@isaijs/core 0.1.0 → 0.1.3

package/dist/adapters/cache/cloudflare-kv/index.d.ts

@@ -1,4 +1,4 @@
-import { r as Cache } from "../../../index-BKwTOLop.js";
+import { r as Cache } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/cache/cloudflare-kv/index.d.ts
 /** The parts of a KV binding this cache uses. */
 export interface KvBinding {

package/dist/adapters/database/d1/index.d.ts

@@ -1,4 +1,4 @@
-import { a as DatabaseDriver, f as Row } from "../../../index-BKwTOLop.js";
+import { a as DatabaseDriver, f as Row } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/database/d1/index.d.ts
 /** The parts of a D1 prepared statement this driver uses. */
 export interface D1Statement {

package/dist/adapters/database/durable-object/index.d.ts

@@ -1,4 +1,4 @@
-import { a as DatabaseDriver, b as TenantDatabases, f as Row } from "../../../index-BKwTOLop.js";
+import { a as DatabaseDriver, b as TenantDatabases, f as Row } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/database/durable-object/index.d.ts
 /** The parts of `ctx.storage` this driver uses (structurally compatible with `wrangler types`). */
 export interface DurableObjectStorageBinding {

package/dist/adapters/database/sqlite-node/index.d.ts

@@ -1,4 +1,4 @@
-import { a as DatabaseDriver } from "../../../index-BKwTOLop.js";
+import { a as DatabaseDriver } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/database/sqlite-node/index.d.ts
 export interface SqliteNodeDriver extends DatabaseDriver {
   close(): void;

package/dist/adapters/mail/gmail/index.d.ts

@@ -1,4 +1,4 @@
-import { s as MailDriver } from "../../../index-BKwTOLop.js";
+import { s as MailDriver } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/mail/gmail/index.d.ts
 export interface GmailOptions {
   readonly clientId: string;

package/dist/adapters/pdf/cloudflare-browser/index.d.ts

@@ -1,4 +1,4 @@
-import { l as PdfRenderer } from "../../../index-BKwTOLop.js";
+import { l as PdfRenderer } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/pdf/cloudflare-browser/index.d.ts
 /** A Browser Rendering binding (opaque here; used through @cloudflare/puppeteer). */
 export type BrowserBinding = object;

package/dist/adapters/queue/cloudflare/index.d.ts

@@ -1,4 +1,4 @@
-import { u as Queue } from "../../../index-BKwTOLop.js";
+import { u as Queue } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/queue/cloudflare/index.d.ts
 /** The parts of a Queues producer binding this queue uses. */
 export interface QueueBinding {

package/dist/adapters/ratelimit/cloudflare/index.d.ts

@@ -1,4 +1,4 @@
-import { d as RateLimiter } from "../../../index-BKwTOLop.js";
+import { d as RateLimiter } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/ratelimit/cloudflare/index.d.ts
 /** The part of a Rate Limiting binding this uses. */
 export interface RateLimitBinding {

package/dist/adapters/ratelimit/memory/index.d.ts

@@ -1,4 +1,4 @@
-import { d as RateLimiter } from "../../../index-BKwTOLop.js";
+import { d as RateLimiter } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/ratelimit/memory/index.d.ts
 export interface MemoryRateLimitOptions {
   /** Requests a key may make in a window. */

package/dist/adapters/runtime/cloudflare/index.d.ts

@@ -1,4 +1,4 @@
-import { f as Row, m as ServiceRef, p as Runtime, v as TaskMessage } from "../../../index-BKwTOLop.js";
+import { f as Row, m as ServiceRef, p as Runtime, v as TaskMessage } from "../../../index-Ce5p2-EB.js";
 import { DurableObject } from "cloudflare:workers";
 //#region src/adapters/runtime/cloudflare/index.d.ts
 /** The parts of the Workers platform this runtime uses (structurally compatible with `wrangler types`). */

package/dist/adapters/runtime/cloudflare/index.js

@@ -11,7 +11,7 @@ import { DurableObject } from "cloudflare:workers";
 *
 * With isolated tenancy, `Tenant` is the Durable Object class each tenant lives in: it opens the
 * tenant from its own storage, migrates it before any request (`blockConcurrencyWhile`), and
-* handles what the front door forwards to it over RPC (planning/tenancy.md).
+* handles what the front door forwards to it over RPC.
 */
 /**
 * One failing task never holds back the rest of its batch: each message is acked on

package/dist/adapters/storage/disk/index.d.ts

@@ -1,4 +1,4 @@
-import { g as Storage } from "../../../index-BKwTOLop.js";
+import { g as Storage } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/storage/disk/index.d.ts
 export interface DiskStorageOptions {
   /** The folder files are kept in, made when missing. */

