@isaijs/core 0.1.1 → 0.1.3

package/dist/auth/index.d.ts

@@ -1,3 +1,3 @@
-import { r as AuthTablesOptions } from "../data-layer-ubPfZvFV.js";
-import { A as Permissions, F as DefinePolicy, I as Perms, L as Policy, N as AnyPolicy, P as Bound, R as Rules, a as OAuthMethod, c as Roles, i as Methods, l as SignInMethod, n as AuthConfig, o as Provider, r as AuthDefinition, s as RoleDefinition, t as Auth, u as createAuth, z as StandardAction } from "../index-B6ipokoP.js";
+import { r as AuthTablesOptions } from "../data-layer-D1BFo3wO.js";
+import { A as Permissions, F as DefinePolicy, I as Perms, L as Policy, N as AnyPolicy, P as Bound, R as Rules, a as OAuthMethod, c as Roles, i as Methods, l as SignInMethod, n as AuthConfig, o as Provider, r as AuthDefinition, s as RoleDefinition, t as Auth, u as createAuth, z as StandardAction } from "../index-DlgVg3D8.js";
 export { type AnyPolicy, Auth, type AuthConfig, type AuthDefinition, type AuthTablesOptions, type Bound, type DefinePolicy, type Methods, type OAuthMethod, type Permissions, type Perms, Policy, type Provider, type RoleDefinition, type Roles, type Rules, type SignInMethod, type StandardAction, createAuth };

package/dist/auth/index.js

@@ -1,3 +1,3 @@
-import { t as Policy } from "../policies-pFzslmSB.js";
-import { a as createAuth, t as Auth } from "../create-auth-y8E8cxkn.js";
+import { t as Policy } from "../policies-CKIdBFKt.js";
+import { a as createAuth, t as Auth } from "../create-auth-Ci0PaBoX.js";
 export { Auth, Policy, createAuth };

package/dist/{base64url-K_wCmvxR.js → base64url-C5GTYIL5.js}

@@ -1,4 +1,4 @@
-import { A as flag, C as textKind, D as date, E as choice, F as sequence, L as list, M as int, N as money, O as datetime, P as quantity, S as text, T as url, U as kind, _ as personName, b as slugify, c as images, d as urls, f as email, g as newToken, h as markdown, i as file, j as id, k as fakeUlid, l as define, m as line, n as phoneKind, o as files, s as image, u as json, v as secret, w as token, x as subdomain, y as slug } from "./validation-FyOpSZqE.js";
+import { A as fakeUlid, C as text, D as choice, E as url, F as quantity, I as sequence, M as id, N as int, O as date, P as money, R as list, S as subdomain, T as token, W as kind, _ as newToken, a as file, b as slug, c as image, d as json, f as urls, g as markdown, h as line, j as flag, k as datetime, l as images, n as phoneKind, p as email, s as files, u as define, v as personName, w as textKind, x as slugify, y as secret } from "./validation-Cppmd0RV.js";
 import { n as snakeCase } from "./case-BnpcvhdW.js";
 import { AsyncLocalStorage } from "node:async_hooks";
 //#region src/internal/scope.ts

package/dist/cli/index.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { B as toKind, R as object } from "../validation-FyOpSZqE.js";
-import { M as dialectFor, m as emptySnapshot, r as sync, t as migrate, y as MigrationError } from "../migrator-6oWUefLA.js";
-import { a as lookupsOf, i as filterableOf, n as isRequired, t as Resource, u as Route } from "../resource-C17NvNa3.js";
-import { F as sensitivity, c as fieldOf, r as Model } from "../base64url-K_wCmvxR.js";
+import { V as toKind, z as object } from "../validation-Cppmd0RV.js";
+import { M as dialectFor, m as emptySnapshot, r as sync, t as migrate, y as MigrationError } from "../migrator-BU3_PHk8.js";
+import { a as lookupsOf, i as filterableOf, n as isRequired, t as Resource, u as Route } from "../resource-CsYksjKc.js";
+import { F as sensitivity, c as fieldOf, r as Model } from "../base64url-C5GTYIL5.js";
 import { t as kebabCase } from "../case-BnpcvhdW.js";
-import { i as makeMigrations, n as checkSteps, t as checkMigrations } from "../make-WQpkYW8N.js";
+import { i as makeMigrations, n as checkSteps, t as checkMigrations } from "../make-DKBn79cH.js";
 import { d1 } from "../adapters/database/d1/index.js";
 import { spawn } from "node:child_process";
 import { parseArgs } from "node:util";
@@ -198,13 +198,15 @@ function resourceMembers(named, custom, used) {
 	}
 	const spec = resource.model.spec;
 	const uploads = resource.writable.filter((field) => spec.fields[field]?.kind.spec.file);
+	const images = uploads.filter((field) => spec.fields[field]?.kind.spec.file?.image);
 	if (uploads.length > 0) calls.push(`upload(field: ${uploads.map((f) => JSON.stringify(f)).join(" | ")}, file: Blob): Promise<FileJSON>`);
 	const endpoint = [
 		`resource: ${JSON.stringify(`/${kebabCase(name)}`)}`,
 		...resource.singleton ? ["singleton: true"] : [],
 		`actions: ${JSON.stringify(resource.actions)}`,
 		...Object.keys(resource.custom).length > 0 ? [`custom: ${JSON.stringify(Object.keys(resource.custom))}`] : [],
-		...uploads.length > 0 ? [`uploads: ${JSON.stringify(uploads)}`] : []
+		...uploads.length > 0 ? [`uploads: ${JSON.stringify(uploads)}`] : [],
+		...images.length > 0 ? [`images: ${JSON.stringify(images)}`] : []
 	];
 	used.add("Page");
 	return {
@@ -350,8 +352,9 @@ async function loadModels(project) {
 			const name = value.spec.name;
 			const other = found.get(name);
 			if (other && other.model !== value) throw new Error(`isai: two models are named ${name} (db/schema/${other.file}.ts and ${file})`);
-			const builtin = value.spec.database;
-			if (builtin !== void 0 && builtin !== database) throw new Error(`isai: ${name} is a built-in table of the ${builtin} database, so it's extended in ${folderOf(builtin)}/ (not db/schema/${file})`);
+			const said = value.spec.database;
+			if (said !== void 0 && said !== database) throw new Error(value.spec.builtin !== void 0 ? `isai: ${name} is a built-in table of the ${said} database, so it's extended in ${folderOf(said)}/ (not db/schema/${file})` : `isai: ${name} says { database: "${said}" }, so it goes in ${folderOf(said)}/ (not db/schema/${file})`);
+			if (said === void 0 && database === "platform") throw new Error(`isai: ${name} is in db/schema/${file}, so it says so: model("${name}", { database: "platform" }, …)`);
 			found.set(name, {
 				model: value,
 				file: file.slice(0, -3),

package/dist/client/index.d.ts

@@ -82,6 +82,12 @@ interface FileJSON {
   readonly type: string;
   readonly width?: number;
   readonly height?: number;
+  /** An image's smaller copies, widest first: `srcset(file)` lists them for an `<img>`. */
+  readonly sizes?: readonly {
+    readonly width: number;
+    readonly height: number;
+    readonly url: string;
+  }[];
 }
 /** `GET /api/auth/me`: the user, their roles, and their permission keys (to show or hide what the UI offers). */
 interface Me<U> {
@@ -153,6 +159,8 @@ interface ResourceEndpoint {
   readonly custom?: readonly string[];
   /** Its writable file fields: `upload(field, file)` sends a file to attach by id. */
   readonly uploads?: readonly string[];
+  /** Those of them that are images: resized in the browser before they're sent (`./resize`). */
+  readonly images?: readonly string[];
 }
 /** A route in the endpoint table. */
 interface RouteEndpoint {
@@ -205,4 +213,37 @@ export declare class ApiError extends Error {
   get fields(): Readonly<Record<string, string>>;
 }
 //#endregion
+//#region src/client/files.d.ts
+/**
+ * An image's `srcset`: the image and its smaller copies, each with its width, so the browser loads
+ * the one the screen needs (`<img src={file.url} srcset={srcset(file)} sizes="50vw">`). Undefined
+ * for a file without copies: its `url` is its only size.
+ */
+export declare function srcset(file: Pick<FileJSON, "url" | "width" | "sizes">): string | undefined;
+/** The smallest copy at least `width` wide (or the widest there is), else the file itself: a preview's image. */
+export declare function sizeFor(file: Pick<FileJSON, "url" | "width" | "height" | "sizes">, width: number): {
+  readonly url: string;
+  readonly width?: number | undefined;
+  readonly height?: number | undefined;
+};
+//#endregion
+//#region src/client/resize.d.ts
+/**
+ * Images are made smaller in the browser before they're uploaded: the full image at most 1080 px
+ * wide, and a copy at most 540 px wide (a list's card, a thumbnail, a link's preview), both kept
+ * when the image is larger than that; never made larger. Phones are the screens that matter: 1080
+ * is sharp across one at 3×, and the original (often 4000 px and several MB) isn't kept.
+ *
+ * Each is encoded again, which also drops the photo's metadata (a phone's GPS position): WebP where
+ * the browser can encode it, else JPEG; PNG only for an image with transparent pixels, which JPEG
+ * can't keep. No library: the browser decodes (turned the way the camera says), draws and encodes.
+ * A large step down is drawn in halves, which keeps it sharp. Where it can't (no `createImageBitmap`,
+ * or a format the browser can't decode), the file is uploaded as it is.
+ */
+/** The widths an image is kept at, at most. */
+export declare const IMAGE_WIDTHS: {
+  readonly full: 1080;
+  readonly small: 540;
+};
+//#endregion
 export type { AuthApi, ChoiceFilter, ClientBase, ClientOptions, Endpoints, FetchLike, FileJSON, FlagFilter, HistoryEntry, HistoryQuery, Invitation, InviteJSON, ListQuery, Me, Page, Person, RangeFilter, ResourceEndpoint, RouteEndpoint, SignInMethod, TextFilter };

