@agentshouse/mdmodel 0.1.0-c896b3d9398b1 → 0.1.0-cabd61587647f

package/API.md

@@ -26,30 +26,30 @@ if (checked.verdict === 'accept') {
 }
 const parsed = parse(content);
 if (parsed.ok) {
-  for (const link of links(parsed.document, 'tasks/two.md')) {
-    if (link.target !== 'data/export.csv') continue;
-    const moved = apply(parsed.document, {
-      kind: 'link',
-      href: link.href,
-      to: '../files/export.csv',
-    });
-    if (moved.outcome === 'applied') serialize(moved.document);
-  }
+  const moved = apply(
+    parsed.document,
+    links(parsed.document, 'tasks/two.md')
+      .filter((link) => link.target === 'data/export.csv')
+      .map((link) => ({ kind: 'link' as const, href: link.href, to: '../files/export.csv' })),
+  );
+  if (moved.outcome === 'applied') serialize(moved.document);
 }
 ```
 
 `MARKDOWN_SYNTAX_PROFILE` is the Markdown every reader here applies, GitHub Flavored Markdown
 0.29, and `VERSION` is the MD model version.
 
-`verify(schema)` reads one schema text, the MD Types of one Room or App: one
-JSON Schema document (draft 2020-12) in the YAML subset. Every top-level key but
-`$defs` names an MD Type holding the JSON Schema of its frontmatter; `$defs`
-holds shapes the types reuse, reached by a `$ref` under `#/$defs/` alone. `type`
-and the built-in `any` are never declared. The model adds three keywords:
-`reference` on a string names one MD Type, several, `any` or `attachment`;
-`sections` declares a type's H2 sections, each `{ kind: text }` or `{ kind:
-list, items }` over one string, number, integer or boolean, optionally
-`required: true`; `member_document: true` marks at most one type.
+`verify(schema)` reads one schema text, the MD Types of one Room or App: one JSON Schema document
+(draft 2020-12) in the YAML subset. Every top-level key but `$defs` names an MD Type holding the
+JSON Schema of its frontmatter; `$defs` holds shapes the types reuse, reached by a `$ref` under
+`#/$defs/` alone. `type` and the built-in `any` are never declared. The model adds its keywords:
+`reference` on a string names one MD Type, several, `any` or `attachment`; `sections` declares a
+type's H2 sections, each `{ kind: text }` or `{ kind: list, items }` over one string, number,
+integer or boolean, optionally `required: true`; `member_document: true` marks at most one type. A
+type alone takes `create_roles` and `delete_roles`, each a list of role names. On a field of a
+type's own `properties` alone, `change_roles` and `initial_roles` each list role names, and
+`transitions` lists `{ from, to, roles? }`, each end a scalar or `null`, on a field whose `type`,
+`enum`, `const`, `$ref`, `allOf`, `anyOf`, `oneOf`, `if` and `not` admit no list or object.
 
