@agentshouse/mdruntime 0.1.0-caee7332d2235 → 0.1.0-caf080a9a9c60

package/dist/save.js

@@ -1,13 +1,14 @@
-import { definitionOf } from './model.js';
-import { apply, ATTACHMENT, links, parse, pointerSegments, references, relative, relativize, retarget, serialize, target, } from '@agentshouse/mdmodel';
-import { immutable, queuedFile, departure, } from './change.js';
-import { available, changedCleanly, collectionOf, documentsOf, governing, referring, validateCollection, } from './collection.js';
-import { changeBatchIdentity } from './identity.js';
-import { overlaying } from './overlay.js';
-import { covered, normalize } from './paths.js';
-import { differences } from './shared.js';
-import { finished, ROW_WEIGHT, stepped } from './turn.js';
-function refuse(code, file, location) {
+import { apply, ARRAY_INDEX, ATTACHMENT, create, equalValue, links, parse, pointerSegments, references, relative, relativize, retarget, roomReferences, serialize, target, } from '@agentshouse/mdmodel';
+import { immutable, leaving, queuedFile, departure, } from './change.js';
+import { collectionOf, definitionsAt, documentsOf, governing, } from './collection.js';
+import { changeBatchIdentity, roomDraftRevision } from './identity.js';
+import { composed, overlaying } from './overlay.js';
+import { ancestors } from './paths.js';
+import { entriesIn, sorting } from './shared.js';
+import { changedParts, changesOf, moveTarget, withdrawnDrafts, } from './room-draft.js';
+import { paced, ROW_WEIGHT, stepped } from './turn.js';
+import { validatedCollection } from './validation.js';
+function refuse(code, file, location, line) {
     return {
         kind: 'refused',
         refusal: {
@@ -15,13 +16,14 @@ function refuse(code, file, location) {
             retryable: false,
             ...(file === undefined ? {} : { file }),
             ...(location === undefined ? {} : { location }),
+            ...(line === undefined ? {} : { line }),
         },
     };
 }
+function refusedBy(refusal, file) {
+    return refuse(refusal.rule, file, refusal.location, refusal.line);
+}
 function repointed(document, definition, from, to, moves, settled) {
-    const parsed = parse(document.content, from);
-    if (!parsed.ok)
-        return [];
     const changes = [];
     const names = new Set();
     for (const { pointer, value } of definition === undefined
@@ -44,15 +46,22 @@ function repointed(document, definition, from, to, moves, settled) {
     }
     if (changes.length === 0)
         return [];
-    const applied = apply(parsed.document, changes);
+    const applied = apply(document, changes, definition);
     if (applied.outcome !== 'applied')
         return [];
     const next = applied.document;
     return [...names].map((name) => ({ kind: 'field', path: from, name, value: next.fields[name] }));
 }
-function edited(document, changes) {
+function edited(document, changes, definition) {
     const parts = new Map();
     for (const change of changes) {
+        if (change.kind === 'field')
+            parts.set(`field ${change.name}`, {
+                kind: 'field',
+                name: change.name,
+                value: change.value,
+                prior: document.fields[change.name],
+            });
         if (change.kind === 'preamble')
             parts.set('preamble', { kind: 'preamble', value: change.value, prior: document.preamble });
         if (change.kind === 'section')
@@ -65,11 +74,16 @@ function edited(document, changes) {
     }
     if (parts.size === 0)
         return document;
-    const applied = apply(document, [...parts.values()]);
+    const applied = apply(document, [...parts.values()], definition);
     return applied.outcome === 'applied' ? applied.document : document;
 }
 function bodies(path, before, after) {
     const changes = [];
+    for (const [name, value] of Object.entries(after.fields)) {
+        if (equalValue(before.fields[name], value))
+            continue;
+        changes.push({ kind: 'field', path, name, value });
+    }
     if (after.preamble !== before.preamble) {
         changes.push({ kind: 'preamble', path, value: after.preamble });
     }
@@ -80,7 +94,7 @@ function bodies(path, before, after) {
     }
     return changes;
 }
-function relinks(path, moved, before, moves) {
+function relinks(path, moved, before, moves, definition) {
     const changes = [];
     for (const link of links(before, path)) {
         const destination = moves.get(link.target) ?? link.target;
@@ -93,18 +107,9 @@ function relinks(path, moved, before, moves) {
     }
     if (changes.length === 0)
         return { kind: 'changes', changes: [] };
-    const applied = apply(before, changes);
-    if (applied.outcome === 'refuse') {
-        return {
-            kind: 'refused',
-            refusal: {
-                code: applied.refusal.rule,
-                retryable: false,
-                file: path,
-                ...(applied.refusal.location === undefined ? {} : { location: applied.refusal.location }),
-            },
-        };
-    }
+    const applied = apply(before, changes, definition);
+    if (applied.outcome === 'refuse')
+        return refusedBy(applied.refusal, path);
     const after = applied.document;
     if (after === before)
         return { kind: 'changes', changes: [] };
@@ -114,7 +119,18 @@ function relinks(path, moved, before, moves) {
     return { kind: 'changes', changes: bodies(path, before, after) };
 }
 function partKey(change) {
-    return change.kind === 'section' ? `section ${change.name}` : change.kind;
+    return change.kind === 'section' || change.kind === 'field'
+        ? `${change.kind} ${change.name}`
+        : change.kind;
+}
+const NAMES_A_SKIP_TESTS = 64;
+const ENCODED = /[%&\\]/u;
+function movedNames(moves) {
+    const names = new Set([...moves.keys()].map((path) => path.slice(path.lastIndexOf('/') + 1)));
+    return names.size > NAMES_A_SKIP_TESTS ? null : [...names];
+}
+function cannotLink(text, names) {
+    return names !== null && !ENCODED.test(text) && !names.some((name) => text.includes(name));
 }
 function* rewrites(changes, visible) {
     const moves = new Map();
@@ -141,16 +157,20 @@ function* rewrites(changes, visible) {
     }
     if (moves.size === 0)
         return { kind: 'changes', changes };
+    const names = movedNames(moves);
     const merged = [...changes];
     const added = [];
-    for (const [path, document] of documentsOf(visible.collection)) {
+    for (const [path, document] of yield* documentsOf(visible.collection)) {
         if (settled.has(path))
             continue;
         const moved = moves.get(path) ?? path;
-        const definition = definitionOf(governing(visible.collection.composition, path), document.type);