package/dist/adapters/storage/memory/index.d.ts

@@ -1,4 +1,4 @@
-import { g as Storage } from "../../../index-BKwTOLop.js";
+import { g as Storage } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/storage/memory/index.d.ts
 export interface MemoryStorageOptions {
   /** Where its files would be served from, to make it a public storage. */

package/dist/adapters/storage/r2/index.d.ts

@@ -1,4 +1,4 @@
-import { g as Storage } from "../../../index-BKwTOLop.js";
+import { g as Storage } from "../../../index-Ce5p2-EB.js";
 //#region src/adapters/storage/r2/index.d.ts
 /** The parts of an R2 binding this storage uses. */
 export interface R2Binding {

package/dist/auth/index.d.ts

@@ -1,3 +1,3 @@
-import { r as AuthTablesOptions } from "../data-layer-BMviRJaW.js";
-import { A as Permissions, F as DefinePolicy, I as Perms, L as Policy, N as AnyPolicy, P as Bound, R as Rules, a as OAuthMethod, c as Roles, i as Methods, l as SignInMethod, n as AuthConfig, o as Provider, r as AuthDefinition, s as RoleDefinition, t as Auth, u as createAuth, z as StandardAction } from "../index-CBWFoL3s.js";
+import { r as AuthTablesOptions } from "../data-layer-D1BFo3wO.js";
+import { A as Permissions, F as DefinePolicy, I as Perms, L as Policy, N as AnyPolicy, P as Bound, R as Rules, a as OAuthMethod, c as Roles, i as Methods, l as SignInMethod, n as AuthConfig, o as Provider, r as AuthDefinition, s as RoleDefinition, t as Auth, u as createAuth, z as StandardAction } from "../index-DlgVg3D8.js";
 export { type AnyPolicy, Auth, type AuthConfig, type AuthDefinition, type AuthTablesOptions, type Bound, type DefinePolicy, type Methods, type OAuthMethod, type Permissions, type Perms, Policy, type Provider, type RoleDefinition, type Roles, type Rules, type SignInMethod, type StandardAction, createAuth };

package/dist/auth/index.js

@@ -1,3 +1,3 @@
-import { t as Policy } from "../policies-yVzFCjxU.js";
-import { a as createAuth, t as Auth } from "../create-auth-Byf1-VJw.js";
+import { t as Policy } from "../policies-CKIdBFKt.js";
+import { a as createAuth, t as Auth } from "../create-auth-Ci0PaBoX.js";
 export { Auth, Policy, createAuth };

