@isaijs/core 0.1.0 → 0.1.3

package/dist/{data-layer-BMviRJaW.d.ts → data-layer-D1BFo3wO.d.ts}

@@ -1,6 +1,7 @@
-import { a as DatabaseDriver, o as DialectName } from "./index-BKwTOLop.js";
-import { M as IdInput, q as StoredFile } from "./index-BVCrbMav.js";
-import { A as Dialect, G as Model, H as Columns, I as Clock, K as ModelSpec, M as RetiredSnapshot, N as SchemaSnapshot, U as ComputedFields, V as AnyModel, W as Fields, X as Condition, at as count, b as RowOf, dt as Kinds, et as Now, f as seed, ft as SchemaDefaults, ht as Field, i as Row, it as any, mt as AnyField, n as Patch, ot as not, p as Database, q as ModelRegistry, rt as all, yt as Slot } from "./types-BFc_NEx8.js";
+import { a as DatabaseDriver, o as DialectName } from "./index-Ce5p2-EB.js";
+import { t as Issue } from "./issues-CKto95IW.js";
+import { M as IdInput, Y as StoredFile } from "./index-CYcklQ1l.js";
+import { A as Dialect, G as Model, H as Columns, I as Clock, K as ModelSpec, M as RetiredSnapshot, N as SchemaSnapshot, U as ComputedFields, V as AnyModel, W as Fields, X as Condition, at as count, b as RowOf, dt as Kinds, et as Now, f as seed, ft as SchemaDefaults, ht as Field, i as Row, it as any, mt as AnyField, n as Patch, ot as not, p as Database, q as ModelRegistry, rt as all, yt as Slot } from "./types-S6zF5IXV.js";
 //#region src/db/schema/traits.d.ts
 type ComputedDefinitions = Record<string, (row: any) => Condition>;
 interface TraitSpec {
@@ -79,12 +80,20 @@ declare class CheckFailed extends DatabaseError {
   readonly name = "CheckFailed";
   constructor(model: string, check: string, options?: ErrorOptions);
 }
-/** A unique field (or combination) already has this value. */
+/**
+ * A unique field (or combination) already has this value. `fields` are the unique's own; `issues`
+ * put one on each for a form, except that a field made from another (a slug from its title) puts
+ * it on that one, the field a person typed.
+ */
 declare class UniqueFailed extends DatabaseError {
   readonly model: string;
   readonly fields: readonly string[];
   readonly name = "UniqueFailed";
-  constructor(model: string, fields: readonly string[], options?: ErrorOptions);
+  readonly issues: readonly Issue[];
+  constructor(model: string, fields: readonly string[], options?: ErrorOptions & {
+    /** The field each generated one is made from: `{ slug: "title" }`. */
+    readonly from?: Readonly<Record<string, string>>;
+  });
 }
 /** A ref points at a row that doesn't exist, or a delete is restricted by rows that reference it. */
 declare class ReferenceFailed extends DatabaseError {
@@ -268,7 +277,7 @@ declare class UnsafeMigration extends Error {
 //#region src/db/migrations/errors.d.ts
 /**
  * The migrator's errors: one type with a code, a message and a hint, so the CLI prints the same
- * shape for each and picks its exit code from the code (planning/migrations.md → Errors).
+ * shape for each and picks its exit code from the code.
  */
 type MigrationErrorCode = "migrations.conflict" | "migrations.tampered" | "database.ahead" | "cleanup.notLive" | "migrations.todo" | "migrations.missing" | "migrations.question" | "migrations.rename" | "migrations.uniqueFill" | "data.loops" | "lock.held" | "deploy.held" | "rollback.unknownRelease" | "rollback.beyondCleanup";
 declare class MigrationError extends Error {
@@ -708,7 +717,7 @@ declare function authTables(f: Kinds, options: AuthTablesOptions): TableSet<{
         };
       }>;
       /**
-       * Held by the platform (planning/tenancy.md → End of v1): the tenant's people, the owner
+       * Held by the platform: the tenant's people, the owner
        * included, can't take it away or suspend its holder.
        */
       held: Field<"platform", "platform", true, false, {}>;
@@ -911,6 +920,11 @@ declare function tenancyTables(f: Kinds, options: TenancyOptions): TableSet<{
 //#region src/db/schema/data-layer.d.ts
 /** A project kind: a preset field (`base.line().max(120)`), or a factory for parameterized kinds. */
 type ProjectKind = AnyField | ((...args: any[]) => AnyField);
+/** What a model may say before its traits and fields. */
+interface ModelOptions {
+  /** It lives in the platform's database (with tenancy), as its folder does: `db/schema/platform/`. */
+  readonly database: "platform";
+}
 interface DataLayerDefinition<P extends Record<string, ProjectKind>, U extends readonly AnyTableSet[]> {
   /**
    * Built-in tables to switch on (`[base.authTables({ database: "tenant" }), base.tenancy({ database: "platform" })]`):
@@ -922,20 +936,23 @@ interface DataLayerDefinition<P extends Record<string, ProjectKind>, U extends r
 }
 /** What `define` gets: the built-in kinds, and the built-in table sets it may `use`. */
 type Base = Kinds & {
-  /** User, Session, Account, Verification, Invite, Role and UserRole, in the app's data database (planning/auth.md). */
+  /** User, Session, Account, Verification, Invite, Role and UserRole, in the app's data database. */
   readonly authTables: (options: AuthTablesOptions) => ReturnType<typeof authTables>;
-  /** `Tenant` and `Domain`, in the platform's database (planning/tenancy.md). */
+  /** `Tenant` and `Domain`, in the platform's database. */
   readonly tenancy: (options: TenancyOptions) => ReturnType<typeof tenancyTables>;
-  /** `Upload` (files uploaded and not yet attached), in the app's data database (planning/uploads.md). */
+  /** `Upload` (files uploaded and not yet attached), in the app's data database. */
   readonly uploads: (options: UploadTablesOptions) => ReturnType<typeof uploadTables>;
-  /** `AuditEntry` (the audit log), in the database whose writes it records (planning/audit.md). */
+  /** `AuditEntry` (the audit log), in the database whose writes it records. */
   readonly audit: (options: AuditTablesOptions) => AuditTables;
 };
 type ProjectKinds<P> = { readonly [K in keyof P]: P[K] extends AnyField ? () => P[K] : P[K]; };
 /** The placeholder for conditions over a model's rows: `const event = row(Event)`. */
 declare function row<M extends AnyModel>(target: M): Columns<M["~fields"], M["name"]>;
 declare function createDataLayer<P extends Record<string, ProjectKind> = {}, const U extends readonly AnyTableSet[] = []>(define?: (base: Base) => DataLayerDefinition<P, U>): {
-  model: <const Name extends string, const T extends readonly AnyTrait[], F extends Fields>(name: Name, ...rest: [...traits: T, fields: F]) => Model<Name, TraitFields<T> & F>;
+  model: {
+    <const Name extends string, const T extends readonly AnyTrait[], F extends Fields>(name: Name, ...rest: [...traits: T, fields: F]): Model<Name, TraitFields<T> & F>;
+    <const Name extends string, const T extends readonly AnyTrait[], F extends Fields>(name: Name, options: ModelOptions, ...rest: [...traits: T, fields: F]): Model<Name, TraitFields<T> & F>;
+  };
   f: Kinds & ProjectKinds<P>;
   builtins: Builtins<U>;
   slots: {

