pgkiln 0.87.0 → 0.89.0

package/db/migrations/156_pwa_prefetch.sql

@@ -0,0 +1,13 @@
+-- Sprint 168: the whole application offline from the first visit.
+--
+--   pwa_prefetch_hours   with "Keep visited pages on the device" on: after a sign-in (or on the first page
+--                        opened on a device) the service worker fetches every page of the navigation menu and
+--                        navigation bar the user may open, and keeps them for offline use; again when the kept
+--                        copies are older than this many hours. Null: only the pages the user opens.
+--                        Prefetched pages run read-only on the server (routes.ts: X-Pgkiln-Prefetch).
+
+alter table meta.app add column pwa_prefetch_hours integer
+  check (pwa_prefetch_hours between 1 and 168);
+
+comment on column meta.app.pwa_prefetch_hours is
+  'PWA: fetch every navigation page for offline use after sign-in, and again after this many hours (null: off)';

package/docs/apex-feature-parity.md

@@ -7,7 +7,7 @@ open item and open an issue or pull request; see [CONTRIBUTING.md](../CONTRIBUTI
 Legend: ✅ available · 🟡 partial (see notes) · ❌ not yet · ➖ not planned (a deliberate choice,
 or better served by the PostgreSQL ecosystem; see the notes and [extensions](guide/15-extensions.md))
 
