Index: html.t
==================================================================
--- html.t
+++ html.t
@@ -1,13 +1,13 @@
 -- vim: ft=terra
 local m={}
 local pstr = lib.mem.ptr(int8)
 
-terra m.sanitize(txt: pstr, quo: bool)
+terra m.sanitize(pool: &lib.mem.pool, txt: pstr, quo: bool)
 	if txt.ptr == nil then return pstr.null() end
 	if txt.ct == 0 then txt.ct = lib.str.sz(txt.ptr) end
-	var a: lib.str.acc a:init(txt.ct*1.3)
+	var a: lib.str.acc a:pool(pool,txt.ct*1.3)
 	for i=0,txt.ct do
 		if txt(i) == @'<' then a:lpush('&lt;')
 		elseif txt(i) == @'>' then a:lpush('&gt;')
 		elseif txt(i) == @'&' then a:lpush('&amp;')
 		elseif quo and txt(i) == @'"' then a:lpush('&quot;')
@@ -26,14 +26,14 @@
 	return arrayof(int8,
 		m.hexdgt(i / 0x10),
 		m.hexdgt(i % 0x10))
 end
 
-terra m.urlenc(txt: pstr, qparam: bool)
+terra m.urlenc(pool: &lib.mem.pool, txt: pstr, qparam: bool)
 	if txt.ptr == nil then return pstr.null() end
 	if txt.ct == 0 then txt.ct = lib.str.sz(txt.ptr) end
-	var a: lib.str.acc a:init(txt.ct*1.3)
+	var a: lib.str.acc a:pool(pool,txt.ct*1.3)
 	for i=0,txt.ct do
 		if txt(i) == @' ' then a:lpush('+')
 		elseif txt(i) == @'&' and not qparam then a:lpush('&amp;')
 		elseif (txt(i) < 0x2c or
 			(txt(i) > @';'  and txt(i) < @'@') or

Index: mem.t
==================================================================
--- mem.t
+++ mem.t
@@ -181,63 +181,109 @@
 struct m.pool {
  -- implements growable memory pools. EVERY THREAD MUST HAVE ITS OWN
 	storage: &opaque
 	cursor: &opaque
 	sz: intptr
+	debris: &m.pool
 }
 
 terra m.pool:cue(sz: intptr)
 	if self.storage == nil then
 		self.storage = m.heapa_raw(sz)
 		self.cursor = self.storage
 		self.sz = sz
 	else
 		if self.sz >= sz then return self end
-		var ofs = [&uint8](self.cursor) - [&uint8](self.storage)
-		self.storage = m.heapr_raw(self.storage, sz)
-		self.cursor = [&opaque]([&uint8](self.storage) + ofs)
-		self.sz = sz
+		var oldblock = @self
+		self:init(sz)
+		@self.debris = oldblock
 	end
 	return self
 end
 
 terra m.pool:init(sz: intptr)
-	self.storage = nil
-	self:cue(sz)
+	var b = m.heapa_raw(sz + sizeof(m.pool))
+	self.storage = [&uint8](b) + sizeof(m.pool)
+	self.cursor = self.storage
+	self.sz = sz
+	self.debris = [&m.pool](b)
+	self.debris.storage = nil
 	return self
 end
 
-terra m.pool:free()
-	m.heapf(self.storage)
+terra m.pool:free(): {}
+lib.io.fmt('DRAINING POOL %p\n',self.storage)
+	if self.storage == nil then return end
+	if self.debris.storage ~= nil then self.debris:free() end
+	m.heapf(self.debris) -- storage + debris field allocated in one block
 	self.storage = nil
 	self.cursor = nil
 	self.sz = 0
+	self.debris = nil
 end
 
 terra m.pool:clear()
+	if self.debris.storage ~= nil then self.debris:free() end
 	self.cursor = self.storage
 	return self
 end
 
 terra m.pool:alloc_bytes(sz: intptr): &opaque
 	var space = self.sz - ([&uint8](self.cursor) - [&uint8](self.storage))
-	if space < sz then self:cue(space + sz + 256) end
+lib.io.fmt('%p / %p @ allocating %llu bytes in %llu of space\n',self.storage,self.cursor,sz,space)
+	if space < sz then
+lib.dbg('reserving more space')
+		self:cue(space + sz + 256) end
 	var ptr = self.cursor
 	self.cursor = [&opaque]([&uint8](self.cursor) + sz)
 	return ptr
 end
 
-m.pool.methods.alloc = macro(function(self,ty,sz)
-	return `[ty](self:alloc_bytes(sizeof(ty) * sz))
+terra m.pool:realloc_bytes(oldptr: &opaque, oldsz: intptr, newsz: intptr): &opaque
+	var space = self.sz - ([&uint8](self.cursor) - [&uint8](self.storage))
+	var cur = [&uint8](self.cursor)
+	if cur - [&uint8](oldptr) == oldsz and newsz - oldsz < space then
+		lib.dbg('moving pool cursor')
+		cur = cur + (newsz - oldsz)
+		self.cursor = [&opaque](cur)
+		return oldptr
+	else
+		lib.dbg('copying pool object')
+		var new = self:alloc_bytes(newsz)
+		m.cpy(new, oldptr, oldsz)
+		return new
+	end
+end
+
+m.pool.methods.alloc = macro(function(self,typ,sz)
+ 	local ty = typ:astype()
+	return `[m.ptr(ty)] {
+		ptr = [&ty](self:alloc_bytes(sizeof([ty]) * [sz]));
+		ct = [sz];
+	}
+end)
+
+m.pool.methods.realloc = macro(function(self,ptr,oldsz,newsz)
+	local ty = self.tree.type.type
+	return `[m.ptr(ty)] {
+		ptr = [&ty](self:realloc_bytes(ptr,
+			sizeof(ty) * oldsz,
+			sizeof(ty) * newsz));
+		ct = sz;
+	}
 end)
 
 terra m.pool:frame() -- stack-style linear mgmt
 	return self.cursor
 end
 
 terra m.pool:reset(frame: &opaque)
-	self.cursor = frame
+	if frame >= self.storage and frame <= self.cursor then
+		self.cursor = frame
+	else -- trying to rewind into a previous block! not possible
+		self.cursor = self.storage
+	end
 	return self
 end
 
 
 return m

Index: render/compose.t
==================================================================
--- render/compose.t
+++ render/compose.t
@@ -14,11 +14,11 @@
 		form.content = lib.coalesce(edit.body, '')
 		form.acl = edit.acl
 	end
 	if acc ~= nil then form:append(acc) return end 
 
-	var cotxt = form:tostr() defer cotxt:free()
+	var cotxt = form:poolstr(&co.srv.pool) -- defer cotxt:free()
 
 	var doc = [lib.srv.convo.page] {
 		title = lib.str.plit 'compose';
 		body = cotxt;
 		class = lib.str.plit 'compose';

Index: render/conf.t
==================================================================
--- render/conf.t
+++ render/conf.t
@@ -30,28 +30,29 @@
 for i, m in ipairs(mappings) do
 	if lib.render.conf[m.render] then
 		invoker = quote
 			if path(1):cmp(lib.str.lit([m.url])) then
 				var body = [lib.render.conf[m.render]] (co, path)
-				var a: lib.str.acc a:init(body.ct+48)
+				var a = co:stra(body.ct+48)
 				if not body then
 					a:lpush(['<h1>' .. m.title .. ' :: error</h1>' ..
 						'<p>the requested resource is not available.</p>'])
 					panel = a:finalize()
 				else
 					a:lpush(['<h1>' .. m.title .. '</h1>']):ppush(body)
 					panel = a:finalize()
-					body:free()
+					--body:free()
 				end
 			else [invoker] end
 		end
 	end
 end
 
 local terra 
 render_conf([co], [path], notify: pstr)
-	var menu: lib.str.acc menu:init(64):lpush('<hr>') defer menu:free()
+	var menu = co:stra(256)
+	menu:lpush('<hr>') 
 
