@webiny/api-workflows 0.0.0-unstable.0156a4c312

package/features/routing/RoutingEvaluatorService/RoutingEvaluatorService.js

@@ -0,0 +1,546 @@
+import { Result } from "@webiny/feature/api";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { ListUsersUseCase } from "@webiny/api-core/features/users/ListUsers/index.js";
+import { ListUserTeamsUseCase } from "@webiny/api-core/features/users/ListUserTeams/index.js";
+import { filterActiveExclusions } from "../../../domain/settings/filterActiveExclusions.js";
+import { RoutingDependencyError } from "../../../domain/routing/errors.js";
+import { ROUTING_NO_CANDIDATE_REASON, ROUTING_SKIP_REASONS, ROUTING_TEAM_TARGET_SKIP_REASON } from "../../../domain/routing/reasons.js";
+import { getFailedRoutingConditions } from "../../../domain/routing/getFailedRoutingConditions.js";
+import { WorkflowModelParserService } from "../../model/WorkflowModelParserService/index.js";
+import { getRoutingUserSkipReason } from "../../../domain/routing/getRoutingUserSkipReason.js";
+import { listNotEvaluatedTrace } from "../../../domain/routing/listNotEvaluatedTrace.js";
+import { listRoutingCandidates } from "../../../domain/routing/listRoutingCandidates.js";
+import { listStrategySkips } from "../../../domain/routing/listStrategySkips.js";
+import { matchRoutingRuleConditions } from "../../../domain/routing/matchRoutingRuleConditions.js";
+import { matchRoutingRuleLocalConditions } from "../../../domain/routing/matchRoutingRuleLocalConditions.js";
+import { toRoutingEvaluation } from "../../../domain/routing/toRoutingEvaluation.js";
+import { GetWorkflowSettingsUseCase } from "../../settings/GetWorkflowSettings/abstractions.js";
+import { ReviewTargetReadAccess } from "../../review/ReviewTargetReadAccess/abstractions.js";
+import { ReviewTargetFolderChain } from "../../review/ReviewTargetFolderChain/abstractions.js";
+import { RoutingStrategyService } from "../RoutingStrategyService/abstractions.js";
+import { RoutingEvaluatorService } from "./abstractions.js";
+class RoutingEvaluatorServiceImpl {
+    constructor(identityContext, listUsers, listUserTeams, getSettings, readAccesses, folderChains, strategies, modelParser){
+        this.identityContext = identityContext;
+        this.listUsers = listUsers;
+        this.listUserTeams = listUserTeams;
+        this.getSettings = getSettings;
+        this.readAccesses = readAccesses;
+        this.folderChains = folderChains;
+        this.strategies = strategies;
+        this.modelParser = modelParser;
+    }
+    async evaluate(params) {
+        const { config } = params;
+        const strategy = config.assignment.strategy;
+        const rules = config.assignment.rules;
+        const explain = true === params.explain;
+        const skips = [];
+        const trace = [];
+        const skipped = [];
+        const pickedUserId = config.assignment.allowManualPick ? params.pickedUserId : null;
+        let members = [];
+        let exclusions = [];
+        let readAccess = null;
+        const needsMembers = Boolean(pickedUserId) || "none" !== strategy || rules.some((rule)=>"user" === rule.target.type);
+        if (needsMembers && config.teams.length > 0) {
+            const loaded = await this.loadMembers({
+                teamIds: config.teams,
+                userId: null,
+                model: params.model,
+                now: params.now,
+                skipExclusionsWithoutMembers: false
+            });
+            if (loaded.isFail()) return Result.fail(new RoutingDependencyError(loaded.error, {
+                candidateTeamIds: config.teams,
+                ruleId: null,
+                skips
+            }));
+            members = loaded.value.members;
+            exclusions = loaded.value.exclusions;
+            readAccess = loaded.value.readAccess;
+        }
+        const memberIds = members.map((member)=>member.id);
+        if (pickedUserId) {
+            const member = members.find((item)=>item.id === pickedUserId);
+            let reason = getRoutingUserSkipReason({
+                userId: pickedUserId,
+                requesterId: params.requesterId,
+                memberIds,
+                exclusions
+            });
+            if (!reason && member) {
+                let readable = [];
+                if (readAccess) readable = await readAccess.filterReadableUsers({
+                    model: params.model,
+                    read: params.read,
+                    users: [
+                        member
+                    ]
+                });
+                if (readable.includes(member.id)) return Result.ok(toRoutingEvaluation({
+                    owner: {
+                        id: member.id,
+                        displayName: member.displayName
+                    },
+                    source: "picked",
+                    ruleId: null,
+                    strategy,
+                    candidateTeamIds: [
+                        ...config.teams
+                    ],
+                    reason: null,
+                    skips,
+                    trace,
+                    skipped
+                }));
+                reason = ROUTING_SKIP_REASONS.cannotRead;
+            }
+            const pickReason = reason ?? ROUTING_SKIP_REASONS.notMember;
+            skips.push({
+                kind: "skip",
+                userId: pickedUserId,
+                source: "picked",
+                ruleId: null,
+                by: null,
+                reason: pickReason
+            });
+            skipped.push({
+                userId: pickedUserId,
+                displayName: member?.displayName ?? null,
+                reason: pickReason === ROUTING_SKIP_REASONS.excluded ? exclusions.find((item)=>item.userId === pickedUserId)?.reason || pickReason : pickReason
+            });
+        }
+        let candidateTeamIds = [
+            ...config.teams
+        ];
+        let ruleId = null;
+        let decidedIndex = -1;
+        if (rules.length > 0) {
+            let requesterTeamIds = null;
+            let folderChainIds = null;
+            const modelId = this.modelParser.parse(params.model)?.modelId ?? null;
+            const ruleTargetUsers = [];
+            for (const rule of rules){
+                if ("user" !== rule.target.type) continue;
+                const targetId = rule.target.id;
+                const member = members.find((item)=>item.id === targetId);
+                const reason = getRoutingUserSkipReason({
+                    userId: targetId,
+                    requesterId: params.requesterId,
+                    memberIds,
+                    exclusions
+                });
+                if (!reason && member && !ruleTargetUsers.includes(member)) ruleTargetUsers.push(member);
+            }
+            let readableRuleTargets = [];
+            if (readAccess && ruleTargetUsers.length > 0) readableRuleTargets = await readAccess.filterReadableUsers({
+                model: params.model,
+                read: params.read,
+                users: ruleTargetUsers
+            });
+            for (const [ruleIndex, rule] of rules.entries()){
+                const localFacts = {
+                    requesterId: params.requesterId,
+                    modelId,
+                    folder: params.folder
+                };
+                const localMatch = matchRoutingRuleLocalConditions(rule.conditions, localFacts);
+                if (!explain && !localMatch) {
+                    trace.push({
+                        ruleId: rule.id,
+                        outcome: "notMatched",
+                        reason: null
+                    });
+                    continue;
+                }
+                if (rule.conditions.requesterTeamId && null === requesterTeamIds) {
+                    const teams = await this.listUserTeams.execute(params.requesterId);
+                    requesterTeamIds = teams.isOk() ? teams.value.map((team)=>team.id) : [];
+                }
+                const folderCondition = rule.conditions.folder;
+                if (folderCondition && params.folder && folderCondition.type === params.folder.type && null === folderChainIds) {