 ```yaml
 $defs:
@@ -64,64 +64,68 @@ plan:
 contact: { member_document: true }
 ```
 
-The model's `types` expose each MD Type's `name`, `memberDocument`, `sections`,
-`shape` (the type as written with every `$defs` shape it reaches), the facts of
-its `frontmatter` and `fields`, its top-level ones: JSON `type`, `format`,
-`values`, `reference` targets, `items`, `properties`, an open map's `patterns`
-and `additional`, and `prose`, a string with no `enum`, `const`, `format`,
-`pattern` or `reference`. Facts join `$ref` and `allOf` to their siblings and
-the variants of `anyOf`, `oneOf`, `then`, `else` and `dependentSchemas`, a
-variant's own keys `conditional`; a path without one `type`, `null` aside, has
-none. A malformed schema is refused whole, naming its `rule`, the keyword or the
-model's own, and the JSON Pointer `location` it concerns, such as
-`/plan/properties/status/enum`, or `line <n>` outside the YAML subset.
-`pointerFacts(definition, pointer)` reads the facts a frontmatter pointer reaches,
-`itemFacts` and `memberFacts` take one step and `crossedFacts` reads a list's item
-facts; `pointerSegments` and `escapePointer` split and write a pointer, `ARRAY_INDEX`
-matches an index segment, and `ATTACHMENT` is the `reference` that admits any path.
-
-`validate(library, context?, model?)` takes the resulting text Library and one
-`ValidationContext` of `binaryTargets: readonly string[]`, none when omitted.
-Library keys and binary targets share one canonical collection-relative path
-namespace; a path declared text and binary is refused. House declares every
-binary file of the Room as a binary target, and the model reads no bytes. Ordinary links and images
-in typed Documents may resolve to either membership, relative to the source
-Document, and one to a path neither holds is not refused: it dangles, as a
-deleted file's links do. A destination that is an absolute path or leaves the
-collection is `unresolved-link`. A binary target supplies no Document or MD Type. `model` is the
-verified schema that types the Library, and every Library member is content,
-whatever its Path. Without `model` the Library declares no type.
-
-A typed Document's frontmatter satisfies its type's schema, every keyword with
-its JSON Schema meaning, formats asserted and defaults never filled, except that
-an object schema declaring neither `additionalProperties` nor
-`unevaluatedProperties` is closed: an undeclared key is refused as `undeclared-
-field`. `type`, `SITE_FIELD` and `RECEIVED_FIELD` count as declared on every
-type, and the string `MEMBER_FIELD` on the `member_document` type. A refusal
-names the keyword, such as `required`, and the value's JSON Pointer, such as
-`/shipping/city`. Every occurrence of a declared list section is a list of
-values of its item schema, else `structured-section`; a reference item is one
-ordinary link alone, such as `- [Ada](ada.md)`. A reference, at any depth or a
-section item, reaching a URL, a binary target, or a Document of a type it does
-not name is `unresolved-reference`, and a frontmatter one reaching no member is
-`referenced-missing-file` naming its `referrers`; `attachment` admits any path,
-and no body link is a referrer.
-
-Validation returns acceptance or one refusal naming the file, the field or
-section, and the violated rule. `parse`, `apply`, and `serialize` operate on a single text
-Document; they do not validate collection membership or consume binary bytes.
-`apply` sets one typed field, including a list field as a whole, replaces
-one existing section body or the preamble against that value's prior content,
-or rewrites one Markdown link destination. A section need not be declared by
-the Document's MD Type to be replaced. A field change does not reformat the rest of the file.
-
-`Document.preamble` is a readonly string containing the exact source after
-frontmatter and before the first section heading recognized by the existing
-section parser. Without a section it is the entire post-frontmatter body;
-without frontmatter it starts at the beginning of the Document. An empty span
-is `''`. It includes whitespace, newlines, a leading H1, and any fenced text
-before the first section. The closing frontmatter delimiter and its line ending
-belong to frontmatter. Section recognition and the syntax profile are unchanged.
+The model's `types` expose each MD Type's `name`, `memberDocument`, `sections`, `shape` (the type as
+written, its rule keywords left out, with every `$defs` shape it reaches), `createRoles` and
+`deleteRoles` when written, its `rules` by field as `changeRoles`, `initialRoles` and `transitions`,
+the facts of its `frontmatter` and `fields`, its top-level ones: JSON `type`, `format`, `values`,
+`reference` targets, `items`, `properties`, an open map's `patterns` and `additional`, and `prose`,
+a string with no `enum`, `const`, `format`, `pattern` or `reference`. Facts join `$ref` and `allOf`
+to their siblings and the variants of `anyOf`, `oneOf`, `then`, `else` and `dependentSchemas`, a
