@zhushanwen/pi-permission 0.0.1

package/src/rule-editor.ts

@@ -0,0 +1,262 @@
+/**
+ * W8: Rule editor overlay — three-mode dispatch (TUI / RPC / headless).
+ *
+ * editRulesViaOverlay：主入口，按 ctx.mode 分发。
+ * editViaRpc：RPC 循环（list → action → fill → ...），deps 注入。
+ * G16：RPC listOptions 用 applyOps(initialRules, ops) 重建。
+ */
+
+import { RuleEditorComponent } from "./rule-editor-component.js";
+import { ALL_TEMPLATES, applyOps, PRESET_COMMANDS, type RuleOp } from "./rule-templates.js";
+import type { Rule } from "./types.js";
+
+// ──────────────────────── 类型 ────────────────────────
+
+/** RuleOp re-export（rule-templates.ts 定义）。 */
+export type { RuleOp } from "./rule-templates.js";
+
+/** 编辑结果：RuleOp[]（有变更）或 undefined（cancel / headless 降级）。 */
+export type RuleEditorResult = RuleOp[] | undefined;
+
+/** editRulesViaOverlay 的 UI 上下文子集（从 Pi ExtensionContext 提取）。 */
+export interface RuleEditorContext {
+	mode: "tui" | "rpc" | "json" | "print";
+	ui: {
+		notify(msg: string, type?: "info" | "warning" | "error"): void;
+		select(title: string, options: string[], opts?: { signal?: AbortSignal; timeout?: number }): Promise<string | undefined>;
+		custom<T = void>(
+			factory: (tui: unknown, theme: unknown, kb: unknown, done: (result: T) => void) => unknown,
+			options?: { overlay?: boolean },
+		): Promise<T>;
+		/** 可选文本输入（custom 模板 / Reject-with-Reason 用）。SDK 提供，mock 可能缺失。 */
+		input?(title: string, placeholder?: string, opts?: { signal?: AbortSignal; timeout?: number }): Promise<string | undefined>;
+	};
+}
+
+/** editViaRpc 依赖注入（便于测试 mock）。 */
+export interface RuleEditorRpcDeps {
+	select: (title: string, options: string[]) => Promise<string | undefined>;
+	input: (title: string, placeholder?: string) => Promise<string | undefined>;
+}
+
+// ──────────────────────── editRulesViaOverlay（主入口） ────────────────────────
+
+/**
+ * 通过 overlay 编辑规则（TUI / RPC / headless 三模式分发）。
+ *
+ * @param ctx UI 上下文（mode + ui.*）
+ * @param initialRules 当前 userRules
+ * @param sessionIdCounter user-N id 生成器闭包
+ * @param rpcDeps 可选 RPC 依赖注入（测试 mock 用）
+ * @returns RuleOp[]（有变更）或 undefined（cancel / headless）
+ */
+export async function editRulesViaOverlay(
+	ctx: RuleEditorContext,
+	initialRules: readonly Rule[],
+	sessionIdCounter: () => string,
+	rpcDeps?: RuleEditorRpcDeps,
+): Promise<RuleEditorResult> {
+	switch (ctx.mode) {
+		case "tui":
+			return await editViaTui(ctx, initialRules, sessionIdCounter);
+		case "rpc":
+			return await editViaRpc(ctx, initialRules, sessionIdCounter, rpcDeps);
+		case "json":
+		case "print":
+		default:
+			ctx.ui.notify("[pi-permission] Rule editor not available in headless mode. Edit ~/.pi/agent/permission-config.json directly.", "warning");
+			return undefined;
+	}
+}
+
+// ──────────────────────── TUI 分支 ────────────────────────
+
+async function editViaTui(
+	ctx: RuleEditorContext,
+	initialRules: readonly Rule[],
+	sessionIdCounter: () => string,
+): Promise<RuleEditorResult> {
+	return await ctx.ui.custom<RuleOp[]>(
+		(_tui, _theme, _kb, done) => {
+			const comp = new RuleEditorComponent(
+				initialRules,
+				sessionIdCounter,
+				done,
+			);
+			return comp;
+		},
+		{ overlay: true },
+	);
+}
+
+// ──────────────────────── RPC 分支（G16） ────────────────────────
+
+/**
+ * RPC 循环编辑：list → action select → fill input → ... 直到 Done / cancel。
+ *
+ * G16：每次 op 后 listOptions 更新（反映前序操作）。
+ * deps 注入 select/input 便于测试 mock。
+ */
+export async function editViaRpc(