-        added.push(...repointed(document, definition, path, moved, moves, settled));
+        const definition = definitionsAt(visible.collection.composition, path)(document.type);
+        const repointing = repointed(document, definition, path, moved, moves, settled);
+        added.push(...repointing);
         const own = parts.get(path) ?? [];
-        const relinked = relinks(path, moved, edited(document, own.map((index) => merged[index])), moves);
+        const relinked = moved === path && own.length === 0 && cannotLink(document.content, names)
+            ? { kind: 'changes', changes: [] }
+            : relinks(path, moved, edited(document, own.map((index) => merged[index]), definition), moves, definition);
         if (relinked.kind === 'refused')
             return relinked;
         const keyed = new Map();
@@ -163,7 +183,7 @@ function* rewrites(changes, visible) {
             if (change.kind === 'replace') {
                 for (const index of own) {
                     const kind = merged[index]?.kind;
-                    if (kind === 'section' || kind === 'preamble')
+                    if (kind === 'field' || kind === 'section' || kind === 'preamble')
                         merged[index] = null;
                 }
                 added.push(change);
@@ -175,7 +195,9 @@ function* rewrites(changes, visible) {
             else
                 merged[index] = change;
         }
-        yield ROW_WEIGHT + visible.collection.text[path].length;
+        const text = visible.collection.text[path].length;
+        const rewritten = repointing.length > 0 || relinked.changes.length > 0;
+        yield ROW_WEIGHT + text + (rewritten ? text : 0);
     }
     return {
         kind: 'changes',
@@ -199,6 +221,67 @@ export function* providerRewritten(batch, visible) {
         ...(yield* anticipated(batch.changes, batch.preconditions, rewritten.changes, visible)),
     };
 }
+function crossed(document, definition, path, to) {
+    const changes = [];
+    for (const link of links(document, path)) {
+        const written = to(link.target, link.href);
+        if (written !== undefined)
+            changes.push({ kind: 'link', href: link.href, to: written });
+    }
+    for (const { pointer, value } of definition === undefined
+        ? []
+        : references(document, definition)) {
+        const named = target(path, value);
+        const written = named === null ? undefined : to(named, value);
+        if (written !== undefined) {
+            changes.push({ kind: 'reference', pointer, value: retarget(value, written), prior: value });
+        }
+    }
+    return changes;
+}
+function rewritten(path, document, changes, definition) {
+    if (changes.length === 0)
+        return [];
+    const applied = apply(document, changes, definition);
+    if (applied.outcome !== 'applied')
+        return [];
+    const after = applied.document;
+    if (document.type === undefined)
+        return [{ kind: 'replace', path, content: serialize(after) }];
+    return bodies(path, document, after);
+}
+function roomPathOf(handle, path) {
+    return `/rooms/${handle}/${path}`;
+}
+function* leavingRewritten(batch, visible) {
+    const between = batch.between;
+    if (between === undefined)
+        return batch;
+    const moved = new Map(between.moves.map(({ path, to }) => [path, roomPathOf(between.destination.handle, to)]));
+    const derived = [];
+    for (const [path, document] of yield* documentsOf(visible.collection)) {
+        if (moved.has(path))
+            continue;
+        const definition = definitionsAt(visible.collection.composition, path)(document.type);
+        derived.push(...rewritten(path, document, crossed(document, definition, path, (named) => moved.get(named)), definition));
+        yield ROW_WEIGHT + visible.collection.text[path].length;
+    }
+    if (derived.length === 0)
+        return batch;
+    return {
+        ...batch,
+        changes: [...derived, ...batch.changes],
+        preconditions: [...(yield* preconditionsOf(derived, visible, [])), ...batch.preconditions],
+    };
+}
+export function rewriting(batch, locator) {
+    return leaving(batch, locator) || batch.changes.some((change) => change.kind === 'move');
+}
+export function* effectiveIn(batch, locator, visible) {
+    return leaving(batch, locator)
+        ? yield* leavingRewritten(batch, visible)
+        : yield* providerRewritten(batch, visible);
+}
 function* incoming(collection, removed, candidates) {
     const found = new Map();
     const note = (target, file) => {
@@ -209,14 +292,20 @@ function* incoming(collection, removed, candidates) {
         found.set(target, referrers);
     };
     const read = function* (paths) {
-        for (const path of [...new Set(paths)].sort()) {
+        const seen = new Set();
+        for (const path of paths) {
+            if (seen.has(path))
+                continue;
+            seen.add(path);
             const document = collection.document(path);
             if (document !== undefined)
                 yield [path, document];
         }
     };
-    for (const [path, document] of candidates === null ? documentsOf(collection) : read(candidates)) {
-        const definition = definitionOf(governing(collection.composition, path), document.type);
+    for (const [path, document] of candidates === null
+        ? yield* documentsOf(collection)
+        : read(candidates)) {
+        const definition = definitionsAt(collection.composition, path)(document.type);
         for (const { value, to } of definition === undefined ? [] : references(document, definition)) {
             if (to.includes(ATTACHMENT))
                 continue;
@@ -226,7 +315,7 @@ function* incoming(collection, removed, candidates) {
         }
         yield ROW_WEIGHT + collection.text[path].length;
     }
-    const [first] = [...found.keys()].sort();
+    const [first] = yield* sorting(found.keys());
     if (first === undefined)
         return null;
     const every = new Set();
@@ -239,14 +328,16 @@ function* incoming(collection, removed, candidates) {
             code: 'referenced-missing-file',
             retryable: false,
             file: first,
-            referrers: [...every].sort(),
+            referrers: yield* sorting(every),
         },
     };
 }
 function affected(change) {
     return change.kind === 'move' ? [change.path, change.to] : [change.path];
 }
-function guard(changes, input) {
+const WRITE = ['write'];
+const MOVE_OUT = ['write', 'erase'];
+function guard(changes, input, removing) {
     const overridden = new Map();
     const existing = {
         has: (path) => overridden.get(path) ??