+variant's own keys `conditional`; a path without one `type`, `null` aside, has none. A malformed
+schema is refused whole, naming its `rule`, the keyword or the model's own, and the JSON Pointer
+`location` it concerns, such as `/plan/properties/status/enum`, or `line <n>` outside the YAML
+subset. `pointerFacts(definition, pointer)` reads the facts a frontmatter pointer reaches,
+`itemFacts` and `memberFacts` take one step and `crossedFacts` reads a list's item facts;
+`pointerSegments` and `escapePointer` split and write a pointer, `ARRAY_INDEX` matches an index
+segment, and `ATTACHMENT` is the `reference` that admits any path.
+
+`validate(library, context?, model?)` takes the resulting text Library and one `ValidationContext`
+of `binaryTargets: readonly string[]`, none when omitted. Library keys and binary targets share one
+canonical collection-relative path namespace; a path declared text and binary is refused. House
+declares every binary file of the Room as a binary target, and the model reads no bytes. Ordinary
+links and images in typed Documents may resolve to either membership, relative to the source
+Document, and one to a path neither holds is not refused: it dangles, as a deleted file's links do.
+A destination that is an absolute path or leaves the collection is `unresolved-link`. A binary
+target supplies no Document or MD Type. `model` is the verified schema that types the Library, and
+every Library member is content, whatever its Path. Without `model` the Library declares no type.
+
+A typed Document's frontmatter satisfies its type's schema, every keyword with its JSON Schema
+meaning, formats asserted and defaults never filled, except that an object schema declaring neither
+`additionalProperties` nor `unevaluatedProperties` is closed: an undeclared key is refused as
+`undeclared- field`. `TYPE_FIELD`, `SITE_FIELD` and `RECEIVED_FIELD` count as declared on every
+type, and the string `MEMBER_FIELD` on the `member_document` type; `HOUSE_FIELDS` lists the four. A
+refusal names the keyword, such as `required`, and the value's JSON Pointer, such as
+`/shipping/city`. Every occurrence of a declared list section is a list of values of its item
+schema, else `structured-section`; a reference item is one ordinary link alone, such as
+`- [Ada](ada.md)`. A reference, at any depth or a section item, reaching a URL, a binary target, or a
+Document of a type it does not name is `unresolved-reference`, and a frontmatter one reaching no
+member is `referenced-missing-file` naming its `referrers`; `attachment` admits any path, and no
+body link is a referrer. `validating` yields each path `validate` reads, then returns its verdict.
+
+Validation returns acceptance or one refusal naming the file, the field or section, and the violated
+rule. `parse`, `apply`, and `serialize` operate on a single text Document; they do not validate
+collection membership or consume binary bytes. `apply(document, changes)` applies a list of changes
+in one pass however many: each sets one typed field, a list or an object as a whole included,
+replaces one existing section body or the preamble against its prior content, or rewrites one link
+destination or one reference, as the given Document holds it. All apply or none: one refused refuses
+all, and `{ outcome: 'stale', document, stale }` keeps the Document and lists the positions of each
+change it does not hold and of each later change of a part an earlier one changes, such as a link
+inside a replaced section. A section need not be declared by the Document's MD Type to be replaced.
+A section or preamble replacement that would hide a section the Document carried behind a repeated,
+merged or fenced heading is refused as `overlapping-section` naming that section. A field change
+does not reformat the rest of the file: an inline value is replaced where it stands, and a value
+written after the key's line, an empty one or a block mapping or list, is written after the key's
+colon in its place. A field holds a `FrontmatterValue`: null, a string, a boolean, a finite number,
+a list without holes or a plain object of them, holding no cycle. `frontmatterValue(value)` is that
+test, and `apply` refuses any other value as `frontmatter-fence`; `equalValue(left, right)` compares
+two by value, whatever their key order, as `apply` compares a field with its prior.
+
+`Document.preamble` is a readonly string holding the exact source after frontmatter and before the
+first section heading the section parser recognizes, `''` when empty, whitespace, newlines, a
+leading H1 and any fenced text before the first section included. The closing frontmatter
+delimiter and its line ending belong to frontmatter: `bodyAfterFrontmatter(content)` is the exact
+source after them, the whole text when it opens no closed fence, and the preamble begins it.
+`headingLines(content, from, to)` reads each ATX heading outside a fence, by `level` and `name`.
 
