 +319,9 @@ export const ja: BuilderMessages = {
   'app.table_or_view': '表またはビュー（マスター詳細の場合はマスター表）',
   'app.no_access': '{table}（{role} にはアクセス権なし）',
   'app.ai_pages': 'AI でページを作成',
+  'app.all_page_types': "すべてのページタイプ、機能、コピー",
+  'app.task.add_feature': "機能ページを追加",
+  'app.task.copy_page': "コピーとしてページを作成",
   'app.ai_pages_note': '（自分の言葉で説明してください）',
   'app.blank': '空白ページの作成',
   'app.page_number': 'ページ番号',
@@ -1682,6 +1686,8 @@ export const ja: BuilderMessages = {
   'wsp.mail_service': 'メール・サービス',
   'wsp.network': 'ネットワーク・アクセス',
   'wsp.queue': 'メール・キュー',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'このワークスペースのアプリケーションのトレースとログ：{link}（インスタンスと同じ、オフ、またはワークスペース独自のコレクターにも送信）。',
   'wsp.iso_short_on': '分離: アプリケーションと SQL は独自のデータベース・ログインで実行されます。',
   'wsp.iso_short_off': '共有。',
   'wsp.admins_change': '管理者が変更します。',

package/src/builder/i18n/ko.ts

@@ -285,6 +285,7 @@ export const ko: BuilderMessages = {
   'app.tab.api': 'REST API',
   'app.tab.settings': '설정',
   'app.tab.advisor': '어드바이저',
+  'app.tab.utilities': '유틸리티',
   'app.lock_refused': '잠금이 해제될 때까지 변경이 거부됩니다.',
   'app.search_pages': '페이지 검색',
   'app.search_placeholder': '페이지 이름 또는 번호',
@@ -318,6 +319,9 @@ export const ko: BuilderMessages = {
   'app.table_or_view': '테이블 또는 뷰(마스터 세부의 경우 마스터 테이블)',
   'app.no_access': '{table}({role}에 대한 액세스 권한 없음)',
   'app.ai_pages': 'AI로 페이지 생성',
+  'app.all_page_types': "모든 페이지 유형, 기능 및 복사",
+  'app.task.add_feature': "기능 페이지 추가",
+  'app.task.copy_page': "복사하여 페이지 생성",
   'app.ai_pages_note': '(원하는 내용을 직접 설명하세요)',
   'app.blank': '빈 페이지 생성',
   'app.page_number': '페이지 번호',
@@ -1682,6 +1686,8 @@ export const ko: BuilderMessages = {
   'wsp.mail_service': '메일 서비스',
   'wsp.network': '네트워크 액세스',
   'wsp.queue': '메일 대기열',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': '이 작업 영역 애플리케이션의 트레이스와 로그: {link} (인스턴스와 동일, 끔, 또는 작업 영역 자체 수집기로도 전송).',
   'wsp.iso_short_on': '격리됨: 애플리케이션과 SQL이 자체 데이터베이스 로그인으로 실행됩니다.',
   'wsp.iso_short_off': '공유.',
   'wsp.admins_change': '관리자가 변경합니다.',

package/src/builder/i18n/nl.ts

@@ -285,6 +285,7 @@ export const nl: BuilderMessages = {
   'app.tab.api': 'REST-API',
   'app.tab.settings': 'Instellingen',
   'app.tab.advisor': 'Adviseur',
+  'app.tab.utilities': 'Hulpmiddelen',
   'app.lock_refused': 'Wijzigingen worden geweigerd tot de vergrendeling is opgeheven.',
   'app.search_pages': "Pagina's zoeken",
   'app.search_placeholder': 'Paginanaam of -nummer',
@@ -318,6 +319,9 @@ export const nl: BuilderMessages = {
   'app.table_or_view': 'Tabel of view (mastertabel voor master-detail)',
   'app.no_access': '{table} (geen toegang voor {role})',
   'app.ai_pages': "Pagina's maken met AI",
+  'app.all_page_types': "Alle paginatypen, functies en kopieën",
+  'app.task.add_feature': "Functiepagina toevoegen",
+  'app.task.copy_page': "Pagina als kopie maken",
   'app.ai_pages_note': '(beschrijf ze in je eigen woorden)',
   'app.blank': 'Lege pagina maken',
   'app.page_number': 'Paginanummer',
@@ -1682,6 +1686,8 @@ export const nl: BuilderMessages = {
   'wsp.mail_service': 'maildienst',
   'wsp.network': 'netwerktoegang',
   'wsp.queue': 'mailwachtrij',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Traces en logs van de applicaties van deze werkruimte: {link} (zoals de instantie, uit, of ook naar een eigen collector van de werkruimte).',
   'wsp.iso_short_on': 'Geïsoleerd: de applicaties en SQL draaien op eigen databaselogins.',
   'wsp.iso_short_off': 'Gedeeld.',
   'wsp.admins_change': 'Beheerders wijzigen dit.',