package/dist/{data-layer-BNtz40PV.js → data-layer-_TZtuy-F.js}

@@ -1,6 +1,7 @@
-import { O as datetime, P as quantity, p as host, r as isPhoneRegion } from "./validation-l5JG-PFn.js";
-import { C as not, M as field, N as fieldKinds, S as count, s as defineModel, u as rowOf, v as all, w as now, y as any } from "./base64url-DwWPqoOT.js";
-import { a as TableSet, i as platformAuthDefinitions, o as defineBuiltins, r as authTables } from "./tables-C3Uza4qK.js";
+import { F as quantity, k as datetime, m as host, r as isPhoneRegion } from "./validation-Cppmd0RV.js";
+import "./migrator-BU3_PHk8.js";
+import { C as not, M as field, N as fieldKinds, S as count, s as defineModel, u as rowOf, v as all, w as now, y as any } from "./base64url-C5GTYIL5.js";
+import { a as TableSet, i as platformAuthDefinitions, o as defineBuiltins, r as authTables } from "./tables-IrLjsomf.js";
 import { n as seed } from "./seed-BObmdKdP.js";
 //#region src/db/fields/slot.ts
 var Slot = class {
@@ -89,13 +90,13 @@ function uploadTables(f, options) {
 //#endregion
 //#region src/tenancy/tables.ts
 /**
-* The platform's built-in tables (planning/tenancy.md → The platform database), switched on with
+* The platform's built-in tables, switched on with
 * `use: [base.tenancy({ database: "platform" })]` in `db/index.ts`:
 *
 *   Tenant  the registry: what the front door finds behind a host, and whether it may answer
 *   Domain  every host a tenant answers on (its subdomain and custom domains alike)
 *   PlatformUser, PlatformSession… the platform's own people (the auth tables, prefixed): who
-*           signs in on the platform's host (planning/tenancy.md → End of v1)
+*           signs in on the platform's host
 *
 * Feature switches are the app's own columns: `builtins.Tenant.extend({ coupons: f.flag() })`.
 */
@@ -171,8 +172,10 @@ var ModelRegistry = class {
 //#region src/db/schema/traits.ts
 /**
 * Traits: behaviour a model takes whole, written before its fields (`model(name, ...traits,
-* fields)`, planning/traits-and-slots.md). A trait adds fields (so the model's own fields already
-* see them), computed fields, and a name the framework reads (`singleton`).
+* fields)`), Laravel's traits typed. A trait adds fields (so the model's own fields already see
+* them; declaring one of them again is an error), computed fields, and a name the framework reads
+* (`singleton`). Always written `traits.x()`, never imported bare: a bare `publishable()` reads like
+* an action.
 */
 var Trait = class {
 	spec;
@@ -224,6 +227,8 @@ function builtinTraits() {
 * `slots`, `builtins`, the condition language and `seed`. One call serves every database the app
 * has (with isolated tenancy, the tenants' and the platform's).
 */
+/** A model's options: `{ database: "…" }`, never fields (a field is a kind, not a string). */
+const isOptions = (value) => typeof value === "object" && value !== null && !(value instanceof Trait) && Object.keys(value).length === 1 && typeof value.database === "string";
 /** The placeholder for conditions over a model's rows: `const event = row(Event)`. */
 function row(target) {
 	return rowOf(target.spec, target.registry);
@@ -258,15 +263,18 @@ function createDataLayer(define) {
 			byDefault
 		};
 	}
-	/** `model(name, fields)`, or with traits first: `model(name, traits.ordered({ within: "event" }), fields)`. */
-	const model = (name, ...rest) => {
+	function model(name, ...given) {
 		if (Object.hasOwn(builtins, name)) throw new TypeError(`isai: ${name} is a built-in table; add columns with builtins.${name}.extend({ … })`);
+		const first = given[0];
+		const options = given.length > 1 && isOptions(first) ? first : void 0;
+		const rest = options ? given.slice(1) : given;
+		if (options && options.database !== "platform") throw new TypeError(`isai: model("${name}") takes { database: "platform" } only`);
 		const fields = rest.at(-1);
 		if (!fields || fields instanceof Trait) throw new TypeError(`isai: model("${name}") needs its fields last`);
 		const traits = rest.slice(0, -1);
 		if (!traits.every((trait) => trait instanceof Trait)) throw new TypeError(`isai: model("${name}") takes traits, then its fields`);
-		return defineModel(registry, name, fields, traits);
-	};
+		return defineModel(registry, name, fields, traits, { ...options ? { database: options.database } : {} });
+	}
 	return {
 		model,
 		f: {