 ```ts
 const parsed = parse(content);
@@ -131,48 +135,55 @@ if (parsed.ok) {
     prior: parsed.document.preamble,
     value: 'Updated introduction.\n\n',
   };
-  const result = apply(parsed.document, change);
+  const result = apply(parsed.document, [change]);
   if (result.outcome === 'applied') serialize(result.document);
 }
 ```
 
-`apply(document, { kind: 'preamble', prior, value })` compares `prior` to the
-current preamble exactly. A mismatch returns `{ outcome: 'stale', document }`
-with the unchanged current Document. A match replaces only that source span,
-then parses a new immutable Document; the original is unchanged. Frontmatter
-and section source outside the span retain their exact bytes, including newline
-and heading syntax. As with section replacement, `value` is literal source:
-no newline or separator is inserted, and the resulting source is parsed again.
-An invalid frontmatter result receives the existing parse refusal. Independent
-field, section, and preamble edits keep their own prior values valid.
-
-For a moved link, use `links` and the `link` change below to obtain the rewritten Document, then
-compare its public `preamble` and `sections` to the original. Submit the changed values with their
-original priors. Consumers need no source span calculation or private Model import. Collection
-validation remains a separate call against the resulting Library.
+A `{ kind: 'preamble', prior, value }` change compares `prior` to the current preamble exactly. A
+mismatch is stale and leaves the current Document unchanged. A match replaces only that source span,
+then parses a new immutable Document; the original is unchanged. Frontmatter and section source
+outside the span retain their exact bytes, including newline and heading syntax. As with section
+replacement, `value` is literal source: no newline or separator is inserted, and the resulting
+source is parsed again. An invalid frontmatter result receives the existing parse refusal.
+Independent field, section, and preamble edits keep their own prior values valid.
+
+For moved links, use `links` and one `link` change per destination below, then compare the rewritten
+Document's `preamble` and `sections` to the original and submit the changed values with their
+original priors, with no source span or private Model import. Collection validation remains a
+separate call against the resulting Library.
 
 `links(document, file)` is the inventory of that Document's ordinary link and image destinations
 that resolve to a collection Path, each with the destination `href` exactly as written and the
 `target` Path it resolves to relative to `file`. A `?query` or `#fragment` the destination carries
 is part of `href` and not part of `target`. Entries are ordered by the position of the destination
 text a rewrite would change, and one destination written the same way appears once however many
-times it occurs. A destination that the syntax profile does not read as a link, one that is empty,
-a bare fragment, or carries a URL scheme, and one that leaves the collection are not in the
-inventory. Frontmatter field values, including typed references, are not link destinations and
-are never enumerated.
-
-`target(file, href)` is the collection Path one written destination resolves to relative to
-`file`, by the rule `links` and `validate` read: surrounding spaces and the `?query` or `#fragment`
-it carries are not part of that Path. A destination that is empty, a bare fragment, carries a URL
-scheme, starts at `/`, or leaves the collection resolves to `null`. It reads a destination written
-anywhere, such as a typed reference field value, which `links` never enumerates.
-`retarget(href, to)` is that destination rewritten to `to`, keeping the `?query` or `#fragment` it
-carried, which is the destination the `link` change below writes.
+times it occurs. A destination that the syntax profile does not read as a link, one that is empty, a
+bare fragment, or carries a URL scheme, and one that leaves the collection are not in the inventory.
+Frontmatter values are never link destinations. `linkOccurrences(document, file)` places each
+occurrence by its `start` in `content`, and `fieldStart(document, pointer)` a frontmatter value.
+
+`target(file, href)` is the collection Path one written destination resolves to relative to `file`,
+by the rule `links` and `validate` read: surrounding spaces and the `?query` or `#fragment` it
+carries are not part of that Path. It reads backslash escapes and character references, strips as a
+URL does, then percent-encodings, so `plan\.md`, `pl&#97;n.md` and `pl%61n.md` all name `plan.md`;
+an escaped or referenced `?` or `#` starts the suffix. A destination that is empty, a bare fragment,
+carries a URL scheme, starts at `/` once read, encodes no UTF-8 text, or leaves the collection
+resolves to `null`. It reads a destination written anywhere, such as a typed reference field value,
+which `links` never enumerates. `retarget(href, to)` is that destination rewritten to `to`, keeping
+the `?query` or `#fragment` it carried, which is the destination the `link` change below writes. It
+percent-encodes in `to` what `target` would decode, so it resolves to `to` again.
+
+`checkDocument(file, content, model)` reads one Document alone by the same rules: `ok: false` where
+`validate` refuses it, else its `type`, whether it is `typed`, and each reference's `target` and
+`to`, which `resolves(reference, typeOf, binary)` says reaches a member `validate` accepts.
+`sectionReferences(file, content, definition)` reads only the references of its `list` sections.
+`parseFrontmatter(content, file?)` is `parse` without the body: `content`, `type` and `fields`.
 
 `references(document, definition)` lists each frontmatter `reference` string at any depth as
-`pointer`, `value` and `to`; `apply(document, { kind: 'reference', pointer, value, prior })`
-rewrites one in place, keeping its quotes, or is `stale`. `relativize(document, file, handle,
-definition?)` rewrites each link destination and reference written `/rooms/<handle>/<path>` to
+`pointer`, `value` and `to`; a `{ kind: 'reference', pointer, value, prior }` change rewrites one
+in place, keeping its quotes, or is stale. `relativize(document, file, handle, definition?)`
+rewrites, in one `apply`, each link destination and reference written `/rooms/<handle>/<path>` to
 `relative(file, path)`, keeping its `?query` or `#fragment`. A text without frontmatter, such as
 a captured body, is read from its first character: `relativizeBody(body, file, handle)` converts
 it so, refusing a destination left under `/rooms/` as `unresolved-link`; `bodyLinks(body, file)`
@@ -184,28 +195,26 @@ target('items/six.md', ' ../projects/atlas.md#overview '); // 'projects/atlas.md
 retarget(' ../projects/atlas.md#overview ', '../archive/atlas.md'); // '../archive/atlas.md#overview'
 ```
 
