@agentshouse/mdruntime 0.1.0-cd0f0e6405606 → 0.1.0-cd26b960b7262

package/dist/save.js

@@ -1,12 +1,13 @@
 import { definitionOf } from './model.js';
-import { apply, ATTACHMENT, links, parse, pointerSegments, references, relative, relativize, retarget, serialize, target, } from '@agentshouse/mdmodel';
-import { immutable, queuedFile, departure, } from './change.js';
-import { available, changedCleanly, collectionOf, documentsOf, governing, referring, validateCollection, } from './collection.js';
+import { apply, ARRAY_INDEX, ATTACHMENT, links, parse, pointerSegments, references, relative, relativize, retarget, roomReferences, serialize, target, } from '@agentshouse/mdmodel';
+import { immutable, leaving, queuedFile, departure, } from './change.js';
+import { collectionOf, documentsOf, governing, } from './collection.js';
 import { changeBatchIdentity } from './identity.js';
-import { overlay } from './overlay.js';
-import { covered, normalize } from './paths.js';
-import { differences } from './shared.js';
-import { ROW_WEIGHT, stepped } from './turn.js';
+import { overlaying } from './overlay.js';
+import { ancestors, authoredAt, covered, normalize } from './paths.js';
+import { entriesIn, sorting } from './shared.js';
+import { paced, ROW_WEIGHT, stepped } from './turn.js';
+import { validatedCollection } from './validation.js';
 function refuse(code, file, location) {
     return {
         kind: 'refused',
@@ -19,9 +20,6 @@ function refuse(code, file, location) {
     };
 }
 function repointed(document, definition, from, to, moves, settled) {
-    const parsed = parse(document.content, from);
-    if (!parsed.ok)
-        return [];
     const changes = [];
     const names = new Set();
     for (const { pointer, value } of definition === undefined
@@ -44,7 +42,7 @@ function repointed(document, definition, from, to, moves, settled) {
     }
     if (changes.length === 0)
         return [];
-    const applied = apply(parsed.document, changes);
+    const applied = apply(document, changes);
     if (applied.outcome !== 'applied')
         return [];
     const next = applied.document;
@@ -116,7 +114,16 @@ function relinks(path, moved, before, moves) {
 function partKey(change) {
     return change.kind === 'section' ? `section ${change.name}` : change.kind;
 }
-function rewrites(changes, visible) {
+const NAMES_A_SKIP_TESTS = 64;
+const ENCODED = /[%&\\]/u;
+function movedNames(moves) {
+    const names = new Set([...moves.keys()].map((path) => path.slice(path.lastIndexOf('/') + 1)));
+    return names.size > NAMES_A_SKIP_TESTS ? null : [...names];
+}
+function cannotLink(text, names) {
+    return names !== null && !ENCODED.test(text) && !names.some((name) => text.includes(name));
+}
+function* rewrites(changes, visible) {
     const moves = new Map();
     const settled = new Set();
     const parts = new Map();
@@ -141,16 +148,20 @@ function rewrites(changes, visible) {
     }
     if (moves.size === 0)
         return { kind: 'changes', changes };
+    const names = movedNames(moves);
     const merged = [...changes];
     const added = [];
-    for (const [path, document] of documentsOf(visible.collection)) {
+    for (const [path, document] of yield* documentsOf(visible.collection)) {
         if (settled.has(path))
             continue;
         const moved = moves.get(path) ?? path;
         const definition = definitionOf(governing(visible.collection.composition, path), document.type);
-        added.push(...repointed(document, definition, path, moved, moves, settled));
+        const repointing = repointed(document, definition, path, moved, moves, settled);
+        added.push(...repointing);
         const own = parts.get(path) ?? [];
-        const relinked = relinks(path, moved, edited(document, own.map((index) => merged[index])), moves);
+        const relinked = moved === path && own.length === 0 && cannotLink(document.content, names)
+            ? { kind: 'changes', changes: [] }
+            : relinks(path, moved, edited(document, own.map((index) => merged[index])), moves);
         if (relinked.kind === 'refused')
             return relinked;
         const keyed = new Map();
@@ -175,29 +186,97 @@ function rewrites(changes, visible) {
             else
                 merged[index] = change;
         }
+        const text = visible.collection.text[path].length;
+        const rewritten = repointing.length > 0 || relinked.changes.length > 0;
+        yield ROW_WEIGHT + text + (rewritten ? text : 0);
     }
     return {
         kind: 'changes',
