@mj-biz-apps/sales-core-entities-server 5.1.0

package/dist/activities/ActivityIngestService.d.ts

@@ -0,0 +1,111 @@
+/**
+ * @fileoverview The ingest run: source → filter → match → write, with the watermark and failure state.
+ *
+ * Everything here is behind `IActivitySource`, so this whole file is exercised by the fixture source and
+ * needs no mailbox. Order is not negotiable and is enforced by the shape of the method:
+ *
+ *   1. `Fetch`      — the source hands over normalized items
+ *   2. `Apply`      — the relevance filter discards anything involving no known contact
+ *   3. `MatchOpenDeals` — resolve which deal, if any
+ *   4. `LogActivity`    — write, idempotently
+ *   5. watermark    — advance `LastSyncAt` only if the run got that far
+ *
+ * Step 2 is the privacy boundary. No model call may be inserted before it; see `RelevanceFilter`.
+ *
+ * @module @mj-biz-apps/sales-core-entities-server
+ */
+import { type IMetadataProvider, type UserInfo } from '@memberjunction/core';
+import { ActivityWriterService } from './ActivityWriterService.js';
+import { DealMatcher } from './DealMatcher.js';
+import { RelevanceFilter } from './RelevanceFilter.js';
+import type { IActivitySource } from './ActivitySource.js';
+export interface IngestRunResult {
+    Success: boolean;
+    Fetched: number;
+    /** Passed the relevance filter. */
+    Relevant: number;
+    /** Discarded because no participant was a known contact. Not a failure — the filter working. */
+    Irrelevant: number;
+    Written: number;
+    /** Matched an existing `(SourceSystem, ExternalID)`; nothing written. The idempotency count. */
+    Duplicates: number;
+    /** Relevant, but matched no open deal. Filed against the parties only. */
+    Unattributed: number;
+    /**
+     * Items this run FAILED on, as opposed to discarded.
+     *
+     * The distinction is the whole point and the code did not make it. A discarded item has been SEEN
+     * — the filter looked at it and said no — so the watermark may pass it. A FAILED item has not been
+     * seen to a conclusion, and because `GetMessages` has no date filter (D-17) anything the watermark
+     * passes can never be re-fetched. Advancing over a failure loses the item permanently.
+     */
+    Failed: number;
+    WatermarkAdvancedTo: Date | null;
+    Issues: string[];
+}
+export declare class ActivityIngestService {
+    private readonly writer;
+    private readonly filter;
+    private readonly matcher;
+    /**
+     * The collaborators are injectable, defaulting to the real ones.
+     *
+     * ── WHY, AND IT IS NOT FOR TIDINESS ──
+     *
+     * A mutation pass found that nothing exercised the LOOKUP-FAILURE path: reverting
+     * `RelevanceFilter`'s `failed: true` to `false` killed no check, because the only failure any check
+     * could force was a failed WRITE. So the branch that holds the watermark when a contact-method read
+     * blips was untested — the exact branch that stops a transient error discarding a batch of real
+     * mail permanently.
+     *
+     * A read failure cannot be provoked from outside without breaking the database for everything else.
+     * Injecting a filter that reports one is the only way to reach it, and it costs three fields.
+     */
+    constructor(writer?: ActivityWriterService, filter?: RelevanceFilter, matcher?: DealMatcher);
+    /**
+     * Runs one sync for one connection.
+     *
+     * ── WHY FAILURE LANDS ON THE CONNECTION ROW AND NOT IN A LOG ──
+     *
+     * `ActivitySyncConnection` has `Status` (Active/Paused/Error/Disabled) and `LastError` because a sync
+     * that has been failing for a week is an operational fact somebody has to see. A log line is seen by
+     * whoever happens to be tailing it. So a failed run sets `Status = 'Error'` with the reason, and a
+     * successful one clears both — which means the row answers "is this working" without anyone reading
+     * anything else.
+     */
+    RunSync(connectionID: string, source: IActivitySource, provider: IMetadataProvider, contextUser: UserInfo, limit?: number): Promise<IngestRunResult>;
+    /**
+     * Writes one relevant item — once per matched deal, or once against the parties when none matched.
+     *
+     * ── THE UNATTRIBUTED CASE IS THE POINT, NOT THE FALLBACK ──
+     *
+     * S-US10's third criterion is that items link to account and contact "even where no deal match
+     * exists". The writer needs a `DealID`, so an unattributed item cannot go through the same path —
+     * instead the parties are recorded as UNRESOLVED IDENTITIES on the deal-less side. That keeps the
+     * evidence without inventing a stub Person, which the common migration forbids.
+     */
+    private fileItem;
+    /**
+     * Whether the stored rules allow this item.