-`apply(document, { kind: 'link', href, to })` rewrites every body occurrence of that written
-destination and changes nothing else, so a caller that moves a Path rewrites its referring
-Documents without a second Markdown parser. `to` is the Path the destination must resolve to
+A `{ kind: 'link', href, to }` change rewrites every body occurrence of that written destination
+and changes nothing else, so a caller that moves Paths rewrites each referring Document in one
+`apply` without a second Markdown parser. `to` is the Path the destination must resolve to
 instead; the `?query` or `#fragment` the written destination carried is not part of that Path and
-is kept. A Document that does not carry the destination is `stale`. A reference definition is
+is kept. A Document that does not carry the destination is stale. A reference definition is
 rewritten once however many uses name it. The destination is written in the form the syntax
 profile reads back: bare when it carries no whitespace, does not open with `<`, and balances its
 parentheses, otherwise inside angle brackets, which the original form is kept in when it still
 fits. A destination that neither form can carry is refused as `unwritable-link`.
 
-`project(document, file, context?)` is the Embedding projection input of one
-Document: the prose a consumer embeds, with every internal Markdown-document
-link reduced to the label a reader sees. A Document that declares no MD type
-contributes its body after the frontmatter fence. A typed one contributes its
-prose values, its preamble, and every H2 section its MD type does not declare as
-structure, each with its own heading line and every occurrence of a repeated
-name, in Document order: a declared text section, a list section of prose items
-and an undeclared section are in; a list section of any other item schema is
-not. A prose value is a frontmatter string at any depth whose schema is prose,
-projected bare and followed by a blank line, in the order the Document writes
-them, exactly as written. The Path and every other value stay outside, so
-changing them alone leaves the projection unchanged.
+`project(document, file, context?)` is the Embedding projection input of one Document: the prose a
+consumer embeds, with every internal Markdown-document link reduced to the label a reader sees. A
+Document that declares no MD type contributes its body after the frontmatter fence. A typed one
+contributes its prose values, its preamble, and every H2 section its MD type does not declare as
+structure, each with its own heading line and every occurrence of a repeated name, in Document
+order: a declared text section, a list section of prose items and an undeclared section are in; a
+list section of any other item schema is not. A prose value is a frontmatter string at any depth
+whose schema is prose, projected bare and followed by a blank line, in the order the Document writes
+them, exactly as written. The Path and every other value stay outside, so changing them alone leaves
+the projection unchanged.
 
 ```ts
 const parsed = parse(content);
@@ -218,16 +227,14 @@ if (parsed.ok) {
 }
 ```
 
