@isaijs/core 0.1.0 → 0.1.1

package/dist/adapters/cache/cloudflare-kv/index.d.ts

@@ -1,4 +1,4 @@
-import { r as Cache } from "../../../index-BKwTOLop.js";
+import { r as Cache } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/cache/cloudflare-kv/index.d.ts
 /** The parts of a KV binding this cache uses. */
 export interface KvBinding {

package/dist/adapters/database/d1/index.d.ts

@@ -1,4 +1,4 @@
-import { a as DatabaseDriver, f as Row } from "../../../index-BKwTOLop.js";
+import { a as DatabaseDriver, f as Row } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/database/d1/index.d.ts
 /** The parts of a D1 prepared statement this driver uses. */
 export interface D1Statement {

package/dist/adapters/database/durable-object/index.d.ts

@@ -1,4 +1,4 @@
-import { a as DatabaseDriver, b as TenantDatabases, f as Row } from "../../../index-BKwTOLop.js";
+import { a as DatabaseDriver, b as TenantDatabases, f as Row } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/database/durable-object/index.d.ts
 /** The parts of `ctx.storage` this driver uses (structurally compatible with `wrangler types`). */
 export interface DurableObjectStorageBinding {

package/dist/adapters/database/sqlite-node/index.d.ts

@@ -1,4 +1,4 @@
-import { a as DatabaseDriver } from "../../../index-BKwTOLop.js";
+import { a as DatabaseDriver } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/database/sqlite-node/index.d.ts
 export interface SqliteNodeDriver extends DatabaseDriver {
   close(): void;

package/dist/adapters/mail/gmail/index.d.ts

@@ -1,4 +1,4 @@
-import { s as MailDriver } from "../../../index-BKwTOLop.js";
+import { s as MailDriver } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/mail/gmail/index.d.ts
 export interface GmailOptions {
   readonly clientId: string;

package/dist/adapters/pdf/cloudflare-browser/index.d.ts

@@ -1,4 +1,4 @@
-import { l as PdfRenderer } from "../../../index-BKwTOLop.js";
+import { l as PdfRenderer } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/pdf/cloudflare-browser/index.d.ts
 /** A Browser Rendering binding (opaque here; used through @cloudflare/puppeteer). */
 export type BrowserBinding = object;

package/dist/adapters/queue/cloudflare/index.d.ts

@@ -1,4 +1,4 @@
-import { u as Queue } from "../../../index-BKwTOLop.js";
+import { u as Queue } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/queue/cloudflare/index.d.ts
 /** The parts of a Queues producer binding this queue uses. */
 export interface QueueBinding {

package/dist/adapters/ratelimit/cloudflare/index.d.ts

@@ -1,4 +1,4 @@
-import { d as RateLimiter } from "../../../index-BKwTOLop.js";
+import { d as RateLimiter } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/ratelimit/cloudflare/index.d.ts
 /** The part of a Rate Limiting binding this uses. */
 export interface RateLimitBinding {

package/dist/adapters/ratelimit/memory/index.d.ts

@@ -1,4 +1,4 @@
-import { d as RateLimiter } from "../../../index-BKwTOLop.js";
+import { d as RateLimiter } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/ratelimit/memory/index.d.ts
 export interface MemoryRateLimitOptions {
   /** Requests a key may make in a window. */

package/dist/adapters/runtime/cloudflare/index.d.ts

@@ -1,4 +1,4 @@
-import { f as Row, m as ServiceRef, p as Runtime, v as TaskMessage } from "../../../index-BKwTOLop.js";
+import { f as Row, m as ServiceRef, p as Runtime, v as TaskMessage } from "../../../index-Ce5p2-EB.js";
 import { DurableObject } from "cloudflare:workers";
 //#region src/adapters/runtime/cloudflare/index.d.ts
 /** The parts of the Workers platform this runtime uses (structurally compatible with `wrangler types`). */

package/dist/adapters/runtime/cloudflare/index.js

@@ -11,7 +11,7 @@ import { DurableObject } from "cloudflare:workers";
 *
 * With isolated tenancy, `Tenant` is the Durable Object class each tenant lives in: it opens the
 * tenant from its own storage, migrates it before any request (`blockConcurrencyWhile`), and
-* handles what the front door forwards to it over RPC (planning/tenancy.md).
+* handles what the front door forwards to it over RPC.
 */
 /**
 * One failing task never holds back the rest of its batch: each message is acked on

package/dist/adapters/storage/disk/index.d.ts

@@ -1,4 +1,4 @@
-import { g as Storage } from "../../../index-BKwTOLop.js";
+import { g as Storage } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/storage/disk/index.d.ts
 export interface DiskStorageOptions {
   /** The folder files are kept in, made when missing. */

package/dist/adapters/storage/memory/index.d.ts

@@ -1,4 +1,4 @@
-import { g as Storage } from "../../../index-BKwTOLop.js";
+import { g as Storage } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/storage/memory/index.d.ts
 export interface MemoryStorageOptions {
   /** Where its files would be served from, to make it a public storage. */

