@webiny/api-workflows 0.0.0-unstable.9f53ea597d → 0.0.0-unstable.a85ef555b2

package/features/workflow/StoreWorkflow/StoreWorkflowUseCase.js

@@ -1,33 +1,210 @@
+import { isDeepStrictEqual } from "node:util";
 import { Result } from "@webiny/feature/api";
-import { GetWorkflowUseCase } from "../GetWorkflow/index.js";
-import { CreateWorkflowUseCase } from "../CreateWorkflow/index.js";
-import { UpdateWorkflowUseCase } from "../UpdateWorkflow/index.js";
+import { EventPublisher } from "@webiny/api-core/features/eventPublisher/index.js";
+import { IdentityContext } from "@webiny/api-core/features/security/IdentityContext/index.js";
+import { ListUsersUseCase } from "@webiny/api-core/features/users/ListUsers/index.js";
+import { FeatureFlags } from "@webiny/api-core/features/featureFlags/abstractions.js";
+import { WorkflowRepository } from "../../../domain/workflow/abstractions/WorkflowRepository.js";
+import { WorkflowValidator } from "../../../domain/workflow/WorkflowValidator.js";
+import { AI_STEP_TYPE, REVIEW_STEP_TYPE } from "../../../domain/workflow/stepTypes.js";
+import { StepTypeRegistryService } from "../../stepTypes/StepTypeRegistryService/index.js";
+import { WorkflowModelParserService } from "../../model/WorkflowModelParserService/index.js";
+import { parseReviewStepConfig } from "../../../domain/workflow/reviewStepConfigSchema.js";
+import { RULE_TARGET_FIELD, RULE_TARGET_TEAM_DELETED_MESSAGE, RULE_TARGET_USER_NOT_MEMBER_MESSAGE } from "../../../domain/workflow/ruleErrorMessages.js";
+import { TEAMS_FEATURE_FLAG } from "../../../constants.js";
+import { ReviewTeamLoader } from "../../identity/ReviewTeamLoader/index.js";
+import { WorkflowConflictError, WorkflowNotFoundError, WorkflowPersistenceError, WorkflowValidationError, isWorkflowValidationError } from "../../../domain/workflow/errors.js";
+import { WorkflowAfterCreateEvent, WorkflowAfterUpdateEvent, WorkflowBeforeCreateEvent, WorkflowBeforeUpdateEvent } from "./events.js";
 import { StoreWorkflowUseCase } from "./abstractions.js";
+const WORKFLOW_NOT_FOUND = "Workflows/Workflow/NotFound";
 class StoreWorkflowUseCaseImpl {
-    constructor(getWorkflow, createWorkflow, updateWorkflow){
-        this.getWorkflow = getWorkflow;
-        this.createWorkflow = createWorkflow;
-        this.updateWorkflow = updateWorkflow;
+    constructor(repository, eventPublisher, identityContext, listUsers, stepTypes, modelParser, featureFlags, teamLoader){
+        this.repository = repository;
+        this.eventPublisher = eventPublisher;
+        this.identityContext = identityContext;
+        this.listUsers = listUsers;
+        this.stepTypes = stepTypes;
+        this.modelParser = modelParser;
+        this.featureFlags = featureFlags;
+        this.teamLoader = teamLoader;
     }
     async execute(input) {
-        const existingResult = await this.getWorkflow.execute({
-            app: input.app,
-            id: input.id
-        });
-        if (existingResult.isFail()) {
-            if ("Workflows/Workflow/NotFound" !== existingResult.error.code) return Result.fail(existingResult.error);
+        const validation = WorkflowValidator.validate(input.workflow, (step)=>{
+            const stepType = this.stepTypes.get(step.type);
+            if (!stepType) {
+                let message = `Step "${step.title}" uses an unknown step type "${step.type}".`;
+                if (step.type === AI_STEP_TYPE) message = `Step "${step.title}" uses the step type "ai", which is not available.`;
+                return Result.fail(new WorkflowValidationError(message, {
+                    stepId: step.id,
+                    field: "type"
+                }));
+            }
+            return stepType.validate({
+                step,
+                workflow: input.workflow
+            });
+        }, (model)=>null !== this.modelParser.parse(model));
+        if (validation.isFail()) return Result.fail(validation.error);
+        const values = validation.value;
+        const userTargetIds = new Set();
+        for (const step of values.steps){
+            const config = step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;
+            for (const rule of config?.assignment.rules ?? [])if ("user" === rule.target.type) userTargetIds.add(rule.target.id);
+        }
+        if (userTargetIds.size > 0) {
+            const userIds = [
+                ...userTargetIds
+            ];
+            let listed;