package/dist/client/index.js

@@ -33,6 +33,121 @@ async function errorOf(response) {
 	return new ApiError(response.status, typeof code === "string" ? code : "HttpError", typeof message === "string" ? message : `The request failed (${response.status})`, Array.isArray(issues) ? issues : [], details, typeof body.requestId === "string" ? body.requestId : void 0);
 }
 //#endregion
+//#region src/client/resize.ts
+/**
+* Images are made smaller in the browser before they're uploaded: the full image at most 1080 px
+* wide, and a copy at most 540 px wide (a list's card, a thumbnail, a link's preview), both kept
+* when the image is larger than that; never made larger. Phones are the screens that matter: 1080
+* is sharp across one at 3×, and the original (often 4000 px and several MB) isn't kept.
+*
+* Each is encoded again, which also drops the photo's metadata (a phone's GPS position): WebP where
+* the browser can encode it, else JPEG; PNG only for an image with transparent pixels, which JPEG
+* can't keep. No library: the browser decodes (turned the way the camera says), draws and encodes.
+* A large step down is drawn in halves, which keeps it sharp. Where it can't (no `createImageBitmap`,
+* or a format the browser can't decode), the file is uploaded as it is.
+*/
+/** The widths an image is kept at, at most. */
+const IMAGE_WIDTHS = {
+	full: 1080,
+	small: 540
+};
+/** How tall an image may be, for each width: a very tall one is held to twice its width's limit. */
+const TALLEST = 2;
+/** JPEG and WebP quality: no visible loss in a photo, at a fraction of its size. */
+const QUALITY = .82;
+/** `width` × `height` made to fit within `max` wide (and twice that tall), never larger. */
+function fitWithin(width, height, max) {
+	const scale = Math.min(1, max / width, max * TALLEST / height);
+	return {
+		width: Math.max(1, Math.round(width * scale)),
+		height: Math.max(1, Math.round(height * scale))
+	};
+}
+/** The sizes it's drawn at on the way down to `to`, halving each time, ending at `to`. */
+function stepsDown(from, to) {
+	const steps = [];
+	let { width, height } = from;
+	while (width / 2 > to.width) {
+		width = Math.round(width / 2);
+		height = Math.round(height / 2);
+		steps.push({
+			width,
+			height
+		});
+	}
+	steps.push(to);
+	return steps;
+}
+/** The image's sizes, or undefined when the browser can't make them (it's uploaded as it is). */
+async function resized(file, name) {
+	if (typeof createImageBitmap === "undefined") return void 0;
+	let bitmap;
+	try {
+		bitmap = await createImageBitmap(file, { imageOrientation: "from-image" });
+	} catch {
+		return;
+	}
+	try {
+		const source = {
+			width: bitmap.width,
+			height: bitmap.height
+		};
+		const full = drawn(bitmap, source, fitWithin(source.width, source.height, IMAGE_WIDTHS.full));
+		const clear = file.type !== "image/jpeg" && hasTransparency(full);
+		const fullFile = await encoded(full, name, clear);
+		if (source.width <= IMAGE_WIDTHS.small) return { full: fullFile };
+		return {
+			full: fullFile,
+			small: await encoded(drawn(full, full, fitWithin(source.width, source.height, IMAGE_WIDTHS.small)), name, clear)
+		};
+	} finally {
+		bitmap.close();
+	}
+}
+function canvasOf(width, height) {
+	if (typeof OffscreenCanvas !== "undefined") return new OffscreenCanvas(width, height);
+	const canvas = document.createElement("canvas");
+	canvas.width = width;
+	canvas.height = height;
+	return canvas;
+}
+function context2d(canvas) {
+	const context = canvas.getContext("2d");
+	if (!context) throw new Error("isai: this browser can't draw images");
+	context.imageSmoothingEnabled = true;
+	context.imageSmoothingQuality = "high";
+	return context;
+}
+/** `image` drawn at `to`, halving from `from` on the way. */
+function drawn(image, from, to) {
+	let current = image;
+	let canvas;
+	for (const step of stepsDown(from, to)) {
+		canvas = canvasOf(step.width, step.height);
+		context2d(canvas).drawImage(current, 0, 0, step.width, step.height);
+		current = canvas;
+	}
+	return canvas;
+}
+/** Whether any pixel isn't fully opaque. */
+function hasTransparency(canvas) {
+	const { data } = context2d(canvas).getImageData(0, 0, canvas.width, canvas.height);
+	for (let at = 3; at < data.length; at += 4) if (data[at] < 255) return true;
+	return false;
+}
+const blobOf = (canvas, type) => "convertToBlob" in canvas ? canvas.convertToBlob({
+	type,
+	quality: QUALITY
+}) : new Promise((resolve) => canvas.toBlob(resolve, type, QUALITY));
+/** WebP where the browser encodes it (it answers PNG where it can't), else JPEG, or PNG to keep transparency. */
+async function encoded(canvas, name, clear) {
+	let blob = await blobOf(canvas, "image/webp");
+	if (blob?.type !== "image/webp") blob = await blobOf(canvas, clear ? "image/png" : "image/jpeg");
+	if (!blob) throw new Error("isai: this browser couldn't encode the image");
+	const extension = blob.type === "image/webp" ? "webp" : blob.type === "image/png" ? "png" : "jpg";
+	return new File([blob], `${name.replace(/\.[^.]*$/, "") || "image"}.${extension}`, { type: blob.type });
+}
+//#endregion
 //#region src/client/client.ts
 /**
 * The client's runtime: plain async calls over `fetch`, built from the endpoint
@@ -41,7 +156,7 @@ async function errorOf(response) {
 *
 *   resources   api.<name>.list(query) · get(key) · create(input) · update(key, input) · delete(key)
 *               · publish(key) · unpublish(key) · reorder(keys) · history(key, query)
-*               · <custom action>(key, input?) · upload(field, file)
+*               · <custom action>(key, input?) · upload(field, file)  (an image is resized first)
 *               (a singleton's calls take no key)
 *   routes      api.<name>(args)                           (path params and input in one object)
 *   auth        api.auth.me() · signIn() · signOut() · users · invites
@@ -52,11 +167,12 @@ function createClient(endpoints, options = {}) {
 	const base = (options.baseUrl ?? "/api").replace(/\/$/, "");
 	const send = options.fetch ?? ((input, init) => fetch(input, init));
 	const listeners = /* @__PURE__ */ new Set();
-	async function call(method, path, { query, body, signedOutIsAnswer = false } = {}) {
+	async function call(method, path, { query, body, headers: extra, signedOutIsAnswer = false } = {}) {
 		const search = query && query.size > 0 ? `?${query.toString().replace(/=(?=&|$)/g, "")}` : "";
 		const headers = {
 			Accept: "application/json",
-			...options.headers
+			...options.headers,
+			...extra
 		};
 		const file = body instanceof Blob ? body : void 0;
 		if (file) {
@@ -122,13 +238,27 @@ function resourceCalls(call, endpoint) {
 	for (const action of endpoint.custom ?? []) calls[action] = actionCall(call, keyed, action);
 	if (endpoint.uploads?.length) {
 		const fields = new Set(endpoint.uploads);
+		const images = new Set(endpoint.images);
 		calls.upload = (field, file) => {
 			if (!fields.has(field)) throw new TypeError(`isai: ${base} takes no upload for ${field}`);
-			return call("POST", `/uploads${base}/${kebabCase(field)}`, { body: file });
+			const path = `/uploads${base}/${kebabCase(field)}`;
+			if (!images.has(field)) return call("POST", path, { body: file });
+			return uploadImage(call, path, file);
 		};
 	}
 	return calls;
 }
+/** An image, resized: the full one, then its smaller copy with `X-Size-Of`; the answer is the image. */
+async function uploadImage(call, path, file) {
+	const sizes = await resized(file, file.name ?? "image");
+	if (!sizes) return call("POST", path, { body: file });
+	const image = await call("POST", path, { body: sizes.full });
+	if (!sizes.small) return image;
+	return call("POST", path, {
+		body: sizes.small,
+		headers: { "X-Size-Of": image.id }
+	});
+}
 function actionCall(call, keyed, action) {
 	return keyed((path, input) => call("POST", `${path}/${kebabCase(action)}`, input === void 0 ? {} : { body: input }));
 }
@@ -211,4 +341,22 @@ function browser() {
 	return { location };
 }
 //#endregion
-export { ApiError, createClient, listQuery };
+//#region src/client/files.ts
+/**
+* An image's `srcset`: the image and its smaller copies, each with its width, so the browser loads
+* the one the screen needs (`<img src={file.url} srcset={srcset(file)} sizes="50vw">`). Undefined
+* for a file without copies: its `url` is its only size.
+*/
+function srcset(file) {
+	if (!file.sizes?.length || !file.width) return void 0;
+	return [...file.sizes, {
+		url: file.url,
+		width: file.width
+	}].map((one) => `${one.url} ${one.width}w`).join(", ");
+}
+/** The smallest copy at least `width` wide (or the widest there is), else the file itself: a preview's image. */
+function sizeFor(file, width) {
+	return [...file.sizes ?? []].sort((a, b) => a.width - b.width).find((one) => one.width >= width) ?? file;
+}
+//#endregion
+export { ApiError, IMAGE_WIDTHS, createClient, listQuery, sizeFor, srcset };

package/dist/{create-auth-y8E8cxkn.js → create-auth-Ci0PaBoX.js}

@@ -1,6 +1,6 @@
-import { t as fromBase64url } from "./base64url-K_wCmvxR.js";
-import { n as PROVIDERS } from "./tables-C4ipMFjg.js";
-import { a as byRole, c as tenant, i as anyone, l as user, n as PolicyRegistry, o as owner, s as readsTenant } from "./policies-pFzslmSB.js";
+import { t as fromBase64url } from "./base64url-C5GTYIL5.js";
+import { n as PROVIDERS } from "./tables-IrLjsomf.js";
+import { a as byRole, c as tenant, i as anyone, l as user, n as PolicyRegistry, o as owner, s as readsTenant } from "./policies-CKIdBFKt.js";
 //#region src/auth/create-auth.ts
 const methods = { oauth: (provider, options) => ({
 	kind: "oauth",