+                    const folderChain = [
+                        ...this.folderChains
+                    ].reverse().find((item)=>item.canHandle(params.model));
+                    if (!folderChain) return Result.fail(new RoutingDependencyError(new Error(`No folder chain is registered for "${params.model}".`), {
+                        candidateTeamIds: config.teams,
+                        ruleId: null,
+                        skips
+                    }));
+                    try {
+                        folderChainIds = await folderChain.listFolderChainIds({
+                            model: params.model,
+                            folderId: params.folder.id
+                        });
+                    } catch (error) {
+                        return Result.fail(new RoutingDependencyError(error instanceof Error ? error : new Error(String(error)), {
+                            candidateTeamIds: config.teams,
+                            ruleId: null,
+                            skips
+                        }));
+                    }
+                }
+                const facts = {
+                    ...localFacts,
+                    requesterTeamIds: requesterTeamIds ?? [],
+                    folderChainIds: folderChainIds ?? []
+                };
+                if (!matchRoutingRuleConditions(rule.conditions, facts)) {
+                    const notMatched = {
+                        ruleId: rule.id,
+                        outcome: "notMatched",
+                        reason: null
+                    };
+                    if (explain) notMatched.failedConditions = getFailedRoutingConditions(rule.conditions, facts);
+                    trace.push(notMatched);
+                    continue;
+                }
+                if ("team" === rule.target.type) {
+                    if (!config.teams.includes(rule.target.id)) {
+                        trace.push({
+                            ruleId: rule.id,
+                            outcome: "skipped",
+                            reason: ROUTING_TEAM_TARGET_SKIP_REASON
+                        });
+                        skips.push({
+                            kind: "skip",
+                            userId: null,
+                            source: "rule",
+                            ruleId: rule.id,
+                            by: null,
+                            reason: ROUTING_TEAM_TARGET_SKIP_REASON
+                        });
+                        continue;
+                    }
+                    trace.push({
+                        ruleId: rule.id,
+                        outcome: "matched",
+                        reason: null
+                    });
+                    ruleId = rule.id;
+                    candidateTeamIds = [
+                        rule.target.id
+                    ];
+                    decidedIndex = ruleIndex;
+                    break;
+                }
+                const targetId = rule.target.id;
+                const member = members.find((item)=>item.id === targetId);
+                let reason = getRoutingUserSkipReason({
+                    userId: targetId,
+                    requesterId: params.requesterId,
+                    memberIds,
+                    exclusions
+                });
+                if (!reason && member) {
+                    if (readableRuleTargets.includes(member.id)) {
+                        trace.push({
+                            ruleId: rule.id,
+                            outcome: "matched",
+                            reason: null
+                        });
+                        if (explain) {
+                            const notEvaluated = listNotEvaluatedTrace(rules, ruleIndex + 1);
+                            trace.push(...notEvaluated);
+                        }
+                        return Result.ok(toRoutingEvaluation({
+                            owner: {
+                                id: member.id,
+                                displayName: member.displayName
+                            },
+                            source: "rule",
+                            ruleId: rule.id,
+                            strategy,
+                            candidateTeamIds: [
+                                ...config.teams
+                            ],
+                            reason: null,
+                            skips,
+                            trace,
+                            skipped
+                        }));
+                    }
+                    reason = ROUTING_SKIP_REASONS.cannotRead;
+                }
+                const skipReason = reason ?? ROUTING_SKIP_REASONS.notMember;
+                const shownReason = skipReason === ROUTING_SKIP_REASONS.excluded ? exclusions.find((item)=>item.userId === targetId)?.reason || skipReason : skipReason;
+                trace.push({
+                    ruleId: rule.id,
+                    outcome: "skipped",
+                    reason: shownReason
+                });
+                skipped.push({
+                    userId: targetId,
+                    displayName: member?.displayName ?? null,
+                    reason: shownReason
+                });
+                skips.push({
+                    kind: "skip",
+                    userId: targetId,
+                    source: "rule",
+                    ruleId: rule.id,
+                    by: null,
+                    reason: skipReason
+                });
+            }
+        }
+        if (explain && decidedIndex >= 0) {
+            const notEvaluated = listNotEvaluatedTrace(rules, decidedIndex + 1);
+            trace.push(...notEvaluated);
+        }
+        if ("none" === strategy) return Result.ok(toRoutingEvaluation({
+            owner: null,
+            source: "pool",
+            ruleId,
+            strategy,
+            candidateTeamIds,
+            reason: null,
+            skips,
+            trace,
+            skipped
+        }));
+        const strategySkips = listStrategySkips({
+            members,
+            candidateTeamIds,
+            requesterId: params.requesterId,
+            exclusions,
+            pickedUserId,
+            ruleSkippedUserIds: skips.flatMap((item)=>item.userId ? [
+                    item.userId
+                ] : [])
+        });
+        for (const strategySkip of strategySkips){
+            skips.push({
+                kind: "skip",
+                userId: strategySkip.userId,
+                source: strategy,
+                ruleId,
+                by: null,
+                reason: strategySkip.reason
+            });
+            skipped.push({
+                userId: strategySkip.userId,
+                displayName: strategySkip.displayName,
+                reason: strategySkip.shownReason
+            });
+        }
+        const candidates = listRoutingCandidates({
+            members,
+            candidateTeamIds,
+            requesterId: params.requesterId,
+            exclusions
+        });
+        const ordered = await this.strategies.order({
+            strategy,
+            candidates,
+            model: params.model,
+            workflowId: params.workflowId,
+            reviewId: params.reviewId,
+            stepId: params.stepId
+        });
+        if (ordered.isFail()) return Result.fail(new RoutingDependencyError(ordered.error, {
+            candidateTeamIds,
+            ruleId,
+            skips
+        }));
+        const strategyOrder = explain ? ordered.value : void 0;
+        const membersById = new Map(members.map((member)=>[
+                member.id,
+                member
+            ]));
+        const orderedUsers = ordered.value.map((candidate)=>membersById.get(candidate.id) ?? candidate);
+        let readable = [];
+        if (readAccess && orderedUsers.length > 0) readable = await readAccess.filterReadableUsers({
+            model: params.model,
+            read: params.read,
+            users: orderedUsers,
+            limit: 1
+        });
+        for (const candidate of ordered.value){