+     *
+     * `Sequence` order, LAST MATCH WINS, default include. That is the ordinary firewall convention and
+     * the one a reader of `Sequence` + `Action` would expect — but nothing in the schema states it, so it
+     * is a choice recorded here rather than a fact read off the table. See D-21.
+     *
+     * `Filter` is NOT evaluated. It is a free-text column with no stated grammar, and inventing one here
+     * would mean every future consumer had to match an undocumented dialect.
+     */
+    private rulesAllow;
+    private loadConnection;
+    private loadRules;
+    /** The key in `Settings` holding the calendar watermark. */
+    private static readonly CALENDAR_WATERMARK;
+    /** The watermark for one surface. Messages use the column; the calendar uses `Settings`. */
+    private watermarkFor;
+    private advanceWatermark;
+    private recordFailure;
+    /** A clean run clears the error, so `Status` reflects the LAST run rather than the worst one. */
+    private clearFailure;
+    private connectionEntity;
+}
+//# sourceMappingURL=ActivityIngestService.d.ts.map

package/dist/activities/ActivityIngestService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityIngestService.d.ts","sourceRoot":"","sources":["../../src/activities/ActivityIngestService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAqB,KAAK,iBAAiB,EAAE,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhG,OAAO,EAAE,qBAAqB,EAAmC,MAAM,4BAA4B,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAyB,MAAM,sBAAsB,CAAC;AAE9E,OAAO,KAAK,EAAE,eAAe,EAAkB,MAAM,qBAAqB,CAAC;AAG3E,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,IAAI,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,EAAE,CAAC;CACpB;AAyBD,qBAAa,qBAAqB;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwB;IAC/C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IAEtC;;;;;;;;;;;;;OAaG;gBAEC,MAAM,GAAE,qBAAmD,EAC3D,MAAM,GAAE,eAAuC,EAC/C,OAAO,GAAE,WAA+B;IAO5C;;;;;;;;;;OAUG;IACU,OAAO,CAChB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,QAAQ,EACrB,KAAK,SAAM,GACZ,OAAO,CAAC,eAAe,CAAC;IAsL3B;;;;;;;;;OASG;YACW,QAAQ;IA4HtB;;;;;;;;;OASG;IACH,OAAO,CAAC,UAAU;YAoBJ,cAAc;YAad,SAAS;IAavB,4DAA4D;IAC5D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAwB;IAElE,4FAA4F;IAC5F,OAAO,CAAC,YAAY;YAiBN,gBAAgB;YAoChB,aAAa;IAiB3B,iGAAiG;YACnF,YAAY;YAmBZ,gBAAgB;CAWjC"}

package/dist/activities/ActivityIngestService.js

@@ -0,0 +1,485 @@
+/**
+ * @fileoverview The ingest run: source → filter → match → write, with the watermark and failure state.
+ *
+ * Everything here is behind `IActivitySource`, so this whole file is exercised by the fixture source and
+ * needs no mailbox. Order is not negotiable and is enforced by the shape of the method:
+ *
+ *   1. `Fetch`      — the source hands over normalized items
+ *   2. `Apply`      — the relevance filter discards anything involving no known contact
+ *   3. `MatchOpenDeals` — resolve which deal, if any
+ *   4. `LogActivity`    — write, idempotently
+ *   5. watermark    — advance `LastSyncAt` only if the run got that far
+ *
+ * Step 2 is the privacy boundary. No model call may be inserted before it; see `RelevanceFilter`.
+ *
+ * @module @mj-biz-apps/sales-core-entities-server
+ */
+import { LogError, RunView } from '@memberjunction/core';
+import { ActivityWriterService, escapeSql } from './ActivityWriterService.js';
+import { DealMatcher } from './DealMatcher.js';
+import { RelevanceFilter } from './RelevanceFilter.js';
+import { E_ACTIVITY_SYNC_CONNECTION, E_ACTIVITY_SYNC_RULE } from '@mj-biz-apps/sales-entities';
+export class ActivityIngestService {
+    /**
+     * The collaborators are injectable, defaulting to the real ones.
+     *
+     * ── WHY, AND IT IS NOT FOR TIDINESS ──
+     *
+     * A mutation pass found that nothing exercised the LOOKUP-FAILURE path: reverting
+     * `RelevanceFilter`'s `failed: true` to `false` killed no check, because the only failure any check
+     * could force was a failed WRITE. So the branch that holds the watermark when a contact-method read
+     * blips was untested — the exact branch that stops a transient error discarding a batch of real
+     * mail permanently.
+     *
+     * A read failure cannot be provoked from outside without breaking the database for everything else.
+     * Injecting a filter that reports one is the only way to reach it, and it costs three fields.
+     */
+    constructor(writer = new ActivityWriterService(), filter = new RelevanceFilter(), matcher = new DealMatcher()) {
+        this.writer = writer;
+        this.filter = filter;
+        this.matcher = matcher;
+    }
+    /**
+     * Runs one sync for one connection.
