pgkiln 0.72.0 → 0.74.0

package/src/i18n/el.ts

@@ -424,6 +424,19 @@ export const el: Record<MessageKey, string> = {
   'lov.loading': "Φόρτωση περισσότερων…",
   'da.wait': "Παρακαλώ περιμένετε…",
   'lov.no_rows': "Δεν βρέθηκε τίποτα.",
+  'shuttle.available': "Διαθέσιμα",
+  'shuttle.chosen': "Επιλεγμένα",
+  'shuttle.move': "Μετακίνηση",
+  'shuttle.move_all': "Μετακίνηση όλων",
+  'shuttle.remove': "Αφαίρεση",
+  'shuttle.remove_all': "Αφαίρεση όλων",
+  'shuttle.up': "Μετακίνηση πάνω",
+  'shuttle.down': "Μετακίνηση κάτω",
+  'shuttle.top': "Μετακίνηση στην αρχή",
+  'shuttle.bottom': "Μετακίνηση στο τέλος",
+  'shuttle.filter': "Φιλτράρισμα",
+  'region.breadcrumb': "Διαδρομή πλοήγησης",
+  'region.no_help': "Δεν υπάρχει βοήθεια για αυτή τη σελίδα.",
   'search.did_you_mean': "Μήπως εννοούσατε:",
   'error.lov_value': "{label}: επιλέξτε τιμή από τη λίστα.",
   'item.yes': "Ναι",

package/src/i18n/es.ts

@@ -421,6 +421,19 @@ export const es: Record<MessageKey, string> = {
   'lov.loading': 'Cargando más…',
   'da.wait': 'Espere, por favor…',
   'lov.no_rows': 'No se ha encontrado nada.',
+  'shuttle.available': 'Disponibles',
+  'shuttle.chosen': 'Seleccionados',
+  'shuttle.move': 'Mover',
+  'shuttle.move_all': 'Mover todos',
+  'shuttle.remove': 'Quitar',
+  'shuttle.remove_all': 'Quitar todos',
+  'shuttle.up': 'Subir',
+  'shuttle.down': 'Bajar',
+  'shuttle.top': 'Mover al principio',
+  'shuttle.bottom': 'Mover al final',
+  'shuttle.filter': 'Filtrar',
+  'region.breadcrumb': 'Ruta de navegación',
+  'region.no_help': 'No hay ayuda disponible para esta página.',
   'search.did_you_mean': "Quizás quiso decir:",
   'error.lov_value': '{label}: elija un valor de la lista.',
   'item.yes': 'Sí',

package/src/i18n/fi.ts

@@ -424,6 +424,19 @@ export const fi: Record<MessageKey, string> = {
   'lov.loading': "Ladataan lisää…",
   'da.wait': "Odota hetki…",
   'lov.no_rows': "Mitään ei löytynyt.",
+  'shuttle.available': "Käytettävissä",
+  'shuttle.chosen': "Valitut",
+  'shuttle.move': "Siirrä",
+  'shuttle.move_all': "Siirrä kaikki",
+  'shuttle.remove': "Poista",
+  'shuttle.remove_all': "Poista kaikki",
+  'shuttle.up': "Siirrä ylös",
+  'shuttle.down': "Siirrä alas",
+  'shuttle.top': "Siirrä alkuun",
+  'shuttle.bottom': "Siirrä loppuun",
+  'shuttle.filter': "Suodata",
+  'region.breadcrumb': "Murupolku",
+  'region.no_help': "Tälle sivulle ei ole ohjetta.",
   'search.did_you_mean': "Tarkoititko:",
   'error.lov_value': "{label}: valitse arvo luettelosta.",
   'item.yes': "Kyllä",