+            if (readable.includes(candidate.id)) return Result.ok(toRoutingEvaluation({
+                owner: candidate,
+                source: strategy,
+                ruleId,
+                strategy,
+                candidateTeamIds,
+                reason: null,
+                skips,
+                trace,
+                skipped,
+                strategyOrder
+            }));
+            skips.push({
+                kind: "skip",
+                userId: candidate.id,
+                source: strategy,
+                ruleId,
+                by: null,
+                reason: ROUTING_SKIP_REASONS.cannotRead
+            });
+            skipped.push({
+                userId: candidate.id,
+                displayName: candidate.displayName,
+                reason: ROUTING_SKIP_REASONS.cannotRead
+            });
+        }
+        return Result.ok(toRoutingEvaluation({
+            owner: null,
+            source: "pool",
+            ruleId,
+            strategy,
+            candidateTeamIds,
+            reason: ROUTING_NO_CANDIDATE_REASON,
+            skips,
+            trace,
+            skipped,
+            strategyOrder
+        }));
+    }
+    async listMembers(params) {
+        if (0 === params.teamIds.length) return Result.ok([]);
+        const loaded = await this.loadMembers({
+            teamIds: params.teamIds,
+            userId: null,
+            model: params.model,
+            now: params.now,
+            skipExclusionsWithoutMembers: false
+        });
+        if (loaded.isFail()) return Result.fail(new RoutingDependencyError(loaded.error));
+        const { exclusions, readAccess } = loaded.value;
+        const users = loaded.value.members.filter((user)=>user.id !== params.requesterId).sort((a, b)=>a.id < b.id ? -1 : a.id > b.id ? 1 : 0);
+        let readable = [];
+        if (readAccess && users.length > 0) readable = await readAccess.filterReadableUsers({
+            model: params.model,
+            read: params.read,
+            users
+        });
+        const members = [];
+        for (const user of users){
+            const canRead = readable.includes(user.id);
+            const exclusion = exclusions.find((item)=>item.userId === user.id);
+            members.push({
+                id: user.id,
+                displayName: user.displayName,
+                teamIds: [
+                    ...user.teams ?? []
+                ],
+                exclusion: exclusion ? {
+                    ...exclusion
+                } : null,
+                canRead
+            });
+        }
+        return Result.ok(members);
+    }
+    async checkUser(params) {
+        if (params.userId === params.requesterId) return Result.ok({
+            user: null,
+            skipReason: ROUTING_SKIP_REASONS.requester
+        });
+        if (0 === params.teamIds.length) return Result.ok({
+            user: null,
+            skipReason: ROUTING_SKIP_REASONS.notMember
+        });
+        const loaded = await this.loadMembers({
+            teamIds: params.teamIds,
+            userId: params.userId,
+            model: params.model,
+            now: params.now,
+            skipExclusionsWithoutMembers: true
+        });
+        if (loaded.isFail()) return Result.fail(new RoutingDependencyError(loaded.error));
+        const { exclusions, readAccess } = loaded.value;
+        const member = loaded.value.members[0];
+        if (!member) return Result.ok({
+            user: null,
+            skipReason: ROUTING_SKIP_REASONS.notMember
+        });
+        const user = {
+            id: member.id,
+            displayName: member.displayName
+        };
+        if (exclusions.some((exclusion)=>exclusion.userId === params.userId)) return Result.ok({
+            user,
+            skipReason: ROUTING_SKIP_REASONS.excluded
+        });
+        let readable = [];
+        if (readAccess) readable = await readAccess.filterReadableUsers({
+            model: params.model,
+            read: params.read,
+            users: [
+                member
+            ]
+        });
+        if (!readable.includes(member.id)) return Result.ok({
+            user,
+            skipReason: ROUTING_SKIP_REASONS.cannotRead
+        });
+        return Result.ok({
+            user,
+            skipReason: null
+        });
+    }
+    async loadMembers(params) {
+        const where = {
+            teams_in: [
+                ...params.teamIds
+            ]
+        };
+        if (null !== params.userId) where.id_in = [
+            params.userId
+        ];
+        const listed = await this.identityContext.withoutAuthorization(()=>this.listUsers.execute({
+                where
+            }));
+        if (listed.isFail()) return Result.fail(listed.error);
+        const members = listed.value.filter((user)=>{
+            if (null !== params.userId && user.id !== params.userId) return false;
+            return params.teamIds.some((teamId)=>user.teams?.includes(teamId));
+        });
+        const readAccess = [
+            ...this.readAccesses
+        ].reverse().find((item)=>item.canHandle(params.model)) ?? null;
+        if (0 === members.length && params.skipExclusionsWithoutMembers) return Result.ok({
+            members,
+            exclusions: [],
+            readAccess
+        });
+        const settings = await this.getSettings.execute({
+            includeExpired: true
+        });
+        if (settings.isFail()) return Result.fail(settings.error);
+        const exclusions = filterActiveExclusions(settings.value.exclusions, params.now);
+        return Result.ok({
+            members,
+            exclusions,
+            readAccess
+        });
+    }
+}
+const RoutingEvaluatorService_RoutingEvaluatorService = RoutingEvaluatorService.createImplementation({
+    implementation: RoutingEvaluatorServiceImpl,
+    dependencies: [
+        IdentityContext,
+        ListUsersUseCase,
+        ListUserTeamsUseCase,
+        GetWorkflowSettingsUseCase,
+        [
+            ReviewTargetReadAccess,
+            {
+                multiple: true
+            }
+        ],
+        [
+            ReviewTargetFolderChain,
+            {
+                multiple: true
+            }
+        ],
+        RoutingStrategyService,
+        WorkflowModelParserService
+    ]
+});
+export { RoutingEvaluatorService_RoutingEvaluatorService as RoutingEvaluatorService };
+
+//# sourceMappingURL=RoutingEvaluatorService.js.map

package/features/routing/RoutingEvaluatorService/RoutingEvaluatorService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/routing/RoutingEvaluatorService/RoutingEvaluatorService.js","sources":["../../../../src/features/routing/RoutingEvaluatorService/RoutingEvaluatorService.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { ListUsersUseCase } from \"@webiny/api-core/features/users/ListUsers/index.js\";\nimport { ListUserTeamsUseCase } from \"@webiny/api-core/features/users/ListUserTeams/index.js\";\nimport type { ListUsersWhere } from \"@webiny/api-core/features/users/shared/types.js\";\nimport type { AdminUser } from \"@webiny/api-core/types/users.js\";\nimport type { AssignmentDecision } from \"~/domain/assignment/types.js\";\nimport { filterActiveExclusions } from \"~/domain/settings/filterActiveExclusions.js\";\nimport type { WorkflowExclusion } from \"~/domain/settings/types.js\";\nimport { RoutingDependencyError } from \"~/domain/routing/errors.js\";\nimport {\n    ROUTING_NO_CANDIDATE_REASON,\n    ROUTING_SKIP_REASONS,\n    ROUTING_TEAM_TARGET_SKIP_REASON,\n    type RoutingSkipReason\n} from \"~/domain/routing/reasons.js\";\nimport type {\n    RoutingDirectoryUser,\n    RoutingMember,\n    RoutingRuleFacts,\n    RoutingRuleLocalFacts,\n    RoutingSkippedUser,\n    RoutingTraceEntry\n} from \"~/domain/routing/types.js\";\nimport { getFailedRoutingConditions } from \"~/domain/routing/getFailedRoutingConditions.js\";\nimport { WorkflowModelParserService } from \"~/features/model/WorkflowModelParserService/index.js\";\nimport { getRoutingUserSkipReason } from \"~/domain/routing/getRoutingUserSkipReason.js\";\nimport { listNotEvaluatedTrace } from \"~/domain/routing/listNotEvaluatedTrace.js\";\nimport { listRoutingCandidates } from \"~/domain/routing/listRoutingCandidates.js\";\nimport { listStrategySkips } from \"~/domain/routing/listStrategySkips.js\";\nimport { matchRoutingRuleConditions } from \"~/domain/routing/matchRoutingRuleConditions.js\";\nimport { matchRoutingRuleLocalConditions } from \"~/domain/routing/matchRoutingRuleLocalConditions.js\";\nimport { toRoutingEvaluation } from \"~/domain/routing/toRoutingEvaluation.js\";\nimport { GetWorkflowSettingsUseCase } from \"~/features/settings/GetWorkflowSettings/abstractions.js\";\nimport { ReviewTargetReadAccess } from \"~/features/review/ReviewTargetReadAccess/abstractions.js\";\nimport { ReviewTargetFolderChain } from \"~/features/review/ReviewTargetFolderChain/abstractions.js\";\nimport { RoutingStrategyService } from \"~/features/routing/RoutingStrategyService/abstractions.js\";\nimport { RoutingEvaluatorService as Abstraction } from \"./abstractions.js\";\n\n/** What `loadMembers` lists: the step's teams, or one user in them. */\ninterface RoutingMemberLoadParams {\n    teamIds: string[];\n    /** List only this user (a person check); `null` lists every member of the teams. */\n    userId: string | null;\n    model: string;\n    now: Date;\n    /**\n     * Skip the exclusions read when nobody is listed: a person check answers \"not a member\"\n     * before it reads the settings.\n     */\n    skipExclusionsWithoutMembers: boolean;\n}\n\n/** The members of the teams, the active exclusions and the target's read adapter. */\ninterface RoutingMemberLoad {\n    members: AdminUser[];\n    exclusions: WorkflowExclusion[];\n    readAccess: ReviewTargetReadAccess.Interface | null;\n}\n\n/** The cause of a failed member load; each entry point wraps it in `RoutingDependencyError`. */\ntype RoutingMemberLoadError = ListUsersUseCase.Error | GetWorkflowSettingsUseCase.Error;\n\nclass RoutingEvaluatorServiceImpl implements Abstraction.Interface {\n    public constructor(\n        private identityContext: IdentityContext.Interface,\n        private listUsers: ListUsersUseCase.Interface,\n        private listUserTeams: ListUserTeamsUseCase.Interface,\n        private getSettings: GetWorkflowSettingsUseCase.Interface,\n        private readAccesses: ReviewTargetReadAccess.Interface[],\n        private folderChains: ReviewTargetFolderChain.Interface[],\n        private strategies: RoutingStrategyService.Interface,\n        private modelParser: WorkflowModelParserService.Interface\n    ) {}\n\n    public async evaluate(params: Abstraction.EvaluateParams): Abstraction.EvaluateReturn {\n        const { config } = params;\n        const strategy = config.assignment.strategy;\n        const rules = config.assignment.rules;\n        // Inspector mode (R289); live assignment stays lazy.\n        const explain = params.explain === true;\n        const skips: AssignmentDecision[] = [];\n        const trace: RoutingTraceEntry[] = [];\n        // The skipped people for the inspector, with the exclusion's own reason (R129).\n        const skipped: RoutingSkippedUser[] = [];\n        const pickedUserId = config.assignment.allowManualPick ? params.pickedUserId : null;\n\n        // Members of the step's teams, the active exclusions and the read adapter, read once when\n        // a pick, a user target or a strategy needs them (R111). Without members no read check\n        // runs, so no adapter is needed either.\n        let members: RoutingDirectoryUser[] = [];\n        let exclusions: WorkflowExclusion[] = [];\n        let readAccess: ReviewTargetReadAccess.Interface | null = null;\n        const needsMembers =\n            Boolean(pickedUserId) ||\n            strategy !== \"none\" ||\n            rules.some(rule => rule.target.type === \"user\");\n        if (needsMembers && config.teams.length > 0) {\n            const loaded = await this.loadMembers({\n                teamIds: config.teams,\n                userId: null,\n                model: params.model,\n                now: params.now,\n                skipExclusionsWithoutMembers: false\n            });\n            if (loaded.isFail()) {\n                return Result.fail(\n                    new RoutingDependencyError(loaded.error, {\n                        candidateTeamIds: config.teams,\n                        ruleId: null,\n                        skips\n                    })\n                );\n            }\n            members = loaded.value.members;\n            exclusions = loaded.value.exclusions;\n            readAccess = loaded.value.readAccess;\n        }\n        const memberIds = members.map(member => member.id);\n\n        // 1. The requester's pick (spec 6, R110).\n        if (pickedUserId) {\n            const member = members.find(item => item.id === pickedUserId);\n            let reason: RoutingSkipReason | null = getRoutingUserSkipReason({\n                userId: pickedUserId,\n                requesterId: params.requesterId,\n                memberIds,\n                exclusions\n            });\n            if (!reason && member) {\n                let readable: string[] = [];\n                if (readAccess) {\n                    readable = await readAccess.filterReadableUsers({\n                        model: params.model,\n                        read: params.read,\n                        users: [member]\n                    });\n                }\n                if (readable.includes(member.id)) {\n                    return Result.ok(\n                        toRoutingEvaluation({\n                            owner: { id: member.id, displayName: member.displayName },\n                            source: \"picked\",\n                            ruleId: null,\n                            strategy,\n                            candidateTeamIds: [...config.teams],\n                            reason: null,\n                            skips,\n                            trace,\n                            skipped\n                        })\n                    );\n                }\n                reason = ROUTING_SKIP_REASONS.cannotRead;\n            }\n            const pickReason = reason ?? ROUTING_SKIP_REASONS.notMember;\n            skips.push({\n                kind: \"skip\",\n                userId: pickedUserId,\n                source: \"picked\",\n                ruleId: null,\n                by: null,\n                reason: pickReason\n            });\n            // The inspector shows the exclusion's own reason; the record keeps the fixed one\n            // (R129, D89, D97).\n            skipped.push({\n                userId: pickedUserId,\n                displayName: member?.displayName ?? null,\n                reason:\n                    pickReason === ROUTING_SKIP_REASONS.excluded\n                        ? exclusions.find(item => item.userId === pickedUserId)?.reason ||\n                          pickReason\n                        : pickReason\n            });\n        }\n\n        // 2. Rules, in order: the first whose conditions match and whose target is valid (R110).\n        let candidateTeamIds = [...config.teams];\n        let ruleId: string | null = null;\n        // The index of a team rule that narrowed the candidates; the rules after it are listed as\n        // not evaluated in inspector mode (R289).\n        let decidedIndex = -1;\n        if (rules.length > 0) {\n            // Read lazily, on the first rule that needs them, and at most once: an earlier rule\n            // decides without these lookups.\n            let requesterTeamIds: string[] | null = null;\n            let folderChainIds: string[] | null = null;\n            // `null` when no app knows the model: a `modelId` condition then never matches.\n            const modelId = this.modelParser.parse(params.model)?.modelId ?? null;\n\n            // The user targets of every rule that pass the checks the walk applies before the\n            // read check, checked with one adapter call (Q79); the walk looks the answers up.\n            const ruleTargetUsers: RoutingDirectoryUser[] = [];\n            for (const rule of rules) {\n                if (rule.target.type !