package/dist/adapters/storage/r2/index.d.ts

@@ -1,4 +1,4 @@
-import { g as Storage } from "../../../index-BKwTOLop.js";
+import { g as Storage } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/storage/r2/index.d.ts
 /** The parts of an R2 binding this storage uses. */
 export interface R2Binding {

package/dist/auth/index.d.ts

@@ -1,3 +1,3 @@
-import { r as AuthTablesOptions } from "../data-layer-BMviRJaW.js";
-import { A as Permissions, F as DefinePolicy, I as Perms, L as Policy, N as AnyPolicy, P as Bound, R as Rules, a as OAuthMethod, c as Roles, i as Methods, l as SignInMethod, n as AuthConfig, o as Provider, r as AuthDefinition, s as RoleDefinition, t as Auth, u as createAuth, z as StandardAction } from "../index-CBWFoL3s.js";
+import { r as AuthTablesOptions } from "../data-layer-ubPfZvFV.js";
+import { A as Permissions, F as DefinePolicy, I as Perms, L as Policy, N as AnyPolicy, P as Bound, R as Rules, a as OAuthMethod, c as Roles, i as Methods, l as SignInMethod, n as AuthConfig, o as Provider, r as AuthDefinition, s as RoleDefinition, t as Auth, u as createAuth, z as StandardAction } from "../index-B6ipokoP.js";
 export { type AnyPolicy, Auth, type AuthConfig, type AuthDefinition, type AuthTablesOptions, type Bound, type DefinePolicy, type Methods, type OAuthMethod, type Permissions, type Perms, Policy, type Provider, type RoleDefinition, type Roles, type Rules, type SignInMethod, type StandardAction, createAuth };

package/dist/auth/index.js

@@ -1,3 +1,3 @@
-import { t as Policy } from "../policies-yVzFCjxU.js";
-import { a as createAuth, t as Auth } from "../create-auth-Byf1-VJw.js";
+import { t as Policy } from "../policies-pFzslmSB.js";
+import { a as createAuth, t as Auth } from "../create-auth-y8E8cxkn.js";
 export { Auth, Policy, createAuth };

package/dist/{base64url-DwWPqoOT.js → base64url-K_wCmvxR.js}

@@ -1,4 +1,4 @@
-import { A as flag, C as textKind, D as date, E as choice, F as sequence, L as list, M as int, N as money, O as datetime, P as quantity, S as text, T as url, U as kind, _ as personName, b as slugify, c as images, d as urls, f as email, g as newToken, h as markdown, i as file, j as id, k as fakeUlid, l as define, m as line, n as phoneKind, o as files, s as image, u as json, v as secret, w as token, x as subdomain, y as slug } from "./validation-l5JG-PFn.js";
+import { A as flag, C as textKind, D as date, E as choice, F as sequence, L as list, M as int, N as money, O as datetime, P as quantity, S as text, T as url, U as kind, _ as personName, b as slugify, c as images, d as urls, f as email, g as newToken, h as markdown, i as file, j as id, k as fakeUlid, l as define, m as line, n as phoneKind, o as files, s as image, u as json, v as secret, w as token, x as subdomain, y as slug } from "./validation-FyOpSZqE.js";
 import { n as snakeCase } from "./case-BnpcvhdW.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/internal/scope.ts
@@ -73,9 +73,20 @@ const ulid = monotonicUlid();
 //#endregion
 //#region src/db/orm/audit.ts
 /**
-* The audit log in the ORM's write path (planning/audit.md): which writes are recorded, who makes
-* them, and the statements placed around each one in its batch, so a change and its entries commit
-* together (or neither does).
+* The audit log in the ORM's write path: which writes are recorded, who makes them, and the
+* statements placed around each one in its batch, so a change and its entries commit together (or
+* neither does).
+*
+* Recorded: every ORM write (`…One`, `…Many`, upserts, inside `atomic` too), from routes,
+* resources and services alike; a custom action's entry beside the writes it made (one request id
+* ties them); sign-ins and sign-outs. Not recorded: data steps and the roles synced from `app.ts`
+* (upkeep, nobody edited them), `db.raw`, `reorder` (positions are maintained), rows the database
+* changes itself (cascades, counts, copies follow from a recorded write), reads, and the tables
+* marked `unaudited` (Session, Verification, Upload, the log itself).
+*
+* Why in the batch, not from the post-commit write stream: a second write after commit can be lost
+* while the change stays, and once committed the before values are gone. Why not triggers: a
+* trigger can't see who wrote, and would record the database's own count and copy updates as noise.
 */
 const actors = new Scope();
 /** Runs `fn` with `actor` as the one every write inside it is recorded as made by. */
@@ -263,8 +274,11 @@ var Field = class Field {
 	}
 	/**
 	* A copy of a related row's value (`.from((s) => s.criterion.maxScore)`), so the row's checks and
-	* uniques can use it. The database writes it on create and keeps it equal to its source; it's
-	* never written. The path's first ref must be `.fixed()`.
+	* uniques can use it. The database writes it on create and keeps it equal to its source (triggers
+	* on each table along the path, so raw SQL writes are seen too); it's never written. The path's
+	* first ref must be `.fixed()`; when every step and the final field are fixed, it's written once
+	* and no trigger is made. A plain path to one column only: a derived value is `.computed()`, and a
+	* value frozen as it was is a snapshot, not a copy.
 	*/
 	from(build) {
 		if (this.spec.maintained || this.spec.computed || this.spec.generate) throw new TypeError("isai: .from() is for a plain field (not one the database or the framework makes)");
@@ -331,7 +345,7 @@ function sensitivity(spec) {
 //#region src/db/fields/kinds.ts
 /**
 * The built-in field kinds: each is a kind from `isai/validation` with its storage. Kinds own
-* their limits and rules; columns never repeat them (planning/fields.md).
+* their limits and rules; columns never repeat them.
 */
 function fieldSpec(kind, storage, options) {
 	return {
@@ -429,7 +443,7 @@ function fieldKinds(defaults) {
 		json: (options) => field(json(options.shape), "json"),
 		/** A list, for shapes (`f.json({ shape: f.list(...) })`, route inputs). Not a column itself. */
 		list,
-		/** A file; `{ storage }` names a storage other than `default` (planning/uploads.md). */
+		/** A file; `{ storage }` names a storage other than `default`. */
 		file: (options = {}) => field(file(options), "json"),
 		image: (options = {}) => field(image(options), "json"),
 		files: (options = {}) => field(files(options), "json"),
@@ -1067,7 +1081,7 @@ var Model = class Model {
 	}
 	/**
 	* A rule over the row, written as a condition. It runs in JS on every write; when it reads
-	* more than one field it is also a database guard (planning/migrations.md).
+	* more than one field it is also a database guard.
 	*/
 	check(name, build) {
 		assertIdentifier("a check name", name);