-Last reviewed: 2026-11-06 against **APEX 26.2** (sprint 167: hidden items with Value Protected off, default values for an interactive grid's new rows, page items in any region type; sprint 164: every App Builder screen in the eleven builder languages (WS-7 leftover); sprint 165: navigation menu badges from SQL, the notification bell and live badges; sprint 162: the SQL Workshop tools and the region and report settings in the eleven builder languages (CD-8); sprint 161: component events of grids, calendars, maps and trees (CD-3); sprint 160: the Workflow Diagram region, an instance's steps with the reached, current and failed ones marked (CD-7); sprint 159: map layers Lines, Polygons and Extruded Polygons with fill and line styles per layer or per row (CD-6); sprint 158: the item types Image Upload, Text Field with autocomplete, Percent Graph and Display Map (CD-5); sprint 157: the process types Close Dialog, Clear Session State, Reset Pagination, User Preferences, Server Side Geocoding, Print Report, Human Task – Create / – Manage and Form – Initialization (CD-4); sprint 156: dynamic action events double click, key down / press, mouse enter / leave, select, resize, scroll, page unload, before refresh and facets change, greater / less and not-in-list conditions, and the actions Cancel Event, Set Style, Collapse / Expand Tree, Show AI Assistant, Trigger Geocoding and Open report dialog (CD-3); sprint 155: APEX's validation types, with an authorization scheme, Always execute and the error's display location (CD-1); sprint 154: one catalogue of server-side condition types for every component, shown in words in the Page Designer (CD-2); sprint 153: Database users in the eleven builder languages (WS-7 leftover); sprint 152: Workspace utilities, the dashboard, Mail queue, Network access, Instance settings and LDAP directories in the eleven builder languages (WS-7 leftover); sprint 151: vector providers with a model in the database, PostgresML (APEX's ONNX models, AP-1 leftover); sprint 150: remote databases, another PostgreSQL database's tables as foreign tables the applications query (REST Enabled SQL, AP-7 leftover); sprint 149: running workflow instances inside parallel branches migrate to a newer version (WS-6 leftover); sprint 148: the AI assistant streams its answers as the model writes them (WS-4 leftover); sprint 147: `pgkiln advise --offline` checks an export's files without a database (AP-10 leftover); sprint 146: the Advisor checks JSON sources' views against their data profile (AP-8 leftover); sprint 145: the texts that offered AI with "Claude or OpenAI" name all four providers: Claude, OpenAI, Gemini and OpenAI-compatible services (AP-11); sprint 144: `pgkiln advise` for CI with text, JSON and SARIF output (APEXlang static analysis / SQLcl CodeScan), security checks in the Advisor, and working copies and locks from the command line and MCP (the Working Copy APIs) (AP-10); sprint 143: the interactive report's 26.2 dialogs: *is one of* / *is not one of* filters with the column's values and counts, *is between* two values (dates with the date picker in the application's format), relative periods on date columns, and the column order by drag and drop or arrow buttons, followed by downloads and the PDF (AP-9); sprint 142: JSON sources with a data profile and updatable views whose arrays are rows, document views of a table with its children (APEX's duality views), JSON path columns in reports (AP-8); sprint 141: static workspace files (`#WORKSPACE_FILES#`), remote servers for REST data sources, catalogs and AI services (an environment variable per environment), and workspace-level web credentials (AP-7); sprint 140: the items Shuttle (ordered), Select One and Select Many, the regions Classic Report (report templates, pagination types), Breadcrumb and Help Text with a page help text, and a [mapping of every APEX item and region type](#item-and-region-types-one-by-one) (AP-4); sprint 139: OpenTelemetry, traces with a span per SQL statement, web call, AI request and tool call, logs, metrics and `/metrics` for Prometheus, browser spans relayed by pgkiln, per workspace off or its own collector (AP-6); sprint 138: an application's Utilities tab with a dashboard, database object dependencies, change history per component, Upgrade application, UI defaults (APEX's Attribute Dictionary), application and page checksums and an icon browser (AP-5); sprint 137: Create page as a grid of page types with previews, the page types interactive report, smart filters, search page, data loading, tree, timeline, media list, content row, comments, dashboard, wizard, unified task list and workflow console, a Feature tab with nine features that install once, and Create page as copy with shared components mapped or copied (AP-3); sprint 136: vector providers (an AI service with an embedding model or a SQL function), `meta.embed`, *Add vector column* in Table Properties with an HNSW index and a queue that keeps embeddings current, search types vector and hybrid (reciprocal rank fusion with full-text) and a Retrieve (RAG) tool for AI agents, all as the app's role through RLS, on pgvector (AP-1); sprint 135: full-text search configurations, APEX's Oracle Text search type on PostgreSQL full-text search with stemming, ranking, highlights, *Did you mean* and *Add full-text search* in Table Properties (AP-2); sprint 134: the builder also in Italiano, 中文 (简体), 中文 (繁體), 日本語 and 한국어, APEX's ten builder languages plus Nederlands (SEC-5); sprints 121, 123–125: the builder in Deutsch, English, Español, Français, Nederlands and Português, step by step: the frame, sign-in, Workspace home, App Builder, Page Designer menus, the SQL Workshop's home, SQL Worksheet, Object Browser and Table Properties, Shared Components, application settings, users, identity providers, developers and workspaces (WS-7); sprint 122: *Ask in your own words* sets faceted search and smart filter facets, smart filters read a typed phrase (WS-5), and Sample Maps, Sample Approvals, Sample Data Loading and Sample Files in the App Gallery (WS-8); sprint 120: the App Gallery's single-topic sample apps (charts, cards, calendar, interactive grids, dynamic actions, reporting), the UX Pattern Catalog and a Utility Apps tab with Lookup Lists, Release Notes and Announcements (WS-8); sprint 119: data security per table, a roles × columns matrix and masked values per application role in a masking view, the same identity for pages, AI tools, REST, AutoREST and MCP (WS-13); sprint 118: Administration → Mail queue with delivery per hour and per workspace, the slowest provider calls and failures with Retry and Purge, a workspace's own mail service, and workspace network access lists that narrow the installation's allow-list (WS-9); sprint 117: Pillar Light and Pillar Dark navigation appearances with a header strip, clearer navigation tree states, subtle colour utilities, RTL; sprint 116: the comparison moved from 26.1 to 26.2, with a section for the 26.2 workspace items WS-1 … WS-13 and OCI managed identities; the App Builder list with Updated by, working copies and the lock; `pgkiln import --only`, a file-level import; stale rows on facet menus and blueprints fixed; sprint 115: popup LOVs that load on scroll, Wait Popup dynamic actions and dynamic actions on menu entries; sprint 114: Workflow 26.2 with custom task outcomes, task events and notifications, Send E-Mail and draft steps, migrating running instances and the diagram as SVG / PNG; sprint 113: Team Development with issues, labels, milestones, templates, a board and a set-up wizard; sprint 112: AI interactive reports with chips, Undo, computed columns and a phrase parser that needs no AI service; sprint 111: AI Agents with tools as a shared component, a Navigate tool with checksummed URLs, Gemini and OpenAI-compatible services; sprint 110: Data Reporter as a workspace tool with datasets, reporting applications, editors and viewers, published reports with stable URLs and pins; sprint 109: the Workspace home above the App Builder and SQL Workshop, with a summary, top applications, users and developers, and an optional release check; sprint 108: the code editor's syntax colours in the builder's light and dark themes, read-only SQL highlighted, the Data Modeler in dark mode; sprint 107: a transaction mode in the SQL Worksheet with Commit and Rollback; DA-18: JavaScript (MLE) not planned, plv8 where installed; sprint 106: the change log of DDL change sets with Flyway, Liquibase and SQL downloads; sprint 104: RESTful Services modules, templates and handlers with PL/pgSQL and media handlers, privileges, OpenAPI and Try it; sprint 103: Schema Export / Import with pg_dump and pg_restore; sprint 102: the SQL Monitor with live sessions, Top SQL and a statement's plan; sprint 101: Scheduling of pg_cron jobs with a schedule builder, run now and run history; sprint 100: RESTful Services, tables and views published as REST endpoints with paging, filters, keys and OpenAPI; sprint 99: Administration → Database Users for PostgreSQL roles; sprint 98: the Data Modeler with relational diagrams, DDL and a data dictionary; sprint 97: charts of a query in the worksheet, saved charts and their dashboard; sprint 96: the SQL Workshop's Launchpad with pins and tool groups, the builder's search with Ctrl+K; sprint 95: Table Properties: create, edit or copy a table in a form with a DDL preview and Apply in one transaction; sprint 94: an object's menu with Open in a panel, Quick DDL, Add index / trigger / policy and Drop with dependents; sprint 93: worksheets saved as SQL Scripts with tabs and a Files list, Format, Convert case, find and replace, bind and substitution variables; sprint 92: the worksheet's Query Result with sort, value dialog, copy and downloads, plans as a tree with the slowest step and misestimates, SQL History with status, search and run again; sprint 91: the SQL Worksheet like Database Actions' SQL: navigator, Run Statement at the cursor and Run Script with a log per statement, Explain Plan, Autotrace, notices, history, Run as an application role; sprint 90: Comment Out in the page designer, gallery labels in title case; sprint 89: the Object Browser's schema, one row of tabs, blank NULLs, Modify column; sprint 88: home cards with colour bands and round icons, the hero on the page background, a page footer with the version and Back to top; sprint 87: the Create Application wizard reloads the page list for a schema, RLS badges, the alias from the name; sprint 86: the page designer by page number, HTML error pages in the builder; sprint 85: the Form Designer, beyond APEX; sprint 84: the date picker, facet menus; sprint 83: Component Settings and Component Groups; sprint 82: Report Queries; sprint 81: Application Computations and Shortcuts in Shared Components; sprint 80: the master grid's first row selected when the page opens and after a search; grid cells as text with their format mask until edited, with cell navigation by arrow keys, Enter, F2 and Escape; sprint 79: generated dashboards with sums, donuts and lines, leaving out charts that say nothing; applications open in their own light or dark mode until the user chooses, per application; a user menu with Appearance and Sign in when signed out; the developer toolbar's App and Page texts and debug state; the report search's column scope in the magnifier; sprint 78: generated faceted search reports with one column per foreign key, the faceted search's total row count, Show all and Yes/No values, one search field, friendly headings and number formats in generated grids and master-detail pages, friendly names in the Create Application wizard's page list; sprint 77: the Page Designer's layout and tree by display position, button positions, the tree's context menu with Duplicate and Copy to other page, Show Common / Show All, Go to group and the Template Options dialog; display positions, button positions and side-column page templates at runtime; sprint 76: the interactive report's menus and pagination, date items in the date format; sprint 75: the SQL Workshop's Object Browser and tabs; sprint 74: the builder's information architecture: Shared Components grid, Settings tabs, application home search and tasks; sprint 73: the Create Application wizard on one page with page types and features; sprint 72: the runtime chrome compared with APEX 26.2's: the developer toolbar, the Iris look, the navigation bar's Help menu and Install button; sprint 71: generated applications compared with APEX 26.2's: labels, foreign key names in reports, file columns, format masks, the Home page and the dashboard; sprint 70: treemap, sunburst and timeline charts; sprint 69: dragging tasks on a Gantt chart; sprint 68: the Data Reporter's welcome page, Find my workspace; sprint 67: REST source catalogs from OpenAPI documents, a workspace's export and import (two rows added); sprint 66: a blueprint from an existing application; sprint 65: facet charts; sprint 64: approval vacation rules and expiration policies; sprint 63: range, box plot and stock charts; sprint 62: workspace preferences (SQL Workshop and RESTful services per workspace), extension links, Manage backups across applications, SQL Workshop utilities with object reports, About Database and a database monitor; sprint 61: the builder's screens compared with APEX 26.1: the workspace sign-in page, the Administration menu with workspace message, environment banner and utilization, the SQL Workshop home, the App Gallery, application groups and cross application reports (four rows added); sprint 60: isolated workspaces with their own database logins, row-level security on pgkiln's tables and workspace database roles, workspace administrators; sprint 59: the Page Designer's help pane, Quick edit from the developer toolbar; sprint 58: page groups; sprint 57: region templates hero, title bar, buttons container, inline dialog and drawer, wizard with wizard progress, the carousel; sprint 56: Generate DDL and Schema Comparison in the SQL Workshop, `pgkiln ddl` and `pgkiln compare`; sprint 55: an editable login page with a Login region and the Minimal page template, Forgot password through the application's mail service; sprint 54: interactive grid views, the single row view, group by and chart; sprint 53: application settings, user preferences and items kept per user, dynamic translations, `meta.data_export` and data export downloads, display image and geocoded address items; sprint 52: every dynamic action event and action, Ajax callbacks, an error handling function, the session timeout warning; sprint 51: checked imports, application backups, availability and Run only, feedback, type-specific attribute help; sprint 50: lost update detection, warn on unsaved changes, the URL and search regions with search configurations, the developer toolbar with a session state viewer, and e-mail through SMTP with OAuth2, Microsoft Graph, Amazon SES and HTTP APIs; import checks, application availability, property help and e-mail compared again; 2026-10-06: pgkiln 0.31.0, in progress: static application files and the Execute JavaScript dynamic action; region, item, dynamic action and process plug-ins; conditional and dynamic theme styles; XML and Excel in `meta.parse_data`, zips in SQL, `meta.v_boolean`; file items in S3-compatible object storage; map layers by the visible area and as vector tiles; a graphical query builder; tenants for workflows and tasks; application files as YAML and region static IDs; Lucide icons and icon modifiers; PWA push notifications; 0.30.0: 136 icons and an icon picker; an axe-core accessibility audit; cropping pictures; session sharing between applications; twenty-two built-in languages; 0.29.0: workspaces; the Iris base style; drawers; built-in template components including the metric card; Theme Roller dark-mode colours, live preview and template options on items and report columns; report selection across pages; instance settings; fourteen built-in languages; 0.28.0: AI with Claude and OpenAI; 0.27.0: Data Reporter; sample data generator; create application from several sheets, pasted data or existing tables; 0.26.0: working copies with a three-way merge; theme, library and boilerplate applications with subscriptions; 0.25.0: Gantt, pyramid and polar charts; map layers, clustering and server-side spatial filters; REST data sources that write back from forms and grids and synchronise into tables, OAuth2 password and refresh-token grants; debug messages per request and an install/upgrade log; `meta.web_request()` and `meta.parse_data()`; Theme Roller style variants and template options; 0.24.0: automations with several actions, error handling per row and runs from SQL; invoke-API workflow steps; Unload Data in the Data Workshop; create page wizards for cards, calendar, chart, map, faceted search, form and master-detail; create an application from a file; 0.23.0: interactive grid aggregates, frozen/moved/resized columns, layouts and saved grid reports, master-detail, row actions and copy/paste; download processes, execution chains in the background, workflow processes, branches to a function's URL or another app, the Dialog Closed event; number format masks, automatic time zone, runtime messages in German, French and Spanish; SQL scripts, Quick SQL, a query builder, XML loading and data load definitions; custom authentication, lists, page and application locks with developer comments, supporting objects; 0.22.0: keyset paging, report PDFs and REST collections streamed from a cursor, database-account authentication; 0.21.0: HTTP-header authentication behind a reverse proxy; 0.20.0: a popup list of values with server-side search; 0.19.0: row-range pagination, maximum row counts and row limits, lazy loading and caching of regions, streamed CSV/Excel downloads; 0.18.0: calendar week/day/list views with drag and drop, bubble/gauge/funnel/radar charts and drill-down, smart filters, a region display selector and more facet types, computations, conditional branches, build options, menu buttons, REST data sources and web credentials, rich text/Markdown, rating, combobox, date range and QR code items; 0.17.0: an App Builder home, workspace dashboard and utilities like APEX's; 0.16.0: a Page Designer with drag-and-drop layout, a code editor with autocomplete, template components and plug-ins, parallel branches and versions of workflows, the `pgkiln` command line with one file per component; 0.15.0: drop and paste files, heat maps, filtering a report by the map area; 0.14.0: stacked, combo, scatter and pie charts, several files per upload item; 0.13.0: map and tree regions; 0.12.0: REST modules in the builder; 0.11.0: workflows and Progressive Web Apps; 0.10.0: LDAP, SAML, "Keep me signed in", document templates, JSON loading, approvals and the task list; pgkiln installs no application, HR is an example).