 	-- build menu
 	do var p = co.who.rights.powers
 		if p:affect_users() then menu:lpush '<a href="/conf/users">users</a>' end
 		if p.censor() then menu:lpush '<a href="/conf/censor">badthink alerts</a>' end
@@ -76,21 +77,21 @@
 	}
 
 	var pgt: pstr
 	if notify:ref() then
 		var fnpg: lib.str.acc
-		fnpg:compose('<div class="flashmsg">', notify, '</div>')
+		fnpg:pcompose(&co.srv.pool, '<div class="flashmsg">', notify, '</div>')
 		pg:append(&fnpg)
 		pgt = fnpg:finalize()
-	else pgt = pg:tostr() end
-	defer pgt:free()
+	else pgt = pg:poolstr(&co.srv.pool) end
+	--defer pgt:free()
 
 	co:stdpage([lib.srv.convo.page] {
 		title = 'configure'; body = pgt;
 		class = lib.str.plit 'conf';
 		cache = false;
 	})
 
-	if panel.ct ~= 0 then panel:free() end
+	--if panel.ct ~= 0 then panel:free() end
 end
 
 return render_conf

Index: render/conf/profile.t
==================================================================
--- render/conf/profile.t
+++ render/conf/profile.t
@@ -13,9 +13,9 @@
 		handle = cs(co.who.handle);
 		nym = cs(lib.coalesce(co.who.nym,''));
 		bio = cs(lib.coalesce(co.who.bio,''));
 		hue = lib.math.decstr(co.ui_hue, &hue[20]);
 	}
-	return c:tostr()
+	return c:poolstr(&co.srv.pool)
 end
 
 return render_conf_profile

Index: render/conf/sec.t
==================================================================
--- render/conf/sec.t
+++ render/conf/sec.t
@@ -11,11 +11,11 @@
 		lastreset = pstr {
 			ptr = &tstr[0], ct = lib.str.sz(&tstr[0])
 		}
 	}
 	
-	var a: lib.str.acc a:init(768) defer a:free()
+	var a = co:stra(768) -- defer a:free()
 
 	if co.srv.cfg.credmgd then
 		var new = co:pgetv('new')
 		if not new then
 			body:append(&a)
@@ -22,11 +22,11 @@
 			var credmgr = data.view.conf_sec_credmg {
 				credlist = pstr{'',0};
 			}
 			var creds = co.srv:auth_enum_uid(uid)
 			if creds.ct > 0 then defer creds:free()
-				var cl: lib.str.acc cl:init(256)
+				var cl = co:stra(256)
 				for i=0, creds.ct do var c = creds(i).ptr
 					if not c.blacklist then
 						cl:lpush('<option value="'):shpush(c.aid):lpush('"> ['):push(c.kind,0):lpush('] '):push(c.comment,0)
 						if c.netmask.pv ~= 0 then
 							-- push string rep
@@ -35,22 +35,22 @@
 					end
 				end
 				credmgr.credlist = cl:finalize()
 			end
 			credmgr:append(&a)
-			if credmgr.credlist.ct > 0 then credmgr.credlist:free() end
+			--if credmgr.credlist.ct > 0 then credmgr.credlist:free() end
 		else
 			if new:cmp(lib.str.plit'pw') then
 				var d: data.view.conf_sec_pwnew
 				var time = lib.osclock.time(nil)
 				var timestr: int8[26] lib.osclock.ctime_r(&time, &timestr[0])
-				var cmt: lib.str.acc
-				cmt:init(48):lpush('enrolled over http on '):push(&timestr[0],0)
+				var cmt = co:stra(48)
+				cmt:lpush('enrolled over http on '):push(&timestr[0],0)
 				d.comment = cmt:finalize()
 
-				var st = d:tostr()
-				d.comment:free()
+				var st = d:poolstr(&co.srv.pool)
+				--d.comment:free()
 				return st
 			elseif new:cmp(lib.str.plit'challenge') then
 			-- we're going to break the rules a bit and do database munging from
 			-- the rendering code, because doing otherwise in this case would be
 			-- genuinely nightmarish

Index: render/conf/users.t
==================================================================
--- render/conf/users.t
+++ render/conf/users.t
@@ -172,19 +172,19 @@
 		defer user:free()
 		if not co.who:overpowers(user.ptr) then goto e403 end
 
 		if path.ct == 4 then
 			if path(3):cmp(lib.str.lit'cred') then
-				var pg: lib.str.acc pg:init(1024)
+				var pg = co:stra(1024)
 				pg:lpush('<div class="context">editing credentials for user <a href="/conf/users/'):rpush(path(2)):lpush('">'):push(user(0).xid,0):lpush('</a></div>')
 				var credmgr = lib.render.conf.sec(co, uid)
 				pg:ppush(credmgr)
-				credmgr:free()
+				--credmgr:free()
 				return pg:finalize()
 			else goto e404 end
 		elseif path.ct == 3 then
-			var cinp: lib.str.acc cinp:init(256)
+			var cinp = co:stra(256)
 			cinp:lpush('<div class="elem-group">')
 			if user.ptr.rights.rank > 0 and (co.who.rights.powers.elevate() or co.who.rights.powers.demote()) then
 				var max = co.who.rights.rank
 				if not co.who.rights.powers.elevate() then max = user.ptr.rights.rank end
 				var min = co.srv.cfg.nranks
@@ -194,14 +194,14 @@
 			end
 			if co.who.rights.powers.herald() then
 				var sanitized: pstr
 				if user.ptr.epithet == nil
 					then sanitized = pstr {ptr='', ct=0}
-					else sanitized = lib.html.sanitize(cs(user.ptr.epithet),true)
+					else sanitized = lib.html.sanitize(&co.srv.pool,cs(user.ptr.epithet),true)
 				end
 				cinp:lpush('<div class="elem"><label for="epithet">epithet</label><input type="text" id="epithet" name="epithet" value="'):ppush(sanitized):lpush('"></div>')
-				if user.ptr.epithet ~= nil then sanitized:free() end
+				--if user.ptr.epithet ~= nil then sanitized:free() end
 			end
 			if co.who.rights.powers.invite() or co.who.rights.powers.discipline() then
 				var min: uint32 = 0
 				if not (co.who.rights.powers.discipline() or
 					co.who.rights.powers.demote() and co.who.rights.powers.invite())
@@ -236,21 +236,21 @@
 					for i=0, [map.type.N] do
 						if (co.who.rights.powers and map[i].val):sz() > 0 then
 							var on = (user.ptr.rights.powers and map[i].val):sz() > 0
 							var enabled = (     on  and co.who.rights.powers.demote() ) or
 										  ((not on) and co.who.rights.powers.elevate())
-							var namea: lib.str.acc namea:compose('power-', map[i].name)
+							var namea: lib.str.acc namea:pcompose(&co.srv.pool,'power-', map[i].name)
 							var name = namea:finalize()
 							push_pickbox(&cinp, name, pstr.null(), map[i].name, on, enabled, pstr.null())
-							name:free()
+							--name:free()
 						end
 					end
 				cinp:lpush('</div></details>')
 			end
 
 			if co.who.id ~= uid and co.who.rights.powers.purge() then
-				var purgeconf: lib.str.acc purgeconf:init(48)
+				var purgeconf = co:stra(48)
 				var purgestrs = array(
 					'alpha', 'beta', 'gamma', 'delta', 'epsilon', 'eta', 'nu', 'kappa',
 					'emerald', 'carnelian', 'sapphire', 'ruby', 'amethyst', 'glory',
 					'hope', 'grace', 'pearl', 'carnation', 'rose', 'peony', 'poppy'
 				)
@@ -257,47 +257,48 @@
 				for i=0,3 do
 					purgeconf:push(purgestrs[lib.crypt.random(intptr,0,[purgestrs.type.N])],0)
 					if i ~= 2 then purgeconf:lpush('-') end
 				end
 				cinp:lpush('<details><summary>purge account</summary><p>you have the authority to destroy this account and all its associated content irreversibly and irretrievably. if you really wish to apply such an extreme sanction, enter the confirmation string <strong style="user-select:none">'):push(purgeconf.buf,purgeconf.sz):lpush('</strong> below and press the “alter” button to begin the process.</p><div class="elem"><label for="purge">purge confirmation string</label><input type="text" id="purge" name="purgekey"></div><input type="hidden" name="purgestr" value="'):push(purgeconf.buf,purgeconf.sz):lpush('"></details>')
-				purgeconf:free()
+				--purgeconf:free()
 			end
 