package/dist/cli/index.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { B as toKind, R as object } from "../validation-l5JG-PFn.js";
-import { M as dialectFor, m as emptySnapshot, r as sync, t as migrate, y as MigrationError } from "../migrator-C65RM_K-.js";
-import { a as lookupsOf, i as filterableOf, n as isRequired, t as Resource, u as Route } from "../resource-9fjxJgmz.js";
-import { F as sensitivity, c as fieldOf, r as Model } from "../base64url-DwWPqoOT.js";
+import { B as toKind, R as object } from "../validation-FyOpSZqE.js";
+import { M as dialectFor, m as emptySnapshot, r as sync, t as migrate, y as MigrationError } from "../migrator-6oWUefLA.js";
+import { a as lookupsOf, i as filterableOf, n as isRequired, t as Resource, u as Route } from "../resource-C17NvNa3.js";
+import { F as sensitivity, c as fieldOf, r as Model } from "../base64url-K_wCmvxR.js";
 import { t as kebabCase } from "../case-BnpcvhdW.js";
-import { i as makeMigrations, n as checkSteps, t as checkMigrations } from "../make-DKzPd2b_.js";
+import { i as makeMigrations, n as checkSteps, t as checkMigrations } from "../make-WQpkYW8N.js";
 import { d1 } from "../adapters/database/d1/index.js";
 import { spawn } from "node:child_process";
 import { parseArgs } from "node:util";
@@ -325,7 +325,7 @@ function json(text, side) {
 /**
 * The app's models: every export of every file in `db/schema/` that is a model, plus the built-in
 * tables `db/index.ts` switches on (`use`) that the app doesn't extend. `db/schema/` holds models
-* only (planning/README.md → Layout), so there's no list to keep. A model's database is its folder:
+* only, so there's no list to keep. A model's database is its folder:
 * `db/schema/<database>/` (`tenant/` and `platform/` with tenancy, `main/` or any one name without).
 */
 const SCHEMA_DIR = "db/schema";
@@ -385,7 +385,7 @@ function databasesOf(models) {
 //#endregion
 //#region src/cli/outputs.ts
 /**
-* What handlers return, for the typed client (planning/client.md): each route's and custom
+* What handlers return, for the typed client: each route's and custom
 * action's TypeScript return type, read with the compiler over the app's own tsconfig, and printed
 * as the JSON the output layer sends: dates (anything with `toJSON`) as what `toJSON` returns,
 * files as `FileJSON`, functions and symbol keys left out, `undefined` keys optional.
@@ -534,7 +534,7 @@ const key = (name) => IDENTIFIER.test(name) ? name : JSON.stringify(name);
 //#region src/cli/client.ts
 /**
 * `isai client` (and `isai dev`, on start and on each change): writes `.isai/client.ts`, the app's
-* typed client (planning/client.md); `isai check` fails on a stale one. The app modules (`apps/**`)
+* typed client; `isai check` fails on a stale one. The app modules (`apps/**`)
 * are loaded as the app loads them, for the exact endpoints, inputs and rows; what their handlers
 * return is read with the TypeScript compiler.
 */
@@ -762,7 +762,7 @@ function printPlan(plan, log) {
 }
 /**
 * Applies every pending step to the local databases at once: structure, rules, then data steps.
-* No older code is running locally, so nothing waits for a release (planning/migrations.md).
+* No older code is running locally, so nothing waits for a release.
 * Returns the steps applied, as `<database>/<step>`.
 */
 async function migrateLocal(project, databaseFor, log) {
@@ -792,7 +792,7 @@ async function migrateLocal(project, databaseFor, log) {
 //#region src/cli/project.ts
 /**
 * The app the CLI works on: its root, and how its TypeScript is imported: models (`db/schema/`),
-* migration manifests, and the app modules for the typed client (planning/client.md).
+* migration manifests, and the app modules for the typed client.
 */
 /** The nearest directory upward from `from` with a `package.json`. */
 function findRoot(from) {
@@ -838,7 +838,7 @@ const PLATFORM_STUB = [
 ].join("\n");
 //#endregion
 //#region src/cli/prompt.ts
-/** Asks `makemigrations`' questions in a terminal (planning/migrations.md → Generating). */
+/** Asks `makemigrations`' questions in a terminal. */
 /** A value typed at the prompt: JSON when it reads as JSON (`3`, `true`), the text otherwise. */
 function typedValue(text) {
 	try {
@@ -898,7 +898,7 @@ async function answer(question, prompt) {
 /**
 * The `workers` target, from the CLI: the app's `wrangler.jsonc`, its local D1 (the database
 * `wrangler dev` uses), and `wrangler dev` itself. The CLI never imports `app.ts`: the database
-* is the D1 binding whose `migrations_dir` is `migrations/<database>` (planning/migrations.md).
+* is the D1 binding whose `migrations_dir` is `migrations/<database>`.
 */
 const CONFIG_FILES = ["wrangler.jsonc", "wrangler.json"];
 function configPath(root) {