package/dist/db/index.d.ts

@@ -1,4 +1,4 @@
-import { a as ValidationError } from "../issues-Bxq4JExX.js";
-import { $ as Expr, A as Dialect, B as newSecretKey, F as snapshotOf, G as Model, I as Clock, J as Models, K as ModelSpec, L as FixedClock, M as RetiredSnapshot, N as SchemaSnapshot, O as Write, P as emptySnapshot, R as fixedClock, V as AnyModel, X as Condition, Y as Column, _ as database, _t as Storage, a as Visible, at as count, bt as slot, c as Many, d as SeedContext, dt as Kinds, et as Now, ft as SchemaDefaults, g as Transaction, gt as FieldSpec, h as RawValue, ht as Field, i as Row, it as any, j as Rule, k as WriteListener, l as Overrides, lt as ConditionNode, m as DatabaseOptions, n as Patch, nt as Total, o as Make, ot as not, p as Database, pt as fieldKinds, r as Planned, rt as all, st as now, t as Insert, tt as Relation, u as Seed, v as OrderKey, vt as sensitivity, y as Query, yt as Slot, z as systemClock } from "../types-BFc_NEx8.js";
-import { A as MigrateOptions, B as NotFound, C as MigrationErrorCode, D as Cleanup, E as UnsafeMigration, F as DataStep, H as UniqueFailed, I as TODO, L as dataStep, M as migrate, N as migrateFresh, O as cleanupMigration, P as sync, R as CheckFailed, S as MigrationError, T as UnsafeChange, U as dialectFor, V as ReferenceFailed, W as sqlite, _ as Generated, b as manifest, c as acquireLock, d as setReleaseStatus, f as startRelease, g as makeMigrations, h as makeCleanup, j as Migration, k as Manifest, l as releaseLock, m as checkMigrations, n as row, o as Release, p as applyRules, s as ReleaseStatus, t as createDataLayer, u as rollback, v as generateMigration, w as SuspectedRename, x as structureStep, y as cleanupStep, z as DatabaseError } from "../data-layer-BMviRJaW.js";
+import { a as ValidationError } from "../issues-CKto95IW.js";
+import { $ as Expr, A as Dialect, B as newSecretKey, F as snapshotOf, G as Model, I as Clock, J as Models, K as ModelSpec, L as FixedClock, M as RetiredSnapshot, N as SchemaSnapshot, O as Write, P as emptySnapshot, R as fixedClock, V as AnyModel, X as Condition, Y as Column, _ as database, _t as Storage, a as Visible, at as count, bt as slot, c as Many, d as SeedContext, dt as Kinds, et as Now, ft as SchemaDefaults, g as Transaction, gt as FieldSpec, h as RawValue, ht as Field, i as Row, it as any, j as Rule, k as WriteListener, l as Overrides, lt as ConditionNode, m as DatabaseOptions, n as Patch, nt as Total, o as Make, ot as not, p as Database, pt as fieldKinds, r as Planned, rt as all, st as now, t as Insert, tt as Relation, u as Seed, v as OrderKey, vt as sensitivity, y as Query, yt as Slot, z as systemClock } from "../types-S6zF5IXV.js";
+import { A as MigrateOptions, B as NotFound, C as MigrationErrorCode, D as Cleanup, E as UnsafeMigration, F as DataStep, H as UniqueFailed, I as TODO, L as dataStep, M as migrate, N as migrateFresh, O as cleanupMigration, P as sync, R as CheckFailed, S as MigrationError, T as UnsafeChange, U as dialectFor, V as ReferenceFailed, W as sqlite, _ as Generated, b as manifest, c as acquireLock, d as setReleaseStatus, f as startRelease, g as makeMigrations, h as makeCleanup, j as Migration, k as Manifest, l as releaseLock, m as checkMigrations, n as row, o as Release, p as applyRules, s as ReleaseStatus, t as createDataLayer, u as rollback, v as generateMigration, w as SuspectedRename, x as structureStep, y as cleanupStep, z as DatabaseError } from "../data-layer-D1BFo3wO.js";
 export { type AnyModel, CheckFailed, type Cleanup, type Clock, Column, Condition, type ConditionNode, type DataStep, Database, DatabaseError, type DatabaseOptions, type Dialect, Expr, Field, type FieldSpec, type FixedClock, type Generated, type Insert, type Kinds, type Make, type Manifest, type Many, type MigrateOptions, type Migration, MigrationError, type MigrationErrorCode, Model, type ModelSpec, type Models, NotFound, Now, type OrderKey, type Overrides, type Patch, type Planned, Query, type RawValue, ReferenceFailed, Relation, type Release, type ReleaseStatus, type RetiredSnapshot, type Row, type Rule, type SchemaDefaults, type SchemaSnapshot, Seed, type SeedContext, Slot, type Storage, type SuspectedRename, TODO, Total, Transaction, UniqueFailed, type UnsafeChange, UnsafeMigration, ValidationError, type Visible, type Write, type WriteListener, acquireLock, all, any, applyRules, checkMigrations, cleanupMigration, cleanupStep, count, createDataLayer, dataStep, database, dialectFor, emptySnapshot, fieldKinds, fixedClock, generateMigration, makeCleanup, makeMigrations, manifest, migrate, migrateFresh, newSecretKey, not, now, releaseLock, rollback, row, sensitivity, setReleaseStatus, slot, snapshotOf, sqlite, startRelease, structureStep, sync, systemClock };

