@acornly/core 0.1.0 → 0.3.0

package/dist/body-prepare.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Checking a typed body part before it is written, and a body type's schema on a value. Kept
+ * apart from `body.ts`, which the read path loads, since only writes and renderers of typed parts
+ * need them (#617).
+ */
+import { BodyTypes, type BodyTypeDefinition, type BodyTypeLookup } from "./body.js";
+import type { ContextualBody } from "./model.js";
+/** App-defined body types by name, with `prepare` to check a typed part before it is written. */
+export declare class BodyTypeRegistry extends BodyTypes {
+    /** Checks a typed part before it is written (see `prepareBody`). Returns the part to store. */
+    prepare(part: ContextualBody): ContextualBody;
+}
+/**
+ * Checks a typed part before it is written: a registered type's schema must accept the value,
+ * and its summary is recomputed with `summarize`. Unknown types (made by another app or a newer
+ * client) pass through unchanged but must have a valid namespaced name and carry a summary.
+ * The value is stored as given, not as the schema's output, so a part re-saved unchanged still
+ * passes. Returns the part to store. `types` is the registry to look types up in.
+ */
+export declare function prepareBody(types: BodyTypeLookup, part: ContextualBody): ContextualBody;
+/**
+ * Runs a body type's schema on a value. Stored values may have been written by another client
+ * that never ran the schema, so renderers check them again before calling `render`.
+ * Returns the schema's output value when it passes.
+ */
+export declare function checkBodyValue<T>(definition: BodyTypeDefinition<T>, value: unknown): {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    message?: string;
+};
+//# sourceMappingURL=body-prepare.d.ts.map

package/dist/body-prepare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-prepare.d.ts","sourceRoot":"","sources":["../src/body-prepare.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,SAAS,EAGT,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACpB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,iGAAiG;AACjG,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,+FAA+F;IAC/F,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc;CAG9C;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,GAAG,cAAc,CA8BvF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,EACjC,KAAK,EAAE,OAAO,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CA0B1D"}

package/dist/body-prepare.js

@@ -0,0 +1,88 @@
+/**
+ * Checking a typed body part before it is written, and a body type's schema on a value. Kept
+ * apart from `body.ts`, which the read path loads, since only writes and renderers of typed parts
+ * need them (#617).
+ */
+import { BodyTypes, InvalidBodyError, isBodyTypeName, } from "./body.js";
+/** App-defined body types by name, with `prepare` to check a typed part before it is written. */
+export class BodyTypeRegistry extends BodyTypes {
+    /** Checks a typed part before it is written (see `prepareBody`). Returns the part to store. */
+    prepare(part) {
+        return prepareBody(this, part);
+    }
+}
+/**
+ * Checks a typed part before it is written: a registered type's schema must accept the value,
+ * and its summary is recomputed with `summarize`. Unknown types (made by another app or a newer
+ * client) pass through unchanged but must have a valid namespaced name and carry a summary.
+ * The value is stored as given, not as the schema's output, so a part re-saved unchanged still
+ * passes. Returns the part to store. `types` is the registry to look types up in.
+ */
+export function prepareBody(types, part) {
+    if (!isBodyTypeName(part.schema)) {
+        throw new InvalidBodyError(`"${part.schema}" is not a valid namespaced body type name`);
+    }
+    const definition = types.get(part.schema);
+    if (!definition) {
+        if (typeof part.summary !== "string") {
+            throw new InvalidBodyError(`Body part "${part.schema}" needs a plain-text summary`);
+        }
+        return part;
+    }
+    const checked = checkBodyValue(definition, part.value);
+    if (!checked.ok) {
+        throw new InvalidBodyError(checked.message
+            ? `Body part "${part.schema}" does not match its schema: ${checked.message}`
+            : `Body part "${part.schema}" does not match its schema`);
+    }
+    let summary;
+    try {
+        summary = definition.summarize(checked.value);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new InvalidBodyError(`summarize for "${part.schema}" failed: ${message}`);
+    }
+    if (typeof summary !== "string") {
+        throw new InvalidBodyError(`summarize for "${part.schema}" must return a string`);
+    }
+    return { ...part, summary };
+}
+/**
+ * Runs a body type's schema on a value. Stored values may have been written by another client
+ * that never ran the schema, so renderers check them again before calling `render`.
+ * Returns the schema's output value when it passes.
+ */
+export function checkBodyValue(definition, value) {
+    const schema = definition.schema;
+    if (!schema)
+        return { ok: true, value: value };
+    if (typeof schema === "function") {
+        let result;
+        try {
+            result = schema(value);
+        }
+        catch (error) {
+            return { ok: false, message: error instanceof Error ? error.message : String(error) };
+        }
+        if (result === true)
+            return { ok: true, value: value };
+        return typeof result === "string" && result ? { ok: false, message: result } : { ok: false };
+    }
+    let result;
+    try {
+        result = schema["~standard"].validate(value);
+    }
+    catch (error) {
+        return { ok: false, message: error instanceof Error ? error.message : String(error) };
+    }
+    if (typeof result?.then === "function") {
+        void Promise.resolve(result).catch(() => { });
+        return { ok: false, message: "async schemas are not supported; use a synchronous one" };
+    }
+    const r = result;
+    if (r.issues)
+        return { ok: false, message: r.issues.map((i) => i.message).join("; ") };
+    return { ok: true, value: r.value };
+}
+//# sourceMappingURL=body-prepare.js.map