package/dist/client/index.d.ts

@@ -1,11 +1,11 @@
-import { t as Issue } from "../issues-Bxq4JExX.js";
+import { t as Issue } from "../issues-CKto95IW.js";
 //#region src/client/types.d.ts
 /**
  * The types a generated client (`.isai/client.ts`) is written in: pages, list queries with the
  * lookups each kind takes, files as JSON, and the auth module's endpoints. Values are their JSON
  * forms: dates are ISO strings, money integer minor units, refs ids.
  */
-/** A list's page (planning/resources.md → Pagination); `page`, `pages` and `count` when asked. */
+/** A list's page; `page`, `pages` and `count` when asked. */
 interface Page<T> {
   readonly data: T[];
   readonly next: string | null;
@@ -62,7 +62,7 @@ interface HistoryQuery {
   readonly after?: string;
   readonly before?: string;
 }
-/** One audit entry on a row (planning/audit.md → Reading). */
+/** One audit entry on a row. */
 interface HistoryEntry {
   readonly id: string;
   readonly createdAt: string;
@@ -151,7 +151,7 @@ interface ResourceEndpoint {
   /** `read`, `create`, `update`, `delete`, trait actions (`publish`, `reorder`), `history`. */
   readonly actions: readonly string[];
   readonly custom?: readonly string[];
-  /** Its writable file fields: `upload(field, file)` sends a file to attach by id (planning/uploads.md). */
+  /** Its writable file fields: `upload(field, file)` sends a file to attach by id. */
   readonly uploads?: readonly string[];
 }
 /** A route in the endpoint table. */
@@ -181,7 +181,7 @@ export declare function listQuery(query: ListQuery<Readonly<Record<string, unkno
 //#endregion
 //#region src/client/errors.d.ts
 /**
- * A failed call: the API's one error shape (planning/requests.md → Errors),
+ * A failed call: the API's one error shape,
  * `{ error: { code, message, … }, requestId }`, with its status.
  */
 export declare class ApiError extends Error {

package/dist/client/index.js

@@ -1,7 +1,7 @@
 import { t as kebabCase } from "../case-BnpcvhdW.js";
 //#region src/client/errors.ts
 /**
-* A failed call: the API's one error shape (planning/requests.md → Errors),
+* A failed call: the API's one error shape,
 * `{ error: { code, message, … }, requestId }`, with its status.
 */
 var ApiError = class extends Error {
@@ -35,7 +35,7 @@ async function errorOf(response) {
 //#endregion
 //#region src/client/client.ts
 /**
-* The client's runtime (planning/client.md): plain async calls over `fetch`, built from the endpoint
+* The client's runtime: plain async calls over `fetch`, built from the endpoint
 * table a generated client (`.isai/client.ts`) hands it. It holds no cache: a frontend wraps the
 * calls in what it uses (TanStack Query, nanostores).
 *
@@ -179,7 +179,7 @@ function pageQuery(query) {
 		...query.before === void 0 ? {} : { before: query.before }
 	};
 }
-/** The auth module's endpoints (planning/auth.md → Endpoints). */
+/** The auth module's endpoints. */
 function authApi(call, base) {
 	const person = (id) => `/auth/users/${segment(id)}`;
 	return {

