pgkiln 0.81.0 → 0.83.0

package/src/builder/data-modeler.ts

@@ -7,6 +7,7 @@ import { autoLayout, cleanObjects, diagramSvg, lines, markers, matchNames, model
 import type { Session } from '../session.ts';
 import { back, BASE, bicon, csrf, developer, flash, region, send, shell, workshopTabs, type Req } from './ui.ts';
 import { currentWorkspace, sessionSchema, usableSchemas, workshopDb } from './workspaces.ts';
+import { tr, type BuilderKey, type BuilderTranslate } from './i18n.ts';
 
 // (sprint 98, Database Actions DA-10: Data Modeler) SQL Workshop → Data Modeler: named relational diagrams of a
 // schema's tables and views, per workspace (meta.sql_diagram, migration 111). A diagram keeps only the objects'
@@ -69,28 +70,29 @@ async function listPage(req: Req, reply: FastifyReply) {
          from meta.sql_diagram where workspace_id = $1 order by lower(name)`, [currentWorkspace(s)]),
   ]);
   const pick = current ?? (schemas.includes('public') ? 'public' : schemas[0]);
+  const tx = tr(s);
   const list = rows.rows.length
-    ? html`<div class="table-wrap"><table class="report report-reflow" aria-label="Diagrams"><thead><tr><th>Name</th><th>Schema</th><th class="num">Objects</th><th>Updated</th><th>By</th><th><span class="sr-only">Actions</span></th></tr></thead>
+    ? html`<div class="table-wrap"><table class="report report-reflow" aria-label="${tx('dm.diagrams')}"><thead><tr><th>${tx('scr.name')}</th><th>${tx('sm.schema')}</th><th class="num">${tx('ddl.objects')}</th><th>${tx('scr.col.updated')}</th><th>${tx('scr.col.by')}</th><th><span class="sr-only">${tx('sm.col.actions')}</span></th></tr></thead>
       <tbody>${rows.rows.map((d) => html`<tr>
-        <td data-label="Name" class="u-break"><a href="${M}/${d.id}">${d.name}</a></td>
-        <td data-label="Schema" class="u-break">${d.schema_name}</td>
-        <td data-label="Objects" class="num">${d.n}</td>
-        <td data-label="Updated">${when(d.updated_at)}</td>
-        <td data-label="By" class="u-break">${d.updated_by ?? d.created_by}</td>
-        <td data-label="Actions"><form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-sm btn-danger" data-confirm="Delete the diagram ${d.name}? The tables stay as they are.">${icon('trash')} Delete</button></form></td></tr>`)}</tbody></table></div>`
-    : html`<p class="muted">No diagrams in this workspace yet.</p>`;
+        <td data-label="${tx('scr.name')}" class="u-break"><a href="${M}/${d.id}">${d.name}</a></td>
+        <td data-label="${tx('sm.schema')}" class="u-break">${d.schema_name}</td>
+        <td data-label="${tx('ddl.objects')}" class="num">${d.n}</td>
+        <td data-label="${tx('scr.col.updated')}">${when(d.updated_at)}</td>
+        <td data-label="${tx('scr.col.by')}" class="u-break">${d.updated_by ?? d.created_by}</td>
+        <td data-label="${tx('sm.col.actions')}"><form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-sm btn-danger" data-confirm="${tx('dm.delete_confirm', { name: d.name })}">${icon('trash')} ${tx('scr.delete')}</button></form></td></tr>`)}</tbody></table></div>`
+    : html`<p class="muted">${tx('dm.none_yet')}</p>`;
   const create = html`<form method="post" action="${M}" class="dm-create">${csrf(s)}
     <div class="form-grid">
-      <div class="field"><label class="label" for="f_name">Name</label><input id="f_name" name="name" required maxlength="120" placeholder="core tables"></div>
-      <div class="field"><label class="label" for="f_schema">Schema</label><select id="f_schema" name="schema">${schemas.map((n) => html`<option${n === pick ? raw(' selected') : ''}>${n}</option>`)}</select></div>
-      <div class="field"><label class="label" for="f_objects">Objects</label><input id="f_objects" name="objects" maxlength="2000" placeholder="orders, customers or *">
-        <small class="help">Names separated by commas or spaces; <code>*</code> for all, <code>ord*</code> for those starting with ord. You can add more later.</small></div>
+      <div class="field"><label class="label" for="f_name">${tx('scr.name')}</label><input id="f_name" name="name" required maxlength="120" placeholder="${tx('dm.name_placeholder')}"></div>
+      <div class="field"><label class="label" for="f_schema">${tx('sm.schema')}</label><select id="f_schema" name="schema">${schemas.map((n) => html`<option${n === pick ? raw(' selected') : ''}>${n}</option>`)}</select></div>
+      <div class="field"><label class="label" for="f_objects">${tx('ddl.objects')}</label><input id="f_objects" name="objects" maxlength="2000" placeholder="${tx('dm.objects_placeholder')}">
+        <small class="help">${tx.code('dm.objects_help')}</small></div>
     </div>
-    <div class="buttons"><button class="btn btn-hot">${icon('plus')} Create diagram</button></div></form>`;
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler', s)}
-    <p class="muted u-mt0">Relational diagrams of a schema's tables and views: their columns, keys and the foreign keys between them. From a diagram: its DDL and a data dictionary.</p>
-    ${region('Diagrams', list)}<div class="u-spacer"></div>${region('Create diagram', create)}`;
-  return send(reply, s, shell(s, 'Data Modeler', [['SQL Workshop', `${BASE}/sql`], ['Data Modeler']], main, 'sql'));
+    <div class="buttons"><button class="btn btn-hot">${icon('plus')} ${tx('dm.create')}</button></div></form>`;
+  const main = html`<h1 class="u-mb1">${tx('rail.sql_workshop')}</h1>${workshopTabs('modeler', s)}
+    <p class="muted u-mt0">${tx('dm.intro')}</p>
+    ${region(tx('dm.diagrams'), list)}<div class="u-spacer"></div>${region(tx('dm.create'), create)}`;
+  return send(reply, s, shell(s, tx('sql.tool.modeler'), [[tx('rail.sql_workshop'), `${BASE}/sql`], [tx('sql.tool.modeler')]], main, 'sql'));
 }
 