== \"user\") {\n                    continue;\n                }\n                const targetId = rule.target.id;\n                const member = members.find(item => item.id === targetId);\n                const reason = getRoutingUserSkipReason({\n                    userId: targetId,\n                    requesterId: params.requesterId,\n                    memberIds,\n                    exclusions\n                });\n                if (!reason && member && !ruleTargetUsers.includes(member)) {\n                    ruleTargetUsers.push(member);\n                }\n            }\n            let readableRuleTargets: string[] = [];\n            if (readAccess && ruleTargetUsers.length > 0) {\n                readableRuleTargets = await readAccess.filterReadableUsers({\n                    model: params.model,\n                    read: params.read,\n                    users: ruleTargetUsers\n                });\n            }\n\n            for (const [ruleIndex, rule] of rules.entries()) {\n                // The conditions that need no lookup first: a live rule that fails them reads\n                // neither the requester's teams nor the folder chain. The inspector goes on and\n                // reads them, so it can name every failed condition (R289).\n                const localFacts: RoutingRuleLocalFacts = {\n                    requesterId: params.requesterId,\n                    modelId,\n                    folder: params.folder\n                };\n                const localMatch = matchRoutingRuleLocalConditions(rule.conditions, localFacts);\n                if (!explain && !localMatch) {\n                    trace.push({ ruleId: rule.id, outcome: \"notMatched\", reason: null });\n                    continue;\n                }\n                if (rule.conditions.requesterTeamId && requesterTeamIds === null) {\n                    // Runs as the system itself; a failure or an API key requester has no teams\n                    // (R113).\n                    // oxlint-disable-next-line no-await-in-loop -- runs at most once per call: the teams are kept after the first read.\n                    const teams = await this.listUserTeams.execute(params.requesterId);\n                    requesterTeamIds = teams.isOk() ? teams.value.map(team => team.id) : [];\n                }\n                const folderCondition = rule.conditions.folder;\n                if (\n                    folderCondition &&\n                    params.folder &&\n                    folderCondition.type === params.folder.type &&\n                    folderChainIds === null\n                ) {\n                    const folderChain = [...this.folderChains]\n                        .reverse()\n                        .find(item => item.canHandle(params.model));\n                    if (!folderChain) {\n                        return Result.fail(\n                            new RoutingDependencyError(\n                                new Error(`No folder chain is registered for \"${params.model}\".`),\n                                { candidateTeamIds: config.teams, ruleId: null, skips }\n                            )\n                        );\n                    }\n                    // The port throws when the folders cannot be read: caught here so the\n                    // failure keeps the skips gathered so far (R116).\n                    try {\n                        // oxlint-disable-next-line no-await-in-loop -- runs at most once per call: the folder chain is kept after the first read.\n                        folderChainIds = await folderChain.listFolderChainIds({\n                            model: params.model,\n                            folderId: params.folder.id\n                        });\n                    } catch (error) {\n                        return Result.fail(\n                            new RoutingDependencyError(\n                                error instanceof Error ? error : new Error(String(error)),\n                                { candidateTeamIds: config.teams, ruleId: null, skips }\n                            )\n                        );\n                    }\n                }\n                const facts: RoutingRuleFacts = {\n                    ...localFacts,\n                    requesterTeamIds: requesterTeamIds ?? [],\n                    folderChainIds: folderChainIds ?? []\n                };\n                if (!matchRoutingRuleConditions(rule.conditions, facts)) {\n                    const notMatched: RoutingTraceEntry = {\n                        ruleId: rule.id,\n                        outcome: \"notMatched\",\n                        reason: null\n                    };\n                    if (explain) {\n                        notMatched.failedConditions = getFailedRoutingConditions(\n                            rule.conditions,\n                            facts\n                        );\n                    }\n                    trace.push(notMatched);\n                    continue;\n                }\n                if (rule.target.type === \"team\") {\n                    // A team target outside the step's teams is not valid (spec 6): the rule is\n                    // skipped and evaluation continues. Save-time validation refuses it; unsaved\n                    // config can carry it.\n                    if (!config.teams.includes(rule.target.id)) {\n                        trace.push({\n                            ruleId: rule.id,\n                            outcome: \"skipped\",\n                            reason: ROUTING_TEAM_TARGET_SKIP_REASON\n                        });\n                        skips.push({\n                            kind: \"skip\",\n                            userId: null,\n                            source: \"rule\",\n                            ruleId: rule.id,\n                            by: null,\n                            reason: ROUTING_TEAM_TARGET_SKIP_REASON\n                        });\n                        continue;\n                    }\n                    // A team target narrows the candidates; the strategy picks among them (R109).\n                    trace.push({ ruleId: rule.id, outcome: \"matched\", reason: null });\n                    ruleId = rule.id;\n                    candidateTeamIds = [rule.target.id];\n                    decidedIndex = ruleIndex;\n                    break;\n                }\n                const targetId = rule.target.id;\n                const member = members.find(item => item.id === targetId);\n                let reason: RoutingSkipReason | null = getRoutingUserSkipReason({\n                    userId: targetId,\n                    requesterId: params.requesterId,\n                    memberIds,\n                    exclusions\n                });\n                if (!reason && member) {\n                    if (readableRuleTargets.includes(member.id)) {\n                        trace.push({ ruleId: rule.id, outcome: \"matched\", reason: null });\n                        if (explain) {\n                            const notEvaluated = listNotEvaluatedTrace(rules, ruleIndex + 1);\n                            trace.push(...notEvaluated);\n                        }\n                        return Result.ok(\n                            toRoutingEvaluation({\n                                owner: { id: member.id, displayName: member.displayName },\n                                source: \"rule\",\n                                ruleId: rule.id,\n                                strategy,\n                                candidateTeamIds: [...config.teams],\n                                reason: null,\n                                skips,\n                                trace,\n                                skipped\n                            })\n                        );\n                    }\n                    reason = ROUTING_SKIP_REASONS.cannotRead;\n                }\n                const skipReason = reason ?? ROUTING_SKIP_REASONS.notMember;\n                // The editor sees the exclusion's own reason in the trace; the record keeps the\n                // fixed one (R129, D89, D97).