+Last reviewed: 2026-11-06 against **APEX 26.2** (sprint 168: every page of the navigation offline from the first visit; sprint 167: hidden items with Value Protected off, default values for an interactive grid's new rows, page items in any region type; sprint 164: every App Builder screen in the eleven builder languages (WS-7 leftover); sprint 165: navigation menu badges from SQL, the notification bell and live badges; sprint 162: the SQL Workshop tools and the region and report settings in the eleven builder languages (CD-8); sprint 161: component events of grids, calendars, maps and trees (CD-3); sprint 160: the Workflow Diagram region, an instance's steps with the reached, current and failed ones marked (CD-7); sprint 159: map layers Lines, Polygons and Extruded Polygons with fill and line styles per layer or per row (CD-6); sprint 158: the item types Image Upload, Text Field with autocomplete, Percent Graph and Display Map (CD-5); sprint 157: the process types Close Dialog, Clear Session State, Reset Pagination, User Preferences, Server Side Geocoding, Print Report, Human Task – Create / – Manage and Form – Initialization (CD-4); sprint 156: dynamic action events double click, key down / press, mouse enter / leave, select, resize, scroll, page unload, before refresh and facets change, greater / less and not-in-list conditions, and the actions Cancel Event, Set Style, Collapse / Expand Tree, Show AI Assistant, Trigger Geocoding and Open report dialog (CD-3); sprint 155: APEX's validation types, with an authorization scheme, Always execute and the error's display location (CD-1); sprint 154: one catalogue of server-side condition types for every component, shown in words in the Page Designer (CD-2); sprint 153: Database users in the eleven builder languages (WS-7 leftover); sprint 152: Workspace utilities, the dashboard, Mail queue, Network access, Instance settings and LDAP directories in the eleven builder languages (WS-7 leftover); sprint 151: vector providers with a model in the database, PostgresML (APEX's ONNX models, AP-1 leftover); sprint 150: remote databases, another PostgreSQL database's tables as foreign tables the applications query (REST Enabled SQL, AP-7 leftover); sprint 149: running workflow instances inside parallel branches migrate to a newer version (WS-6 leftover); sprint 148: the AI assistant streams its answers as the model writes them (WS-4 leftover); sprint 147: `pgkiln advise --offline` checks an export's files without a database (AP-10 leftover); sprint 146: the Advisor checks JSON sources' views against their data profile (AP-8 leftover); sprint 145: the texts that offered AI with "Claude or OpenAI" name all four providers: Claude, OpenAI, Gemini and OpenAI-compatible services (AP-11); sprint 144: `pgkiln advise` for CI with text, JSON and SARIF output (APEXlang static analysis / SQLcl CodeScan), security checks in the Advisor, and working copies and locks from the command line and MCP (the Working Copy APIs) (AP-10); sprint 143: the interactive report's 26.2 dialogs: *is one of* / *is not one of* filters with the column's values and counts, *is between* two values (dates with the date picker in the application's format), relative periods on date columns, and the column order by drag and drop or arrow buttons, followed by downloads and the PDF (AP-9); sprint 142: JSON sources with a data profile and updatable views whose arrays are rows, document views of a table with its children (APEX's duality views), JSON path columns in reports (AP-8); sprint 141: static workspace files (`#WORKSPACE_FILES#`), remote servers for REST data sources, catalogs and AI services (an environment variable per environment), and workspace-level web credentials (AP-7); sprint 140: the items Shuttle (ordered), Select One and Select Many, the regions Classic Report (report templates, pagination types), Breadcrumb and Help Text with a page help text, and a [mapping of every APEX item and region type](#item-and-region-types-one-by-one) (AP-4); sprint 139: OpenTelemetry, traces with a span per SQL statement, web call, AI request and tool call, logs, metrics and `/metrics` for Prometheus, browser spans relayed by pgkiln, per workspace off or its own collector (AP-6); sprint 138: an application's Utilities tab with a dashboard, database object dependencies, change history per component, Upgrade application, UI defaults (APEX's Attribute Dictionary), application and page checksums and an icon browser (AP-5); sprint 137: Create page as a grid of page types with previews, the page types interactive report, smart filters, search page, data loading, tree, timeline, media list, content row, comments, dashboard, wizard, unified task list and workflow console, a Feature tab with nine features that install once, and Create page as copy with shared components mapped or copied (AP-3); sprint 136: vector providers (an AI service with an embedding model or a SQL function), `meta.embed`, *Add vector column* in Table Properties with an HNSW index and a queue that keeps embeddings current, search types vector and hybrid (reciprocal rank fusion with full-text) and a Retrieve (RAG) tool for AI agents, all as the app's role through RLS, on pgvector (AP-1); sprint 135: full-text search configurations, APEX's Oracle Text search type on PostgreSQL full-text search with stemming, ranking, highlights, *Did you mean* and *Add full-text search* in Table Properties (AP-2); sprint 134: the builder also in Italiano, 中文 (简体), 中文 (繁體), 日本語 and 한국어, APEX's ten builder languages plus Nederlands (SEC-5); sprints 121, 123–125: the builder in Deutsch, English, Español, Français, Nederlands and Português, step by step: the frame, sign-in, Workspace home, App Builder, Page Designer menus, the SQL Workshop's home, SQL Worksheet, Object Browser and Table Properties, Shared Components, application settings, users, identity providers, developers and workspaces (WS-7); sprint 122: *Ask in your own words* sets faceted search and smart filter facets, smart filters read a typed phrase (WS-5), and Sample Maps, Sample Approvals, Sample Data Loading and Sample Files in the App Gallery (WS-8); sprint 120: the App Gallery's single-topic sample apps (charts, cards, calendar, interactive grids, dynamic actions, reporting), the UX Pattern Catalog and a Utility Apps tab with Lookup Lists, Release Notes and Announcements (WS-8); sprint 119: data security per table, a roles × columns matrix and masked values per application role in a masking view, the same identity for pages, AI tools, REST, AutoREST and MCP (WS-13); sprint 118: Administration → Mail queue with delivery per hour and per workspace, the slowest provider calls and failures with Retry and Purge, a workspace's own mail service, and workspace network access lists that narrow the installation's allow-list (WS-9); sprint 117: Pillar Light and Pillar Dark navigation appearances with a header strip, clearer navigation tree states, subtle colour utilities, RTL; sprint 116: the comparison moved from 26.1 to 26.2, with a section for the 26.2 workspace items WS-1 … WS-13 and OCI managed identities; the App Builder list with Updated by, working copies and the lock; `pgkiln import --only`, a file-level import; stale rows on facet menus and blueprints fixed; sprint 115: popup LOVs that load on scroll, Wait Popup dynamic actions and dynamic actions on menu entries; sprint 114: Workflow 26.2 with custom task outcomes, task events and notifications, Send E-Mail and draft steps, migrating running instances and the diagram as SVG / PNG; sprint 113: Team Development with issues, labels, milestones, templates, a board and a set-up wizard; sprint 112: AI interactive reports with chips, Undo, computed columns and a phrase parser that needs no AI service; sprint 111: AI Agents with tools as a shared component, a Navigate tool with checksummed URLs, Gemini and OpenAI-compatible services; sprint 110: Data Reporter as a workspace tool with datasets, reporting applications, editors and viewers, published reports with stable URLs and pins; sprint 109: the Workspace home above the App Builder and SQL Workshop, with a summary, top applications, users and developers, and an optional release check; sprint 108: the code editor's syntax colours in the builder's light and dark themes, read-only SQL highlighted, the Data Modeler in dark mode; sprint 107: a transaction mode in the SQL Worksheet with Commit and Rollback; DA-18: JavaScript (MLE) not planned, plv8 where installed; sprint 106: the change log of DDL change sets with Flyway, Liquibase and SQL downloads; sprint 104: RESTful Services modules, templates and handlers with PL/pgSQL and media handlers, privileges, OpenAPI and Try it; sprint 103: Schema Export / Import with pg_dump and pg_restore; sprint 102: the SQL Monitor with live sessions, Top SQL and a statement's plan; sprint 101: Scheduling of pg_cron jobs with a schedule builder, run now and run history; sprint 100: RESTful Services, tables and views published as REST endpoints with paging, filters, keys and OpenAPI; sprint 99: Administration → Database Users for PostgreSQL roles; sprint 98: the Data Modeler with relational diagrams, DDL and a data dictionary; sprint 97: charts of a query in the worksheet, saved charts and their dashboard; sprint 96: the SQL Workshop's Launchpad with pins and tool groups, the builder's search with Ctrl+K; sprint 95: Table Properties: create, edit or copy a table in a form with a DDL preview and Apply in one transaction; sprint 94: an object's menu with Open in a panel, Quick DDL, Add index / trigger / policy and Drop with dependents; sprint 93: worksheets saved as SQL Scripts with tabs and a Files list, Format, Convert case, find and replace, bind and substitution variables; sprint 92: the worksheet's Query Result with sort, value dialog, copy and downloads, plans as a tree with the slowest step and misestimates, SQL History with status, search and run again; sprint 91: the SQL Worksheet like Database Actions' SQL: navigator, Run Statement at the cursor and Run Script with a log per statement, Explain Plan, Autotrace, notices, history, Run as an application role; sprint 90: Comment Out in the page designer, gallery labels in title case; sprint 89: the Object Browser's schema, one row of tabs, blank NULLs, Modify column; sprint 88: home cards with colour bands and round icons, the hero on the page background, a page footer with the version and Back to top; sprint 87: the Create Application wizard reloads the page list for a schema, RLS badges, the alias from the name; sprint 86: the page designer by page number, HTML error pages in the builder; sprint 85: the Form Designer, beyond APEX; sprint 84: the date picker, facet menus; sprint 83: Component Settings and Component Groups; sprint 82: Report Queries; sprint 81: Application Computations and Shortcuts in Shared Components; sprint 80: the master grid's first row selected when the page opens and after a search; grid cells as text with their format mask until edited, with cell navigation by arrow keys, Enter, F2 and Escape; sprint 79: generated dashboards with sums, donuts and lines, leaving out charts that say nothing; applications open in their own light or dark mode until the user chooses, per application; a user menu with Appearance and Sign in when signed out; the developer toolbar's App and Page texts and debug state; the report search's column scope in the magnifier; sprint 78: generated faceted search reports with one column per foreign key, the faceted search's total row count, Show all and Yes/No values, one search field, friendly headings and number formats in generated grids and master-detail pages, friendly names in the Create Application wizard's page list; sprint 77: the Page Designer's layout and tree by display position, button positions, the tree's context menu with Duplicate and Copy to other page, Show Common / Show All, Go to group and the Template Options dialog; display positions, button positions and side-column page templates at runtime; sprint 76: the interactive report's menus and pagination, date items in the date format; sprint 75: the SQL Workshop's Object Browser and tabs; sprint 74: the builder's information architecture: Shared Components grid, Settings tabs, application home search and tasks; sprint 73: the Create Application wizard on one page with page types and features; sprint 72: the runtime chrome compared with APEX 26.2's: the developer toolbar, the Iris look, the navigation bar's Help menu and Install button; sprint 71: generated applications compared with APEX 26.2's: labels, foreign key names in reports, file columns, format masks, the Home page and the dashboard; sprint 70: treemap, sunburst and timeline charts; sprint 69: dragging tasks on a Gantt chart; sprint 68: the Data Reporter's welcome page, Find my workspace; sprint 67: REST source catalogs from OpenAPI documents, a workspace's export and import (two rows added); sprint 66: a blueprint from an existing application; sprint 65: facet charts; sprint 64: approval vacation rules and expiration policies; sprint 63: range, box plot and stock charts; sprint 62: workspace preferences (SQL Workshop and RESTful services per workspace), extension links, Manage backups across applications, SQL Workshop utilities with object reports, About Database and a database monitor; sprint 61: the builder's screens compared with APEX 26.1: the workspace sign-in page, the Administration menu with workspace message, environment banner and utilization, the SQL Workshop home, the App Gallery, application groups and cross application reports (four rows added); sprint 60: isolated workspaces with their own database logins, row-level security on pgkiln's tables and workspace database roles, workspace administrators; sprint 59: the Page Designer's help pane, Quick edit from the developer toolbar; sprint 58: page groups; sprint 57: region templates hero, title bar, buttons container, inline dialog and drawer, wizard with wizard progress, the carousel; sprint 56: Generate DDL and Schema Comparison in the SQL Workshop, `pgkiln ddl` and `pgkiln compare`; sprint 55: an editable login page with a Login region and the Minimal page template, Forgot password through the application's mail service; sprint 54: interactive grid views, the single row view, group by and chart; sprint 53: application settings, user preferences and items kept per user, dynamic translations, `meta.data_export` and data export downloads, display image and geocoded address items; sprint 52: every dynamic action event and action, Ajax callbacks, an error handling function, the session timeout warning; sprint 51: checked imports, application backups, availability and Run only, feedback, type-specific attribute help; sprint 50: lost update detection, warn on unsaved changes, the URL and search regions with search configurations, the developer toolbar with a session state viewer, and e-mail through SMTP with OAuth2, Microsoft Graph, Amazon SES and HTTP APIs; import checks, application availability, property help and e-mail compared again; 2026-10-06: pgkiln 0.31.0, in progress: static application files and the Execute JavaScript dynamic action; region, item, dynamic action and process plug-ins; conditional and dynamic theme styles; XML and Excel in `meta.parse_data`, zips in SQL, `meta.v_boolean`; file items in S3-compatible object storage; map layers by the visible area and as vector tiles; a graphical query builder; tenants for workflows and tasks; application files as YAML and region static IDs; Lucide icons and icon modifiers; PWA push notifications; 0.30.0: 136 icons and an icon picker; an axe-core accessibility audit; cropping pictures; session sharing between applications; twenty-two built-in languages; 0.29.0: workspaces; the Iris base style; drawers; built-in template components including the metric card; Theme Roller dark-mode colours, live preview and template options on items and report columns; report selection across pages; instance settings; fourteen built-in languages; 0.28.0: AI with Claude and OpenAI; 0.27.0: Data Reporter; sample data generator; create application from several sheets, pasted data or existing tables; 0.26.0: working copies with a three-way merge; theme, library and boilerplate applications with subscriptions; 0.25.0: Gantt, pyramid and polar charts; map layers, clustering and server-side spatial filters; REST data sources that write back from forms and grids and synchronise into tables, OAuth2 password and refresh-token grants; debug messages per request and an install/upgrade log; `meta.web_request()` and `meta.parse_data()`; Theme Roller style variants and template options; 0.24.0: automations with several actions, error handling per row and runs from SQL; invoke-API workflow steps; Unload Data in the Data Workshop; create page wizards for cards, calendar, chart, map, faceted search, form and master-detail; create an application from a file; 0.23.0: interactive grid aggregates, frozen/moved/resized columns, layouts and saved grid reports, master-detail, row actions and copy/paste; download processes, execution chains in the background, workflow processes, branches to a function's URL or another app, the Dialog Closed event; number format masks, automatic time zone, runtime messages in German, French and Spanish; SQL scripts, Quick SQL, a query builder, XML loading and data load definitions; custom authentication, lists, page and application locks with developer comments, supporting objects; 0.22.0: keyset paging, report PDFs and REST collections streamed from a cursor, database-account authentication; 0.21.0: HTTP-header authentication behind a reverse proxy; 0.20.0: a popup list of values with server-side search; 0.19.0: row-range pagination, maximum row counts and row limits, lazy loading and caching of regions, streamed CSV/Excel downloads; 0.18.0: calendar week/day/list views with drag and drop, bubble/gauge/funnel/radar charts and drill-down, smart filters, a region display selector and more facet types, computations, conditional branches, build options, menu buttons, REST data sources and web credentials, rich text/Markdown, rating, combobox, date range and QR code items; 0.17.0: an App Builder home, workspace dashboard and utilities like APEX's; 0.16.0: a Page Designer with drag-and-drop layout, a code editor with autocomplete, template components and plug-ins, parallel branches and versions of workflows, the `pgkiln` command line with one file per component; 0.15.0: drop and paste files, heat maps, filtering a report by the map area; 0.14.0: stacked, combo, scatter and pie charts, several files per upload item; 0.13.0: map and tree regions; 0.12.0: REST modules in the builder; 0.11.0: workflows and Progressive Web Apps; 0.10.0: LDAP, SAML, "Keep me signed in", document templates, JSON loading, approvals and the task list; pgkiln installs no application, HR is an example).
 