package/dist/{data-layer-ubPfZvFV.d.ts → data-layer-D1BFo3wO.d.ts}

@@ -1,7 +1,7 @@
 import { a as DatabaseDriver, o as DialectName } from "./index-Ce5p2-EB.js";
 import { t as Issue } from "./issues-CKto95IW.js";
-import { M as IdInput, q as StoredFile } from "./index-C-WmIKxT.js";
-import { A as Dialect, G as Model, H as Columns, I as Clock, K as ModelSpec, M as RetiredSnapshot, N as SchemaSnapshot, U as ComputedFields, V as AnyModel, W as Fields, X as Condition, at as count, b as RowOf, dt as Kinds, et as Now, f as seed, ft as SchemaDefaults, ht as Field, i as Row, it as any, mt as AnyField, n as Patch, ot as not, p as Database, q as ModelRegistry, rt as all, yt as Slot } from "./types-DpOcIuDl.js";
+import { M as IdInput, Y as StoredFile } from "./index-CYcklQ1l.js";
+import { A as Dialect, G as Model, H as Columns, I as Clock, K as ModelSpec, M as RetiredSnapshot, N as SchemaSnapshot, U as ComputedFields, V as AnyModel, W as Fields, X as Condition, at as count, b as RowOf, dt as Kinds, et as Now, f as seed, ft as SchemaDefaults, ht as Field, i as Row, it as any, mt as AnyField, n as Patch, ot as not, p as Database, q as ModelRegistry, rt as all, yt as Slot } from "./types-S6zF5IXV.js";
 //#region src/db/schema/traits.d.ts
 type ComputedDefinitions = Record<string, (row: any) => Condition>;
 interface TraitSpec {
@@ -920,6 +920,11 @@ declare function tenancyTables(f: Kinds, options: TenancyOptions): TableSet<{
 //#region src/db/schema/data-layer.d.ts
 /** A project kind: a preset field (`base.line().max(120)`), or a factory for parameterized kinds. */
 type ProjectKind = AnyField | ((...args: any[]) => AnyField);
+/** What a model may say before its traits and fields. */
+interface ModelOptions {
+  /** It lives in the platform's database (with tenancy), as its folder does: `db/schema/platform/`. */
+  readonly database: "platform";
+}
 interface DataLayerDefinition<P extends Record<string, ProjectKind>, U extends readonly AnyTableSet[]> {
   /**
    * Built-in tables to switch on (`[base.authTables({ database: "tenant" }), base.tenancy({ database: "platform" })]`):
@@ -944,7 +949,10 @@ type ProjectKinds<P> = { readonly [K in keyof P]: P[K] extends AnyField ? () =>
 /** The placeholder for conditions over a model's rows: `const event = row(Event)`. */
 declare function row<M extends AnyModel>(target: M): Columns<M["~fields"], M["name"]>;
 declare function createDataLayer<P extends Record<string, ProjectKind> = {}, const U extends readonly AnyTableSet[] = []>(define?: (base: Base) => DataLayerDefinition<P, U>): {
-  model: <const Name extends string, const T extends readonly AnyTrait[], F extends Fields>(name: Name, ...rest: [...traits: T, fields: F]) => Model<Name, TraitFields<T> & F>;
+  model: {
+    <const Name extends string, const T extends readonly AnyTrait[], F extends Fields>(name: Name, ...rest: [...traits: T, fields: F]): Model<Name, TraitFields<T> & F>;
+    <const Name extends string, const T extends readonly AnyTrait[], F extends Fields>(name: Name, options: ModelOptions, ...rest: [...traits: T, fields: F]): Model<Name, TraitFields<T> & F>;
+  };
   f: Kinds & ProjectKinds<P>;
   builtins: Builtins<U>;
   slots: {

package/dist/{data-layer-D9UPOK6L.js → data-layer-_TZtuy-F.js}

@@ -1,6 +1,7 @@
-import { O as datetime, P as quantity, p as host, r as isPhoneRegion } from "./validation-FyOpSZqE.js";
-import { C as not, M as field, N as fieldKinds, S as count, s as defineModel, u as rowOf, v as all, w as now, y as any } from "./base64url-K_wCmvxR.js";
-import { a as TableSet, i as platformAuthDefinitions, o as defineBuiltins, r as authTables } from "./tables-C4ipMFjg.js";
+import { F as quantity, k as datetime, m as host, r as isPhoneRegion } from "./validation-Cppmd0RV.js";
+import "./migrator-BU3_PHk8.js";
+import { C as not, M as field, N as fieldKinds, S as count, s as defineModel, u as rowOf, v as all, w as now, y as any } from "./base64url-C5GTYIL5.js";
+import { a as TableSet, i as platformAuthDefinitions, o as defineBuiltins, r as authTables } from "./tables-IrLjsomf.js";
 import { n as seed } from "./seed-BObmdKdP.js";
 //#region src/db/fields/slot.ts
 var Slot = class {
@@ -226,6 +227,8 @@ function builtinTraits() {
 * `slots`, `builtins`, the condition language and `seed`. One call serves every database the app
 * has (with isolated tenancy, the tenants' and the platform's).
 */
+/** A model's options: `{ database: "…" }`, never fields (a field is a kind, not a string). */
+const isOptions = (value) => typeof value === "object" && value !== null && !(value instanceof Trait) && Object.keys(value).length === 1 && typeof value.database === "string";
 /** The placeholder for conditions over a model's rows: `const event = row(Event)`. */
 function row(target) {
 	return rowOf(target.spec, target.registry);
@@ -260,15 +263,18 @@ function createDataLayer(define) {
 			byDefault
 		};
 	}
-	/** `model(name, fields)`, or with traits first: `model(name, traits.ordered({ within: "event" }), fields)`. */
-	const model = (name, ...rest) => {
+	function model(name, ...given) {
 		if (Object.hasOwn(builtins, name)) throw new TypeError(`isai: ${name} is a built-in table; add columns with builtins.${name}.extend({ … })`);
+		const first = given[0];
+		const options = given.length > 1 && isOptions(first) ? first : void 0;
+		const rest = options ? given.slice(1) : given;
+		if (options && options.database !== "platform") throw new TypeError(`isai: model("${name}") takes { database: "platform" } only`);
 		const fields = rest.at(-1);
 		if (!fields || fields instanceof Trait) throw new TypeError(`isai: model("${name}") needs its fields last`);
 		const traits = rest.slice(0, -1);
 		if (!traits.every((trait) => trait instanceof Trait)) throw new TypeError(`isai: model("${name}") takes traits, then its fields`);
-		return defineModel(registry, name, fields, traits);
-	};
+		return defineModel(registry, name, fields, traits, { ...options ? { database: options.database } : {} });
+	}
 	return {
 		model,
 		f: {

package/dist/db/index.d.ts

@@ -1,4 +1,4 @@
 import { a as ValidationError } from "../issues-CKto95IW.js";
-import { $ as Expr, A as Dialect, B as newSecretKey, F as snapshotOf, G as Model, I as Clock, J as Models, K as ModelSpec, L as FixedClock, M as RetiredSnapshot, N as SchemaSnapshot, O as Write, P as emptySnapshot, R as fixedClock, V as AnyModel, X as Condition, Y as Column, _ as database, _t as Storage, a as Visible, at as count, bt as slot, c as Many, d as SeedContext, dt as Kinds, et as Now, ft as SchemaDefaults, g as Transaction, gt as FieldSpec, h as RawValue, ht as Field, i as Row, it as any, j as Rule, k as WriteListener, l as Overrides, lt as ConditionNode, m as DatabaseOptions, n as Patch, nt as Total, o as Make, ot as not, p as Database, pt as fieldKinds, r as Planned, rt as all, st as now, t as Insert, tt as Relation, u as Seed, v as OrderKey, vt as sensitivity, y as Query, yt as Slot, z as systemClock } from "../types-DpOcIuDl.js";
-import { A as MigrateOptions, B as NotFound, C as MigrationErrorCode, D as Cleanup, E as UnsafeMigration, F as DataStep, H as UniqueFailed, I as TODO, L as dataStep, M as migrate, N as migrateFresh, O as cleanupMigration, P as sync, R as CheckFailed, S as MigrationError, T as UnsafeChange, U as dialectFor, V as ReferenceFailed, W as sqlite, _ as Generated, b as manifest, c as acquireLock, d as setReleaseStatus, f as startRelease, g as makeMigrations, h as makeCleanup, j as Migration, k as Manifest, l as releaseLock, m as checkMigrations, n as row, o as Release, p as applyRules, s as ReleaseStatus, t as createDataLayer, u as rollback, v as generateMigration, w as SuspectedRename, x as structureStep, y as cleanupStep, z as DatabaseError } from "../data-layer-ubPfZvFV.js";
+import { $ as Expr, A as Dialect, B as newSecretKey, F as snapshotOf, G as Model, I as Clock, J as Models, K as ModelSpec, L as FixedClock, M as RetiredSnapshot, N as SchemaSnapshot, O as Write, P as emptySnapshot, R as fixedClock, V as AnyModel, X as Condition, Y as Column, _ as database, _t as Storage, a as Visible, at as count, bt as slot, c as Many, d as SeedContext, dt as Kinds, et as Now, ft as SchemaDefaults, g as Transaction, gt as FieldSpec, h as RawValue, ht as Field, i as Row, it as any, j as Rule, k as WriteListener, l as Overrides, lt as ConditionNode, m as DatabaseOptions, n as Patch, nt as Total, o as Make, ot as not, p as Database, pt as fieldKinds, r as Planned, rt as all, st as now, t as Insert, tt as Relation, u as Seed, v as OrderKey, vt as sensitivity, y as Query, yt as Slot, z as systemClock } from "../types-S6zF5IXV.js";
+import { A as MigrateOptions, B as NotFound, C as MigrationErrorCode, D as Cleanup, E as UnsafeMigration, F as DataStep, H as UniqueFailed, I as TODO, L as dataStep, M as migrate, N as migrateFresh, O as cleanupMigration, P as sync, R as CheckFailed, S as MigrationError, T as UnsafeChange, U as dialectFor, V as ReferenceFailed, W as sqlite, _ as Generated, b as manifest, c as acquireLock, d as setReleaseStatus, f as startRelease, g as makeMigrations, h as makeCleanup, j as Migration, k as Manifest, l as releaseLock, m as checkMigrations, n as row, o as Release, p as applyRules, s as ReleaseStatus, t as createDataLayer, u as rollback, v as generateMigration, w as SuspectedRename, x as structureStep, y as cleanupStep, z as DatabaseError } from "../data-layer-D1BFo3wO.js";
 export { type AnyModel, CheckFailed, type Cleanup, type Clock, Column, Condition, type ConditionNode, type DataStep, Database, DatabaseError, type DatabaseOptions, type Dialect, Expr, Field, type FieldSpec, type FixedClock, type Generated, type Insert, type Kinds, type Make, type Manifest, type Many, type MigrateOptions, type Migration, MigrationError, type MigrationErrorCode, Model, type ModelSpec, type Models, NotFound, Now, type OrderKey, type Overrides, type Patch, type Planned, Query, type RawValue, ReferenceFailed, Relation, type Release, type ReleaseStatus, type RetiredSnapshot, type Row, type Rule, type SchemaDefaults, type SchemaSnapshot, Seed, type SeedContext, Slot, type Storage, type SuspectedRename, TODO, Total, Transaction, UniqueFailed, type UnsafeChange, UnsafeMigration, ValidationError, type Visible, type Write, type WriteListener, acquireLock, all, any, applyRules, checkMigrations, cleanupMigration, cleanupStep, count, createDataLayer, dataStep, database, dialectFor, emptySnapshot, fieldKinds, fixedClock, generateMigration, makeCleanup, makeMigrations, manifest, migrate, migrateFresh, newSecretKey, not, now, releaseLock, rollback, row, sensitivity, setReleaseStatus, slot, snapshotOf, sqlite, startRelease, structureStep, sync, systemClock };