package/dist/{base64url-DwWPqoOT.js → base64url-C5GTYIL5.js}

@@ -1,4 +1,4 @@
-import { A as flag, C as textKind, D as date, E as choice, F as sequence, L as list, M as int, N as money, O as datetime, P as quantity, S as text, T as url, U as kind, _ as personName, b as slugify, c as images, d as urls, f as email, g as newToken, h as markdown, i as file, j as id, k as fakeUlid, l as define, m as line, n as phoneKind, o as files, s as image, u as json, v as secret, w as token, x as subdomain, y as slug } from "./validation-l5JG-PFn.js";
+import { A as fakeUlid, C as text, D as choice, E as url, F as quantity, I as sequence, M as id, N as int, O as date, P as money, R as list, S as subdomain, T as token, W as kind, _ as newToken, a as file, b as slug, c as image, d as json, f as urls, g as markdown, h as line, j as flag, k as datetime, l as images, n as phoneKind, p as email, s as files, u as define, v as personName, w as textKind, x as slugify, y as secret } from "./validation-Cppmd0RV.js";
 import { n as snakeCase } from "./case-BnpcvhdW.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/internal/scope.ts
@@ -73,9 +73,20 @@ const ulid = monotonicUlid();
 //#endregion
 //#region src/db/orm/audit.ts
 /**
-* The audit log in the ORM's write path (planning/audit.md): which writes are recorded, who makes
-* them, and the statements placed around each one in its batch, so a change and its entries commit
-* together (or neither does).
+* The audit log in the ORM's write path: which writes are recorded, who makes them, and the
+* statements placed around each one in its batch, so a change and its entries commit together (or
+* neither does).
+*
+* Recorded: every ORM write (`…One`, `…Many`, upserts, inside `atomic` too), from routes,
+* resources and services alike; a custom action's entry beside the writes it made (one request id
+* ties them); sign-ins and sign-outs. Not recorded: data steps and the roles synced from `app.ts`
+* (upkeep, nobody edited them), `db.raw`, `reorder` (positions are maintained), rows the database
+* changes itself (cascades, counts, copies follow from a recorded write), reads, and the tables
+* marked `unaudited` (Session, Verification, Upload, the log itself).
+*
+* Why in the batch, not from the post-commit write stream: a second write after commit can be lost
+* while the change stays, and once committed the before values are gone. Why not triggers: a
+* trigger can't see who wrote, and would record the database's own count and copy updates as noise.
 */
 const actors = new Scope();
 /** Runs `fn` with `actor` as the one every write inside it is recorded as made by. */
@@ -263,8 +274,11 @@ var Field = class Field {
 	}
 	/**
 	* A copy of a related row's value (`.from((s) => s.criterion.maxScore)`), so the row's checks and
-	* uniques can use it. The database writes it on create and keeps it equal to its source; it's
-	* never written. The path's first ref must be `.fixed()`.
+	* uniques can use it. The database writes it on create and keeps it equal to its source (triggers
+	* on each table along the path, so raw SQL writes are seen too); it's never written. The path's
+	* first ref must be `.fixed()`; when every step and the final field are fixed, it's written once
+	* and no trigger is made. A plain path to one column only: a derived value is `.computed()`, and a
+	* value frozen as it was is a snapshot, not a copy.
 	*/
 	from(build) {
 		if (this.spec.maintained || this.spec.computed || this.spec.generate) throw new TypeError("isai: .from() is for a plain field (not one the database or the framework makes)");
@@ -331,7 +345,7 @@ function sensitivity(spec) {
 //#region src/db/fields/kinds.ts
 /**
 * The built-in field kinds: each is a kind from `isai/validation` with its storage. Kinds own
-* their limits and rules; columns never repeat them (planning/fields.md).
+* their limits and rules; columns never repeat them.
 */
 function fieldSpec(kind, storage, options) {
 	return {
@@ -429,7 +443,7 @@ function fieldKinds(defaults) {
 		json: (options) => field(json(options.shape), "json"),
 		/** A list, for shapes (`f.json({ shape: f.list(...) })`, route inputs). Not a column itself. */
 		list,
-		/** A file; `{ storage }` names a storage other than `default` (planning/uploads.md). */
+		/** A file; `{ storage }` names a storage other than `default`. */
 		file: (options = {}) => field(file(options), "json"),
 		image: (options = {}) => field(image(options), "json"),
 		files: (options = {}) => field(files(options), "json"),
@@ -1067,7 +1081,7 @@ var Model = class Model {
 	}
 	/**
 	* A rule over the row, written as a condition. It runs in JS on every write; when it reads
-	* more than one field it is also a database guard (planning/migrations.md).
+	* more than one field it is also a database guard.
 	*/
 	check(name, build) {
 		assertIdentifier("a check name", name);