@@ -254,21 +345,17 @@ function guard(changes, input) {
         add: (path) => void overridden.set(path, true),
         delete: (path) => void overridden.set(path, false),
     };
+    const occupied = (path) => input.folders.has(path) ? path : (ancestors(path).find((one) => existing.has(one)) ?? null);
     for (const [index, change] of changes.entries()) {
         for (const path of affected(change)) {
-            const normalized = normalize(path);
-            if (normalized === null || normalized === '')
-                return refuse('room-root', path);
-            if (covered(input.providerOwnedPaths, normalized)) {
-                return refuse('provider-owned-path', normalized);
-            }
-            const operation = change.kind === 'remove' ? 'delete' : 'write';
-            if (!input.local && !covered(input.operations[operation], normalized))
-                return refuse(`${operation}-grant`, normalized);
+            const refused = input.rule(path, change.kind === 'remove' ? removing : WRITE);
+            if (refused !== null)
+                return refuse(refused.code, refused.path);
         }
-        if (change.kind === 'create') {
-            if (existing.has(change.path))
-                return refuse('path-collision', change.path);
+        if (change.kind === 'create' || change.kind === 'arrival') {
+            const taken = existing.has(change.path) ? change.path : occupied(change.path);
+            if (taken !== null)
+                return refuse('path-collision', taken);
             existing.add(change.path);
             continue;
         }
@@ -278,6 +365,9 @@ function guard(changes, input) {
                     input.bases.some((base) => base.kind === 'absent' && base.path === change.path))) {
                 return refuse('path-collision', change.path);
             }
+            const taken = occupied(change.path);
+            if (taken !== null)
+                return refuse('path-collision', taken);
             if (!input.local &&
                 existing.has(change.path) &&
                 input.visible.revisions[departure(changes, index)] === undefined) {
@@ -289,8 +379,9 @@ function guard(changes, input) {
         if (change.kind === 'move') {
             if (!existing.has(change.path))
                 return refuse('path-absent', change.path);
-            if (existing.has(change.to))
-                return refuse('path-collision', change.to);
+            const taken = existing.has(change.to) ? change.to : occupied(change.to);
+            if (taken !== null)
+                return refuse('path-collision', taken);
             if (unrevised(input, change.path)) {
                 return refuse('unknown-revision', change.path);
             }
@@ -320,13 +411,13 @@ function guard(changes, input) {
     return null;
 }
 function unrevised(input, path) {
-    return (!input.local && input.queued?.has(path) !== true && input.visible.revisions[path] === undefined);
+    return !input.local && !input.queued.has(path) && input.visible.revisions[path] === undefined;
 }
-export function queuedDocuments(queue) {
+function queuedDocuments(queue) {
     const paths = new Set();
     for (const batch of queue) {
         for (const change of batch.changes) {
-            if (change.kind === 'binary')
+            if (change.kind === 'binary' || (change.kind === 'arrival' && !('content' in change)))
                 continue;
             if (change.kind === 'remove')
                 paths.delete(change.path);
@@ -417,7 +508,10 @@ function depth(path) {
 function* exceeding(limits, changes, effective, resulting) {
     const written = effective.map((change) => (change.kind === 'move' ? change.to : change.path));
     const created = changes
-        .filter((change) => change.kind === 'create' || change.kind === 'move' || change.kind === 'binary')
+        .filter((change) => change.kind === 'create' ||
+        change.kind === 'move' ||
+        change.kind === 'binary' ||
+        change.kind === 'arrival')
         .map((change) => (change.kind === 'move' ? change.to : change.path));
     for (const limit of limits) {
         const value = limit.value;
@@ -455,68 +549,69 @@ function* exceeding(limits, changes, effective, resulting) {
 function shellRelative(text, path, handle, definition) {
     if (!text.includes(`/rooms/${handle}/`))
         return null;
-    const parsed = parse(text, path);
+    const parsed = parse(text, path, definition);
     if (!parsed.ok)
         return null;
     const result = relativize(parsed.document, path, handle, definition(parsed.document.type));
     return result.outcome === 'applied' && result.document.content !== text ? result.document : null;
 }
 function relativeField(path, name, value, handle, definition) {
-    const opened = parse('---\n---\n');
-    if (definition === undefined ||
-        !opened.ok ||
-        !JSON.stringify(value ?? null).includes(`/rooms/${handle}/`))
+    if (definition === undefined || !JSON.stringify(value ?? null).includes(`/rooms/${handle}/`))
         return value;
-    const held = apply(opened.document, [{ kind: 'field', name, value, prior: undefined }]);
+    const held = apply(create(definition.name, definition), [{ kind: 'field', name, value, prior: undefined }], definition);
     if (held.outcome !== 'applied')
         return value;
     const result = relativize(held.document, path, handle, definition);
     return result.outcome === 'applied' ? result.document.fields[name] : value;
 }
 function relativeChanges(input) {
+    const changes = [];
+    for (const change of input.changes) {
+        const next = relativeChange(change, input);
+        if ('refusal' in next)
+            return next;
+        changes.push(next.change);
+    }
+    return { kind: 'changes', changes };
+}
+function relativeChange(change, input) {
     const { handle, composition, visible } = input;
-    const typed = (path) => (type) => definitionOf(governing(composition, path), type);
     const body = (path, text) => shellRelative(text, path, handle, () => undefined)?.content ?? text;
-    return input.changes.map((change) => {
-        const definition = typed(change.path);
-        if (change.kind === 'field') {
-            const type = visible.collection.document(change.path)?.type;
-            const value = relativeField(change.path, change.name, change.value, handle, definition(type));
-            return value === change.value ? change : { ...change, value };
-        }
-        if (change.kind === 'section' || change.kind === 'preamble') {
-            const value = body(change.path, change.value);
-            return value === change.value ? change : { ...change, value };
-        }
-        if (change.kind === 'replace' || (change.kind === 'create' && 'content' in change)) {
-            const content = shellRelative(change.content, change.path, handle, definition)?.content ?? change.content;
-            return content === change.content ? change : { ...change, content };
-        }