package/src/i18n/fr.ts

@@ -421,6 +421,19 @@ export const fr: Record<MessageKey, string> = {
   'lov.loading': 'Chargement de la suite…',
   'da.wait': 'Veuillez patienter…',
   'lov.no_rows': 'Aucun résultat.',
+  'shuttle.available': 'Disponibles',
+  'shuttle.chosen': 'Sélectionnés',
+  'shuttle.move': 'Déplacer',
+  'shuttle.move_all': 'Tout déplacer',
+  'shuttle.remove': 'Retirer',
+  'shuttle.remove_all': 'Tout retirer',
+  'shuttle.up': 'Monter',
+  'shuttle.down': 'Descendre',
+  'shuttle.top': 'Placer en premier',
+  'shuttle.bottom': 'Placer en dernier',
+  'shuttle.filter': 'Filtrer',
+  'region.breadcrumb': 'Fil d\'Ariane',
+  'region.no_help': 'Aucune aide n\'est disponible pour cette page.',
   'search.did_you_mean': "Vouliez-vous dire :",
   'error.lov_value': '{label} : choisissez une valeur dans la liste.',
   'item.yes': 'Oui',

package/src/i18n/he.ts

@@ -424,6 +424,19 @@ export const he: Record<MessageKey, string> = {
   'lov.loading': "טוען עוד…",
   'da.wait': "נא להמתין…",
   'lov.no_rows': "לא נמצא דבר.",
+  'shuttle.available': "זמינים",
+  'shuttle.chosen': "נבחרים",
+  'shuttle.move': "העבר",
+  'shuttle.move_all': "העבר הכול",
+  'shuttle.remove': "הסר",
+  'shuttle.remove_all': "הסר הכול",
+  'shuttle.up': "הזז למעלה",
+  'shuttle.down': "הזז למטה",
+  'shuttle.top': "הזז להתחלה",
+  'shuttle.bottom': "הזז לסוף",
+  'shuttle.filter': "סינון",
+  'region.breadcrumb': "נתיב ניווט",
+  'region.no_help': "אין עזרה זמינה לדף זה.",
   'search.did_you_mean': "האם התכוונת ל:",
   'error.lov_value': "{label}: בחרו ערך מהרשימה.",
   'item.yes': "כן",

package/src/i18n/it.ts

@@ -424,6 +424,19 @@ export const it: Record<MessageKey, string> = {
   'lov.loading': "Caricamento di altri…",
   'da.wait': "Attendere prego…",
   'lov.no_rows': "Nessun risultato.",
+  'shuttle.available': "Disponibili",
+  'shuttle.chosen': "Selezionati",
+  'shuttle.move': "Sposta",
+  'shuttle.move_all': "Sposta tutti",
+  'shuttle.remove': "Rimuovi",
+  'shuttle.remove_all': "Rimuovi tutti",
+  'shuttle.up': "Sposta su",
+  'shuttle.down': "Sposta giù",
+  'shuttle.top': "Sposta all'inizio",
+  'shuttle.bottom': "Sposta alla fine",
+  'shuttle.filter': "Filtra",
+  'region.breadcrumb': "Percorso di navigazione",
+  'region.no_help': "Nessuna guida disponibile per questa pagina.",
   'search.did_you_mean': "Forse cercavi:",
   'error.lov_value': "{label}: scegli un valore dall'elenco.",
   'item.yes': "Sì",

package/src/i18n/ja.ts

@@ -424,6 +424,19 @@ export const ja: Record<MessageKey, string> = {
   'lov.loading': "さらに読み込み中…",
   'da.wait': "お待ちください…",
   'lov.no_rows': "見つかりません。",
+  'shuttle.available': "使用可能",
+  'shuttle.chosen': "選択済み",
+  'shuttle.move': "移動",
+  'shuttle.move_all': "すべて移動",
+  'shuttle.remove': "削除",
+  'shuttle.remove_all': "すべて削除",
+  'shuttle.up': "上へ移動",
+  'shuttle.down': "下へ移動",
+  'shuttle.top': "先頭へ移動",
+  'shuttle.bottom': "末尾へ移動",
+  'shuttle.filter': "フィルタ",
+  'region.breadcrumb': "パンくずリスト",
+  'region.no_help': "このページのヘルプはありません。",
   'search.did_you_mean': "もしかして:",
   'error.lov_value': "{label}: 一覧から値を選んでください。",
   'item.yes': "はい",