package/dist/cli/index.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { B as toKind, R as object } from "../validation-l5JG-PFn.js";
-import { M as dialectFor, m as emptySnapshot, r as sync, t as migrate, y as MigrationError } from "../migrator-C65RM_K-.js";
-import { a as lookupsOf, i as filterableOf, n as isRequired, t as Resource, u as Route } from "../resource-9fjxJgmz.js";
-import { F as sensitivity, c as fieldOf, r as Model } from "../base64url-DwWPqoOT.js";
+import { V as toKind, z as object } from "../validation-Cppmd0RV.js";
+import { M as dialectFor, m as emptySnapshot, r as sync, t as migrate, y as MigrationError } from "../migrator-BU3_PHk8.js";
+import { a as lookupsOf, i as filterableOf, n as isRequired, t as Resource, u as Route } from "../resource-CsYksjKc.js";
+import { F as sensitivity, c as fieldOf, r as Model } from "../base64url-C5GTYIL5.js";
 import { t as kebabCase } from "../case-BnpcvhdW.js";
-import { i as makeMigrations, n as checkSteps, t as checkMigrations } from "../make-DKzPd2b_.js";
+import { i as makeMigrations, n as checkSteps, t as checkMigrations } from "../make-DKBn79cH.js";
 import { d1 } from "../adapters/database/d1/index.js";
 import { spawn } from "node:child_process";
 import { parseArgs } from "node:util";
@@ -198,13 +198,15 @@ function resourceMembers(named, custom, used) {
 	}
 	const spec = resource.model.spec;
 	const uploads = resource.writable.filter((field) => spec.fields[field]?.kind.spec.file);
+	const images = uploads.filter((field) => spec.fields[field]?.kind.spec.file?.image);
 	if (uploads.length > 0) calls.push(`upload(field: ${uploads.map((f) => JSON.stringify(f)).join(" | ")}, file: Blob): Promise<FileJSON>`);
 	const endpoint = [
 		`resource: ${JSON.stringify(`/${kebabCase(name)}`)}`,
 		...resource.singleton ? ["singleton: true"] : [],
 		`actions: ${JSON.stringify(resource.actions)}`,
 		...Object.keys(resource.custom).length > 0 ? [`custom: ${JSON.stringify(Object.keys(resource.custom))}`] : [],
-		...uploads.length > 0 ? [`uploads: ${JSON.stringify(uploads)}`] : []
+		...uploads.length > 0 ? [`uploads: ${JSON.stringify(uploads)}`] : [],
+		...images.length > 0 ? [`images: ${JSON.stringify(images)}`] : []
 	];
 	used.add("Page");
 	return {
@@ -325,7 +327,7 @@ function json(text, side) {
 /**
 * The app's models: every export of every file in `db/schema/` that is a model, plus the built-in
 * tables `db/index.ts` switches on (`use`) that the app doesn't extend. `db/schema/` holds models
-* only (planning/README.md → Layout), so there's no list to keep. A model's database is its folder:
+* only, so there's no list to keep. A model's database is its folder:
 * `db/schema/<database>/` (`tenant/` and `platform/` with tenancy, `main/` or any one name without).
 */
 const SCHEMA_DIR = "db/schema";
@@ -350,8 +352,9 @@ async function loadModels(project) {
 			const name = value.spec.name;
 			const other = found.get(name);
 			if (other && other.model !== value) throw new Error(`isai: two models are named ${name} (db/schema/${other.file}.ts and ${file})`);
-			const builtin = value.spec.database;
-			if (builtin !== void 0 && builtin !== database) throw new Error(`isai: ${name} is a built-in table of the ${builtin} database, so it's extended in ${folderOf(builtin)}/ (not db/schema/${file})`);
+			const said = value.spec.database;
+			if (said !== void 0 && said !== database) throw new Error(value.spec.builtin !== void 0 ? `isai: ${name} is a built-in table of the ${said} database, so it's extended in ${folderOf(said)}/ (not db/schema/${file})` : `isai: ${name} says { database: "${said}" }, so it goes in ${folderOf(said)}/ (not db/schema/${file})`);
+			if (said === void 0 && database === "platform") throw new Error(`isai: ${name} is in db/schema/${file}, so it says so: model("${name}", { database: "platform" }, …)`);
 			found.set(name, {
 				model: value,
 				file: file.slice(0, -3),
@@ -385,7 +388,7 @@ function databasesOf(models) {
 //#endregion
 //#region src/cli/outputs.ts
 /**
-* What handlers return, for the typed client (planning/client.md): each route's and custom
+* What handlers return, for the typed client: each route's and custom
 * action's TypeScript return type, read with the compiler over the app's own tsconfig, and printed
 * as the JSON the output layer sends: dates (anything with `toJSON`) as what `toJSON` returns,
 * files as `FileJSON`, functions and symbol keys left out, `undefined` keys optional.
@@ -534,7 +537,7 @@ const key = (name) => IDENTIFIER.test(name) ? name : JSON.stringify(name);
 //#region src/cli/client.ts
 /**
 * `isai client` (and `isai dev`, on start and on each change): writes `.isai/client.ts`, the app's
-* typed client (planning/client.md); `isai check` fails on a stale one. The app modules (`apps/**`)
+* typed client; `isai check` fails on a stale one. The app modules (`apps/**`)
 * are loaded as the app loads them, for the exact endpoints, inputs and rows; what their handlers
 * return is read with the TypeScript compiler.
 */
@@ -762,7 +765,7 @@ function printPlan(plan, log) {
 }
 /**
 * Applies every pending step to the local databases at once: structure, rules, then data steps.
-* No older code is running locally, so nothing waits for a release (planning/migrations.md).
+* No older code is running locally, so nothing waits for a release.
 * Returns the steps applied, as `<database>/<step>`.
 */
 async function migrateLocal(project, databaseFor, log) {
@@ -792,7 +795,7 @@ async function migrateLocal(project, databaseFor, log) {
 //#region src/cli/project.ts
 /**
 * The app the CLI works on: its root, and how its TypeScript is imported: models (`db/schema/`),
-* migration manifests, and the app modules for the typed client (planning/client.md).
+* migration manifests, and the app modules for the typed client.
 */
 /** The nearest directory upward from `from` with a `package.json`. */
 function findRoot(from) {
@@ -838,7 +841,7 @@ const PLATFORM_STUB = [
 ].join("\n");
 //#endregion
 //#region src/cli/prompt.ts
-/** Asks `makemigrations`' questions in a terminal (planning/migrations.md → Generating). */
+/** Asks `makemigrations`' questions in a terminal. */
 /** A value typed at the prompt: JSON when it reads as JSON (`3`, `true`), the text otherwise. */
 function typedValue(text) {
 	try {
@@ -898,7 +901,7 @@ async function answer(question, prompt) {
 /**
 * The `workers` target, from the CLI: the app's `wrangler.jsonc`, its local D1 (the database
 * `wrangler dev` uses), and `wrangler dev` itself. The CLI never imports `app.ts`: the database
-* is the D1 binding whose `migrations_dir` is `migrations/<database>` (planning/migrations.md).
+* is the D1 binding whose `migrations_dir` is `migrations/<database>`.
 */
 const CONFIG_FILES = ["wrangler.jsonc", "wrangler.json"];
 function configPath(root) {