-        if (change.kind !== 'create')
-            return change;
-        const type = typeof change.fields.type === 'string' ? change.fields.type : undefined;
-        const fields = Object.fromEntries(Object.entries(change.fields).map(([name, value]) => [
-            name,
-            relativeField(change.path, name, value, handle, definition(type)),
-        ]));
-        const sections = Object.fromEntries(Object.entries(change.sections).map(([name, value]) => [name, body(change.path, value)]));
-        return { ...change, fields, sections };
-    });
-}
-function* unmodeledType(collection, composition) {
-    if (available(composition))
-        return false;
-    for (const [path, document] of documentsOf(collection)) {
-        if (document.type !== undefined &&
-            document.type !== 'any' &&
-            governing(composition, path).status === 'unavailable')
-            return true;
-        yield ROW_WEIGHT + collection.text[path].length;
+    const definition = definitionsAt(composition, change.path);
+    if (change.kind === 'field') {
+        const type = visible.collection.document(change.path)?.type;
+        const value = relativeField(change.path, change.name, change.value, handle, definition(type));
+        return { change: value === change.value ? change : { ...change, value } };
     }
-    return false;
+    if (change.kind === 'section' || change.kind === 'preamble') {
+        const value = body(change.path, change.value);
+        return { change: value === change.value ? change : { ...change, value } };
+    }
+    if (change.kind === 'replace' || (change.kind === 'create' && 'content' in change)) {
+        const content = shellRelative(change.content, change.path, handle, definition)?.content ?? change.content;
+        return { change: content === change.content ? change : { ...change, content } };
+    }
+    if (change.kind !== 'create')
+        return { change };
+    const type = typeof change.fields.type === 'string' ? change.fields.type : undefined;
+    const fields = Object.fromEntries(Object.entries(change.fields).map(([name, value]) => [
+        name,
+        relativeField(change.path, name, value, handle, definition(type)),
+    ]));
+    const sections = Object.fromEntries(Object.entries(change.sections).map(([name, value]) => [name, body(change.path, value)]));
+    const written = composed(change.path, fields, sections, composition);
+    if (written.outcome === 'refuse')
+        return refusedBy(written.refusal, change.path);
+    if (written.outcome === 'stale')
+        throw new Error(`the creation of ${change.path} is stale`);
+    if (Object.keys(sections).length === 0)
+        return { change: { ...change, fields, sections } };
+    return {
+        change: { kind: 'create', path: change.path, content: serialize(written.document) },
+    };
 }
 function unqueueable(file) {
-    return { kind: 'refused', refusal: { code: 'unknown-revision', retryable: false, file } };
+    return refuse('unknown-revision', file);
 }
 function isPart(change) {
     return change.kind === 'field' || change.kind === 'section' || change.kind === 'preamble';
@@ -524,8 +619,29 @@ function isPart(change) {
 function touched(change) {
     return change.kind === 'move' ? [change.path, change.to] : [change.path];
 }
-function partsApplied(content, path, changes) {
-    const parsed = parse(content, path);
+function partsApplied(content, path, changes, composition) {
+    const applied = partsResult(content, path, changes, composition);
+    return applied?.outcome === 'applied' ? serialize(applied.document) : null;
+}
+function unapplied(changes, visible, composition) {
+    const parted = new Map();
+    for (const change of changes) {
+        if (isPart(change))
+            parted.set(change.path, [...(parted.get(change.path) ?? []), change]);
+    }
+    for (const [path, parts] of parted) {
+        const content = visible.documents[path];
+        if (content === undefined)
+            continue;
+        const applied = partsResult(content, path, parts, composition);
+        if (applied?.outcome === 'refuse')
+            return refusedBy(applied.refusal, path);
+    }
+    return null;
+}
+function partsResult(content, path, changes, composition) {
+    const definitions = definitionsAt(composition, path);
+    const parsed = parse(content, path, definitions);
     if (!parsed.ok)
         return null;
     const document = parsed.document;
@@ -548,12 +664,11 @@ function partsApplied(content, path, changes) {
         else
             parts.set('preamble', { kind: 'preamble', value: change.value, prior: document.preamble });
     }
-    const applied = apply(document, [...parts.values()]);
-    return applied.outcome === 'applied' ? serialize(applied.document) : null;
+    return apply(document, [...parts.values()], definitions(document.type));
 }
-function settledParts(changes, deferred) {
+function settledParts(changes, deferred, composition) {
     for (const [held, parts] of deferred) {
-        const content = partsApplied(held.content, held.path, parts);
+        const content = partsApplied(held.content, held.path, parts, composition);
         if (content === null)
             return held.path;
         changes[changes.indexOf(held)] = { ...held, content };
@@ -617,8 +732,8 @@ function folded(changes, change, appending, deferred) {
     changes.push(change);
     return 'appended';
 }
-function relinked(batch, move, before, after, appending) {
-    const derived = finished(rewrites([move], after));
+function* relinked(batch, move, before, after, appending) {
+    const derived = yield* rewrites([move], after);
     if (derived.kind === 'refused')
         return derived;
     const changes = [...batch.changes];
@@ -628,7 +743,9 @@ function relinked(batch, move, before, after, appending) {
     for (const change of derived.changes) {
         if (change === move)
             continue;
-        const unsettled = isPart(change) ? null : settledParts(changes, deferred);
+        const unsettled = isPart(change)
+            ? null
+            : settledParts(changes, deferred, after.collection.composition);
         if (unsettled !== null)
             return unqueueable(unsettled);
         const outcome = folded(changes, change, appending, deferred);
@@ -639,12 +756,13 @@ function relinked(batch, move, before, after, appending) {
         if (outcome !== 'skipped')
             changed = true;
     }
-    const unsettled = settledParts(changes, deferred);
+    const unsettled = settledParts(changes, deferred, after.collection.composition);
     if (unsettled !== null)
         return unqueueable(unsettled);
     if (!changed)
         return { kind: 'relinked', batch };
     const held = new Set(batch.preconditions.map(identity));
+    const added = yield* preconditionsOf(appended, before, []);
     return {
         kind: 'relinked',
         batch: immutable({
@@ -653,7 +771,7 @@ function relinked(batch, move, before, after, appending) {
             changes,