package/src/i18n/ko.ts

@@ -424,6 +424,19 @@ export const ko: Record<MessageKey, string> = {
   'lov.loading': "더 불러오는 중…",
   'da.wait': "잠시 기다려 주세요…",
   'lov.no_rows': "찾은 항목이 없습니다.",
+  'shuttle.available': "사용 가능",
+  'shuttle.chosen': "선택됨",
+  'shuttle.move': "이동",
+  'shuttle.move_all': "모두 이동",
+  'shuttle.remove': "제거",
+  'shuttle.remove_all': "모두 제거",
+  'shuttle.up': "위로 이동",
+  'shuttle.down': "아래로 이동",
+  'shuttle.top': "맨 위로 이동",
+  'shuttle.bottom': "맨 아래로 이동",
+  'shuttle.filter': "필터",
+  'region.breadcrumb': "이동 경로",
+  'region.no_help': "이 페이지에 대한 도움말이 없습니다.",
   'search.did_you_mean': "이것을 찾으셨나요:",
   'error.lov_value': "{label}: 목록에서 값을 선택하세요.",
   'item.yes': "예",

package/src/i18n/nb.ts

@@ -424,6 +424,19 @@ export const nb: Record<MessageKey, string> = {
   'lov.loading': "Laster inn flere…",
   'da.wait': "Vent litt…",
   'lov.no_rows': "Fant ingenting.",
+  'shuttle.available': "Tilgjengelige",
+  'shuttle.chosen': "Valgte",
+  'shuttle.move': "Flytt",
+  'shuttle.move_all': "Flytt alle",
+  'shuttle.remove': "Fjern",
+  'shuttle.remove_all': "Fjern alle",
+  'shuttle.up': "Flytt opp",
+  'shuttle.down': "Flytt ned",
+  'shuttle.top': "Flytt øverst",
+  'shuttle.bottom': "Flytt nederst",
+  'shuttle.filter': "Filtrer",
+  'region.breadcrumb': "Brødsmulesti",
+  'region.no_help': "Det finnes ingen hjelp for denne siden.",
   'search.did_you_mean': "Mente du:",
   'error.lov_value': "{label}: velg en verdi fra listen.",
   'item.yes': "Ja",

package/src/i18n/pl.ts

@@ -424,6 +424,19 @@ export const pl: Record<MessageKey, string> = {
   'lov.loading': "Wczytywanie kolejnych…",
   'da.wait': "Proszę czekać…",
   'lov.no_rows': "Nic nie znaleziono.",
+  'shuttle.available': "Dostępne",
+  'shuttle.chosen': "Wybrane",
+  'shuttle.move': "Przenieś",
+  'shuttle.move_all': "Przenieś wszystkie",
+  'shuttle.remove': "Usuń",
+  'shuttle.remove_all': "Usuń wszystkie",
+  'shuttle.up': "W górę",
+  'shuttle.down': "W dół",
+  'shuttle.top': "Na początek",
+  'shuttle.bottom': "Na koniec",
+  'shuttle.filter': "Filtruj",
+  'region.breadcrumb': "Ścieżka nawigacji",
+  'region.no_help': "Brak pomocy dla tej strony.",
   'search.did_you_mean': "Czy chodziło o:",
   'error.lov_value': "{label}: wybierz wartość z listy.",
   'item.yes': "Tak",

package/src/i18n/pt.ts

@@ -424,6 +424,19 @@ export const pt: Record<MessageKey, string> = {
   'lov.loading': "A carregar mais…",
   'da.wait': "Aguarde, por favor…",
   'lov.no_rows': "Nada encontrado.",
+  'shuttle.available': "Disponíveis",
+  'shuttle.chosen': "Selecionados",
+  'shuttle.move': "Mover",
+  'shuttle.move_all': "Mover todos",
+  'shuttle.remove': "Remover",
+  'shuttle.remove_all': "Remover todos",
+  'shuttle.up': "Mover para cima",
+  'shuttle.down': "Mover para baixo",
+  'shuttle.top': "Mover para o início",
+  'shuttle.bottom': "Mover para o fim",
+  'shuttle.filter': "Filtrar",
+  'region.breadcrumb': "Trilha de navegação",
+  'region.no_help': "Não há ajuda disponível para esta página.",
   'search.did_you_mean': "Queria dizer:",
   'error.lov_value': "{label}: escolha um valor da lista.",
   'item.yes': "Sim",