package/dist/client/index.d.ts

@@ -1,11 +1,11 @@
-import { t as Issue } from "../issues-Bxq4JExX.js";
+import { t as Issue } from "../issues-CKto95IW.js";
 //#region src/client/types.d.ts
 /**
  * The types a generated client (`.isai/client.ts`) is written in: pages, list queries with the
  * lookups each kind takes, files as JSON, and the auth module's endpoints. Values are their JSON
  * forms: dates are ISO strings, money integer minor units, refs ids.
  */
-/** A list's page (planning/resources.md → Pagination); `page`, `pages` and `count` when asked. */
+/** A list's page; `page`, `pages` and `count` when asked. */
 interface Page<T> {
   readonly data: T[];
   readonly next: string | null;
@@ -62,7 +62,7 @@ interface HistoryQuery {
   readonly after?: string;
   readonly before?: string;
 }
-/** One audit entry on a row (planning/audit.md → Reading). */
+/** One audit entry on a row. */
 interface HistoryEntry {
   readonly id: string;
   readonly createdAt: string;
@@ -82,6 +82,12 @@ interface FileJSON {
   readonly type: string;
   readonly width?: number;
   readonly height?: number;
+  /** An image's smaller copies, widest first: `srcset(file)` lists them for an `<img>`. */
+  readonly sizes?: readonly {
+    readonly width: number;
+    readonly height: number;
+    readonly url: string;
+  }[];
 }
 /** `GET /api/auth/me`: the user, their roles, and their permission keys (to show or hide what the UI offers). */
 interface Me<U> {
@@ -151,8 +157,10 @@ interface ResourceEndpoint {
   /** `read`, `create`, `update`, `delete`, trait actions (`publish`, `reorder`), `history`. */
   readonly actions: readonly string[];
   readonly custom?: readonly string[];
-  /** Its writable file fields: `upload(field, file)` sends a file to attach by id (planning/uploads.md). */
+  /** Its writable file fields: `upload(field, file)` sends a file to attach by id. */
   readonly uploads?: readonly string[];
+  /** Those of them that are images: resized in the browser before they're sent (`./resize`). */
+  readonly images?: readonly string[];
 }
 /** A route in the endpoint table. */
 interface RouteEndpoint {
@@ -181,7 +189,7 @@ export declare function listQuery(query: ListQuery<Readonly<Record<string, unkno
 //#endregion
 //#region src/client/errors.d.ts
 /**
- * A failed call: the API's one error shape (planning/requests.md → Errors),
+ * A failed call: the API's one error shape,
  * `{ error: { code, message, … }, requestId }`, with its status.
  */
 export declare class ApiError extends Error {
@@ -205,4 +213,37 @@ export declare class ApiError extends Error {
   get fields(): Readonly<Record<string, string>>;
 }
 //#endregion
+//#region src/client/files.d.ts
+/**
+ * An image's `srcset`: the image and its smaller copies, each with its width, so the browser loads
+ * the one the screen needs (`<img src={file.url} srcset={srcset(file)} sizes="50vw">`). Undefined
+ * for a file without copies: its `url` is its only size.
+ */
+export declare function srcset(file: Pick<FileJSON, "url" | "width" | "sizes">): string | undefined;
+/** The smallest copy at least `width` wide (or the widest there is), else the file itself: a preview's image. */
+export declare function sizeFor(file: Pick<FileJSON, "url" | "width" | "height" | "sizes">, width: number): {
+  readonly url: string;
+  readonly width?: number | undefined;
+  readonly height?: number | undefined;
+};
+//#endregion
+//#region src/client/resize.d.ts
+/**
+ * Images are made smaller in the browser before they're uploaded: the full image at most 1080 px
+ * wide, and a copy at most 540 px wide (a list's card, a thumbnail, a link's preview), both kept
+ * when the image is larger than that; never made larger. Phones are the screens that matter: 1080
+ * is sharp across one at 3×, and the original (often 4000 px and several MB) isn't kept.
+ *
+ * Each is encoded again, which also drops the photo's metadata (a phone's GPS position): WebP where
+ * the browser can encode it, else JPEG; PNG only for an image with transparent pixels, which JPEG
+ * can't keep. No library: the browser decodes (turned the way the camera says), draws and encodes.
+ * A large step down is drawn in halves, which keeps it sharp. Where it can't (no `createImageBitmap`,
+ * or a format the browser can't decode), the file is uploaded as it is.
+ */
+/** The widths an image is kept at, at most. */
+export declare const IMAGE_WIDTHS: {
+  readonly full: 1080;
+  readonly small: 540;
+};
+//#endregion
 export type { AuthApi, ChoiceFilter, ClientBase, ClientOptions, Endpoints, FetchLike, FileJSON, FlagFilter, HistoryEntry, HistoryQuery, Invitation, InviteJSON, ListQuery, Me, Page, Person, RangeFilter, ResourceEndpoint, RouteEndpoint, SignInMethod, TextFilter };