-`ProjectionContext` carries `documentTargets`, the collection-relative Paths the
-caller holds as Markdown documents, and `definition`, the verified MD Type the
-Document's `type` names, taken from the model `verify` returned. A Document that
-declares a type the caller supplies no definition for is refused as
-`unknown-type`. `documentTargets` is what makes a destination internal: a
-destination resolving to a supplied Path is internal, and every other
-destination stays authored text, a binary target and a Path nobody
-supplied alike. The caller supplies that membership, as it does for `validate`;
-the model reads no bytes, resolves no authority, and classifies nothing it was
-not given.
+`ProjectionContext` carries `documentTargets`, the collection-relative Paths the caller holds as
+Markdown documents, and `definition`, the verified MD Type the Document's `type` names, taken from
+the model `verify` returned. A Document that declares a type the caller supplies no definition for
+is refused as `unknown-type`. `documentTargets` is what makes a destination internal: a destination
+resolving to a supplied Path is internal, and every other destination stays authored text, a binary
+target and a Path nobody supplied alike. The caller supplies that membership, as it does for
+`validate`; the model reads no bytes, resolves no authority, and classifies nothing it was not
+given.
 
 An internal link contributes its visible label and no destination, fragment, or
 title, in the inline `[label](path)`, full `[label][id]`, collapsed
@@ -242,11 +249,10 @@ and `validate` read. `project` returns text and never rewrites the Document.
 A `link` change leaves the projection of every Document it rewrites
 byte-identical, while a changed visible label changes it.
 
-`divide(document, file, context)` divides that same Embedding projection input
-into ordered Spans under the budget the caller supplies. Each Span carries the
-`text` to embed and the `start` and `end` of the extent it addresses in the
-Document's own source, as UTF-8 byte offsets into that source and never string
-positions, so a caller stores the extent and hydrates the text it shows from
+`divide(document, file, context)` divides that same Embedding projection input into ordered Spans
+under the budget the caller supplies. Each Span carries the `text` to embed and the `start` and
+`end` of the extent it addresses in the Document's own source, as UTF-8 byte offsets into that
+source and never string positions, so a caller stores the extent and hydrates the text it shows from
 the Document itself.
 
 ```ts
@@ -275,23 +281,19 @@ caller's number alone: the model holds no tokenizer, counts nothing else, and
 refuses no input for being too long. A Document the caller supplies no
 definition for carries the same `unknown-type` refusal `project` returns.
 
-The division descends one level at a time, and only into the piece that does not
-fit: the whole input, a heading node, adjacent sibling nodes packed under one
-parent, adjacent blocks inside a node, sentences inside a block, and a bound cut
-inside a single sentence. A Span covers whole heading nodes or one contiguous
-piece inside a single node, never a partial node beside another. A Span that
-continues a node repeats that node's own heading line, projected like any other
-text and so carrying an internal link's label rather than its destination, and
-never an ancestor's heading, so renaming a heading costs what editing that
-heading's own body costs. A heading the budget cannot hold beside any text is
-not repeated, a continuation piece that begins with an astral character the
-room beside its heading cannot hold is carried without the heading, and a
-heading with no body of its own leads its first child node rather than standing
-as a Span of nothing but itself. Overlap exists at the
-sentence level alone, where each Span after the first repeats its predecessor's
-last sentence whenever the budget holds both; when it cannot hold both, the
-Span carries its own sentence alone. An untyped input arrives without a
-definition and descends the same ladder.
+The division descends one level at a time, and only into the piece that does not fit: the whole
+input, a heading node, adjacent sibling nodes packed under one parent, adjacent blocks inside a
+node, sentences inside a block, and a bound cut inside a single sentence. A Span covers whole
+heading nodes or one contiguous piece inside a single node, never a partial node beside another. A
+Span that continues a node repeats that node's own heading line, projected like any other text and
+so carrying an internal link's label rather than its destination, and never an ancestor's heading,
+so renaming a heading costs what editing that heading's own body costs. A heading the budget cannot
+hold beside any text is not repeated, a continuation piece that begins with an astral character the
+room beside its heading cannot hold is carried without the heading, and a heading with no body of
+its own leads its first child node rather than standing as a Span of nothing but itself. Overlap
+exists at the sentence level alone, where each Span after the first repeats its predecessor's last
+sentence whenever the budget holds both; when it cannot hold both, the Span carries its own sentence
+alone. An untyped input arrives without a definition and descends the same ladder.
 
 Division is total: every authored character of the input belongs to at least one
 Span, and an input carrying no authored text divides into no Span at all. A
@@ -348,8 +350,10 @@ names it. A field absent on both sides never fires; `from: 'new'` admits only a
 `to: 'deleted'` only a deletion, and listed values need that side to hold `field` `in` them.
 
 `itemFires(condition, item, owner)` compares `source` and `address` where given and holds `match`
-over `/delivery`, `/source`, `/provider`, `/container`, `/author`, `/has_attachment`,
+over `/delivery`, `/source`, `/container`, `/author`, `/has_attachment`,
 `/headers/<name>` and `/json/<pointer>`, unknown for an item with no JSON. `prosePaths(facts)` lists
 the prose and section paths whose text builds `changed`; `pointed(value, pointer)` reads a JSON
 Pointer, `undefined` where nothing is; `dated(value)` checks a `YYYY-MM-DD` date, and
 `instant(value)` reads an RFC 3339 time with its offset as epoch nanoseconds, a `bigint`.
+`datePointers(fields)` lists, sorted, the `/fields/<name>` pointers of a type's date fields, the
+only values a `DateCondition`'s `date` takes.

package/README.md

@@ -26,30 +26,27 @@ if (checked.verdict === 'accept') {
 
 const parsed = parse('---\ntype: note\ntitle: Hello\n---\n');
 if (parsed.ok) {
-  const next = apply(parsed.document, {
-    kind: 'field',
-    name: 'title',
-    value: 'World',
-    prior: 'Hello',
-  });
+  const next = apply(parsed.document, [
+    { kind: 'field', name: 'title', value: 'World', prior: 'Hello' },
+  ]);
   if (next.outcome === 'applied') serialize(next.document);
 }
 ```
 