 /** One diagram: the toolbar, the SVG, its objects, Add objects. */
@@ -100,10 +102,11 @@ async function diagramPage(req: Req, reply: FastifyReply) {
   const d = await loadDiagram(s, req.params.id);
   if (!d) return notFound(reply);
   const m = await model(s, d);
-  const crumbs: [string, string?][] = [['SQL Workshop', `${BASE}/sql`], ['Data Modeler', M], [d.name]];
+  const tx = tr(s);
+  const crumbs: [string, string?][] = [[tx('rail.sql_workshop'), `${BASE}/sql`], [tx('sql.tool.modeler'), M], [d.name]];
   if (!m) {
-    const main = html`<h1 class="u-mb1">${d.name}</h1>${workshopTabs('modeler', s)}<div class="alert alert-error" role="alert">The schema ${d.schema_name} doesn't exist any more, or this workspace can't use it.</div>
-      <form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-danger" data-confirm="Delete the diagram ${d.name}?">${icon('trash')} Delete the diagram</button></form>`;
+    const main = html`<h1 class="u-mb1">${d.name}</h1>${workshopTabs('modeler', s)}<div class="alert alert-error" role="alert">${tx('dm.schema_gone', { schema: d.schema_name })}</div>
+      <form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-danger" data-confirm="${tx('dm.delete_confirm_short', { name: d.name })}">${icon('trash')} ${tx('dm.delete_diagram')}</button></form>`;
     return send(reply, s, shell(s, d.name, crumbs, main, 'sql'));
   }
   const { tables, placed, missing } = m;
@@ -116,51 +119,51 @@ async function diagramPage(req: Req, reply: FastifyReply) {
   const fks = lines(d.schema_name, tables);
   const jsBtn = (act: string, ic: Raw | '', label: string, extra = '') =>
     html`<button type="button" class="btn btn-sm" data-dm="${act}" hidden title="${label}${extra ? ` (${extra})` : ''}" aria-label="${label}">${ic}<span class="dm-btn-label">${label}</span></button>`;
-  const toolbar = html`<div class="dm-toolbar" role="toolbar" aria-label="Diagram">
+  const toolbar = html`<div class="dm-toolbar" role="toolbar" aria-label="${tx('dm.diagram')}">
     <form method="post" action="${M}/${d.id}/layout" class="dm-save-form">${csrf(s)}<input type="hidden" name="positions" value="">
-      ${jsBtn('save', icon('save'), 'Save', 'Ctrl+S')}<span class="dm-status muted small" role="status" aria-live="polite"></span></form>
-    ${jsBtn('undo', icon('undo'), 'Undo', 'Ctrl+Z')}${jsBtn('redo', icon('redo'), 'Redo', 'Ctrl+Y')}
-    ${jsBtn('zoom-out', bicon('zoom-out'), 'Zoom out')}${jsBtn('zoom-in', bicon('zoom-in'), 'Zoom in')}${jsBtn('fit', bicon('expand'), 'Fit')}
-    <form method="post" action="${M}/${d.id}/layout">${csrf(s)}<input type="hidden" name="layout" value="auto"><button class="btn btn-sm" data-dm="auto" title="Auto layout" aria-label="Auto layout">${icon('grid')}<span class="dm-btn-label">Auto layout</span></button></form>
-    ${jsBtn('minimap', icon('map'), 'Mini-map')}
-    <a class="btn btn-sm" href="${M}/${d.id}/svg" data-dm="svg" title="Export SVG" aria-label="Export SVG">${icon('download')}<span class="dm-btn-label">SVG</span></a>
-    ${jsBtn('png', icon('image'), 'PNG')}${jsBtn('print', icon('printer'), 'Print')}
-    <a class="btn btn-sm" href="${M}/${d.id}/ddl">${icon('code')}<span class="dm-btn-label">Generate DDL</span></a>
-    <a class="btn btn-sm" href="${M}/${d.id}/dictionary">${icon('book')}<span class="dm-btn-label">Data dictionary</span></a>
-    <a class="btn btn-sm btn-hot" href="${M}/${d.id}#dm-add">${icon('plus')}<span class="dm-btn-label">Add objects</span></a>
+      ${jsBtn('save', icon('save'), tx('scr.save'), 'Ctrl+S')}<span class="dm-status muted small" role="status" aria-live="polite"></span></form>
+    ${jsBtn('undo', icon('undo'), tx('dm.undo'), 'Ctrl+Z')}${jsBtn('redo', icon('redo'), tx('dm.redo'), 'Ctrl+Y')}
+    ${jsBtn('zoom-out', bicon('zoom-out'), tx('dm.zoom_out'))}${jsBtn('zoom-in', bicon('zoom-in'), tx('dm.zoom_in'))}${jsBtn('fit', bicon('expand'), tx('dm.fit'))}
+    <form method="post" action="${M}/${d.id}/layout">${csrf(s)}<input type="hidden" name="layout" value="auto"><button class="btn btn-sm" data-dm="auto" title="${tx('dm.auto')}" aria-label="${tx('dm.auto')}">${icon('grid')}<span class="dm-btn-label">${tx('dm.auto')}</span></button></form>
+    ${jsBtn('minimap', icon('map'), tx('dm.minimap'))}
+    <a class="btn btn-sm" href="${M}/${d.id}/svg" data-dm="svg" title="${tx('dm.export_svg')}" aria-label="${tx('dm.export_svg')}">${icon('download')}<span class="dm-btn-label">SVG</span></a>
+    ${jsBtn('png', icon('image'), 'PNG')}${jsBtn('print', icon('printer'), tx('dm.print'))}
+    <a class="btn btn-sm" href="${M}/${d.id}/ddl">${icon('code')}<span class="dm-btn-label">${tx('sql.tool.ddl')}</span></a>
+    <a class="btn btn-sm" href="${M}/${d.id}/dictionary">${icon('book')}<span class="dm-btn-label">${tx('dm.dictionary')}</span></a>
+    <a class="btn btn-sm btn-hot" href="${M}/${d.id}#dm-add">${icon('plus')}<span class="dm-btn-label">${tx('dm.add_objects')}</span></a>
   </div>`;
   const objectList = tables.length
-    ? html`<div class="table-wrap"><table class="report report-reflow" aria-label="Objects in this diagram"><thead><tr><th>Object</th><th>Kind</th><th class="num">Columns</th><th>References</th><th><span class="sr-only">Actions</span></th></tr></thead>
+    ? html`<div class="table-wrap"><table class="report report-reflow" aria-label="${tx('dm.objects_in')}"><thead><tr><th>${tx('sm.col.object')}</th><th>${tx('dm.kind')}</th><th class="num">${tx('ul.columns')}</th><th>${tx('dm.references')}</th><th><span class="sr-only">${tx('sm.col.actions')}</span></th></tr></thead>
       <tbody>${tables.map((t) => html`<tr>
-        <td data-label="Object" class="u-break"><a href="${objectHref(d.schema_name, t)}" title="${t.kind === 'table' ? 'Table Properties' : 'Object Browser'}">${t.name}</a>${t.comment ? html`<br><span class="muted small">${t.comment}</span>` : ''}</td>
-        <td data-label="Kind">${t.kind}</td>
-        <td data-label="Columns" class="num">${t.columns.length}</td>
-        <td data-label="References" class="u-break">${fks.filter((l) => l.from === t.name).map((l) => l.to).join(', ') || '-'}</td>
-        <td data-label="Actions"><form method="post" action="${M}/${d.id}/objects">${csrf(s)}<input type="hidden" name="remove" value="${t.name}"><button class="btn btn-sm" aria-label="Remove ${t.name} from the diagram">${icon('minus')} Remove</button></form></td></tr>`)}</tbody></table></div>`
-    : html`<p class="muted">No objects yet: add some below.</p>`;