package/dist/body-prepare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-prepare.js","sourceRoot":"","sources":["../src/body-prepare.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,cAAc,GAGf,MAAM,WAAW,CAAC;AAGnB,iGAAiG;AACjG,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C,+FAA+F;IAC/F,OAAO,CAAC,IAAoB;QAC1B,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,KAAqB,EAAE,IAAoB;IACrE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,IAAI,IAAI,CAAC,MAAM,4CAA4C,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,gBAAgB,CAAC,cAAc,IAAI,CAAC,MAAM,8BAA8B,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,gBAAgB,CACxB,OAAO,CAAC,OAAO;YACb,CAAC,CAAC,cAAc,IAAI,CAAC,MAAM,gCAAgC,OAAO,CAAC,OAAO,EAAE;YAC5E,CAAC,CAAC,cAAc,IAAI,CAAC,MAAM,6BAA6B,CAC3D,CAAC;IACJ,CAAC;IACD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,IAAI,CAAC,MAAM,aAAa,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,IAAI,CAAC,MAAM,wBAAwB,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,UAAiC,EACjC,KAAc;IAEd,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;IACpD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACxF,CAAC;QACD,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAU,EAAE,CAAC;QAC5D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,OAAQ,MAAoC,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;QACtE,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,CAAC,GAAG,MAAoE,CAAC;IAC/E,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAU,EAAE,CAAC;AAC3C,CAAC"}

package/dist/body-size.d.ts

@@ -0,0 +1,20 @@
+import type { Body } from "./model.js";
+/** Thrown on write when a body is over {@link MAX_BODY_CHARS} or {@link MAX_BODY_PARTS}. */
+export declare class BodyTooLargeError extends Error {
+    readonly length: number;
+    readonly limit: number;
+    readonly unit: "characters" | "parts";
+    constructor(length: number, limit?: number, unit?: "characters" | "parts");
+}
+/**
+ * Number of characters a body counts against {@link MAX_BODY_CHARS}: every string in it, and the
+ * JSON of typed values with numbers counted at their full written-out length.
+ */
+export declare function bodyLength(bodies: readonly Body[]): number;
+/**
+ * Checks a body before it is written: at most {@link MAX_BODY_PARTS} parts and
+ * {@link MAX_BODY_CHARS} characters ({@link BodyTooLargeError}), JSON values, and no characters
+ * the database cannot store (NUL, unpaired surrogates) ({@link InvalidBodyError}).
+ */
+export declare function assertBodySize(bodies: readonly Body[], limit?: number): void;
+//# sourceMappingURL=body-size.d.ts.map