 			-- TODO black mark system? e.g. resolution option for badthink reports
 			-- adds a black mark to the offending user; they can be automatically banned
 			-- or brought up for review after a certain number of offenses; possibly lower
 			-- set of default privs for marked users
 
-			var cinpp = cinp:finalize() defer cinpp:free()
-			var unym: lib.str.acc unym:init(64)
+			var cinpp = cinp:finalize() --defer cinpp:free()
+			var unym = co:stra(64)
 			unym:lpush('<a href="/')
 			if user(0).origin ~= 0 then unym:lpush('@') end
-			do var sanxid = lib.html.sanitize(user(0).xid, true)
+			do var sanxid = lib.html.sanitize(&co.srv.pool,user(0).xid, true)
 				unym:ppush(sanxid)
-				sanxid:free() end
+				--sanxid:free()
+			end
 			unym:lpush('" class="id">')
 			lib.render.nym(user.ptr,0,&unym,false)
 			unym:lpush('</a>')
 			var ctlbox = data.view.conf_user_ctl {
 				name = unym:finalize();
 				inputcontent = cinpp;
 				btns = pstr{'',0};
 			}
 			if co.who.id ~= uid and co.who.rights.powers.cred() then
-				ctlbox.btns = lib.str.acc{}:compose('<a class="button" href="/conf/users/',path(2),'/cred">security &amp; credentials</a>'):finalize()
+				ctlbox.btns = lib.str.acc{}:pcompose(&co.srv.pool,'<a class="button" href="/conf/users/',path(2),'/cred">security &amp; credentials</a>'):finalize()
 			end
-			var pg: lib.str.acc pg:init(512)
+			var pg = co:stra(512)
 			ctlbox:append(&pg)
-			ctlbox.name:free()
-			if ctlbox.btns.ct > 0 then ctlbox.btns:free() end
+			--ctlbox.name:free()
+			--if ctlbox.btns.ct > 0 then ctlbox.btns:free() end
 
 			return pg:finalize()
 		end
 	else
 		var modes = array(P'local', P'remote', P'staff', P'titled', P'peons', P'all')
 		var idbuf: int8[lib.math.shorthand.maxlen]
-		var ulst: lib.str.acc ulst:init(256)
+		var ulst = co:stra(256)
 		var mode: uint8 = mode_local
 		var modestr = co:pgetv('show')
 		ulst:lpush('<div style="text-align: right"><em>showing ')
 		for i=0,[modes.type.N] do
 			if modestr:ref() and modes[i]:cmp(modestr) then mode = i end

Index: render/media-gallery.t
==================================================================
--- render/media-gallery.t
+++ render/media-gallery.t
@@ -16,11 +16,11 @@
 	var ou = co.srv:actor_fetch_uid(uid)
 	if not ou then goto e404 end
 	do defer ou:free()
 		var pfx = pstr.null()
 		if not owner then
-			var pa: lib.str.acc pa:init(32)
+			var pa = co:stra(32)
 			pa:lpush('/')
 			if ou(0).origin ~= 0 then pa:lpush('@') end
 			pa:push(ou(0).xid,0)
 			pfx = pa:finalize()
 		end
@@ -33,51 +33,51 @@
 			if path.ct == 3 then
 			-- sniff out the artifact type and display the appropriate viewer
 				var artid = cs(art(0).url)
 				var btns: lib.str.acc
 				if owner then
-					btns:compose('<a class="neg button" href="',pfx,'/media/a/',artid,'/del">delete</a><a class="button" href="',pfx,'/media/a/',artid,'/edit">alter</a>')
+					btns:pcompose(&co.srv.pool,'<a class="neg button" href="',pfx,'/media/a/',artid,'/del">delete</a><a class="button" href="',pfx,'/media/a/',artid,'/edit">alter</a>')
 				else
-					btns:compose('<a class="pos button" href="',pfx,'/media/a/',artid,'/collect">collect</a>')
+					btns:pcompose(&co.srv.pool,'<a class="pos button" href="',pfx,'/media/a/',artid,'/collect">collect</a>')
 				end
-				var btntxt = btns:finalize() defer btntxt:free()
-				var desc = lib.smackdown.html(pstr{art(0).desc,0}, true) defer desc:free()
+				var btntxt = btns:finalize() -- defer btntxt:free()
+				var desc = lib.smackdown.html(&co.srv.pool, pstr{art(0).desc,0}, true) -- defer desc:free()
 				var viewerprops = {
 					pfx = pfx, desc = desc;
 					id = artid; btns = btntxt;
 				}
 				if lib.str.ncmp(art(0).mime, 'image/', 6) == 0 then
 					var view = data.view.media_image(viewerprops)
-					var pg = view:tostr()
+					var pg = view:poolstr(&co.srv.pool)
 					co:stdpage([lib.srv.convo.page] {
 						title = lib.str.plit'media :: image';
 						class = lib.str.plit'media viewer img';
 						cache = false, body = pg;
 					})
-					pg:free()
+					--pg:free()
 				elseif lib.str.cmp(art(0).mime, 'text/markdown') == 0 then
 					var view = data.view.media_text(viewerprops)
 					var text, mime = co.srv:artifact_load(id) mime:free()
-					view.text = lib.smackdown.html(pstr{[rawstring](text.ptr),text.ct}, false)
+					view.text = lib.smackdown.html(&co.srv.pool, pstr{[rawstring](text.ptr),text.ct}, false)
 					text:free()
-					var pg = view:tostr()
-					view.text:free()
+					var pg = view:poolstr(&co.srv.pool)
+					--view.text:free()
 					co:stdpage([lib.srv.convo.page] {
 						title = lib.str.plit'media :: text';
 						class = lib.str.plit'media viewer text';
 						cache = false, body = pg;
 					})
-					pg:free()
+					--pg:free()
 				elseif
 					lib.str.ncmp(art(0).mime, 'text/', 5) == 0          or
 					lib.str.cmp(art(0).mime, 'application/x-perl') == 0 or
 					lib.str.cmp(art(0).mime, 'application/sql') == 0
 					-- and so on (we need a mimelib at some point) --
 				then
 					var view = data.view.media_text(viewerprops)
 					var text, mime = co.srv:artifact_load(id) mime:free()
-					var san = lib.html.sanitize(pstr{[rawstring](text.ptr),text.ct}, false)
+					var san = lib.html.sanitize(&co.srv.pool,pstr{[rawstring](text.ptr),text.ct}, false)
 					text:free()
 					view.text = lib.str.acc{}:compose('<pre>',san,'</pre>'):finalize()
 					san:free()
 					var pg = view:tostr()
 					view.text:free()
@@ -125,15 +125,15 @@
 				images = pstr{'',0};
 				pfx = pfx;
 			}
 
 			if folders.ct > 0 then
-				var fa: lib.str.acc fa:init(128)
+				var fa: lib.str.acc fa:pool(&co.srv.pool,128)
 				var fldr = co:pgetv('folder')
 				for i=0,folders.ct do
-					var ule = lib.html.urlenc(folders(i), true) defer ule:free()
-					var san = lib.html.sanitize(folders(i), true) defer san:free()
+					var ule = lib.html.urlenc(&co.srv.pool,folders(i), true) -- defer ule:free()
+					var san = lib.html.sanitize(&co.srv.pool,folders(i), true) -- defer san:free()
 					fa:lpush('<a href="'):ppush(pfx):lpush('/media?folder='):ppush(ule)
 						:lpush('">'):ppush(san):lpush('</a>')
 					lib.dbg('checking folder ',{fldr.ptr,fldr.ct},' against ',{folders(i).ptr,folders(i).ct})
 					if fldr:ref() and folders(i):cmp(fldr)
 						then folder = folders(i) lib.dbg('folder match ',{fldr.ptr,fldr.ct})
@@ -148,21 +148,21 @@
 			if owner then
 				view.menu = P'<a class="pos" href="/media/upload">upload</a><hr>'
 			end
 