\n                const shownReason =\n                    skipReason === ROUTING_SKIP_REASONS.excluded\n                        ? exclusions.find(item => item.userId === targetId)?.reason || skipReason\n                        : skipReason;\n                trace.push({ ruleId: rule.id, outcome: \"skipped\", reason: shownReason });\n                skipped.push({\n                    userId: targetId,\n                    displayName: member?.displayName ?? null,\n                    reason: shownReason\n                });\n                skips.push({\n                    kind: \"skip\",\n                    userId: targetId,\n                    source: \"rule\",\n                    ruleId: rule.id,\n                    by: null,\n                    reason: skipReason\n                });\n            }\n        }\n\n        // The rules after a team rule that decided were not evaluated (R289).\n        if (explain && decidedIndex >= 0) {\n            const notEvaluated = listNotEvaluatedTrace(rules, decidedIndex + 1);\n            trace.push(...notEvaluated);\n        }\n\n        // 3. The strategy over the candidates, then 4. the pool (R110).\n        if (strategy === \"none\") {\n            return Result.ok(\n                toRoutingEvaluation({\n                    owner: null,\n                    source: \"pool\",\n                    ruleId,\n                    strategy,\n                    candidateTeamIds,\n                    reason: null,\n                    skips,\n                    trace,\n                    skipped\n                })\n            );\n        }\n        // The requester and the excluded are dropped from the candidates but recorded as skipped\n        // by assignment (P2C-6).\n        const strategySkips = listStrategySkips({\n            members,\n            candidateTeamIds,\n            requesterId: params.requesterId,\n            exclusions,\n            pickedUserId,\n            ruleSkippedUserIds: skips.flatMap(item => (item.userId ? [item.userId] : []))\n        });\n        for (const strategySkip of strategySkips) {\n            skips.push({\n                kind: \"skip\",\n                userId: strategySkip.userId,\n                source: strategy,\n                ruleId,\n                by: null,\n                reason: strategySkip.reason\n            });\n            skipped.push({\n                userId: strategySkip.userId,\n                displayName: strategySkip.displayName,\n                reason: strategySkip.shownReason\n            });\n        }\n        const candidates = listRoutingCandidates({\n            members,\n            candidateTeamIds,\n            requesterId: params.requesterId,\n            exclusions\n        });\n        // The strategy decides who is asked first (R115).\n        const ordered = await this.strategies.order({\n            strategy,\n            candidates,\n            model: params.model,\n            workflowId: params.workflowId,\n            reviewId: params.reviewId,\n            stepId: params.stepId\n        });\n        if (ordered.isFail()) {\n            // Keep what was decided: the narrowed teams, the rule and the skips (R116).\n            return Result.fail(\n                new RoutingDependencyError(ordered.error, { candidateTeamIds, ruleId, skips })\n            );\n        }\n        // The inspector shows the order the strategy considers (R289).\n        const strategyOrder = explain ? ordered.value : undefined;\n        // Read access is checked in strategy order in one adapter call, which stops at the first\n        // readable candidate (R111, A47). The listed members carry their teams for folder rules.\n        const membersById = new Map(members.map(member => [member.id, member]));\n        const orderedUsers = ordered.value.map(candidate => {\n            return membersById.get(candidate.id) ?? candidate;\n        });\n        let readable: string[] = [];\n        if (readAccess && orderedUsers.length > 0) {\n            readable = await readAccess.filterReadableUsers({\n                model: params.model,\n                read: params.read,\n                users: orderedUsers,\n                limit: 1\n            });\n        }\n        for (const candidate of ordered.value) {\n            if (readable.includes(candidate.id)) {\n                return Result.ok(\n                    toRoutingEvaluation({\n                        owner: candidate,\n                        source: strategy,\n                        ruleId,\n                        strategy,\n                        candidateTeamIds,\n                        reason: null,\n                        skips,\n                        trace,\n                        skipped,\n                        strategyOrder\n                    })\n                );\n            }\n            skips.push({\n                kind: \"skip\",\n                userId: candidate.id,\n                source: strategy,\n                ruleId,\n                by: null,\n                reason: ROUTING_SKIP_REASONS.cannotRead\n            });\n            skipped.push({\n                userId: candidate.id,\n                displayName: candidate.displayName,\n                reason: ROUTING_SKIP_REASONS.cannotRead\n            });\n        }\n        return Result.ok(\n            toRoutingEvaluation({\n                owner: null,\n                source: \"pool\",\n                ruleId,\n                strategy,\n                candidateTeamIds,\n                reason: ROUTING_NO_CANDIDATE_REASON,\n                skips,\n                trace,\n                skipped,\n                strategyOrder\n            })\n        );\n    }\n\n    public async listMembers(params: Abstraction.MembersParams): Abstraction.MembersReturn {\n        if (params.teamIds.length === 0) {\n            return Result.ok([]);\n        }\n        const loaded = await this.loadMembers({\n            teamIds: params.teamIds,\n            userId: null,\n            model: params.model,\n            now: params.now,\n            skipExclusionsWithoutMembers: false\n        });\n        if (loaded.isFail()) {\n            return Result.fail(new RoutingDependencyError(loaded.error));\n        }\n        const { exclusions, readAccess } = loaded.value;\n\n        const users = loaded.value.members\n            .filter(user => user.id !== params.requesterId)\n            .sort((a, b) => (a.id < b.id ? -1 : a.id > b.id ? 1 : 0));\n        // One adapter call for every member: the target and the folder are read once (R120).\n        let readable: string[] = [];\n        if (readAccess && users.length > 0) {\n            readable = await readAccess.filterReadableUsers({\n                model: params.model,\n                read: params.read,\n                users\n            });\n        }\n        const members: RoutingMember[] = [];\n        for (const user of users) {\n            const canRead = readable.includes(user.id);\n            const exclusion = exclusions.find(item => item.userId === user.id);\n            members.push({\n                id: user.id,\n                displayName: user.displayName,\n                teamIds: [...