 ## At a glance
 
@@ -256,7 +256,7 @@ review is a diff. Not counted in [At a glance](#at-a-glance): the rows above com
 | Accessibility | ✅ | Labels, keyboard, focus rings, reduced motion, table alternatives for charts, scrolling tables reachable from the keyboard; an automated WCAG 2.1 A/AA audit (axe-core) of every example page in light, dark and Iris and of the builder's main pages runs in CI with no violations allowed. Not a manual expert audit |
 | Drawers, top/bottom dialogs (26.1) | ✅ | Modal pages open as a centred dialog or as a drawer from the left, right, top or bottom edge, in three sizes, sliding in (without animation for reduced motion); on phones full screen ([chapter 4](guide/04-pages-and-regions.md#dialogs-and-drawers)). Not yet: a footer slot for inline drawers |
 | New "Iris" default style (26.1) | ✅ | Base style **Iris**, the default for new applications, light by default with the user's choice of dark: (sprint 72) like APEX 26's: a white body, a dark warm-grey header with an accent strip and a dark menu, 4 px corners, region headers with a rule, a dark primary button, a large page title; light and dark palettes checked for WCAG AA contrast. The earlier look stays as **Lavender** ([chapter 14](guide/14-globalization.md#base-styles-iris-lavender-and-standard)) |
-| Progressive Web App (push notifications: 23.1) | ✅ | Per app: installable (manifest, icon, standalone), service worker, offline pages (opt-in, wiped at sign-in/out), **forms sent offline queued on the device and sent later** (files included, once only, under the same user), location, camera and barcode items. (0.31) **Push notifications**: users turn them on per device (My account, or the dynamic action `push_subscribe`); `meta.send_push(user, title, body, page, items)` and a `send_push` process queue them, sent after the commit, encrypted for the device (RFC 8291) and signed with the application's own VAPID key (RFC 8292, stored encrypted, never exported); links signed for the recipient; devices end at sign-out, a new password, deactivation or removed access ([chapter 17](guide/17-mobile.md#push-notifications)). No images or action buttons in notifications |
+| Progressive Web App (push notifications: 23.1) | ✅ | Per app: installable (manifest, icon, standalone), service worker, offline pages (opt-in, wiped at sign-in/out), **forms sent offline queued on the device and sent later** (files included, once only, under the same user), location, camera and barcode items. (0.31) **Push notifications**: users turn them on per device (My account, or the dynamic action `push_subscribe`); `meta.send_push(user, title, body, page, items)` and a `send_push` process queue them, sent after the commit, encrypted for the device (RFC 8291) and signed with the application's own VAPID key (RFC 8292, stored encrypted, never exported); links signed for the recipient; devices end at sign-out, a new password, deactivation or removed access ([chapter 17](guide/17-mobile.md#push-notifications)). No images or action buttons in notifications; (168) **every page of the navigation offline** from the first visit (fetched read-only in the background after sign-in, again every N hours), beyond APEX |
 