+     *
+     * ── WHY FAILURE LANDS ON THE CONNECTION ROW AND NOT IN A LOG ──
+     *
+     * `ActivitySyncConnection` has `Status` (Active/Paused/Error/Disabled) and `LastError` because a sync
+     * that has been failing for a week is an operational fact somebody has to see. A log line is seen by
+     * whoever happens to be tailing it. So a failed run sets `Status = 'Error'` with the reason, and a
+     * successful one clears both — which means the row answers "is this working" without anyone reading
+     * anything else.
+     */
+    async RunSync(connectionID, source, provider, contextUser, limit = 100) {
+        const result = {
+            Success: false,
+            Fetched: 0,
+            Relevant: 0,
+            Irrelevant: 0,
+            Written: 0,
+            Duplicates: 0,
+            Unattributed: 0,
+            Failed: 0,
+            WatermarkAdvancedTo: null,
+            Issues: [],
+        };
+        const connection = await this.loadConnection(connectionID, contextUser);
+        if (!connection) {
+            result.Issues.push(`No ActivitySyncConnection with ID '${connectionID}' exists.`);
+            return result;
+        }
+        /**
+         * ONLY `Active` RUNS. Paused, Error and Disabled all mean "do not read this mailbox", and the
+         * distinction between them is for a human — an operator paused it, a run failed, an admin turned
+         * it off. Treating any of them as runnable would make pausing advisory.
+         */
+        /*
+         * WHY THIS IS EXEMPT FROM THE VOCABULARY GATE, which correctly flagged it.
+         *
+         * `ActivitySyncConnection.Status` is a CHECK-constrained OPERATIONAL state in another app's
+         * schema, not domain vocabulary: there is no companion type table and no behaviour flag to read
+         * instead -- the column IS the state, and `recordFailure` below writes it. Renaming a value is a
+         * migration in bizapps-common, not somebody editing a lookup row, so the hazard the gate guards
+         * against -- a rename silently changing behaviour -- cannot arise here.
+         */
+        /**
+         * `Error` IS RETRIED. `Paused` and `Disabled` are not.
+         *
+         * This gate used to refuse anything but `Active`, and `clearFailure` sat inside the try block
+         * the gate protected — so one Graph throttle latched the connection off permanently. Nothing
+         * would retry it, and the job then reported SUCCESS with NO_CONNECTIONS when the only mailbox
+         * had been disabled by a transient error. Recovering meant a manual UPDATE on another app's
+         * table.
+         *
+         * The distinction the gate was missing: `Paused` and `Disabled` are decisions a PERSON made and
+         * must be honoured, while `Error` is a record of the last run and says nothing about whether
+         * the next one will work. So `Error` retries, and a clean run clears it.
+         */
+        const runnable = connection.Status === 'Active' || connection.Status === 'Error'; // vocabulary-grep-allow: operational state, not vocabulary
+        if (!runnable) {
+            result.Issues.push(`Connection '${connectionID}' is ${connection.Status}, not Active, so no sync was attempted.`);
+            return result;
+        }
+        if (connection.Provider !== source.ProviderName) {
+            result.Issues.push(`Connection provider '${connection.Provider}' does not match the source '${source.ProviderName}'.`);
+            return result;
+        }
+        if (!connection.Mailbox) {
+            result.Issues.push(`Connection '${connectionID}' names no mailbox.`);
+            await this.recordFailure(connectionID, 'No mailbox is configured.', provider, contextUser);
+            return result;
+        }
+        try {
+            /**
+             * ONE WATERMARK PER SURFACE, and this is a correctness requirement rather than tidiness.
+             *
+             * A connection has two sources -- messages and calendar -- and they advance independently. A
+             * shared `LastSyncAt` would take the max of both, so a meeting older than the newest email
+             * would be considered already-seen and SKIPPED FOREVER: the watermark moved past it without
+             * the calendar source ever having been asked. Nothing would error and no row would be
+             * missing from anything anyone counts.
+             *
+             * `LastSyncAt` stays the MESSAGE watermark, so nothing about existing behaviour changes, and
+             * the calendar's lives in `Settings` -- an existing nullable JSON column on the connection.
+             * That avoids a migration in another app's schema for a field only this app reads.