package/src/i18n/ru.ts

@@ -424,6 +424,19 @@ export const ru: Record<MessageKey, string> = {
   'lov.loading': "Загрузка…",
   'da.wait': "Подождите…",
   'lov.no_rows': "Ничего не найдено.",
+  'shuttle.available': "Доступные",
+  'shuttle.chosen': "Выбранные",
+  'shuttle.move': "Переместить",
+  'shuttle.move_all': "Переместить все",
+  'shuttle.remove': "Убрать",
+  'shuttle.remove_all': "Убрать все",
+  'shuttle.up': "Вверх",
+  'shuttle.down': "Вниз",
+  'shuttle.top': "В начало",
+  'shuttle.bottom': "В конец",
+  'shuttle.filter': "Фильтр",
+  'region.breadcrumb': "Навигационная цепочка",
+  'region.no_help': "Для этой страницы нет справки.",
   'search.did_you_mean': "Возможно, вы имели в виду:",
   'error.lov_value': "{label}: выберите значение из списка.",
   'item.yes': "Да",

package/src/i18n/sv.ts

@@ -424,6 +424,19 @@ export const sv: Record<MessageKey, string> = {
   'lov.loading': "Läser in fler…",
   'da.wait': "Vänta…",
   'lov.no_rows': "Inget hittades.",
+  'shuttle.available': "Tillgängliga",
+  'shuttle.chosen': "Valda",
+  'shuttle.move': "Flytta",
+  'shuttle.move_all': "Flytta alla",
+  'shuttle.remove': "Ta bort",
+  'shuttle.remove_all': "Ta bort alla",
+  'shuttle.up': "Flytta upp",
+  'shuttle.down': "Flytta ned",
+  'shuttle.top': "Flytta först",
+  'shuttle.bottom': "Flytta sist",
+  'shuttle.filter': "Filtrera",
+  'region.breadcrumb': "Brödsmulor",
+  'region.no_help': "Det finns ingen hjälp för den här sidan.",
   'search.did_you_mean': "Menade du:",
   'error.lov_value': "{label}: välj ett värde i listan.",
   'item.yes': "Ja",

package/src/i18n/tr.ts

@@ -424,6 +424,19 @@ export const tr: Record<MessageKey, string> = {
   'lov.loading': "Daha fazlası yükleniyor…",
   'da.wait': "Lütfen bekleyin…",
   'lov.no_rows': "Hiçbir şey bulunamadı.",
+  'shuttle.available': "Kullanılabilir",
+  'shuttle.chosen': "Seçilenler",
+  'shuttle.move': "Taşı",
+  'shuttle.move_all': "Tümünü taşı",
+  'shuttle.remove': "Kaldır",
+  'shuttle.remove_all': "Tümünü kaldır",
+  'shuttle.up': "Yukarı taşı",
+  'shuttle.down': "Aşağı taşı",
+  'shuttle.top': "En üste taşı",
+  'shuttle.bottom': "En alta taşı",
+  'shuttle.filter': "Filtrele",
+  'region.breadcrumb': "İçerik haritası",
+  'region.no_help': "Bu sayfa için yardım yok.",
   'search.did_you_mean': "Bunu mu demek istediniz:",
   'error.lov_value': "{label}: listeden bir değer seçin.",
   'item.yes': "Evet",

package/src/i18n/uk.ts

@@ -424,6 +424,19 @@ export const uk: Record<MessageKey, string> = {
   'lov.loading': "Завантаження…",
   'da.wait': "Зачекайте…",
   'lov.no_rows': "Нічого не знайдено.",
+  'shuttle.available': "Доступні",
+  'shuttle.chosen': "Вибрані",
+  'shuttle.move': "Перемістити",
+  'shuttle.move_all': "Перемістити всі",
+  'shuttle.remove': "Прибрати",
+  'shuttle.remove_all': "Прибрати всі",
+  'shuttle.up': "Вгору",
+  'shuttle.down': "Вниз",
+  'shuttle.top': "На початок",
+  'shuttle.bottom': "У кінець",
+  'shuttle.filter': "Фільтр",
+  'region.breadcrumb': "Навігаційний ланцюжок",
+  'region.no_help': "Для цієї сторінки немає довідки.",
   'search.did_you_mean': "Можливо, ви мали на увазі:",
   'error.lov_value': "{label}: виберіть значення зі списку.",
   'item.yes': "Так",