package/dist/db/index.js

@@ -1,9 +1,9 @@
-import { W as ValidationError } from "../validation-FyOpSZqE.js";
-import { A as Query, C as database, F as systemClock, G as UniqueFailed, H as DatabaseError, I as newSecretKey, M as dialectFor, N as sqlite, P as fixedClock, U as NotFound, V as CheckFailed, W as ReferenceFailed, _ as TODO, b as Database, c as rollback, d as applyRules, g as UnsafeMigration, h as snapshotOf, i as acquireLock, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, p as generateMigration, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, x as Transaction, y as MigrationError } from "../migrator-6oWUefLA.js";
-import { C as not, F as sensitivity, N as fieldKinds, P as Field, S as count, _ as Total, d as Column, f as Condition, g as Relation, h as Now, m as Expr, r as Model, v as all, w as now, y as any } from "../base64url-K_wCmvxR.js";
-import { i as slot, n as row, r as Slot, t as createDataLayer } from "../data-layer-D9UPOK6L.js";
+import { G as ValidationError } from "../validation-Cppmd0RV.js";
+import { A as Query, C as database, F as systemClock, G as DatabaseError, I as newSecretKey, J as UniqueFailed, K as NotFound, M as dialectFor, N as sqlite, P as fixedClock, W as CheckFailed, _ as TODO, b as Database, c as rollback, d as applyRules, g as UnsafeMigration, h as snapshotOf, i as acquireLock, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, p as generateMigration, q as ReferenceFailed, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, x as Transaction, y as MigrationError } from "../migrator-BU3_PHk8.js";
+import { C as not, F as sensitivity, N as fieldKinds, P as Field, S as count, _ as Total, d as Column, f as Condition, g as Relation, h as Now, m as Expr, r as Model, v as all, w as now, y as any } from "../base64url-C5GTYIL5.js";
+import { i as slot, n as row, r as Slot, t as createDataLayer } from "../data-layer-_TZtuy-F.js";
 import { t as Seed } from "../seed-BObmdKdP.js";
-import { a as cleanupMigration, i as makeMigrations, r as makeCleanup, t as checkMigrations } from "../make-WQpkYW8N.js";
+import { a as cleanupMigration, i as makeMigrations, r as makeCleanup, t as checkMigrations } from "../make-DKBn79cH.js";
 //#region src/db/migrations/files.ts
 /** A structure step file: adds tables and columns. Applied once, never edited. */
 function structureStep(options) {

package/dist/{index-C-WmIKxT.d.ts → index-CYcklQ1l.d.ts}

@@ -176,7 +176,22 @@ interface StoredFile {
   /** An image's size in pixels, when its format says. */
   readonly width?: number;
   readonly height?: number;
+  /**
+   * An image's smaller copies, each in its own key: the client makes them before uploading (`srcset`
+   * picks one). None means the file itself serves every size.
+   */
+  readonly sizes?: readonly ImageSize[];
+}
+/** One smaller copy of an image: where it's stored, and what it is. */
+interface ImageSize {
+  readonly key: string;
+  readonly size: number;
+  readonly type: string;
+  readonly width: number;
+  readonly height: number;
 }
+/** At most this many smaller copies of one image. */
+declare const SIZES_MAX = 4;
 /** File types by their usual name, with the media types each covers. */
 declare const FILE_TYPES: {
   readonly pdf: readonly ["application/pdf"];
@@ -367,4 +382,4 @@ declare const email: () => Kind<string, string, false, false>;
 /** An http(s) URL, up to 2,048 characters. */
 declare const url: () => Kind<string, string, false, false>;
 //#endregion
-export { FakeContext as $, validate as A, money as B, ObjectShape as C, object as D, list as E, datetime as F, FileType as G, sequence as H, fakeUlid as I, file as J, ImageType as K, flag as L, IdInput as M, choice as N, serialize as O, date as P, Fake as Q, id as R, LIST_MAX as S, Shape as T, phone as U, quantity as V, phoneKind as W, image as X, files as Y, images as Z, define as _, newToken as a, Measure as at, CarriesKind as b, slug as c, kind as ct, text as d, StandardResult as dt, AnyKind as et, textKind as f, StandardSchemaV1 as ft, KindDefinition as g, Definable as h, markdown as i, KindTypes as it, CalendarDate as j, toKind as k, slugify as l, StandardIssue as lt, url as m, host as n, Kind as nt, personName as o, Sensitivity as ot, token as p, StoredFile as q, line as r, KindSpec as rt, secret as s, TypeText as st, email as t, FileSpec as tt, subdomain as u, StandardProps as ut, json as v, Output as w, Input as x, urls as y, int as z };
+export { images as $, validate as A, money as B, ObjectShape as C, object as D, list as E, datetime as F, FileType as G, sequence as H, fakeUlid as I, SIZES_MAX as J, ImageSize as K, flag as L, IdInput as M, choice as N, serialize as O, date as P, image as Q, id as R, LIST_MAX as S, Shape as T, phone as U, quantity as V, phoneKind as W, file as X, StoredFile as Y, files as Z, define as _, newToken as a, KindSpec as at, CarriesKind as b, slug as c, Sensitivity as ct, text as d, StandardIssue as dt, Fake as et, textKind as f, StandardProps as ft, KindDefinition as g, Definable as h, markdown as i, Kind as it, CalendarDate as j, toKind as k, slugify as l, TypeText as lt, url as m, StandardSchemaV1 as mt, host as n, AnyKind as nt, personName as o, KindTypes as ot, token as p, StandardResult as pt, ImageType as q, line as r, FileSpec as rt, secret as s, Measure as st, email as t, FakeContext as tt, subdomain as u, kind as ut, json as v, Output as w, Input as x, urls as y, int as z };

package/dist/{index-B6ipokoP.d.ts → index-DlgVg3D8.d.ts}

@@ -1,7 +1,7 @@
 import { a as DatabaseDriver, b as TenantDatabases, d as RateLimiter, g as Storage, l as PdfRenderer, n as Body, p as Runtime, r as Cache, s as MailDriver, u as Queue } from "./index-Ce5p2-EB.js";
-import { C as ObjectShape, q as StoredFile, w as Output } from "./index-C-WmIKxT.js";
-import { $ as Expr, C as WithIncludes, D as PageOptions, E as Page, J as Models, Q as Embed, S as Key, T as NumberedPageOptions, V as AnyModel, X as Condition, Z as Conditional, b as RowOf, ct as ColumnNode, gt as FieldSpec, i as Row, lt as ConditionNode, n as Patch, p as Database, t as Insert, ut as Operand, v as OrderKey, w as NumberedPage, x as IncludePath } from "./types-DpOcIuDl.js";
-import { a as PROVIDERS, i as HELD, k as Manifest } from "./data-layer-ubPfZvFV.js";
+import { C as ObjectShape, Y as StoredFile, w as Output } from "./index-CYcklQ1l.js";
+import { $ as Expr, C as WithIncludes, D as PageOptions, E as Page, J as Models, Q as Embed, S as Key, T as NumberedPageOptions, V as AnyModel, X as Condition, Z as Conditional, b as RowOf, ct as ColumnNode, gt as FieldSpec, i as Row, lt as ConditionNode, n as Patch, p as Database, t as Insert, ut as Operand, v as OrderKey, w as NumberedPage, x as IncludePath } from "./types-S6zF5IXV.js";
+import { a as PROVIDERS, i as HELD, k as Manifest } from "./data-layer-D1BFo3wO.js";
 //#region src/auth/policies.d.ts
 /** The actions every model's policy has. */
 declare const STANDARD_ACTIONS: readonly ["read", "create", "update", "delete"];
@@ -404,6 +404,8 @@ interface PutOptions {
   readonly storage?: string;
   /** The body's length in bytes: needed for a stream, read from bytes and text. */
   readonly size?: number;
+  /** An image's smaller copies, as bytes (each smaller than it): `srcset` picks one. */
+  readonly sizes?: readonly (ArrayBuffer | Uint8Array)[];
 }
 interface AppFiles {
   /** Stores a file (its type read from its bytes) in the current tenant's space, and returns it for a write. */
@@ -417,7 +419,7 @@ interface AppFiles {
   url(file: StoredFile, options?: {
     readonly origin?: string;
   }): Promise<string>;
-  /** Removes the file from its storage. */
+  /** Removes the file (and its sizes) from its storage. */
   delete(file: StoredFile): Promise<void>;
 }
 //#endregion