+             */
+            const since = this.watermarkFor(connection, source.Kind);
+            const batch = await source.Fetch({ Mailbox: connection.Mailbox, Since: since, Limit: limit });
+            result.Fetched = batch.Items.length;
+            result.Issues.push(...batch.Issues);
+            const rules = await this.loadRules(connectionID, contextUser);
+            const allowed = batch.Items.filter((item) => this.rulesAllow(item, rules));
+            if (allowed.length !== batch.Items.length) {
+                result.Issues.push(`${batch.Items.length - allowed.length} item(s) were excluded by ActivitySyncRule rows.`);
+            }
+            // ── THE PRIVACY BOUNDARY. Nothing above this line has looked at content for meaning. ──
+            const filtered = await this.filter.Apply(allowed, contextUser);
+            if (filtered.LookupFailed) {
+                /**
+                 * A FAILED LOOKUP IS NOT AN IRRELEVANT BATCH. Counting these as failures is what holds
+                 * the watermark: without it a database blip discarded the whole batch as personal mail
+                 * and moved past it, and D-17 means it could never be re-fetched.
+                 */
+                result.Failed += allowed.length;
+                result.Issues.push('The contact-method lookup failed, so nothing could be judged relevant. The watermark '
+                    + 'was held and these items will be re-read.');
+                return result;
+            }
+            const relevant = filtered.Verdicts.filter((v) => v.IsRelevant);
+            result.Relevant = relevant.length;
+            result.Irrelevant = filtered.Verdicts.length - relevant.length;
+            for (const verdict of relevant) {
+                await this.fileItem(verdict, connection, source, provider, contextUser, result);
+            }
+            /**
+             * THE WATERMARK ADVANCES ON A SUCCESSFUL RUN ONLY, and to the newest item the SOURCE reported
+             * rather than the newest one written. An item the filter discarded has still been seen, and
+             * not advancing past it would re-read and re-discard it forever.
+             */
+            /**
+             * THE WATERMARK ONLY MOVES IF NOTHING FAILED.
+             *
+             * Two ways a failure used to slip past it. `fileItem` records a failed write as an Issue
+             * and continues, and `LogActivity` returns `Success: false` rather than throwing — so the
+             * loop completed and `result.Success` was set true regardless. And `RelevanceFilter.lookup`
+             * and `DealMatcher` both return empty on a READ failure, which made a transient database
+             * blip look exactly like a batch of irrelevant mail.
+             *
+             * Either way the watermark advanced over items that were never written, and D-17 means they
+             * can never be re-fetched. Holding the watermark costs one re-read on the next run, which
+             * dedupe absorbs; advancing over a failure costs the item.
+             */
+            if (batch.HighWatermark && result.Failed === 0) {
+                await this.advanceWatermark(connectionID, batch.HighWatermark, source.Kind, provider, contextUser, result);
+            }
+            if (result.Failed > 0) {
+                result.Issues.push(`${result.Failed} item(s) failed rather than being discarded, so the watermark was `
+                    + 'held. They will be re-read next run and dedupe will absorb anything that did land.');
+            }
+            /**
+             * A run that failed on individual items is NOT a success. It used to report one, which is
+             * what let the connection look healthy while losing mail.
+             */
+            result.Success = result.Failed === 0;
+            /**
+             * ── AND THE FAILURE ROW IS ONLY CLEARED ON AN ACTUAL SUCCESS ────────────────────
+             *
+             * `clearFailure` ran BEFORE `Success` was computed, so it ran unconditionally: a run where
+             * EVERY write failed still reset the connection to `Active` with `LastError` blanked. The
+             * fix above made the RESULT honest and left the ROW lying, which is the half a human
+             * actually looks at.
+             *
+             * This file's own header says that row exists so a week of failure is visible. Clearing it
+             * on a failed run is the precise inverse — each failure erases the evidence of the last, so
+             * a connection failing every night forever looks healthy every morning.
+             */
+            if (result.Success) {
+                await this.clearFailure(connectionID, provider, contextUser);
+            }
+            return result;
+        }
+        catch (err) {
+            LogError(`ActivityIngestService.RunSync failed for connection ${connectionID}: ${err}`);
+            result.Issues.push(`The sync failed: ${String(err)}`);
+            await this.recordFailure(connectionID, String(err), provider, contextUser);
+            return result;
+        }
+    }
+    /**
+     * Writes one relevant item — once per matched deal, or once against the parties when none matched.
+     *
+     * ── THE UNATTRIBUTED CASE IS THE POINT, NOT THE FALLBACK ──
+     *
+     * S-US10's third criterion is that items link to account and contact "even where no deal match
+     * exists". The writer needs a `DealID`, so an unattributed item cannot go through the same path —
+     * instead the parties are recorded as UNRESOLVED IDENTITIES on the deal-less side. That keeps the
+     * evidence without inventing a stub Person, which the common migration forbids.
+     */
+    async fileItem(verdict, connection, source, provider, contextUser, result) {
+        const item = verdict.Item;
+        const matched = await this.matcher.MatchOpenDeals(verdict.Matches, contextUser);
+        if (matched.ReadFailed) {
+            /**
+             * The deal read failed, so this item has NOT been considered. Reporting it as unattributed
+             * would claim it was looked at and matched nothing.
