@veilio-inc/cli 0.9.1 → 0.11.0

package/dist/store.js

@@ -8,9 +8,11 @@
 // The map holds real identifier names, so it is written 0600 and the store
 // directory carries a .gitignore. Committing it would undo the anonymization
 // for anyone reading the repo.
-import { chmodSync, existsSync, lstatSync, mkdirSync, readFileSync, rmSync, writeFileSync, } from 'node:fs';
-import { dirname, join, resolve } from 'node:path';
+import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, rmSync, writeFileSync, writeSync, } from 'node:fs';
+import { randomBytes } from 'node:crypto';
+import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { STORE_DIR } from '@veilio-inc/engine';
+import { trackedPaths } from './git-index.js';
 export { STORE_DIR };
 export const STORE_FILE = 'map.json';
 /** Walk up from `from` looking for an existing store or a repo root, so running
@@ -19,7 +21,11 @@ export const STORE_FILE = 'map.json';
 export function findProjectRoot(from) {
     let dir = resolve(from);
     for (;;) {
-        if (existsSync(join(dir, STORE_DIR)) || existsSync(join(dir, '.git')))
+        // Another user's .veilio is not this project's store (spec 085 L2): on a
+        // shared machine anyone can make /tmp/.veilio.
+        const store = join(dir, STORE_DIR);
+        if ((existsSync(store) && (ownerOf(store) !== 'other' || trustedStore(store))) ||
+            existsSync(join(dir, '.git')))
             return dir;
         const parent = dirname(dir);
         if (parent === dir)
@@ -33,10 +39,158 @@ export function resolveMapPath(override, cwd) {
         return resolve(cwd, override);
     return join(findProjectRoot(cwd), STORE_DIR, STORE_FILE);
 }
+/** The longest real name kept, as for aliases.json (reservations.ts). */
+const MAX_NAME = 100_000;
+// C0 and C1 controls (line feed, tab, NEL, escape, ...) and the Unicode line
+// and paragraph separators. A map value is not always an identifier (a manual
+// mark can be words with spaces, spec 082 adds non-ASCII letters), so no exact
+// name pattern exists; a character that breaks a line or drives a terminal is
+// never part of a name.
+const NOT_IN_A_NAME = /[\p{Cc}\u2028\u2029]/u;
+/** What a map or aliases.json may restore: 1 to 100000 characters, none of them a control or line separator. */
+export function isName(v) {
+    return typeof v === 'string' && v.length > 0 && v.length <= MAX_NAME && !NOT_IN_A_NAME.test(v);
+}
 function isSymbolMap(value) {
     if (typeof value !== 'object' || value === null || Array.isArray(value))
         return false;
-    return Object.values(value).every((v) => typeof v === 'string');
+    return Object.values(value).every(isName);
+}
+/**
+ * Refuses to write a value the store would not read back (review round 1):
+ * a map with one would be refused whole on its next read. Refused, not
+ * dropped, so a pull never quietly loses a teammate's entry.
+ */
+export function refuseNonNames(what, map) {
+    const bad = Object.keys(map).find((k) => !isName(map[k]));
+    if (bad !== undefined)
+        throw new StoreRefusal(`refusing to write ${what}: the value of ${bad.replace(new RegExp(NOT_IN_A_NAME.source, 'gu'), '').slice(0, 60)} is not a name (1 to 100000 characters, no control character or line break), so nothing was written.`);
+}
+/** A store the CLI will not use: exit 1 in the CLI, a tool error in the MCP server. */
+export class StoreRefusal extends Error {
+}
+/**
+ * The one way a store file (map.json, aliases.json, reserved.json) is read
+ * (spec 085 R1): its text, or null when there is none. Refused, whatever the
+ * file: when `.veilio/` or the file is a link (a cloned repository can commit
+ * one to another project's map), and when git tracks `.veilio`, map.json or
+ * aliases.json (a map in the repository is not yours to restore from). Git is
+ * asked first, so a tracked map is refused even where the file is absent under
+ * this spelling. Outside git, or with an index this reader cannot follow, the
+ * tracked check cannot answer and the file is read as before.
+ */
+export function openStoreFile(what, path) {
+    const dir = dirname(path);
+    const found = trackedStoreFile(path);
+    if (found !== null) {
+        const { root, tracked } = found;
+        // The path comes from the checkout: shown without control characters. A
+        // command only off Windows (its shells read quotes differently) and only
+        // for a root and path of plain characters; both single-quoted.