+	ctx: RuleEditorContext,
+	initialRules: readonly Rule[],
+	sessionIdCounter: () => string,
+	rpcDeps?: RuleEditorRpcDeps,
+): Promise<RuleEditorResult> {
+	const select = rpcDeps?.select ?? ctx.ui.select;
+	// ctx.ui.input 可用 → 用真实文本输入（custom 模板需要自由文本）；
+	// 不可用 → fallback 把 input 降级为单选项 select（占位符文本，仅保底）。
+	const input = rpcDeps?.input
+		?? (typeof ctx.ui.input === "function"
+			? (title: string, ph?: string) => ctx.ui.input!(title, ph)
+			: (title: string, ph?: string) => ctx.ui.select(title, [ph ?? ""]).then((v) => v === undefined ? undefined : v));
+
+	const ops: RuleOp[] = [];
+
+	for (;;) {
+		// 构建 listOptions（G16：用 applyOps 反映前序操作）
+		const currentRules = applyOps([...initialRules], ops);
+		const ruleLabels = currentRules.map((r) => `[${r.action}] ${r.pattern}`);
+		const listOptions = [...ruleLabels, "[+ Add rule]", "[Done]"];
+
+		const listChoice = await select("[pi-permission] Permission Rules", listOptions);
+		if (listChoice === undefined) {
+			// cancel
+			return undefined;
+		}
+
+		if (listChoice === "[Done]") {
+			return ops.length > 0 ? ops : undefined;
+		}
+
+		if (listChoice === "[+ Add rule]") {
+			const op = await rpcAddFlow(select, input, sessionIdCounter);
+			if (op !== undefined) {
+				ops.push(op);
+			}
+			continue;
+		}
+
+		// 选择了一条现有规则 → edit 模式
+		const ruleIdx = ruleLabels.indexOf(listChoice);
+		if (ruleIdx >= 0 && ruleIdx < currentRules.length) {
+			const existingRule = currentRules[ruleIdx];
+			if (existingRule !== undefined) {
+				const editOp = await rpcEditFlow(select, input, existingRule);
+				if (editOp !== undefined) {
+					ops.push(editOp);
+				}
+			}
+		}
+	}
+}
+
+/** RPC add flow：选模板 → fill。 */
+async function rpcAddFlow(
+	select: (title: string, options: string[]) => Promise<string | undefined>,
+	input: (title: string, placeholder?: string) => Promise<string | undefined>,
+	sessionIdCounter: () => string,
+): Promise<RuleOp | undefined> {
+	const templateLabels = ALL_TEMPLATES.map((t) => t.label);
+	const templateChoice = await select("[pi-permission] Select template", templateLabels);
+	if (templateChoice === undefined) return undefined;
+
+	const template = ALL_TEMPLATES.find((t) => t.label === templateChoice);
+	if (template === undefined) return undefined;
+
+	const selections: Record<string, string | undefined> = {};
+
+	if (template.id === "custom") {
+		// custom: pattern + action + tool + description
+		const pattern = await input("[pi-permission] Pattern (wildcard, e.g. 'npm *')", "npm *");
+		if (pattern === undefined) return undefined;
+		selections.pattern = pattern;
+
+		const actionChoice = await select("[pi-permission] Action", ["allow", "deny", "ask"]);
+		if (actionChoice === undefined) return undefined;
+		selections.action = actionChoice;
+
+		selections.tool = "bash"; // G9
+		const desc = await input("[pi-permission] Description (optional)", "");
+		selections.description = desc || undefined;
+	} else {
+		// 非 custom：选命令（带搜索）
+		const cmdResult = await rpcSelectCommand(select, input);
+		if (cmdResult === undefined) return undefined;
+		selections.cmd = cmdResult;
+
+		// 选择范围：整个命令家族 / 特定子命令
+		if (template.id !== "allow-family" && template.id !== "ask-before") {
+			// deny-family / allow-subcmd：需要选子命令
+			const scopeChoice = await select(`[pi-permission] Select scope for ${cmdResult}`, [
+				`${cmdResult} * (all subcommands)`,
+				`${cmdResult} <subcommand> * (specific)`,
+			]);