 ## API
 
-| Export                                         | Purpose                                                           |
-| ---------------------------------------------- | ----------------------------------------------------------------- |
-| `verify`                                       | Verify one schema text into a model of MD Types                   |
-| `validate`                                     | Validate a text Library; returns acceptance or one refusal        |
-| `parse`, `serialize`                           | Read and write one Document                                       |
-| `apply`                                        | Apply one field, section, preamble, or link change                |
-| `links`, `target`, `retarget`                  | Inventory and rewrite link destinations                           |
-| `escapePointer`                                | Write one key as a JSON Pointer token                             |
-| `project`, `divide`                            | Embedding projection input and its division into Spans            |
-| `facts`, `factKind`, `holds`, `fires`          | A condition over a Document and over one of its changes           |
-| `MARKDOWN_SYNTAX_PROFILE`, `VERSION`           | The pinned Markdown profile (GFM 0.29) and MD model version       |
-| `MEMBER_FIELD`, `SITE_FIELD`, `RECEIVED_FIELD` | The field names validation counts as declared beyond a type's own |
+| Export                                         | Purpose                                                            |
+| ---------------------------------------------- | ------------------------------------------------------------------ |
+| `verify`                                       | Verify one schema text into a model of MD Types                    |
+| `validate`                                     | Validate a text Library; returns acceptance or one refusal         |
+| `parse`, `serialize`                           | Read and write one Document                                        |
+| `apply`                                        | Apply field, section, preamble, link and reference changes at once |
+| `links`, `target`, `retarget`                  | Inventory and rewrite link destinations                            |
+| `escapePointer`                                | Write one key as a JSON Pointer token                              |
+| `project`, `divide`                            | Embedding projection input and its division into Spans             |
+| `facts`, `factKind`, `holds`, `fires`          | A condition over a Document and over one of its changes            |
+| `MARKDOWN_SYNTAX_PROFILE`, `VERSION`           | The pinned Markdown profile (GFM 0.29) and MD model version        |
+| `MEMBER_FIELD`, `SITE_FIELD`, `RECEIVED_FIELD` | The field names validation counts as declared beyond a type's own  |
 