+             */
+            result.Failed++;
+            result.Issues.push(`"${truncate(item.Subject)}" could not be matched to a deal — the read failed, so it was `
+                + 'neither filed nor discarded.');
+            return;
+        }
+        const deals = matched.Matches;
+        if (deals.length === 0) {
+            result.Unattributed++;
+            result.Issues.push(`"${truncate(item.Subject)}" involves a known contact but matches no open deal, so it was `
+                + 'not filed. Its participants are known; a later matcher can attribute it.');
+            return;
+        }
+        for (const match of deals) {
+            const written = await this.writer.LogActivity({
+                DealID: match.DealID,
+                TypeCode: item.TypeCode,
+                Title: item.Subject,
+                Description: item.Body,
+                StartedAt: item.StartedAt,
+                EndedAt: item.EndedAt,
+                Location: item.Location,
+                Direction: item.Direction,
+                /**
+                 * D-25, DECIDED: a cancelled meeting is `Cancelled`, not `Completed`.
+                 *
+                 * A meeting that did not happen is not a completed activity, and anyone reading a
+                 * timeline would be misled by one that says it was. `CK_Activity_Status` already
+                 * allows `'Cancelled'`, so this needs no new vocabulary -- the value was there and
+                 * the earlier version simply was not using it.
+                 *
+                 * `Outcome` is deliberately left NULL. The nearest seeded outcome is `NoShow`, and
+                 * that is a DIFFERENT fact: a no-show is a meeting that went ahead and somebody
+                 * failed to attend. Reusing it for a meeting called off in advance would put a
+                 * false claim in a column reports read.
+                 */
+                Status: item.Cancelled ? 'Cancelled' : 'Completed',
+                /**
+                 * `Integration`, never `Manual` — and only when the source actually contacted a
+                 * remote. A fixture run writes `System`, so a database can never be read as holding
+                 * real ingested mail when it holds test data.
+                 */
+                Source: source.IsLive ? 'Integration' : 'System',
+                SourceSystem: source.ProviderName,
+                ExternalID: item.ExternalID,
+                ExternalThreadID: item.ExternalThreadID,
+                ActivitySyncConnectionID: connection.ID,
+                Details: safeStringify(item.Raw),
+                /**
+                 * The deal's own parties are NOT added. Attaching the deal's contact to a message they
+                 * were not on would be a fabricated fact — the participants below are the ones who
+                 * were actually on it.
+                 */
+                IncludeDealParties: false,
+                Parties: verdict.Matches.flatMap((known) => {
+                    const role = roleFor(item, known.Address);
+                    const parties = [];
+                    if (known.PersonID) {
+                        parties.push({ Kind: 'Person', RecordID: known.PersonID, Role: role });
+                    }
+                    if (known.OrganizationID) {
+                        parties.push({
+                            Kind: 'Organization',
+                            RecordID: known.OrganizationID,
+                            Role: 'Participant',
+                        });
+                    }
+                    return parties;
+                }),
+                /** Everyone on the message we do not know, kept as identities for a later matcher. */
+                UnresolvedParties: verdict.Unmatched.map((address) => ({
+                    Kind: 'Email',
+                    Value: address,
+                    Role: roleFor(item, address),
+                })),
+            }, provider, contextUser);
+            if (written.AlreadyPresent) {
+                result.Duplicates++;
+            }
+            else if (written.Success) {
+                result.Written++;
+            }
+            else {
+                /**
+                 * COUNTED AS A FAILURE, not just reported. This is one of the two paths that used to
+                 * let the watermark advance over an item that was never written.
+                 */
+                result.Failed++;
+                result.Issues.push(`"${truncate(item.Subject)}" could not be filed: ${written.Issues.join(' | ')}`);
+            }
+            /**
+             * ONE ROW, MANY DEALS — so only the FIRST deal writes it. `(SourceSystem, ExternalID)` is
+             * unique, so a second deal would hit the idempotency short-circuit and count as a duplicate
+             * rather than gaining a second `Regarding` link. Linking one activity to several deals needs a
+             * writer that appends links to an existing row, which is a real gap: see D-20.
+             */
+            break;
+        }
+    }
+    /**
+     * Whether the stored rules allow this item.
+     *
+     * `Sequence` order, LAST MATCH WINS, default include. That is the ordinary firewall convention and
+     * the one a reader of `Sequence` + `Action` would expect — but nothing in the schema states it, so it
+     * is a choice recorded here rather than a fact read off the table. See D-21.
+     *
+     * `Filter` is NOT evaluated. It is a free-text column with no stated grammar, and inventing one here
+     * would mean every future consumer had to match an undocumented dialect.