+        const shown = tracked.replace(new RegExp(NOT_IN_A_NAME.source, 'gu'), '');
+        const plain = /^[A-Za-z0-9._/ -]+$/;
+        const how = process.platform !== 'win32' && plain.test(root) && plain.test(tracked)
+            ? ` (\`git -C ${shellQuote(root)} rm --cached -- ${shellQuote(tracked)}\`)`
+            : '';
+        throw new StoreRefusal(`\`${shown}\` is tracked by git: a map in the repository is not yours to restore from. ` +
+            `Remove it from git${how}, then scrub again to build your own.`);
+    }
+    for (const p of [dir, path])
+        if (isLink(p))
+            throw new StoreRefusal(`refusing to read ${what}: ${p} is a link. The map is read only where it appears to be.`);
+    refuseOthers(dir, path);
+    if (!existsSync(path))
+        return null;
+    return readFileSync(path, 'utf8');
+}
+/**
+ * Whose `path` is: 'me' for the running user, 'other' for anyone else, 'none'
+ * when it is not there. Windows (no uid): always 'me'. Under sudo (root, with
+ * SUDO_UID), a file of the user who ran sudo is 'sudo': readable, not writable
+ * (security review: a file root writes there would be root's).
+ */
+function ownerOf(path) {
+    const me = process.getuid?.();
+    let uid;
+    try {
+        uid = lstatSync(path).uid;
+    }
+    catch {
+        return 'none';
+    }
+    if (me === undefined || uid === me)
+        return 'me';
+    return me === 0 && process.env.SUDO_UID === String(uid) ? 'sudo' : 'other';
+}
+/**
+ * The stores VEILIO_TRUST_STORE_OWNER lists (absolute paths, separated as in
+ * PATH), by real path, as git's safe.directory: each one exactly, no other.
+ */
+function trustedStore(dir) {
+    const listed = (process.env.VEILIO_TRUST_STORE_OWNER ?? '').split(delimiter).filter(isAbsolute);
+    if (listed.length === 0)
+        return false;
+    const real = (p) => {
+        try {
+            return realpathSync(p);
+        }
+        catch {
+            return resolve(p);
+        }
+    };
+    const here = real(dir);
+    return listed.some((p) => real(p) === here);
+}
+const sudoWriteRefusal = (dir) => new StoreRefusal(`refusing to write ${dir} as root: it belongs to the user who ran sudo, and a file root writes there would be root's. Run veilio without sudo.`);
+/** The store directory and its file are this user's, or not used (spec 085 L2, Q2 = A). */
+function refuseOthers(dir, path, write = false) {
+    const owners = [ownerOf(dir), ownerOf(path)];
+    if (owners.includes('sudo') && write && !trustedStore(dir))
+        throw sudoWriteRefusal(dir);
+    if (owners.includes('other') && !trustedStore(dir))
+        throw new StoreRefusal(`refusing to use ${dir}: it belongs to another user on this machine. Run veilio inside your own project, or remove that directory. If you trust it, add its full path to VEILIO_TRUST_STORE_OWNER.`);
+}
+/**
+ * Write a store file as a new file beside it, then rename it into place
+ * (spec 085 L2): never written through the file already there, which may be
+ * another name for a file elsewhere (a hard link) or another user's.
+ */
+export function writeStoreFile(what, path, text) {
+    checkStoreWrite(what, path);
+    const tmp = join(dirname(path), `.${basename(path)}.${randomBytes(6).toString('hex')}.tmp`);
+    const fd = openSync(tmp, 'wx', 0o600);
+    try {
+        try {
+            writeSync(fd, text);
+        }
+        finally {
+            closeSync(fd);
+        }
+        renameSync(tmp, path);
+    }
+    catch (err) {
+        rmSync(tmp, { force: true });
+        throw err;
+    }
+}
+/** One POSIX shell word, for a string of plain characters (no quote in it). */
+const shellQuote = (s) => `'${s}'`;
+/** The store path git tracks, as git names it, with its work tree root; null when none, or no way to tell. */
+function trackedStoreFile(path) {
+    const dir = dirname(path);
+    const git = trackedPaths(dir);
+    if (!git)
+        return null;
+    const rel = (p) => relative(git.root, p).split(sep).join('/');
+    const candidates = [path];
+    if (basename(dir) === STORE_DIR)
+        candidates.unshift(dir, join(dir, STORE_FILE), join(dir, 'aliases.json'));
+    for (const p of candidates) {
+        const name = rel(p);
+        if (name && !name.startsWith('..') && git.paths.has(name.toLowerCase()))
+            return { root: git.root, tracked: name };
+    }
+    return null;
 }
 /**
  * The Cloud provenance recorded alongside the local map, if any.
@@ -46,10 +200,11 @@ function isSymbolMap(value) {
  * `remote` — which reads correctly as "this map did not come from Cloud".