+        <td data-label="${tx('sm.col.object')}" class="u-break"><a href="${objectHref(d.schema_name, t)}" title="${t.kind === 'table' ? tx('cl.from.table') : tx('sql.tool.objects')}">${t.name}</a>${t.comment ? html`<br><span class="muted small">${t.comment}</span>` : ''}</td>
+        <td data-label="${tx('dm.kind')}">${t.kind}</td>
+        <td data-label="${tx('ul.columns')}" class="num">${t.columns.length}</td>
+        <td data-label="${tx('dm.references')}" class="u-break">${fks.filter((l) => l.from === t.name).map((l) => l.to).join(', ') || '-'}</td>
+        <td data-label="${tx('sm.col.actions')}"><form method="post" action="${M}/${d.id}/objects">${csrf(s)}<input type="hidden" name="remove" value="${t.name}"><button class="btn btn-sm" aria-label="${tx('dm.remove_label', { name: t.name })}">${icon('minus')} ${tx('dm.remove')}</button></form></td></tr>`)}</tbody></table></div>`
+    : html`<p class="muted">${tx('dm.no_objects')}</p>`;
   const add = html`<form method="get" action="${M}/${d.id}#dm-add" class="dm-search" role="search">
-      <label class="label" for="f_q">Search the tables and views of ${d.schema_name}</label>
-      <div class="dm-search-row"><input id="f_q" name="q" type="search" value="${q}" placeholder="Part of a name, emp*, or * for all" maxlength="200"><button class="btn">${icon('search')} Search</button></div></form>
+      <label class="label" for="f_q">${tx('dm.search_label', { schema: d.schema_name })}</label>
+      <div class="dm-search-row"><input id="f_q" name="q" type="search" value="${q}" placeholder="${tx('dm.search_placeholder')}" maxlength="200"><button class="btn">${icon('search')} ${tx('common.search')}</button></div></form>
     ${q
       ? found.length
-        ? html`<form method="post" action="${M}/${d.id}/objects">${csrf(s)}<fieldset class="field"><legend class="label">${found.length} found${found.length === 500 ? ' (the first 500)' : ''}</legend><div class="qb-pick">
+        ? html`<form method="post" action="${M}/${d.id}/objects">${csrf(s)}<fieldset class="field"><legend class="label">${found.length === 500 ? tx('dm.found_first') : tx('dm.found', { n: found.length })}</legend><div class="qb-pick">
             ${found.map((n) => html`<label class="check u-break"><input type="checkbox" name="t" value="${n}" checked> ${n}${kindOf.get(n) !== 'table' ? html` <span class="tag">${kindOf.get(n)}</span>` : ''}</label>`)}</div></fieldset>
-            <div class="buttons"><button class="btn btn-hot">${icon('plus')} Add to diagram</button></div></form>`
-        : html`<p class="muted">Nothing else matches ${q}.</p>`
+            <div class="buttons"><button class="btn btn-hot">${icon('plus')} ${tx('dm.add_to')}</button></div></form>`
+        : html`<p class="muted">${tx('dm.nothing_matches', { q })}</p>`
       : ''}`;
-  const settings = html`<details class="dm-settings"><summary>Rename or delete the diagram</summary>
-    <form method="post" action="${M}/${d.id}/rename" class="dm-search-row">${csrf(s)}<label class="sr-only" for="f_rename">Name</label><input id="f_rename" name="name" value="${d.name}" maxlength="120" required><button class="btn">${icon('edit')} Rename</button></form>
-    <form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-danger" data-confirm="Delete the diagram ${d.name}? The tables stay as they are.">${icon('trash')} Delete diagram</button></form></details>`;
-  const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler', s)}
-    <div class="dm-head"><h2 class="dm-name">${d.name}</h2><span class="muted small">Schema ${d.schema_name} · ${tables.length} objects · updated ${when(d.updated_at)} by ${d.updated_by ?? d.created_by}</span></div>
-    ${missing.length ? html`<div class="alert alert-error" role="alert">Not in ${d.schema_name} any more: ${missing.join(', ')}. Saving the diagram leaves them out.</div>` : ''}
+  const settings = html`<details class="dm-settings"><summary>${tx('dm.settings')}</summary>
+    <form method="post" action="${M}/${d.id}/rename" class="dm-search-row">${csrf(s)}<label class="sr-only" for="f_rename">${tx('scr.name')}</label><input id="f_rename" name="name" value="${d.name}" maxlength="120" required><button class="btn">${icon('edit')} ${tx('cl.rename')}</button></form>
+    <form method="post" action="${M}/${d.id}/delete">${csrf(s)}<button class="btn btn-danger" data-confirm="${tx('dm.delete_confirm', { name: d.name })}">${icon('trash')} ${tx('dm.delete_diagram')}</button></form></details>`;
+  const main = html`<h1 class="u-mb1">${tx('rail.sql_workshop')}</h1>${workshopTabs('modeler', s)}
+    <div class="dm-head"><h2 class="dm-name">${d.name}</h2><span class="muted small">${tx('dm.head', { schema: d.schema_name, n: tables.length, time: when(d.updated_at), user: d.updated_by ?? d.created_by })}</span></div>
+    ${missing.length ? html`<div class="alert alert-error" role="alert">${tx('dm.missing', { schema: d.schema_name, names: missing.join(', ') })}</div>` : ''}
     ${toolbar}
     <div class="dm-stage" data-dm-stage data-name="${d.name}">
-      <div class="dm-canvas" tabindex="0" aria-label="Diagram ${d.name}: drag a box to move it, or focus it and use the arrow keys">${svg}</div>
+      <div class="dm-canvas" tabindex="0" aria-label="${tx('dm.canvas_label', { name: d.name })}">${svg}</div>
     </div>
-    <p class="muted small dm-legend">P primary key · F foreign key · U unique · <strong>*</strong> not null · a line runs from the referencing table (crow's foot: many) to the referenced one (bar: one); dashed when the foreign key may be empty. A box's name opens ${tables.some((t) => t.kind === 'table') ? 'Table Properties' : 'the object'}.</p>
-    ${region('Objects', objectList, '', 'dm-objects')}<div class="u-spacer"></div>
-    ${region('Add objects to diagram', add, '', 'dm-add')}<div class="u-spacer"></div>
+    <p class="muted small dm-legend">${tx.rich('dm.legend', { star: html`<strong>*</strong>` })} ${tables.some((t) => t.kind === 'table') ? tx('dm.legend_opens_table') : tx('dm.legend_opens_object')}</p>
+    ${region(tx('ddl.objects'), objectList, '', 'dm-objects')}<div class="u-spacer"></div>
+    ${region(tx('dm.add_title'), add, '', 'dm-add')}<div class="u-spacer"></div>
     ${settings}`;
   return send(reply, s, shell(s, d.name, crumbs, main, 'sql'));
 }
@@ -188,23 +191,23 @@ export function diagramDdl(schema: string, names: Set<string>, objects: DdlObjec
   return ddlScript(schema, keep).replace(/^-- DDL of schema .*$/m, `-- DDL of ${names.size} objects of schema ${schema} (a Data Modeler diagram)`);
 }
 