package/dist/db/index.js

@@ -1,9 +1,9 @@
-import { W as ValidationError } from "../validation-l5JG-PFn.js";
-import { A as Query, C as database, F as systemClock, G as UniqueFailed, H as DatabaseError, I as newSecretKey, M as dialectFor, N as sqlite, P as fixedClock, U as NotFound, V as CheckFailed, W as ReferenceFailed, _ as TODO, b as Database, c as rollback, d as applyRules, g as UnsafeMigration, h as snapshotOf, i as acquireLock, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, p as generateMigration, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, x as Transaction, y as MigrationError } from "../migrator-C65RM_K-.js";
-import { C as not, F as sensitivity, N as fieldKinds, P as Field, S as count, _ as Total, d as Column, f as Condition, g as Relation, h as Now, m as Expr, r as Model, v as all, w as now, y as any } from "../base64url-DwWPqoOT.js";
-import { i as slot, n as row, r as Slot, t as createDataLayer } from "../data-layer-BNtz40PV.js";
+import { G as ValidationError } from "../validation-Cppmd0RV.js";
+import { A as Query, C as database, F as systemClock, G as DatabaseError, I as newSecretKey, J as UniqueFailed, K as NotFound, M as dialectFor, N as sqlite, P as fixedClock, W as CheckFailed, _ as TODO, b as Database, c as rollback, d as applyRules, g as UnsafeMigration, h as snapshotOf, i as acquireLock, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, p as generateMigration, q as ReferenceFailed, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, x as Transaction, y as MigrationError } from "../migrator-BU3_PHk8.js";
+import { C as not, F as sensitivity, N as fieldKinds, P as Field, S as count, _ as Total, d as Column, f as Condition, g as Relation, h as Now, m as Expr, r as Model, v as all, w as now, y as any } from "../base64url-C5GTYIL5.js";
+import { i as slot, n as row, r as Slot, t as createDataLayer } from "../data-layer-_TZtuy-F.js";
 import { t as Seed } from "../seed-BObmdKdP.js";
-import { a as cleanupMigration, i as makeMigrations, r as makeCleanup, t as checkMigrations } from "../make-DKzPd2b_.js";
+import { a as cleanupMigration, i as makeMigrations, r as makeCleanup, t as checkMigrations } from "../make-DKBn79cH.js";
 //#region src/db/migrations/files.ts
 /** A structure step file: adds tables and columns. Applied once, never edited. */
 function structureStep(options) {