  */
 export function loadRemote(path) {
-    if (!existsSync(path))
+    const text = openStoreFile('the map', path);
+    if (text === null)
         return undefined;
     try {
-        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        const parsed = JSON.parse(text);
         const remote = parsed.remote;
         if (!remote || typeof remote.id !== 'string' || typeof remote.updatedAt !== 'string') {
             return undefined;
@@ -64,11 +219,12 @@ export function loadRemote(path) {
  *  file exists but cannot be understood — silently starting from empty there
  *  would orphan every placeholder the user already has in flight. */
 export function loadMap(path) {
-    if (!existsSync(path))
+    const text = openStoreFile('the map', path);
+    if (text === null)
         return {};
     let parsed;
     try {
-        parsed = JSON.parse(readFileSync(path, 'utf8'));
+        parsed = JSON.parse(text);
     }
     catch {
         throw new Error(`map file at ${path} is not valid JSON`);
@@ -100,6 +256,7 @@ export class MapOverwriteError extends Error {
  * another session's store, or by a future caller that forgets to load first.
  */
 export function saveMap(path, map, options = {}) {
+    refuseNonNames('the map', map);
     if (!options.force && existsSync(path)) {
         const dropped = Object.entries(loadMap(path)).filter(([placeholder, real]) => map[placeholder] !== real);
         if (dropped.length > 0) {
@@ -112,32 +269,94 @@ export function saveMap(path, map, options = {}) {
                 `could never be restored. Pass --force to overwrite anyway.`);
         }
     }
-    const dir = dirname(path);
-    // Security audit 2026-11-01: a store that is a link (one a repository
-    // committed) would put the real names in a file outside the project.
-    refuseLinks('the map', dir, path);
-    mkdirSync(dir, { recursive: true });
-    // A store directory inside a repo must never be committed — it holds the real
-    // names the anonymization exists to hide.
-    const ignore = join(dir, '.gitignore');
-    if (dir.endsWith(STORE_DIR) && !existsSync(ignore)) {
-        writeFileSync(ignore, '*\n', { mode: 0o600 });
-    }
+    prepareStoreWrite('the map', path);
     // Carried forward when the caller does not supply one, so an ordinary `scrub`
     // does not quietly erase the provenance a `pull` recorded.
     const remote = options.remote ?? loadRemote(path);
     const payload = { version: 1, map, ...(remote ? { remote } : {}) };
-    writeFileSync(path, `${JSON.stringify(payload, null, 2)}\n`, { mode: 0o600 });
-    // writeFileSync only applies `mode` when creating the file; enforce it on
-    // rewrite too so a pre-existing world-readable map gets locked down.
-    chmodSync(path, 0o600);
+    // A new 0600 file each time, so a world-readable map already there is replaced too.
+    writeStoreFile('the map', path, `${JSON.stringify(payload, null, 2)}\n`);
+}
+/**
+ * Everything that must hold before a store file is written: neither the store
+ * directory nor the file is a link (security audit 2026-11-01: a link a
+ * repository committed would put the real names outside the project), and a
+ * `.veilio` directory carries a `.gitignore` that keeps it out of git. One
+ * there already must be a plain file whose only pattern is `*` (spec 085 L4: a
+ * repository can commit its own, which ignores nothing); a missing one is
+ * written. It is never rewritten: it may be tracked, and a silent change to a
+ * tracked file is worse than a refusal.
+ */
+export function prepareStoreWrite(what, path) {
+    const dir = dirname(path);
+    // Under sudo, in a project the invoking user owns, root would make a store
+    // that user cannot use (review round 2): refused before anything is made.
+    if (ownerOf(dirname(dir)) === 'sudo' && !trustedStore(dir))
+        throw sudoWriteRefusal(dir);
+    checkStoreWrite(what, path);
+    // Made 0700 and not recursively, so a directory already there is checked
+    // again rather than taken: another user may have swapped it in meanwhile.
+    mkdirSync(dirname(dir), { recursive: true });
+    try {
+        mkdirSync(dir, { mode: 0o700 });
+    }
+    catch (err) {
+        if (err.code !== 'EEXIST')
+            throw err;
+    }
+    checkStoreWrite(what, path);
+    if (basename(dir) !== STORE_DIR)
+        return;
+    const ignore = join(dir, '.gitignore');
+    let st;
+    try {
+        st = lstatSync(ignore);
+    }
+    catch {
+        // None there: written, and never through a link planted after the check.