 ## Globalization
 

package/docs/guide/03-builder.md

@@ -225,9 +225,16 @@ department. Every installation has the **Default** workspace, which holds the ap
 - **New applications** (Create, from a file, pasted data, existing tables, a blueprint) and **imports** go into the
   current workspace; a working copy stays in its main application's workspace. Imports made with the command line
   (`pgkiln import`) go into Default. Exports don't carry the workspace.
-- **Workspace utilities**: tiles for users and sign-in, application groups, the App Gallery, developers, the SQL
-  Workshop, the dashboard, [static workspace files, remote servers and web credentials](#static-workspace-files-remote-servers-and-web-credentials) (and, for administrators, instance settings, workspaces, AI and mail services and the
-  installation), with **Cross Application Reports** in the side column (APEX: Cross Application Reports), each over
+- **Workspace utilities** (the rail's **Administration**, `/builder/utilities`; UX-4): the utilities in sections with a
+  **filter** field at the top: *People and sign-in* (users, developers, identity providers, LDAP directories, password
+  policy), *Connections* ([remote servers, web credentials](#static-workspace-files-remote-servers-and-web-credentials),
+  remote databases, REST source catalogs, mail services; for workspace administrators the mail queue and network
+  access), *Data and AI* (AI services, vector providers, UI defaults, static workspace files, icons), *Operations*
+  (application groups, backups, export and import, the dashboard, OpenTelemetry), the current **workspace** (for its
+  administrators: its page, [workspace message and environment banner](#workspace-message-and-environment-banner),
+  preferences, extension links, [workspace utilization](#workspace-utilization)) and the **instance** (for
+  administrators: instance settings, workspaces, [Database users](#database-users), the installation), then
+  **Cross Application Reports** (APEX: Cross Application Reports), each over
   every application of the current workspace: *Application attributes* (type, sign-in, availability, build status,
   debug level, language, database role), *Build options*, *Developer comments*, *Authentication* (sign-in methods,
   identity providers, LDAP, access, the login page, Forgot password), *Authorization schemes*, *Password items* and
@@ -247,7 +254,7 @@ its developers must not reach other teams' applications or data.
 ### Workspace message and environment banner
 
 Administrators and the workspace's administrators set them on the workspace's page (*Manage service*, or the
-Administration menu → *Workspace message and environment banner*; APEX: Define Workspace Message, Define Environment
+Administration → *Workspace message and environment banner*; APEX: Define Workspace Message, Define Environment
 Banner): a **message** (plain text, up to 2000 characters) shown to the workspace's developers on the
 [Workspace home](#workspace-home) (where they can also edit it in place) and the App Builder home,
 and an **environment banner**: a label of up to 40 characters in one of eight colours, shown at the top of every
@@ -255,7 +262,7 @@ builder page while the workspace is current.
 
 ### Workspace preferences
 
-Administrators and the workspace's administrators set them on the workspace's page (Administration menu →
+Administrators and the workspace's administrators set them on the workspace's page (Administration →
 *Workspace preferences*; APEX: Set Workspace Preferences):
 
 - **Enable the SQL Workshop**: off, every SQL Workshop page (the SQL Worksheet, the Object Browser, SQL scripts, Load and
@@ -349,7 +356,7 @@ says what was added, kept and replaced.
 
 ### Workspace utilization
 
-Administration menu → **Workspace utilization** (`/builder/workspaces/<id>/utilization`; APEX: Workspace
+Administration → **Workspace utilization** (`/builder/workspaces/<id>/utilization`; APEX: Workspace
 Utilization), for administrators and the workspace's administrators: the number of applications, pages, developers,
 page views of the last 30 days and SQL scripts; per application its pages, regions, items, page views, users and the
 size of its static files; and the schemas the workspace's database roles use with their tables and storage.
@@ -462,11 +469,14 @@ longer sign in. Delete a workspace only when it is shared and empty; its logins
 Every builder page has the same frame, modelled on an IDE:
 
 - **The icon rail** on the left: Home (the [Workspace home](#workspace-home); the logo leads there too), App Builder,
-  SQL Workshop, [App Gallery](#app-gallery), [Data Reporter](#data-reporter-datasets-and-reporting-applications), **Search** (on the
-  pages of an application); at the bottom the **Administration** menu (Workspace utilities; for administrators of the
-  current workspace *Manage service*: [workspace message and environment banner](#workspace-message-and-environment-banner),
-  [workspace utilization](#workspace-utilization) and the workspace's page; Manage users and groups, Developers,
-  Monitor activity, [Database users](#database-users) for administrators, Change my password), Help, and your account menu (the circle with your initials) with the
+  SQL Workshop, [App Gallery](#app-gallery), [Data Reporter](#data-reporter-datasets-and-reporting-applications),
+  Team Development and **Administration** (the workspace utilities, below); at the bottom Help, **Show labels** and your
+  account menu (the circle with your initials). (UX-3) The entry of the page you are on is marked, by the page's
+  address (an application's pages under App Builder; users, developers, workspaces, instance settings and the other
+  utilities under Administration). *Show labels* puts each entry's name next to its icon (*Hide labels* takes them
+  away; kept for your session); without them the name shows when you point at an icon or move to it with the
+  keyboard. The search is the field at the top of every page (**Ctrl+K**); an application's own search is its
+  **Search** tab. Your account menu has the
   **builder theme** (*Dark*, the default; *Light*; or *System*, which follows the operating system),
   Change password and Sign out. The theme is remembered on this device, also after signing out;
   it only changes the builder, not your applications.
@@ -548,6 +558,8 @@ names and help of a shared component's form), the links to this guide, and any S
 (sprint 109; APEX: the workspace home page) The page the builder opens after signing in, `/builder/home`, above the
 App Builder and the SQL Workshop. Everything on it is of the current [workspace](#workspaces), and it works without
 JavaScript. The [default-password banner](#signing-in-and-developer-accounts) stays on top until the password is changed.
+(UX-13) For administrators, **Needs attention** under the heading lists what must not wait: failing
+[lockout checks](#lockout-checks) and, with the release check on, a newer pgkiln (details in the System message).
 
 - **Tool cards**: App Builder (`/builder/apps`), SQL Workshop (not when the workspace's preferences turn it off),
   **Data Reporter** (when the server has the Data Reporter tool at `/builder/reporter`) and the [App Gallery](#app-gallery).
@@ -582,12 +594,13 @@ that may not reach the internet. Under the test runner the server never asks Git
 The App Builder's home page, `/builder/apps` (`/builder` shows it too, unless the workspace's
 [preferences](#workspace-preferences) send `/builder` to the Workspace home), is laid out like APEX's App Builder:
 
-- **Four tiles**: **Create** and **Import** (each on its own page), the workspace **Dashboard**
-  (applications, pages, active accounts; page views, users, failed sign-ins and errors of the last
-  24 hours, and per application the last 7 days with a link to its Activity page) and
-  **Workspace Utilities** (users, identity providers, LDAP directories, password policy,
-  developers, the SQL Workshop, and for administrators [workspaces](#workspaces), AI services and the
-  [installation log](#installation)). The list, the dashboard and Recent show the current workspace.
+- **The header** (UX-5): the heading *App Builder*, **Create** (the page's one primary action), **Import** and a
+  **⋯** menu with the workspace **Dashboard** (applications, pages, active accounts; page views, users, failed
+  sign-ins and errors of the last 24 hours, and per application the last 7 days with a link to its Activity page)
+  and **Administration** (the [workspace utilities](#workspaces)). The list, the dashboard and Recent show the
+  current workspace. Every builder page follows the same pattern: one heading, one primary (accent) button,
+  the other actions beside it or in a ⋯ menu; an application's Pages tab has **Create page** as its primary action
+  in the application's header (other tabs: **Run**), and its Tasks list only what the page doesn't offer already.
 - **The applications**, as a report (application id, name, alias, pages, page views of the last 24
   hours, sign-in, last updated, **updated by**, **working copies**, and Edit / Run) or as cards. **Search** filters the list as you type
   (by name, alias or id; without JavaScript, press Enter). Click a column heading, or use
@@ -1072,6 +1085,13 @@ The page designer has three panes, as in APEX's Page Designer. From 1024 pixels
 side by side; on phones and portrait tablets they are tabs (**Tree**, **Layout**, **Properties**):
 choosing a component opens the Properties tab.
 