package/dist/index.d.ts

@@ -1,3 +1,3 @@
 import { p as Runtime, t as AppCore } from "./index-Ce5p2-EB.js";
-import { C as Params, D as RouteHandler, E as RouteContext, M as fail, O as RouteOptions, S as Method, T as RouteBuilder, _ as CustomAction, b as AppConfig, d as NotImplementedError, f as AppModules, g as createApp, h as CreatedApp, j as Rejected, k as User, m as AppOptions, p as App, v as Resource, w as Route, x as Named, y as ResourceOptions } from "./index-B6ipokoP.js";
+import { C as Params, D as RouteHandler, E as RouteContext, M as fail, O as RouteOptions, S as Method, T as RouteBuilder, _ as CustomAction, b as AppConfig, d as NotImplementedError, f as AppModules, g as createApp, h as CreatedApp, j as Rejected, k as User, m as AppOptions, p as App, v as Resource, w as Route, x as Named, y as ResourceOptions } from "./index-DlgVg3D8.js";
 export { type App, type AppConfig, type AppCore, type AppModules, type AppOptions, type CreatedApp, type CustomAction, type Method, type Named, NotImplementedError, type Params, Rejected, type Resource, type ResourceOptions, Route, type RouteBuilder, type RouteContext, type RouteHandler, type RouteOptions, type Runtime, type User, createApp, fail };

package/dist/index.js

@@ -1,14 +1,14 @@
-import { B as toKind, R as object, V as validate, W as ValidationError, a as fileTypeNames, f as email, m as line } from "./validation-FyOpSZqE.js";
-import { B as modelOfRow, C as database, D as planInsert, E as recordAction, F as systemClock, G as UniqueFailed, L as NeedsDatabase, O as planUpdate, R as evaluate, S as clockOf, U as NotFound, j as conditionOf, k as keyCondition, r as sync, t as migrate, w as decodeStored } from "./migrator-6oWUefLA.js";
-import { C as tooLarge, E as fail, S as tenantSuspended, T as Rejected, _ as json, b as routeNotFound, c as fromBody, d as route, f as HttpError, g as fileTypeRefused, h as fileTooLarge, l as readInput, m as errorResponse, o as parseListQuery, p as crossSiteRequest, r as resource, s as BODY_LIMIT, t as Resource, u as Route, v as lengthRequired, w as tooManyRequests, x as signInRequired, y as methodNotAllowed } from "./resource-C17NvNa3.js";
-import { F as sensitivity, G as ulid, K as Scope, V as asActor, a as columnName, b as asCondition$1, c as fieldOf, f as Condition, m as Expr, n as toBase64url, r as Model, t as fromBase64url, u as rowOf } from "./base64url-K_wCmvxR.js";
+import { G as ValidationError, H as validate, V as toKind, h as line, o as fileTypeNames, p as email, z as object } from "./validation-Cppmd0RV.js";
+import { B as NeedsDatabase, C as database, D as planInsert, E as recordAction, F as systemClock, J as UniqueFailed, K as NotFound, L as PLATFORM, O as planUpdate, R as TENANT, S as clockOf, U as modelOfRow, V as evaluate, j as conditionOf, k as keyCondition, r as sync, t as migrate, w as decodeStored, z as checkTenancy } from "./migrator-BU3_PHk8.js";
+import { C as tooLarge, E as fail, S as tenantSuspended, T as Rejected, _ as json, b as routeNotFound, c as fromBody, d as route, f as HttpError, g as fileTypeRefused, h as fileTooLarge, l as readInput, m as errorResponse, o as parseListQuery, p as crossSiteRequest, r as resource, s as BODY_LIMIT, t as Resource, u as Route, v as lengthRequired, w as tooManyRequests, x as signInRequired, y as methodNotAllowed } from "./resource-CsYksjKc.js";
+import { F as sensitivity, G as ulid, K as Scope, V as asActor, a as columnName, b as asCondition$1, c as fieldOf, f as Condition, m as Expr, n as toBase64url, r as Model, t as fromBase64url, u as rowOf } from "./base64url-C5GTYIL5.js";
 import { t as kebabCase } from "./case-BnpcvhdW.js";
-import { t as PLATFORM_PREFIX } from "./tables-C4ipMFjg.js";
+import { t as PLATFORM_PREFIX } from "./tables-IrLjsomf.js";
 import { t as Seed } from "./seed-BObmdKdP.js";
 import { n as notImplemented, t as NotImplementedError } from "./errors-mCNLlXg9.js";
-import { d as afterUpdate, f as bindFor, h as ownerFieldOf, m as isFalse, p as check, u as FALSE } from "./policies-pFzslmSB.js";
-import { i as checkRoles, n as authPerms, r as checkAuth } from "./create-auth-y8E8cxkn.js";
-import { C as syncRoles, S as seedAs, _ as cookieOf, a as authModels, b as permissionsOf, c as hashOf, d as GoogleError, f as consentUrl, g as cookie, h as verifyIdToken, i as makers, l as sessions, n as TENANT, p as exchangeCode, r as checkTenancy, s as clearedCookie, t as PLATFORM, v as redirect, x as roleKeys, y as safeReturn } from "./config-0PGFbJh6.js";
+import { d as afterUpdate, f as bindFor, h as ownerFieldOf, m as isFalse, p as check, u as FALSE } from "./policies-CKIdBFKt.js";
+import { i as checkRoles, n as authPerms, r as checkAuth } from "./create-auth-Ci0PaBoX.js";
+import { _ as permissionsOf, a as hashOf, b as syncRoles, c as GoogleError, f as verifyIdToken, g as safeReturn, h as redirect, i as clearedCookie, l as consentUrl, m as cookieOf, n as authModels, o as sessions, p as cookie, t as makers, u as exchangeCode, v as roleKeys, y as seedAs } from "./makers-DeSNM0Nd.js";
 import { t as WrongSize } from "./storage-body-7dWyMszh.js";
 import { RegExpRouter } from "hono/router/reg-exp-router";
 import { SmartRouter } from "hono/router/smart-router";
@@ -109,20 +109,39 @@ function rowJSON(row, model, files) {
 	}
 	return out;
 }
-/** A file as a client sees it: its id, its `url`, then what's shown of it; never its storage or key. */
+/**
+* A file as a client sees it: its id, its `url`, then what's shown of it, and an image's `sizes`
+* (each `{ width, height, url }`, widest first); never its storage or keys.
+*/
 function fileJSON(file, files) {
-	const { id, storage: _storage, key: _key, ...shown } = file;
+	const { id, storage: _storage, key: _key, sizes, ...shown } = file;
 	const out = {
 		id,
 		...files ? { url: null } : {},
 		...shown
 	};
-	if (!files) return out;
-	const url = files.urlOf(file);
-	if (typeof url === "string") out.url = url;
-	else files.pending.push(url.then((made) => {
-		out.url = made;
-	}));
+	const linked = (into, of) => {
+		if (!files) return;
+		const url = files.urlOf(of);
+		if (typeof url === "string") into.url = url;
+		else files.pending.push(url.then((made) => {
+			into.url = made;
+		}));
+	};
+	linked(out, file);
+	if (sizes?.length) out.sizes = sizes.map(({ key, type, width, height }) => {
+		const one = {
+			width,
+			height,
+			...files ? { url: null } : {}
+		};
+		linked(one, {
+			...file,
+			key,
+			type
+		});
+		return one;
+	});
 	return out;
 }
 //#endregion
@@ -1179,6 +1198,8 @@ function filesOf(model, row) {
 	if (!row) return [];
 	return Object.entries(model.spec.fields).flatMap(([field, spec]) => spec.kind.spec.file ? listOf(row[field]) : []);
 }
+/** Every key a file is stored at: its own, and its sizes'. */
+const keysOf = (file) => [file.key, ...(file.sizes ?? []).map((one) => one.key)];
 /** The files a write dropped: held before, held no longer. */
 function droppedFiles(before, after) {
 	const kept = new Set(after.map((file) => file.id));
@@ -1264,13 +1285,13 @@ function fileWrites(upload, storages) {
 		},
 		settle: async (db, uploads, dropped = []) => {
 			if (uploads.length > 0) await db.deleteMany(upload).where((u) => u.fileId.in(uploads));
-			await Promise.all(dropped.map(async (file) => {
+			await Promise.all(dropped.flatMap((file) => keysOf(file).map(async (key) => {
 				try {
-					await storages[file.storage]?.delete(file.key);
+					await storages[file.storage]?.delete(key);
 				} catch (error) {
-					console.error(`isai: couldn't remove ${file.key} from storage "${file.storage}"`, error);
+					console.error(`isai: couldn't remove ${key} from storage "${file.storage}"`, error);
 				}
-			}));
+			})));
 		}
 	};
 }
@@ -2542,6 +2563,11 @@ async function headOf(stream, bytes) {
 *   5. an `Upload` row: pending until a write names the file's id, for a day
 *
 * It answers 201 with the file as a client sees it, its `url` included.
+*
+* An image's smaller copy (the client makes them: `srcset` picks one) is sent the same way, with
+* `X-Size-Of: <the image's id>`. It's kept with that image while its upload is still pending, from
+* the same user to the same field, and must be smaller than it: the answer is the image, its
+* `sizes` included. A write then names only the image.
 */
 /** How long an upload waits to be attached. */
 const UPLOAD_TTL_MS = 864e5;
@@ -2579,17 +2605,50 @@ function uploadRoute(options) {
 			await body.cancel().catch(() => {});
 			throw fileTypeRefused(fileTypeNames(spec.types));
 		}
+		const db = accessOf(context.db).trusted;
+		const user = context.user;
+		const put = async (key) => {
+			try {
+				await storage.put(key, body, {
+					size,
+					contentType: sniffed.type
+				});
+			} catch (error) {
+				if (error instanceof WrongSize) throw new HttpError(400, "WrongSize", "The file's bytes don't match its Content-Length");
+				throw error;
+			}
+		};
+		const sizeOf = request.headers.get("X-Size-Of");
+		if (sizeOf !== null) {
+			const pending = await db.findOne(options.upload, { fileId: sizeOf });
+			const image = pending?.file;
+			const refused = (code, message) => {
+				body.cancel().catch(() => {});
+				return new HttpError(400, code, message);
+			};
+			if (!pending || !image || pending.target !== name || (pending.user ?? void 0) !== user?.id || pending.expiresAt.getTime() <= clockOf(db).now().getTime()) throw refused("SizeOfUnknown", "X-Size-Of must name an image uploaded here, before it's attached");
+			const { width, height } = sniffed;
+			const sizes = image.sizes ?? [];
+			if (!width || !height || !image.width || !image.height || width >= image.width || height > image.height) throw refused("NotSmaller", "A size must be an image smaller than the one it's of");
+			if (sizes.length >= 4 || sizes.some((one) => one.width === width)) throw refused("TooManySizes", `An image keeps at most 4 sizes, each of its own width`);
+			const key = `${image.key}.${width}`;
+			await put(key);
+			const file = {
+				...image,
+				sizes: [...sizes, {
+					key,
+					size,
+					type: sniffed.type,
+					width,
+					height
+				}].sort((a, b) => b.width - a.width)
+			};
+			await db.updateOne(options.upload, { fileId: sizeOf }, { file });
+			return json(201, await options.answer(file, new URL(request.url).origin));
+		}
 		const id = newFileId();
 		const key = keyOf(id, context.tenant);
-		try {
-			await storage.put(key, body, {
-				size,
-				contentType: sniffed.type
-			});
-		} catch (error) {
-			if (error instanceof WrongSize) throw new HttpError(400, "WrongSize", "The file's bytes don't match its Content-Length");
-			throw error;
-		}
+		await put(key);
 		const file = {
 			id,
 			storage: spec.storage,
@@ -2598,8 +2657,6 @@ function uploadRoute(options) {
 			size,
 			...sniffed
 		};
-		const db = accessOf(context.db).trusted;
-		const user = context.user;
 		await db.createOne(options.upload, {
 			fileId: id,
 			file,
@@ -2720,7 +2777,7 @@ function appFiles(options) {
 		return storage;
 	};
 	return {
-		put: async (body, { name, storage = "default", size: given }) => {
+		put: async (body, { name, storage = "default", size: given, sizes: copies = [] }) => {
 			const where = storageOf(storage);
 			const bytes = body instanceof ReadableStream ? void 0 : asBytes(body);
 			const size = bytes?.byteLength ?? given;
@@ -2740,18 +2797,40 @@ function appFiles(options) {
 				size,
 				contentType: sniffed.type
 			});
+			const sizes = [];
+			for (const copy of copies) {
+				const bytes = new Uint8Array(copy);
+				const one = sniff(bytes.subarray(0, SNIFF_BYTES), name);
+				if (!one?.width || !one.height || !sniffed.width || !sniffed.height || one.width >= sniffed.width || one.height > sniffed.height) throw new TypeError(`isai: a size of ${name} must be an image smaller than it`);
+				const at = `${key}.${one.width}`;
+				await where.put(at, bytes, {
+					size: bytes.byteLength,
+					contentType: one.type
+				});
+				sizes.push({
+					key: at,
+					size: bytes.byteLength,
+					type: one.type,
+					width: one.width,
+					height: one.height
+				});
+			}
+			sizes.sort((a, b) => b.width - a.width);
 			return {
 				id,
 				storage,
 				key,
 				name,
 				size,
-				...sniffed
+				...sniffed,
+				...sizes.length ? { sizes } : {}
 			};
 		},
 		get: async (file) => (await storageOf(file.storage).get(file.key))?.body,
 		url: async (file, { origin = "" } = {}) => url(file, origin),
-		delete: (file) => storageOf(file.storage).delete(file.key)
+		delete: async (file) => {
+			await Promise.all(keysOf(file).map((key) => storageOf(file.storage).delete(key)));
+		}
 	};
 }
 function asBytes(body) {