-const CON: Record<string, string> = { p: 'Primary key', u: 'Unique', f: 'Foreign key', c: 'Check' };
+const CON: Record<string, BuilderKey> = { p: 'dm.con.p', u: 'dm.con.u', f: 'dm.con.f', c: 'dm.con.c' };
 
 /** The data dictionary: tables, columns, comments, constraints. */
-function dictionary(schema: string, d: Diagram, tables: ModelTable[]): Raw {
+function dictionary(tx: BuilderTranslate, schema: string, d: Diagram, tables: ModelTable[]): Raw {
   const fks = lines(schema, tables);
-  return html`<header class="dm-dict-head"><h1>Data dictionary: ${d.name}</h1>
-    <p>Schema ${schema} · ${tables.length} objects · generated ${when(new Date().toISOString())} UTC</p></header>
-    <nav aria-label="Objects"><ol class="dm-dict-toc">${tables.map((t, i) => html`<li><a href="#t${i}">${t.name}</a> <span class="muted">${t.kind}</span></li>`)}</ol></nav>
+  return html`<header class="dm-dict-head"><h1>${tx('dm.dict_title', { name: d.name })}</h1>
+    <p>${tx('dm.dict_head', { schema, n: tables.length, time: when(new Date().toISOString()) })}</p></header>
+    <nav aria-label="${tx('ddl.objects')}"><ol class="dm-dict-toc">${tables.map((t, i) => html`<li><a href="#t${i}">${t.name}</a> <span class="muted">${t.kind}</span></li>`)}</ol></nav>
     ${tables.map((t, i) => html`<section class="dm-dict-table" id="t${i}">
       <h2>${t.name} <span class="muted small">${t.kind}</span></h2>
       ${t.comment ? html`<p>${t.comment}</p>` : ''}
-      <div class="table-wrap"><table class="report" aria-label="Columns of ${t.name}"><thead><tr><th>#</th><th>Column</th><th>Type</th><th>Null</th><th>Default</th><th>Key</th><th>Comment</th></tr></thead>
+      <div class="table-wrap"><table class="report" aria-label="${tx('dm.columns_of', { name: t.name })}"><thead><tr><th>#</th><th>${tx('dm.col.column')}</th><th>${tx('ch.type')}</th><th>${tx('dm.col.null')}</th><th>${tx('dm.col.default')}</th><th>${tx('dm.col.key')}</th><th>${tx('dm.col.comment')}</th></tr></thead>
         <tbody>${t.columns.map((c, k) => html`<tr><td class="num">${k + 1}</td><td class="u-break"><code>${c.name}</code></td><td class="u-break">${c.type}</td><td>${c.notNull ? 'not null' : 'null'}</td>
           <td class="u-break">${c.default ?? ''}</td><td>${markers(t, c.name)}</td><td class="u-break">${c.comment ?? ''}</td></tr>`)}</tbody></table></div>
-      ${t.constraints.length ? html`<h3>Constraints</h3><div class="table-wrap"><table class="report" aria-label="Constraints of ${t.name}"><thead><tr><th>Name</th><th>Type</th><th>Definition</th></tr></thead>
-        <tbody>${t.constraints.map((k) => html`<tr><td class="u-break"><code>${k.name}</code></td><td>${CON[k.type]}</td><td class="u-break"><code>${k.def}</code></td></tr>`)}</tbody></table></div>` : ''}
-      ${fks.some((l) => l.to === t.name) ? html`<h3>Referenced by</h3><ul>${fks.filter((l) => l.to === t.name).map((l) => html`<li>${l.label}</li>`)}</ul>` : ''}
+      ${t.constraints.length ? html`<h3>${tx('dm.constraints')}</h3><div class="table-wrap"><table class="report" aria-label="${tx('dm.constraints_of', { name: t.name })}"><thead><tr><th>${tx('scr.name')}</th><th>${tx('ch.type')}</th><th>${tx('dm.definition')}</th></tr></thead>
+        <tbody>${t.constraints.map((k) => html`<tr><td class="u-break"><code>${k.name}</code></td><td>${CON[k.type] ? tx(CON[k.type]) : k.type}</td><td class="u-break"><code>${k.def}</code></td></tr>`)}</tbody></table></div>` : ''}
+      ${fks.some((l) => l.to === t.name) ? html`<h3>${tx('dm.referenced_by')}</h3><ul>${fks.filter((l) => l.to === t.name).map((l) => html`<li>${l.label}</li>`)}</ul>` : ''}
     </section>`)}`;
 }
 
@@ -226,7 +229,7 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     const db = await workshopDb(s);
     if (!(await usableSchemas(db)).includes(schema)) return notFound(reply);
     if (!name) {
-      flash(s, 'A diagram needs a name.', 'error');
+      flash(s, tr(s)('dm.err.name'), 'error');
       return back(reply, s, M);
     }
     const names = matchNames((await modelNames(db, schema)).map((o) => o.name), String(req.body?.objects ?? '').slice(0, 2000), { exact: true }).slice(0, 500);
@@ -235,11 +238,11 @@ export async function dataModelerRoutes(app: FastifyInstance) {
       const row = await owner.one<{ id: string }>(
         `insert into meta.sql_diagram (workspace_id, name, schema_name, objects, created_by) values ($1, $2, $3, $4, $5) returning id::text`,
         [currentWorkspace(s), name, schema, JSON.stringify(autoLayout(schema, tables)), s.username]);
-      flash(s, `Diagram ${name} created${tables.length ? ` with ${tables.length} objects` : ': add objects to it'}.`);
+      flash(s, tables.length ? tr(s)('dm.created_n', { name, n: tables.length }) : tr(s)('dm.created_empty', { name }));
       return back(reply, s, `${M}/${row!.id}${tables.length ? '' : '#dm-add'}`);
     } catch (e: any) {
       if (e.code !== '23505') throw e;
-      flash(s, `There is already a diagram ${name} in this workspace.`, 'error');
+      flash(s, tr(s)('dm.err.exists', { name }), 'error');
       return back(reply, s, M);
     }
   });
@@ -259,18 +262,18 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     const remove = typeof req.body?.remove === 'string' ? req.body.remove : '';
     if (remove) {
       await saveObjects(s, d.id, m.placed.filter((p) => p.name !== remove));
-      flash(s, `${remove} removed from the diagram (the table stays as it is).`);
+      flash(s, tr(s)('dm.removed', { name: remove }));
       return back(reply, s, `${M}/${d.id}`);
     }
     const existing = new Set((await modelNames(m.db, d.schema_name)).map((o) => o.name));
     const adding = [...new Set(wanted)].filter((n) => existing.has(n) && !m.placed.some((p) => p.name === n)).slice(0, Math.max(0, 500 - m.placed.length));
     if (!adding.length) {
-      flash(s, 'Nothing to add: pick tables or views of the schema that aren\'t in the diagram.', 'error');
+      flash(s, tr(s)('dm.err.nothing'), 'error');
       return back(reply, s, `${M}/${d.id}#dm-add`);
     }
     const added = await readModel(m.db, d.schema_name, adding);
     await saveObjects(s, d.id, placeAll(d.schema_name, [...m.tables, ...added], m.placed));
-    flash(s, `Added ${added.length} object${added.length === 1 ? '' : 's'}: ${added.map((t) => t.name).join(', ')}.`);
+    flash(s, tr(s)(added.length === 1 ? 'dm.added_one' : 'dm.added', { n: added.length, names: added.map((t) => t.name).join(', ') }));
     return back(reply, s, `${M}/${d.id}`);
   });
 
@@ -298,7 +301,7 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     }
     await saveObjects(s, d.id, next);
     if (json) return reply.send({ ok: true, saved: next.length });
-    flash(s, req.body?.layout === 'auto' ? 'The boxes were laid out again.' : 'Diagram saved.');
+    flash(s, req.body?.layout === 'auto' ? tr(s)('dm.laid_out') : tr(s)('dm.saved'));
     return back(reply, s, `${M}/${d.id}`);
   });
 
@@ -309,15 +312,15 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     if (!d) return notFound(reply);
     const name = String(req.body?.name ?? '').trim().slice(0, 120);
     if (!name) {
-      flash(s, 'A diagram needs a name.', 'error');
+      flash(s, tr(s)('dm.err.name'), 'error');
       return back(reply, s, `${M}/${d.id}`);
     }
     try {
       await owner.query(`update meta.sql_diagram set name = $3, updated_by = $4, updated_at = now() where id = $1 and workspace_id = $2`, [d.id, currentWorkspace(s), name, s.username]);
-      flash(s, `Diagram renamed to ${name}.`);
+      flash(s, tr(s)('dm.renamed', { name }));
     } catch (e: any) {
       if (e.code !== '23505') throw e;
-      flash(s, `There is already a diagram ${name} in this workspace.`, 'error');
+      flash(s, tr(s)('dm.err.exists', { name }), 'error');
     }
     return back(reply, s, `${M}/${d.id}`);
   });
@@ -328,7 +331,7 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     const d = await loadDiagram(s, req.params.id);
     if (!d) return notFound(reply);
     await owner.query('delete from meta.sql_diagram where id = $1 and workspace_id = $2', [d.id, currentWorkspace(s)]);
-    flash(s, `Diagram ${d.name} deleted.`);
+    flash(s, tr(s)('dm.deleted', { name: d.name }));
     return back(reply, s, M);
   });
 
@@ -353,13 +356,14 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     const script = diagramDdl(d.schema_name, new Set(m.tables.map((t) => t.name)), await readSchema(m.db.pool, d.schema_name));
     if (req.query.download === '1')
       return reply.header('content-disposition', `attachment; filename="${fileName(d.name)}.sql"`).type('application/sql; charset=utf-8').send(script);
-    const main = html`<h1 class="u-mb1">SQL Workshop</h1>${workshopTabs('modeler', s)}
-      ${region(`DDL of ${d.name}`, html`<p class="muted u-mt0">The CREATE statements of the diagram's ${m.tables.length} objects in schema ${d.schema_name}: tables, their keys, indexes, triggers, row level security, policies, comments and grants, and views. Review before running.</p>
+    const tx = tr(s);
+    const main = html`<h1 class="u-mb1">${tx('rail.sql_workshop')}</h1>${workshopTabs('modeler', s)}
+      ${region(tx('ddl.of', { schema: d.name }), html`<p class="muted u-mt0">${tx('dm.ddl_intro', { n: m.tables.length, schema: d.schema_name })}</p>
         <pre class="source" data-code-view="sql" tabindex="0" aria-label="DDL">${script}</pre>
         <form method="post" action="${BASE}/sql">${csrf(s)}<input type="hidden" name="sql" value="${script}">
-          <div class="buttons"><a class="btn" href="${M}/${d.id}">${bicon('back')} Back to the diagram</a><a class="btn" href="${M}/${d.id}/ddl?download=1">${icon('download')} Download</a>
-            <button class="btn btn-hot">${icon('play')} Open in the SQL Worksheet</button></div></form>`)}`;
-    return send(reply, s, shell(s, `DDL of ${d.name}`, [['SQL Workshop', `${BASE}/sql`], ['Data Modeler', M], [d.name, `${M}/${d.id}`], ['DDL']], main, 'sql'));
+          <div class="buttons"><a class="btn" href="${M}/${d.id}">${bicon('back')} ${tx('dm.back')}</a><a class="btn" href="${M}/${d.id}/ddl?download=1">${icon('download')} ${tx('scr.download')}</a>
+            <button class="btn btn-hot">${icon('play')} ${tx('dm.open_worksheet')}</button></div></form>`)}`;
+    return send(reply, s, shell(s, tx('ddl.of', { schema: d.name }), [[tx('rail.sql_workshop'), `${BASE}/sql`], [tx('sql.tool.modeler'), M], [d.name, `${M}/${d.id}`], ['DDL']], main, 'sql'));
   });
 