 			var md = co.srv:artifact_enum_uid(uid, folder)
-			var gallery: lib.str.acc gallery:init(256)
-			var files: lib.str.acc files:init(256) 
+			var gallery: lib.str.acc gallery:pool(&co.srv.pool,256)
+			var files: lib.str.acc files:pool(&co.srv.pool,256) 
 			for i=0,md.ct do
-				var desc = lib.smackdown.html(pstr{md(i)(0).desc,0}, true) defer desc:free()
+				var desc = lib.smackdown.html(&co.srv.pool,pstr{md(i)(0).desc,0}, true) --defer desc:free()
 				if lib.str.ncmp(md(i)(0).mime, 'image/', 6) == 0 then
 					gallery:lpush('<a class="thumb" href="'):ppush(pfx):lpush('/media/a/')
 						:push(md(i)(0).url,0):lpush('"><img src="/file/'):push(md(i)(0).url,0)
 						:lpush('"><div class="caption">'):ppush(desc)
 						:lpush('</div></a>')
 				else
-					var mime = lib.html.sanitize(pstr{md(i)(0).mime,0}, true) defer mime:free() --just in case
+					var mime = lib.html.sanitize(&co.srv.pool,pstr{md(i)(0).mime,0}, true) --defer mime:free() --just in case
 					files:lpush('<a class="file" href="'):ppush(pfx):lpush('/media/a/')
 						:push(md(i)(0).url,0):lpush('"><span class="label">'):ppush(desc)
 						:lpush('</span> <span class="mime">'):ppush(mime)
 						:lpush('</span></a>')
 				end
@@ -173,30 +173,27 @@
 			view.directory = files:finalize()
 
 			if acc ~= nil then
 				view:append(acc)
 			else
-			lib.dbg('emitting page')
-				var pg = view:tostr() defer pg:free()
-			lib.dbg('compiled page')
+				var pg = view:poolstr(&co.srv.pool) -- defer pg:free()
 				co:stdpage([lib.srv.convo.page] {
 					title = P'media';
 					class = P'media manager';
 					cache = false;
 					body = pg;
 				})
-			lib.dbg('sent page')
 			end
 
-			view.images:free()
-			view.directory:free()
-			if view.folders.ct > 0 then view.folders:free() end
+			--view.images:free()
+			--view.directory:free()
+			--if view.folders.ct > 0 then view.folders:free() end
 			if folder.ct > 0 then folder:free() end
 			if md:ref() then md:free() end
 		end
-		if not owner then pfx:free() end
+		--if not owner then pfx:free() end
 	return end
 
 	::e404:: co:complain(404,'media not found','no such media exists on this server')
 end
 
 return render_media_gallery

Index: render/nav.t
==================================================================
--- render/nav.t
+++ render/nav.t
@@ -1,9 +1,9 @@
 -- vim: ft=terra
 local terra 
 render_nav(co: &lib.srv.convo)
-	var t: lib.str.acc t:init(64)
+	var t = co:stra(64)
 	if co.who ~= nil or co.srv.cfg.pol_sec == lib.srv.secmode.public then
 		t:lpush(' <a accesskey="t" href="/">timeline</a>')
 	end
 	if co.who ~= nil then
 		t:lpush(' <a accesskey="c" href="/compose">compose</a> <a accesskey="p" href="/'):push(co.who.xid,0)

Index: render/notices.t
==================================================================
--- render/notices.t
+++ render/notices.t
@@ -15,13 +15,13 @@
 		co:complain(200,'no news is good news',"you don't have any notices to review")
 		return
 	end
 	defer notes:free()
 
-	var pg: lib.str.acc pg:init(512) defer pg:free()
-	var pflink: lib.str.acc pflink:init(64)
-	var body: lib.str.acc body:init(256)
+	var pg = co:stra(512) -- defer pg:free()
+	var pflink = co:stra(64)
+	var body = co:stra(256)
 	var latest: lib.store.timepoint = 0
 	for i=0,notes.ct do
 		if notes(i).when > latest then latest = notes(i).when end
 		var who = co.srv:actor_fetch_uid(notes(i).who) defer who:free()
 		if not who then lib.bail('schema integrity violation: nonexistent actor referenced in notification, this is almost certainly an SQL error or bug in the backend implementation') end
@@ -51,11 +51,11 @@
 				notweet = false
 			end
 		else goto skip end
 		do var idbuf: int8[lib.math.shorthand.maxlen]
 			var idlen = lib.math.shorthand.gen(notes(i).what, idbuf)
-			var b = lib.smackdown.html(pstr {ptr=what(0).body,ct=0},true) defer b:free()
+			var b = lib.smackdown.html(&co.srv.pool, pstr {ptr=what(0).body,ct=0},true) --defer b:free()
 			body:lpush(' <a class="quote" href="/post/'):push(&idbuf[0],idlen):lpush('">'):ppush(b):lpush('</a>')
 		end
 		if not notweet then
 			var reply = co.srv:post_fetch(notes(i).reply)
 				lib.render.tweet(co,reply.ptr,&body)
@@ -66,15 +66,15 @@
 		n:append(&pg)
 		::skip:: n.nym:free()
 		         pflink:reset()
 				 body:reset()
 	end
-	pflink:free()
+	--pflink:free()
 	pg:lpush('<form method="post"><button name="act" value="clear">clear all notices</button></form>')
 	co:livepage([lib.srv.convo.page] {
 		title = P'notices', class = P'notices';
 		body = pstr {ptr = pg.buf, ct = pg.sz};
 		cache = false;
 	}, latest)
 end
 
 return render_notices

Index: render/nym.t
==================================================================
--- render/nym.t
+++ render/nym.t
@@ -10,30 +10,41 @@
 	var n: &lib.str.acc
 	if tgt ~= nil then n = tgt else
 		n = &acc
 		n:init(128)
 	end
-	var xidsan = lib.html.sanitize(cs(who.xid),false)
+
+	var pool_obj: lib.mem.pool
+	var pool: &lib.mem.pool
+	if tgt ~= nil and tgt.pool ~= nil then
+		pool = tgt.pool
+	else
+		pool_obj:init(128)
+		pool = &pool_obj
+	end
+
+	var xidsan = lib.html.sanitize(pool,cs(who.xid),false)
 	if who.nym ~= nil and who.nym[0] ~= 0 then
-		var nymsan = lib.html.sanitize(cs(who.nym),false)
+		var nymsan = lib.html.sanitize(pool,cs(who.nym),false)
 		n:lpush('<span class="nym">'):ppush(nymsan)
 			:lpush('</span> [<span class="handle">'):ppush(xidsan)
 			:lpush('</span>]')
-		nymsan:free()
+		--nymsan:free()
 	else n:lpush('<span class="handle">'):ppush(xidsan):lpush('</span>') end
-	xidsan:free()
+	--xidsan:free()
 
 	if not minimal then
 		if who.epithet ~= nil then
-			var episan = lib.html.sanitize(cs(who.epithet),false)
+			var episan = lib.html.sanitize(pool,cs(who.epithet),false)
 			n:lpush('<span class="epithet">'):ppush(episan):lpush('</span>')
-			episan:free()
+			--episan:free()
 		end
 	end
 	