         changes: [...added, ...merged.filter((change) => change !== null)],
     };
 }
-function anticipated(changes, preconditions, rewritten, visible) {
+function* anticipated(changes, preconditions, rewritten, visible) {
     const given = new Set(changes);
     const derived = rewritten.filter((change) => !given.has(change));
     return {
         changes: rewritten,
-        preconditions: [...preconditionsOf(derived, visible, []), ...preconditions],
+        preconditions: [...(yield* preconditionsOf(derived, visible, [])), ...preconditions],
     };
 }
-export function providerRewritten(batch, visible) {
-    const rewritten = rewrites(batch.changes, visible);
+export function* providerRewritten(batch, visible) {
+    const rewritten = yield* rewrites(batch.changes, visible);
     if (rewritten.kind === 'refused')
         return batch;
     return {
         ...batch,
-        ...anticipated(batch.changes, batch.preconditions, rewritten.changes, visible),
+        ...(yield* anticipated(batch.changes, batch.preconditions, rewritten.changes, visible)),
     };
 }
+function crossed(document, definition, path, to) {
+    const changes = [];
+    for (const link of links(document, path)) {
+        const written = to(link.target, link.href);
+        if (written !== undefined)
+            changes.push({ kind: 'link', href: link.href, to: written });
+    }
+    for (const { pointer, value } of definition === undefined
+        ? []
+        : references(document, definition)) {
+        const named = target(path, value);
+        const written = named === null ? undefined : to(named, value);
+        if (written !== undefined) {
+            changes.push({ kind: 'reference', pointer, value: retarget(value, written), prior: value });
+        }
+    }
+    return changes;
+}
+function rewritten(path, document, changes) {
+    if (changes.length === 0)
+        return [];
+    const applied = apply(document, changes);
+    if (applied.outcome !== 'applied')
+        return [];
+    const after = applied.document;
+    if (document.type === undefined)
+        return [{ kind: 'replace', path, content: serialize(after) }];
+    const names = new Set(changes.flatMap((change) => change.kind === 'reference' ? [pointerSegments(change.pointer)[0] ?? ''] : []));
+    return [
+        ...[...names].map((name) => ({ kind: 'field', path, name, value: after.fields[name] })),
+        ...bodies(path, document, after),
+    ];
+}
+function roomPathOf(handle, path) {
+    return `/rooms/${handle}/${path}`;
+}
+export function* leavingRewritten(batch, visible) {
+    const between = batch.between;
+    if (between === undefined)
+        return batch;
+    const moved = new Map(between.moves.map(({ path, to }) => [path, roomPathOf(between.destination.handle, to)]));
+    const derived = [];
+    for (const [path, document] of yield* documentsOf(visible.collection)) {
+        if (moved.has(path))
+            continue;
+        const definition = definitionOf(governing(visible.collection.composition, path), document.type);
+        derived.push(...rewritten(path, document, crossed(document, definition, path, (named) => moved.get(named))));
+        yield ROW_WEIGHT + visible.collection.text[path].length;
+    }
+    if (derived.length === 0)
+        return batch;
+    return {
+        ...batch,
+        changes: [...derived, ...batch.changes],
+        preconditions: [...(yield* preconditionsOf(derived, visible, [])), ...batch.preconditions],
+    };
+}
+export function rewriting(batch, locator) {
+    return leaving(batch, locator) || batch.changes.some((change) => change.kind === 'move');
+}
+export function* effectiveIn(batch, locator, visible) {
+    return leaving(batch, locator)
+        ? yield* leavingRewritten(batch, visible)
+        : yield* providerRewritten(batch, visible);
+}
 function* incoming(collection, removed, candidates) {
     const found = new Map();
     const note = (target, file) => {
@@ -208,13 +287,19 @@ function* incoming(collection, removed, candidates) {
         found.set(target, referrers);
     };
     const read = function* (paths) {
-        for (const path of [...new Set(paths)].sort()) {
+        const seen = new Set();
+        for (const path of paths) {
+            if (seen.has(path))
+                continue;
+            seen.add(path);
             const document = collection.document(path);
             if (document !== undefined)
                 yield [path, document];
         }
     };
-    for (const [path, document] of candidates === null ? documentsOf(collection) : read(candidates)) {