+        writeFileSync(ignore, '*\n', { mode: 0o600, flag: 'wx' });
+        return;
+    }
+    if (!st.isFile() || !onlyStar(readFileSync(ignore, 'utf8')))
+        throw new StoreRefusal(`refusing to write ${what}: ${dir}/.gitignore does not keep it out of git (it must be a plain file whose only pattern is \`*\`). Fix that file, then run again.`);
+}
+/**
+ * The store directory is a real directory and neither it nor the file is a
+ * link or another user's. Run before mkdir, after it, and again right before
+ * the rename (security review). Node has no openat, so a window remains
+ * between the last check and the rename; the 0700 directory bounds it.
+ */
+function checkStoreWrite(what, path) {
+    const dir = dirname(path);
+    refuseLinks(what, dir, path);
+    let st;
+    try {
+        st = lstatSync(dir);
+    }
+    catch {
+        st = null; // not made yet
+    }
+    if (st && !st.isDirectory())
+        throw new StoreRefusal(`refusing to write ${what}: ${dir} is not a directory`);
+    refuseOthers(dir, path, true);
+}
+/**
+ * A .gitignore whose only pattern is `*` (security review): `*` then
+ * `!map.json` would let git track the map, and the CLI cannot ask git which
+ * files it ignores. Blank lines and `#` comments are allowed. No trimming:
+ * git keeps leading spaces and a trailing tab (`  *`, `*\t` match nothing), so
+ * only a line that is exactly `*` (CRLF accepted) counts.
+ */
+function onlyStar(text) {
+    const patterns = text.split(/\r?\n/).filter((l) => l !== '' && !l.startsWith('#'));
+    return patterns.length > 0 && patterns.every((l) => l === '*');
 }
 /** Throws when any of `paths` is a link: the store's files are written only
  *  where they appear to be (security audit 2026-11-01). */
 export function refuseLinks(what, ...paths) {
     for (const p of paths)
         if (isLink(p))
-            throw new Error(`refusing to write ${what}: ${p} is a link`);
+            throw new StoreRefusal(`refusing to write ${what}: ${p} is a link`);
 }
 function isLink(path) {
     try {

package/dist/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,+BAA+B;AAE/B,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAClD,OAAO,EAAE,SAAS,EAAkB,MAAM,oBAAoB,CAAA;AAE9D,OAAO,EAAE,SAAS,EAAE,CAAA;AACpB,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAA;AAEpC;;oCAEoC;AACpC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,SAAS,CAAC;QACR,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,GAAG,CAAA;QACjF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;QACxC,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,GAAW;IACjE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACpD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AAC1D,CAAC;AAyBD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAA;AACjE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IACvC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAqC,CAAA;QACzF,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACrF,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,GAAG,GAAI,MAA4B,CAAC,GAAG,CAAA;IAC7C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,OAAO,CACrB,IAAY,EACZ,GAAc,EACd,UAA6D,EAAE;IAE/D,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CACnD,CAAA;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO;iBAClB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,IAAI,KAAK,OAAO,CAAC,MAAM,wBAAwB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;gBACxG,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,yDAAyD;gBACpG,4DAA4D,CAC/D,CAAA;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,sEAAsE;IACtE,qEAAqE;IACrE,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IACjC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACnC,8EAA8E;IAC9E,0CAA0C;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IACtC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,OAAO,GAAc,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC7E,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC7E,0EAA0E;IAC1E,qEAAqE;IACrE,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACxB,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAG,KAAe;IAC1D,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;AACpG,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA,CAAC,gBAAgB;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACnC,MAAM,CAAC,IAAI,CAAC,CAAA;IACZ,OAAO,IAAI,CAAA;AACb,CAAC"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,+BAA+B;AAE/B,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,YAAY,EACZ,UAAU,EACV,MAAM,EACN,aAAa,EACb,SAAS,GACV,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AAClG,OAAO,EAAE,SAAS,EAAkB,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7C,OAAO,EAAE,SAAS,EAAE,CAAA;AACpB,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,CAAA;AAEpC;;oCAEoC;AACpC,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,SAAS,CAAC;QACR,yEAAyE;QACzE,+CAA+C;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAClC,IACE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1E,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAE7B,OAAO,GAAG,CAAA;QACZ,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAA;QACxC,GAAG,GAAG,MAAM,CAAA;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,GAAW;IACjE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;IACpD,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;AAC1D,CAAC;AAyBD,yEAAyE;AACzE,MAAM,QAAQ,GAAG,OAAO,CAAA;AAExB,6EAA6E;AAC7E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,wBAAwB;AACxB,MAAM,aAAa,GAAG,uBAAuB,CAAA;AAE7C,gHAAgH;AAChH,MAAM,UAAU,MAAM,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAChG,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,GAAc;IACzD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACzD,IAAI,GAAG,KAAK,SAAS;QACnB,MAAM,IAAI,YAAY,CACpB,qBAAqB,IAAI,kBAAkB,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sGAAsG,CACtN,CAAA;AACL,CAAC;AAED,uFAAuF;AACvF,MAAM,OAAO,YAAa,SAAQ,KAAK;CAAG;AAE1C;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAA;QAC/B,wEAAwE;QACxE,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAA;QACzE,MAAM,KAAK,GAAG,qBAAqB,CAAA;QACnC,MAAM,GAAG,GACP,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YACrE,CAAC,CAAC,cAAc,UAAU,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,OAAO,CAAC,KAAK;YAC3E,CAAC,CAAC,EAAE,CAAA;QACR,MAAM,IAAI,YAAY,CACpB,KAAK,KAAK,8EAA8E;YACtF,qBAAqB,GAAG,uCAAuC,CAClE,CAAA;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,CAAC,CAAC;YACX,MAAM,IAAI,YAAY,CACpB,oBAAoB,IAAI,KAAK,CAAC,0DAA0D,CACzF,CAAA;IACL,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;AACnC,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,CAAA;IAC7B,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAA;IACf,CAAC;IACD,IAAI,EAAE,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA;IAC/C,OAAO,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;AAC5E,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC/F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAA;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC;IACH,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IACtB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAE,EAAE,CACvC,IAAI,YAAY,CACd,qBAAqB,GAAG,uHAAuH,CAChJ,CAAA;AAEH,2FAA2F;AAC3F,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY,EAAE,KAAK,GAAG,KAAK;IAC5D,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACvF,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAChD,MAAM,IAAI,YAAY,CACpB,mBAAmB,GAAG,6KAA6K,CACpM,CAAA;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,IAAY,EAAE,IAAY;IACrE,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC3F,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,CAAC;QACH,IAAI,CAAC;YACH,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACrB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;QACD,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACvB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC5B,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAA;AAElD,8GAA8G;AAC9G,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrE,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,CAAA;IACzB,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;QAC7B,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAA;IAC3E,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QACnB,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAC5C,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC3C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAqC,CAAA;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;QAC5B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACrF,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;qEAEqE;AACrE,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAC3C,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IAC5B,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,GAAG,GAAI,MAA4B,CAAC,GAAG,CAAA;IAC7C,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,eAAe,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,OAAO,CACrB,IAAY,EACZ,GAAc,EACd,UAA6D,EAAE;IAE/D,cAAc,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC9B,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,IAAI,CACnD,CAAA;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO;iBAClB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,MAAM,IAAI,iBAAiB,CACzB,yBAAyB,IAAI,KAAK,OAAO,CAAC,MAAM,wBAAwB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG;gBACxG,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,yDAAyD;gBACpG,4DAA4D,CAC/D,CAAA;QACH,CAAC;IACH,CAAC;IACD,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;IAClC,8EAA8E;IAC9E,2DAA2D;IAC3D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,CAAA;IACjD,MAAM,OAAO,GAAc,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAA;IAC7E,oFAAoF;IACpF,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,IAAY;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,2EAA2E;IAC3E,0EAA0E;IAC1E,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;QAAE,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;IACvF,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3B,yEAAyE;IACzE,0EAA0E;IAC1E,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5C,IAAI,CAAC;QACH,SAAS,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAA;IACjE,CAAC;IACD,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC3B,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,SAAS;QAAE,OAAM;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;IACtC,IAAI,EAAE,CAAA;IACN,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,OAAM;IACR,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,YAAY,CACpB,qBAAqB,IAAI,KAAK,GAAG,+HAA+H,CACjK,CAAA;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzB,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC5B,IAAI,EAAE,CAAA;IACN,IAAI,CAAC;QACH,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,EAAE,GAAG,IAAI,CAAA,CAAC,eAAe;IAC3B,CAAC;IACD,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE;QACzB,MAAM,IAAI,YAAY,CAAC,qBAAqB,IAAI,KAAK,GAAG,qBAAqB,CAAC,CAAA;IAChF,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;IAClF,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAA;AAChE,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAG,KAAe;IAC1D,KAAK,MAAM,CAAC,IAAI,KAAK;QACnB,IAAI,MAAM,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,qBAAqB,IAAI,KAAK,CAAC,YAAY,CAAC,CAAA;AACtF,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAA;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA,CAAC,gBAAgB;IAC/B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACnC,MAAM,CAAC,IAAI,CAAC,CAAA;IACZ,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/team-anonymize.d.ts

@@ -100,8 +100,12 @@ export declare class ReservationFailed extends Error {
     readonly cause: unknown;
     constructor(cause: unknown);
 }
+/** Cloud's reserve route refuses more numbers per base, or more bases, in one request. */
+export declare const RESERVE_MAX_COUNT = 5000;
+export declare const RESERVE_MAX_BASES = 32;
 /**
- * `anonymizeOverTeam`, with every NEW number taken from the team's allocation.