package/src/i18n/zh.ts

@@ -424,6 +424,19 @@ export const zh: Record<MessageKey, string> = {
   'lov.loading': "正在加载更多…",
   'da.wait': "请稍候…",
   'lov.no_rows': "未找到任何内容。",
+  'shuttle.available': "可选",
+  'shuttle.chosen': "已选",
+  'shuttle.move': "移入",
+  'shuttle.move_all': "全部移入",
+  'shuttle.remove': "移除",
+  'shuttle.remove_all': "全部移除",
+  'shuttle.up': "上移",
+  'shuttle.down': "下移",
+  'shuttle.top': "移到顶部",
+  'shuttle.bottom': "移到底部",
+  'shuttle.filter': "筛选",
+  'region.breadcrumb': "面包屑导航",
+  'region.no_help': "此页面没有帮助信息。",
   'search.did_you_mean': "您是不是要找：",
   'error.lov_value': "{label}：请从列表中选择一个值。",
   'item.yes': "是",

package/src/i18n.ts

@@ -451,6 +451,19 @@ const en = {
   'lov.loading': 'Loading more…',
   'da.wait': 'Please wait…',
   'lov.no_rows': 'Nothing found.',
+  'shuttle.available': 'Available',
+  'shuttle.chosen': 'Selected',
+  'shuttle.move': 'Move',
+  'shuttle.move_all': 'Move all',
+  'shuttle.remove': 'Remove',
+  'shuttle.remove_all': 'Remove all',
+  'shuttle.up': 'Move up',
+  'shuttle.down': 'Move down',
+  'shuttle.top': 'Move to top',
+  'shuttle.bottom': 'Move to bottom',
+  'shuttle.filter': 'Filter',
+  'region.breadcrumb': 'Breadcrumb',
+  'region.no_help': 'No help is available for this page.',
   'search.did_you_mean': 'Did you mean:',
   'error.lov_value': '{label}: choose a value from the list.',
   'item.yes': 'Yes',
@@ -1319,6 +1332,19 @@ const nl: Record<MessageKey, string> = {
   'lov.loading': 'Meer laden…',
   'da.wait': 'Even geduld…',
   'lov.no_rows': 'Niets gevonden.',
+  'shuttle.available': 'Beschikbaar',
+  'shuttle.chosen': 'Gekozen',
+  'shuttle.move': 'Verplaatsen',
+  'shuttle.move_all': 'Alles verplaatsen',
+  'shuttle.remove': 'Verwijderen',
+  'shuttle.remove_all': 'Alles verwijderen',
+  'shuttle.up': 'Omhoog',
+  'shuttle.down': 'Omlaag',
+  'shuttle.top': 'Bovenaan',
+  'shuttle.bottom': 'Onderaan',
+  'shuttle.filter': 'Filteren',
+  'region.breadcrumb': 'Kruimelpad',
+  'region.no_help': 'Er is geen help voor deze pagina.',
   'search.did_you_mean': 'Bedoelde u:',
   'error.lov_value': '{label}: kies een waarde uit de lijst.',
   'item.yes': 'Ja',

package/src/metadata.ts

@@ -37,8 +37,13 @@ export interface PageSummary {
 export interface StaticInclude {
   name: string;
   v: number;
+  /** (141) a static workspace file (the name without #WORKSPACE_FILES#) */
+  ws?: boolean;
 }
 