package/dist/body-size.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-size.d.ts","sourceRoot":"","sources":["../src/body-size.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAkB,MAAM,YAAY,CAAC;AAEvD,4FAA4F;AAC5F,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO;gBAF5B,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAuB,EAC9B,IAAI,GAAE,YAAY,GAAG,OAAsB;CAKvD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,KAAK,GAAE,MAAuB,GAAG,IAAI,CAmB5F"}

package/dist/body-size.js

@@ -0,0 +1,137 @@
+/**
+ * The size cap on note bodies, checked before a note is written. A module of its own, so a page
+ * that only shows notes does not load it with the rest of `body.ts`.
+ */
+import { InvalidBodyError, MAX_BODY_CHARS, MAX_BODY_PARTS } from "./body.js";
+/** Thrown on write when a body is over {@link MAX_BODY_CHARS} or {@link MAX_BODY_PARTS}. */
+export class BodyTooLargeError extends Error {
+    length;
+    limit;
+    unit;
+    constructor(length, limit = MAX_BODY_CHARS, unit = "characters") {
+        super(`The note body has ${length} ${unit}; the limit is ${limit}`);
+        this.length = length;
+        this.limit = limit;
+        this.unit = unit;
+        this.name = "BodyTooLargeError";
+    }
+}
+/**
+ * Number of characters a body counts against {@link MAX_BODY_CHARS}: every string in it, and the
+ * JSON of typed values with numbers counted at their full written-out length.
+ */
+export function bodyLength(bodies) {
+    let n = 0;
+    for (const b of bodies) {
+        // Names and MIME types count too, so no field of a part is unbounded.
+        if (b.purpose !== undefined)
+            n += codePoints(b.purpose);
+        if (b.type === "TextualBody") {
+            n += codePoints(b.value);
+            if (b.format !== undefined)
+                n += codePoints(b.format);
+        }
+        else {
+            n += codePoints(b.schema) + codePoints(b.summary) + codePoints(jsonText(b));
+            n += exponentDigits(b.value);
+        }
+    }
+    return n;
+}
+/**
+ * Checks a body before it is written: at most {@link MAX_BODY_PARTS} parts and
+ * {@link MAX_BODY_CHARS} characters ({@link BodyTooLargeError}), JSON values, and no characters
+ * the database cannot store (NUL, unpaired surrogates) ({@link InvalidBodyError}).
+ */
+export function assertBodySize(bodies, limit = MAX_BODY_CHARS) {
+    if (bodies.length > MAX_BODY_PARTS) {
+        throw new BodyTooLargeError(bodies.length, MAX_BODY_PARTS, "parts");
+    }
+    const length = bodyLength(bodies);
+    if (length > limit)
+        throw new BodyTooLargeError(length, limit);
+    for (const b of bodies) {
+        const texts = b.type === "TextualBody"
+            ? [b.value, b.format, b.purpose]
+            : [b.schema, b.summary, b.purpose, ...jsonStrings(b.value)];
+        for (const text of texts) {
+            if (text !== undefined && UNSTORABLE.test(text)) {
+                throw new InvalidBodyError("A note body cannot contain NUL or unpaired surrogate characters");
+            }
+        }
+    }
+}
+/** NUL, and surrogates that are not part of a pair: Postgres `jsonb` rejects both. */
+// eslint-disable-next-line no-control-regex -- NUL is exactly what this looks for.
+const UNSTORABLE = /\u0000|[\ud800-\udbff](?![\udc00-\udfff])|(?<![\ud800-\udbff])[\udc00-\udfff]/;
+/** Every string in a JSON value, object keys included. */
+function jsonStrings(value, out = []) {
+    if (typeof value === "string")
+        out.push(value);
+    else if (Array.isArray(value))
+        for (const v of value)
+            jsonStrings(v, out);
+    else if (typeof value === "object" && value !== null) {
+        for (const [k, v] of Object.entries(value)) {
+            out.push(k);
+            jsonStrings(v, out);
+        }
+    }
+    return out;
+}
+function jsonText(part) {
+    let json;
+    try {
+        json = JSON.stringify(part.value);
+    }
+    catch {
+        json = undefined;
+    }
+    if (json === undefined) {
+        throw new InvalidBodyError(`The value of body part "${part.schema}" must be JSON`);
+    }
+    return json;
+}
+/**
+ * Extra characters the numbers in a JSON value take once the database stores them: Postgres
+ * writes numbers out in full (`1e+300` becomes 301 digits), so a value that is short as JSON
+ * could be long in storage. Counting them keeps a body within the Cloud's byte limit.
+ */
+function exponentDigits(value) {
+    if (typeof value === "number") {
+        const json = JSON.stringify(value);
+        const e = json.indexOf("e");
+        if (e < 0)
+            return 0;
+        const sign = value < 0 ? 1 : 0;
+        const digits = json.slice(sign, e).replace(".", "").length;
+        const exponent = Number(json.slice(e + 1));
+        // `1.5e+21` is written `1500000000000000000000`; `1.5e-7` is written `0.00000015`.
+        const plain = sign + (exponent > 0 ? Math.max(digits, exponent + 1) : 1 - exponent + digits);
+        return plain - json.length;
+    }
+    let n = 0;
+    if (Array.isArray(value))
+        for (const v of value)
+            n += exponentDigits(v);
+    else if (typeof value === "object" && value !== null) {
+        for (const v of Object.values(value))
+            n += exponentDigits(v);
+    }
+    return n;
+}
+function codePoints(s) {
+    let n = 0;
+    for (let i = 0; i < s.length; i++) {
+        const c = s.charCodeAt(i);
+        // A high surrogate followed by a low one is one code point.
+        if (c >= 0xd800 && c <= 0xdbff && i + 1 < s.length) {
+            const d = s.charCodeAt(i + 1);
+            if (d >= 0xdc00 && d <= 0xdfff)
+                i++;
+        }
+        n++;
+    }
+    return n;
+}
+//# sourceMappingURL=body-size.js.map