+(UX-2) From 1024 pixels wide the designer is fixed to the window: only the panes scroll, so the toolbar
+with **Save**, Undo / Redo and the page navigator stays in view, and the property editor's own save button
+stays at the bottom of its pane. **Ctrl+S** (Cmd+S) saves. A change not saved yet puts a dot on Save, and
+leaving the page with one asks first. On a window under 800 pixels high the gallery under the layout is only
+its tabs (*Regions*, *Items*, *Buttons*): choose one to open it, choose the open one to fold it again; the
+designer remembers which you prefer.
+
 - **Left: the component tree**, with four tabs:
   - **Rendering**: the page, *Pre-Rendering* (branches, computations and processes that run
     before the page is shown), the regions by
@@ -1087,7 +1107,8 @@ choosing a component opens the Properties tab.
     application items), linking to Shared Components.
 
   Icons show which components have an authorization scheme, a condition or a build option; type icons are coloured
-  by kind (regions, items, buttons, dynamic actions, processes). Folders open and close
+  by kind (regions, items, buttons, dynamic actions, processes). (UX-12) A component's name comes first: when the
+  pane is narrow its type text is left out (the icon shows the type; hover a component for its name and type). Folders open and close
   with a click; with the keyboard, the arrow keys walk the tree (Left / Right close and open a
   folder), Enter opens a component.
 
@@ -1790,7 +1811,7 @@ sending mailboxes (an application access policy or RBAC for Applications).
 
 ### Mail queue
 
-Administration menu → **Mail queue** (`/builder/mail-queue`; APEX 26.2: Administration → Mail queue): the delivery
+Administration → **Mail queue** (`/builder/mail-queue`; APEX 26.2: Administration → Mail queue): the delivery
 health of the mail queue, for administrators (every workspace, or one) and a workspace's administrators (the current
 workspace's applications only; other developers get 403). Filter by period (24 hours, 48 hours, 7 days), workspace and
 application:
@@ -1835,7 +1856,7 @@ applications off or send them to a collector of their own as well (through the a
 
 ### Network access
 
-Administration menu → **Network access** (`/builder/network`; APEX 26.2: workspace network ACLs), for administrators
+Administration → **Network access** (`/builder/network`; APEX 26.2: workspace network ACLs), for administrators
 (any workspace, `?ws=`) and a workspace's administrators (their workspaces): which web services a workspace's
 applications may call. The installation's list (`PGKILN_REST_ALLOWED_HOSTS`, set in the server's environment, shown
 read-only; the private hosts to administrators only) applies to every workspace. A workspace can choose **Only the
@@ -2121,7 +2142,8 @@ others (Quick SQL, Query Builder, Load and Unload Data, Sample Data, DDL, Compar
 
 (sprint 96; Database Actions: the Launchpad) The home page starts with **Pinned & recently visited**: the pages you
 pinned (a tool, a database object from the Object Browser, a saved worksheet from its file menu; at most 24, per
-workspace) and the SQL Workshop pages you opened last in this browser. Below, the tools are in three tabs,
+workspace) and the SQL Workshop pages you opened last in this browser (UX-14: each page once, the latest visit
+first, without the Launchpad itself or a page that is pinned already). Below, the tools are in three tabs,
 **Development**, **Administration** and **Monitoring**, each with a line about what it does and a pin; the **More**
 menu uses the same headings.
 
@@ -2133,6 +2155,12 @@ the SQL Workshop's connection may use. Without JavaScript the header's field ope
 - **SQL Worksheet** (`/builder/sql/worksheet`, sprint 91; Database Actions: SQL; was SQL Commands, whose address
   `/builder/sql/commands` opens the same page): one screen with a **navigator** on the left, the **editor** with a
   toolbar, **output tabs** below and a **status bar**.
+  - (UX-1) The **toolbar is one row**: the worksheet's file menu, **Run Statement**, **Run Script**, **Explain Plan**
+    and **Autotrace** (icons with their name as a tooltip when the window is narrow), **Suggest** and **Check**, the
+    commit mode, fullscreen and a **⋯ menu** with *Continue on error*, Format, Convert case, Find, Load data, Clear
+    and the keyboard shortcuts. **Run as** is in the status bar (its tooltip says who the statements run as).
+    The editor takes about half of the window and the output the other half (drag the splitter; the size is
+    remembered); before the first run the output is only its row of tabs, and choosing a tab opens it.
   - The navigator has a schema (the same one as the Object Browser), an object type (*All Objects*, tables, views,
     materialized views, indexes, sequences, types, functions, procedures, triggers, policies) and a search field.
     A table or view opens to its columns with their types (a key marks the primary key); drag it into the editor
@@ -2217,11 +2245,11 @@ the SQL Workshop's connection may use. Without JavaScript the header's field ope
     remembered for the session; the history and the log keep the statement as written.
   - **Format** (**Ctrl + F7**) lays out the selection or the whole worksheet: a clause per line, the columns of a select
     list and the conditions of a WHERE one per line, joins and subqueries indented, keywords in lower or UPPER case
-    (chosen in the **?** menu). Strings, comments and `$$` bodies stay as they are. **Convert case** (**Ctrl + B**)
+    (chosen in the **⋯** menu). Strings, comments and `$$` bodies stay as they are. **Convert case** (**Ctrl + B**)
     cycles the selection (or the word at the cursor) through UPPER, lower and Initial caps. **Find and replace**
     (**Ctrl + F**, **Ctrl + H**) with a regular expression or exact case, **Go to line** (**Ctrl + G**), and
-    **Ctrl + /** comments the selected lines out or in. The **?** menu lists every key; **F1** opens this help. The
-    upload button opens Load Data for the navigator's schema.
+    **Ctrl + /** comments the selected lines out or in. The **⋯** menu lists every key; **F1** opens this help.
+    *Load data* in the same menu opens Load Data for the navigator's schema.
   - Each statement commits on its own (**Autocommit**, like Database Actions). Statements run as the **owner connection** (an isolated workspace's
     developer login for its developers), on a connection of their own that is closed afterwards, so `SET ROLE` or
     `SET search_path` doesn't leak. **Run as** picks an application of your workspace instead: the statements then
@@ -2414,7 +2442,7 @@ the SQL Workshop's connection may use. Without JavaScript the header's field ope
     connections, memory, row security), the installed extensions and the schemas with their size.
   - **SQL Monitor** (administrators only): see [SQL Monitor](#sql-monitor) below (it replaced the Database Monitor;
     the old address `/builder/sql/utilities/monitor` redirects).
-  - **Database Users** (administrators only; Administration menu → *Database users*, `/builder/db-users`; sprint 99,
+  - **Database Users** (administrators only; Administration → *Database users*, `/builder/db-users`; sprint 99,
     Database Actions: Database Users): see [Database users](#database-users).
   - **Schema Export / Import** (administrators only; `/builder/sql/data-pump`; sprint 103, Database Actions: Data
     Pump): see [Schema export and import](#schema-export-and-import).

package/docs/guide/09-reference.md

@@ -525,7 +525,7 @@ navigation entries and application processes have the same `build_option` column
 | Table | Contents | Readable by the runtime role |
 |---|---|---|
 | `session` | Sessions: `token_hash` (SHA-256 of the cookie), `app_id` (NULL = builder), `username`, `roles` (resolved at sign-in), `csrf_token`, `state` (jsonb session state), `created_at`, `last_seen` | yes |
-| `activity_log` | `at`, `app_id`, `page_no`, `username`, `event` (`page_view`, `login`, `login_failed`, `login_locked`, `login_unlocked`, `logout`, `error`, `forbidden`, `api_token`, `password_expired`, `password_changed`; builder: `lock_broken`, `supporting_objects`, `sample_data`, …), `ip`, `elapsed_ms`, `detail` | yes (insert/select) |
+| `activity_log` | `at`, `app_id`, `page_no`, `username`, `event` (`page_view`, `page_prefetch` (168: a page fetched for offline use), `login`, `login_failed`, `login_locked`, `login_unlocked`, `logout`, `error`, `forbidden`, `api_token`, `password_expired`, `password_changed`; builder: `lock_broken`, `supporting_objects`, `sample_data`, …), `ip`, `elapsed_ms`, `detail` | yes (insert/select) |
 | `debug_view` | [Debug messages](06-processing.md#debug-messages): one row per recorded request: `app_id`, `page_no`, `username`, `session_id`, `method`, `path` (without the query string), `status`, `level`, `started_at`, `elapsed_ms`, `entries`. Written through `meta.debug_save()` (runtime role only), not exported | no |
 | `debug_message` | The entries of a recorded request: `view_id`, `seq`, `elapsed_ms` (since the start), `duration_ms` (timed steps), `level`, `component`, `message` | no |
 | `web_request_log` | [Web requests from SQL](#web-requests-from-sql): `app_id`, `status`, the request (`url` or `source` + `params`, `method`, `headers`, `body`, `credential` name, `timeout_s`), `requested_by`, times, the response (`status_code`, `response_url`, `response_headers`, `response_body`), `message`. Kept 24 hours, not exported | no (through `meta.web_response`) |