+/** (141) The prefix of a static workspace file in a list of files to load. */
+export const WORKSPACE_FILES = '#WORKSPACE_FILES#';
+
 export interface AppProcess {
   id: number;
   name: string;
@@ -159,7 +164,7 @@ export interface Region {
   title: string | null;
   /** (0.31, 073) optional, unique on the page */
   static_id?: string | null;
-  type: 'login' | 'report' | 'form' | 'chart' | 'cards' | 'static' | 'grid' | 'calendar' | 'dynamic' | 'facets' | 'tasks' | 'workflows' | 'map' | 'tree' | 'template_component' | 'smart_filters' | 'display_selector' | 'list' | 'data_reporter' | 'ai_assistant' | 'plugin' | 'url' | 'search' | 'form_designer';
+  type: 'login' | 'report' | 'form' | 'chart' | 'cards' | 'static' | 'grid' | 'calendar' | 'dynamic' | 'facets' | 'tasks' | 'workflows' | 'map' | 'tree' | 'template_component' | 'smart_filters' | 'display_selector' | 'list' | 'data_reporter' | 'ai_assistant' | 'plugin' | 'url' | 'search' | 'form_designer' | 'classic_report' | 'breadcrumb' | 'help_text';
   source: string | null;
   table_name: string | null;
   pk_column: string | null;
@@ -182,6 +187,7 @@ export type ItemType =
   | 'checkbox' | 'switch' | 'hidden' | 'display' | 'password'
   | 'checkbox_group' | 'multiselect' | 'popup_lov' | 'email' | 'tel' | 'url' | 'color' | 'file' | 'location'
   | 'richtext' | 'markdown' | 'rating' | 'combobox' | 'daterange' | 'qrcode' | 'plugin'
+  | 'shuttle' | 'select_one' | 'select_many'
   // (086) display image, geocoded address
   | 'image' | 'address';
 
@@ -363,12 +369,23 @@ export interface Page extends PageSummary {
   warn_unsaved: boolean;
   /** (087) 'minimal': no header and navigation */
   page_template: 'standard' | 'minimal' | 'left_side_column' | 'right_side_column';
+  /** (140) the page's help text (Markdown), shown by a help_text region */
+  help: string | null;
 }
 
-/** The static files a list of names refers to, in that order, with their version. */
+/**
+ * The static files a list of names refers to, in that order, with their version; (141) a name
+ * #WORKSPACE_FILES#x is the file x of the application's workspace (meta.workspace_file_versions:
+ * its own workspace's only). Missing files are left out.
+ */
 const includes = (names: string, appId: string) =>
-  `coalesce((select jsonb_agg(jsonb_build_object('name', f.name, 'v', floor(extract(epoch from f.updated_at))::bigint) order by u.o)
-               from unnest(${names}) with ordinality u(n, o) join meta.static_file f on f.app_id = ${appId} and f.name = u.n), '[]')`;
+  `coalesce((select jsonb_agg(x.j order by x.o) from (
+       select u.o, case when u.n like '#WORKSPACE\\_FILES#%'
+                        then (select jsonb_build_object('name', substr(u.n, 18), 'v', (w.v ->> substr(u.n, 18))::bigint, 'ws', true) where w.v ? substr(u.n, 18))
+                        else (select jsonb_build_object('name', f.name, 'v', floor(extract(epoch from f.updated_at))::bigint) from meta.static_file f where f.app_id = ${appId} and f.name = u.n) end as j
+         from unnest(${names}) with ordinality u(n, o)
+         left join lateral (select meta.workspace_file_versions(${appId}) as v where exists (select 1 from unnest(${names}) z where z like '#WORKSPACE\\_FILES#%')) w on true
+     ) x where x.j is not null), '[]')`;
 
 // Components whose build option is excluded are left out here, so the runtime
 // neither renders nor runs them (meta.build_option_on, migration 029).
@@ -406,7 +423,7 @@ export async function loadApp(alias: string) {
 export async function loadPage(appId: number, pageNo: number) {
   return runtime.one<Page>(
     `select p.id, p.app_id, p.page_no, p.name, p.title, p.requires_auth, p.parent_page, p.mode,
-            p.protection, p.authz, p.warn_unsaved, p.page_template,
+            p.protection, p.authz, p.warn_unsaved, p.page_template, p.help,
             ${agg('meta.region', 'page_id', 'p', 'p.app_id')} as regions,
             ${agg('meta.item', 'page_id', 'p', 'p.app_id')} as items,
             ${agg('meta.button', 'page_id', 'p', 'p.app_id')} as buttons,