+	if pool == &pool_obj then pool:free() end
 	-- TODO: if scope == chat room then lookup titles in room member db
 	if tgt == nil then
 		return n:finalize()
 	else return pstr.null() end
 end
 
 return render_nym

Index: render/profile.t
==================================================================
--- render/profile.t
+++ render/profile.t
@@ -11,23 +11,23 @@
 	relationship: &lib.store.relationship
 ): pstr
 	var aux: lib.str.acc
 	var followed = false -- FIXME
 	if co.aid ~= 0 and co.who.id == actor.id then
-		aux:compose('<a accesskey="a" class="button" href="/conf/profile?go=/@',actor.handle,'">alter</a>')
+		aux:pcompose(&co.srv.pool,'<a accesskey="a" class="button" href="/conf/profile?go=/@',actor.handle,'">alter</a>')
 	elseif co.aid ~= 0 then
 		if not relationship.rel.follow() then
-			aux:compose('<button accesskey="f" method="post" class="pos" name="act" value="follow">follow</button>')
+			aux:pcompose(&co.srv.pool,'<button accesskey="f" method="post" class="pos" name="act" value="follow">follow</button>')
 		elseif relationship.rel.follow() then
-			aux:compose('<button accesskey="f" method="post" class="neg" name="act" value="unfollow">unfollow</button>')
+			aux:pcompose(&co.srv.pool,'<button accesskey="f" method="post" class="neg" name="act" value="unfollow">unfollow</button>')
 		end
 		aux:lpush('<a accesskey="h" class="button" href="/'):push(actor.xid,0):lpush('/chat">chat</a>')
 		if co.who.rights.powers:affect_users() and co.who:overpowers(actor) then
 			aux:lpush('<a accesskey="n" class="button" href="/'):push(actor.xid,0):lpush('/ctl">control</a>')
 		end
 	else
-		aux:compose('<a accesskey="f" class="button" href="/', actor.xid, '/follow">remote follow</a>')
+		aux:pcompose(&co.srv.pool,'<a accesskey="f" class="button" href="/', actor.xid, '/follow">remote follow</a>')
 	end
 	var auxp = aux:finalize()
 	var timestr: int8[26] lib.osclock.ctime_r(&actor.knownsince, &timestr[0])
 
 	var strfbuf: int8[28*4]
@@ -36,14 +36,14 @@
 		var sn_follows   = cs(lib.math.decstr_friendly(stats.follows, sn_posts.ptr - 1))
 		var sn_followers = cs(lib.math.decstr_friendly(stats.followers, sn_follows.ptr - 1))
 		var sn_mutuals   = cs(lib.math.decstr_friendly(stats.mutuals, sn_followers.ptr - 1))
 	var bio = lib.str.plit '<em style="opacity:0.6">tall, dark, and mysterious</em>'
 	if actor.bio ~= nil then
-		bio = lib.smackdown.html(cs(actor.bio),false)
+		bio = lib.smackdown.html(&co.srv.pool,cs(actor.bio),false)
 	end
 	var fullname = lib.render.nym(actor,0,nil,false) defer fullname:free()
-	var comments: lib.str.acc comments:init(64)
+	var comments: lib.str.acc comments:pool(&co.srv.pool,64)
 
 	if co.srv.cfg.master == actor.id then
 		var foundertxt = lib.str.plit 'founder'
 		if co.srv.cfg.ui_cue_founder:ref() then
 			if co.srv.cfg.ui_cue_founder.ct == 0 -- empty string, suppress field
@@ -96,13 +96,13 @@
 
 		auxbtn = auxp;
 	}
 	if comments.sz > 0 then profile.remarks = comments:finalize() end
 
-	var ret = profile:tostr()
-	auxp:free() 
-	if actor.bio ~= nil then bio:free() end
+	var ret = profile:poolstr(&co.srv.pool)
+	-- auxp:free() 
+	--if actor.bio ~= nil then bio:free() end
 	if comments.sz > 0 then profile.remarks:free() end
 	return ret
 end
 
 return render_profile

Index: render/timeline.t
==================================================================
--- render/timeline.t
+++ render/timeline.t
@@ -24,11 +24,11 @@
 		})
 	elseif mode == modes.fediglobal then
 	elseif mode == modes.circle then
 	end
 
-	var acc: lib.str.acc acc:init(1024)
+	var acc: lib.str.acc acc:pool(&co.srv.pool,1024)
 	acc:lpush('<div id="tl" data-live="10">')
 	var newest: lib.store.timepoint = 0
 	for i = 0, posts.sz do
 		lib.render.tweet(co, posts(i).ptr, &acc)
 		var t = lib.math.biggest(lib.math.biggest(posts(i).ptr.posted, posts(i).ptr.discovered),posts(i).ptr.edited)
@@ -43,8 +43,8 @@
 		body = acc:finalize();
 		class = lib.str.plit'timeline';
 		cache = false;
 	}
 	co:livepage(doc,newest)
-	doc.body:free()
+	--doc.body:free()
 end
 return render_timeline

Index: render/tweet-page.t
==================================================================
--- render/tweet-page.t
+++ render/tweet-page.t
@@ -28,11 +28,11 @@
 	path: lib.mem.ptr(pref),
 	p: &lib.store.post
 ): {}
 	var livetime = co.srv:thread_latest_arrival_calc(p.id)
 
-	var pg: lib.str.acc pg:init(256)
+	var pg = co:stra(256)
 	pg:lpush('<div data-live="10">') -- make the OP refresh too
 	lib.render.tweet(co, p, &pg)
 	pg:lpush('</div>')
 
 	if co.aid ~= 0 then
@@ -60,11 +60,11 @@
 
 	if co.aid ~= 0 and co.who.rights.powers.post() then
 		lib.render.compose(co, nil, &pg)
 	end
 
-	var ppg = pg:finalize() defer ppg:free()
+	var ppg = pg:finalize() --defer ppg:free()
 	co:livepage([lib.srv.convo.page] {
 		title = lib.str.plit 'post'; cache = false;
 		class = lib.str.plit 'post'; body = ppg;
 	}, livetime)
 

Index: render/tweet.t
==================================================================
--- render/tweet.t
+++ render/tweet.t
@@ -36,16 +36,16 @@
 
 	::foundauth::
 	var timestr: int8[26] lib.osclock.ctime_r(&p.posted, &timestr[0])
 	for i=0,26 do if timestr[i] == @'\n' then timestr[i] = 0 break end end -- 🙄
 
-	var bhtml = lib.smackdown.html([lib.mem.ptr(int8)] {ptr=p.body,ct=0},false)
-	defer bhtml:free()
+	var bhtml = lib.smackdown.html(&co.srv.pool, [lib.mem.ptr(int8)] {ptr=p.body,ct=0},false)
+	--defer bhtml:free()
 
 	var idbuf: int8[lib.math.shorthand.maxlen]
 	var idlen = lib.math.shorthand.gen(p.id, idbuf)
-	var permalink: lib.str.acc permalink:compose('/post/',{idbuf,idlen})
+	var permalink: lib.str.acc permalink:pool(&co.srv.pool, 7+idlen):lpush('/post/'):push(idbuf,idlen)
 	var fullname = lib.render.nym(author,0,nil, false) defer fullname:free()
 	var tpl = data.view.tweet {
 		text = bhtml;
 		subject = cs(lib.coalesce(p.subject,''));
 		nym = fullname;
@@ -63,18 +63,18 @@
 			lib.bail('schema integrity violation - could not match post to parent')
 		end
 		var pauth = co.srv:actor_fetch_uid(parent(0).author) defer pauth:free()
 		var pidbuf: int8[lib.math.shorthand.maxlen]
 		var pidlen = lib.math.shorthand.gen(p.parent, pidbuf)
-		var pa: lib.str.acc pa:init(128)
+		var pa: lib.str.acc pa:pool(&co.srv.pool, 128)
 		pa:lpush('<small>in reply to <a class="username" href="/post/'):push(&pidbuf[0],pidlen):lpush('">')
 		lib.render.nym(pauth.ptr,0,&pa,true)
 		pa:lpush('</a></small>')
 		tpl.extra = pa:finalize()
 	end
 	if p.rts + p.likes > 0 then
-		var s: lib.str.acc s:init(128)
+		var s: lib.str.acc s:pool(&co.srv.pool,128)
 		s:lpush('<div class="stats">')
 		if p.rts   > 0 then s:lpush('<div class="rt">'  ):dpush(p.rts  ):lpush('</div>') end
 		if p.likes > 0 then s:lpush('<div class="like">'):dpush(p.likes):lpush('</div>') end
 		s:lpush('</div>')
 		tpl.stats = s:finalize()
@@ -93,29 +93,29 @@
 	if co.aid ~= 0 and p.author == co.who.id then attrcur = lib.str.cpy(attrcur, ' data-own') end
 	if retweeter ~= nil then attrcur = lib.str.cpy(attrcur, ' data-rt') end
 