package/dist/{config-D6PexpSC.js → config-0PGFbJh6.js}

@@ -1,6 +1,6 @@
-import { G as Fake, K as fakeValue } from "./validation-l5JG-PFn.js";
-import { D as planInsert, E as recordAction, S as clockOf, T as forUpkeep, V as CheckFailed } from "./migrator-C65RM_K-.js";
-import { j as IMPLICIT_FIELDS, n as toBase64url, r as Model, t as fromBase64url } from "./base64url-DwWPqoOT.js";
+import { G as Fake, K as fakeValue } from "./validation-FyOpSZqE.js";
+import { D as planInsert, E as recordAction, S as clockOf, T as forUpkeep, V as CheckFailed } from "./migrator-6oWUefLA.js";
+import { j as IMPLICIT_FIELDS, n as toBase64url, r as Model, t as fromBase64url } from "./base64url-K_wCmvxR.js";
 //#region src/auth/roles.ts
 const same = (a, b) => a.length === b.length && a.every((value, i) => value === b[i]);
 /** What a role in `app.ts` is stored as. */
@@ -329,8 +329,15 @@ function authOf(models) {
 //#endregion
 //#region src/db/seeds/makers.ts
 /**
-* `make` and `many`: a row from the values given, the rest faked from each field's kind
-* (planning/data-layer.md → Seeds and fakes). Models carry no factory code.
+* `make` and `many`: a row from the values given, the rest faked from each field's kind. Models
+* carry no factory code; values that matter to a story go in the seed.
+*
+* For a field it isn't given, `make` writes its default if it has one; nothing for what the
+* framework or the database makes (id, timestamps, generated, maintained); a new parent for a
+* required ref; `null` for an optional field (refs too), so rows are minimal; else the kind's
+* fake, numbered for a unique field so fakes don't collide. A faked row failing a check is drawn
+* again a few times, then `make` fails naming the check. Writes go through `createOne`, so
+* validation, guards and the write stream all run.
 */
 /** Fake rows that fail a check are drawn again, this many times in all. */
 const ATTEMPTS = 20;
@@ -406,7 +413,7 @@ function failedCheck(model, input, now) {
 //#region src/tenancy/config.ts
 /**
 * The two database names that mean something, and only with tenancy: each tenant's own database,
-* and the platform's (planning/tenancy.md → Configuration). Every other name is just a name.
+* and the platform's. Every other name is just a name.
 */
 const TENANT = "tenant";
 const PLATFORM = "platform";

package/dist/{create-auth-Byf1-VJw.js → create-auth-y8E8cxkn.js}

@@ -1,6 +1,6 @@
-import { t as fromBase64url } from "./base64url-DwWPqoOT.js";
-import { n as PROVIDERS } from "./tables-C3Uza4qK.js";
-import { a as byRole, c as tenant, i as anyone, l as user, n as PolicyRegistry, o as owner, s as readsTenant } from "./policies-yVzFCjxU.js";
+import { t as fromBase64url } from "./base64url-K_wCmvxR.js";
+import { n as PROVIDERS } from "./tables-C4ipMFjg.js";
+import { a as byRole, c as tenant, i as anyone, l as user, n as PolicyRegistry, o as owner, s as readsTenant } from "./policies-pFzslmSB.js";
 //#region src/auth/create-auth.ts
 const methods = { oauth: (provider, options) => ({
 	kind: "oauth",
@@ -15,7 +15,7 @@ const authPerms = {
 	invite: "auth.invite",
 	/** See the people with accounts, give and take their roles, suspend them. */
 	manageUsers: "auth.manageUsers",
-	/** Read the whole audit log (`GET /api/audit`), with the log on (planning/audit.md). */
+	/** Read the whole audit log (`GET /api/audit`), with the log on. */
 	readAudit: "audit.read"
 };
 var Auth = class {
@@ -31,7 +31,7 @@ var Auth = class {
 	/**
 	* Gives `email` a role from `app.ts`, from code (a tenant's setup service, a seed): now, if it has
 	* an account in the current database, else when it first signs in. Safe to repeat.
-	* `held: "platform"` puts the assignment beyond the tenant's reach (planning/tenancy.md → End of v1).
+	* `held: "platform"` puts the assignment beyond the tenant's reach.
 	*/
 	invite(input) {
 		if (!this.invites) return Promise.reject(/* @__PURE__ */ new Error("isai: auth.invite is used before the runtime started the app"));