package/src/remote-servers.ts

@@ -0,0 +1,133 @@
+import { owner } from './db.ts';
+import { WebError } from './webclient.ts';
+
+// (sprint 141, AP-7; APEX: Remote Servers) A named base URL per workspace
+// (meta.remote_server, migration 141): REST data sources (rest_source.server),
+// REST source catalogs (rest_catalog.server) and AI services
+// (ai_service.server_id) name a server and a path instead of a full URL, so
+// moving from development to production changes one value. The URL is this
+// installation's (base_url), or the server's environment variable
+// PGKILN_SERVER_<...> when it is set (env_var wins). Only the prefix
+// PGKILN_SERVER_ may be named, so no other variable of the server's
+// environment (DATABASE_URL, keys) can become a URL or show up in a message.
+//
+// Resolving happens here, with the owner pool (the runtime role can't read
+// the table), always within the application's own workspace: another
+// workspace's server is never found. The URL it gives goes through every
+// check a full URL went through (src/webclient.ts: allow-list, the
+// workspace's network access list, address checks at connect time).
+
+export interface RemoteServer {
+  id: number;
+  workspace_id: number;
+  static_id: string;
+  name: string;
+  description: string | null;
+  base_url: string | null;
+  env_var: string | null;
+  credential: string | null;
+}
+
+export const STATIC_ID = /^[A-Z][A-Z0-9_]{0,59}$/;
+export const ENV_PREFIX = 'PGKILN_SERVER_';
+export const ENV_VAR = /^PGKILN_SERVER_[A-Z0-9_]{1,60}$/;
+const BASE_URL = /^https?:\/\/[^\s<>"{}?#]+$/i;
+
+/** Problems with a base URL (empty: fine): http(s), no trailing slash, query, fragment or user name. */
+export function baseUrlProblem(url: string): string | null {
+  if (!BASE_URL.test(url) || url.length > 2000) return 'The base URL starts with http:// or https://, without spaces, {parameters}, a query or a fragment, e.g. https://crm.example.com/api.';
+  if (url.endsWith('/')) return 'The base URL ends without a slash: the paths after it start with one.';
+  try {
+    const u = new URL(url);
+    if (u.username || u.password) return 'The base URL may not contain a user name or password: use a web credential.';
+  } catch {
+    return 'The base URL is not valid.';
+  }
+  return null;
+}
+
+/** Problems with a server's fields (empty: fine). */
+export function serverProblems(v: { static_id?: unknown; name?: unknown; base_url?: unknown; env_var?: unknown; credential?: unknown; description?: unknown }): string[] {
+  const out: string[] = [];
+  if (typeof v.static_id !== 'string' || !STATIC_ID.test(v.static_id)) out.push('The static id is upper case letters, digits and _, starting with a letter (at most 60), e.g. CRM.');
+  if (typeof v.name !== 'string' || !/^\S(.{0,98}\S)?$/.test(v.name)) out.push('The name is 1 to 100 characters, without spaces at the start or end.');
+  if (v.base_url != null && v.base_url !== '') {
+    const p = baseUrlProblem(String(v.base_url));
+    if (p) out.push(p);
+  }
+  if (v.env_var != null && v.env_var !== '' && (typeof v.env_var !== 'string' || !ENV_VAR.test(v.env_var)))
+    out.push(`The environment variable starts with ${ENV_PREFIX}, then upper case letters, digits and _, e.g. ${ENV_PREFIX}CRM.`);
+  if (!v.base_url && !v.env_var) out.push('Give the base URL, an environment variable that holds it, or both.');
+  if (v.credential != null && v.credential !== '' && (typeof v.credential !== 'string' || !STATIC_ID.test(v.credential))) out.push('The web credential is the name of one, e.g. CRM_API.');
+  if (v.description != null && (typeof v.description !== 'string' || v.description.length > 2000)) out.push('The description is at most 2000 characters.');
+  return out;
+}
+
+/**
+ * The URL a server stands for now: its environment variable when that is set (and valid), else its
+ * stored base URL. `problem` says why there is none (the variable's value is never repeated).
+ */