+    for (const [path, document] of candidates === null
+        ? yield* documentsOf(collection)
+        : read(candidates)) {
         const definition = definitionOf(governing(collection.composition, path), document.type);
         for (const { value, to } of definition === undefined ? [] : references(document, definition)) {
             if (to.includes(ATTACHMENT))
@@ -225,7 +310,7 @@ function* incoming(collection, removed, candidates) {
         }
         yield ROW_WEIGHT + collection.text[path].length;
     }
-    const [first] = [...found.keys()].sort();
+    const [first] = yield* sorting(found.keys());
     if (first === undefined)
         return null;
     const every = new Set();
@@ -238,14 +323,16 @@ function* incoming(collection, removed, candidates) {
             code: 'referenced-missing-file',
             retryable: false,
             file: first,
-            referrers: [...every].sort(),
+            referrers: yield* sorting(every),
         },
     };
 }
 function affected(change) {
     return change.kind === 'move' ? [change.path, change.to] : [change.path];
 }
-function guard(changes, input) {
+const WRITE = ['write'];
+const MOVE_OUT = ['write', 'erase'];
+function guard(changes, input, removing) {
     const overridden = new Map();
     const existing = {
         has: (path) => overridden.get(path) ??
@@ -253,21 +340,26 @@ function guard(changes, input) {
         add: (path) => void overridden.set(path, true),
         delete: (path) => void overridden.set(path, false),
     };
+    const occupied = (path) => input.folders.has(path) ? path : (ancestors(path).find((one) => existing.has(one)) ?? null);
     for (const [index, change] of changes.entries()) {
         for (const path of affected(change)) {
             const normalized = normalize(path);
             if (normalized === null || normalized === '')
                 return refuse('room-root', path);
-            if (covered(input.providerOwnedPaths, normalized)) {
+            if (covered(input.providerOwnedPaths, normalized) ||
+                (input.authoredPaths !== undefined && !authoredAt(input.authoredPaths, normalized))) {
                 return refuse('provider-owned-path', normalized);
             }
-            const operation = change.kind === 'remove' ? 'delete' : 'write';
-            if (!input.local && !covered(input.operations[operation], normalized))
-                return refuse(`${operation}-grant`, normalized);
+            if (!input.pathRule(normalized))
+                return refuse('invalid-path', normalized);
+            for (const operation of change.kind === 'remove' ? removing : WRITE)
+                if (!input.local && !covered(input.operations[operation], normalized))
+                    return refuse(`${operation}-grant`, normalized);
         }
-        if (change.kind === 'create') {
-            if (existing.has(change.path))
-                return refuse('path-collision', change.path);
+        if (change.kind === 'create' || change.kind === 'arrival') {
+            const taken = existing.has(change.path) ? change.path : occupied(change.path);
+            if (taken !== null)
+                return refuse('path-collision', taken);
             existing.add(change.path);
             continue;
         }
@@ -277,6 +369,9 @@ function guard(changes, input) {
                     input.bases.some((base) => base.kind === 'absent' && base.path === change.path))) {
                 return refuse('path-collision', change.path);
             }
+            const taken = occupied(change.path);
+            if (taken !== null)
+                return refuse('path-collision', taken);
             if (!input.local &&
                 existing.has(change.path) &&
                 input.visible.revisions[departure(changes, index)] === undefined) {
@@ -288,8 +383,9 @@ function guard(changes, input) {
         if (change.kind === 'move') {
             if (!existing.has(change.path))
                 return refuse('path-absent', change.path);
-            if (existing.has(change.to))
-                return refuse('path-collision', change.to);
+            const taken = existing.has(change.to) ? change.to : occupied(change.to);
+            if (taken !== null)
+                return refuse('path-collision', taken);
             if (unrevised(input, change.path)) {
                 return refuse('unknown-revision', change.path);
             }
@@ -325,7 +421,7 @@ export function queuedDocuments(queue) {
     const paths = new Set();
     for (const batch of queue) {
         for (const change of batch.changes) {