package/src/builder/i18n/pt.ts

@@ -285,6 +285,7 @@ export const pt: BuilderMessages = {
   'app.tab.api': 'API REST',
   'app.tab.settings': 'Configurações',
   'app.tab.advisor': 'Consultor',
+  'app.tab.utilities': 'Utilitários',
   'app.lock_refused': 'As alterações são recusadas até que seja desbloqueado.',
   'app.search_pages': 'Pesquisar páginas',
   'app.search_placeholder': 'Nome ou número da página',
@@ -318,6 +319,9 @@ export const pt: BuilderMessages = {
   'app.table_or_view': 'Tabela ou view (tabela mestre para mestre-detalhe)',
   'app.no_access': '{table} (sem acesso para {role})',
   'app.ai_pages': 'Criar páginas com IA',
+  'app.all_page_types': "Todos os tipos de página, recursos e cópias",
+  'app.task.add_feature': "Adicionar página de recurso",
+  'app.task.copy_page': "Criar página como cópia",
   'app.ai_pages_note': '(descreva-as com suas próprias palavras)',
   'app.blank': 'Criar página em branco',
   'app.page_number': 'Número da página',
@@ -1682,6 +1686,8 @@ export const pt: BuilderMessages = {
   'wsp.mail_service': 'serviço de e-mail',
   'wsp.network': 'acesso à rede',
   'wsp.queue': 'fila de e-mails',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': 'Traces e logs das aplicações deste espaço de trabalho: {link} (como a instância, desligado, ou também para um coletor próprio do espaço de trabalho).',
   'wsp.iso_short_on': 'Isolado: suas aplicações e seu SQL são executados em logins de banco de dados próprios.',
   'wsp.iso_short_off': 'Compartilhado.',
   'wsp.admins_change': 'Os administradores o alteram.',

package/src/builder/i18n/zh-cn.ts

@@ -285,6 +285,7 @@ export const zhCN: BuilderMessages = {
   'app.tab.api': 'REST API',
   'app.tab.settings': '设置',
   'app.tab.advisor': '顾问',
+  'app.tab.utilities': '实用工具',
   'app.lock_refused': '解锁前将拒绝所有更改。',
   'app.search_pages': '搜索页面',
   'app.search_placeholder': '页面名称或编号',
@@ -318,6 +319,9 @@ export const zhCN: BuilderMessages = {
   'app.table_or_view': '表或视图（主从页面的主表）',
   'app.no_access': '{table}（{role} 无访问权限）',
   'app.ai_pages': '使用 AI 创建页面',
+  'app.all_page_types': "所有页面类型、功能和副本",
+  'app.task.add_feature': "添加功能页",
+  'app.task.copy_page': "以副本方式创建页面",
   'app.ai_pages_note': '（用您自己的话描述它们）',
   'app.blank': '创建空白页面',
   'app.page_number': '页码',
@@ -1682,6 +1686,8 @@ export const zhCN: BuilderMessages = {
   'wsp.mail_service': '邮件服务',
   'wsp.network': '网络访问',
   'wsp.queue': '邮件队列',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': '此工作区应用程序的跟踪和日志：{link}（与实例相同、关闭，或同时发送到工作区自己的收集器）。',
   'wsp.iso_short_on': '已隔离：其应用程序和 SQL 在专属的数据库登录上运行。',
   'wsp.iso_short_off': '共享。',
   'wsp.admins_change': '由管理员更改。',