package/dist/body-size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-size.js","sourceRoot":"","sources":["../src/body-size.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG7E,4FAA4F;AAC5F,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B;IACA;IACA;IAHX,YACW,MAAc,EACd,QAAgB,cAAc,EAC9B,OAA+B,YAAY;QAEpD,KAAK,CAAC,qBAAqB,MAAM,IAAI,IAAI,kBAAkB,KAAK,EAAE,CAAC,CAAC;QAJ3D,WAAM,GAAN,MAAM,CAAQ;QACd,UAAK,GAAL,KAAK,CAAyB;QAC9B,SAAI,GAAJ,IAAI,CAAuC;QAGpD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAuB;IAChD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,sEAAsE;QACtE,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;YAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC7B,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;gBAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAuB,EAAE,QAAgB,cAAc;IACpF,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,KAAK;QAAE,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,aAAa;YACtB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,gBAAgB,CACxB,iEAAiE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,mFAAmF;AACnF,MAAM,UAAU,GAAG,+EAA+E,CAAC;AAEnG,0DAA0D;AAC1D,SAAS,WAAW,CAAC,KAAc,EAAE,MAAgB,EAAE;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;SAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,IAAoB;IACpC,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,IAAI,CAAC,MAAM,gBAAgB,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3C,mFAAmF;QACnF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC;QAC7F,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;SACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,4DAA4D;QAC5D,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM;gBAAE,CAAC,EAAE,CAAC;QACtC,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/body.d.ts