package/dist/{data-layer-BNtz40PV.js → data-layer-D9UPOK6L.js}

@@ -1,6 +1,6 @@
-import { O as datetime, P as quantity, p as host, r as isPhoneRegion } from "./validation-l5JG-PFn.js";
-import { C as not, M as field, N as fieldKinds, S as count, s as defineModel, u as rowOf, v as all, w as now, y as any } from "./base64url-DwWPqoOT.js";
-import { a as TableSet, i as platformAuthDefinitions, o as defineBuiltins, r as authTables } from "./tables-C3Uza4qK.js";
+import { O as datetime, P as quantity, p as host, r as isPhoneRegion } from "./validation-FyOpSZqE.js";
+import { C as not, M as field, N as fieldKinds, S as count, s as defineModel, u as rowOf, v as all, w as now, y as any } from "./base64url-K_wCmvxR.js";
+import { a as TableSet, i as platformAuthDefinitions, o as defineBuiltins, r as authTables } from "./tables-C4ipMFjg.js";
 import { n as seed } from "./seed-BObmdKdP.js";
 //#region src/db/fields/slot.ts
 var Slot = class {
@@ -89,13 +89,13 @@ function uploadTables(f, options) {
 //#endregion
 //#region src/tenancy/tables.ts
 /**
-* The platform's built-in tables (planning/tenancy.md → The platform database), switched on with
+* The platform's built-in tables, switched on with
 * `use: [base.tenancy({ database: "platform" })]` in `db/index.ts`:
 *
 *   Tenant  the registry: what the front door finds behind a host, and whether it may answer
 *   Domain  every host a tenant answers on (its subdomain and custom domains alike)
 *   PlatformUser, PlatformSession… the platform's own people (the auth tables, prefixed): who
-*           signs in on the platform's host (planning/tenancy.md → End of v1)
+*           signs in on the platform's host
 *
 * Feature switches are the app's own columns: `builtins.Tenant.extend({ coupons: f.flag() })`.
 */
@@ -171,8 +171,10 @@ var ModelRegistry = class {
 //#region src/db/schema/traits.ts
 /**
 * Traits: behaviour a model takes whole, written before its fields (`model(name, ...traits,
-* fields)`, planning/traits-and-slots.md). A trait adds fields (so the model's own fields already
-* see them), computed fields, and a name the framework reads (`singleton`).
+* fields)`), Laravel's traits typed. A trait adds fields (so the model's own fields already see
+* them; declaring one of them again is an error), computed fields, and a name the framework reads
+* (`singleton`). Always written `traits.x()`, never imported bare: a bare `publishable()` reads like
+* an action.
 */
 var Trait = class {
 	spec;

package/dist/{data-layer-BMviRJaW.d.ts → data-layer-ubPfZvFV.d.ts}

@@ -1,6 +1,7 @@
-import { a as DatabaseDriver, o as DialectName } from "./index-BKwTOLop.js";
-import { M as IdInput, q as StoredFile } from "./index-BVCrbMav.js";
-import { A as Dialect, G as Model, H as Columns, I as Clock, K as ModelSpec, M as RetiredSnapshot, N as SchemaSnapshot, U as ComputedFields, V as AnyModel, W as Fields, X as Condition, at as count, b as RowOf, dt as Kinds, et as Now, f as seed, ft as SchemaDefaults, ht as Field, i as Row, it as any, mt as AnyField, n as Patch, ot as not, p as Database, q as ModelRegistry, rt as all, yt as Slot } from "./types-BFc_NEx8.js";
+import { a as DatabaseDriver, o as DialectName } from "./index-Ce5p2-EB.js";
+import { t as Issue } from "./issues-CKto95IW.js";
+import { M as IdInput, q as StoredFile } from "./index-C-WmIKxT.js";
+import { A as Dialect, G as Model, H as Columns, I as Clock, K as ModelSpec, M as RetiredSnapshot, N as SchemaSnapshot, U as ComputedFields, V as AnyModel, W as Fields, X as Condition, at as count, b as RowOf, dt as Kinds, et as Now, f as seed, ft as SchemaDefaults, ht as Field, i as Row, it as any, mt as AnyField, n as Patch, ot as not, p as Database, q as ModelRegistry, rt as all, yt as Slot } from "./types-DpOcIuDl.js";
 //#region src/db/schema/traits.d.ts
 type ComputedDefinitions = Record<string, (row: any) => Condition>;
 interface TraitSpec {
@@ -79,12 +80,20 @@ declare class CheckFailed extends DatabaseError {
   readonly name = "CheckFailed";
   constructor(model: string, check: string, options?: ErrorOptions);
 }
-/** A unique field (or combination) already has this value. */
+/**
+ * A unique field (or combination) already has this value. `fields` are the unique's own; `issues`
+ * put one on each for a form, except that a field made from another (a slug from its title) puts
+ * it on that one, the field a person typed.
+ */
 declare class UniqueFailed extends DatabaseError {
   readonly model: string;
   readonly fields: readonly string[];
   readonly name = "UniqueFailed";
-  constructor(model: string, fields: readonly string[], options?: ErrorOptions);
+  readonly issues: readonly Issue[];
+  constructor(model: string, fields: readonly string[], options?: ErrorOptions & {
+    /** The field each generated one is made from: `{ slug: "title" }`. */
+    readonly from?: Readonly<Record<string, string>>;
+  });
 }
 /** A ref points at a row that doesn't exist, or a delete is restricted by rows that reference it. */
 declare class ReferenceFailed extends DatabaseError {
@@ -268,7 +277,7 @@ declare class UnsafeMigration extends Error {
 //#region src/db/migrations/errors.d.ts
 /**
  * The migrator's errors: one type with a code, a message and a hint, so the CLI prints the same
- * shape for each and picks its exit code from the code (planning/migrations.md → Errors).
+ * shape for each and picks its exit code from the code.
  */
 type MigrationErrorCode = "migrations.conflict" | "migrations.tampered" | "database.ahead" | "cleanup.notLive" | "migrations.todo" | "migrations.missing" | "migrations.question" | "migrations.rename" | "migrations.uniqueFill" | "data.loops" | "lock.held" | "deploy.held" | "rollback.unknownRelease" | "rollback.beyondCleanup";
 declare class MigrationError extends Error {
@@ -708,7 +717,7 @@ declare function authTables(f: Kinds, options: AuthTablesOptions): TableSet<{
         };
       }>;
       /**
-       * Held by the platform (planning/tenancy.md → End of v1): the tenant's people, the owner
+       * Held by the platform: the tenant's people, the owner
        * included, can't take it away or suspend its holder.
        */
       held: Field<"platform", "platform", true, false, {}>;
@@ -922,13 +931,13 @@ interface DataLayerDefinition<P extends Record<string, ProjectKind>, U extends r
 }
 /** What `define` gets: the built-in kinds, and the built-in table sets it may `use`. */
 type Base = Kinds & {
-  /** User, Session, Account, Verification, Invite, Role and UserRole, in the app's data database (planning/auth.md). */
+  /** User, Session, Account, Verification, Invite, Role and UserRole, in the app's data database. */
   readonly authTables: (options: AuthTablesOptions) => ReturnType<typeof authTables>;
-  /** `Tenant` and `Domain`, in the platform's database (planning/tenancy.md). */
+  /** `Tenant` and `Domain`, in the platform's database. */
   readonly tenancy: (options: TenancyOptions) => ReturnType<typeof tenancyTables>;
-  /** `Upload` (files uploaded and not yet attached), in the app's data database (planning/uploads.md). */
+  /** `Upload` (files uploaded and not yet attached), in the app's data database. */
   readonly uploads: (options: UploadTablesOptions) => ReturnType<typeof uploadTables>;
-  /** `AuditEntry` (the audit log), in the database whose writes it records (planning/audit.md). */
+  /** `AuditEntry` (the audit log), in the database whose writes it records. */
   readonly audit: (options: AuditTablesOptions) => AuditTables;
 };
 type ProjectKinds<P> = { readonly [K in keyof P]: P[K] extends AnyField ? () => P[K] : P[K]; };