package/dist/client/index.js

@@ -1,7 +1,7 @@
 import { t as kebabCase } from "../case-BnpcvhdW.js";
 //#region src/client/errors.ts
 /**
-* A failed call: the API's one error shape (planning/requests.md → Errors),
+* A failed call: the API's one error shape,
 * `{ error: { code, message, … }, requestId }`, with its status.
 */
 var ApiError = class extends Error {
@@ -33,15 +33,130 @@ async function errorOf(response) {
 	return new ApiError(response.status, typeof code === "string" ? code : "HttpError", typeof message === "string" ? message : `The request failed (${response.status})`, Array.isArray(issues) ? issues : [], details, typeof body.requestId === "string" ? body.requestId : void 0);
 }
 //#endregion
+//#region src/client/resize.ts
+/**
+* Images are made smaller in the browser before they're uploaded: the full image at most 1080 px
+* wide, and a copy at most 540 px wide (a list's card, a thumbnail, a link's preview), both kept
+* when the image is larger than that; never made larger. Phones are the screens that matter: 1080
+* is sharp across one at 3×, and the original (often 4000 px and several MB) isn't kept.
+*
+* Each is encoded again, which also drops the photo's metadata (a phone's GPS position): WebP where
+* the browser can encode it, else JPEG; PNG only for an image with transparent pixels, which JPEG
+* can't keep. No library: the browser decodes (turned the way the camera says), draws and encodes.
+* A large step down is drawn in halves, which keeps it sharp. Where it can't (no `createImageBitmap`,
+* or a format the browser can't decode), the file is uploaded as it is.
+*/
+/** The widths an image is kept at, at most. */
+const IMAGE_WIDTHS = {
+	full: 1080,
+	small: 540
+};
+/** How tall an image may be, for each width: a very tall one is held to twice its width's limit. */
+const TALLEST = 2;
+/** JPEG and WebP quality: no visible loss in a photo, at a fraction of its size. */
+const QUALITY = .82;
+/** `width` × `height` made to fit within `max` wide (and twice that tall), never larger. */
+function fitWithin(width, height, max) {
+	const scale = Math.min(1, max / width, max * TALLEST / height);
+	return {
+		width: Math.max(1, Math.round(width * scale)),
+		height: Math.max(1, Math.round(height * scale))
+	};
+}
+/** The sizes it's drawn at on the way down to `to`, halving each time, ending at `to`. */
+function stepsDown(from, to) {
+	const steps = [];
+	let { width, height } = from;
+	while (width / 2 > to.width) {
+		width = Math.round(width / 2);
+		height = Math.round(height / 2);
+		steps.push({
+			width,
+			height
+		});
+	}
+	steps.push(to);
+	return steps;
+}
+/** The image's sizes, or undefined when the browser can't make them (it's uploaded as it is). */
+async function resized(file, name) {
+	if (typeof createImageBitmap === "undefined") return void 0;
+	let bitmap;
+	try {
+		bitmap = await createImageBitmap(file, { imageOrientation: "from-image" });
+	} catch {
+		return;
+	}
+	try {
+		const source = {
+			width: bitmap.width,
+			height: bitmap.height
+		};
+		const full = drawn(bitmap, source, fitWithin(source.width, source.height, IMAGE_WIDTHS.full));
+		const clear = file.type !== "image/jpeg" && hasTransparency(full);
+		const fullFile = await encoded(full, name, clear);
+		if (source.width <= IMAGE_WIDTHS.small) return { full: fullFile };
+		return {
+			full: fullFile,
+			small: await encoded(drawn(full, full, fitWithin(source.width, source.height, IMAGE_WIDTHS.small)), name, clear)
+		};
+	} finally {
+		bitmap.close();
+	}
+}
+function canvasOf(width, height) {
+	if (typeof OffscreenCanvas !== "undefined") return new OffscreenCanvas(width, height);
+	const canvas = document.createElement("canvas");
+	canvas.width = width;
+	canvas.height = height;
+	return canvas;
+}
+function context2d(canvas) {
+	const context = canvas.getContext("2d");
+	if (!context) throw new Error("isai: this browser can't draw images");
+	context.imageSmoothingEnabled = true;
+	context.imageSmoothingQuality = "high";
+	return context;
+}
+/** `image` drawn at `to`, halving from `from` on the way. */
+function drawn(image, from, to) {
+	let current = image;
+	let canvas;
+	for (const step of stepsDown(from, to)) {
+		canvas = canvasOf(step.width, step.height);
+		context2d(canvas).drawImage(current, 0, 0, step.width, step.height);
+		current = canvas;
+	}
+	return canvas;
+}
+/** Whether any pixel isn't fully opaque. */
+function hasTransparency(canvas) {
+	const { data } = context2d(canvas).getImageData(0, 0, canvas.width, canvas.height);
+	for (let at = 3; at < data.length; at += 4) if (data[at] < 255) return true;
+	return false;
+}
+const blobOf = (canvas, type) => "convertToBlob" in canvas ? canvas.convertToBlob({
+	type,
+	quality: QUALITY
+}) : new Promise((resolve) => canvas.toBlob(resolve, type, QUALITY));