@@ -1,6 +1,7 @@
 /**
- * Note bodies: the size cap, plain-text summaries and the registry of app-defined body types.
- * See "Context types > Markdown, and room to grow" in the design doc.
+ * Note bodies: their limits, plain-text summaries and the registry of app-defined body types. The
+ * checks needed only on write are apart: sizes in `body-size.ts`, typed parts in `body-prepare.ts`. See "Context types > Markdown,
+ * and room to grow" in the design doc.
  */
 import type { Body, ContextualBody } from "./model.js";
 /** The most characters (Unicode code points) a note's body may hold, across all its parts. */
@@ -14,13 +15,6 @@ export declare const MARKDOWN_FORMAT = "text/markdown";
  * `contexthive` is the product's old name, kept reserved so no app can take it over.
  */
 export declare const RESERVED_BODY_NAMESPACES: readonly string[];
-/** Thrown on write when a body is over {@link MAX_BODY_CHARS} or {@link MAX_BODY_PARTS}. */
-export declare class BodyTooLargeError extends Error {
-    readonly length: number;
-    readonly limit: number;
-    readonly unit: "characters" | "parts";
-    constructor(length: number, limit?: number, unit?: "characters" | "parts");
-}
 /** Thrown on write when a typed body part fails its type's schema or lacks a summary. */
 export declare class InvalidBodyError extends Error {
     constructor(message: string);
@@ -66,8 +60,12 @@ export interface BodyTypeLookup {
     get(name: string): BodyTypeDefinition | undefined;
     has(name: string): boolean;
 }
-/** App-defined body types by name. The SDK keeps one per instance (`ctx.registerBodyType`). */
-export declare class BodyTypeRegistry implements BodyTypeLookup {
+/**
+ * App-defined body types by name, without the check a part passes before it is written: what a
+ * page that only shows notes needs. The SDK keeps one per instance (`ctx.registerBodyType`) and
+ * checks parts with `prepareBody` on write; `BodyTypeRegistry` adds that check as `prepare`.
+ */
+export declare class BodyTypes implements BodyTypeLookup {
     private readonly types;
     /**
      * Adds a type. Names are namespaced (`acme/status`); built-in types have no namespace and the
@@ -77,38 +75,7 @@ export declare class BodyTypeRegistry implements BodyTypeLookup {
     register<T>(name: string, definition: BodyTypeDefinition<T>): () => void;
     get(name: string): BodyTypeDefinition | undefined;
     has(name: string): boolean;
-    /**
-     * Checks a typed part before it is written: a registered type's schema must accept the value,
-     * and its summary is recomputed with `summarize`. Unknown types (made by another app or a newer
-     * client) pass through unchanged but must have a valid namespaced name and carry a summary.
-     * The value is stored as given, not as the schema's output, so a part re-saved unchanged still
-     * passes. Returns the part to store.
-     */
-    prepare(part: ContextualBody): ContextualBody;
 }
-/**
- * Runs a body type's schema on a value. Stored values may have been written by another client
- * that never ran the schema, so renderers check them again before calling `render`.
- * Returns the schema's output value when it passes.
- */
-export declare function checkBodyValue<T>(definition: BodyTypeDefinition<T>, value: unknown): {
-    ok: true;
-    value: T;
-} | {
-    ok: false;
-    message?: string;
-};
-/**
- * Number of characters a body counts against {@link MAX_BODY_CHARS}: every string in it, and the
- * JSON of typed values with numbers counted at their full written-out length.
- */
-export declare function bodyLength(bodies: readonly Body[]): number;
-/**
- * Checks a body before it is written: at most {@link MAX_BODY_PARTS} parts and
- * {@link MAX_BODY_CHARS} characters ({@link BodyTooLargeError}), JSON values, and no characters
- * the database cannot store (NUL, unpaired surrogates) ({@link InvalidBodyError}).
- */
-export declare function assertBodySize(bodies: readonly Body[], limit?: number): void;
 /**
  * The plain text a client shows for a part when it cannot render it: a typed part's `summary`, or
  * a textual part's value as written (Markdown source included).