package/dist/{make-WQpkYW8N.js → make-DKBn79cH.js}

@@ -1,4 +1,4 @@
-import { F as systemClock, f as dayOf, h as snapshotOf, p as generateMigration, y as MigrationError } from "./migrator-6oWUefLA.js";
+import { F as systemClock, f as dayOf, h as snapshotOf, p as generateMigration, y as MigrationError } from "./migrator-BU3_PHk8.js";
 //#region src/db/migrations/cleanup.ts
 /** Dropped tables, those that refer to others first, so no row is left pointing at a dropped one. */
 function dropOrder(tables) {

package/dist/{config-0PGFbJh6.js → makers-DeSNM0Nd.js}

@@ -1,6 +1,6 @@
-import { G as Fake, K as fakeValue } from "./validation-FyOpSZqE.js";
-import { D as planInsert, E as recordAction, S as clockOf, T as forUpkeep, V as CheckFailed } from "./migrator-6oWUefLA.js";
-import { j as IMPLICIT_FIELDS, n as toBase64url, r as Model, t as fromBase64url } from "./base64url-K_wCmvxR.js";
+import { K as Fake, q as fakeValue } from "./validation-Cppmd0RV.js";
+import { D as planInsert, E as recordAction, S as clockOf, T as forUpkeep, W as CheckFailed } from "./migrator-BU3_PHk8.js";
+import { j as IMPLICIT_FIELDS, n as toBase64url, r as Model, t as fromBase64url } from "./base64url-C5GTYIL5.js";
 //#region src/auth/roles.ts
 const same = (a, b) => a.length === b.length && a.every((value, i) => value === b[i]);
 /** What a role in `app.ts` is stored as. */
@@ -410,37 +410,4 @@ function failedCheck(model, input, now) {
 	}
 }
 //#endregion
-//#region src/tenancy/config.ts
-/**
-* The two database names that mean something, and only with tenancy: each tenant's own database,
-* and the platform's. Every other name is just a name.
-*/
-const TENANT = "tenant";
-const PLATFORM = "platform";
-/** A host without a scheme, path or trailing dot; a port is allowed (local development). */
-const HOST = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)*(?::\d{1,5})?$/;
-/**
-* Checks the tenancy key against the databases, when the app starts. With tenancy the databases
-* are `tenant` (each tenant's) and `platform`; without it, the app has one database, named freely.
-*/
-function checkTenancy(tenancy, databases) {
-	const names = Object.keys(databases);
-	if (!tenancy) {
-		const reserved = names.find((name) => name === "tenant" || name === "platform");
-		if (reserved) throw new TypeError(`isai: databases.${reserved} is ${reserved === "tenant" ? "each tenant's database" : "the platform's database"}, which only an app with a \`tenancy\` key has; name the app's database something else (main)`);
-		if (names.length !== 1) throw new TypeError(`isai: an app without tenancy has one database (named as you like); it has ${names.length}${names.length > 1 ? `: ${names.join(", ")}. Several aren't supported yet` : ""}`);
-		if (Object.values(databases)[0]?.kind !== "database") throw new TypeError("isai: every tenant's own database (durableObject(env.TENANT)) needs a `tenancy` key");
-		return;
-	}
-	if (tenancy.mode !== "isolated") throw new TypeError(`isai: tenancy.mode "${String(tenancy.mode)}" isn't built yet; use "isolated"`);
-	if (tenancy.by !== "host") throw new TypeError(`isai: tenancy.by "${String(tenancy.by)}" isn't built yet; use "host"`);
-	if (typeof tenancy.platform !== "string" || !HOST.test(tenancy.platform.toLowerCase())) throw new TypeError(`isai: tenancy.platform must be a host, like app.example.com (no https:// or path); got "${String(tenancy.platform)}"`);
-	const model = tenancy.tenant;
-	if (model?.spec?.name !== "Tenant" || model.spec.builtin !== "tenancy") throw new TypeError("isai: tenancy.tenant is the Tenant model: builtins.Tenant, or its extension (import { Tenant } from \"#db/platform/tenants\")");
-	if (databases["tenant"]?.kind !== "tenantDatabases") throw new TypeError("isai: with isolated tenancy, databases.tenant is each tenant's database: durableObject(env.TENANT)");
-	if (databases["platform"]?.kind !== "database") throw new TypeError("isai: an app with tenancy needs databases.platform, where the Tenant and Domain tables live");
-	const other = names.find((name) => name !== "tenant" && name !== "platform");
-	if (other) throw new TypeError(`isai: with tenancy, the databases are tenant and platform; databases.${other} isn't supported yet`);
-}
-//#endregion
-export { syncRoles as C, seedAs as S, cookieOf as _, authModels as a, permissionsOf as b, hashOf as c, GoogleError as d, consentUrl as f, cookie as g, verifyIdToken as h, makers as i, sessions as l, forgetGoogleKeys as m, TENANT as n, authOf as o, exchangeCode as p, checkTenancy as r, clearedCookie as s, PLATFORM as t, GOOGLE as u, redirect as v, roleKeys as x, safeReturn as y };
+export { permissionsOf as _, hashOf as a, syncRoles as b, GoogleError as c, forgetGoogleKeys as d, verifyIdToken as f, safeReturn as g, redirect as h, clearedCookie as i, consentUrl as l, cookieOf as m, authModels as n, sessions as o, cookie as p, authOf as r, GOOGLE as s, makers as t, exchangeCode as u, roleKeys as v, seedAs as y };