package/dist/{index-BVCrbMav.d.ts → index-CYcklQ1l.d.ts}

@@ -1,4 +1,4 @@
-import { i as Result, r as Path } from "./issues-Bxq4JExX.js";
+import { i as Result, r as Path } from "./issues-CKto95IW.js";
 //#region src/validation/standard.d.ts
 /**
  * Standard Schema v1 (standardschema.dev), the interface Zod, Valibot and ArkType share. Every
@@ -39,7 +39,7 @@ interface Measure {
 }
 /**
  * How sensitive a value is: `hidden` never leaves the server; `personal` is redacted in logs,
- * exports and AI context. The output layer applies it (planning/fields.md → Sensitive fields).
+ * exports and AI context. The output layer applies it.
  */
 type Sensitivity = "hidden" | "personal";
 interface KindSpec {
@@ -76,7 +76,7 @@ interface KindSpec {
    */
   readonly fake: (fake: Fake, context: FakeContext) => unknown;
 }
-/** What a file kind accepts, and where its files go (planning/uploads.md). */
+/** What a file kind accepts, and where its files go. */
 interface FileSpec {
   /** The storage its files go to: a key of `storage` in `app.ts`. */
   readonly storage: string;
@@ -176,7 +176,22 @@ interface StoredFile {
   /** An image's size in pixels, when its format says. */
   readonly width?: number;
   readonly height?: number;
+  /**
+   * An image's smaller copies, each in its own key: the client makes them before uploading (`srcset`
+   * picks one). None means the file itself serves every size.
+   */
+  readonly sizes?: readonly ImageSize[];
+}
+/** One smaller copy of an image: where it's stored, and what it is. */
+interface ImageSize {
+  readonly key: string;
+  readonly size: number;
+  readonly type: string;
+  readonly width: number;
+  readonly height: number;
 }
+/** At most this many smaller copies of one image. */
+declare const SIZES_MAX = 4;
 /** File types by their usual name, with the media types each covers. */
 declare const FILE_TYPES: {
   readonly pdf: readonly ["application/pdf"];
@@ -346,9 +361,8 @@ declare const slug: () => Kind<string, string, false, false>;
  */
 declare const host: () => Kind<string, string, false, false>;
 /**
- * One DNS label for a tenant's host on the platform (`demo` in `demo.thiraiangadi.shop`,
- * planning/tenancy.md → End of v1): lowercase letters, digits and inner dashes, 3–63 characters,
- * none of the reserved names.
+ * One DNS label for a tenant's host on the platform (`demo` in `demo.thiraiangadi.shop`):
+ * lowercase letters, digits and inner dashes, 3–63 characters, none of the reserved names.
  */
 declare const subdomain: () => Kind<string, string, false, false>;
 /** A slug made from text: `"Summer Fest 2026!"` → `"summer-fest-2026"`. Empty when nothing survives. */
@@ -368,4 +382,4 @@ declare const email: () => Kind<string, string, false, false>;
 /** An http(s) URL, up to 2,048 characters. */
 declare const url: () => Kind<string, string, false, false>;
 //#endregion
-export { FakeContext as $, validate as A, money as B, ObjectShape as C, object as D, list as E, datetime as F, FileType as G, sequence as H, fakeUlid as I, file as J, ImageType as K, flag as L, IdInput as M, choice as N, serialize as O, date as P, Fake as Q, id as R, LIST_MAX as S, Shape as T, phone as U, quantity as V, phoneKind as W, image as X, files as Y, images as Z, define as _, newToken as a, Measure as at, CarriesKind as b, slug as c, kind as ct, text as d, StandardResult as dt, AnyKind as et, textKind as f, StandardSchemaV1 as ft, KindDefinition as g, Definable as h, markdown as i, KindTypes as it, CalendarDate as j, toKind as k, slugify as l, StandardIssue as lt, url as m, host as n, Kind as nt, personName as o, Sensitivity as ot, token as p, StoredFile as q, line as r, KindSpec as rt, secret as s, TypeText as st, email as t, FileSpec as tt, subdomain as u, StandardProps as ut, json as v, Output as w, Input as x, urls as y, int as z };
+export { images as $, validate as A, money as B, ObjectShape as C, object as D, list as E, datetime as F, FileType as G, sequence as H, fakeUlid as I, SIZES_MAX as J, ImageSize as K, flag as L, IdInput as M, choice as N, serialize as O, date as P, image as Q, id as R, LIST_MAX as S, Shape as T, phone as U, quantity as V, phoneKind as W, file as X, StoredFile as Y, files as Z, define as _, newToken as a, KindSpec as at, CarriesKind as b, slug as c, Sensitivity as ct, text as d, StandardIssue as dt, Fake as et, textKind as f, StandardProps as ft, KindDefinition as g, Definable as h, markdown as i, Kind as it, CalendarDate as j, toKind as k, slugify as l, TypeText as lt, url as m, StandardSchemaV1 as mt, host as n, AnyKind as nt, personName as o, KindTypes as ot, token as p, StandardResult as pt, ImageType as q, line as r, FileSpec as rt, secret as s, Measure as st, email as t, FakeContext as tt, subdomain as u, kind as ut, json as v, Output as w, Input as x, urls as y, int as z };