(user.teams ?? [])],\n                exclusion: exclusion ? { ...exclusion } : null,\n                canRead\n            });\n        }\n        return Result.ok(members);\n    }\n\n    public async checkUser(params: Abstraction.UserCheckParams): Abstraction.UserCheckReturn {\n        if (params.userId === params.requesterId) {\n            return Result.ok({ user: null, skipReason: ROUTING_SKIP_REASONS.requester });\n        }\n        if (params.teamIds.length === 0) {\n            return Result.ok({ user: null, skipReason: ROUTING_SKIP_REASONS.notMember });\n        }\n        const loaded = await this.loadMembers({\n            teamIds: params.teamIds,\n            userId: params.userId,\n            model: params.model,\n            now: params.now,\n            skipExclusionsWithoutMembers: true\n        });\n        if (loaded.isFail()) {\n            return Result.fail(new RoutingDependencyError(loaded.error));\n        }\n        const { exclusions, readAccess } = loaded.value;\n        const member = loaded.value.members[0];\n        if (!member) {\n            return Result.ok({ user: null, skipReason: ROUTING_SKIP_REASONS.notMember });\n        }\n        const user = { id: member.id, displayName: member.displayName };\n\n        if (exclusions.some(exclusion => exclusion.userId === params.userId)) {\n            return Result.ok({ user, skipReason: ROUTING_SKIP_REASONS.excluded });\n        }\n\n        let readable: string[] = [];\n        if (readAccess) {\n            readable = await readAccess.filterReadableUsers({\n                model: params.model,\n                read: params.read,\n                users: [member]\n            });\n        }\n        if (!readable.includes(member.id)) {\n            return Result.ok({ user, skipReason: ROUTING_SKIP_REASONS.cannotRead });\n        }\n        return Result.ok({ user, skipReason: null });\n    }\n\n    /**\n     * The members of the teams (or the one user), the active exclusions and the target's read\n     * adapter. Listing users needs `adminUsers.user`: a membership lookup, read as the system\n     * (D48). Only that call; read checks run as the request identity.\n     */\n    private async loadMembers(\n        params: RoutingMemberLoadParams\n    ): Promise<Result<RoutingMemberLoad, RoutingMemberLoadError>> {\n        const where: ListUsersWhere = { teams_in: [...params.teamIds] };\n        if (params.userId !== null) {\n            where.id_in = [params.userId];\n        }\n        const listed = await this.identityContext.withoutAuthorization(() => {\n            return this.listUsers.execute({ where });\n        });\n        if (listed.isFail()) {\n            return Result.fail(listed.error);\n        }\n        const members = listed.value.filter(user => {\n            if (params.userId !== null && user.id !== params.userId) {\n                return false;\n            }\n            return params.teamIds.some(teamId => user.teams?.includes(teamId));\n        });\n\n        // One read check per namespace; the last registered match wins, none means no access.\n        const readAccess =\n            [...this.readAccesses].reverse().find(item => item.canHandle(params.model)) ?? null;\n\n        if (members.length === 0 && params.skipExclusionsWithoutMembers) {\n            return Result.ok({ members, exclusions: [], readAccess });\n        }\n        const settings = await this.getSettings.execute({ includeExpired: true });\n        if (settings.isFail()) {\n            return Result.fail(settings.error);\n        }\n        const exclusions = filterActiveExclusions(settings.value.exclusions, params.now);\n        return Result.ok({ members, exclusions, readAccess });\n    }\n}\n\nexport const RoutingEvaluatorService = Abstraction.createImplementation({\n    implementation: RoutingEvaluatorServiceImpl,\n    dependencies: [\n        IdentityContext,\n        ListUsersUseCase,\n        ListUserTeamsUseCase,\n        GetWorkflowSettingsUseCase,\n        [ReviewTargetReadAccess, { multiple: true }],\n        [ReviewTargetFolderChain, { multiple: true }],\n        RoutingStrategyService,\n        WorkflowModelParserService\n    ]\n});\n"],"names":["RoutingEvaluatorServiceImpl","identityContext","listUsers","listUserTeams","getSettings","readAccesses","folderChains","strategies","modelParser","params","config","strategy","rules","explain","skips","trace","skipped","pickedUserId","members","exclusions","readAccess","needsMembers","Boolean","rule","loaded","Result","RoutingDependencyError","memberIds","member","item","reason","getRoutingUserSkipReason","readable","toRoutingEvaluation","ROUTING_SKIP_REASONS","pickReason","candidateTeamIds","ruleId","decidedIndex","requesterTeamIds","folderChainIds","modelId","ruleTargetUsers","targetId","readableRuleTargets","ruleIndex","localFacts","localMatch","matchRoutingRuleLocalConditions","teams","team","folderCondition","folderChain","Error","error","String","facts","matchRoutingRuleConditions","notMatched","getFailedRoutingConditions","ROUTING_TEAM_TARGET_SKIP_REASON","notEvaluated","listNotEvaluatedTrace","skipReason","shownReason","strategySkips","listStrategySkips","strategySkip","candidates","listRoutingCandidates","ordered","strategyOrder","undefined","membersById","Map","orderedUsers","candidate","ROUTING_NO_CANDIDATE_REASON","users","user","a","b","canRead","exclusion","where","listed","teamId","settings","filterActiveExclusions","RoutingEvaluatorService","Abstraction","IdentityContext","ListUsersUseCase","ListUserTeamsUseCase","GetWorkflowSettingsUseCase","ReviewTargetReadAccess","ReviewTargetFolderChain","RoutingStrategyService","WorkflowModelParserService"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA+DA,MAAMA;IACF,YACYC,eAA0C,EAC1CC,SAAqC,EACrCC,aAA6C,EAC7CC,WAAiD,EACjDC,YAAgD,EAChDC,YAAiD,EACjDC,UAA4C,EAC5CC,WAAiD,CAC3D;aARUP,eAAe,GAAfA;aACAC,SAAS,GAATA;aACAC,aAAa,GAAbA;aACAC,WAAW,GAAXA;aACAC,YAAY,GAAZA;aACAC,YAAY,GAAZA;aACAC,UAAU,GAAVA;aACAC,WAAW,GAAXA;IACT;IAEH,MAAa,SAASC,MAAkC,EAA8B;QAClF,MAAM,EAAEC,MAAM,EAAE,GAAGD;QACnB,MAAME,WAAWD,OAAO,UAAU,CAAC,QAAQ;QAC3C,MAAME,QAAQF,OAAO,UAAU,CAAC,KAAK;QAErC,MAAMG,UAAUJ,AAAmB,SAAnBA,OAAO,OAAO;QAC9B,MAAMK,QAA8B,EAAE;QACtC,MAAMC,QAA6B,EAAE;QAErC,MAAMC,UAAgC,EAAE;QACxC,MAAMC,eAAeP,OAAO,UAAU,CAAC,eAAe,GAAGD,OAAO,YAAY,GAAG;QAK/E,IAAIS,UAAkC,EAAE;QACxC,IAAIC,aAAkC,EAAE;QACxC,IAAIC,aAAsD;QAC1D,MAAMC,eACFC,QAAQL,iBACRN,AAAa,WAAbA,YACAC,MAAM,IAAI,CAACW,CAAAA,OAAQA,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI;QACvC,IAAIF,gBAAgBX,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG;YACzC,MAAMc,SAAS,MAAM,IAAI,CAAC,WAAW,CAAC;gBAClC,SAASd,OAAO,KAAK;gBACrB,QAAQ;gBACR,OAAOD,OAAO,KAAK;gBACnB,KAAKA,OAAO,GAAG;gBACf,8BAA8B;YAClC;YACA,IAAIe,OAAO,MAAM,IACb,OAAOC,OAAO,IAAI,CACd,IAAIC,uBAAuBF,OAAO,KAAK,EAAE;gBACrC,kBAAkBd,OAAO,KAAK;gBAC9B,QAAQ;gBACRI;YACJ;YAGRI,UAAUM,OAAO,KAAK,CAAC,OAAO;YAC9BL,aAAaK,OAAO,KAAK,CAAC,UAAU;YACpCJ,aAAaI,OAAO,KAAK,CAAC,UAAU;QACxC;QACA,MAAMG,YAAYT,QAAQ,GAAG,CAACU,CAAAA,SAAUA,OAAO,EAAE;QAGjD,IAAIX,cAAc;YACd,MAAMW,SAASV,QAAQ,IAAI,CAACW,CAAAA,OAAQA,KAAK,EAAE,KAAKZ;YAChD,IAAIa,SAAmCC,yBAAyB;gBAC5D,QAAQd;gBACR,aAAaR,OAAO,WAAW;gBAC/BkB;gBACAR;YACJ;YACA,IAAI,CAACW,UAAUF,QAAQ;gBACnB,IAAII,WAAqB,EAAE;gBAC3B,IAAIZ,YACAY,WAAW,MAAMZ,WAAW,mBAAmB,CAAC;oBAC5C,OAAOX,OAAO,KAAK;oBACnB,MAAMA,OAAO,IAAI;oBACjB,OAAO;wBAACmB;qBAAO;gBACnB;gBAEJ,IAAII,SAAS,QAAQ,CAACJ,OAAO,EAAE,GAC3B,OAAOH,OAAO,EAAE,CACZQ,oBAAoB;oBAChB,OAAO;wBAAE,IAAIL,OAAO,EAAE;wBAAE,aAAaA,OAAO,WAAW;oBAAC;oBACxD,QAAQ;oBACR,QAAQ;oBACRjB;oBACA,kBAAkB;2BAAID,OAAO,KAAK;qBAAC;oBACnC,QAAQ;oBACRI;oBACAC;oBACAC;gBACJ;gBAGRc,SAASI,qBAAqB,UAAU;YAC5C;YACA,MAAMC,aAAaL,UAAUI,qBAAqB,SAAS;YAC3DpB,MAAM,IAAI,CAAC;gBACP,MAAM;gBACN,QAAQG;gBACR,QAAQ;gBACR,QAAQ;gBACR,IAAI;gBACJ,QAAQkB;YACZ;YAGAnB,QAAQ,IAAI,CAAC;gBACT,QAAQC;gBACR,aAAaW,QAAQ,eAAe;gBACpC,QACIO,eAAeD,qBAAqB,QAAQ,GACtCf,WAAW,IAAI,CAACU,CAAAA,OAAQA,KAAK,MAAM,KAAKZ,eAAe,UACvDkB,aACAA;YACd;QACJ;QAGA,IAAIC,mBAAmB;eAAI1B,OAAO,KAAK;SAAC;QACxC,IAAI2B,SAAwB;QAG5B,IAAIC,eAAe;QACnB,IAAI1B,MAAM,MAAM,GAAG,GAAG;YAGlB,IAAI2B,mBAAoC;YACxC,IAAIC,iBAAkC;YAEtC,MAAMC,UAAU,IAAI,CAAC,WAAW,CAAC,KAAK,CAAChC,OAAO,KAAK,GAAG,WAAW;YAIjE,MAAMiC,kBAA0C,EAAE;YAClD,KAAK,MAAMnB,QAAQX,MAAO;gBACtB,IAAIW,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,EAChB;gBAEJ,MAAMoB,WAAWpB,KAAK,MAAM,CAAC,EAAE;gBAC/B,MAAMK,SAASV,QAAQ,IAAI,CAACW,CAAAA,OAAQA,KAAK,EAAE,KAAKc;gBAChD,MAAMb,SAASC,yBAAyB;oBACpC,QAAQY;oBACR,aAAalC,OAAO,WAAW;oBAC/BkB;oBACAR;gBACJ;gBACA,IAAI,CAACW,UAAUF,UAAU,CAACc,gBAAgB,QAAQ,CAACd,SAC/Cc,gBAAgB,IAAI,CAACd;YAE7B;YACA,IAAIgB,sBAAgC,EAAE;YACtC,IAAIxB,cAAcsB,gBAAgB,MAAM,GAAG,GACvCE,sBAAsB,MAAMxB,WAAW,mBAAmB,CAAC;gBACvD,OAAOX,OAAO,KAAK;gBACnB,MAAMA,OAAO,IAAI;gBACjB,OAAOiC;YACX;YAGJ,KAAK,MAAM,CAACG,WAAWtB,KAAK,IAAIX,MAAM,OAAO,GAAI;gBAI7C,MAAMkC,aAAoC;oBACtC,aAAarC,OAAO,WAAW;oBAC/BgC;oBACA,QAAQhC,OAAO,MAAM;gBACzB;gBACA,MAAMsC,aAAaC,gCAAgCzB,KAAK,UAAU,EAAEuB;gBACpE,IAAI,CAACjC,WAAW,CAACkC,YAAY;oBACzBhC,MAAM,IAAI,CAAC;wBAAE,QAAQQ,KAAK,EAAE;wBAAE,SAAS;wBAAc,QAAQ;oBAAK;oBAClE;gBACJ;gBACA,IAAIA,KAAK,UAAU,CAAC,eAAe,IAAIgB,AAAqB,SAArBA,kBAA2B;oBAI9D,MAAMU,QAAQ,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAACxC,OAAO,WAAW;oBACjE8B