             preconditions: [
                 ...batch.preconditions,
-                ...finished(preconditionsOf(appended, before, [])).filter((precondition) => !held.has(identity(precondition))),
+                ...added.filter((precondition) => !held.has(identity(precondition))),
             ],
         }),
     };
@@ -699,11 +817,10 @@ function withdrawnFile(batch, change, at) {
     ];
     return immutable({ ...batch, id: changeBatchIdentity(), changes, preconditions });
 }
-export function requeued(queue, changes, visible, changeable, state) {
+function* requeuing(queue, changes, visible, changeable, state) {
     const next = [...queue];
     const origins = new Map();
     const withdrawn = new Map();
-    const owners = new Set();
     const queued = new Set();
     const kept = [];
     const originOf = (batch) => origins.get(batch) ?? batch.id;
@@ -722,19 +839,19 @@ export function requeued(queue, changes, visible, changeable, state) {
             return unqueueable(change.path);
         const following = next.slice(index);
         const rebuilt = [];
-        let before = change.kind === 'move' ? state(next.slice(0, index)) : visible;
+        let before = change.kind === 'move' ? yield* state(next.slice(0, index)) : visible;
         for (const [offset, batch] of following.entries()) {
             let current = batch;
             if (change.kind === 'move') {
-                const after = state(next.slice(0, index + offset + 1));
+                const after = yield* state(next.slice(0, index + offset + 1));
                 const appending = offset === 0 && created(batch, queuedFile(batch, change.path, held.localId));
-                const relinking = relinked(batch, change, before, after, appending);
+                const relinking = yield* relinked(batch, change, before, after, appending);
                 if (relinking.kind === 'refused')
                     return relinking;
                 current = relinking.batch;
                 before = after;
             }
-            if (current !== batch && !open(batch))
+            if (current !== batch && (!open(batch) || batch.between !== undefined))
                 return unqueueable(change.path);
             rebuilt.push(offset === 0
                 ? withdrawnFile(current, change, queuedFile(current, change.path, held.localId))
@@ -749,7 +866,6 @@ export function requeued(queue, changes, visible, changeable, state) {
             if (replaced !== null)
                 origins.set(replaced, origin);
         }
-        owners.add(originOf(owner));
         next.splice(index, following.length, ...rebuilt.filter((batch) => batch !== null));
         queued.add(change.path);
     }
@@ -759,112 +875,68 @@ export function requeued(queue, changes, visible, changeable, state) {
         changes: kept,
         queued,
         withdrawn,
-        owners,
     };
 }
-function covering(precondition) {
-    return precondition.kind === 'field' ||
-        precondition.kind === 'section' ||
-        precondition.kind === 'preamble'
-        ? identity(precondition)
-        : `path ${precondition.path}`;
-}
-export function joined(queue, owner, extra) {
-    const later = new Set(queue.slice(queue.indexOf(owner) + 1).flatMap((batch) => batch.changes.flatMap(touched)));
-    const clash = extra.changes.flatMap(touched).find((path) => later.has(path));
-    if (clash !== undefined)
-        return unqueueable(clash);
-    const changes = [...owner.changes];
-    const deferred = new Map();
-    for (const change of extra.changes) {
-        const unsettled = isPart(change) ? null : settledParts(changes, deferred);
-        if (unsettled !== null)
-            return unqueueable(unsettled);
-        if (folded(changes, change, true, deferred) === 'refused')
-            return unqueueable(change.path);
-    }
-    const unsettled = settledParts(changes, deferred);
-    if (unsettled !== null)
-        return unqueueable(unsettled);
-    const held = new Set(owner.preconditions.map(covering));
-    const written = new Set(owner.changes.flatMap((change) => change.kind === 'create' || change.kind === 'replace' ? [change.path] : []));
-    const preconditions = [
-        ...owner.preconditions,
-        ...extra.preconditions.filter((precondition) => {
-            const key = covering(precondition);
-            return (!held.has(key) && (key === `path ${precondition.path}` || !written.has(precondition.path)));
-        }),
-    ];
-    const batch = immutable({
-        ...owner,
-        ...(extra.validation === undefined ? {} : { validation: extra.validation }),
-        id: changeBatchIdentity(),
-        changes,
-        preconditions,
-    });
-    return { kind: 'joined', batch, queue: queue.map((item) => (item === owner ? batch : item)) };
-}
-export function limitedIn(queue, batch, limits, state) {
+function* limiting(queue, batch, limits, state) {
     const at = queue.indexOf(batch);
-    const limited = finished(exceeding(limits, batch.changes, finished(providerRewritten(batch, state(queue.slice(0, at)))).changes, state(queue.slice(0, at + 1))));
-    return limited?.kind === 'refused' ? limited.refusal : null;
+    const rewritten = yield* providerRewritten(batch, yield* state(queue.slice(0, at)));
+    const limited = yield* exceeding(limits, batch.changes, rewritten.changes, yield* state(queue.slice(0, at + 1)));
+    return limited?.refusal ?? null;
 }
-function* batching(input) {
-    const changes = relativeChanges(input);
-    const structural = changes.find((change) => change.kind === 'move' || change.kind === 'remove');
-    if (structural !== undefined &&
-        (yield* unmodeledType(input.visible.collection, input.composition)))
-        return refuse('model-unavailable', structural.path);
-    if (changes.length === 0)
-        return refuse('no-change');
-    const rewritten = yield* rewrites(changes, input.visible);
-    if (rewritten.kind === 'refused')
-        return rewritten;
-    const refusal = guard(changes, input);
-    if (refusal !== null)
-        return refusal;
-    const preconditions = yield* preconditionsOf(changes, input.visible, input.bases);
-    const predicted = yield* anticipated(changes, preconditions, rewritten.changes, input.visible);
-    const resulting = yield* overlaying(input.visible, [
-        { id: '', baseRoomVersion: input.baseRoomVersion, ...predicted },
-    ]);
-    const clean = input.clean !== undefined && available(input.composition) ? input.clean : null;
-    const removed = new Set(changes.filter((change) => change.kind === 'remove').map((change) => change.path));
+function typedText(content) {
+    if (content === undefined)
+        return false;
+    const parsed = parse(content);
+    return parsed.ok && parsed.document.type !== undefined && parsed.document.type !== 'any';
+}
+function touchedLibrary(resulting, touched, composition) {
+    const entries = touched
+        .flatMap((path) => {
+        const content = resulting.documents[path];
+        const binary = resulting.binaries[path] !== undefined;