package/dist/body.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvD,8FAA8F;AAC9F,eAAO,MAAM,cAAc,QAAS,CAAC;AAErC,qFAAqF;AACrF,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,4FAA4F;AAC5F,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAA4C,CAAC;AAMnG,4FAA4F;AAC5F,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM;IACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO;gBAF5B,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAuB,EAC9B,IAAI,GAAE,YAAY,GAAG,OAAsB;CAKvD;AAED,yFAAyF;AACzF,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAChC,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAEjE,sEAAsE;AACtE,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,KAEZ;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;SAAE,GAClD;YAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;gBAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,GAChE,OAAO,CAAC,OAAO,CAAC,CAAC;KACtB,CAAC;CACH;AAED,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,yEAAyE;IACzE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,KAAK,gBAAgB,CAAC;IAC9D,iGAAiG;IACjG,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC;CACjC;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOpD;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAClD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED,+FAA+F;AAC/F,qBAAa,gBAAiB,YAAW,cAAc;IACrD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAE/D;;;;OAIG;IACH,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IA2BxE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIjD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI1B;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,cAAc,GAAG,cAAc;CA+B9C;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,EACjC,KAAK,EAAE,OAAO,GACb;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CA0B1D;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM,CAc1D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,EAAE,KAAK,GAAE,MAAuB,GAAG,IAAI,CAmB5F;AAMD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAE9C;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAGlD"}
+{"version":3,"file":"body.d.ts","sourceRoot":"","sources":["../src/body.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEvD,8FAA8F;AAC9F,eAAO,MAAM,cAAc,QAAS,CAAC;AAErC,qFAAqF;AACrF,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,4FAA4F;AAC5F,eAAO,MAAM,eAAe,kBAAkB,CAAC;AAE/C;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAA4C,CAAC;AAMnG,yFAAyF;AACzF,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,MAAM,MAAM,UAAU,CAAC,CAAC,GAAG,OAAO,IAChC,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GAAG,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAEjE,sEAAsE;AACtE,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,OAAO,KAEZ;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;SAAE,GAClD;YAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;gBAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;aAAE,CAAC,CAAA;SAAE,GAChE,OAAO,CAAC,OAAO,CAAC,CAAC;KACtB,CAAC;CACH;AAED,6FAA6F;AAC7F,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,MAAM,CAAC;AAE7C,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,yEAAyE;IACzE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACvB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,KAAK,gBAAgB,CAAC;IAC9D,iGAAiG;IACjG,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC;CACjC;AAED,0FAA0F;AAC1F,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAOpD;AAED,kEAAkE;AAClE,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAAC;IAClD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,qBAAa,SAAU,YAAW,cAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAyC;IAE/D;;;;OAIG;IACH,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IA2BxE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIjD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;CAG3B;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,CAE9C;AAED,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAGlD"}