+/** WebP where the browser encodes it (it answers PNG where it can't), else JPEG, or PNG to keep transparency. */
+async function encoded(canvas, name, clear) {
+	let blob = await blobOf(canvas, "image/webp");
+	if (blob?.type !== "image/webp") blob = await blobOf(canvas, clear ? "image/png" : "image/jpeg");
+	if (!blob) throw new Error("isai: this browser couldn't encode the image");
+	const extension = blob.type === "image/webp" ? "webp" : blob.type === "image/png" ? "png" : "jpg";
+	return new File([blob], `${name.replace(/\.[^.]*$/, "") || "image"}.${extension}`, { type: blob.type });
+}
+//#endregion
 //#region src/client/client.ts
 /**
-* The client's runtime (planning/client.md): plain async calls over `fetch`, built from the endpoint
+* The client's runtime: plain async calls over `fetch`, built from the endpoint
 * table a generated client (`.isai/client.ts`) hands it. It holds no cache: a frontend wraps the
 * calls in what it uses (TanStack Query, nanostores).
 *
 *   resources   api.<name>.list(query) · get(key) · create(input) · update(key, input) · delete(key)
 *               · publish(key) · unpublish(key) · reorder(keys) · history(key, query)
-*               · <custom action>(key, input?) · upload(field, file)
+*               · <custom action>(key, input?) · upload(field, file)  (an image is resized first)
 *               (a singleton's calls take no key)
 *   routes      api.<name>(args)                           (path params and input in one object)
 *   auth        api.auth.me() · signIn() · signOut() · users · invites
@@ -52,11 +167,12 @@ function createClient(endpoints, options = {}) {
 	const base = (options.baseUrl ?? "/api").replace(/\/$/, "");
 	const send = options.fetch ?? ((input, init) => fetch(input, init));
 	const listeners = /* @__PURE__ */ new Set();
-	async function call(method, path, { query, body, signedOutIsAnswer = false } = {}) {
+	async function call(method, path, { query, body, headers: extra, signedOutIsAnswer = false } = {}) {
 		const search = query && query.size > 0 ? `?${query.toString().replace(/=(?=&|$)/g, "")}` : "";
 		const headers = {
 			Accept: "application/json",
-			...options.headers
+			...options.headers,
+			...extra
 		};
 		const file = body instanceof Blob ? body : void 0;
 		if (file) {
@@ -122,13 +238,27 @@ function resourceCalls(call, endpoint) {
 	for (const action of endpoint.custom ?? []) calls[action] = actionCall(call, keyed, action);
 	if (endpoint.uploads?.length) {
 		const fields = new Set(endpoint.uploads);
+		const images = new Set(endpoint.images);
 		calls.upload = (field, file) => {
 			if (!fields.has(field)) throw new TypeError(`isai: ${base} takes no upload for ${field}`);
-			return call("POST", `/uploads${base}/${kebabCase(field)}`, { body: file });
+			const path = `/uploads${base}/${kebabCase(field)}`;
+			if (!images.has(field)) return call("POST", path, { body: file });
+			return uploadImage(call, path, file);
 		};
 	}
 	return calls;
 }
+/** An image, resized: the full one, then its smaller copy with `X-Size-Of`; the answer is the image. */
+async function uploadImage(call, path, file) {
+	const sizes = await resized(file, file.name ?? "image");
+	if (!sizes) return call("POST", path, { body: file });
+	const image = await call("POST", path, { body: sizes.full });
+	if (!sizes.small) return image;
+	return call("POST", path, {
+		body: sizes.small,
+		headers: { "X-Size-Of": image.id }
+	});
+}
 function actionCall(call, keyed, action) {
 	return keyed((path, input) => call("POST", `${path}/${kebabCase(action)}`, input === void 0 ? {} : { body: input }));
 }
@@ -179,7 +309,7 @@ function pageQuery(query) {
 		...query.before === void 0 ? {} : { before: query.before }
 	};
 }
-/** The auth module's endpoints (planning/auth.md → Endpoints). */
+/** The auth module's endpoints. */
 function authApi(call, base) {
 	const person = (id) => `/auth/users/${segment(id)}`;
 	return {
@@ -211,4 +341,22 @@ function browser() {
 	return { location };
 }
 //#endregion
-export { ApiError, createClient, listQuery };
+//#region src/client/files.ts
+/**
+* An image's `srcset`: the image and its smaller copies, each with its width, so the browser loads
+* the one the screen needs (`<img src={file.url} srcset={srcset(file)} sizes="50vw">`). Undefined
+* for a file without copies: its `url` is its only size.
+*/
+function srcset(file) {
+	if (!file.sizes?.length || !file.width) return void 0;
+	return [...file.sizes, {
+		url: file.url,
+		width: file.width
+	}].map((one) => `${one.url} ${one.width}w`).join(", ");
+}
+/** The smallest copy at least `width` wide (or the widest there is), else the file itself: a preview's image. */
+function sizeFor(file, width) {
+	return [...file.sizes ?? []].sort((a, b) => a.width - b.width).find((one) => one.width >= width) ?? file;
+}
+//#endregion
+export { ApiError, IMAGE_WIDTHS, createClient, listQuery, sizeFor, srcset };