-            if (change.kind === 'binary')
+            if (change.kind === 'binary' || (change.kind === 'arrival' && !('content' in change)))
                 continue;
             if (change.kind === 'remove')
                 paths.delete(change.path);
@@ -354,7 +450,7 @@ function sameTarget(precondition, change) {
     return ((precondition.kind !== 'field' && precondition.kind !== 'section') ||
         ((change.kind === 'field' || change.kind === 'section') && precondition.name === change.name));
 }
-function preconditionsOf(changes, visible, bases) {
+function* preconditionsOf(changes, visible, bases) {
     const preconditions = [];
     const seen = new Set();
     const add = (precondition) => {
@@ -365,6 +461,7 @@ function preconditionsOf(changes, visible, bases) {
         preconditions.push(precondition);
     };
     for (const change of changes) {
+        yield ROW_WEIGHT;
         if (change.kind === 'field' || change.kind === 'section' || change.kind === 'preamble') {
             const based = bases.find((base) => sameTarget(base, change));
             if (based !== undefined) {
@@ -412,10 +509,13 @@ function preconditionsOf(changes, visible, bases) {
 function depth(path) {
     return path.split('/').length;
 }
-function exceeded(limits, changes, effective, resulting) {
+function* exceeding(limits, changes, effective, resulting) {
     const written = effective.map((change) => (change.kind === 'move' ? change.to : change.path));
     const created = changes
-        .filter((change) => change.kind === 'create' || change.kind === 'move' || change.kind === 'binary')
+        .filter((change) => change.kind === 'create' ||
+        change.kind === 'move' ||
+        change.kind === 'binary' ||
+        change.kind === 'arrival')
         .map((change) => (change.kind === 'move' ? change.to : change.path));
     for (const limit of limits) {
         const value = limit.value;
@@ -429,9 +529,13 @@ function exceeded(limits, changes, effective, resulting) {
             return refuse('provider-limit', undefined, limit.name);
         }
         if (limit.name === 'document-size') {
-            const large = written.find((path) => new TextEncoder().encode(resulting.documents[path] ?? '').byteLength > value);
-            if (large !== undefined)
-                return refuse('provider-limit', large, limit.name);
+            for (const path of written) {
+                const text = resulting.documents[path] ?? '';
+                if (new TextEncoder().encode(text).byteLength > value) {
+                    return refuse('provider-limit', path, limit.name);
+                }
+                yield ROW_WEIGHT + text.length;
+            }
         }
         if (limit.name === 'path-length') {
             const long = created.find((path) => path.length > value);
@@ -497,18 +601,6 @@ function relativeChanges(input) {
         return { ...change, fields, sections };
     });
 }
-function* unmodeledType(collection, composition) {
-    if (available(composition))
-        return false;
-    for (const [path, document] of documentsOf(collection)) {
-        if (document.type !== undefined &&
-            document.type !== 'any' &&
-            governing(composition, path).status === 'unavailable')
-            return true;
-        yield ROW_WEIGHT + collection.text[path].length;
-    }
-    return false;
-}
 function unqueueable(file) {
     return { kind: 'refused', refusal: { code: 'unknown-revision', retryable: false, file } };
 }
@@ -611,8 +703,8 @@ function folded(changes, change, appending, deferred) {
     changes.push(change);
     return 'appended';
 }
-function relinked(batch, move, before, after, appending) {
-    const derived = rewrites([move], after);
+function* relinked(batch, move, before, after, appending) {
+    const derived = yield* rewrites([move], after);
     if (derived.kind === 'refused')
         return derived;
     const changes = [...batch.changes];
@@ -639,6 +731,7 @@ function relinked(batch, move, before, after, appending) {
     if (!changed)
         return { kind: 'relinked', batch };
     const held = new Set(batch.preconditions.map(identity));
+    const added = yield* preconditionsOf(appended, before, []);
     return {
         kind: 'relinked',
         batch: immutable({
@@ -647,7 +740,7 @@ function relinked(batch, move, before, after, appending) {
             changes,
             preconditions: [
                 ...batch.preconditions,
-                ...preconditionsOf(appended, before, []).filter((precondition) => !held.has(identity(precondition))),