package/dist/body.js

@@ -11,19 +11,6 @@ export const MARKDOWN_FORMAT = "text/markdown";
 export const RESERVED_BODY_NAMESPACES = ["acornly", "contexthive", "w3c", "oa"];
 const TYPE_NAME = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]*[a-z0-9])?)*\/[a-z0-9][a-z0-9._-]*$/;
 const MAX_TYPE_NAME = 100;
-/** Thrown on write when a body is over {@link MAX_BODY_CHARS} or {@link MAX_BODY_PARTS}. */
-export class BodyTooLargeError extends Error {
-    length;
-    limit;
-    unit;
-    constructor(length, limit = MAX_BODY_CHARS, unit = "characters") {
-        super(`The note body has ${length} ${unit}; the limit is ${limit}`);
-        this.length = length;
-        this.limit = limit;
-        this.unit = unit;
-        this.name = "BodyTooLargeError";
-    }
-}
 /** Thrown on write when a typed body part fails its type's schema or lacks a summary. */
 export class InvalidBodyError extends Error {
     constructor(message) {
@@ -40,8 +27,12 @@ export function isBodyTypeName(name) {
     const namespace = name.slice(0, name.indexOf("/"));
     return !RESERVED_BODY_NAMESPACES.some((r) => namespace === r || namespace.startsWith(`${r}.`));
 }
-/** App-defined body types by name. The SDK keeps one per instance (`ctx.registerBodyType`). */
-export class BodyTypeRegistry {
+/**
+ * App-defined body types by name, without the check a part passes before it is written: what a
+ * page that only shows notes needs. The SDK keeps one per instance (`ctx.registerBodyType`) and
+ * checks parts with `prepareBody` on write; `BodyTypeRegistry` adds that check as `prepare`.
+ */
+export class BodyTypes {
     types = new Map();
     /**
      * Adds a type. Names are namespaced (`acme/status`); built-in types have no namespace and the
@@ -80,129 +71,7 @@ export class BodyTypeRegistry {
     has(name) {
         return this.types.has(name);
     }
-    /**
-     * Checks a typed part before it is written: a registered type's schema must accept the value,
-     * and its summary is recomputed with `summarize`. Unknown types (made by another app or a newer
-     * client) pass through unchanged but must have a valid namespaced name and carry a summary.
-     * The value is stored as given, not as the schema's output, so a part re-saved unchanged still
-     * passes. Returns the part to store.
-     */
-    prepare(part) {
-        if (!isBodyTypeName(part.schema)) {
-            throw new InvalidBodyError(`"${part.schema}" is not a valid namespaced body type name`);
-        }
-        const definition = this.types.get(part.schema);
-        if (!definition) {
-            if (typeof part.summary !== "string") {
-                throw new InvalidBodyError(`Body part "${part.schema}" needs a plain-text summary`);
-            }
-            return part;
-        }
-        const checked = checkBodyValue(definition, part.value);
-        if (!checked.ok) {
-            throw new InvalidBodyError(checked.message
-                ? `Body part "${part.schema}" does not match its schema: ${checked.message}`
-                : `Body part "${part.schema}" does not match its schema`);
-        }
-        let summary;
-        try {
-            summary = definition.summarize(checked.value);
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            throw new InvalidBodyError(`summarize for "${part.schema}" failed: ${message}`);
-        }
-        if (typeof summary !== "string") {
-            throw new InvalidBodyError(`summarize for "${part.schema}" must return a string`);
-        }
-        return { ...part, summary };
-    }
 }
-/**
- * Runs a body type's schema on a value. Stored values may have been written by another client
- * that never ran the schema, so renderers check them again before calling `render`.
- * Returns the schema's output value when it passes.
- */
-export function checkBodyValue(definition, value) {
-    const schema = definition.schema;
-    if (!schema)
-        return { ok: true, value: value };
-    if (typeof schema === "function") {
-        let result;
-        try {
-            result = schema(value);
-        }
-        catch (error) {
-            return { ok: false, message: error instanceof Error ? error.message : String(error) };
-        }
-        if (result === true)
-            return { ok: true, value: value };
-        return typeof result === "string" && result ? { ok: false, message: result } : { ok: false };
-    }
-    let result;
-    try {
-        result = schema["~standard"].validate(value);
-    }
-    catch (error) {
-        return { ok: false, message: error instanceof Error ? error.message : String(error) };
-    }
-    if (typeof result?.then === "function") {
-        void Promise.resolve(result).catch(() => { });
-        return { ok: false, message: "async schemas are not supported; use a synchronous one" };
-    }
-    const r = result;
-    if (r.issues)
-        return { ok: false, message: r.issues.map((i) => i.message).join("; ") };
-    return { ok: true, value: r.value };