+			if (scopeChoice === undefined) return undefined;
+
+			if (scopeChoice.includes("<subcommand>")) {
+				const subcmd = await input("[pi-permission] Enter subcommand name", "");
+				if (subcmd === undefined || subcmd.trim().length === 0) return undefined;
+				selections.subcmd = subcmd.trim();
+			} else {
+				selections.subcmd = "__any__";
+			}
+		}
+	}
+
+	const built = template.build(selections);
+	const ruleId = sessionIdCounter(); // G13：立即赋值
+	const rule: Rule = { id: ruleId, ...built };
+	return { kind: "add", rule };
+}
+
+/** RPC 命令选择（带搜索） */
+async function rpcSelectCommand(
+	select: (title: string, options: string[]) => Promise<string | undefined>,
+	input: (title: string, placeholder?: string) => Promise<string | undefined>,
+): Promise<string | undefined> {
+	// 先问用户是否要搜索
+	const modeChoice = await select("[pi-permission] How to select command?", [
+		"[Browse list]",
+		"[Type to search]",
+	]);
+	if (modeChoice === undefined) return undefined;
+
+	if (modeChoice === "[Type to search]") {
+		// 直接输入命令名
+		const cmd = await input("[pi-permission] Enter command name", "");
+		if (cmd === undefined || cmd.trim().length === 0) return undefined;
+		return cmd.trim();
+	}
+
+	// 浏览列表
+	const cmdOptions = [...PRESET_COMMANDS.map((c) => c.label), "[Other]"];
+	const cmdChoice = await select("[pi-permission] Select command", cmdOptions);
+	if (cmdChoice === undefined) return undefined;
+
+	if (cmdChoice === "[Other]") {
+		const cmd = await input("[pi-permission] Enter command name", "");
+		if (cmd === undefined || cmd.trim().length === 0) return undefined;
+		return cmd.trim();
+	}
+
+	const preset = PRESET_COMMANDS.find((c) => c.label === cmdChoice);
+	return preset?.cmd ?? cmdChoice;
+}
+
+/** RPC edit flow：选择 action（edit fields / delete）。 */
+async function rpcEditFlow(
+	select: (title: string, options: string[]) => Promise<string | undefined>,
+	_input: (title: string, placeholder?: string) => Promise<string | undefined>,
+	existingRule: Rule,
+): Promise<RuleOp | undefined> {
+	const actionChoice = await select(`[pi-permission] Edit rule: ${existingRule.pattern}`, [
+		"[Delete this rule]",
+		"[Cancel]",
+	]);
+	if (actionChoice === undefined || actionChoice === "[Cancel]") return undefined;
+	if (actionChoice === "[Delete this rule]") {
+		return { kind: "delete", id: existingRule.id };
+	}
+	return undefined;
+}

package/src/rule-templates.ts

@@ -0,0 +1,332 @@
+/**
+ * W8: Rule templates + preset commands + applyOps + classifyRuleTemplate.
+ *
+ * G4：pattern 用 wildcard（`npm *`），不用正则（`\bnpm\b`）。
+ * W3 matcher 对 user 规则走 `wildcardToRegExp(pattern)`，末尾 ` *` 匹配无参 + 有参。
+ *
+ * G8：build 不生成 id（由 commitFill 赋 sessionIdCounter()）。
+ * G13：sessionIdCounter 立即赋值，不用 `__new__` 占位。
+ * applyOps 无 nextId 参数，add 分支直接用 op.rule.id。
+ */
+
+import type { PermissionAction, Rule, RuleSource } from "./types.js";
+
+// ──────────────────────── PRESET_COMMANDS（53 命令 + Other） ────────────────────────
+
+export interface PresetCommand {
+	cmd: string;
+	label: string;
+	category: string;
+}
+
+/** 包管理器 6 + 容器云 5 + VCS 3 + 构建任务 6 + 网络下载 8 + 文件系统 9 + 运行时 2 + 文本处理 6 + 系统信息 8 = 53 */
+export const PRESET_COMMANDS: readonly PresetCommand[] = [
+	// 包管理器
+	{ cmd: "npm", label: "npm (Node package manager)", category: "Package Managers" },
+	{ cmd: "yarn", label: "yarn (Node package manager)", category: "Package Managers" },
+	{ cmd: "pnpm", label: "pnpm (Node package manager)", category: "Package Managers" },