+     */
+    rulesAllow(item, rules) {
+        let allowed = true;
+        for (const rule of rules) {
+            if (!rule.IsEnabled) {
+                continue;
+            }
+            if (rule.Direction && rule.Direction !== item.Direction) {
+                continue;
+            }
+            if (rule.DateFrom && item.StartedAt < new Date(rule.DateFrom)) {
+                continue;
+            }
+            if (rule.DateTo && item.StartedAt > new Date(rule.DateTo)) {
+                continue;
+            }
+            allowed = rule.Action === 'Include';
+        }
+        return allowed;
+    }
+    async loadConnection(id, contextUser) {
+        const r = await new RunView().RunView({
+            EntityName: E_ACTIVITY_SYNC_CONNECTION,
+            ExtraFilter: `ID = '${escapeSql(id)}'`,
+            ResultType: 'simple',
+            Fields: ['ID', 'Provider', 'Status', 'Mailbox', 'LastSyncAt', 'Settings'],
+        }, contextUser);
+        return r.Success ? ((r.Results ?? [])[0] ?? null) : null;
+    }
+    async loadRules(connectionID, contextUser) {
+        const r = await new RunView().RunView({
+            EntityName: E_ACTIVITY_SYNC_RULE,
+            ExtraFilter: `ActivitySyncConnectionID = '${escapeSql(connectionID)}'`,
+            OrderBy: 'Sequence ASC',
+            ResultType: 'simple',
+        }, contextUser);
+        return r.Success ? (r.Results ?? []) : [];
+    }
+    /** The key in `Settings` holding the calendar watermark. */
+    static { this.CALENDAR_WATERMARK = 'CalendarLastSyncAt'; }
+    /** The watermark for one surface. Messages use the column; the calendar uses `Settings`. */
+    watermarkFor(connection, kind) {
+        if (kind === 'Message') {
+            return connection.LastSyncAt ? new Date(connection.LastSyncAt) : null;
+        }
+        const stored = readSettings(connection.Settings)[ActivityIngestService.CALENDAR_WATERMARK];
+        if (typeof stored !== 'string' || !stored) {
+            return null;
+        }
+        const parsed = new Date(stored);
+        /**
+         * AN UNPARSEABLE WATERMARK IS TREATED AS ABSENT, not as an error. Hand-edited JSON is the likely
+         * cause, and the recovery -- re-read the window and let dedupe absorb it -- costs one extra fetch.
+         * Failing the run instead would leave the calendar permanently stuck on a typo.
+         */
+        return Number.isNaN(parsed.getTime()) ? null : parsed;
+    }
+    async advanceWatermark(connectionID, to, kind, provider, contextUser, result) {
+        const row = await this.connectionEntity(connectionID, provider, contextUser);
+        if (!row) {
+            result.Issues.push('The watermark could not be advanced — the connection row would not load.');
+            return;
+        }
+        if (kind === 'Message') {
+            row.LastSyncAt = to;
+        }
+        else {
+            /**
+             * MERGED, NOT OVERWRITTEN. `Settings` is a shared JSON bag on another app's row -- anything
+             * else keeping state there must survive this write, and replacing the object would delete it
+             * silently.
+             */
+            const settings = readSettings(row.Settings);
+            settings[ActivityIngestService.CALENDAR_WATERMARK] = to.toISOString();
+            row.Settings = JSON.stringify(settings);
+        }
+        if (await row.Save()) {
+            result.WatermarkAdvancedTo = to;
+        }
+        else {
+            result.Issues.push(`The watermark could not be advanced: ${row.LatestResult?.CompleteMessage ?? 'unknown error'}. `
+                + 'The next run will re-read this window; dedupe will absorb it.');
+        }
+    }
+    async recordFailure(connectionID, reason, provider, contextUser) {
+        const row = await this.connectionEntity(connectionID, provider, contextUser);
+        if (!row) {
+            return;
+        }
+        row.Status = 'Error';
+        row.LastError = reason.slice(0, 4000);
+        if (!(await row.Save())) {
+            LogError(`Could not record the sync failure on connection ${connectionID}.`);
+        }
+    }
+    /** A clean run clears the error, so `Status` reflects the LAST run rather than the worst one. */
+    async clearFailure(connectionID, provider, contextUser) {
+        const row = await this.connectionEntity(connectionID, provider, contextUser);
+        /**
+         * Clears on either signal, not just `LastError`. A connection left `Error` with a null message —
+         * possible if a previous version failed before writing one — would otherwise stay `Error`
+         * forever even though every run since has succeeded.
+         */
+        if (!row || (!row.LastError && row.Status !== 'Error')) { // vocabulary-grep-allow: operational state, not vocabulary
+            return;
+        }
+        row.LastError = null;
+        row.Status = 'Active';
+        await row.Save();
+    }
+    async connectionEntity(id, provider, contextUser) {
+        const row = await provider.GetEntityObject(E_ACTIVITY_SYNC_CONNECTION, contextUser);
+        return (await row.Load(id)) ? row : null;
+    }
+}
+/**
+ * `ActivitySyncConnection.Settings` parsed, or an empty bag.