   // the data dictionary report (download=1: a standalone HTML file)
@@ -369,14 +373,15 @@ export async function dataModelerRoutes(app: FastifyInstance) {
     const d = await loadDiagram(s, req.params.id);
     const m = d && (await model(s, d));
     if (!d || !m) return notFound(reply);
-    const body = dictionary(d.schema_name, d, m.tables);
+    const tx = tr(s);
+    const body = dictionary(tx, d.schema_name, d, m.tables);
     if (req.query.download === '1')
       return reply.header('content-disposition', `attachment; filename="${fileName(d.name)}-dictionary.html"`).type('text/html; charset=utf-8')
-        .send(`<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Data dictionary: ${esc(d.name)}</title><style>${DICT_CSS}</style></head><body>${body}</body></html>`);
-    const main = html`<div class="dm-dict-actions buttons"><a class="btn" href="${M}/${d.id}">${bicon('back')} Back to the diagram</a>
-        <a class="btn" href="${M}/${d.id}/dictionary?download=1">${icon('download')} Download HTML</a>
-        <button type="button" class="btn" data-dm="print" hidden>${icon('printer')} Print or save as PDF</button></div>
+        .send(`<!doctype html><html lang="${tx.lang}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${esc(tx('dm.dict_title', { name: d.name }))}</title><style>${DICT_CSS}</style></head><body>${body}</body></html>`);
+    const main = html`<div class="dm-dict-actions buttons"><a class="btn" href="${M}/${d.id}">${bicon('back')} ${tx('dm.back')}</a>
+        <a class="btn" href="${M}/${d.id}/dictionary?download=1">${icon('download')} ${tx('dm.download_html')}</a>
+        <button type="button" class="btn" data-dm="print" hidden>${icon('printer')} ${tx('dm.print_pdf')}</button></div>
       <article class="dm-dict">${body}</article>`;
-    return send(reply, s, shell(s, `Data dictionary: ${d.name}`, [['SQL Workshop', `${BASE}/sql`], ['Data Modeler', M], [d.name, `${M}/${d.id}`], ['Data dictionary']], main, 'sql'));
+    return send(reply, s, shell(s, tx('dm.dict_title', { name: d.name }), [[tx('rail.sql_workshop'), `${BASE}/sql`], [tx('sql.tool.modeler'), M], [d.name, `${M}/${d.id}`], [tx('dm.dictionary')]], main, 'sql'));
   });
 }

package/src/builder/data-security.ts

@@ -1,5 +1,5 @@
 import type { FastifyInstance, FastifyReply } from 'fastify';
-import { html, raw, type Raw } from '../html.ts';
+import { esc, html, raw, type Raw } from '../html.ts';
 import { icon } from '../icons.ts';
 import { owner } from '../db.ts';
 import { clientIp, logActivity, type Session } from '../session.ts';
@@ -9,6 +9,7 @@ import { clearCompletions } from './code-editor.ts';
 import { roleHints, splitRoles } from './users.ts';
 import { currentWorkspace, inWorkspaceSql, usableSchemas, workshopDb } from './workspaces.ts';
 import { joinStatements, recordChanges } from '../changelog.ts';
+import { tr } from './i18n.ts';
 import {
   APP_ROLE_RE, checkSecurity, currentDef, MASK_LABELS, MASKS, maskedColumns, readSecurity, securitySql, sees,
   type ColumnMask, type SecurityDef, type TableSecurity,
@@ -55,64 +56,65 @@ function fromForm(b: Body, cur: TableSecurity): SecurityDef {
 }
 