+	{ cmd: "pip", label: "pip (Python package installer)", category: "Package Managers" },
+	{ cmd: "brew", label: "brew (macOS package manager)", category: "Package Managers" },
+	{ cmd: "apt", label: "apt (Debian/Ubuntu package manager)", category: "Package Managers" },
+	// 容器云
+	{ cmd: "docker", label: "docker (container runtime)", category: "Containers & Cloud" },
+	{ cmd: "kubectl", label: "kubectl (Kubernetes CLI)", category: "Containers & Cloud" },
+	{ cmd: "terraform", label: "terraform (infrastructure as code)", category: "Containers & Cloud" },
+	{ cmd: "aws", label: "aws (AWS CLI)", category: "Containers & Cloud" },
+	{ cmd: "gcloud", label: "gcloud (Google Cloud CLI)", category: "Containers & Cloud" },
+	// VCS
+	{ cmd: "git", label: "git (version control)", category: "Version Control" },
+	{ cmd: "gh", label: "gh (GitHub CLI)", category: "Version Control" },
+	{ cmd: "hg", label: "hg (Mercurial)", category: "Version Control" },
+	// 构建任务
+	{ cmd: "make", label: "make (build tool)", category: "Build & Tasks" },
+	{ cmd: "cargo", label: "cargo (Rust build tool)", category: "Build & Tasks" },
+	{ cmd: "go", label: "go (Go toolchain)", category: "Build & Tasks" },
+	{ cmd: "mvn", label: "mvn (Maven)", category: "Build & Tasks" },
+	{ cmd: "gradle", label: "gradle (Gradle build)", category: "Build & Tasks" },
+	{ cmd: "cmake", label: "cmake (C/C++ build)", category: "Build & Tasks" },
+	// 网络下载
+	{ cmd: "curl", label: "curl (HTTP client)", category: "Network & Download" },
+	{ cmd: "wget", label: "wget (downloader)", category: "Network & Download" },
+	{ cmd: "ssh", label: "ssh (remote shell)", category: "Network & Download" },
+	{ cmd: "scp", label: "scp (secure copy)", category: "Network & Download" },
+	{ cmd: "rsync", label: "rsync (file sync)", category: "Network & Download" },
+	{ cmd: "ping", label: "ping (network probe)", category: "Network & Download" },
+	{ cmd: "dig", label: "dig (DNS lookup)", category: "Network & Download" },
+	{ cmd: "ssh-keygen", label: "ssh-keygen (SSH key generation)", category: "Network & Download" },
+	// 文件系统
+	{ cmd: "rm", label: "rm (remove files)", category: "Filesystem" },
+	{ cmd: "cp", label: "cp (copy files)", category: "Filesystem" },
+	{ cmd: "mv", label: "mv (move files)", category: "Filesystem" },
+	{ cmd: "chmod", label: "chmod (change permissions)", category: "Filesystem" },
+	{ cmd: "ls", label: "ls (list directory)", category: "Filesystem" },
+	{ cmd: "cat", label: "cat (concatenate files)", category: "Filesystem" },
+	{ cmd: "find", label: "find (search files)", category: "Filesystem" },
+	{ cmd: "grep", label: "grep (search text)", category: "Filesystem" },
+	{ cmd: "tree", label: "tree (directory tree)", category: "Filesystem" },
+	// 运行时
+	{ cmd: "node", label: "node (Node.js runtime)", category: "Runtime" },
+	{ cmd: "python", label: "python (Python runtime)", category: "Runtime" },
+	// 文本处理
+	{ cmd: "jq", label: "jq (JSON processor)", category: "Text Processing" },
+	{ cmd: "sed", label: "sed (stream editor)", category: "Text Processing" },
+	{ cmd: "awk", label: "awk (text processing)", category: "Text Processing" },
+	{ cmd: "sort", label: "sort (sort lines)", category: "Text Processing" },
+	{ cmd: "diff", label: "diff (compare files)", category: "Text Processing" },
+	{ cmd: "iconv", label: "iconv (encoding converter)", category: "Text Processing" },
+	// 系统信息
+	{ cmd: "ps", label: "ps (process list)", category: "System & Info" },