package/src/builder/i18n/zh-tw.ts

@@ -285,6 +285,7 @@ export const zhTW: BuilderMessages = {
   'app.tab.api': 'REST API',
   'app.tab.settings': '設定',
   'app.tab.advisor': '顧問',
+  'app.tab.utilities': '公用程式',
   'app.lock_refused': '在解除鎖定前，所有變更都會被拒絕。',
   'app.search_pages': '搜尋頁面',
   'app.search_placeholder': '頁面名稱或編號',
@@ -318,6 +319,9 @@ export const zhTW: BuilderMessages = {
   'app.table_or_view': '表格或檢視（主從式的主表格）',
   'app.no_access': '{table}（{role} 無存取權）',
   'app.ai_pages': '以 AI 建立頁面',
+  'app.all_page_types': "所有頁面類型、功能與副本",
+  'app.task.add_feature': "新增功能頁",
+  'app.task.copy_page': "以副本建立頁面",
   'app.ai_pages_note': '（用您自己的話描述）',
   'app.blank': '建立空白頁面',
   'app.page_number': '頁面編號',
@@ -1682,6 +1686,8 @@ export const zhTW: BuilderMessages = {
   'wsp.mail_service': '郵件服務',
   'wsp.network': '網路存取',
   'wsp.queue': '郵件佇列',
+  'wsp.telemetry': 'OpenTelemetry',
+  'wsp.telemetry_text': '此工作區應用程式的追蹤與日誌：{link}（與執行個體相同、關閉，或同時傳送到工作區自己的收集器）。',
   'wsp.iso_short_on': '已隔離：其應用程式與 SQL 以專屬的資料庫登入執行。',
   'wsp.iso_short_off': '共用。',
   'wsp.admins_change': '由管理員變更。',

package/src/builder/login-page.ts

@@ -1,5 +1,5 @@
 import type { FastifyInstance } from 'fastify';
-import { owner } from '../db.ts';
+import { owner, type Client } from '../db.ts';
 import { APP_MFA, EMAIL_CODE_MINUTES, EMAIL_CODES_PER_HOUR, type AppMfa } from '../account-mfa.ts';
 import { html, raw } from '../html.ts';
 import { secretKeyConfigured } from '../secrets.ts';
@@ -78,6 +78,21 @@ export async function saveLoginSettings(appId: string, b: Record<string, string
     [appId, page, b.password_reset === 'true', mfa, roles, b.mfa_email === 'true']);
 }
 
+/** Page 9999 (or the next free number), public, minimal, with a login region, made the login page. (137) Also Add feature → Login page. */
+export async function createLoginPage(c: Client, a: { id: number; name: string }) {
+  const n = (await c.query<{ n: number }>(
+    `select case when not exists (select 1 from meta.page where app_id = $1 and page_no = 9999) then 9999
+                 else (select max(page_no) + 1 from meta.page where app_id = $1) end as n`, [a.id],
+  )).rows[0].n;
+  const id = (await c.query<{ id: number }>(
+    `insert into meta.page (app_id, page_no, name, title, requires_auth, page_template) values ($1, $2, 'Login', $3, false, 'minimal') returning id`,
+    [a.id, n, a.name],
+  )).rows[0].id;
+  await c.query(`insert into meta.region (page_id, seq, title, type, template) values ($1, 10, $2, 'login', 'standard')`, [id, a.name]);
+  await c.query('update meta.app set login_page = $2, updated_at = now() where id = $1', [a.id, n]);
+  return { page: id, no: n };
+}
+
 export async function loginPageRoutes(app: FastifyInstance) {
   // Create a login page: page 9999 (or the next free number), public, minimal, with a login region
   app.post(`${BASE}/apps/:id/login-page`, async (req: Req, reply) => {
@@ -86,19 +101,7 @@ export async function loginPageRoutes(app: FastifyInstance) {
     const a = await owner.one<{ id: number; name: string }>('select id, name from meta.app where id = $1', [req.params.id]);
     if (!a) return reply.code(404).send('Not found');
     try {
-      const { page, no } = await owner.tx(async (c) => {
-        const n = (await c.query<{ n: number }>(
-          `select case when not exists (select 1 from meta.page where app_id = $1 and page_no = 9999) then 9999
-                       else (select max(page_no) + 1 from meta.page where app_id = $1) end as n`, [a.id],
-        )).rows[0].n;
-        const id = (await c.query<{ id: number }>(
-          `insert into meta.page (app_id, page_no, name, title, requires_auth, page_template) values ($1, $2, 'Login', $3, false, 'minimal') returning id`,
-          [a.id, n, a.name],
-        )).rows[0].id;
-        await c.query(`insert into meta.region (page_id, seq, title, type, template) values ($1, 10, $2, 'login', 'standard')`, [id, a.name]);
-        await c.query('update meta.app set login_page = $2, updated_at = now() where id = $1', [a.id, n]);
-        return { page: id, no: n };
-      });
+      const { page, no } = await owner.tx((c) => createLoginPage(c, a));
       flash(s, `Page ${no} "Login" created and made the login page. Add regions around the sign-in form in the Page Designer.`);
       return back(reply, s, `${BASE}/pages/${page}`);
     } catch (e) {