+                ...added.filter((precondition) => !held.has(identity(precondition))),
             ],
         }),
     };
@@ -693,7 +786,7 @@ function withdrawnFile(batch, change, at) {
     ];
     return immutable({ ...batch, id: changeBatchIdentity(), changes, preconditions });
 }
-export function requeued(queue, changes, visible, changeable, state) {
+export function* requeuing(queue, changes, visible, changeable, state) {
     const next = [...queue];
     const origins = new Map();
     const withdrawn = new Map();
@@ -716,19 +809,19 @@ export function requeued(queue, changes, visible, changeable, state) {
             return unqueueable(change.path);
         const following = next.slice(index);
         const rebuilt = [];
-        let before = change.kind === 'move' ? state(next.slice(0, index)) : visible;
+        let before = change.kind === 'move' ? yield* state(next.slice(0, index)) : visible;
         for (const [offset, batch] of following.entries()) {
             let current = batch;
             if (change.kind === 'move') {
-                const after = state(next.slice(0, index + offset + 1));
+                const after = yield* state(next.slice(0, index + offset + 1));
                 const appending = offset === 0 && created(batch, queuedFile(batch, change.path, held.localId));
-                const relinking = relinked(batch, change, before, after, appending);
+                const relinking = yield* relinked(batch, change, before, after, appending);
                 if (relinking.kind === 'refused')
                     return relinking;
                 current = relinking.batch;
                 before = after;
             }
-            if (current !== batch && !open(batch))
+            if (current !== batch && (!open(batch) || batch.between !== undefined))
                 return unqueueable(change.path);
             rebuilt.push(offset === 0
                 ? withdrawnFile(current, change, queuedFile(current, change.path, held.localId))
@@ -798,60 +891,66 @@ export function joined(queue, owner, extra) {
     });
     return { kind: 'joined', batch, queue: queue.map((item) => (item === owner ? batch : item)) };
 }
-export function limitedIn(queue, batch, limits, state) {
+export function* limiting(queue, batch, limits, state) {
     const at = queue.indexOf(batch);
-    const limited = exceeded(limits, batch.changes, providerRewritten(batch, state(queue.slice(0, at))).changes, state(queue.slice(0, at + 1)));
-    return limited?.kind === 'refused' ? limited.refusal : null;
+    const rewritten = yield* providerRewritten(batch, yield* state(queue.slice(0, at)));
+    const limited = yield* exceeding(limits, batch.changes, rewritten.changes, yield* state(queue.slice(0, at + 1)));
+    return limited?.refusal ?? null;
 }
-function* batching(input) {
-    const changes = relativeChanges(input);
-    const structural = changes.find((change) => change.kind === 'move' || change.kind === 'remove');
-    if (structural !== undefined &&
-        (yield* unmodeledType(input.visible.collection, input.composition)))
-        return refuse('model-unavailable', structural.path);
-    if (changes.length === 0)
-        return refuse('no-change');
-    const rewritten = rewrites(changes, input.visible);
-    if (rewritten.kind === 'refused')
-        return rewritten;
-    const refusal = guard(changes, input);
-    if (refusal !== null)
-        return refusal;
-    const preconditions = preconditionsOf(changes, input.visible, input.bases);
-    const predicted = anticipated(changes, preconditions, rewritten.changes, input.visible);
-    const resulting = overlay(input.visible, [
-        { id: '', baseRoomVersion: input.baseRoomVersion, ...predicted },
-    ]);
-    const clean = input.clean !== undefined && available(input.composition) ? input.clean : null;
-    const removed = new Set(changes.filter((change) => change.kind === 'remove').map((change) => change.path));
+function typedText(content) {
+    if (content === undefined)
+        return false;
+    const parsed = parse(content);
+    return parsed.ok && parsed.document.type !== undefined && parsed.document.type !== 'any';
+}
+function touchedLibrary(resulting, touched, composition) {
+    const entries = touched
+        .flatMap((path) => {
+        const content = resulting.documents[path];
+        const binary = resulting.binaries[path] !== undefined;
+        return content === undefined && !binary ? [] : [{ path, content: content ?? null }];
+    })
+        .sort((left, right) => (left.path < right.path ? -1 : left.path > right.path ? 1 : 0));