+            try {
+                listed = await this.identityContext.withoutAuthorization(()=>this.listUsers.execute({
+                        where: {
+                            id_in: userIds
+                        }
+                    }));
+            } catch (error) {
+                return Result.fail(new WorkflowPersistenceError(error instanceof Error ? error : new Error(String(error))));
+            }
+            if (listed.isFail()) return Result.fail(new WorkflowPersistenceError(listed.error));
+            const usersById = new Map();
+            for (const user of listed.value)usersById.set(user.id, user);
+            for (const step of values.steps){
+                const config = step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;
+                if (!config) continue;
+                const invalid = config.assignment.rules.find((rule)=>{
+                    if ("user" !== rule.target.type) return false;
+                    const user = usersById.get(rule.target.id);
+                    const teams = user?.teams ?? [];
+                    return !teams.some((team)=>config.teams.includes(team));
+                });
+                if (invalid) return Result.fail(new WorkflowValidationError(RULE_TARGET_USER_NOT_MEMBER_MESSAGE, {
+                    stepId: step.id,
+                    field: RULE_TARGET_FIELD,
+                    ruleId: invalid.id
+                }));
+            }
+        }
+        const teamTargetIds = new Set();
+        for (const step of values.steps){
+            const config = step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;
+            for (const rule of config?.assignment.rules ?? [])if ("team" === rule.target.type) teamTargetIds.add(rule.target.id);
         }
+        if (teamTargetIds.size > 0 && this.featureFlags.get().isEnabled(TEAMS_FEATURE_FLAG)) {
+            let loaded;
+            try {
+                loaded = await this.teamLoader.load([
+                    ...teamTargetIds
+                ]);
+            } catch (error) {
+                return Result.fail(new WorkflowPersistenceError(error instanceof Error ? error : new Error(String(error))));
+            }
+            if (loaded.isFail()) return Result.fail(new WorkflowPersistenceError(loaded.error));
+            const existingTeamIds = new Set(loaded.value.map((team)=>team.id));
+            for (const step of values.steps){
+                const config = step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;
+                const deleted = config?.assignment.rules.find((rule)=>"team" === rule.target.type && !existingTeamIds.has(rule.target.id));
+                if (deleted) return Result.fail(new WorkflowValidationError(RULE_TARGET_TEAM_DELETED_MESSAGE, {
+                    stepId: step.id,
+                    field: RULE_TARGET_FIELD,
+                    ruleId: deleted.id
+                }));
+            }
+        }
+        const existingResult = await this.repository.get(values.id);
+        if (existingResult.isFail() && existingResult.error.code !== WORKFLOW_NOT_FOUND) return Result.fail(existingResult.error);
         const existing = existingResult.isOk() ? existingResult.value : null;
-        if (!existing) return this.createWorkflow.execute(input);
-        return this.updateWorkflow.execute(input, existing);
+        if (existing && existing.savedOn !== input.savedOn) return Result.fail(new WorkflowConflictError({
+            savedOn: existing.savedOn,
+            savedBy: existing.savedBy
+        }));
+        if (!existing && input.savedOn) return Result.fail(new WorkflowNotFoundError({
+            id: values.id
+        }));
+        const sameModel = await this.repository.list({
+            where: {
+                models_in: values.models
+            },
+            limit: 10
+        });
+        if (sameModel.isFail()) return Result.fail(sameModel.error);
+        const other = sameModel.value.items.find((item)=>item.id !== values.id);
+        if (other) {
+            const model = other.models.find((item)=>values.models.includes(item)) ?? values.models[0];
+            return Result.fail(new WorkflowValidationError(`The model "${model}" already has a workflow: "${other.name}".`, {
+                field: "models",
+                workflowId: other.id
+            }));
+        }
+        const storedSteps = new Map((existing?.steps ?? []).map((step)=>[