package/dist/{create-auth-Byf1-VJw.js → create-auth-Ci0PaBoX.js}

@@ -1,6 +1,6 @@
-import { t as fromBase64url } from "./base64url-DwWPqoOT.js";
-import { n as PROVIDERS } from "./tables-C3Uza4qK.js";
-import { a as byRole, c as tenant, i as anyone, l as user, n as PolicyRegistry, o as owner, s as readsTenant } from "./policies-yVzFCjxU.js";
+import { t as fromBase64url } from "./base64url-C5GTYIL5.js";
+import { n as PROVIDERS } from "./tables-IrLjsomf.js";
+import { a as byRole, c as tenant, i as anyone, l as user, n as PolicyRegistry, o as owner, s as readsTenant } from "./policies-CKIdBFKt.js";
 //#region src/auth/create-auth.ts
 const methods = { oauth: (provider, options) => ({
 	kind: "oauth",
@@ -15,7 +15,7 @@ const authPerms = {
 	invite: "auth.invite",
 	/** See the people with accounts, give and take their roles, suspend them. */
 	manageUsers: "auth.manageUsers",
-	/** Read the whole audit log (`GET /api/audit`), with the log on (planning/audit.md). */
+	/** Read the whole audit log (`GET /api/audit`), with the log on. */
 	readAudit: "audit.read"
 };
 var Auth = class {
@@ -31,7 +31,7 @@ var Auth = class {
 	/**
 	* Gives `email` a role from `app.ts`, from code (a tenant's setup service, a seed): now, if it has
 	* an account in the current database, else when it first signs in. Safe to repeat.
-	* `held: "platform"` puts the assignment beyond the tenant's reach (planning/tenancy.md → End of v1).
+	* `held: "platform"` puts the assignment beyond the tenant's reach.
 	*/
 	invite(input) {
 		if (!this.invites) return Promise.reject(/* @__PURE__ */ new Error("isai: auth.invite is used before the runtime started the app"));