+ *
+ * Never throws: the column is free-form JSON on a row this app does not own, so unparseable content is
+ * somebody else's problem to fix and not a reason to fail a sync.
+ */
+function readSettings(raw) {
+    if (!raw) {
+        return {};
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return parsed && typeof parsed === 'object' && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** The role an address earned on this item, defaulting to `Participant` when it is not listed. */
+function roleFor(item, address) {
+    const match = item.Participants.find((p) => p.Address.trim().toLowerCase() === address.trim().toLowerCase());
+    return match ? match.Role : 'Participant';
+}
+/** `Details` is nvarchar(max); a payload that will not stringify must not take the whole run down. */
+function safeStringify(value) {
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return null;
+    }
+}
+function truncate(value, max = 60) {
+    return value.length <= max ? value : `${value.slice(0, max - 1)}…`;
+}
+//# sourceMappingURL=ActivityIngestService.js.map

package/dist/activities/ActivityIngestService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ActivityIngestService.js","sourceRoot":"","sources":["../../src/activities/ActivityIngestService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAyC,MAAM,sBAAsB,CAAC;AAGhG,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAwB,MAAM,4BAA4B,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAyB,MAAM,sBAAsB,CAAC;AAC9E,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAoD/F,MAAM,OAAO,qBAAqB;IAK9B;;;;;;;;;;;;;OAaG;IACH,YACI,SAAgC,IAAI,qBAAqB,EAAE,EAC3D,SAA0B,IAAI,eAAe,EAAE,EAC/C,UAAuB,IAAI,WAAW,EAAE;QAExC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,OAAO,CAChB,YAAoB,EACpB,MAAuB,EACvB,QAA2B,EAC3B,WAAqB,EACrB,KAAK,GAAG,GAAG;QAEX,MAAM,MAAM,GAAoB;YAC5B,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,CAAC;YACT,mBAAmB,EAAE,IAAI;YACzB,MAAM,EAAE,EAAE;SACb,CAAC;QAEF,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;QACxE,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,YAAY,WAAW,CAAC,CAAC;YAClF,OAAO,MAAM,CAAC;QAClB,CAAC;QAED;;;;WAIG;QACH;;;;;;;;WAQG;QACH;;;;;;;;;;;;WAYG;QACH,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,KAAK,QAAQ,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,2DAA2D;QAC7I,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,eAAe,YAAY,QAAQ,UAAU,CAAC,MAAM,yCAAyC,CAChG,CAAC;YACF,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,wBAAwB,UAAU,CAAC,QAAQ,gCAAgC,MAAM,CAAC,YAAY,IAAI,CACrG,CAAC;YACF,OAAO,MAAM,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,YAAY,qBAAqB,CAAC,CAAC;YACrE,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,2BAA2B,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC3F,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YACD;;;;;;;;;;;;eAYG;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;YACpC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YAEpC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,kDAAkD,CAC3F,CAAC;YACN,CAAC;YAED,yFAAyF;YACzF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC/D,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;gBACxB;;;;mBAIG;gBACH,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;gBAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,uFAAuF;sBACjF,2CAA2C,CACpD,CAAC;gBACF,OAAO,MAAM,CAAC;YAClB,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAC/D,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;YAClC,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;YACpF,CAAC;YAED;;;;eAIG;YACH;;;;;;;;;;;;eAYG;YACH,IAAI,KAAK,CAAC,aAAa,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,CAAC,gBAAgB,CACvB,YAAY,EACZ,KAAK,CAAC,aAAa,EACnB,MAAM,CAAC,IAAI,EACX,QAAQ,EACR,WAAW,EACX,MAAM,CACT,CAAC;YACN,CAAC;YAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,GAAG,MAAM,CAAC,MAAM,oEAAoE;sBAC9E,oFAAoF,CAC7F,CAAC;YACN,CAAC;YAED;;;eAGG;YACH,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YAErC;;;;;;;;;;;eAWG;YACH,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,QAAQ,CAAC,uDAAuD,YAAY,KAAK,GAAG,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YAC3E,OAAO,MAAM,CAAC;QAClB,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,QAAQ,CAClB,OAAyB,EACzB,UAAyB,EACzB,MAAuB,EACvB,QAA2B,EAC3B,WAAqB,EACrB,MAAuB;QAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACrB;;;eAGG;YACH,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,gEAAgE;kBACpF,8BAA8B,CACvC,CAAC;YACF,OAAO;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC;QAE9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,iEAAiE;kBACrF,0EAA0E,CACnF,CAAC;YACF,OAAO;QACX,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CACzC;gBACI,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,OAAO;gBACnB,WAAW,EAAE,IAAI,CAAC,IAAI;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB;;;;;;;;;;;;mBAYG;gBACH,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW;gBAClD;;;;mBAIG;gBACH,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;gBAChD,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;gBACvC,wBAAwB,EAAE,UAAU,CAAC,EAAE;gBACvC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChC;;;;mBAIG;gBACH,kBAAkB,EAAE,KAAK;gBACzB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;oBACvC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC1C,MAAM,OAAO,GAAG,EAAE,CAAC;oBACnB,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;wBACjB,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpF,CAAC;oBACD,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;wBACvB,OAAO,CAAC,IAAI,CAAC;4BACT,IAAI,EAAE,cAAuB;4BAC7B,QAAQ,EAAE,KAAK,CAAC,cAAc;4BAC9B,IAAI,EAAE,aAAiC;yBAC1C,CAAC,CAAC;oBACP,CAAC;oBACD,OAAO,OAAO,CAAC;gBACnB,CAAC,CAAC;gBACF,sFAAsF;gBACtF,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,CAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACpE,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;iBAC/B,CAAC,CAAC;aACN,EACD,QAAQ,EACR,WAAW,CACd,CAAC;YAEF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBACzB,MAAM,CAAC,UAAU,EAAE,CAAC;YACxB,CAAC;iBAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACJ;;;mBAGG;gBACH,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACxG,CAAC;YAED;;;;;eAKG;YACH,MAAM;QACV,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACK,UAAU,CAAC,IAAoB,EAAE,KAAoB;QACzD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBAClB,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtD,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5D,SAAS;YACb,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxD,SAAS;YACb,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC;QACxC,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,EAAU,EAAE,WAAqB;QAC1D,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,OAAO,CACjC;YACI,UAAU,EAAE,0BAA0B;YACtC,WAAW,EAAE,SAAS,SAAS,CAAC,EAAE,CAAC,GAAG;YACtC,UAAU,EAAE,QAAQ;YACpB,MAAM,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC;SAC5E,EACD,WAAW,CACd,CAAC;QACF,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,YAAoB,EAAE,WAAqB;QAC/D,MAAM,CAAC,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC,OAAO,CACjC;YACI,UAAU,EAAE,oBAAoB;YAChC,WAAW,EAAE,+BAA+B,SAAS,CAAC,YAAY,CAAC,GAAG;YACtE,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,QAAQ;SACvB,EACD,WAAW,CACd,CAAC;QACF,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC;IAED,4DAA4D;aACpC,uBAAkB,GAAG,oBAAoB,CAAC;IAElE,4FAA4F;IACpF,YAAY,CAAC,UAAyB,EAAE,IAA4B;QACxE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,CAAC;QAC3F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC;;;;WAIG;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC1B,YAAoB,EACpB,EAAQ,EACR,IAA4B,EAC5B,QAA2B,EAC3B,WAAqB,EACrB,MAAuB;QAEvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YAC/F,OAAO;QACX,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACrB,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC;QACxB,CAAC;aAAM,CAAC;YACJ;;;;eAIG;YACH,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC5C,QAAQ,CAAC,qBAAqB,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;YACtE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACnB,MAAM,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACpC,CAAC;aAAM,CAAC;YACJ,MAAM,CAAC,MAAM,CAAC,IAAI,CACd,wCAAwC,GAAG,CAAC,YAAY,EAAE,eAAe,IAAI,eAAe,IAAI;kBAC1F,+DAA+D,CACxE,CAAC;QACN,CAAC;IACL,CAAC;IACO,KAAK,CAAC,aAAa,CACvB,YAAoB,EACpB,MAAc,EACd,QAA2B,EAC3B,WAAqB;QAErB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC;QACrB,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACtB,QAAQ,CAAC,mDAAmD,YAAY,GAAG,CAAC,CAAC;QACjF,CAAC;IACL,CAAC;IAED,iGAAiG;IACzF,KAAK,CAAC,YAAY,CACtB,YAAoB,EACpB,QAA2B,EAC3B,WAAqB;QAErB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7E;;;;WAIG;QACH,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,2DAA2D;YACjH,OAAO;QACX,CAAC;QACD,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC;QACtB,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC1B,EAAU,EACV,QAA2B,EAC3B,WAAqB;QAErB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,eAAe,CACtC,0BAA0B,EAC1B,WAAW,CACd,CAAC;QACF,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;;AAGL;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAA8B;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,OAAO,EAAE,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACjE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED,kGAAkG;AAClG,SAAS,OAAO,CAAC,IAAoB,EAAE,OAAe;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7G,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;AAC9C,CAAC;AAED,sGAAsG;AACtG,SAAS,aAAa,CAAC,KAA8B;IACjD,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,GAAG,GAAG,EAAE;IACrC,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC"}