package/src/builder/newapp.ts

@@ -71,34 +71,52 @@ export const featuresFrom = (b: Record<string, unknown>, posted: boolean): Featu
 /** (sprint 73) The Activity page of a generated application. */
 export const ACTIVITY_PAGE = 9010;
 
-async function applyFeatures(c: Client, appId: number, f: Partial<Features>, notes: string[]) {
-  if (f.access) {
-    await c.query(
-      `insert into meta.authz_scheme (app_id, name, type, value, error_message) values
-         ($1, 'CONTRIBUTOR', 'sql', 'meta.has_role(''admin'') or meta.has_role(''contributor'')', 'Only contributors can do this.'),
-         ($1, 'READER', 'sql', 'meta.has_role(''admin'') or meta.has_role(''contributor'') or meta.has_role(''reader'')', 'Only readers can open this page.')
-       on conflict do nothing`,
-      [appId],
-    );
-  }
-  if (f.activity && !(await c.query('select 1 from meta.page where app_id = $1 and page_no = $2', [appId, ACTIVITY_PAGE])).rowCount) {
-    const home = (await c.query('select home_page from meta.app where id = $1', [appId])).rows[0].home_page;
-    const page = (await c.query(`insert into meta.page (app_id, page_no, name, title, parent_page, authz) values ($1, $2, 'Activity', 'Activity', $3, 'ADMIN') returning id`, [appId, ACTIVITY_PAGE, home])).rows[0].id;
-    await c.query(
-      `insert into meta.region (page_id, seq, title, type, source, config) values
-         ($1, 10, 'Page views per day', 'chart', $2, '{"kind": "column"}'),
-         ($1, 20, 'Latest activity', 'report', $3, '{"headings": {"at": "Time", "username": "User", "event": "Event", "page_no": "Page", "elapsed_ms": "Time taken (ms)"}}')`,
-      [page,
-       `select to_char(date_trunc('day', at), 'YYYY-MM-DD') as "Day", count(*) as "Page views"
+/** (sprint 73; exported in 137 for Add feature) The authorization schemes CONTRIBUTOR and READER (and ADMIN when missing). */
+export async function addAccessSchemes(c: Client, appId: number) {
+  await ensureAdminScheme(c, appId);
+  await c.query(
+    `insert into meta.authz_scheme (app_id, name, type, value, error_message) values
+       ($1, 'CONTRIBUTOR', 'sql', 'meta.has_role(''admin'') or meta.has_role(''contributor'')', 'Only contributors can do this.'),
+       ($1, 'READER', 'sql', 'meta.has_role(''admin'') or meta.has_role(''contributor'') or meta.has_role(''reader'')', 'Only readers can open this page.')
+     on conflict do nothing`,
+    [appId],
+  );
+}
+
+/** (137) The authorization scheme ADMIN (role admin) that administrators' pages use, unless the application has one. */
+export async function ensureAdminScheme(c: Client, appId: number) {
+  await c.query(
+    `insert into meta.authz_scheme (app_id, name, type, value, error_message) values ($1, 'ADMIN', 'role', 'admin', 'Only administrators can access this page.')
+     on conflict do nothing`,
+    [appId],
+  );
+}
+
+/** (sprint 73; exported in 137 for Add feature) The Activity page for administrators and its navigation entry; nothing when the page number is taken. */
+export async function addActivityPage(c: Client, appId: number) {
+  if ((await c.query('select 1 from meta.page where app_id = $1 and page_no = $2', [appId, ACTIVITY_PAGE])).rowCount) return;