+        return content === undefined && !binary ? [] : [{ path, content: content ?? null }];
+    })
+        .sort((left, right) => (left.path < right.path ? -1 : left.path > right.path ? 1 : 0));
+    const contents = new Map(entries.map(({ path, content }) => [path, content]));
+    const binaries = new Set(Array.from(entriesIn(resulting.binaries), ([path]) => path));
+    return validatedCollection(() => Promise.resolve({ entries, next: null }), async (paths) => {
+        const known = new Map();
+        const pace = paced();
+        for (const path of paths) {
+            const content = contents.get(path);
+            if (binaries.has(path))
+                known.set(path, { type: undefined, binary: true });
+            else if (content !== undefined && content !== null) {
+                const read = parse(content, path, definitionsAt(composition, path));
+                if (read.ok)
+                    known.set(path, { type: read.document.type ?? 'any', binary: false });
+                await pace(content.length + ROW_WEIGHT);
+            }
+        }
+        return known;
+    }, composition);
+}
+async function judging(visible, resulting, composition, validate, removed, touched) {
     if (removed.size > 0) {
-        const referrers = clean === null ? null : referring(clean, input.composition, removed);
-        const referenced = yield* incoming(collectionOf(resulting.documents, input.composition), removed, clean === null || referrers === null
-            ? null
-            : [...referrers, ...(yield* differences(clean.text, resulting.documents))]);
+        const referenced = await stepped(incoming(collectionOf(resulting.documents, composition), removed, null));
         if (referenced !== null)
             return referenced;
     }
-    const typed = (content) => {
-        if (content === undefined)
-            return false;
-        const parsed = parse(content);
-        return parsed.ok && parsed.document.type !== undefined && parsed.document.type !== 'any';
-    };
-    const touched = [...new Set(predicted.changes.flatMap(affected))];
     const typedPaths = [];
+    const pace = paced();
     for (const path of touched) {
-        const before = input.visible.documents[path];
+        const before = visible.documents[path];
         const after = resulting.documents[path];
-        if (typed(before) || typed(after))
+        if (typedText(before) || typedText(after))
             typedPaths.push(path);
-        yield ROW_WEIGHT + (before?.length ?? 0) + (after?.length ?? 0);
+        await pace((before?.length ?? 0) + (after?.length ?? 0) + ROW_WEIGHT);
     }
-    const needsModel = typedPaths.length > 0;
-    const withoutModel = typedPaths.find((path) => governing(input.composition, path).status === 'unavailable');
+    const withoutModel = typedPaths.find((path) => governing(composition, path).status === 'unavailable');
     if (withoutModel !== undefined)
         return refuse('model-unavailable', withoutModel);
-    const verdict = clean !== null &&
-        (yield* changedCleanly({ text: resulting.documents, binaries: resulting.binaries }, clean, input.composition))
-        ? { verdict: 'accept' }
-        : yield* validateCollection(needsModel
-            ? resulting.documents
-            : Object.fromEntries(touched.flatMap((path) => resulting.documents[path] === undefined
-                ? []
-                : [[path, resulting.documents[path]]])), Object.keys(resulting.binaries), input.composition);
+    const verdict = typedPaths.length > 0
+        ? await validate(resulting, touched)
+        : await touchedLibrary(resulting, touched, composition);
     if (verdict.verdict === 'refuse') {
         return {
             kind: 'refused',
@@ -873,16 +945,99 @@ function* batching(input) {
                 retryable: false,
                 file: verdict.file,
                 ...(verdict.location === undefined ? {} : { location: verdict.location }),
+                ...(verdict.line === undefined ? {} : { line: verdict.line }),
                 ...(verdict.referrers === undefined ? {} : { referrers: verdict.referrers }),
             },
         };
     }
-    const limited = yield* exceeding(input.providerLimits, changes, predicted.changes, resulting);
+    return {
+        kind: 'judged',
+        validated: typedPaths
+            .map((path) => governing(composition, path))
+            .find((model) => model.status !== 'unavailable'),
+    };
+}
+function placed(reference) {
+    const key = roomPathOf(reference.handle, reference.path);
+    if (reference.kind === 'link')
+        return `link ${key}`;
+    const pointer = reference.pointer
+        .split('/')
+        .map((segment) => (ARRAY_INDEX.test(segment) ? '-' : segment))
+        .join('/');
+    return `field ${pointer} ${key}`;
+}
+function roomReferencesIn(path, content, composition) {
+    if (content === undefined)
+        return [];
+    const definitions = definitionsAt(composition, path);
+    const parsed = parse(content, path, definitions);
+    if (!parsed.ok)
+        return [];
+    return roomReferences(parsed.document, definitions(parsed.document.type));
+}
+function* admittedRooms(changes, visible, resulting, composition) {
+    const from = new Map();
+    for (const [index, change] of changes.entries()) {
+        if (change.kind === 'move')
+            from.set(change.to, departure(changes, index));
+    }
+    for (const path of [...new Set(changes.flatMap(affected))].sort()) {
+        const now = resulting.documents[path];
+        if (now === undefined)
+            continue;
+        const held = new Set(roomReferencesIn(path, visible.documents[from.get(path) ?? path], composition).map(placed));
+        for (const reference of roomReferencesIn(path, now, composition)) {
+            if (reference.kind === 'link' || reference.crossRoom === true)
+                continue;
+            if (held.has(placed(reference)))
+                continue;
+            return refuse('unresolved-reference', path, reference.pointer);
+        }
+        yield ROW_WEIGHT + now.length;
+    }
+    return null;
+}
+function validationOf(validated) {
+    return validated === undefined
+        ? {}
+        : {
+            validation: {
+                identity: validated.snapshot.identity,
+                version: validated.snapshot.version,
+                source: validated.status,
+            },
+        };
+}
+async function batching(input) {
+    const relative = relativeChanges(input);
+    if (relative.kind === 'refused')
+        return relative;
+    const { changes } = relative;
+    const structural = changes.find((change) => change.kind === 'move' || change.kind === 'remove');
+    if (structural !== undefined && input.unmodeled) {
+        return refuse('model-unavailable', structural.path);
+    }
+    if (changes.length === 0)
+        return refuse('no-change');
+    const rewritten = await stepped(rewrites(changes, input.visible));
+    if (rewritten.kind === 'refused')