package/dist/db/index.d.ts

@@ -1,4 +1,4 @@
-import { a as ValidationError } from "../issues-Bxq4JExX.js";
-import { $ as Expr, A as Dialect, B as newSecretKey, F as snapshotOf, G as Model, I as Clock, J as Models, K as ModelSpec, L as FixedClock, M as RetiredSnapshot, N as SchemaSnapshot, O as Write, P as emptySnapshot, R as fixedClock, V as AnyModel, X as Condition, Y as Column, _ as database, _t as Storage, a as Visible, at as count, bt as slot, c as Many, d as SeedContext, dt as Kinds, et as Now, ft as SchemaDefaults, g as Transaction, gt as FieldSpec, h as RawValue, ht as Field, i as Row, it as any, j as Rule, k as WriteListener, l as Overrides, lt as ConditionNode, m as DatabaseOptions, n as Patch, nt as Total, o as Make, ot as not, p as Database, pt as fieldKinds, r as Planned, rt as all, st as now, t as Insert, tt as Relation, u as Seed, v as OrderKey, vt as sensitivity, y as Query, yt as Slot, z as systemClock } from "../types-BFc_NEx8.js";
-import { A as MigrateOptions, B as NotFound, C as MigrationErrorCode, D as Cleanup, E as UnsafeMigration, F as DataStep, H as UniqueFailed, I as TODO, L as dataStep, M as migrate, N as migrateFresh, O as cleanupMigration, P as sync, R as CheckFailed, S as MigrationError, T as UnsafeChange, U as dialectFor, V as ReferenceFailed, W as sqlite, _ as Generated, b as manifest, c as acquireLock, d as setReleaseStatus, f as startRelease, g as makeMigrations, h as makeCleanup, j as Migration, k as Manifest, l as releaseLock, m as checkMigrations, n as row, o as Release, p as applyRules, s as ReleaseStatus, t as createDataLayer, u as rollback, v as generateMigration, w as SuspectedRename, x as structureStep, y as cleanupStep, z as DatabaseError } from "../data-layer-BMviRJaW.js";
+import { a as ValidationError } from "../issues-CKto95IW.js";
+import { $ as Expr, A as Dialect, B as newSecretKey, F as snapshotOf, G as Model, I as Clock, J as Models, K as ModelSpec, L as FixedClock, M as RetiredSnapshot, N as SchemaSnapshot, O as Write, P as emptySnapshot, R as fixedClock, V as AnyModel, X as Condition, Y as Column, _ as database, _t as Storage, a as Visible, at as count, bt as slot, c as Many, d as SeedContext, dt as Kinds, et as Now, ft as SchemaDefaults, g as Transaction, gt as FieldSpec, h as RawValue, ht as Field, i as Row, it as any, j as Rule, k as WriteListener, l as Overrides, lt as ConditionNode, m as DatabaseOptions, n as Patch, nt as Total, o as Make, ot as not, p as Database, pt as fieldKinds, r as Planned, rt as all, st as now, t as Insert, tt as Relation, u as Seed, v as OrderKey, vt as sensitivity, y as Query, yt as Slot, z as systemClock } from "../types-DpOcIuDl.js";
+import { A as MigrateOptions, B as NotFound, C as MigrationErrorCode, D as Cleanup, E as UnsafeMigration, F as DataStep, H as UniqueFailed, I as TODO, L as dataStep, M as migrate, N as migrateFresh, O as cleanupMigration, P as sync, R as CheckFailed, S as MigrationError, T as UnsafeChange, U as dialectFor, V as ReferenceFailed, W as sqlite, _ as Generated, b as manifest, c as acquireLock, d as setReleaseStatus, f as startRelease, g as makeMigrations, h as makeCleanup, j as Migration, k as Manifest, l as releaseLock, m as checkMigrations, n as row, o as Release, p as applyRules, s as ReleaseStatus, t as createDataLayer, u as rollback, v as generateMigration, w as SuspectedRename, x as structureStep, y as cleanupStep, z as DatabaseError } from "../data-layer-ubPfZvFV.js";
 export { type AnyModel, CheckFailed, type Cleanup, type Clock, Column, Condition, type ConditionNode, type DataStep, Database, DatabaseError, type DatabaseOptions, type Dialect, Expr, Field, type FieldSpec, type FixedClock, type Generated, type Insert, type Kinds, type Make, type Manifest, type Many, type MigrateOptions, type Migration, MigrationError, type MigrationErrorCode, Model, type ModelSpec, type Models, NotFound, Now, type OrderKey, type Overrides, type Patch, type Planned, Query, type RawValue, ReferenceFailed, Relation, type Release, type ReleaseStatus, type RetiredSnapshot, type Row, type Rule, type SchemaDefaults, type SchemaSnapshot, Seed, type SeedContext, Slot, type Storage, type SuspectedRename, TODO, Total, Transaction, UniqueFailed, type UnsafeChange, UnsafeMigration, ValidationError, type Visible, type Write, type WriteListener, acquireLock, all, any, applyRules, checkMigrations, cleanupMigration, cleanupStep, count, createDataLayer, dataStep, database, dialectFor, emptySnapshot, fieldKinds, fixedClock, generateMigration, makeCleanup, makeMigrations, manifest, migrate, migrateFresh, newSecretKey, not, now, releaseLock, rollback, row, sensitivity, setReleaseStatus, slot, snapshotOf, sqlite, startRelease, structureStep, sync, systemClock };

