Elamur Groupantsmlab-builtins-files-transfer
The groupant beside mlab/src/builtins/files.rs in the Mova repository: what the code computes, what it never does, how to go back from its outputs, its invariants, cost and checks.
Facts
Implementation material. A Mova code model describes this code at one source revision: partial models, finite checks and their stated scope. It is not a reviewed general exposition, and its labels are shown as written, never raised.
Components
| component | label | where |
|---|---|---|
| approximant | partial | approximant |
| ast | partial | ../syntax.json |
| cost | symbolic source derived | invariant |
| descriptant | present | descriptant |
| invariant | partial | invariant |
| tests | executed bounded checks | tests |
Obernants
The typed relations around the forward model: the behaviour complement (what the code never does), the reverse reconstruction (every input compatible with an output) and specialised views.
| id | type | label | where |
|---|---|---|---|
behavior_complement | behavior_complement | partial source derived model | behavior_complement |
reverse_reconstruction | reverse_reconstruction | partial source derived model | reverse_reconstruction |
state_invariant | state_invariant | partial source derived model | state_invariant |
failure_precedence | failure_precedence | partial source derived model | failure_precedence |
representation_transport | representation_transport | partial source derived model | representation_transport |
resource_cost | resource_cost | partial source derived model | resource_cost |
Model text
descriptant
mlab-builtins-files-transfer
Destination directory redirects to child(dst,base_name(src)); fname movefile selects rename, other branch rejects source directory then copies bytes.
Modeling epoch — 2026-10-31
Prospective source read preceded edits. Bounded synthetic checks and selected existing safe tests exercise actual code; paired debug/release results and compiled negative-control assertions are retained externally. Frozen scenario, corpus, external measurement, full-school and training effects are unexecuted. Partial lexical syntax supplies no macro-expanded or semantic proof.
approximant
Forward relation
Destination directory redirects to child(dst,base_name(src)); fname movefile selects rename, other branch rejects source directory then copies bytes.
Domain
Valid Rust value/storage invariants and available bounded resources; exact branch and effect observations only.
Executable approximant gap
No useful percentage-error surrogate is established for these categorical, textual or effectful observations. Supported future caps are 1%, 2%, 5%, 10%; no executable approximation or production substitution is claimed.
invariant
Invariants and costs
Both source and destination strings are extracted before destination stat; failure message carries operation and normalized destination.
Failure ordering
Destination stat errors are treated as non-directory; copy source stat errors proceed to copy and let it diagnose.
Cost
Path handling O(path bytes), transfer cost provider-dependent; no streaming or atomicity guarantee introduced.
models
Typed models — mlab-builtins-files-transfer
Source-derived partial relations; finite checks do not prove universality.
behavior_complement
copyfile source directory excludes recursive directory copy. Failed rename with n=0 excludes a returned false status.
reverse_reconstruction
A successful destination state admits multiple source roots sharing basename; copy preserves source while rename antecedents depend on provider semantics.
state_invariant
Both source and destination strings are extracted before destination stat; failure message carries operation and normalized destination.
failure_precedence
Destination stat errors are treated as non-directory; copy source stat errors proceed to copy and let it diagnose.
representation_transport
Output shape is zero on successful n=0 or boolean plus optional message; transfer destination includes basename only for known directories.
resource_cost
Path handling O(path bytes), transfer cost provider-dependent; no streaming or atomicity guarantee introduced.
tests
Evidence and limitations
Parent source checks: builtins::files::wave30_tests::status_and_partial_delete. The fragment's actual statements lie in the recorded byte range; parent checks need not exercise every branch in this fragment. See ../tests.md for source-level control and limitations.
AST projection generated twice to fresh files and compared byte-for-byte. Runtime evidence is finite and does not establish every branch, allocation failure, backend implementation or effect path. No optimization or speed claim.
This page in Markdown → https://md.groupants.elamur.ai/free/en/mova/mlab/src/builtins/files.rs.groupant/transfer.groupant/