+    const contents = new Map(entries.map(({ path, content }) => [path, content]));
+    const binaries = new Set(Array.from(entriesIn(resulting.binaries), ([path]) => path));
+    return validatedCollection(() => Promise.resolve({ entries, next: null }), async (paths) => {
+        const known = new Map();
+        const pace = paced();
+        for (const path of paths) {
+            const content = contents.get(path);
+            if (binaries.has(path))
+                known.set(path, { type: undefined, binary: true });
+            else if (content !== undefined && content !== null) {
+                const read = parse(content, path);
+                if (read.ok)
+                    known.set(path, { type: read.document.type ?? 'any', binary: false });
+                await pace(content.length + ROW_WEIGHT);
+            }
+        }
+        return known;
+    }, composition);
+}
+async function judging(visible, resulting, composition, validate, removed, touched) {
     if (removed.size > 0) {
-        const referrers = clean === null ? null : referring(clean, input.composition, removed);
-        const referenced = yield* incoming(collectionOf(resulting.documents, input.composition), removed, clean === null || referrers === null
-            ? null
-            : [...referrers, ...(yield* differences(clean.text, resulting.documents))]);
+        const referenced = await stepped(incoming(collectionOf(resulting.documents, composition), removed, null));
         if (referenced !== null)
             return referenced;
     }
-    const typed = (content) => {
-        if (content === undefined)
-            return false;
-        const parsed = parse(content);
-        return parsed.ok && parsed.document.type !== undefined && parsed.document.type !== 'any';
-    };
-    const touched = [...new Set(predicted.changes.flatMap(affected))];
-    const typedPaths = touched.filter((path) => typed(input.visible.documents[path]) || typed(resulting.documents[path]));
-    const needsModel = typedPaths.length > 0;
-    const withoutModel = typedPaths.find((path) => governing(input.composition, path).status === 'unavailable');
+    const typedPaths = [];
+    const pace = paced();
+    for (const path of touched) {
+        const before = visible.documents[path];
+        const after = resulting.documents[path];
+        if (typedText(before) || typedText(after))
+            typedPaths.push(path);
+        await pace((before?.length ?? 0) + (after?.length ?? 0) + ROW_WEIGHT);
+    }
+    const withoutModel = typedPaths.find((path) => governing(composition, path).status === 'unavailable');
     if (withoutModel !== undefined)
         return refuse('model-unavailable', withoutModel);
-    const verdict = clean !== null &&
-        (yield* changedCleanly({ text: resulting.documents, binaries: resulting.binaries }, clean, input.composition))
-        ? { verdict: 'accept' }
-        : yield* validateCollection(needsModel
-            ? resulting.documents
-            : Object.fromEntries(touched.flatMap((path) => resulting.documents[path] === undefined
-                ? []
-                : [[path, resulting.documents[path]]])), Object.keys(resulting.binaries), input.composition);
+    const verdict = typedPaths.length > 0
+        ? await validate(resulting, touched)
+        : await touchedLibrary(resulting, touched, composition);
     if (verdict.verdict === 'refuse') {
         return {
             kind: 'refused',
@@ -864,12 +963,92 @@ function* batching(input) {
             },
         };
     }
-    const limited = exceeded(input.providerLimits, changes, predicted.changes, resulting);
+    return {
+        kind: 'judged',
+        validated: typedPaths
+            .map((path) => governing(composition, path))
+            .find((model) => model.status !== 'unavailable'),
+    };
+}
+function placed(reference) {
+    const key = roomPathOf(reference.handle, reference.path);
+    if (reference.kind === 'link')
+        return `link ${key}`;
+    if (reference.kind === 'item')
+        return `section ${reference.section} ${key}`;
+    const pointer = reference.pointer
+        .split('/')
+        .map((segment) => (ARRAY_INDEX.test(segment) ? '-' : segment))
+        .join('/');
+    return `field ${pointer} ${key}`;
+}
+function roomReferencesIn(path, content, composition) {
+    if (content === undefined)
+        return [];
+    const parsed = parse(content, path);
+    if (!parsed.ok)
+        return [];