+ * `anonymizeOverTeam` for the files of one call, with every NEW number taken
+ * from the team's allocation.
  *
  * Two passes, because only this machine can read the identifiers and so only
  * this machine can know how many new names there are — but it may not choose
@@ -119,13 +123,26 @@ export declare class ReservationFailed extends Error {
  * Step 4 is not belt-and-braces. If it ever fires, the alternative is a map
  * that looks correct, publishes, and collides with a teammate's — the exact
  * failure that is invisible until someone restores the wrong name.
+ *
+ * Every file of one call goes through these steps together, with one
+ * reservation for all of them (e40: a 164-file project made 164 reservations
+ * and met Cloud's rate limit) - or one per group of files when they need more
+ * than one request may ask. Pass 1 carries each file's names into the next, so
+ * a name several files share is counted once; pass 2 numbers file after file
+ * inside the reserved runs. A mismatch in any file fails the whole call - no
+ * file comes back with numbers nobody reserved.
  */
-export declare function reservedAnonymizeOverTeam(source: string, local: Record<string, string>, team: {
+export declare function reservedAnonymizeFilesOverTeam(files: ReadonlyArray<{
+    source: string;
+    options: Omit<AnonymizeOptions, 'existingMap'>;
+}>, local: Record<string, string>, team: {
     namespace: Record<string, string>;
     highest: Record<string, number>;
     conflicts?: Record<string, number>;
-}, options: Omit<AnonymizeOptions, 'existingMap'>, reserve: Reserve): Promise<{
-    result: ReturnType<typeof anonymize>;
+}, reserve: Reserve): Promise<{
+    results: ReturnType<typeof anonymize>[];
+    /** How many entries each file added to the store. */
+    added: number[];
     toPersist: Record<string, string>;
 }>;
 //# sourceMappingURL=team-anonymize.d.ts.map

package/dist/team-anonymize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"team-anonymize.d.ts","sourceRoot":"","sources":["../src/team-anonymize.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,SAAS,EAGT,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAA;AAE3B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB;AAED;;wEAEwE;AACxE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAGzE;AAKD;;;;;;;;GAQG;AACH,qFAAqF;AACrF,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,gBAAgB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EACnE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,UAAU,CAAC,OAAO,SAAS,CAAC,CAsB9B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC,EACD,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,MAAM,CAAC;AACvD;;;;;GAKG;AACH,SAAS,CAAC,EAAE;IACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtD,GAAG,EAAE,MAAM,CAAA;IACX,yEAAyE;IACzE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5B,GACA;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAoB7E;AA0BD,wCAAwC;AACxC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlF;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMlE;AAED,8EAA8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CACpB,QAAQ,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,KACvD,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAAA;AAE5D,gEAAgE;AAChE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,WAAW,EAAE,MAAM;CAIhC;AAED,gFAAgF;AAChF,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO;gBAAd,KAAK,EAAE,OAAO;CAIpC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC,EACD,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAC9C,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CA0DtF"}
+{"version":3,"file":"team-anonymize.d.ts","sourceRoot":"","sources":["../src/team-anonymize.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,SAAS,EAGT,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAA;AAE3B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC3B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAgBxB;AAED;;wEAEwE;AACxE,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAGzE;AAKD;;;;;;;;GAQG;AACH,qFAAqF;AACrF,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOxB;AAED,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,gBAAgB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,EACnE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC7B,UAAU,CAAC,OAAO,SAAS,CAAC,CAsB9B;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC,EACD,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa,GAAG,MAAM,CAAC;AACvD;;;;;GAKG;AACH,SAAS,CAAC,EAAE;IACV,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtD,GAAG,EAAE,MAAM,CAAA;IACX,yEAAyE;IACzE,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC5B,GACA;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAoB7E;AA0BD,wCAAwC;AACxC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOlF;AAID;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMlE;AAED,8EAA8E;AAC9E,MAAM,MAAM,OAAO,GAAG,CACpB,QAAQ,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,KACvD,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAAA;AAE5D,gEAAgE;AAChE,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,WAAW,EAAE,MAAM;CAIhC;AAED,gFAAgF;AAChF,qBAAa,iBAAkB,SAAQ,KAAK;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO;gBAAd,KAAK,EAAE,OAAO;CAIpC;AAED,0FAA0F;AAC1F,eAAO,MAAM,iBAAiB,OAAO,CAAA;AACrC,eAAO,MAAM,iBAAiB,KAAK,CAAA;AAEnC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAA;CAAE,CAAC,EACxF,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC7B,IAAI,EAAE;IACJ,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACnC,EACD,OAAO,EAAE,OAAO,GACf,OAAO,CAAC;IACT,OAAO,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,EAAE,CAAA;IACvC,qDAAqD;IACrD,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC,CAAC,CA2HD"}

package/dist/team-anonymize.js

@@ -192,8 +192,12 @@ export class ReservationFailed extends Error {
         this.name = 'ReservationFailed';
     }
 }
+/** Cloud's reserve route refuses more numbers per base, or more bases, in one request. */
+export const RESERVE_MAX_COUNT = 5000;
+export const RESERVE_MAX_BASES = 32;
 /**
- * `anonymizeOverTeam`, with every NEW number taken from the team's allocation.