package/dist/{migrator-6oWUefLA.js → migrator-BU3_PHk8.js}

@@ -1,5 +1,5 @@
-import { W as ValidationError, j as id } from "./validation-FyOpSZqE.js";
-import { A as unbound, B as aroundUpsert, E as fieldsOf, G as ulid, H as assertNotLog, I as actionEntry, L as aroundCreate, O as readsNow, R as aroundDelete, T as storageOf, W as wrap, a as columnName, c as fieldOf, f as Condition, h as Now, i as assertNotEncrypted, j as IMPLICIT_FIELDS, k as readsOtherRows, m as Expr, n as toBase64url, o as columnNode, t as fromBase64url$1, u as rowOf$1, x as conditionNode, z as aroundUpdate } from "./base64url-K_wCmvxR.js";
+import { G as ValidationError, M as id } from "./validation-Cppmd0RV.js";
+import { A as unbound, B as aroundUpsert, E as fieldsOf, G as ulid, H as assertNotLog, I as actionEntry, L as aroundCreate, O as readsNow, R as aroundDelete, T as storageOf, W as wrap, a as columnName, c as fieldOf, f as Condition, h as Now, i as assertNotEncrypted, j as IMPLICIT_FIELDS, k as readsOtherRows, m as Expr, n as toBase64url, o as columnNode, t as fromBase64url$1, u as rowOf$1, x as conditionNode, z as aroundUpdate } from "./base64url-C5GTYIL5.js";
 import { t as NotImplementedError } from "./errors-mCNLlXg9.js";
 //#region src/db/errors.ts
 var DatabaseError = class extends Error {
@@ -278,6 +278,39 @@ function evaluate(node, row, now, zone = utc) {
 	}
 }
 //#endregion
+//#region src/tenancy/config.ts
+/**
+* The two database names that mean something, and only with tenancy: each tenant's own database,
+* and the platform's. Every other name is just a name.
+*/
+const TENANT = "tenant";
+const PLATFORM = "platform";
+/** A host without a scheme, path or trailing dot; a port is allowed (local development). */
+const HOST = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)*(?::\d{1,5})?$/;
+/**
+* Checks the tenancy key against the databases, when the app starts. With tenancy the databases
+* are `tenant` (each tenant's) and `platform`; without it, the app has one database, named freely.
+*/
+function checkTenancy(tenancy, databases) {
+	const names = Object.keys(databases);
+	if (!tenancy) {
+		const reserved = names.find((name) => name === "tenant" || name === "platform");
+		if (reserved) throw new TypeError(`isai: databases.${reserved} is ${reserved === "tenant" ? "each tenant's database" : "the platform's database"}, which only an app with a \`tenancy\` key has; name the app's database something else (main)`);
+		if (names.length !== 1) throw new TypeError(`isai: an app without tenancy has one database (named as you like); it has ${names.length}${names.length > 1 ? `: ${names.join(", ")}. Several aren't supported yet` : ""}`);
+		if (Object.values(databases)[0]?.kind !== "database") throw new TypeError("isai: every tenant's own database (durableObject(env.TENANT)) needs a `tenancy` key");
+		return;
+	}
+	if (tenancy.mode !== "isolated") throw new TypeError(`isai: tenancy.mode "${String(tenancy.mode)}" isn't built yet; use "isolated"`);
+	if (tenancy.by !== "host") throw new TypeError(`isai: tenancy.by "${String(tenancy.by)}" isn't built yet; use "host"`);
+	if (typeof tenancy.platform !== "string" || !HOST.test(tenancy.platform.toLowerCase())) throw new TypeError(`isai: tenancy.platform must be a host, like app.example.com (no https:// or path); got "${String(tenancy.platform)}"`);
+	const model = tenancy.tenant;
+	if (model?.spec?.name !== "Tenant" || model.spec.builtin !== "tenancy") throw new TypeError("isai: tenancy.tenant is the Tenant model: builtins.Tenant, or its extension (import { Tenant } from \"#db/platform/tenants\")");
+	if (databases["tenant"]?.kind !== "tenantDatabases") throw new TypeError("isai: with isolated tenancy, databases.tenant is each tenant's database: durableObject(env.TENANT)");
+	if (databases["platform"]?.kind !== "database") throw new TypeError("isai: an app with tenancy needs databases.platform, where the Tenant and Domain tables live");
+	const other = names.find((name) => name !== "tenant" && name !== "platform");
+	if (other) throw new TypeError(`isai: with tenancy, the databases are tenant and platform; databases.${other} isn't supported yet`);
+}
+//#endregion
 //#region src/internal/secret-box.ts
 /**
 * Encrypted values for `secret` fields: AES-256-GCM through Web Crypto, on every runtime.
@@ -3528,4 +3561,4 @@ async function migrateFresh(driver, models, options = {}) {
 	await sync(driver, manifest, options);
 }
 //#endregion
-export { Query as A, modelOfRow as B, database as C, planInsert as D, recordAction as E, systemClock as F, UniqueFailed as G, DatabaseError as H, newSecretKey as I, NeedsDatabase as L, dialectFor as M, sqlite as N, planUpdate as O, fixedClock as P, evaluate as R, clockOf as S, forUpkeep as T, NotFound as U, CheckFailed as V, ReferenceFailed as W, TODO as _, currentRelease as a, Database as b, rollback as c, applyRules as d, dayOf as f, UnsafeMigration as g, snapshotOf as h, acquireLock as i, conditionOf as j, keyCondition as k, setReleaseStatus as l, emptySnapshot as m, migrateFresh as n, holdOf as o, generateMigration as p, sync as r, releaseLock as s, migrate as t, startRelease as u, dataStep as v, decodeStored as w, Transaction as x, MigrationError as y, utc as z };
+export { Query as A, NeedsDatabase as B, database as C, planInsert as D, recordAction as E, systemClock as F, DatabaseError as G, utc as H, newSecretKey as I, UniqueFailed as J, NotFound as K, PLATFORM as L, dialectFor as M, sqlite as N, planUpdate as O, fixedClock as P, TENANT as R, clockOf as S, forUpkeep as T, modelOfRow as U, evaluate as V, CheckFailed as W, TODO as _, currentRelease as a, Database as b, rollback as c, applyRules as d, dayOf as f, UnsafeMigration as g, snapshotOf as h, acquireLock as i, conditionOf as j, keyCondition as k, setReleaseStatus as l, emptySnapshot as m, migrateFresh as n, holdOf as o, generateMigration as p, ReferenceFailed as q, sync as r, releaseLock as s, migrate as t, startRelease as u, dataStep as v, decodeStored as w, Transaction as x, MigrationError as y, checkTenancy as z };

package/dist/{policies-pFzslmSB.js → policies-CKIdBFKt.js}

@@ -1,4 +1,4 @@
-import { D as nodesOf, U as isRecorded, a as columnName, f as Condition, m as Expr, u as rowOf, x as conditionNode } from "./base64url-K_wCmvxR.js";
+import { D as nodesOf, U as isRecorded, a as columnName, f as Condition, m as Expr, u as rowOf, x as conditionNode } from "./base64url-C5GTYIL5.js";
 //#region src/auth/enforce.ts
 /**
 * Checking a policy: its action's condition, with the

package/dist/{resource-C17NvNa3.js → resource-CsYksjKc.js}

@@ -1,7 +1,7 @@
-import { B as toKind, R as object, V as validate, W as ValidationError } from "./validation-FyOpSZqE.js";
-import { G as UniqueFailed, U as NotFound, V as CheckFailed, W as ReferenceFailed } from "./migrator-6oWUefLA.js";
-import { a as columnName, b as asCondition, j as IMPLICIT_FIELDS, l as computedFieldOf, m as Expr, p as Embed } from "./base64url-K_wCmvxR.js";
-import { r as actionsOf } from "./policies-pFzslmSB.js";
+import { G as ValidationError, H as validate, V as toKind, z as object } from "./validation-Cppmd0RV.js";
+import { J as UniqueFailed, K as NotFound, W as CheckFailed, q as ReferenceFailed } from "./migrator-BU3_PHk8.js";
+import { a as columnName, b as asCondition, j as IMPLICIT_FIELDS, l as computedFieldOf, m as Expr, p as Embed } from "./base64url-C5GTYIL5.js";
+import { r as actionsOf } from "./policies-CKIdBFKt.js";
 import { n as RESERVED, t as LOOKUPS } from "./syntax-CrUZFrS7.js";
 //#region src/api/fail.ts
 /**

package/dist/{tables-C4ipMFjg.js → tables-IrLjsomf.js}

@@ -1,4 +1,4 @@
-import { r as Model, s as defineModel } from "./base64url-K_wCmvxR.js";
+import { r as Model, s as defineModel } from "./base64url-C5GTYIL5.js";
 //#region src/db/schema/builtins.ts
 /**
 * Built-in tables: sets of models a part of isai owns, switched on

package/dist/testing/index.d.ts

@@ -1,5 +1,5 @@
 import { a as DatabaseDriver, g as Storage } from "../index-Ce5p2-EB.js";
-import { I as Clock, L as FixedClock, R as fixedClock, V as AnyModel, i as Row, l as Overrides, p as Database, s as Makers, u as Seed } from "../types-DpOcIuDl.js";
+import { I as Clock, L as FixedClock, R as fixedClock, V as AnyModel, i as Row, l as Overrides, p as Database, s as Makers, u as Seed } from "../types-S6zF5IXV.js";
 //#region src/testing/conformance/database.d.ts
 /**
  * Makes the driver under test. Every call must return a driver on an **empty** database:

package/dist/testing/index.js

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "../rolldown-runtime-D7D4PA-g.js";
-import { M as dialectFor, P as fixedClock, a as currentRelease, b as Database, c as rollback, i as acquireLock, k as keyCondition, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, o as holdOf, p as generateMigration, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, y as MigrationError, z as utc } from "../migrator-6oWUefLA.js";
-import { n as toBase64url, r as Model } from "../base64url-K_wCmvxR.js";
-import { t as createDataLayer } from "../data-layer-D9UPOK6L.js";
-import { S as seedAs, i as makers, m as forgetGoogleKeys, n as TENANT, o as authOf, t as PLATFORM, u as GOOGLE } from "../config-0PGFbJh6.js";
+import { H as utc, L as PLATFORM, M as dialectFor, P as fixedClock, R as TENANT, a as currentRelease, b as Database, c as rollback, i as acquireLock, k as keyCondition, l as setReleaseStatus, m as emptySnapshot, n as migrateFresh, o as holdOf, p as generateMigration, r as sync, s as releaseLock, t as migrate, u as startRelease, v as dataStep, y as MigrationError } from "../migrator-BU3_PHk8.js";
+import { n as toBase64url, r as Model } from "../base64url-C5GTYIL5.js";
+import { t as createDataLayer } from "../data-layer-_TZtuy-F.js";
+import { d as forgetGoogleKeys, r as authOf, s as GOOGLE, t as makers, y as seedAs } from "../makers-DeSNM0Nd.js";
 import { describe, expect, it } from "vitest";
 //#region src/testing/conformance/database.ts
 /**