+    return roomReferences(parsed.document, definitionOf(governing(composition, path), parsed.document.type));
+}
+function* admittedRooms(changes, visible, resulting, composition) {
+    const from = new Map();
+    for (const [index, change] of changes.entries()) {
+        if (change.kind === 'move')
+            from.set(change.to, departure(changes, index));
+    }
+    for (const path of [...new Set(changes.flatMap(affected))].sort()) {
+        const now = resulting.documents[path];
+        if (now === undefined)
+            continue;
+        const held = new Set(roomReferencesIn(path, visible.documents[from.get(path) ?? path], composition).map(placed));
+        for (const reference of roomReferencesIn(path, now, composition)) {
+            if (reference.kind === 'link' || reference.crossRoom === true)
+                continue;
+            if (held.has(placed(reference)))
+                continue;
+            return refuse('unresolved-reference', path, reference.kind === 'field' ? reference.pointer : reference.section);
+        }
+        yield ROW_WEIGHT + now.length;
+    }
+    return null;
+}
+function validationOf(validated) {
+    return validated === undefined
+        ? {}
+        : {
+            validation: {
+                identity: validated.snapshot.identity,
+                version: validated.snapshot.version,
+                source: validated.status,
+            },
+        };
+}
+async function batching(input) {
+    const changes = relativeChanges(input);
+    const structural = changes.find((change) => change.kind === 'move' || change.kind === 'remove');
+    if (structural !== undefined && input.unmodeled) {
+        return refuse('model-unavailable', structural.path);
+    }
+    if (changes.length === 0)
+        return refuse('no-change');
+    const rewritten = await stepped(rewrites(changes, input.visible));
+    if (rewritten.kind === 'refused')
+        return rewritten;
+    const refusal = guard(changes, input, WRITE);
+    if (refusal !== null)
+        return refusal;
+    const preconditions = await stepped(preconditionsOf(changes, input.visible, input.bases));
+    const predicted = await stepped(anticipated(changes, preconditions, rewritten.changes, input.visible));
+    const resulting = await stepped(overlaying(input.visible, [{ id: '', baseRoomVersion: input.baseRoomVersion, ...predicted }]));
+    const judged = await judging(input.visible, resulting, input.composition, input.validate, new Set(changes.filter((change) => change.kind === 'remove').map((change) => change.path)), [...new Set(predicted.changes.flatMap(affected))]);
+    if (judged.kind === 'refused')
+        return judged;
+    const crossing = await stepped(admittedRooms(changes, input.visible, resulting, input.composition));
+    if (crossing !== null)
+        return crossing;
+    const limited = await stepped(exceeding(input.providerLimits, changes, predicted.changes, resulting));
     if (limited !== null)
         return limited;
-    const validated = typedPaths
-        .map((path) => governing(input.composition, path))
-        .find((model) => model.status !== 'unavailable');
     return {
         kind: 'batch',
         batch: immutable({
@@ -878,18 +1057,125 @@ function* batching(input) {
             changes,
             preconditions,
             ...(input.writtenBy === undefined ? {} : { writtenBy: input.writtenBy }),
-            ...(validated === undefined
-                ? {}
-                : {
-                    validation: {
-                        identity: validated.snapshot.identity,
-                        version: validated.snapshot.version,
-                        source: validated.status,
-                    },
-                }),
+            ...validationOf(judged.validated),
         }),
     };
 }
+export const MOVE_DOCUMENTS = 'move-documents';
+function heldAt(visible, path) {
+    return visible.documents[path] !== undefined || visible.binaries[path] !== undefined;
+}
+function arrivingText(path, to, source, moved) {
+    const content = source.visible.documents[path];
+    const document = source.visible.collection.document(path);
+    if (document === undefined)
+        return content;
+    const definition = definitionOf(governing(source.composition, path), document.type);
+    const changes = crossed(document, definition, path, (named, href) => {
+        const at = moved.get(named);
+        if (at !== undefined)
+            return target(to, href) === at ? undefined : relative(to, at);
+        return heldAt(source.visible, named) ? roomPathOf(source.handle, named) : undefined;