package/docs/guide/17-mobile.md

@@ -13,6 +13,7 @@ the home screen with its own icon, full screen, and working on when the network
 | Installable | Adds a web app manifest and a service worker to the application. Phones offer "Add to home screen" / "Install"; the app then opens full screen, without the browser bar. (0.42) Where the browser offers the installation (Chrome, Edge), the header shows an **Install app** button (APEX: the navigation bar's Install App entry) |
 | Name under the icon | The short name on the home screen (the application's name when empty) |
 | Keep visited pages on the device | Pages a user opened are shown again when there is no connection (with a notice that they may be out of date) |
+| Make every page of the navigation available offline | (168) With *Keep visited pages* on: after signing in, the device also fetches every page of the navigation menu and navigation bar the user may open, so the whole app works offline from the first visit; fetched again after *Fetch them again after* hours (1–168, default 12). [Below](#every-page-offline) |
 | Keep forms sent without a connection | Forms submitted offline are kept on the device and sent when the connection is back |
 | Push notifications | Users may turn on notifications per device; application code sends them ([below](#push-notifications)) |
 | Icon | A square PNG of at least 512 × 512 pixels. Without one, the app gets a tile with its initial in the theme's accent colour |
@@ -35,9 +36,38 @@ Everything is per application, under its own address: `/a/<alias>/manifest.webma
   listing the pages that are on the device.
 - Kept pages contain the user's data. They stay on the device only while the user is signed in:
   signing in or out removes them, so the next person on a shared device doesn't see them.
-- Live data (reports, charts) is as fresh as the last visit. Actions that need the server (searching,
+- Live data (reports, charts) is as fresh as the last visit (or the last fetch, below). Actions that need the server (searching,
   downloads, dynamic actions) wait for the connection.
 
+## Every page offline
+
+(168) With *Make every page of the navigation available offline*, a user doesn't have to open every page
+once before going out of range:
+
+1. On the first page after signing in (and on the first page opened on a device), the page hands the
+   links of its **navigation menu and navigation bar** to the service worker. Those are exactly the pages
+   the server showed this user: authorization schemes, conditions and page access already applied. Dialog
+   pages, other sites and the sign-in and sign-out pages are left out; at most 60 pages are fetched.
+2. The service worker fetches them **one at a time** in the background, with a short pause between
+   them, and keeps each page that comes back. It skips the whole thing when the browser asks to save
+   data (*Data Saver*), and stops at the first network error, to try again on the next page.
+3. When it is done it notes the time; after *Fetch them again after* hours (default 12) the next page
+   opened online starts a new round. Signing in or out empties the kept pages, so the next person
+   starts over.
+
+The server shows a fetched page **read-only** (the request carries `X-Pgkiln-Prefetch: 1`):
+
+- the page's transaction is read-only: an application process or a region query that writes fails
+  (the region shows its error in the kept copy) and nothing is changed;
+- the session's state is not kept, and a message waiting for the next page stays there;
+- a page with a process that runs when it opens (point *On load*) is not fetched at all: it is kept
+  only when the user opens it, as before. So are dialogs, documents and downloads;
+- each fetch is logged as `page_prefetch`, apart from `page_view`, so activity reports count real visits.
+
+Only the pages of the menus are fetched, with their first page of rows: a form for one record
+(`?P3_ID=…`) or a report's other pages are kept only once the user opens them. The kept copies hold
+the user's data, like visited pages: turn it on for apps used on devices that belong to one person.
+
 ## Forms sent offline
 
 With *Keep forms sent without a connection* on, a form submitted while the network is down (or
@@ -127,9 +157,10 @@ results, and a *Send test* button.
 
 ## Example
 
-The HR example application is a PWA: install it from the browser menu on a phone, open a few pages,
-switch on airplane mode, and file a leave request; it is sent when the connection is back. Its
-employee form records a work location and takes the photo with the camera (`examples/hr/hr_12_pwa.sql`).
+The HR example application is a PWA: install it from the browser menu on a phone, sign in, wait a few
+seconds, switch on airplane mode, and every page of the menu still opens (`examples/hr/hr_82_pwa_prefetch.sql`);
+file a leave request, and it is sent when the connection is back. Its employee form records a work location
+and takes the photo with the camera (`examples/hr/hr_12_pwa.sql`).
 
 ## Not included
 

package/examples/hr/hr_82_pwa_prefetch.sql

@@ -0,0 +1,11 @@
+-- =====================================================================
+-- HR example, part 82: the whole app offline from the first visit
+-- (docs/guide/17-mobile.md, sprint 168)
+--
+-- After signing in on a phone, every page of the navigation menu the
+-- user may open is fetched in the background and kept on the device, so
+-- the app works on the train even for pages never opened before; the
+-- copies are fetched again after 12 hours. Pages that run processes when
+-- they open (20, 35, 43) are kept only when the user opens them.
+-- =====================================================================
+update meta.app set pwa_prefetch_hours = 12 where alias = 'hr';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pgkiln",
-  "version": "0.87.0",
+  "version": "0.89.0",
   "description": "Open source low-code, SQL-driven application builder for PostgreSQL, inspired by Oracle APEX",
   "keywords": [
     "postgresql",

package/public/app.js

@@ -2972,6 +2972,17 @@ const liveBadges = (() => {
       if (e.data && e.data.type === 'pgkiln:pushed') liveBadges.now();
     });
     if (new URLSearchParams(location.search).get('queued') === '1') note(t('pwa.queued'));
+    // (168) every page of the navigation offline: this page and the menu's and navigation bar's pages of the app
+    // (the server already left out the ones this user may not open; dialogs and other sites are not pages to keep)
+    if (body.dataset.prefetch && navigator.onLine && !(navigator.connection && navigator.connection.saveData)) {
+      const links = [...document.querySelectorAll('#t-nav a[href], .t-navbar a[href]')].filter((a) => !a.hasAttribute('data-dialog'));
+      const urls = [location.href, ...links.map((a) => a.href)].filter((h) => {
+        const u = new URL(h, location.href);
+        return u.origin === location.origin && u.pathname.startsWith(`${body.dataset.base}/`) && !/\/(login|logout)$/.test(u.pathname);
+      });
+      // a page without the navigation (the sign-in page, a dialog) has nothing to hand over
+      if (links.length) post({ type: 'pgkiln:prefetch', urls: [...new Set(urls)] });
+    }
   }
 
   // (165) live badges: every data-live seconds the page asks for its badges (navigation menu and bar,