+        return rewritten;
+    const refusal = guard(changes, input, WRITE) ?? unapplied(changes, input.visible, input.composition);
+    if (refusal !== null)
+        return refusal;
+    const preconditions = await stepped(preconditionsOf(changes, input.visible, input.bases));
+    const predicted = await stepped(anticipated(changes, preconditions, rewritten.changes, input.visible));
+    const resulting = await stepped(overlaying(input.visible, [{ id: '', baseRoomVersion: input.baseRoomVersion, ...predicted }], input.composition));
+    const judged = await judging(input.visible, resulting, input.composition, input.validate, new Set(changes.filter((change) => change.kind === 'remove').map((change) => change.path)), [...new Set(predicted.changes.flatMap(affected))]);
+    if (judged.kind === 'refused')
+        return judged;
+    const crossing = await stepped(admittedRooms(changes, input.visible, resulting, input.composition));
+    if (crossing !== null)
+        return crossing;
+    const limited = await stepped(exceeding(input.providerLimits, changes, predicted.changes, resulting));
     if (limited !== null)
         return limited;
-    const validated = typedPaths
-        .map((path) => governing(input.composition, path))
-        .find((model) => model.status !== 'unavailable');
     return {
         kind: 'batch',
         batch: immutable({
@@ -891,18 +1046,296 @@ function* batching(input) {
             changes,
             preconditions,
             ...(input.writtenBy === undefined ? {} : { writtenBy: input.writtenBy }),
-            ...(validated === undefined
-                ? {}
-                : {
-                    validation: {
-                        identity: validated.snapshot.identity,
-                        version: validated.snapshot.version,
-                        source: validated.status,
-                    },
-                }),
+            ...validationOf(judged.validated),
         }),
     };
 }
-export function buildBatch(input) {
-    return stepped(batching(input));
+const MOVE_DOCUMENTS = 'move-documents';
+function heldAt(visible, path) {
+    return visible.documents[path] !== undefined || visible.binaries[path] !== undefined;
+}
+function arrivingText(path, to, source, moved) {
+    const content = source.visible.documents[path];
+    const document = source.visible.collection.document(path);
+    if (document === undefined)
+        return content;
+    const definition = definitionsAt(source.composition, path)(document.type);
+    const changes = crossed(document, definition, path, (named, href) => {
+        const at = moved.get(named);
+        if (at !== undefined)
+            return target(to, href) === at ? undefined : relative(to, at);
+        return heldAt(source.visible, named) ? roomPathOf(source.handle, named) : undefined;
+    });
+    if (changes.length === 0)
+        return content;
+    const applied = apply(document, changes, definition);
+    return applied.outcome === 'applied' ? serialize(applied.document) : content;
+}
+function arrivalOf({ path, to }, source, moved) {
+    const { documents, revisions, fileIds, created, changes, binaries } = source.visible;
+    const kept = {
+        ...(fileIds[path] === undefined ? {} : { fileId: fileIds[path] }),
+        ...(created[path] === undefined ? {} : { created: created[path] }),
+        ...(changes[path] === undefined ? {} : { change: changes[path] }),
+    };
+    const heads = {
+        ...(revisions[path] === undefined ? {} : { revision: revisions[path] }),
+        ...kept,
+    };
+    const binary = binaries[path];
+    if (binary?.state === 'accepted') {
+        const { byteLength, mediaType, sha256 } = binary;
+        return {
+            kind: 'arrival',
+            path: to,
+            binary: { byteLength, mediaType, sha256 },
+            ...heads,
+        };
+    }
+    const content = arrivingText(path, to, source, moved);
+    return {
+        kind: 'arrival',
+        path: to,
+        content,
+        ...(content === documents[path] ? heads : kept),
+    };
+}
+async function moving(input) {
+    const { source, destination, moves } = input;
+    const removals = moves.map(({ path }) => ({ kind: 'remove', path }));
+    const leaves = guard(removals, { ...source, local: input.local, bases: [] }, MOVE_OUT);
+    if (leaves !== null)
+        return leaves;
+    const uploading = moves.find(({ path }) => source.visible.binaries[path]?.state === 'pending');
+    if (uploading !== undefined)
+        return refuse('unknown-revision', uploading.path);
+    const moved = new Map(moves.map(({ path, to }) => [path, to]));
+    const arrivals = moves.map((move) => arrivalOf(move, source, moved));
+    const arrives = guard(arrivals, { ...destination, local: input.local, bases: [] }, WRITE);
+    if (arrives !== null)
+        return arrives;
+    const bound = input.providerLimits.find((limit) => limit.name === MOVE_DOCUMENTS)?.value;
+    if (typeof bound === 'number' && moves.length > bound) {
+        return refuse('provider-limit', undefined, MOVE_DOCUMENTS);
+    }
+    if (source.unmodeled)
+        return refuse('model-unavailable', moves[0].path);
+    const id = changeBatchIdentity();
+    const between = {
+        source: { room: source.room, baseRoomVersion: source.baseRoomVersion },
+        destination: {
+            room: destination.room,
+            baseRoomVersion: destination.baseRoomVersion,
+            handle: destination.handle,
+        },
+        moves,
+    };
+    const written = input.writtenBy === undefined ? {} : { writtenBy: input.writtenBy };
+    const leavingBatch = {
+        id,
+        baseRoomVersion: source.baseRoomVersion,
+        changes: removals,
+        preconditions: moves.map(({ path }) => existence(source.visible, path)),
+        ...written,
+        between,
+    };
+    const effective = await stepped(leavingRewritten(leavingBatch, source.visible));
+    const left = await stepped(overlaying(source.visible, [effective], source.composition));
+    const sourceJudged = await judging(source.visible, left, source.composition, source.validate, new Set(moves.map(({ path }) => path)), [...new Set(effective.changes.map((change) => change.path))]);
+    if (sourceJudged.kind === 'refused')
+        return sourceJudged;
+    const arrivingBatch = {
+        id,
+        baseRoomVersion: destination.baseRoomVersion,
+        changes: arrivals,
+        preconditions: moves.map(({ to }) => ({ kind: 'absent', path: to })),
+        ...written,
+        between,
+    };
+    const arrived = await stepped(overlaying(destination.visible, [arrivingBatch], destination.composition));
+    const destinationJudged = await judging(destination.visible, arrived, destination.composition, destination.validate, new Set(), moves.map(({ to }) => to));
+    if (destinationJudged.kind === 'refused')
+        return destinationJudged;
+    const limited = (await stepped(exceeding(input.providerLimits, removals, effective.changes, left))) ??