+                step.id,
+                step
+            ]));
+        for (const step of values.steps){
+            const stepType = this.stepTypes.get(step.type);
+            if (!stepType?.checkConfig) continue;
+            const stored = storedSteps.get(step.id);
+            if (stored && stored.type === step.type && isDeepStrictEqual(stored.config, step.config)) continue;
+            let checked;
+            try {
+                checked = await stepType.checkConfig({
+                    step,
+                    workflow: values
+                });
+            } catch (error) {
+                return Result.fail(new WorkflowPersistenceError(error instanceof Error ? error : new Error(String(error))));
+            }
+            if (checked.isFail()) return Result.fail(checked.error);
+        }
+        const actor = input.actor;
+        if (existing) {
+            try {
+                await this.eventPublisher.publish(new WorkflowBeforeUpdateEvent({
+                    original: existing,
+                    workflow: values,
+                    actor
+                }));
+            } catch (error) {
+                if (isWorkflowValidationError(error)) return Result.fail(error);
+                throw error;
+            }
+            const updated = await this.repository.update(values);
+            if (updated.isFail()) return Result.fail(updated.error);
+            await this.eventPublisher.publish(new WorkflowAfterUpdateEvent({
+                original: existing,
+                workflow: updated.value,
+                actor
+            }));
+            return Result.ok(updated.value);
+        }
+        try {
+            await this.eventPublisher.publish(new WorkflowBeforeCreateEvent({
+                workflow: values,
+                actor
+            }));
+        } catch (error) {
+            if (isWorkflowValidationError(error)) return Result.fail(error);
+            throw error;
+        }
+        const created = await this.repository.create(values);
+        if (created.isFail()) return Result.fail(created.error);
+        await this.eventPublisher.publish(new WorkflowAfterCreateEvent({
+            workflow: created.value,
+            actor
+        }));
+        return Result.ok(created.value);
     }
 }
 const StoreWorkflowUseCase_StoreWorkflowUseCase = StoreWorkflowUseCase.createImplementation({
     implementation: StoreWorkflowUseCaseImpl,
     dependencies: [
-        GetWorkflowUseCase,
-        CreateWorkflowUseCase,
-        UpdateWorkflowUseCase
+        WorkflowRepository,
+        EventPublisher,
+        IdentityContext,
+        ListUsersUseCase,
+        StepTypeRegistryService,
+        WorkflowModelParserService,
+        FeatureFlags,
+        ReviewTeamLoader
     ]
 });
 export { StoreWorkflowUseCase_StoreWorkflowUseCase as StoreWorkflowUseCase };

package/features/workflow/StoreWorkflow/StoreWorkflowUseCase.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/workflow/StoreWorkflow/StoreWorkflowUseCase.js","sources":["../../../../src/features/workflow/StoreWorkflow/StoreWorkflowUseCase.ts"],"sourcesContent":["import { Result } from \"@webiny/feature/api\";\nimport { GetWorkflowUseCase } from \"../GetWorkflow/index.js\";\nimport { CreateWorkflowUseCase } from \"../CreateWorkflow/index.js\";\nimport { UpdateWorkflowUseCase } from \"../UpdateWorkflow/index.js\";\nimport { StoreWorkflowUseCase as UseCase } from \"./abstractions.js\";\n\nclass StoreWorkflowUseCaseImpl implements UseCase.Interface {\n    constructor(\n        private getWorkflow: GetWorkflowUseCase.Interface,\n        private createWorkflow: CreateWorkflowUseCase.Interface,\n        private updateWorkflow: UpdateWorkflowUseCase.Interface\n    ) {}\n\n    async execute(input: UseCase.Input): UseCase.Return {\n        const existingResult = await this.getWorkflow.execute({\n            app: input.app,\n            id: input.id\n        });\n\n        // If getWorkflow fails with anything other than NotFound, propagate error\n        if (existingResult.isFail()) {\n            if (existingResult.error.code !