package/dist/db/index.js

@@ -1,9 +1,9 @@
-import { W as ValidationError } from "../validation-l5JG-PFn.js";
-import { A as Query, C as database, F as systemClock, G as UniqueFailed, H as DatabaseError, I as newSecretKey, M as dialectFor, N as sqlite, P as fixedClock, U as NotFound, V as CheckFailed, W as ReferenceFailed, _ as TODO, b as Database, c as rollback, d as applyRules, g as UnsafeMigration, h as snapshotOf, i as acquireLock, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, p as generateMigration, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, x as Transaction, y as MigrationError } from "../migrator-C65RM_K-.js";
-import { C as not, F as sensitivity, N as fieldKinds, P as Field, S as count, _ as Total, d as Column, f as Condition, g as Relation, h as Now, m as Expr, r as Model, v as all, w as now, y as any } from "../base64url-DwWPqoOT.js";
-import { i as slot, n as row, r as Slot, t as createDataLayer } from "../data-layer-BNtz40PV.js";
+import { W as ValidationError } from "../validation-FyOpSZqE.js";
+import { A as Query, C as database, F as systemClock, G as UniqueFailed, H as DatabaseError, I as newSecretKey, M as dialectFor, N as sqlite, P as fixedClock, U as NotFound, V as CheckFailed, W as ReferenceFailed, _ as TODO, b as Database, c as rollback, d as applyRules, g as UnsafeMigration, h as snapshotOf, i as acquireLock, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, p as generateMigration, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, x as Transaction, y as MigrationError } from "../migrator-6oWUefLA.js";
+import { C as not, F as sensitivity, N as fieldKinds, P as Field, S as count, _ as Total, d as Column, f as Condition, g as Relation, h as Now, m as Expr, r as Model, v as all, w as now, y as any } from "../base64url-K_wCmvxR.js";
+import { i as slot, n as row, r as Slot, t as createDataLayer } from "../data-layer-D9UPOK6L.js";
 import { t as Seed } from "../seed-BObmdKdP.js";
-import { a as cleanupMigration, i as makeMigrations, r as makeCleanup, t as checkMigrations } from "../make-DKzPd2b_.js";
+import { a as cleanupMigration, i as makeMigrations, r as makeCleanup, t as checkMigrations } from "../make-WQpkYW8N.js";
 //#region src/db/migrations/files.ts
 /** A structure step file: adds tables and columns. Applied once, never edited. */
 function structureStep(options) {