+ * `anonymizeOverTeam` for the files of one call, with every NEW number taken
+ * from the team's allocation.
  *
  * Two passes, because only this machine can read the identifiers and so only
  * this machine can know how many new names there are — but it may not choose
@@ -211,61 +215,129 @@ export class ReservationFailed extends Error {
  * Step 4 is not belt-and-braces. If it ever fires, the alternative is a map
  * that looks correct, publishes, and collides with a teammate's — the exact
  * failure that is invisible until someone restores the wrong name.
+ *
+ * Every file of one call goes through these steps together, with one
+ * reservation for all of them (e40: a 164-file project made 164 reservations
+ * and met Cloud's rate limit) - or one per group of files when they need more
+ * than one request may ask. Pass 1 carries each file's names into the next, so
+ * a name several files share is counted once; pass 2 numbers file after file
+ * inside the reserved runs. A mismatch in any file fails the whole call - no
+ * file comes back with numbers nobody reserved.
  */
-export async function reservedAnonymizeOverTeam(source, local, team, options, reserve) {
+export async function reservedAnonymizeFilesOverTeam(files, local, team, reserve) {
     const settled = Object.fromEntries(Object.entries(team.namespace).filter(([p]) => !(p in (team.conflicts ?? {}))));
     const existingMap = mergeNamespace(local, settled);
-    // Pass 1: count the new names per base. No floor needed — the numbers this
-    // pass chooses are discarded.
-    const first = anonymize(source, { ...options, existingMap });
-    const fresh = Object.keys(first.map).filter((p) => !(p in existingMap));
-    if (fresh.length === 0) {
-        // Nothing new, so nothing to reserve. Returning the first pass is correct
-        // AND is the only way to avoid a reservation of zero numbers, which the
-        // server would answer with an empty run the verification below rejects.
-        return { result: first, toPersist: persisted(local, first, settled) };
-    }
-    const counts = new Map();
-    for (const p of fresh) {
-        const m = NUMBERED.exec(p);
-        if (!m)
-            throw new ReservationMismatch(p);
-        counts.set(m[1], (counts.get(m[1]) ?? 0) + 1);
-    }
-    const inMap = highestPerBase(existingMap);
-    const inText = highestInText(source);
-    const requests = [...counts].map(([base, count]) => ({
-        base,
-        count,
-        floor: Math.max(team.highest[base] ?? 0, inMap[base] ?? 0, inText[base] ?? 0),
-    }));
-    let ranges;
-    try {
-        ranges = await reserve(requests);
-    }
-    catch (err) {
-        throw new ReservationFailed(err);
+    // Pass 1: each file over the names the earlier ones minted, so a name several
+    // files share is counted once, for the first file that has it. The numbers
+    // this pass chooses are discarded. The engine copies the map it is given.
+    const seen = { ...existingMap };
+    const firsts = [];
+    const newIn = [];
+    for (const { source, options } of files) {
+        const result = anonymize(source, { ...options, existingMap: seen });
+        const counts = new Map();
+        for (const p of Object.keys(result.map)) {
+            if (p in seen)
+                continue;
+            const m = NUMBERED.exec(p);
+            if (!m)
+                throw new ReservationMismatch(p);
+            counts.set(m[1], (counts.get(m[1]) ?? 0) + 1);
+        }
+        Object.assign(seen, result.map);
+        firsts.push(result);
+        newIn.push(counts);
     }
-    const byBase = new Map(ranges.map((r) => [r.base, r]));
-    // Pass 2: `start - 1` as the floor, so the first new number IS `start`.