 	if attrcur ~= &attrbuf[0] then tpl.attr = &attrbuf[0] end
 
-	defer tpl.permalink:free()
+	--defer tpl.permalink:free()
 	if acc ~= nil then
 		if retweeter ~= nil then push_promo_header(co, acc, retweeter, p.rtact) end
 		tpl:append(acc)
 		if retweeter ~= nil then acc:lpush('</div>') end
-		if p.rts + p.likes > 0 then tpl.stats:free() end
-		if tpl.extra.ct > 0 then tpl.extra:free() end
+		--if p.rts + p.likes > 0 then tpl.stats:free() end
+		--if tpl.extra.ct > 0 then tpl.extra:free() end
 		return [lib.mem.ptr(int8)]{ptr=nil,ct=0}
 	end
 
 	if retweeter ~= nil then
-		var rta: lib.str.acc rta:init(512)
+		var rta: lib.str.acc rta:pool(&co.srv.pool,512)
 		push_promo_header(co, &rta, retweeter, p.rtact)
 		tpl:append(&rta) rta:lpush('</div>')
-		if tpl.extra.ct > 0 then tpl.extra:free() end
+		--if tpl.extra.ct > 0 then tpl.extra:free() end
 		return rta:finalize()
 	else
-		var txt = tpl:tostr()
-		if tpl.extra.ct > 0 then tpl.extra:free() end
-		if p.rts + p.likes > 0 then tpl.stats:free() end
+		var txt = tpl:poolstr(&co.srv.pool)
+		--if tpl.extra.ct > 0 then tpl.extra:free() end
+		--if p.rts + p.likes > 0 then tpl.stats:free() end
 		return txt
 	end
 end
 return render_tweet

Index: render/user-page.t
==================================================================
--- render/user-page.t
+++ render/user-page.t
@@ -11,12 +11,12 @@
 	else
 		ti:compose('profile :: ', actor.handle)
 	end
 	var tiptr = ti:finalize()
 
-	var acc: lib.str.acc acc:init(1024)
-	var pftxt = lib.render.profile(co,actor,relationship) defer pftxt:free()
+	var acc: lib.str.acc acc:pool(&co.srv.pool, 1024)
+	var pftxt = lib.render.profile(co,actor,relationship) --defer pftxt:free()
 	acc:ppush(pftxt)
 
 	var stoptime = lib.osclock.time(nil)
 	var posts = co.srv:post_enum_author_uid(actor.id, lib.store.range {
 		mode = 1; -- T->I
@@ -41,9 +41,9 @@
 		class = lib.str.plit 'profile';
 		cache = false;
 	}, newest)
 
 	tiptr:free()
-	bdf:free()
+	--bdf:free()
 end
 
 return render_userpage

Index: route.t
==================================================================
--- route.t
+++ route.t
@@ -250,16 +250,18 @@
 						title = lib.str.plit 'cancel retweet';
 						query = lib.str.plit 'are you sure you want to undo this retweet?';
 						cancel = lib.str.plit'/';
 					}
 				end
-				var body = conf:tostr() defer body:free()
+				var fr = co.srv.pool:frame()
+				var body = conf:poolstr(&co.srv.pool) --defer body:free()
 				co:stdpage([lib.srv.convo.page] {
 					title = lib.str.plit 'post :: delete';
 					class = lib.str.plit 'query';
 					body = body; cache = false;
 				})
+				co.srv.pool:reset(fr)
 				return
 			elseif meth == method.post then
 				var act = co:ppostv('act')
 				if act:cmp(lib.str.plit 'confirm') then
 					if post:ref() then
@@ -515,11 +517,11 @@
 	if co.aid ~= 0 and co.who.id == uid and path.ct == 2 and path(1):cmp(lib.str.lit'upload') and co.who.rights.powers.artifact() then
 		if meth == method.get then
 			var view = data.view.media_upload {
 				folders = ''
 			}
-			var pg = view:tostr() defer pg:free()
+			var pg = view:poolstr(&co.srv.pool) -- defer pg:free()
 			co:stdpage([lib.srv.convo.page] {
 				title = lib.str.plit'media :: upload';
 				class = lib.str.plit'media upload';
 				cache = false; body = pg;
 			})

Index: smackdown.t
==================================================================
--- smackdown.t
+++ smackdown.t
@@ -54,17 +54,17 @@
 	if sl == nil then return nil else sl = sl + nc end
 	if sl >= l+max or not isws(@(sl-1)) then return sl-nc end
 	return nil
 end
 
-terra m.html(input: pstr, firstline: bool)
+terra m.html(pool: &lib.mem.pool, input: pstr, firstline: bool)
 	if input.ptr == nil then return pstr.null() end
 	if input.ct == 0 then input.ct = lib.str.sz(input.ptr) end
 
-	var md = lib.html.sanitize(input,false)
+	var md = lib.html.sanitize(pool,input,false)
 
-	var styled: lib.str.acc styled:init(md.ct)
+	var styled: lib.str.acc styled:pool(pool,md.ct)
 
 	do var i = 0 while i < md.ct do
 		--var wordstart = (i == 0 or isws(md.ptr[i-1]))
 		--var wordend = (i == md.ct - 1 or isws(md.ptr[i+1]))
 		var wordstart = (i + 1 < md.ct and not isws(md.ptr[i+1]))
@@ -120,16 +120,16 @@
 		end
 
 		::fallback::styled:push(here,1) -- :/
 		i = i + 1
 	::skip::end end
-	md:free()
+	--md:free()
 
 	-- we make two passes: the first detects and transforms inline elements,
 	-- the second carries out block-level organization
 
-	var html: lib.str.acc html:init(styled.sz)
+	var html: lib.str.acc html:pool(pool,styled.sz)
 	var s = state {
 		segt = segt.none;
 		bqlvl = 0;
 		curpos = md.ptr;
 		blockstart = nil;
@@ -136,10 +136,10 @@
 	}
 	while s.curpos < md.ptr + md.ct do
 		s.curpos = s.curpos + 1
 	end 
 
-		html:free() -- JUST FOR NOW
+		--html:free() -- JUST FOR NOW
 	return styled:finalize()
 end
 
 return m

Index: srv.t
==================================================================
--- srv.t
+++ srv.t
@@ -7,10 +7,11 @@
 	secret: pstring
 	pol_sec: secmode.t
 	pol_reg: bool
 	credmgd: bool
 	maxupsz: intptr
+	poolinitsz: intptr
 	instance: pstring
 	overlord: &srv
 	ui_cue_staff: pstring
 	ui_cue_founder: pstring
 	ui_hue: uint16
@@ -22,10 +23,11 @@
 	sources: lib.mem.ptr(lib.store.source)
 	webmgr: lib.net.mg_mgr
 	webcon: &lib.net.mg_connection
 	cfg: cfgcache
 	id: rawstring
+	pool: lib.mem.pool
 }
 
 terra cfgcache:free() -- :/
 	self.secret:free()
 	self.instance:free()
@@ -308,19 +310,25 @@
 	var conf = data.view.confirm {
 		title = title;
 		query = msg;
 		cancel = cancel;
 	}
-	var ti: lib.str.acc ti:compose('confirm :: ', title)
-	var body = conf:tostr() defer body:free()
+	var ti: lib.str.acc ti:pcompose(&self.srv.pool,'confirm :: ', title)
+	var body = conf:poolstr(&self.srv.pool) -- defer body:free()
 	var cf = [convo.page] {
 		title = ti:finalize();
 		class = lib.str.plit 'query';
 		body = body; cache = false;
 	}
 	self:stdpage(cf)
-	cf.title:free()
+	--cf.title:free()
+end
+
+terra convo:stra(sz: intptr) -- convenience function
+	var s: lib.str.acc
+	s:pool(&self.srv.pool,sz)
+	return s
 end
 
 convo.methods.assertpow = macro(function(self, pow)
 	return quote
 		var ok = true
@@ -332,11 +340,11 @@
 end)
 