 function form(s: Session, cur: TableSecurity, def: SecurityDef, opts: { ref: string; sql: string[]; warnings: string[]; errors: string[]; output: Raw | '' }): Raw {
+  const tx = tr(s);
   const chk = (x: boolean) => (x ? raw(' checked') : '');
   const all = cur.columns.map((c) => c.name);
   const v = def.view;
   const masked = new Set(maskedColumns(v));
   const objUrl = `${BASE}/sql/objects?${new URLSearchParams({ schema: cur.schema, k: 'table', o: opts.ref })}`;
   const policyUrl = `${BASE}/sql/objects/action?${new URLSearchParams({ schema: cur.schema, k: 'table', o: opts.ref, do: 'policy' })}`;
-  const rows = html`<div class="table-wrap"><table class="report ds-table"><caption class="sr-only">Database roles and columns</caption>
-    <thead><tr><th scope="col">Database role</th>${all.map((c) => html`<th scope="col"><code>${c}</code>${masked.has(c) ? html` <span class="badge" title="Masked in ${v.name}">masked</span>` : ''}</th>`)}</tr></thead>
+  const rows = html`<div class="table-wrap"><table class="report ds-table"><caption class="sr-only">${tx('ds.roles_and_columns')}</caption>
+    <thead><tr><th scope="col">${tx('ds.db_role')}</th>${all.map((c) => html`<th scope="col"><code>${c}</code>${masked.has(c) ? html` <span class="badge" title="${tx('ds.masked_in', { view: v.name })}">${tx('ds.masked')}</span>` : ''}</th>`)}</tr></thead>
     <tbody>${cur.grants.length ? def.grants.map((g, i) => {
       const info = cur.grants[i];
-      return html`<tr><th scope="row"><code>${g.role === 'PUBLIC' ? 'PUBLIC' : g.role}</code>${info.apps.length ? html`<br><small class="muted">runs ${info.apps.join(', ')}</small>` : ''}</th>
-        ${all.map((c, j) => html`<td class="ds-cell"><label class="check"><input type="checkbox" name="g.${i}.s.${j}"${chk(g.select.includes(c))}> read</label>
-          <label class="check"><input type="checkbox" name="g.${i}.u.${j}"${chk(g.update.includes(c))}> update</label></td>`)}</tr>`;
-    }) : html`<tr><td colspan="${all.length + 1}" class="muted">No database role has privileges on this table, and no application of the workspace runs with a database role.</td></tr>`}</tbody></table></div>
-    ${cur.excluded.length ? html`<p class="muted small">Not in the matrix, because column privileges can't restrict them: ${cur.excluded.map((x) => html`<code>${x.role}</code> (${x.why}) `)}</p>` : ''}`;
-  const maskRows = html`<div class="table-wrap"><table class="report ds-table"><caption class="sr-only">Masks per column</caption>
-    <thead><tr><th scope="col">Column</th><th scope="col">Mask</th>${v.roles.map((r) => html`<th scope="col">${r} sees it</th>`)}<th scope="col">Everyone else sees it</th></tr></thead>
+      return html`<tr><th scope="row"><code>${g.role === 'PUBLIC' ? 'PUBLIC' : g.role}</code>${info.apps.length ? html`<br><small class="muted">${tx('ds.runs', { apps: info.apps.join(', ') })}</small>` : ''}</th>
+        ${all.map((c, j) => html`<td class="ds-cell"><label class="check"><input type="checkbox" name="g.${i}.s.${j}"${chk(g.select.includes(c))}> ${tx('ds.read')}</label>
+          <label class="check"><input type="checkbox" name="g.${i}.u.${j}"${chk(g.update.includes(c))}> ${tx('ds.update')}</label></td>`)}</tr>`;
+    }) : html`<tr><td colspan="${all.length + 1}" class="muted">${tx('ds.no_grants')}</td></tr>`}</tbody></table></div>
+    ${cur.excluded.length ? html`<p class="muted small">${tx('ds.excluded')} ${cur.excluded.map((x) => html`<code>${x.role}</code> (${x.why}) `)}</p>` : ''}`;
+  const maskRows = html`<div class="table-wrap"><table class="report ds-table"><caption class="sr-only">${tx('ds.masks_per_column')}</caption>
+    <thead><tr><th scope="col">${tx('ds.column')}</th><th scope="col">${tx('ds.mask')}</th>${v.roles.map((r) => html`<th scope="col">${tx('ds.role_sees', { role: r })}</th>`)}<th scope="col">${tx('ds.others_see')}</th></tr></thead>
     <tbody>${all.map((c, j) => {
       const m = v.cols[c];
       return html`<tr><th scope="row"><code>${c}</code> <small class="muted">${cur.columns[j].type}</small></th>
-        <td><select name="m.${j}.mask" aria-label="Mask of ${c}"><option value="">Not masked</option>${MASKS.map((x) => html`<option value="${x}"${m?.mask === x ? raw(' selected') : ''}>${MASK_LABELS[x]}</option>`)}</select></td>
-        ${v.roles.map((r, k) => html`<td class="ds-c"><input type="checkbox" aria-label="${r} sees ${c}" name="m.${j}.see.${k}"${chk(!!m && sees(v, c, r))}></td>`)}
-        <td class="ds-c"><input type="checkbox" aria-label="Everyone else sees ${c}" name="m.${j}.others"${chk(!!m && m.others)}></td></tr>`;
+        <td><select name="m.${j}.mask" aria-label="${tx('ds.aria_mask', { column: c })}"><option value="">${tx('ds.not_masked')}</option>${MASKS.map((x) => html`<option value="${x}"${m?.mask === x ? raw(' selected') : ''}>${tx.dyn(`ds.mask.${x}`, MASK_LABELS[x])}</option>`)}</select></td>
+        ${v.roles.map((r, k) => html`<td class="ds-c"><input type="checkbox" aria-label="${tx('ds.aria_role_sees', { role: r, column: c })}" name="m.${j}.see.${k}"${chk(!!m && sees(v, c, r))}></td>`)}
+        <td class="ds-c"><input type="checkbox" aria-label="${tx('ds.aria_others_see', { column: c })}" name="m.${j}.others"${chk(!!m && m.others)}></td></tr>`;
     })}</tbody></table></div>`;
   return html`<form method="post" action="${BASE}/sql/objects/security" class="ds">${csrf(s)}
     <input type="hidden" name="ref" value="${opts.ref}"><input type="hidden" name="shown_roles" value="${v.roles.join(', ')}">
     ${opts.errors.length ? html`<div class="alert alert-error" role="alert"><ul>${opts.errors.map((e) => html`<li>${e}</li>`)}</ul></div>` : ''}
-    <section class="ds-section"><h2>${icon('shield')} Rows</h2>
-      <p>Row level security is <strong>${cur.rls ? (cur.forceRls ? 'on, also for the owner' : 'on') : 'off'}</strong>${cur.rls ? '' : ': every role that may read the table reads every row'}.
-        <a href="${BASE}/sql/objects/table?${new URLSearchParams({ o: opts.ref })}">Table Properties</a> switches it on; <a href="${policyUrl}">Add policy</a> writes one in the worksheet.</p>
-      ${cur.policies.length ? html`<div class="table-wrap"><table class="report"><thead><tr><th>Policy</th><th>Command</th><th>Roles</th><th>Using</th><th>With check</th></tr></thead><tbody>
-        ${cur.policies.map((p) => html`<tr><td>${p.name}${p.permissive === 'RESTRICTIVE' ? html` <span class="badge">restrictive</span>` : ''}</td><td>${p.command}</td><td><code>${p.roles}</code></td><td><code>${p.using ?? ''}</code></td><td><code>${p.check ?? ''}</code></td></tr>`)}</tbody></table></div>`
-        : html`<p class="muted">No policies${cur.rls ? ': with row level security on, the roles below read no rows at all' : ''}.</p>`}
+    <section class="ds-section"><h2>${icon('shield')} ${tx('ds.rows')}</h2>
+      <p>${tx.rich('ds.rls_is', { state: raw(`<strong>${esc(cur.rls ? (cur.forceRls ? tx('ds.rls_on_owner') : tx('ds.rls_on')) : tx('ds.rls_off'))}</strong>`) })}${cur.rls ? '' : `: ${tx('ds.rls_off_detail')}`}.
+        ${tx.rich('ds.rls_how', { props: raw(`<a href="${BASE}/sql/objects/table?${new URLSearchParams({ o: opts.ref })}">${esc(tx('ds.table_properties'))}</a>`), policy: raw(`<a href="${policyUrl}">${esc(tx('ds.add_policy'))}</a>`) })}</p>
+      ${cur.policies.length ? html`<div class="table-wrap"><table class="report"><thead><tr><th>${tx('ds.policy')}</th><th>${tx('ds.command')}</th><th>${tx('ds.roles')}</th><th>Using</th><th>With check</th></tr></thead><tbody>
+        ${cur.policies.map((p) => html`<tr><td>${p.name}${p.permissive === 'RESTRICTIVE' ? html` <span class="badge">${tx('ds.restrictive')}</span>` : ''}</td><td>${p.command}</td><td><code>${p.roles}</code></td><td><code>${p.using ?? ''}</code></td><td><code>${p.check ?? ''}</code></td></tr>`)}</tbody></table></div>`
+        : html`<p class="muted">${cur.rls ? tx('ds.no_policies_rls') : tx('ds.no_policies')}</p>`}
     </section>
-    <section class="ds-section"><h2>${icon('table')} Columns</h2>
-      <p class="muted">What each database role may read and update, per column. A column a role may not read is refused by PostgreSQL whoever sends the query: pages, REST handlers, AutoREST, AI tools, MCP or psql.</p>
+    <section class="ds-section"><h2>${icon('table')} ${tx('ds.columns')}</h2>
+      <p class="muted">${tx('ds.columns_help')}</p>
       ${rows}
     </section>
-    <section class="ds-section"><h2>${icon('eye')} Values</h2>
-      <p class="muted">Masked columns show their value only to the application roles you tick (<code>meta.has_role()</code> of the signed-in user); others see the mask. The masks live in a view next to the table that the roles above read instead of the table.</p>
-      <label class="check"><input type="checkbox" name="view"${chk(v.enabled)}> Masking view</label>
+    <section class="ds-section"><h2>${icon('eye')} ${tx('ds.values')}</h2>
+      <p class="muted">${tx.code('ds.values_help')}</p>
+      <label class="check"><input type="checkbox" name="view"${chk(v.enabled)}> ${tx('ds.masking_view')}</label>
       <div class="form-grid">
-        <div class="field"><label class="label" for="ds-view">View name</label><input id="ds-view" name="view_name" value="${v.name}" autocomplete="off" spellcheck="false"></div>
-        <div class="field"><label class="label" for="ds-roles">Application roles</label><input id="ds-roles" name="roles" value="${v.roles.join(', ')}" autocomplete="off" spellcheck="false">
-          <small class="help">Comma-separated. Changed roles get their column in the table below after Preview SQL.</small></div>
+        <div class="field"><label class="label" for="ds-view">${tx('ds.view_name')}</label><input id="ds-view" name="view_name" value="${v.name}" autocomplete="off" spellcheck="false"></div>
+        <div class="field"><label class="label" for="ds-roles">${tx('ds.app_roles')}</label><input id="ds-roles" name="roles" value="${v.roles.join(', ')}" autocomplete="off" spellcheck="false">
+          <small class="help">${tx('ds.app_roles_help')}</small></div>
       </div>
       ${maskRows}
     </section>
     <section class="ds-section"><h2>${icon('code')} SQL</h2>
       ${opts.warnings.length ? html`<div class="alert alert-warning" role="status"><ul>${opts.warnings.map((w) => html`<li>${w}</li>`)}</ul></div>` : ''}
-      ${opts.sql.length ? html`<pre class="source" data-code-view="sql" tabindex="0" aria-label="SQL">${opts.sql.join(';\n\n')};</pre>` : html`<p class="muted">No changes: the table's security is as the form shows it.</p>`}
+      ${opts.sql.length ? html`<pre class="source" data-code-view="sql" tabindex="0" aria-label="SQL">${opts.sql.join(';\n\n')};</pre>` : html`<p class="muted">${tx('ds.no_changes')}</p>`}
       ${opts.output}
     </section>
     <div class="buttons">
-      <button class="btn" name="mode" value="preview">${icon('eye')} Preview SQL</button>
-      <button class="btn btn-hot" name="mode" value="apply">${icon('check')} Apply</button>
-      <button class="btn" name="mode" value="worksheet">${icon('code')} Open in the worksheet</button>
-      <a class="btn" href="${objUrl}">Cancel</a>
+      <button class="btn" name="mode" value="preview">${icon('eye')} ${tx('ds.preview_sql')}</button>
+      <button class="btn btn-hot" name="mode" value="apply">${icon('check')} ${tx('te.apply')}</button>
+      <button class="btn" name="mode" value="worksheet">${icon('code')} ${tx('te.open_ws')}</button>
+      <a class="btn" href="${objUrl}">${tx('common.cancel')}</a>
     </div></form>`;
 }
 