package/dist/{index-BKwTOLop.d.ts → index-Ce5p2-EB.d.ts}

@@ -31,7 +31,7 @@ interface AppCore {
     readonly seeded: boolean;
   }>;
 }
-/** A tenant's entry points, where its database lives (planning/tenancy.md → Tenant databases). */
+/** A tenant's entry points, where its database lives. */
 interface TenantCore {
   /** Brings the tenant's database to the deployed schema: on wake, before any request. */
   wake(): Promise<void>;
@@ -125,7 +125,7 @@ interface StoredObject {
   readonly contentType?: string;
 }
 /**
- * Where files live (planning/uploads.md). A storage with a `publicUrl` is public: its files are
+ * Where files live. A storage with a `publicUrl` is public: its files are
  * served from there, by the bucket. Without one it's private, and the app serves its files
  * through signed links.
  */

package/dist/{index-CBWFoL3s.d.ts → index-DlgVg3D8.d.ts}

@@ -1,7 +1,7 @@
-import { a as DatabaseDriver, b as TenantDatabases, d as RateLimiter, g as Storage, l as PdfRenderer, n as Body, p as Runtime, r as Cache, s as MailDriver, u as Queue } from "./index-BKwTOLop.js";
-import { C as ObjectShape, q as StoredFile, w as Output } from "./index-BVCrbMav.js";
-import { $ as Expr, C as WithIncludes, D as PageOptions, E as Page, J as Models, Q as Embed, S as Key, T as NumberedPageOptions, V as AnyModel, X as Condition, Z as Conditional, b as RowOf, ct as ColumnNode, gt as FieldSpec, i as Row, lt as ConditionNode, n as Patch, p as Database, t as Insert, ut as Operand, v as OrderKey, w as NumberedPage, x as IncludePath } from "./types-BFc_NEx8.js";
-import { a as PROVIDERS, i as HELD, k as Manifest } from "./data-layer-BMviRJaW.js";
+import { a as DatabaseDriver, b as TenantDatabases, d as RateLimiter, g as Storage, l as PdfRenderer, n as Body, p as Runtime, r as Cache, s as MailDriver, u as Queue } from "./index-Ce5p2-EB.js";
+import { C as ObjectShape, Y as StoredFile, w as Output } from "./index-CYcklQ1l.js";
+import { $ as Expr, C as WithIncludes, D as PageOptions, E as Page, J as Models, Q as Embed, S as Key, T as NumberedPageOptions, V as AnyModel, X as Condition, Z as Conditional, b as RowOf, ct as ColumnNode, gt as FieldSpec, i as Row, lt as ConditionNode, n as Patch, p as Database, t as Insert, ut as Operand, v as OrderKey, w as NumberedPage, x as IncludePath } from "./types-S6zF5IXV.js";
+import { a as PROVIDERS, i as HELD, k as Manifest } from "./data-layer-D1BFo3wO.js";
 //#region src/auth/policies.d.ts
 /** The actions every model's policy has. */
 declare const STANDARD_ACTIONS: readonly ["read", "create", "update", "delete"];
@@ -58,7 +58,7 @@ interface DefinePolicy {
 //#region src/api/fail.d.ts
 /**
  * `fail(code, message)`: the app's own business rules, for what can't be a `.check()`, a flow or a
- * unique. Always a 409; app code never picks a status (planning/requests.md → Errors).
+ * unique. Always a 409; app code never picks a status.
  */
 declare class Rejected extends Error {
   /** Stable and machine-readable (`alreadyCheckedIn`). */
@@ -148,7 +148,7 @@ type User = Models extends {
   readonly id: string;
 };
 /**
- * Who signs in on the platform's host (planning/tenancy.md → End of v1): the `PlatformUser` row,
+ * Who signs in on the platform's host: the `PlatformUser` row,
  * once it's in the `Models` registry.
  */
 type PlatformUser = Models extends {
@@ -165,8 +165,8 @@ interface RouteOptions<S extends ObjectShape = ObjectShape, A extends boolean =
   /** Callable without a session; `user` is then `User | undefined`. Signed in by default. */
   readonly anonymous?: A;
   /**
-   * Served on the platform's host, in the front door, with no tenant (isolated tenancy,
-   * planning/tenancy.md → End of v1): `db` is the platform's, `user` a platform user.
+   * Served on the platform's host, in the front door, with no tenant (isolated tenancy): `db` is
+   * the platform's, `user` a platform user.
    */
   readonly platform?: Pl;
 }
@@ -190,13 +190,13 @@ interface RouteContext<P extends string, S extends ObjectShape, A extends boolea
   readonly input: Output<S>;
   /** The raw request, for headers. */
   readonly request: Request;
-  /** The tenant this request is for (planning/tenancy.md); undefined without tenancy, and on the platform's host. */
+  /** The tenant this request is for; undefined without tenancy, and on the platform's host. */
   readonly tenant: Pl extends true ? undefined : TenantRow;
 }
 type RouteHandler<P extends string, S extends ObjectShape, A extends boolean, R = unknown, Pl extends boolean = false> = (context: RouteContext<P, S, A, Pl>) => R;
 /**
  * One declared route. The pipeline finds these among an app module's exports. `O` is what its
- * handler returns, awaited: the typed client reads it (planning/client.md).
+ * handler returns, awaited: the typed client reads it.
  */
 declare class Route<O = unknown> {
   readonly method: Method;
@@ -284,7 +284,7 @@ interface AppConfig {
    * `durableObject(env.TENANT)`) and `platform`. Without: one database, named freely (`main`).
    */
   readonly databases: Readonly<Record<string, DatabaseDriver | TenantDatabases>>;
-  /** Many tenants (planning/tenancy.md); left out, the app has one. Needs `databases.platform`. */
+  /** Many tenants; left out, the app has one. Needs `databases.platform`. */
   readonly tenancy?: TenancyConfig;
   /** Who signs in and how: `auth` from `auth.ts` (createAuth). */
   readonly auth?: Auth<any>;
@@ -330,11 +330,19 @@ type AnyColumn = {
 interface ResourceOptions {
   /** ANDed with the policy for every action (a view's `WHERE`); `byRole` is the action's permission. */
   readonly filter?: Conditional;
-  /** The output: exactly these columns, or `"all"` (hidden kinds never leave either way). */
+  /**
+   * The output: exactly these columns, or `"all"` (hidden kinds never leave either way). Refs and
+   * relations are embedded with `.pick(...)`, whose paths may follow relations
+   * (`product.variants.pick("price", "tiers.price")`); each level keeps only the rows its own
+   * model's `read` rule allows.
+   */
   readonly fields: readonly (AnyColumn | Embed)[] | "all";
   /** Named values computed in SQL (counts, sums, conditions), beside the fields. */
   readonly computed?: Readonly<Record<string, AnyColumn | Condition>>;
-  /** The only fields create and update accept, or `"all"`. */
+  /**