 -- CALL ONLY ONCE PER VAR
 terra convo:postv(name: rawstring)
 	if self.varbuf.ptr == nil then
-		self.varbuf = lib.mem.heapa(int8, self.msg.body.len + self.msg.query.len)
+		self.varbuf = self.srv.pool:alloc(int8, self.msg.body.len + self.msg.query.len)
 		self.vbofs = self.varbuf.ptr
 	end
 	var o = lib.net.mg_http_get_var(&self.msg.body, name, self.vbofs, self.varbuf.ct - (self.vbofs - self.varbuf.ptr))
 	if o > 0 then
 		var r = self.vbofs
@@ -351,11 +359,11 @@
 	return pstring { ptr = s, ct = l }
 end
 
 terra convo:getv(name: rawstring)
 	if self.varbuf.ptr == nil then
-		self.varbuf = lib.mem.heapa(int8, self.msg.query.len + self.msg.body.len)
+		self.varbuf = self.srv.pool:alloc(int8, self.msg.query.len + self.msg.body.len)
 		self.vbofs = self.varbuf.ptr
 	end
 	var o = lib.net.mg_http_get_var(&self.msg.query, name, self.vbofs, self.varbuf.ct - (self.vbofs - self.varbuf.ptr))
 	if o > 0 then
 		var r = self.vbofs
@@ -553,11 +561,11 @@
 					var ll, ok = lib.math.decparse(pstring{ptr = livelast_p.ptr, ct = livelast_p.ct - 1})
 					if ok then co.live_last = ll end
 				end
 
 
-				var uridec = lib.mem.heapa(int8, msg.uri.len) defer uridec:free()
+				var uridec = server.pool:alloc(int8, msg.uri.len)
 				var urideclen = lib.net.mg_url_decode(msg.uri.ptr, msg.uri.len, uridec.ptr, uridec.ct, 1)
 
 				var uri = uridec
 				if urideclen == -1 then
 					for i = 0,msg.uri.len do
@@ -679,23 +687,25 @@
 						end
 					end
 				end
 
 				route.dispatch_http(&co, uri, co.method)
+
+				::fail::
 				if co.uploads.run > 0 then
 					for i=0,co.uploads.sz do
 						co.uploads(i).filename:free()
 						co.uploads(i).field:free()
 					end
 					co.uploads:free()
 				end
 
-				::fail::
 				if co.aid ~= 0 then lib.mem.heapf(co.who) end
-				if co.varbuf.ptr ~= nil then co.varbuf:free() end
-				if co.navbar.ptr ~= nil then co.navbar:free() end
+				-- if co.varbuf.ptr ~= nil then co.varbuf:free() end
+				-- if co.navbar.ptr ~= nil then co.navbar:free() end
 				co.actorcache:free()
+				server.pool:clear()
 			end
 		end
 	end;
 }
 
@@ -855,10 +865,11 @@
 end
 
 terra srv:start(iname: rawstring)
 	self:conprep(lib.store.prepmode.full)
 	self.cfg:init(self)
+	self.pool:init(self.cfg.poolinitsz)
 	var dbbind = self:conf_get('bind')
 	if iname == nil then iname = lib.proc.getenv('parsav_instance') end
 	if iname == nil then
 		self.id = self.cfg.instance.ptr;
 		-- let this leak -- it'll be needed for the lifetime of the process anyway
@@ -892,10 +903,11 @@
 	for i=0,self.sources.ct do var src = self.sources.ptr + i
 		lib.report('closing data source ', src.id.ptr, '(', src.backend.id, ')')
 		src:close()
 	end
 	self.sources:free()
+	self.pool:free()
 end
 
 terra cfgcache:cfint(name: rawstring, default: intptr)
 	var str = self.overlord:conf_get(name)
 	if str.ptr ~= nil then
@@ -902,10 +914,22 @@
 		var i,ok = lib.math.decparse(str)
 		if ok then default = i else
 			lib.warn('invalid configuration setting ',name,'="',{str.ptr,str.ct},'", expected integer; using default value instead')
 		end
 		str:free()
+	end
+	return default
+end
+
+terra cfgcache:cffsz(name: rawstring, default: intptr)
+	var str = self.overlord:conf_get(name)
+	if str:ref() then
+		var sz, ok = lib.math.fsz_parse(str)
+		if ok then default = sz else
+			lib.warn('invalid configuration setting ',name,'="',{str.ptr,str.ct},'", expected byte length; using default value instead')
+		end
+		str:free()
 	end
 	return default
 end
 
 terra cfgcache:cfbool(name: rawstring, default: bool)
@@ -939,19 +963,12 @@
 			else self.credmgd = false
 		end
 		sreg:free()
 	end end
 
-	do self.maxupsz = [1024 * 100] -- 100 kilobyte default
-	var sreg = self.overlord:conf_get('maximum-artifact-size')
-	if sreg:ref() then
-		var sz, ok = lib.math.fsz_parse(sreg)
-		if ok then self.maxupsz = sz else
-			lib.warn('invalid configuration value for maximum-artifact-size; keeping default 100K upload limit')
-		end
-		sreg:free() end
-	end
+	self.maxupsz = self:cffsz('maximum-artifact-size', [1024 * 100]) -- 100 kilobyte default
+	self.poolinitsz = self:cffsz('server-pool-size-initial', [1024 * 10]) -- 10 kilobyte default
 	
 	self.pol_sec = secmode.lockdown
 	var smode = self.overlord:conf_get('policy-security')
 	if smode.ptr ~= nil then
 		if lib.str.cmp(smode.ptr, 'public') == 0 then
@@ -972,11 +989,11 @@
 	
 	var webmaster = self.overlord:conf_get('master')
 	if webmaster:ref() then defer webmaster:free()
 		var wma = self.overlord:actor_fetch_xid(webmaster)
 		if not wma then
-			lib.warn('the webmaster specified in the configuration store does not seem to exist or is not known to this instance; preceding as if no master defined. if the master is a remote user, you can rectify this with the `actor ',{webmaster.ptr,webmaster.ct},' instantiate` and `conf refresh` commands')
+			lib.warn('the webmaster specified in the configuration store does not seem to exist or is not known to this instance; preceding as if no master defined. if the master is a remote user, you can rectify this with the `actor "',{webmaster.ptr,webmaster.ct},'" instantiate` and `conf refresh` commands')
 		else
 			self.master = wma(0).id
 			wma:free()
 		end
 	end

Index: str.t
==================================================================
--- str.t
+++ str.t
@@ -109,10 +109,11 @@
 struct m.acc {
 	buf: rawstring
 	sz: intptr
 	run: intptr
 	space: intptr
+	pool: &lib.mem.pool
 }
 
 terra m.cdowncase(c: int8)
 	if c >= @'A' and c <= @'Z' then
 		return c + (@'a' - @'A')
@@ -129,10 +130,11 @@
 	if a > b then return a else return b end
 end
 
 terra m.acc:init(run: intptr)
 	--lib.dbg('initializing string accumulator')
+	self.pool = nil
 	if run == 0 then
 		lib.warn('attempted to allocate zero-length string accumulator')
 		self.buf = nil
 	else
 		self.buf = [rawstring](lib.mem.heapa_raw(run))
@@ -143,20 +145,34 @@
 	self.run = lib.trn(self.buf == nil, 0, run)
 	self.space = self.run
 	self.sz = 0
 	return self
 end;
+
+terra m.acc:pool(pool: &lib.mem.pool, run: intptr)
+	self.buf = [&int8](pool:alloc_bytes(run))
+	self.pool = pool
+	self.run = run
+	self.space = self.run
+	self.sz = 0
+	return self
+end
 
 terra m.acc:free()
 	--lib.dbg('freeing string accumulator')
+	if self.pool ~= nil then
+		lib.dbg('attempted to free pooled string accumulator; use frame-reset instead')
+		return
+	end
 	if self.buf ~= nil and self.space > 0 then
 		lib.mem.heapf(self.buf)
 	end
 end;
 
 terra m.acc:crush()
 	--lib.dbg('crushing string accumulator')
+	if self.pool ~= nil then return self end -- no point unless at end of buffer
 	self.buf = [rawstring](lib.mem.heapr_raw(self.buf, self.sz))
 	self.space = self.sz
 	return self
 end;
 