+	{ cmd: "top", label: "top (process monitor)", category: "System & Info" },
+	{ cmd: "du", label: "du (disk usage)", category: "System & Info" },
+	{ cmd: "df", label: "df (disk free)", category: "System & Info" },
+	{ cmd: "uname", label: "uname (system info)", category: "System & Info" },
+	{ cmd: "whoami", label: "whoami (current user)", category: "System & Info" },
+	{ cmd: "env", label: "env (environment variables)", category: "System & Info" },
+	{ cmd: "date", label: "date (system date)", category: "System & Info" },
+] as const;
+
+/** PRESET_COMMANDS 按 category 分组（UI 展示用）。 */
+export function presetCommandsByCategory(): Map<string, PresetCommand[]> {
+	const map = new Map<string, PresetCommand[]>();
+	for (const cmd of PRESET_COMMANDS) {
+		const list = map.get(cmd.category);
+		if (list) {
+			list.push(cmd);
+		} else {
+			map.set(cmd.category, [cmd]);
+		}
+	}
+	return map;
+}
+
+// ──────────────────────── RuleTemplate ────────────────────────
+
+/** 模板 selections 值类型（各字段按模板分支含义不同）。 */
+export interface TemplateSelections {
+	cmd?: string;
+	subcmd?: string;
+	/** Custom 模板直接传完整字段 */
+	pattern?: string;
+	action?: PermissionAction;
+	tool?: string;
+	description?: string;
+}
+
+/** build 返回的 Rule（无 id，由 commitFill 赋值）。 */
+export interface RuleWithoutId {
+	tool: string;
+	pattern: string;
+	action: PermissionAction;
+	source: RuleSource;
+	description?: string;
+}
+
+export interface RuleTemplate {
+	id: string;
+	label: string;
+	description: string;
+	build(selections: TemplateSelections): RuleWithoutId;
+}
+
+// ──────────────────────── 5 个模板 ────────────────────────
+
+export const allowFamilyTemplate: RuleTemplate = {
+	id: "allow-family",
+	label: "Allow command family",
+	description: "Allow all invocations of a command (e.g., npm install, npm run build, npm with no args)",
+	build(selections): RuleWithoutId {
+		const cmd = selections.cmd ?? "unknown";
+		return {
+			tool: "bash",
+			pattern: `${cmd} *`,
+			action: "allow",
+			source: "user",
+		};
+	},
+};
+
+export const denyFamilyTemplate: RuleTemplate = {
+	id: "deny-family",
+	label: "Deny command family",
+	description: "Deny all invocations of a command (or specific subcommand)",
+	build(selections): RuleWithoutId {
+		const cmd = selections.cmd ?? "unknown";
+		const subcmd = selections.subcmd;
+		if (subcmd === undefined || subcmd === "__any__") {
+			return {
+				tool: "bash",
+				pattern: `${cmd} *`,
+				action: "deny",
+				source: "user",
+			};
+		}
+		return {
+			tool: "bash",
+			pattern: `${cmd} ${subcmd} *`,
+			action: "deny",
+			source: "user",
+		};
+	},
+};
+
+export const askBeforeTemplate: RuleTemplate = {
+	id: "ask-before",
+	label: "Ask before command",
+	description: "Ask for confirmation before running a command",
+	build(selections): RuleWithoutId {
+		const cmd = selections.cmd ?? "unknown";
+		return {
+			tool: "bash",
+			pattern: `${cmd} *`,
+			action: "ask",
+			source: "user",
+		};
+	},
+};
+
+export const allowSubcmdTemplate: RuleTemplate = {
+	id: "allow-subcmd",
+	label: "Allow specific subcommand",
+	description: "Allow only a specific subcommand (e.g., git status, git log)",
+	build(selections): RuleWithoutId {
+		const cmd = selections.cmd ?? "unknown";
+		const subcmd = selections.subcmd;
+		// __any__ 哨兵：用户在 RPC 流程选了「all subcommands」→ 退化为 allow-family 语义，
+		// 避免拼成永不匹配的死规则 `<cmd> __any__ *`（与 deny-family 对称）。
+		if (subcmd === undefined || subcmd === "__any__") {
+			return {