,mBAAmBU,MAAM,IAAI,KAAKA,MAAM,KAAK,CAAC,GAAG,CAACC,CAAAA,OAAQA,KAAK,EAAE,IAAI,EAAE;gBAC3E;gBACA,MAAMC,kBAAkB5B,KAAK,UAAU,CAAC,MAAM;gBAC9C,IACI4B,mBACA1C,OAAO,MAAM,IACb0C,gBAAgB,IAAI,KAAK1C,OAAO,MAAM,CAAC,IAAI,IAC3C+B,AAAmB,SAAnBA,gBACF;oBACE,MAAMY,cAAc;2BAAI,IAAI,CAAC,YAAY;qBAAC,CACrC,OAAO,GACP,IAAI,CAACvB,CAAAA,OAAQA,KAAK,SAAS,CAACpB,OAAO,KAAK;oBAC7C,IAAI,CAAC2C,aACD,OAAO3B,OAAO,IAAI,CACd,IAAIC,uBACA,IAAI2B,MAAM,CAAC,mCAAmC,EAAE5C,OAAO,KAAK,CAAC,EAAE,CAAC,GAChE;wBAAE,kBAAkBC,OAAO,KAAK;wBAAE,QAAQ;wBAAMI;oBAAM;oBAMlE,IAAI;wBAEA0B,iBAAiB,MAAMY,YAAY,kBAAkB,CAAC;4BAClD,OAAO3C,OAAO,KAAK;4BACnB,UAAUA,OAAO,MAAM,CAAC,EAAE;wBAC9B;oBACJ,EAAE,OAAO6C,OAAO;wBACZ,OAAO7B,OAAO,IAAI,CACd,IAAIC,uBACA4B,iBAAiBD,QAAQC,QAAQ,IAAID,MAAME,OAAOD,SAClD;4BAAE,kBAAkB5C,OAAO,KAAK;4BAAE,QAAQ;4BAAMI;wBAAM;oBAGlE;gBACJ;gBACA,MAAM0C,QAA0B;oBAC5B,GAAGV,UAAU;oBACb,kBAAkBP,oBAAoB,EAAE;oBACxC,gBAAgBC,kBAAkB,EAAE;gBACxC;gBACA,IAAI,CAACiB,2BAA2BlC,KAAK,UAAU,EAAEiC,QAAQ;oBACrD,MAAME,aAAgC;wBAClC,QAAQnC,KAAK,EAAE;wBACf,SAAS;wBACT,QAAQ;oBACZ;oBACA,IAAIV,SACA6C,WAAW,gBAAgB,GAAGC,2BAC1BpC,KAAK,UAAU,EACfiC;oBAGRzC,MAAM,IAAI,CAAC2C;oBACX;gBACJ;gBACA,IAAInC,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,EAAa;oBAI7B,IAAI,CAACb,OAAO,KAAK,CAAC,QAAQ,CAACa,KAAK,MAAM,CAAC,EAAE,GAAG;wBACxCR,MAAM,IAAI,CAAC;4BACP,QAAQQ,KAAK,EAAE;4BACf,SAAS;4BACT,QAAQqC;wBACZ;wBACA9C,MAAM,IAAI,CAAC;4BACP,MAAM;4BACN,QAAQ;4BACR,QAAQ;4BACR,QAAQS,KAAK,EAAE;4BACf,IAAI;4BACJ,QAAQqC;wBACZ;wBACA;oBACJ;oBAEA7C,MAAM,IAAI,CAAC;wBAAE,QAAQQ,KAAK,EAAE;wBAAE,SAAS;wBAAW,QAAQ;oBAAK;oBAC/Dc,SAASd,KAAK,EAAE;oBAChBa,mBAAmB;wBAACb,KAAK,MAAM,CAAC,EAAE;qBAAC;oBACnCe,eAAeO;oBACf;gBACJ;gBACA,MAAMF,WAAWpB,KAAK,MAAM,CAAC,EAAE;gBAC/B,MAAMK,SAASV,QAAQ,IAAI,CAACW,CAAAA,OAAQA,KAAK,EAAE,KAAKc;gBAChD,IAAIb,SAAmCC,yBAAyB;oBAC5D,QAAQY;oBACR,aAAalC,OAAO,WAAW;oBAC/BkB;oBACAR;gBACJ;gBACA,IAAI,CAACW,UAAUF,QAAQ;oBACnB,IAAIgB,oBAAoB,QAAQ,CAAChB,OAAO,EAAE,GAAG;wBACzCb,MAAM,IAAI,CAAC;4BAAE,QAAQQ,KAAK,EAAE;4BAAE,SAAS;4BAAW,QAAQ;wBAAK;wBAC/D,IAAIV,SAAS;4BACT,MAAMgD,eAAeC,sBAAsBlD,OAAOiC,YAAY;4BAC9D9B,MAAM,IAAI,IAAI8C;wBAClB;wBACA,OAAOpC,OAAO,EAAE,CACZQ,oBAAoB;4BAChB,OAAO;gCAAE,IAAIL,OAAO,EAAE;gCAAE,aAAaA,OAAO,WAAW;4BAAC;4BACxD,QAAQ;4BACR,QAAQL,KAAK,EAAE;4BACfZ;4BACA,kBAAkB;mCAAID,OAAO,KAAK;6BAAC;4BACnC,QAAQ;4BACRI;4BACAC;4BACAC;wBACJ;oBAER;oBACAc,SAASI,qBAAqB,UAAU;gBAC5C;gBACA,MAAM6B,aAAajC,UAAUI,qBAAqB,SAAS;gBAG3D,MAAM8B,cACFD,eAAe7B,qBAAqB,QAAQ,GACtCf,WAAW,IAAI,CAACU,CAAAA,OAAQA,KAAK,MAAM,KAAKc,WAAW,UAAUoB,aAC7DA;gBACVhD,MAAM,IAAI,CAAC;oBAAE,QAAQQ,KAAK,EAAE;oBAAE,SAAS;oBAAW,QAAQyC;gBAAY;gBACtEhD,QAAQ,IAAI,CAAC;oBACT,QAAQ2B;oBACR,aAAaf,QAAQ,eAAe;oBACpC,QAAQoC;gBACZ;gBACAlD,MAAM,IAAI,CAAC;oBACP,MAAM;oBACN,QAAQ6B;oBACR,QAAQ;oBACR,QAAQpB,KAAK,EAAE;oBACf,IAAI;oBACJ,QAAQwC;gBACZ;YACJ;QACJ;QAGA,IAAIlD,WAAWyB,gBAAgB,GAAG;YAC9B,MAAMuB,eAAeC,sBAAsBlD,OAAO0B,eAAe;YACjEvB,MAAM,IAAI,IAAI8C;QAClB;QAGA,IAAIlD,AAAa,WAAbA,UACA,OAAOc,OAAO,EAAE,CACZQ,oBAAoB;YAChB,OAAO;YACP,QAAQ;YACRI;YACA1B;YACAyB;YACA,QAAQ;YACRtB;YACAC;YACAC;QACJ;QAKR,MAAMiD,gBAAgBC,kBAAkB;YACpChD;YACAkB;YACA,aAAa3B,OAAO,WAAW;YAC/BU;YACAF;YACA,oBAAoBH,MAAM,OAAO,CAACe,CAAAA,OAASA,KAAK,MAAM,GAAG;oBAACA,KAAK,MAAM;iBAAC,GAAG,EAAE;QAC/E;QACA,KAAK,MAAMsC,gBAAgBF,cAAe;YACtCnD,MAAM,IAAI,CAAC;gBACP,MAAM;gBACN,QAAQqD,aAAa,MAAM;gBAC3B,QAAQxD;gBACR0B;gBACA,IAAI;gBACJ,QAAQ8B,aAAa,MAAM;YAC/B;YACAnD,QAAQ,IAAI,CAAC;gBACT,QAAQmD,aAAa,MAAM;gBAC3B,aAAaA,aAAa,WAAW;gBACrC,QAAQA,aAAa,WAAW;YACpC;QACJ;QACA,MAAMC,aAAaC,sBAAsB;YACrCnD;YACAkB;YACA,aAAa3B,OAAO,WAAW;YAC/BU;QACJ;QAEA,MAAMmD,UAAU,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YACxC3D;YACAyD;YACA,OAAO3D,OAAO,KAAK;YACnB,YAAYA,OAAO,UAAU;YAC7B,UAAUA,OAAO,QAAQ;YACzB,QAAQA,OAAO,MAAM;QACzB;QACA,IAAI6D,QAAQ,MAAM,IAEd,OAAO7C,OAAO,IAAI,CACd,IAAIC,uBAAuB4C,QAAQ,KAAK,EAAE;YAAElC;YAAkBC;YAAQvB;QAAM;QAIpF,MAAMyD,gBAAgB1D,UAAUyD,QAAQ,KAAK,GAAGE;QAGhD,MAAMC,cAAc,IAAIC,IAAIxD,QAAQ,GAAG,CAACU,CAAAA,SAAU;gBAACA,OAAO,EAAE;gBAAEA;aAAO;QACrE,MAAM+C,eAAeL,QAAQ,KAAK,CAAC,GAAG,CAACM,CAAAA,YAC5BH,YAAY,GAAG,CAACG,UAAU,EAAE,KAAKA;QAE5C,IAAI5C,WAAqB,EAAE;QAC3B,IAAIZ,cAAcuD,aAAa,MAAM,GAAG,GACpC3C,WAAW,MAAMZ,WAAW,mBAAmB,CAAC;YAC5C,OAAOX,OAAO,KAAK;YACnB,MAAMA,OAAO,IAAI;YACjB,OAAOkE;YACP,OAAO;QACX;QAEJ,KAAK,MAAMC,aAAaN,QAAQ,KAAK,CAAE;YACnC,IAAItC,SAAS,QAAQ,CAAC4C,UAAU,EAAE,GAC9B,OAAOnD,OAAO,EAAE,CACZQ,oBAAoB;gBAChB,OAAO2C;gBACP,QAAQjE;gBACR0B;gBACA1B;gBACAyB;gBACA,QAAQ;gBACRtB;gBACAC;gBACAC;gBACAuD;YACJ;YAGRzD,MAAM,IAAI,CAAC;gBACP,MAAM;gBACN,QAAQ8D,UAAU,EAAE;gBACpB,QAAQjE;gBACR0B;gBACA,IAAI;gBACJ,QAAQH,qBAAqB,UAAU;YAC3C;YACAlB,QAAQ,IAAI,CAAC;gBACT,QAAQ4D,UAAU,EAAE;gBACpB,aAAaA,UAAU,WAAW;gBAClC,QAAQ1C,qBAAqB,UAAU;YAC3C;QACJ;QACA,OAAOT,OAAO,EAAE,CACZQ,oBAAoB;YAChB,OAAO;YACP,QAAQ;YACRI;YACA1B;YACAyB;YACA,QAAQyC;YACR/D;YACAC;YACAC;YACAuD;QACJ;IAER;IAEA,MAAa,YAAY9D,MAAiC,EAA6B;QACnF,IAAIA,AAA0B,MAA1BA,OAAO,OAAO,CAAC,MAAM,EACrB,OAAOgB,OAAO,EAAE,CAAC,EAAE;QAEvB,MAAMD,SAAS,MAAM,IAAI,CAAC,WAAW,CAAC;YAClC,SAASf,OAAO,OAAO;YACvB,QAAQ;YACR,OAAOA,OAAO,KAAK;YACnB,KAAKA,OAAO,GAAG;YACf,8BAA8B;QAClC;QACA,IAAIe,OAAO,MAAM,IACb,OAAOC,OAAO,IAAI,CAAC,IAAIC,uBAAuBF,OAAO,KAAK;QAE9D,MAAM,EAAEL,UAAU,EAAEC,UAAU,EAAE,GAAGI,OAAO,KAAK;QAE/C,MAAMsD,QAAQtD,OAAO,KAAK,CAAC,OAAO,CAC7B,MAAM,CAACuD,CAAAA,OAAQA,KAAK,EAAE,KAAKtE,OAAO,WAAW,EAC7C,IAAI,CAAC,CAACuE,GAAGC,IAAOD,EAAE,EAAE,GAAGC,EAAE,EAAE,GAAG,KAAKD,EAAE,EAAE,GAAGC,EAAE,EAAE,GAAG,IAAI;QAE1D,IAAIjD,WAAqB,EAAE;QAC3B,IAAIZ,cAAc0D,MAAM,MAAM,GAAG,GAC7B9C,WAAW,MAAMZ,WAAW,mBAAmB,CAAC;YAC5C,OAAOX,OAAO,KAAK;YACnB,MAAMA,OAAO,IAAI;YACjBqE;QACJ;QAEJ,MAAM5D,UAA2B,EAAE;QACnC,KAAK,MAAM6D,QAAQD,MAAO;YACtB,MAAMI,UAAUlD,SAAS,QAAQ,CAAC+C,KAAK,EAAE;YACzC,MAAMI,YAAYhE,WAAW,IAAI,CAACU,CAAAA,OAAQA,KAAK,MAAM,KAAKkD,KAAK,EAAE;YACjE7D,QAAQ,IAAI,CAAC;gBACT,IAAI6D,KAAK,EAAE;gBACX,aAAaA,KAAK,WAAW;gBAC7B,SAAS;uBAAKA,KAAK,KAAK,IAAI,EAAE;iBAAE;gBAChC,WAAWI,YAAY;oBAAE,GAAGA,SAAS;gBAAC,IAAI;gBAC1CD;YACJ;QACJ;QACA,OAAOzD,OAAO,EAAE,CAACP;IACrB;IAEA,MAAa,UAAUT,MAAmC,EAA+B;QACrF,IAAIA,OAAO,MAAM,KAAKA,OAAO,WAAW,EACpC,OAAOgB,OAAO,EAAE,CAAC;YAAE,MAAM;YAAM,YAAYS,qBAAqB,SAAS;QAAC;QAE9E,IAAIzB,AAA0B,MAA1BA,OAAO,OAAO,CAAC,MAAM,EACrB,OAAOgB,OAAO,EAAE,CAAC;YAAE,MAAM;YAAM,YAAYS,qBAAqB,SAAS;QAAC;QAE9E,MAAMV,SAAS,MAAM,IAAI,CAAC,WAAW,CAAC;YAClC,SAASf,OAAO,OAAO;YACvB,QAAQA,OAAO,MAAM;YACrB,OAAOA,OAAO,KAAK;YACnB,KAAKA,OAAO,GAAG;YACf,8BAA8B;QAClC;QACA,IAAIe,OAAO,MAAM,IACb,OAAOC,OAAO,IAAI,CAAC,IAAIC,uBAAuBF,OAAO,KAAK;QAE9D,MAAM,EAAEL,UAAU,EAAEC,UAAU,EAAE,GAAGI,OAAO,KAAK;QAC/C,MAAMI,SAASJ,OAAO,KAAK,CAAC,OAAO,CAAC,EAAE;QACtC,IAAI,CAACI,QACD,OAAOH,OAAO,EAAE,CAAC;YAAE,MAAM;YAAM,YAAYS,qBAAqB,SAAS;QAAC;QAE9E,MAAM6C,OAAO;YAAE,IAAInD,OAAO,EAAE;YAAE,aAAaA,OAAO,WAAW;QAAC;QAE9D,IAAIT,WAAW,IAAI,CAACgE,CAAAA,YAAaA,UAAU,MAAM,KAAK1E,OAAO,MAAM,GAC/D,OAAOgB,OAAO,EAAE,CAAC;YAAEsD;YAAM,YAAY7C,qBAAqB,QAAQ;QAAC;QAGvE,IAAIF,WAAqB,EAAE;QAC3B,IAAIZ,YACAY,WAAW,MAAMZ,WAAW,mBAAmB,CAAC;YAC5C,OAAOX,OAAO,KAAK;YACnB,MAAMA,OAAO,IAAI;YACjB,OAAO;gBAACmB;aAAO;QACnB;QAEJ,IAAI,CAACI,SAAS,QAAQ,CAACJ,OAAO,EAAE,GAC5B,OAAOH,OAAO,EAAE,CAAC;YAAEsD;YAAM,YAAY7C,qBAAqB,UAAU;QAAC;QAEzE,OAAOT,OAAO,EAAE,CAAC;YAAEsD;YAAM,YAAY;QAAK;IAC9C;IAOA,MAAc,YACVtE,MAA+B,EAC2B;QAC1D,MAAM2E,QAAwB;YAAE,UAAU;mBAAI3E,OAAO,OAAO;aAAC;QAAC;QAC9D,IAAIA,AAAkB,SAAlBA,OAAO,MAAM,EACb2E,MAAM,KAAK,GAAG;YAAC3E,OAAO,MAAM;SAAC;QAEjC,MAAM4E,SAAS,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,IACpD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAAED;YAAM;QAE1C,IAAIC,OAAO,MAAM,IACb,OAAO5D,OAAO,IAAI,CAAC4D,OAAO,KAAK;QAEnC,MAAMnE,UAAUmE,OAAO,KAAK,CAAC,MAAM,CAACN,CAAAA;YAChC,IAAItE,AAAkB,SAAlBA,OAAO,MAAM,IAAasE,KAAK,EAAE,KAAKtE,OAAO,MAAM,EACnD,OAAO;YAEX,OAAOA,OAAO,OAAO,CAAC,IAAI,CAAC6E,CAAAA,SAAUP,KAAK,KAAK,EAAE,SAASO;QAC9D;QAGA,MAAMlE,aACF;eAAI,IAAI,CAAC,YAAY;SAAC,CAAC,OAAO,GAAG,IAAI,CAACS,CAAAA,OAAQA,KAAK,SAAS,CAACpB,OAAO,KAAK,MAAM;QAEnF,IAAIS,AAAmB,MAAnBA,QAAQ,MAAM,IAAUT,OAAO,4BAA4B,EAC3D,OAAOgB,OAAO,EAAE,CAAC;YAAEP;YAAS,YAAY,EAAE;YAAEE;QAAW;QAE3D,MAAMmE,WAAW,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAAE,gBAAgB;QAAK;QACvE,IAAIA,SAAS,MAAM,IACf,OAAO9D,OAAO,IAAI,CAAC8D,SAAS,KAAK;QAErC,MAAMpE,aAAaqE,uBAAuBD,SAAS,KAAK,CAAC,UAAU,EAAE9E,OAAO,GAAG;QAC/E,OAAOgB,OAAO,EAAE,CAAC;YAAEP;YAASC;YAAYC;QAAW;IACvD;AACJ;AAEO,MAAMqE,kDAA0BC,wBAAAA,oBAAgC,CAAC;IACpE,gBAAgB1F;IAChB,cAAc;QACV2F;QACAC;QACAC;QACAC;QACA;YAACC;YAAwB;gBAAE,UAAU;YAAK;SAAE;QAC5C;YAACC;YAAyB;gBAAE,UAAU;YAAK;SAAE;QAC7CC;QACAC;KACH;AACL"}