+  await ensureAdminScheme(c, appId);
+  const home = (await c.query('select home_page from meta.app where id = $1', [appId])).rows[0].home_page;
+  const page = (await c.query(`insert into meta.page (app_id, page_no, name, title, parent_page, authz) values ($1, $2, 'Activity', 'Activity', $3, 'ADMIN') returning id`, [appId, ACTIVITY_PAGE, home])).rows[0].id;
+  await c.query(
+    `insert into meta.region (page_id, seq, title, type, source, config) values
+       ($1, 10, 'Page views per day', 'chart', $2, '{"kind": "column"}'),
+       ($1, 20, 'Latest activity', 'report', $3, '{"headings": {"at": "Time", "username": "User", "event": "Event", "page_no": "Page", "elapsed_ms": "Time taken (ms)"}}')`,
+    [page,
+     `select to_char(date_trunc('day', at), 'YYYY-MM-DD') as "Day", count(*) as "Page views"
   from meta.app_activity(30)
  where event = 'page_view'
  group by 1
  order by 1`,
-       `select at, username, event, page_no, elapsed_ms
+     `select at, username, event, page_no, elapsed_ms
   from meta.app_activity(30)`],
-    );
-    await c.query(`insert into meta.nav_entry (app_id, seq, label, icon, target_page, authz) values ($1, 9010, 'Activity', 'activity', $2, 'ADMIN')`, [appId, ACTIVITY_PAGE]);
-  }
+  );
+  await c.query(`insert into meta.nav_entry (app_id, seq, label, icon, target_page, authz) values ($1, 9010, 'Activity', 'activity', $2, 'ADMIN')`, [appId, ACTIVITY_PAGE]);
+}
+
+async function applyFeatures(c: Client, appId: number, f: Partial<Features>, notes: string[]) {
+  if (f.access) await addAccessSchemes(c, appId);
+  if (f.activity) await addActivityPage(c, appId);
   if (f.feedback) await c.query('update meta.app set feedback = true where id = $1', [appId]);
   if (f.theme === false) await c.query(`update meta.app set theme = theme || '{"user_choice": false}' where id = $1`, [appId]);
   if (f.pwa || f.push) await c.query('update meta.app set pwa = true where id = $1', [appId]);

package/src/builder/routes.ts

@@ -1,4 +1,5 @@
 import { advise } from './advisor.ts';
+import { appChecksum } from '../history.ts';
 import { appLocks, isAdmin, lockPanel, lockText } from './locks.ts';
 import { parseRoleList, validRoleName } from '../dbauth.ts';
 import { DEFAULT_HEADER, headerProxiesConfigured } from '../headerauth.ts';
@@ -23,6 +24,8 @@ import { securityRoutes } from './security.ts';
 import { instanceRoutes } from './instance.ts';
 import { saveTimeZoneSettings, timeZoneSettings } from './globalization.ts';
 import { WIZARD_KINDS, wizardRoutes, wizardTables } from './wizards.ts';
+import { createPageRoutes } from './create-page.ts';
+import { featureRoutes } from './features.ts';
 import { appFromFileRoutes } from './appfromfile.ts';
 import { clearDevbar } from '../runtime/devbar.ts';
 import { EMAIL } from './find-workspace.ts';
@@ -564,6 +567,9 @@ export async function builderRoutes(app: FastifyInstance) {
   await securityRoutes(app);
   await builderSsoRoutes(app);
   await wizardRoutes(app);
+  // (137) Create page: the grid of page types, features and copy (create-page.ts, features.ts)
+  await createPageRoutes(app);
+  await featureRoutes(app);
   await appFromFileRoutes(app);
 