+				tool: "bash",
+				pattern: `${cmd} *`,
+				action: "allow",
+				source: "user",
+			};
+		}
+		return {
+			tool: "bash",
+			pattern: `${cmd} ${subcmd} *`,
+			action: "allow",
+			source: "user",
+		};
+	},
+};
+
+export const customTemplate: RuleTemplate = {
+	id: "custom",
+	label: "Custom (advanced)",
+	description: "Define a custom rule with arbitrary pattern, action, and tool",
+	build(selections): RuleWithoutId {
+		return {
+			tool: selections.tool ?? "bash",
+			pattern: selections.pattern ?? "*",
+			action: selections.action ?? "allow",
+			source: "user",
+			description: selections.description,
+		};
+	},
+};
+
+/** 所有模板（5 个，顺序固定）。 */
+export const ALL_TEMPLATES: readonly RuleTemplate[] = [
+	allowFamilyTemplate,
+	denyFamilyTemplate,
+	askBeforeTemplate,
+	allowSubcmdTemplate,
+	customTemplate,
+] as const;
+
+// ──────────────────────── classifyRuleTemplate ────────────────────────
+
+/**
+ * FAMILY_RE：`<cmd> *` 形式（allow-family / deny-family any / ask-before）。
+ * SUBCMD_RE：`<cmd> <subcmd> *` 形式（deny-family specific / allow-subcmd）。
+ */
+const FAMILY_RE = /^([^ *?]+) \*$/;
+const SUBCMD_RE = /^([^ *?]+) ([^ *?]+) \*$/;
+
+/**
+ * 根据 rule 的 pattern + action 推断其模板 id。
+ * 无法推断时返回 undefined（如 Custom 规则）。
+ */
+export function classifyRuleTemplate(rule: Rule): string | undefined {
+	const { pattern, action } = rule;
+
+	const subMatch = SUBCMD_RE.exec(pattern);
+	if (subMatch !== null) {
+		// `<cmd> <subcmd> *`
+		if (action === "deny") return "deny-family";
+		if (action === "allow") return "allow-subcmd";
+		return undefined;
+	}
+
+	const famMatch = FAMILY_RE.exec(pattern);
+	if (famMatch !== null) {
+		// `<cmd> *`
+		if (action === "allow") return "allow-family";
+		if (action === "deny") return "deny-family";
+		if (action === "ask") return "ask-before";
+		return undefined;
+	}
+
+	// 不匹配任何已知 pattern 格式 → custom
+	return "custom";
+}
+
+// ──────────────────────── applyOps ────────────────────────
+
+/** RuleOp discriminated union（G13：add 时 rule.id 已是真实 user-N）。 */
+export type RuleOp =
+	| { kind: "add"; rule: Rule }
+	| { kind: "edit"; id: string; rule: Rule }
+	| { kind: "delete"; id: string };
+
+/**
+ * 纯函数：对 userRules 施加 ops，返回新数组。
+ * - add：push op.rule（id 已赋值）
+ * - edit：findIndex(id) + 替换
+ * - delete：filter 过滤
+ *
+ * G8/G13：无 nextId 参数（add 时 rule.id 由 sessionIdCounter 立即赋值）。
+ */
+export function applyOps(userRules: Rule[], ops: RuleOp[]): Rule[] {
+	let result = [...userRules];
+	for (const op of ops) {
+		switch (op.kind) {
+			case "add": {
+				result = [...result, op.rule];
+				break;
+			}
+			case "edit": {
+				const idx = result.findIndex((r) => r.id === op.id);
+				if (idx >= 0) {
+					result = [...result.slice(0, idx), op.rule, ...result.slice(idx + 1)];
+				}
+				break;
+			}
+			case "delete": {
+				result = result.filter((r) => r.id !== op.id);
+				break;
+			}
+		}
+	}
+	return result;
+}
+
+// ──────────────────────── makeNextIdCounter ────────────────────────
+
+/**
+ * 构造 sessionIdCounter 闭包：从已有规则中提取 user-N 最大值 +1 递增。
+ *
+ * G13：commitFill 时 `rule.id = this.sessionIdCounter()` 立即拿到真实 id。
+ */
+export function makeNextIdCounter(existingRules: Rule[]): () => string {
+	let maxN = 0;
+	for (const rule of existingRules) {
+		const m = /^user-(\d+)$/.exec(rule.id);
+		if (m !== null) {
+			const n = Number.parseInt(m[1], 10);
+			if (n > maxN) maxN = n;
+		}
+	}
+	let next = maxN + 1;
+	return (): string => `user-${next++}`;
+}