+    });
+    if (changes.length === 0)
+        return content;
+    const applied = apply(document, changes);
+    return applied.outcome === 'applied' ? serialize(applied.document) : content;
+}
+function arrivalOf({ path, to }, source, moved) {
+    const { documents, revisions, fileIds, created, changes, binaries } = source.visible;
+    const kept = {
+        ...(fileIds[path] === undefined ? {} : { fileId: fileIds[path] }),
+        ...(created[path] === undefined ? {} : { created: created[path] }),
+        ...(changes[path] === undefined ? {} : { change: changes[path] }),
+    };
+    const heads = {
+        ...(revisions[path] === undefined ? {} : { revision: revisions[path] }),
+        ...kept,
+    };
+    const binary = binaries[path];
+    if (binary?.state === 'accepted') {
+        const { byteLength, mediaType, sha256 } = binary;
+        return {
+            kind: 'arrival',
+            path: to,
+            binary: { byteLength, mediaType, sha256 },
+            ...heads,
+        };
+    }
+    const content = arrivingText(path, to, source, moved);
+    return {
+        kind: 'arrival',
+        path: to,
+        content,
+        ...(content === documents[path] ? heads : kept),
+    };
+}
+async function moving(input) {
+    const { source, destination, moves, pathRule } = input;
+    const removals = moves.map(({ path }) => ({ kind: 'remove', path }));
+    const leaves = guard(removals, { ...source, local: input.local, bases: [], pathRule }, MOVE_OUT);
+    if (leaves !== null)
+        return leaves;
+    const uploading = moves.find(({ path }) => source.visible.binaries[path]?.state === 'pending');
+    if (uploading !== undefined)
+        return refuse('unknown-revision', uploading.path);
+    const moved = new Map(moves.map(({ path, to }) => [path, to]));
+    const arrivals = moves.map((move) => arrivalOf(move, source, moved));
+    const arrives = guard(arrivals, { ...destination, local: input.local, bases: [], pathRule }, WRITE);
+    if (arrives !== null)
+        return arrives;
+    const bound = input.providerLimits.find((limit) => limit.name === MOVE_DOCUMENTS)?.value;
+    if (typeof bound === 'number' && moves.length > bound) {
+        return refuse('provider-limit', undefined, MOVE_DOCUMENTS);
+    }
+    if (source.unmodeled)
+        return refuse('model-unavailable', moves[0].path);
+    const id = changeBatchIdentity();
+    const between = {
+        source: { room: source.room, baseRoomVersion: source.baseRoomVersion },
+        destination: {
+            room: destination.room,
+            baseRoomVersion: destination.baseRoomVersion,
+            handle: destination.handle,
+        },
+        moves,
+    };
+    const written = input.writtenBy === undefined ? {} : { writtenBy: input.writtenBy };
+    const leavingBatch = {
+        id,
+        baseRoomVersion: source.baseRoomVersion,
+        changes: removals,
+        preconditions: moves.map(({ path }) => existence(source.visible, path)),
+        ...written,
+        between,
+    };
+    const effective = await stepped(leavingRewritten(leavingBatch, source.visible));
+    const left = await stepped(overlaying(source.visible, [effective]));
+    const sourceJudged = await judging(source.visible, left, source.composition, source.validate, new Set(moves.map(({ path }) => path)), [...new Set(effective.changes.map((change) => change.path))]);
+    if (sourceJudged.kind === 'refused')
+        return sourceJudged;
+    const arrivingBatch = {
+        id,
+        baseRoomVersion: destination.baseRoomVersion,
+        changes: arrivals,
+        preconditions: moves.map(({ to }) => ({ kind: 'absent', path: to })),
+        ...written,
+        between,
+    };
+    const arrived = await stepped(overlaying(destination.visible, [arrivingBatch]));
+    const destinationJudged = await judging(destination.visible, arrived, destination.composition, destination.validate, new Set(), moves.map(({ to }) => to));
+    if (destinationJudged.kind === 'refused')
+        return destinationJudged;
+    const limited = (await stepped(exceeding(input.providerLimits, removals, effective.changes, left))) ??
+        (await stepped(exceeding(input.providerLimits, arrivals, arrivals, arrived)));
+    if (limited !== null)
+        return limited;
+    return { kind: 'moved', leaving: immutable(leavingBatch), arriving: immutable(arrivingBatch) };
+}
+export function buildMove(input) {
+    return moving(input);
+}
 export function buildBatch(input) {
-    return stepped(batching(input));
+    return batching(input);
 }