+export function serverUrl(s: Pick<RemoteServer, 'static_id' | 'base_url' | 'env_var'>): { url: string | null; from: 'env' | 'stored' | null; problem: string | null } {
+  if (s.env_var && ENV_VAR.test(s.env_var)) {
+    const v = (process.env[s.env_var] ?? '').trim().replace(/\/+$/, '');
+    if (v) {
+      if (baseUrlProblem(v)) return { url: null, from: 'env', problem: `Remote server ${s.static_id}: the server's ${s.env_var} is not a valid base URL (http:// or https://, no query).` };
+      return { url: v, from: 'env', problem: null };
+    }
+  }
+  if (s.base_url && !baseUrlProblem(s.base_url)) return { url: s.base_url, from: 'stored', problem: null };
+  return { url: null, from: null, problem: `Remote server ${s.static_id} has no base URL${s.env_var ? ` (and ${s.env_var} is not set on the server)` : ''}.` };
+}
+
+/** "https://crm.example.com/api" + "/orders/{id}" (a path, a query, or nothing). */
+export function joinUrl(base: string, path: string | null | undefined) {
+  const p = (path ?? '').trim();
+  if (!p) return base;
+  return p.startsWith('/') || p.startsWith('?') ? `${base}${p}` : `${base}/${p}`;
+}
+
+/** A server of a workspace by static id (owner pool), or null. */
+export async function workspaceServer(workspaceId: number, staticId: string): Promise<RemoteServer | null> {
+  return (await owner.one<RemoteServer>('select * from meta.remote_server where workspace_id = $1 and static_id = $2', [workspaceId, staticId.toUpperCase()])) ?? null;
+}
+
+/** A server of the application's own workspace by static id, or null. */
+export async function serverForApp(appId: number, staticId: string): Promise<RemoteServer | null> {
+  return (await owner.one<RemoteServer>(
+    'select * from meta.remote_server where workspace_id = meta.app_workspace($1) and static_id = $2', [appId, staticId.toUpperCase()])) ?? null;
+}
+
+/** The full URL of a path on a server of the application's workspace; throws a WebError when it can't be made. */
+export async function appServerUrl(appId: number, staticId: string, path: string | null | undefined) {
+  const s = await serverForApp(appId, staticId);
+  if (!s) throw new WebError(`Remote server ${staticId.toUpperCase()} does not exist in this application's workspace (Workspace utilities → Remote servers).`);
+  const u = serverUrl(s);
+  if (!u.url) throw new WebError(u.problem!);
+  return { url: joinUrl(u.url, path), server: s };
+}
+
+/**
+ * A REST data source as the request code expects it: on a server, its URL becomes the server's base
+ * URL plus the source's path, and a source without a credential of its own uses the server's.
+ */
+export async function resolveSource<T extends { app_id: number; url: string; credential: string | null; server?: string | null }>(src: T): Promise<T> {
+  if (!src.server) return src;
+  const { url, server } = await appServerUrl(src.app_id, src.server, src.url);
+  // resolved once: server null, so resolving again changes nothing
+  return { ...src, url, credential: src.credential || server.credential || null, server: null };
+}
+
+/** The base URL of a catalog on a server of its workspace (null: none, or the catalog has no server). */
+export async function catalogServerUrl(workspaceId: number, staticId: string | null | undefined): Promise<string | null> {
+  if (!staticId) return null;
+  const s = await workspaceServer(workspaceId, staticId);
+  return s ? serverUrl(s).url : null;
+}
+
+/** The base URL of an AI service on a server (any workspace: administrators chose it), or an error message. */
+export async function aiServerUrl(serverId: number, path: string | null | undefined): Promise<{ url: string | null; problem: string | null }> {
+  const s = await owner.one<RemoteServer>('select * from meta.remote_server where id = $1', [serverId]);
+  if (!s) return { url: null, problem: 'Its remote server no longer exists.' };
+  const u = serverUrl(s);
+  return u.url ? { url: joinUrl(u.url, path), problem: null } : { url: null, problem: u.problem };
+}