+   * The only fields create and update accept (a mass-assignment guard), or `"all"`. With `create`,
+   * it covers every required field without a default.
+   */
   readonly writable?: readonly AnyColumn[] | "all";
   /** Fields (or ref paths: `product.category.slug`) a client may filter by. */
   readonly filterable?: readonly AnyColumn[];
@@ -342,7 +350,7 @@ interface ResourceOptions {
   readonly sortable?: readonly (AnyColumn | string)[];
   /** Named conditions a client switches on: `?onSale`. */
   readonly filters?: Readonly<Record<string, Conditional>>;
-  /** Text fields `?q=` searches. */
+  /** Fields (or ref paths: `product.category.name`) `?search=` matches, any of them, ignoring case. */
   readonly search?: readonly AnyColumn[];
   /** The column `/:key` looks up (unique). The id by default; a singleton has none. */
   readonly key?: AnyColumn;
@@ -358,7 +366,7 @@ interface SearchField {
 }
 /**
  * A declared resource, with what the engine reads from it. `C` is its custom actions, as declared:
- * the typed client reads what each returns (planning/client.md).
+ * the typed client reads what each returns.
  */
 declare class Resource<C = Readonly<Record<string, CustomAction>>> {
   readonly model: AnyModel;
@@ -396,6 +404,8 @@ interface PutOptions {
   readonly storage?: string;
   /** The body's length in bytes: needed for a stream, read from bytes and text. */
   readonly size?: number;
+  /** An image's smaller copies, as bytes (each smaller than it): `srcset` picks one. */
+  readonly sizes?: readonly (ArrayBuffer | Uint8Array)[];
 }
 interface AppFiles {
   /** Stores a file (its type read from its bytes) in the current tenant's space, and returns it for a write. */
@@ -409,7 +419,7 @@ interface AppFiles {
   url(file: StoredFile, options?: {
     readonly origin?: string;
   }): Promise<string>;
-  /** Removes the file from its storage. */
+  /** Removes the file (and its sizes) from its storage. */
   delete(file: StoredFile): Promise<void>;
 }
 //#endregion
@@ -431,13 +441,13 @@ interface App {
   readonly db: Database;
   /**
    * The platform's database (isolated tenancy): for the platform's routes, services and seeds,
-   * refused inside a tenant, where `app.db` is the tenant's (planning/tenancy.md → End of v1).
+   * refused inside a tenant, where `app.db` is the tenant's.
    */
   readonly platform: {
     readonly db: Database;
   };
   /**
-   * Files from code (planning/uploads.md): `put` stores one for a write (in the current tenant's
+   * Files from code: `put` stores one for a write (in the current tenant's
    * space), `get` reads it, `url` links to it, `delete` removes it.
    */
   readonly files: AppFiles;
@@ -456,7 +466,7 @@ interface AppOptions {
   /**
    * The tenant database's history: `() => import("#migrations/tenant")`, through a
    * `#migrations/<name>` alias to `./migrations/<name>/index.ts` in `package.json` imports. Needed with
-   * isolated tenancy, where each tenant's database applies it on wake (planning/tenancy.md).
+   * isolated tenancy, where each tenant's database applies it on wake.
    */
   readonly migrations?: AppMigrations;
   /**
@@ -480,7 +490,7 @@ interface CreatedApp<Served, TenantHost = undefined> {
    */
   readonly Tenant: TenantHost;
   readonly route: RouteBuilder;
-  /** `resource(Model, options)`: what the API exposes over a model (planning/resources.md). */
+  /** `resource(Model, options)`: what the API exposes over a model. */
   readonly resource: typeof resource;
   readonly fail: typeof fail;
 }
@@ -491,7 +501,7 @@ interface CreatedApp<Served, TenantHost = undefined> {
 declare function createApp<Env, Served, TenantHost = undefined>(runtime: Runtime<Env, Served, TenantHost>, configure: (env: Env) => AppConfig, options?: AppOptions): CreatedApp<Served, TenantHost>;
 //#endregion
 //#region src/app/core.d.ts
-/** The app modules (`apps/*\/routes.ts`, `resources.ts`), each a lazy import (planning/README.md → Instances). */
+/** The app modules (`apps/*\/routes.ts`, `resources.ts`), each a lazy import. */
 type AppModules = () => readonly Promise<object>[];
 /**
  * The tenant database's history, as a lazy import of the manifest `isai makemigrations` writes
@@ -525,7 +535,7 @@ declare class NotImplementedError extends Error {
 interface InviteInput {
   readonly email: string;
   readonly role: string;
-  /** `"platform"`: the tenant's people can't take the role away (planning/tenancy.md → End of v1). */
+  /** `"platform"`: the tenant's people can't take the role away. */
   readonly held?: (typeof HELD)[number];
 }
 //#endregion
@@ -556,8 +566,10 @@ interface AuthDefinition {
   /** Who may make an account by signing in: anyone (`"open"`, the default), or the invited. */
   readonly signUp?: "open" | "invite";
   /**
-   * Signs what crosses the browser during sign-in (Google's `state`, the hand-off between hosts):
-   * 32 random bytes, base64url, kept as a secret of the deployment (`env.AUTH_SECRET`).
+   * Signs what crosses the browser during sign-in (Google's `state`, the hand-off between hosts)
+   * and private files' links: 32 random bytes, base64url, kept as a secret of the deployment
+   * (`env.AUTH_SECRET`). Sessions don't depend on it, so rotating it only ends sign-ins in progress
+   * and links already given out.
    */
   readonly secret: string;
 }
@@ -580,7 +592,7 @@ declare class Auth<Env = unknown> {
     readonly invite: "auth.invite";
     /** See the people with accounts, give and take their roles, suspend them. */
     readonly manageUsers: "auth.manageUsers";
-    /** Read the whole audit log (`GET /api/audit`), with the log on (planning/audit.md). */
+    /** Read the whole audit log (`GET /api/audit`), with the log on. */
     readonly readAudit: "audit.read";
   };
   /** The policies made with this instance's `policy()`. */
@@ -591,7 +603,7 @@ declare class Auth<Env = unknown> {
   /**
    * Gives `email` a role from `app.ts`, from code (a tenant's setup service, a seed): now, if it has
    * an account in the current database, else when it first signs in. Safe to repeat.
-   * `held: "platform"` puts the assignment beyond the tenant's reach (planning/tenancy.md → End of v1).
+   * `held: "platform"` puts the assignment beyond the tenant's reach.
    */
   invite(input: InviteInput): Promise<void>;
   /** The core's: where `invite` writes. */