+        (await stepped(exceeding(input.providerLimits, arrivals, arrivals, arrived)));
+    if (limited !== null)
+        return limited;
+    return { kind: 'moved', leaving: immutable(leavingBatch), arriving: immutable(arrivingBatch) };
+}
+function unreadable(saved, visible, composition) {
+    const path = saved.find(({ path: at, parts }) => (parts.fields !== undefined ||
+        parts.sections !== undefined ||
+        parts.preamble !== undefined) &&
+        typedText(visible.documents[at]) &&
+        governing(composition, at).status === 'unavailable')?.path;
+    return path === undefined ? null : refuse('model-unavailable', path);
+}
+function changedUnderneath(saved, visible) {
+    const parts = saved.flatMap(({ path, parts: held }) => changedParts(path, held, visible));
+    return parts.length === 0
+        ? null
+        : { kind: 'refused', refusal: { code: 'changed-underneath', retryable: false, parts } };
+}
+function sideOf(room, visible) {
+    const { record } = room;
+    return {
+        room: record.locator,
+        handle: record.declaration.handle,
+        baseRoomVersion: record.roomVersion,
+        composition: room.composition,
+        rule: room.rule,
+        visible,
+        folders: room.folders,
+        queued: queuedDocuments(room.queue),
+        unmodeled: !room.modelled,
+        validate: room.validate,
+    };
+}
+function carriedDrafts(ask, from, into) {
+    return new Map(ask.saved.flatMap(({ path, parts }) => {
+        const record = from.drafts.get(path);
+        if (parts.move === undefined || record === undefined || ask.consumed.has(path))
+            return [];
+        const to = moveTarget(parts.move);
+        if (into.drafts.has(to))
+            return [];
+        const locator = into.record.locator;
+        return [[path, { ...record, locator, path: to, revision: roomDraftRevision() }]];
+    }));
+}
+async function plannedMove(ask, source, into) {
+    const destination = into.record.locator;
+    const mixed = ask.saved.find(({ parts }) => Object.keys(parts).length !== 1 || parts.move?.room !== destination);
+    if (mixed !== undefined)
+        return refuse('mixed-room-move', mixed.path);
+    const leavingVisible = await stepped(source.replay(source.queue));
+    const changed = changedUnderneath(ask.saved, leavingVisible);
+    if (changed !== null)
+        return changed;
+    const moves = ask.saved.map(({ path, parts }) => ({ path, to: moveTarget(parts.move) }));
+    const built = await moving({
+        source: sideOf(source, leavingVisible),
+        destination: sideOf(into, await stepped(into.replay(into.queue))),
+        moves,
+        providerLimits: ask.providerLimits,
+        local: ask.local,
+        ...(ask.writtenBy === undefined ? {} : { writtenBy: ask.writtenBy }),
+    });
+    if (built.kind === 'refused')
+        return built;
+    const { id } = built.leaving;
+    const carried = carriedDrafts(ask, source, into);
+    return {
+        kind: 'planned',
+        identifier: id,
+        rooms: [
+            {
+                locator: source.record.locator,
+                queue: [...source.queue, built.leaving],
+                saved: new Map([[id, ask.saved]]),
+                consumed: [...ask.consumed, ...carried.keys()],
+                carried: [],
+            },
+            {
+                locator: destination,
+                queue: [...into.queue, built.arriving],
+                saved: new Map([
+                    [id, [...carried.values()].map(({ path }) => ({ path, parts: {} }))],
+                ]),
+                consumed: [],
+                carried: [...carried.values()],
+            },
+        ],
+    };
+}
+async function plannedWithin(ask, room) {
+    const { record } = room;
+    const visible = await stepped(room.replay(room.queue));
+    const changed = unreadable(ask.saved, visible, room.composition) ?? changedUnderneath(ask.saved, visible);
+    if (changed !== null)
+        return changed;
+    const parts = ask.saved.map(({ path, parts: held }) => changesOf(path, held));
+    const changes = parts.flatMap(({ changes: made }) => made);
+    const requeue = await stepped(requeuing(room.queue, changes, visible, (batch) => room.changeable.has(batch.id), room.replay));
+    if (requeue.kind === 'refused')
+        return requeue;
+    const foreign = [...requeue.withdrawn.keys()].some((origin) => {
+        const writer = room.queue.find((batch) => batch.id === origin)?.writtenBy;
+        return writer?.app !== ask.writtenBy?.app || writer?.release !== ask.writtenBy?.release;
+    });
+    if (foreign)
+        return unqueueable([...requeue.queued].at(-1));
+    const input = {
+        local: ask.local,
+        baseRoomVersion: record.roomVersion,
+        composition: room.composition,
+        rule: room.rule,
+        providerLimits: ask.providerLimits,
+        handle: record.declaration.handle,
+        visible,
+        folders: room.folders,
+        changes,
+        bases: parts.flatMap(({ bases }) => bases),
+        queued: queuedDocuments(room.queue),
+        writtenBy: ask.writtenBy,
+        unmodeled: !room.modelled,
+        validate: room.validate,
+    };
+    const rewritten = requeue.withdrawn.size > 0;
+    if (rewritten) {
+        const whole = await batching({
+            ...input,
+            providerLimits: [],
+            queued: new Set([...input.queued, ...requeue.queued]),
+        });
+        if (whole.kind === 'refused')
+            return whole;
+    }
+    const own = !rewritten
+        ? await batching(input)
+        : requeue.changes.length === 0
+            ? null
+            : await batching({
+                ...input,
+                visible: await stepped(room.replay(requeue.queue)),
+                changes: requeue.changes,
+                queued: queuedDocuments(requeue.queue),
+            });
+    if (own?.kind === 'refused')
+        return own;
+    const queue = own === null ? requeue.queue : [...requeue.queue, own.batch];
+    const saved = new Map();
+    for (const [origin, rebuilt] of requeue.withdrawn) {
+        if (rebuilt === null)
+            continue;
+        const limited = await stepped(limiting(queue, rebuilt, ask.providerLimits, room.replay));
+        if (limited !== null)
+            return { kind: 'refused', refusal: limited };
+        saved.set(rebuilt.id, withdrawnDrafts(room.saved.get(origin) ?? [], changes));
+    }
+    if (own !== null) {
+        saved.set(own.batch.id, ask.saved.filter(({ path }) => !requeue.queued.has(path)));
+    }
+    const carried = carriedDrafts(ask, room, room);
+    return {
+        kind: 'planned',
+        identifier: own?.batch.id ??
+            [...requeue.withdrawn].map(([origin, rebuilt]) => rebuilt?.id ?? origin).at(-1),
+        rooms: [
+            {
+                locator: record.locator,
+                queue,
+                saved,
+                consumed: [...ask.consumed, ...carried.keys()],
+                carried: [...carried.values()],
+            },
+        ],
+    };
+}
+export function destination(locator, saved) {
+    const into = saved.find(({ parts }) => parts.move?.room !== undefined && parts.move.room !== locator);
+    return into?.parts.move?.room ?? null;
+}
+export function planSave(ask, room, into) {
+    return into === undefined ? plannedWithin(ask, room) : plannedMove(ask, room, into);
 }