   // (sprint 73) POST /apps, creating an application, is in appwizard.ts
@@ -653,7 +659,7 @@ export async function builderRoutes(app: FastifyInstance) {
           <button class="btn">${icon('search')}<span class="sr-only">${tx('common.search')}</span></button></form>
         <div class="seg view-toggle" role="group" aria-label="${tx('ab.view')}">
           <a href="${keep({})}"${icons ? '' : raw(' aria-current="true"')}>${icon('list')} ${tx('ab.view_report')}</a><a href="${keep({ view: 'icons' })}"${icons ? raw(' aria-current="true"') : ''}>${icon('grid')} ${tx('app.view_icons')}</a></div>
-        <a class="btn btn-hot" href="#create-page">${icon('plus')} ${tx('app.create_page')}</a>
+        <a class="btn btn-hot" href="${BASE}/apps/${a.id}/create-page">${icon('plus')} ${tx('app.create_page')}</a>
       </div>
       ${region(tx('app.tab.pages'), html`${grouped
           ? html`<form method="get" class="search u-mwnone u-mb1"><div class="field"><label class="label" for="f_group">${tx('app.page_group')}</label>
@@ -681,6 +687,7 @@ export async function builderRoutes(app: FastifyInstance) {
             </div>
             <div class="buttons"><button class="btn btn-hot">${tx('common.next')}</button></div>
           </form>
+          <p><a href="${BASE}/apps/${a.id}/create-page">${tx('app.all_page_types')} ▸</a></p>
           <p><a href="${BASE}/apps/${a.id}/ai-pages">${tx('app.ai_pages')} ▸</a> <span class="muted">${tx('app.ai_pages_note')}</span></p>`)}
         ${region(tx('app.blank'), html`
           <form method="post" action="${BASE}/apps/${a.id}/pages">${csrf(s)}
@@ -697,7 +704,9 @@ export async function builderRoutes(app: FastifyInstance) {
       <aside class="app-tasks region region-standard" aria-labelledby="app-tasks-h"><header class="region-header"><h2 id="app-tasks-h">${tx('common.tasks')}</h2></header>
         <ul class="sc-links">
           <li><a href="/a/${a.alias}" target="_blank" rel="noopener">${icon('play')} ${tx('app.task.run')}</a></li>
-          <li><a href="#create-page">${icon('plus')} ${tx('app.create_page')}</a></li>
+          <li><a href="${BASE}/apps/${a.id}/create-page">${icon('plus')} ${tx('app.create_page')}</a></li>
+          <li><a href="${BASE}/apps/${a.id}/create-page?tab=feature">${icon('puzzle')} ${tx('app.task.add_feature')}</a></li>
+          <li><a href="${BASE}/apps/${a.id}/create-page?tab=copy">${icon('copy')} ${tx('app.task.copy_page')}</a></li>
           <li><a href="${BASE}/apps/${a.id}/ai-pages">${icon('lightbulb')} ${tx('app.ai_pages')}</a></li>
           <li><a href="${BASE}/apps/${a.id}/shared">${icon('layers')} ${tx('app.tab.shared')}</a></li>
           <li><a href="${BASE}/apps/${a.id}/shared?type=page_group">${icon('folder')} ${tx('app.task.page_groups')}</a></li>
@@ -743,6 +752,8 @@ export async function builderRoutes(app: FastifyInstance) {
     const a = await appOr404(req.params.id);
     if (!a) return reply.code(404).send('Not found');
     const r = await owner.one('select meta.export_app($1) as doc', [a.alias]);
+    // (sprint 138) the application checksum (src/history.ts), as on Utilities
+    reply.header('x-pgkiln-checksum', appChecksum(r.doc));
     // (sprint 106) the change log marks the change sets made before an application's latest export
     await logActivity({ appId: a.id, username: s.username, event: 'app_export', ip: clientIp(req), detail: String(req.query?.format ?? 'json') });
     // ?format=dir|text: one file per component, as `pgkiln export --format dir|text` writes it (docs/guide/18-cli.md)