@@ -139,7 +141,7 @@ async function page(req: Req, reply: FastifyReply) {
     if (!errors.length) ({ statements: sql, warnings } = securitySql(def, cur));
     if (!errors.length && b.mode === 'worksheet') {
       s.state.__SQLDRAFT = sql.length ? `${sql.join(';\n\n')};` : '-- no changes';
-      flash(s, 'Review the statements and run them: nothing has been changed yet.');
+      flash(s, tr(s)('te.review'));
       return back(reply, s, `${BASE}/sql/worksheet`);
     }
     if (!errors.length && b.mode === 'apply' && sql.length) {
@@ -163,16 +165,16 @@ async function page(req: Req, reply: FastifyReply) {
       clearCompletions();
       if (!failed) {
         await recordChanges({ workspaceId: currentWorkspace(s), author: s.username ?? '?', source: 'table', name: `security_${cur.table}`.slice(0, 63), defaultSchema: cur.schema, statements: [joinStatements(sql)] });
-        flash(s, `Changed the security of ${cur.schema}.${cur.table}: ${sql.length} statement${sql.length === 1 ? '' : 's'}.`);
+        flash(s, sql.length === 1 ? tr(s)('ds.changed_1', { table: `${cur.schema}.${cur.table}` }) : tr(s)('ds.changed', { table: `${cur.schema}.${cur.table}`, n: sql.length }));
         return back(reply, s, `${BASE}/sql/objects/security?${new URLSearchParams({ o: ref })}`);
       }
-      output = html`<div class="alert alert-error" role="alert"><p><strong>Nothing was changed</strong>: the statements ran in one transaction, which was rolled back.</p><p>${failed}</p><pre class="source" data-code-view="sql" tabindex="0" aria-label="Failed statement">${at}</pre></div>`;
+      output = html`<div class="alert alert-error" role="alert"><p>${tr(s)('ds.rolled_back')}</p><p>${failed}</p><pre class="source" data-code-view="sql" tabindex="0" aria-label="${tr(s)('ds.failed_statement')}">${at}</pre></div>`;
     }
   }
-  const title = `Security of ${cur.schema}.${cur.table}`;
+  const title = tr(s)('ds.title', { table: `${cur.schema}.${cur.table}` });
   const objUrl = `${BASE}/sql/objects?${new URLSearchParams({ schema: cur.schema, k: 'table', o: ref })}`;
   const main = html`<h1 class="u-mb1">${title}</h1>${workshopTabs('objects', s)}${form(s, cur, def, { ref, sql, warnings, errors, output })}`;
-  return send(reply, s, shell(s, title, [['SQL Workshop', `${BASE}/sql`], ['Object Browser', `${BASE}/sql/objects`], [`${cur.schema}.${cur.table}`, objUrl], ['Security']], main, 'sql'));
+  return send(reply, s, shell(s, title, [[tr(s)('rail.sql_workshop'), `${BASE}/sql`], [tr(s)('sql.tool.objects'), `${BASE}/sql/objects`], [`${cur.schema}.${cur.table}`, objUrl], [tr(s)('ds.security')]], main, 'sql'));
 }
 
 export async function dataSecurityRoutes(app: FastifyInstance) {