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-import { p as Runtime, t as AppCore } from "./index-BKwTOLop.js";
-import { C as Params, D as RouteHandler, E as RouteContext, M as fail, O as RouteOptions, S as Method, T as RouteBuilder, _ as CustomAction, b as AppConfig, d as NotImplementedError, f as AppModules, g as createApp, h as CreatedApp, j as Rejected, k as User, m as AppOptions, p as App, v as Resource, w as Route, x as Named, y as ResourceOptions } from "./index-CBWFoL3s.js";
+import { p as Runtime, t as AppCore } from "./index-Ce5p2-EB.js";
+import { C as Params, D as RouteHandler, E as RouteContext, M as fail, O as RouteOptions, S as Method, T as RouteBuilder, _ as CustomAction, b as AppConfig, d as NotImplementedError, f as AppModules, g as createApp, h as CreatedApp, j as Rejected, k as User, m as AppOptions, p as App, v as Resource, w as Route, x as Named, y as ResourceOptions } from "./index-DlgVg3D8.js";
 export { type App, type AppConfig, type AppCore, type AppModules, type AppOptions, type CreatedApp, type CustomAction, type Method, type Named, NotImplementedError, type Params, Rejected, type Resource, type ResourceOptions, Route, type RouteBuilder, type RouteContext, type RouteHandler, type RouteOptions, type Runtime, type User, createApp, fail };