-}
-/**
- * Number of characters a body counts against {@link MAX_BODY_CHARS}: every string in it, and the
- * JSON of typed values with numbers counted at their full written-out length.
- */
-export function bodyLength(bodies) {
-    let n = 0;
-    for (const b of bodies) {
-        // Names and MIME types count too, so no field of a part is unbounded.
-        if (b.purpose !== undefined)
-            n += codePoints(b.purpose);
-        if (b.type === "TextualBody") {
-            n += codePoints(b.value);
-            if (b.format !== undefined)
-                n += codePoints(b.format);
-        }
-        else {
-            n += codePoints(b.schema) + codePoints(b.summary) + codePoints(jsonText(b));
-            n += exponentDigits(b.value);
-        }
-    }
-    return n;
-}
-/**
- * Checks a body before it is written: at most {@link MAX_BODY_PARTS} parts and
- * {@link MAX_BODY_CHARS} characters ({@link BodyTooLargeError}), JSON values, and no characters
- * the database cannot store (NUL, unpaired surrogates) ({@link InvalidBodyError}).
- */
-export function assertBodySize(bodies, limit = MAX_BODY_CHARS) {
-    if (bodies.length > MAX_BODY_PARTS) {
-        throw new BodyTooLargeError(bodies.length, MAX_BODY_PARTS, "parts");
-    }
-    const length = bodyLength(bodies);
-    if (length > limit)
-        throw new BodyTooLargeError(length, limit);
-    for (const b of bodies) {
-        const texts = b.type === "TextualBody"
-            ? [b.value, b.format, b.purpose]
-            : [b.schema, b.summary, b.purpose, ...jsonStrings(b.value)];
-        for (const text of texts) {
-            if (text !== undefined && UNSTORABLE.test(text)) {
-                throw new InvalidBodyError("A note body cannot contain NUL or unpaired surrogate characters");
-            }
-        }
-    }
-}
-/** NUL, and surrogates that are not part of a pair: Postgres `jsonb` rejects both. */
-// eslint-disable-next-line no-control-regex -- NUL is exactly what this looks for.
-const UNSTORABLE = /\u0000|[\ud800-\udbff](?![\udc00-\udfff])|(?<![\ud800-\udbff])[\udc00-\udfff]/;
 /**
  * The plain text a client shows for a part when it cannot render it: a typed part's `summary`, or
  * a textual part's value as written (Markdown source included).
@@ -216,79 +85,9 @@ export function isMarkdownBody(part) {
         return false;
     return part.format === undefined || mimeEssence(part.format) === MARKDOWN_FORMAT;
 }
-/** Every string in a JSON value, object keys included. */
-function jsonStrings(value, out = []) {
-    if (typeof value === "string")
-        out.push(value);
-    else if (Array.isArray(value))
-        for (const v of value)
-            jsonStrings(v, out);
-    else if (typeof value === "object" && value !== null) {
-        for (const [k, v] of Object.entries(value)) {
-            out.push(k);
-            jsonStrings(v, out);
-        }
-    }
-    return out;
-}
-function jsonText(part) {
-    let json;
-    try {
-        json = JSON.stringify(part.value);
-    }
-    catch {
-        json = undefined;
-    }
-    if (json === undefined) {
-        throw new InvalidBodyError(`The value of body part "${part.schema}" must be JSON`);
-    }
-    return json;
-}
-/**
- * Extra characters the numbers in a JSON value take once the database stores them: Postgres
- * writes numbers out in full (`1e+300` becomes 301 digits), so a value that is short as JSON
- * could be long in storage. Counting them keeps a body within the Cloud's byte limit.
- */
-function exponentDigits(value) {
-    if (typeof value === "number") {
-        const json = JSON.stringify(value);
-        const e = json.indexOf("e");
-        if (e < 0)
-            return 0;
-        const sign = value < 0 ? 1 : 0;
-        const digits = json.slice(sign, e).replace(".", "").length;
-        const exponent = Number(json.slice(e + 1));
-        // `1.5e+21` is written `1500000000000000000000`; `1.5e-7` is written `0.00000015`.
-        const plain = sign + (exponent > 0 ? Math.max(digits, exponent + 1) : 1 - exponent + digits);
-        return plain - json.length;
-    }
-    let n = 0;
-    if (Array.isArray(value))
-        for (const v of value)
-            n += exponentDigits(v);
-    else if (typeof value === "object" && value !== null) {
-        for (const v of Object.values(value))
-            n += exponentDigits(v);
-    }
-    return n;
-}
 function mimeEssence(format) {
     return format.split(";")[0].trim().toLowerCase();
 }
-function codePoints(s) {
-    let n = 0;
-    for (let i = 0; i < s.length; i++) {
-        const c = s.charCodeAt(i);
-        // A high surrogate followed by a low one is one code point.
-        if (c >= 0xd800 && c <= 0xdbff && i + 1 < s.length) {
-            const d = s.charCodeAt(i + 1);
-            if (d >= 0xdc00 && d <= 0xdfff)
-                i++;
-        }
-        n++;
-    }
-    return n;
-}
 function isSchema(schema) {
     if (typeof schema === "function")
         return true;