 The full reference is in [`API.md`](API.md). The conformance corpus and its
 verdict format and rule ids are described in [`fixtures/README.md`](fixtures/README.md).

package/dist/blocks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blocks.d.ts","sourceRoot":"","sources":["../src/blocks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAmCF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,EAAE,CAiBrF;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAe/E"}
+{"version":3,"file":"blocks.d.ts","sourceRoot":"","sources":["../src/blocks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AA+BF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,WAAW,EAAE,CA8BrF;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAe/E"}

package/dist/blocks.js

@@ -1,5 +1,5 @@
-import { fenceSpans } from './links.js';
-const HEADING = /^(#{1,6})(?!#)[ \t]+(.+?)[ \t]*#*[ \t]*$/;
+import { fenceSpans, spanCursor } from './links.js';
+const HEADING = /^(#{1,6})(?!#)[ \t]+(.+?)(?:[ \t]+#+)?[ \t]*$/;
 function lineAt(content, from, to) {
     const nl = content.indexOf('\n', from);
     const end = nl === -1 || nl >= to ? to : nl;
@@ -7,40 +7,47 @@ function lineAt(content, from, to) {
     return { text: raw.endsWith('\r') ? raw.slice(0, -1) : raw, next: end === to ? to : end + 1 };
 }
 function scan(content, from, to, visit) {
-    const fences = fenceSpans(content.slice(from, to));
+    const fenced = spanCursor(fenceSpans(content.slice(from, to)));
     let i = from;
     while (i < to) {
         const { text, next } = lineAt(content, i, to);
-        const at = i - from;
-        visit({
-            text,
-            start: i,
-            next,
-            fenced: fences.some(([start, end]) => at >= start && at < end),
-        });
+        visit({ text, start: i, next, fenced: fenced(i - from) !== undefined });
         if (next === i)
             break;
         i = next;
     }
 }
+const HASH = 0x23;
 export function headingLines(content, from, to) {
     const found = [];
-    scan(content, from, to, (line) => {
-        if (line.fenced)
-            return;
-        const match = HEADING.exec(line.text);
-        const hashes = match?.[1];
-        const name = match?.[2];
-        if (hashes === undefined || name === undefined)
-            return;
-        found.push({
-            level: hashes.length,
-            name: name.trim(),
-            start: line.start,
-            textEnd: line.start + line.text.length,
-            next: line.next,
-        });
-    });
+    let fenced = null;
+    let i = from;
+    while (i < to) {
+        const nl = content.indexOf('\n', i);
+        const end = nl === -1 || nl >= to ? to : nl;
+        const next = end === to ? to : end + 1;
+        if (content.charCodeAt(i) === HASH) {
+            fenced ??= spanCursor(fenceSpans(content.slice(from, to)));
+            if (fenced(i - from) === undefined) {
+                const { text } = lineAt(content, i, to);
+                const match = HEADING.exec(text);
+                const hashes = match?.[1];
+                const name = match?.[2];
+                if (hashes !== undefined && name !== undefined) {
+                    found.push({
+                        level: hashes.length,
+                        name: name.trim(),
+                        start: i,
+                        textEnd: i + text.length,
+                        next,
+                    });
+                }
+            }
+        }
+        if (next === i)
+            break;
+        i = next;
+    }
     return found;
 }
 export function blockRanges(content, from, to) {

package/dist/condition.d.ts

@@ -120,7 +120,6 @@ export type ItemFacts = {
     readonly source: string | null;
     readonly address: string | null;
     readonly has_attachment: boolean;
-    readonly provider: string | null;
     readonly container: string | null;
     readonly author: string | null;
     readonly headers: Readonly<Record<string, string>>;
@@ -139,6 +138,7 @@ export declare function facts(document: Document, at: {
     readonly path: string;
 }, model: VerifiedModel, resolve: (target: string) => Resolved | undefined): DocumentFacts;
 export declare function prosePaths(facts: DocumentFacts): string[];
+export declare function datePointers(fields: Readonly<Record<string, ValueFacts>>): string[];
 export declare function dated(value: unknown): value is string;
 export declare function instant(value: unknown): bigint | undefined;
 export declare function pointed(value: unknown, pointer: string): unknown;