-    const floors = {};
-    for (const { base } of requests) {
-        const range = byBase.get(base);
-        if (!range || !isSaneBlock(range))
-            throw new ReservationMismatch(`${base}*`);
-        floors[base] = range.start - 1;
-    }
-    const second = anonymizeAbove(source, { ...options, existingMap }, floors);
-    for (const placeholder of Object.keys(second.map)) {
-        if (placeholder in existingMap)
-            continue;
-        const m = NUMBERED.exec(placeholder);
-        const range = m ? byBase.get(m[1]) : undefined;
-        const n = m ? Number(m[2]) : NaN;
-        if (!range || n < range.start || n > range.end)
-            throw new ReservationMismatch(placeholder);
+    /** The store after each result, and how many entries each added. */
+    const keep = (results) => {
+        let toPersist = local;
+        const added = results.map((result) => {
+            const before = Object.keys(toPersist).length;
+            toPersist = persisted(toPersist, result, settled);
+            return Object.keys(toPersist).length - before;
+        });
+        return { results, added, toPersist };
+    };
+    // Nothing new, so nothing to reserve. Returning the first pass is correct AND
+    // is the only way to avoid a reservation of zero numbers, which the server
+    // would answer with an empty run the verification below rejects.
+    if (newIn.every((c) => c.size === 0))
+        return keep(firsts);
+    // Files in groups, each within one request's limits - one group, one
+    // reservation, for any project short of thousands of new names per base.
+    // A single file over a limit cannot be split: it fails here, with the reason.
+    const groups = [];
+    newIn.forEach((counts, i) => {
+        const over = [...counts].find(([, n]) => n > RESERVE_MAX_COUNT);
+        if (over || counts.size > RESERVE_MAX_BASES)
+            throw new ReservationFailed(new Error(over
+                ? `one file needs ${over[1]} new ${over[0]} names, more than the ${RESERVE_MAX_COUNT} one reservation may ask - scrub it in parts`
+                : `one file needs new names in ${counts.size} kinds, more than the ${RESERVE_MAX_BASES} one reservation may ask - scrub it in parts`));
+        const last = groups.at(-1);
+        const fits = last !== undefined &&
+            [...counts].every(([base, n]) => (last.counts.get(base) ?? 0) + n <= RESERVE_MAX_COUNT) &&
+            new Set([...last.counts.keys(), ...counts.keys()]).size <= RESERVE_MAX_BASES;
+        if (last && fits) {
+            for (const [base, n] of counts)
+                last.counts.set(base, (last.counts.get(base) ?? 0) + n);
+            last.to = i + 1;
+        }
+        else
+            groups.push({ from: i, to: i + 1, counts: new Map(counts) });
+    });
+    // A number already taken - in this project's store (also one the merge with
+    // the team's namespace left out), or in any file's text - is below every floor.
+    const taken = highestPerBase(local);
+    for (const { source } of files)
+        for (const [base, n] of Object.entries(highestInText(source)))
+            if (n > (taken[base] ?? 0))
+                taken[base] = n;
+    const map = { ...existingMap };
+    const results = [];
+    for (const group of groups) {
+        const inMap = highestPerBase(map);
+        const requests = [...group.counts].map(([base, count]) => ({
+            base,
+            count,
+            floor: Math.max(team.highest[base] ?? 0, inMap[base] ?? 0, taken[base] ?? 0),
+        }));
+        let ranges = [];
+        if (requests.length > 0) {
+            try {
+                ranges = await reserve(requests);
+            }
+            catch (err) {
+                throw new ReservationFailed(err);
+            }
+        }
+        const byBase = new Map(ranges.map((r) => [r.base, r]));
+        // Pass 2: `start - 1` as the floor, so the first new number IS `start`;
+        // each later file of the group numbers above the earlier ones, inside the run.
+        const floors = {};
+        for (const { base } of requests) {
+            const range = byBase.get(base);
+            if (!range || !isSaneBlock(range))
+                throw new ReservationMismatch(`${base}*`);
+            floors[base] = range.start - 1;
+        }
+        const before = new Set(Object.keys(map));
+        for (let i = group.from; i < group.to; i++) {
+            const result = anonymizeAbove(files[i].source, { ...files[i].options, existingMap: map }, floors);
+            Object.assign(map, result.map);
+            results.push(result);
+        }
+        // Every new placeholder of the group - none expected where nothing was reserved.
+        for (const placeholder of Object.keys(map)) {
+            if (before.has(placeholder))
+                continue;
+            const m = NUMBERED.exec(placeholder);
+            const range = m ? byBase.get(m[1]) : undefined;
+            const n = m ? Number(m[2]) : NaN;
+            if (!range || n < range.start || n > range.end)
+                throw new ReservationMismatch(placeholder);
+        }
     }
-    return { result: second, toPersist: persisted(local, second, settled) };
+    return keep(results);
 }
 /** What the project's store keeps: everything it held, whatever was minted, and
  *  only the team entries the output actually used (spec 005 US4). Shared with