package/dist/{types-DpOcIuDl.d.ts → types-S6zF5IXV.d.ts}

@@ -1,5 +1,5 @@
 import { a as DatabaseDriver, f as Row$1, h as Sql, o as DialectName } from "./index-Ce5p2-EB.js";
-import { E as list, G as FileType, K as ImageType, M as IdInput, T as Shape, at as Measure, et as AnyKind, g as KindDefinition, h as Definable, it as KindTypes, ot as Sensitivity, q as StoredFile, ut as StandardProps, w as Output, x as Input$2 } from "./index-C-WmIKxT.js";
+import { E as list, G as FileType, M as IdInput, T as Shape, Y as StoredFile, ct as Sensitivity, ft as StandardProps, g as KindDefinition, h as Definable, nt as AnyKind, ot as KindTypes, q as ImageType, st as Measure, w as Output, x as Input$2 } from "./index-CYcklQ1l.js";
 //#region src/db/fields/slot.d.ts
 interface SlotSpec {
   /** Namespaced by module: `auth.owner`. */

package/dist/validation/index.d.ts

@@ -1,3 +1,3 @@
 import { a as ValidationError, i as Result, n as IssueCode, r as Path, t as Issue } from "../issues-CKto95IW.js";
-import { $ as FakeContext, A as validate, B as money, C as ObjectShape, D as object, E as list, F as datetime, G as FileType, H as sequence, I as fakeUlid, J as file, K as ImageType, L as flag, M as IdInput, N as choice, O as serialize, P as date, Q as Fake, R as id, S as LIST_MAX, T as Shape, U as phone, V as quantity, W as phoneKind, X as image, Y as files, Z as images, _ as define, a as newToken, at as Measure, b as CarriesKind, c as slug, ct as kind, d as text, dt as StandardResult, et as AnyKind, f as textKind, ft as StandardSchemaV1, g as KindDefinition, h as Definable, i as markdown, it as KindTypes, j as CalendarDate, k as toKind, l as slugify, lt as StandardIssue, m as url, n as host, nt as Kind, o as personName, ot as Sensitivity, p as token, q as StoredFile, r as line, rt as KindSpec, s as secret, st as TypeText, t as email, tt as FileSpec, u as subdomain, ut as StandardProps, v as json, w as Output, x as Input, y as urls, z as int } from "../index-C-WmIKxT.js";
-export { type AnyKind, type CalendarDate, type CarriesKind, type Definable, Fake, type FakeContext, type FileSpec, type FileType, type IdInput, type ImageType, type Input, type Issue, type IssueCode, Kind, type KindDefinition, type KindSpec, type KindTypes, LIST_MAX, type Measure, type ObjectShape, type Output, type Path, type Result, type Sensitivity, type Shape, type StandardIssue, type StandardProps, type StandardResult, type StandardSchemaV1, type StoredFile, type TypeText, ValidationError, choice, date, datetime, define, email, fakeUlid, file, files, flag, host, id, image, images, int, json, kind, line, list, markdown, money, newToken, object, personName, phone, phoneKind, quantity, secret, sequence, serialize, slug, slugify, subdomain, text, textKind, toKind, token, url, urls, validate };
+import { $ as images, A as validate, B as money, C as ObjectShape, D as object, E as list, F as datetime, G as FileType, H as sequence, I as fakeUlid, J as SIZES_MAX, K as ImageSize, L as flag, M as IdInput, N as choice, O as serialize, P as date, Q as image, R as id, S as LIST_MAX, T as Shape, U as phone, V as quantity, W as phoneKind, X as file, Y as StoredFile, Z as files, _ as define, a as newToken, at as KindSpec, b as CarriesKind, c as slug, ct as Sensitivity, d as text, dt as StandardIssue, et as Fake, f as textKind, ft as StandardProps, g as KindDefinition, h as Definable, i as markdown, it as Kind, j as CalendarDate, k as toKind, l as slugify, lt as TypeText, m as url, mt as StandardSchemaV1, n as host, nt as AnyKind, o as personName, ot as KindTypes, p as token, pt as StandardResult, q as ImageType, r as line, rt as FileSpec, s as secret, st as Measure, t as email, tt as FakeContext, u as subdomain, ut as kind, v as json, w as Output, x as Input, y as urls, z as int } from "../index-CYcklQ1l.js";
+export { type AnyKind, type CalendarDate, type CarriesKind, type Definable, Fake, type FakeContext, type FileSpec, type FileType, type IdInput, type ImageSize, type ImageType, type Input, type Issue, type IssueCode, Kind, type KindDefinition, type KindSpec, type KindTypes, LIST_MAX, type Measure, type ObjectShape, type Output, type Path, type Result, SIZES_MAX, type Sensitivity, type Shape, type StandardIssue, type StandardProps, type StandardResult, type StandardSchemaV1, type StoredFile, type TypeText, ValidationError, choice, date, datetime, define, email, fakeUlid, file, files, flag, host, id, image, images, int, json, kind, line, list, markdown, money, newToken, object, personName, phone, phoneKind, quantity, secret, sequence, serialize, slug, slugify, subdomain, text, textKind, toKind, token, url, urls, validate };

package/dist/validation/index.js

@@ -1 +1 @@
-export { G as Fake, H as Kind, I as LIST_MAX, W as ValidationError, E as choice, D as date, O as datetime, l as define, f as email, k as fakeUlid, i as file, o as files, A as flag, p as host, j as id, s as image, c as images, M as int, u as json, U as kind, m as line, L as list, h as markdown, N as money, g as newToken, R as object, _ as personName, t as phone, n as phoneKind, P as quantity, v as secret, F as sequence, z as serialize, y as slug, b as slugify, x as subdomain, S as text, C as textKind, B as toKind, w as token, T as url, d as urls, V as validate } from "../validation-FyOpSZqE.js";
+export { K as Fake, U as Kind, L as LIST_MAX, i as SIZES_MAX, G as ValidationError, D as choice, O as date, k as datetime, u as define, p as email, A as fakeUlid, a as file, s as files, j as flag, m as host, M as id, c as image, l as images, N as int, d as json, W as kind, h as line, R as list, g as markdown, P as money, _ as newToken, z as object, v as personName, t as phone, n as phoneKind, F as quantity, y as secret, I as sequence, B as serialize, b as slug, x as slugify, S as subdomain, C as text, w as textKind, V as toKind, T as token, E as url, f as urls, H as validate } from "../validation-Cppmd0RV.js";

package/dist/{validation-FyOpSZqE.js → validation-Cppmd0RV.js}

@@ -1078,6 +1078,8 @@ function define(definition) {
 }
 //#endregion
 //#region src/validation/kinds/files.ts
+/** At most this many smaller copies of one image. */
+const SIZES_MAX = 4;
 /** File types by their usual name, with the media types each covers. */
 const FILE_TYPES = {
 	pdf: ["application/pdf"],
@@ -1139,7 +1141,21 @@ const reference = object({
 		fake: () => "text/plain"
 	}),
 	width: int().min(1).optional(),
-	height: int().min(1).optional()
+	height: int().min(1).optional(),
+	sizes: list(object({
+		key: textKind("fileKey", {
+			max: 1024,
+			fake: (fake) => `fake/${fakeUlid(fake)}`
+		}),
+		size: quantity(),
+		type: textKind("mediaType", {
+			max: 255,
+			normalize: (value) => value.toLowerCase(),
+			fake: () => "image/webp"
+		}),
+		width: int().min(1),
+		height: int().min(1)
+	})).max(4).optional()
 });
 function fileKind(name, spec) {
 	const { types, maxBytes } = spec;
@@ -1150,11 +1166,12 @@ function fileKind(name, spec) {
 		read: (value, path) => {
 			const read = reference.parse(value, path);
 			if (!read.ok) return read;
-			const { width, height, ...rest } = read.value;
+			const { width, height, sizes, ...rest } = read.value;
 			const file = {
 				...rest,
 				...width ? { width } : {},
-				...height ? { height } : {}
+				...height ? { height } : {},
+				...sizes?.length ? { sizes } : {}
 			};
 			const issues = [];
 			if (!types.has(file.type)) issues.push({
@@ -1296,4 +1313,4 @@ function phone(options = {}) {
 	return phoneKind(() => region);
 }
 //#endregion
-export { flag as A, toKind as B, textKind as C, date as D, choice as E, sequence as F, Fake as G, Kind as H, LIST_MAX as I, fakeValue as K, list as L, int as M, money as N, datetime as O, quantity as P, object as R, text as S, url as T, kind as U, validate as V, ValidationError as W, personName as _, fileTypeNames as a, slugify as b, images as c, urls as d, email as f, newToken as g, markdown as h, file as i, id as j, fakeUlid as k, define as l, line as m, phoneKind as n, files as o, host as p, isPhoneRegion as r, image as s, phone as t, json as u, secret as v, token as w, subdomain as x, slug as y, serialize as z };
+export { fakeUlid as A, serialize as B, text as C, choice as D, url as E, quantity as F, ValidationError as G, validate as H, sequence as I, Fake as K, LIST_MAX as L, id as M, int as N, date as O, money as P, list as R, subdomain as S, token as T, Kind as U, toKind as V, kind as W, newToken as _, file as a, slug as b, image as c, json as d, urls as f, markdown as g, line as h, SIZES_MAX as i, flag as j, datetime as k, images as l, host as m, phoneKind as n, fileTypeNames as o, email as p, fakeValue as q, isPhoneRegion as r, files as s, phone as t, define as u, personName as v, textKind as w, slugify as x, secret as y, object as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isaijs/core",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "A batteries-included, type-safe TypeScript backend framework. Cloudflare first, no lock-in.",
   "type": "module",
   "license": "MIT",