Suggest tags on the upload and edit forms, with a backfill page (SONA-220)

.gitignore

@@ -33,6 +33,8 @@ vite.config.ts.timestamp-*
 .wrangler-e2e-recovery
 .wrangler-e2e-uploadthing
 .wrangler-e2e-upload
+.wrangler-e2e-tag-suggestions
+.wrangler-e2e-suggest-tags
 
 # Playwright
 /test-results

UPDATING.md

@@ -50,12 +50,15 @@ after a fetch gives the same view from a clone.
 
 ## Read before upgrading: tag suggestions call entail.dev (SONA-220)
 
-This release adds an admin-only tag suggestion lookup for artwork. Only you can
-start it, and nothing runs on its own. When you do, the site sends a public
-link to entail.dev, an image classifier, and shows you the tags it returns. For a
-Bluesky post that link is the post itself. For an X post the site first asks X's
-own API which picture the post carries, then sends the picture link X hands back.
-Nothing from either reply is stored; the suggestions are yours to accept or drop.
+This release adds an admin-only tag suggestion lookup for artwork. It appears in
+three places: the **Suggest tags** button beside the Tags field when you upload a
+piece, the same button on a piece's edit page, and a **Suggest tags** page under
+All Images that lists every image with a Bluesky or X source post and no tags
+yet. Only you can start it, and nothing runs on its own. When you do, the site
+sends a public link to entail.dev, an image classifier, and shows you the tags it
+returns. For a Bluesky post that link is the post itself. For an X post the site
+first asks X's own API which picture the post carries, then sends the picture
+link X hands back. Nothing is stored unless you accept it.
 
 The built-in privacy policy and the `/ai` page describe this call already. If
 you pasted your own privacy text or your own `/ai` text in Settings, **neither
@@ -73,6 +76,10 @@ source post, or at the picture in that post. For a post on X, the site first ask
 X's own service which picture the post carries. Only the site owner can start
 that, so nothing you do is sent to an AI service as you browse."
 
+The release also adds a database index on `image_tags`, which the **Suggest
+tags** page needs to find untagged images without reading every tag row. The
+deploy applies it, so you don't need to run anything.
+
 ## One-time backfill: sticker animation flags (SONA-123)
 
 The release that adds the per-sticker download-format menu also adds a

docs/architecture.md

@@ -13,6 +13,7 @@ graph TB
         Hooks[🛡️ hooks.server — CSP, setup gate, sessions]
         Public[🖼️ Public routes — galleries, characters, VR, stickers]
         Admin[🛠️ Admin routes — setup wizard, uploads, settings]
+        TagCallers[🏷️ Tag suggestion callers — upload form, image edit form, /admin/images/suggest-tags backfill]
         API[⚙️ API routes — /api/*, /img, oEmbed, RSS feed, cron]
         QR[📱 /connect/qr — convention scan target, reads no D1]
 
@@ -73,6 +74,8 @@ graph TB
     Hooks --> QR
 
     Admin --> Auth
+    Admin --> TagCallers
+    TagCallers -->|POST /api/admin/tag-suggestions| API
     Admin --> Storage
     Admin --> Importers
     Importers --> Storage
@@ -149,7 +152,11 @@ graph TB
   integrations, keyed off secrets or settings (see `wrangler.toml.example` for the full list).
 - entail.dev needs no key or secret. The app calls it only when an operator
   asks for tag suggestions on an image whose source post is on Bluesky or X,
-  and never on a render path or a schedule. An X post takes one extra hop:
+  and never on a render path or a schedule. Three admin surfaces ask: the
+  upload form, the image edit form, and the `/admin/images/suggest-tags`
+  backfill list, which works through the images that already carry such a post
+  and have no tags yet. All three go through `POST
+  /api/admin/tag-suggestions`. An X post takes one extra hop:
   X's own API resolves the post to its image, and that image URL is what
   entail.dev classifies.
 - GitHub Actions is part of the runtime, not just delivery: the scheduled

drizzle/0029_image_tags_image_id_idx.sql

@@ -0,0 +1 @@
+CREATE INDEX IF NOT EXISTS `image_tags_image_id_idx` ON `image_tags` (`image_id`);