@@ -171,14 +187,19 @@
 	return pt
 end;
 
 terra m.acc:cue(sz: intptr)
 	if sz <= self.run then return end
+	var curspace = self.space
 	self.run = sz
 	if self.space - self.sz < self.run then
 		self.space = self.sz + self.run
-		self.buf = [rawstring](lib.mem.heapr_raw(self.buf, self.space))
+		if self.pool ~= nil then
+			self.buf = [&int8](self.pool:realloc_bytes(self.buf, curspace, self.space))
+		else
+			self.buf = [rawstring](lib.mem.heapr_raw(self.buf, self.space))
+		end
 	end
 end
 
 terra m.acc:reset() -- semantic convenience function
 	self.sz = 0
@@ -191,12 +212,13 @@
 	-- lib.dbg('pushing "',{str,llen},'" onto accumulator')
 	if self.buf == nil then self:init(self.run) end
 	if self.buf == nil then lib.warn('attempted to push string onto unallocated accumulator') return self end
 	if len == 0 then len = m.sz(str) end
 	if len >= self.space - self.sz then
-		self.space = self.space + biggest(self.run,len + 1)
-		self.buf = [rawstring](lib.mem.heapr_raw(self.buf, self.space))
+		self:cue(self.space + biggest(self.run,len + 1))
+		--self.space = self.space + biggest(self.run,len + 1)
+		--self.buf = [rawstring](lib.mem.heapr_raw(self.buf, self.space))
 	end
 	lib.mem.cpy(self.buf + self.sz, str, len)
 	self.sz = self.sz + len
 	self.buf[self.sz] = 0
 	return self
@@ -244,11 +266,11 @@
 	self:push(str.ptr, str.ct)            return self end;
 m.acc.methods.rpush = terra(self: &m.acc, str: lib.mem.ref(int8))
 	self:push(str.ptr, str.ct)            return self end;
 m.acc.methods.merge = terra(self: &m.acc, str: lib.mem.ptr(int8))
 	self:push(str.ptr, str.ct) str:free() return self end;
-m.acc.methods.compose = macro(function(self, ...)
+local composefn = function(call, ...)
 	local minlen = 0
 	local pstrs = {}
 	for i,v in ipairs{...} do
 		if type(v) == 'table' then
 			local gl = 16 -- guess wildly
@@ -265,16 +287,23 @@
 		elseif type(v) == 'string' then 
 			pstrs[#pstrs+1] = {str = v, len = #v}
 			minlen = minlen + #v + 1
 		else error('invalid type in compose expression') end
 	end
-	local call = `self:init(minlen)
+	call = call(minlen) --`self:init(minlen)
 	for i,v in ipairs(pstrs) do
 		call = `[call]:push([v.str],[v.len])
 	end
 	return call
+end
+m.acc.methods.compose = macro(function(self, ...)
+	return composefn(function(minlen) return `self:init(minlen) end, ...)
+end)
+m.acc.methods.pcompose = macro(function(self, pool, ...)
+	return composefn(function(minlen) return `self:pool(pool,minlen) end, ...)
 end)
+
 m.acc.metamethods.__lshift = terralib.overloadedfunction('(<<)', {
 	terra(self: &m.acc, str: rawstring)         return self: push(str,0) end;
 	terra(self: &m.acc, str: lib.mem.ptr(int8)) return self:ppush(str  ) end;
 })
 

Index: tpl.t
==================================================================
--- tpl.t
+++ tpl.t
@@ -91,10 +91,11 @@
 	local copiers = {}
 	local senders = {}
 	local appenders = {}
 	local symtxt = symbol(lib.mem.ptr(int8))
 	local cpypos = symbol(&opaque)
+	local pool = symbol(&lib.mem.pool)
 	local accumulator = symbol(&lib.str.acc)
 	local destcon = symbol(&lib.net.mg_connection)
 	for idx, seg in ipairs(segs) do
 		copiers[#copiers+1] = quote [cpypos] = lib.mem.cpy([cpypos], [&opaque]([seg]), [#seg]) end
 		senders[#senders+1] = quote lib.net.mg_send([destcon], [seg], [#seg]) end
@@ -102,25 +103,25 @@
 		if fields[idx] and fields[idx].mode then
 			local f = fields[idx]
 			local fp = `symself.[f.key]
 			copiers[#copiers+1] = quote 
 				if fp.ct > 0 then
-					var san = lib.html.sanitize(fp, [f.mode == ':'])
+					var san = lib.html.sanitize(pool, fp, [f.mode == ':'])
 					[cpypos] = lib.mem.cpy([cpypos], [&opaque](san.ptr), san.ct)
 					--san:free()
 				end
 			end
 			senders[#senders+1] = quote
 				if fp.ct > 0 then
-					var san = lib.html.sanitize(fp, [f.mode == ':'])
+					var san = lib.html.sanitize(pool, fp, [f.mode == ':'])
 					lib.net.mg_send([destcon], san.ptr, san.ct)
 					--san:free()
 				end
 			end
 			appenders[#appenders+1] = quote
 				if fp.ct > 0 then
-					var san = lib.html.sanitize(fp, [f.mode == ':'])
+					var san = lib.html.sanitize(pool, fp, [f.mode == ':'])
 					[accumulator]:ppush(san)
 					--san:free()
 				end
 			end
 		elseif fields[idx] then
@@ -141,43 +142,69 @@
 			end
 		end
 	end
 
 	local tid = tplspec.id or '<anonymous>'
+	rec.methods.poolstr = terra([symself],[pool])
+		lib.dbg(['pooling template ' .. tid])
+		[tallyup]
+		var [symtxt] = pool:alloc(int8, [runningtally])
+		var [cpypos] = [&opaque](symtxt.ptr)
+		[copiers]
+		@[&int8](cpypos) = 0
+		symtxt.ct = [&int8](cpypos) - symtxt.ptr
+		return symtxt
+	end
 	rec.methods.tostr = terra([symself])
 		lib.dbg(['compiling template ' .. tid])
 		[tallyup]
 		var [symtxt] = lib.mem.heapa(int8, [runningtally])
 		var [cpypos] = [&opaque](symtxt.ptr)
+		var p: lib.mem.pool p:init(128)
+		var [pool] = &p
 		[copiers]
 		@[&int8](cpypos) = 0
 		symtxt.ct = [&int8](cpypos) - symtxt.ptr
+		pool:free()
 		return symtxt
 	end
 	rec.methods.append = terra([symself], [accumulator])
+		var [pool]
+		var p: lib.mem.pool
+		if [accumulator].pool == nil then
+			p:init(128)
+			pool = &p
+		else pool = [accumulator].pool end
 		lib.dbg(['appending template ' .. tid])
 		[tallyup]
 		accumulator:cue([runningtally])
 		[appenders]
+		if [accumulator].pool == nil then p:free() end
 		return accumulator
 	end
 	rec.methods.head = terra([symself], [destcon], code: uint16, hd: lib.mem.ptr(lib.http.header))
+		var p: lib.mem.pool p:init(128) -- FIXME
+		var [pool] = &p
 		lib.dbg(['transmitting template headers ' .. tid])
 		[tallyup]
 		lib.net.mg_printf([destcon], 'HTTP/1.1 %s', lib.http.codestr(code))
 		for i = 0, hd.ct do
 			lib.net.mg_printf([destcon], '%s: %s\r\n', hd.ptr[i].key, hd.ptr[i].value)
 		end
 		lib.net.mg_printf([destcon],'Content-Length: %llu\r\n\r\n', [runningtally] + 1)
+		p:free()
 	end
 	rec.methods.send = terra([symself], [destcon], code: uint16, hd: lib.mem.ptr(lib.http.header))
+		var p: lib.mem.pool p:init(128) -- FIXME
+		var [pool] = &p
 		lib.dbg(['transmitting template ' .. tid])
 
 		symself:head(destcon,code,hd)
 
 		[senders]
 		lib.net.mg_send([destcon],'\r\n',2)
+		p:free()
 	end
 	rec.methods.sz = terra([symself])
 		lib.dbg(['tallying template ' .. tid])
 		[tallyup]
 		return [runningtally] + 1