package/public/builder.css

@@ -444,7 +444,9 @@ body.ide {
   .pd > .tab-panel > .pd-pane-title { display: none; }
   /* with script the designer fills the window and each pane scrolls on its own */
   .js .ide-full .ide-main { height: 100vh; height: 100dvh; display: flex; flex-direction: column; }
-  .js .ide-full .ide-work { flex: 1 1 auto; min-height: 0; }
+  /* (UX-2) the work area is the containing block and clips: nothing inside (a screen-reader heading placed
+     absolutely, a pane's overflow) can make the page itself scroll */
+  .js .ide-full .ide-work { flex: 1 1 auto; min-height: 0; position: relative; overflow: hidden; }
   .js .ide-full .pd { height: 100%; min-height: 0; }
   .js .pd-pane { min-height: 0; overflow: auto; }
   .js .pd-center { display: flex; flex-direction: column; overflow: hidden; }
@@ -484,8 +486,9 @@ body.ide {
 }
 .pd-node .icon { width: 16px; height: 16px; color: var(--muted); }
 a.pd-node:hover { background: var(--surface-3); }
-.pd-label { min-width: 0; overflow: hidden; text-overflow: ellipsis; }
-.pd-note { margin-left: auto; padding-left: 8px; max-width: 45%; overflow: hidden; text-overflow: ellipsis; color: var(--muted); font-size: 11.5px; }
+/* (UX-12) the name keeps its room: the type gives way first (the icon tells it, the tooltip names it) */
+.pd-label { min-width: 0; overflow: hidden; text-overflow: ellipsis; flex: 0 1 auto; }
+.pd-note { margin-left: auto; padding-left: 8px; max-width: 45%; min-width: 0; flex: 0 1000 auto; overflow: hidden; text-overflow: clip; white-space: nowrap; color: var(--muted); font-size: 11.5px; }
 .pd-folder { color: var(--muted); font-weight: 600; cursor: default; }
 .pd-tag { display: inline-flex; }
 .pd-tag .icon { width: 13px; height: 13px; color: var(--warn); }
@@ -1671,3 +1674,54 @@ a.cp-type:hover, a.cp-type:focus-visible { border-color: var(--accent); }
 .api-client-actions select { width: auto; min-height: 0; padding-block: 0.2rem; font-size: 0.8125rem; }
 .api-client-actions .inline-form { display: flex; gap: 6px; align-items: center; }
 .api-clients td.actions { text-align: end; }
+
+/* (UX-2) Page Designer on a short window: the gallery folded to its tabs (builder.js), Save at hand */
+@media (min-width: 1024px) {
+  .js .pd-gallery.is-folded { height: auto; min-height: 0; overflow: hidden; }
+  .js .pd-gallery.is-folded .tab-panel { display: none; }
+}
+.tb-save.is-dirty { position: relative; }
+.tb-save.is-dirty::after { content: ""; position: absolute; top: 3px; right: 3px; width: 7px; height: 7px; border-radius: 50%; background: var(--hot); }
+#pd-p-props .component-form > .buttons { position: sticky; bottom: 0; z-index: 1; margin: 0; padding: 8px 0; background: var(--surface); border-top: 1px solid var(--border); }
+.pd-note.is-cut { display: none; }
+
+/* (UX-3) the rail with labels next to its icons (the toggle at its bottom, kept in the session) */
+.rail-toggle { width: 100%; border: 0; background: none; cursor: pointer; font: inherit; }
+@media (min-width: 900px) {
+  .ide.rail-labels { --rail-w: 196px; }
+  .rail-labels .rail-list { padding: 0 10px; }
+  .rail-labels .rail-link { display: flex; justify-content: flex-start; gap: 12px; padding: 0 12px; }
+  .rail-labels .rail-link .rail-label { position: static; opacity: 1; transform: none; padding: 0; background: none; color: inherit;
+    box-shadow: none; font-size: 13.5px; font-weight: 500; pointer-events: auto; }
+  .rail-labels .rail-logo { margin-left: 18px; }
+  .rail-labels .rail-user { justify-content: flex-start; padding-left: 14px; }
+}
+
+/* (UX-4) Administration: the workspace utilities in sections of compact tiles, with a filter (builder.js) */
+.adm { max-width: 1180px; }
+.adm .title-row { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 12px; }
+.adm-filter input { width: min(320px, 100%); }
+.adm-lede { max-width: 75ch; }
+.adm-section { margin-top: 22px; }
+.adm-section h2 { font-size: 15px; margin: 0 0 8px; color: var(--text-2, var(--muted)); text-transform: none; }
+.adm-tiles { list-style: none; margin: 0; padding: 0; display: grid; grid-template-columns: repeat(auto-fill, minmax(min(100%, 250px), 1fr)); gap: 8px; }
+.adm-tile { display: flex; flex-direction: column; gap: 2px; height: 100%; padding: 10px 12px; border: 1px solid var(--border); border-radius: var(--radius);
+  background: var(--surface); color: var(--text); text-decoration: none; transition: border-color var(--dur) var(--ease), background-color var(--dur) var(--ease); }
+.adm-tile:hover, .adm-tile:focus-visible { border-color: var(--hot); background: var(--surface-2); }
+.adm-tile-head { display: flex; align-items: center; gap: 8px; }
+.adm-tile-head .icon { width: 16px; height: 16px; color: var(--hot); flex: none; }
+.adm-tile-text { color: var(--muted); font-size: 12.5px; line-height: 1.4; }
+.adm-reports { columns: 2 260px; }
+
+/* (UX-5) a builder page's header: one heading, one primary (accent) action, secondary actions and a ⋯ menu */
+.page-head { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 10px 16px; margin: 0 0 16px; }
+.page-head h1 { margin: 0; font-size: 22px; }
+.page-head-sub { margin: 2px 0 0; }
+.page-head-actions { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+.page-head-actions .btn { display: inline-flex; align-items: center; gap: 6px; }
+.page-head-actions .icon { width: 15px; height: 15px; }
+/* (UX-13) the Workspace home's "Needs attention" list for administrators, above the tools */
+.wh-attention { display: block; margin: 0 0 16px; }
+.wh-attention h2 { margin: 0 0 4px; font-size: 14px; }
+.wh-attention ul { list-style: none; margin: 0; padding: 0; display: grid; gap: 4px; }
+.wh-attention .icon { width: 15px; height: 15px; vertical-align: -2px; }

package/public/builder.js

@@ -508,6 +508,38 @@
       const dirty = () => save.classList.add('is-dirty');
       form.addEventListener('input', dirty);
       form.addEventListener('change', dirty);
+      // (UX-2) Ctrl+S saves; leaving with unsaved changes asks first (saving doesn't)
+      let submitting = false;
+      form.addEventListener('submit', () => (submitting = true));
+      document.addEventListener('keydown', (e) => {
+        if ((e.ctrlKey || e.metaKey) && !e.altKey && e.key.toLowerCase() === 's' && !e.target.closest?.('.ws, dialog')) {
+          e.preventDefault();
+          form.requestSubmit();
+        }
+      });
+      window.addEventListener('beforeunload', (e) => {
+        if (!submitting && save.classList.contains('is-dirty')) {
+          e.preventDefault();
+          e.returnValue = '';
+        }
+      });
+    }
+    // (UX-2) on a short window the gallery is only its tabs: choosing a tab opens it, choosing the open one folds it
+    const gallery = document.querySelector('.pd-gallery');
+    if (gallery) {
+      const short = window.matchMedia('(max-height: 800px)');
+      const apply = () => gallery.classList.toggle('is-folded', short.matches && store.get('gallery') !== 'open');
+      apply();
+      short.addEventListener('change', apply);
+      gallery.addEventListener('click', (e) => {
+        const t = e.target.closest('[role=tab]');
+        if (!t || !short.matches) return;
+        const folded = gallery.classList.contains('is-folded');
+        const wasActive = t.getAttribute('aria-selected') === 'true';
+        const open = folded || !wasActive;
+        store.set('gallery', open ? 'open' : null);
+        gallery.classList.toggle('is-folded', !open);
+      }, true); // before the tabs switch, so the tab that was open is known
     }
   }
 
@@ -1011,7 +1043,41 @@
     setupQueryCanvas();
     setupThemePreview();
     setupTabs();
+    // (UX-4) Administration: filter the utilities by their text; sections without a match hide
+    const admQ = document.querySelector('[data-adm-filter]');
+    if (admQ) {
+      admQ.closest('.adm-filter').hidden = false;
+      const page = admQ.closest('.adm');
+      const none = page.querySelector('.adm-none');
+      admQ.addEventListener('input', () => {
+        const q = admQ.value.trim().toLowerCase();
+        let any = false;
+        for (const sec of page.querySelectorAll('.adm-section')) {
+          let shown = 0;
+          for (const li of sec.querySelectorAll('li')) {
+            const hit = !q || li.textContent.toLowerCase().includes(q);
+            li.hidden = !hit;
+            if (hit) shown++;
+          }
+          sec.hidden = !shown;
+          if (shown) any = true;
+        }
+        none.hidden = any;
+      });
+    }
     for (const tree of document.querySelectorAll('.pd-tree')) setupTree(tree);
+    // (UX-12) a node's type text only when it fits whole: the name comes first (the icon and tooltip tell the type)
+    const fitNotes = () => {
+      for (const n of document.querySelectorAll('.pd-tree .pd-note')) {
+        n.classList.remove('is-cut');
+        if (n.scrollWidth > n.clientWidth + 1) n.classList.add('is-cut');
+      }
+    };
+    fitNotes();
+    if ('ResizeObserver' in window) {
+      const pane = document.querySelector('.pd-tree')?.closest('.pd-pane');
+      if (pane) new ResizeObserver(() => requestAnimationFrame(fitNotes)).observe(pane);
+    }
     for (const tree of document.querySelectorAll('.pd-tree[data-tree-menu]')) setupTreeMenu(tree);
     setupProperties();
     setupCanvas();

package/public/palette.js

@@ -18,15 +18,22 @@
   if (/^\/builder\/sql\/./.test(path) && !/\/(panel|navigator|action)$/.test(path)) {
     const title = document.title.replace(/ · Builder$/, '');
     const href = path + location.search;
-    const list = (store.get('sw.recent') || []).filter((r) => r && r.href !== href);
+    // (UX-14) one entry per page (its path): opened again with other parameters, the newest wins
+    const list = (store.get('sw.recent') || []).filter((r) => r && typeof r.href === 'string' && r.href.split('?')[0] !== path);
     list.unshift({ href, title });
     store.set('sw.recent', list.slice(0, 8));
   }
   const recent = document.querySelector('[data-lp-recent]');
   if (recent) {
     const list = store.get('sw.recent') || [];
+    // (UX-14) not the page you are on, not what is pinned already, each path once
+    const pinned = new Set([...document.querySelectorAll('.lp-pins .lp-chips:not([data-lp-recent]) a[href]')].map((a) => a.getAttribute('href').split('?')[0]));
+    const seen = new Set([path]);
     for (const r of list) {
       if (typeof r?.href !== 'string' || !r.href.startsWith('/builder/')) continue;
+      const p = r.href.split('?')[0];
+      if (seen.has(p) || pinned.has(p)) continue;
+      seen.add(p);
       const li = document.createElement('li');
       const a = document.createElement('a');
       a.href = r.href;