== \"Workflows/Workflow/NotFound\") {\n                return Result.fail(existingResult.error);\n            }\n        }\n\n        const existing = existingResult.isOk() ? existingResult.value : null;\n\n        if (!existing) {\n            return this.createWorkflow.execute(input);\n        } else {\n            return this.updateWorkflow.execute(input, existing);\n        }\n    }\n}\n\nexport const StoreWorkflowUseCase = UseCase.createImplementation({\n    implementation: StoreWorkflowUseCaseImpl,\n    dependencies: [GetWorkflowUseCase, CreateWorkflowUseCase, UpdateWorkflowUseCase]\n});\n"],"names":["StoreWorkflowUseCaseImpl","getWorkflow","createWorkflow","updateWorkflow","input","existingResult","Result","existing","StoreWorkflowUseCase","UseCase","GetWorkflowUseCase","CreateWorkflowUseCase","UpdateWorkflowUseCase"],"mappings":";;;;;AAMA,MAAMA;IACF,YACYC,WAAyC,EACzCC,cAA+C,EAC/CC,cAA+C,CACzD;aAHUF,WAAW,GAAXA;aACAC,cAAc,GAAdA;aACAC,cAAc,GAAdA;IACT;IAEH,MAAM,QAAQC,KAAoB,EAAkB;QAChD,MAAMC,iBAAiB,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;YAClD,KAAKD,MAAM,GAAG;YACd,IAAIA,MAAM,EAAE;QAChB;QAGA,IAAIC,eAAe,MAAM,IACrB;YAAA,IAAIA,AAA8B,kCAA9BA,eAAe,KAAK,CAAC,IAAI,EACzB,OAAOC,OAAO,IAAI,CAACD,eAAe,KAAK;QAC3C;QAGJ,MAAME,WAAWF,eAAe,IAAI,KAAKA,eAAe,KAAK,GAAG;QAEhE,IAAI,CAACE,UACD,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAACH;QAEnC,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAACA,OAAOG;IAElD;AACJ;AAEO,MAAMC,4CAAuBC,qBAAAA,oBAA4B,CAAC;IAC7D,gBAAgBT;IAChB,cAAc;QAACU;QAAoBC;QAAuBC;KAAsB;AACpF"}
+{"version":3,"file":"features/workflow/StoreWorkflow/StoreWorkflowUseCase.js","sources":["../../../../src/features/workflow/StoreWorkflow/StoreWorkflowUseCase.ts"],"sourcesContent":["import { isDeepStrictEqual } from \"node:util\";\nimport { Result } from \"@webiny/feature/api\";\nimport { EventPublisher } from \"@webiny/api-core/features/eventPublisher/index.js\";\nimport { IdentityContext } from \"@webiny/api-core/features/security/IdentityContext/index.js\";\nimport { ListUsersUseCase } from \"@webiny/api-core/features/users/ListUsers/index.js\";\nimport { FeatureFlags } from \"@webiny/api-core/features/featureFlags/abstractions.js\";\nimport type { Team } from \"@webiny/api-core/types/security.js\";\nimport type { AdminUser } from \"@webiny/api-core/types/users.js\";\nimport { WorkflowRepository } from \"~/domain/workflow/abstractions/WorkflowRepository.js\";\nimport { WorkflowValidator } from \"~/domain/workflow/WorkflowValidator.js\";\nimport { AI_STEP_TYPE, REVIEW_STEP_TYPE } from \"~/domain/workflow/stepTypes.js\";\nimport { StepTypeRegistryService } from \"~/features/stepTypes/StepTypeRegistryService/index.js\";\nimport { WorkflowModelParserService } from \"~/features/model/WorkflowModelParserService/index.js\";\nimport { parseReviewStepConfig } from \"~/domain/workflow/reviewStepConfigSchema.js\";\nimport { RULE_TARGET_FIELD } from \"~/domain/workflow/ruleErrorMessages.js\";\nimport { RULE_TARGET_USER_NOT_MEMBER_MESSAGE } from \"~/domain/workflow/ruleErrorMessages.js\";\nimport { RULE_TARGET_TEAM_DELETED_MESSAGE } from \"~/domain/workflow/ruleErrorMessages.js\";\nimport { TEAMS_FEATURE_FLAG } from \"~/constants.js\";\nimport { ReviewTeamLoader } from \"~/features/identity/ReviewTeamLoader/index.js\";\nimport {\n    isWorkflowValidationError,\n    WorkflowConflictError,\n    WorkflowNotFoundError,\n    WorkflowPersistenceError,\n    WorkflowValidationError\n} from \"~/domain/workflow/errors.js\";\nimport {\n    WorkflowAfterCreateEvent,\n    WorkflowAfterUpdateEvent,\n    WorkflowBeforeCreateEvent,\n    WorkflowBeforeUpdateEvent\n} from \"./events.js\";\nimport { StoreWorkflowUseCase as UseCase } from \"./abstractions.js\";\n\nconst WORKFLOW_NOT_FOUND = \"Workflows/Workflow/NotFound\";\n\nclass StoreWorkflowUseCaseImpl implements UseCase.Interface {\n    constructor(\n        private repository: WorkflowRepository.Interface,\n        private eventPublisher: EventPublisher.Interface,\n        private identityContext: IdentityContext.Interface,\n        private listUsers: ListUsersUseCase.Interface,\n        private stepTypes: StepTypeRegistryService.Interface,\n        private modelParser: WorkflowModelParserService.Interface,\n        private featureFlags: FeatureFlags.Interface,\n        private teamLoader: ReviewTeamLoader.Interface\n    ) {}\n\n    async execute(input: UseCase.Input): UseCase.Return {\n        // Each step is validated by its registered step type (R131). While no `ai` type is\n        // registered (ai-powerups registers it, R177) an `ai` step gets its own message (R132).\n        const validation = WorkflowValidator.validate(\n            input.workflow,\n            step => {\n                const stepType = this.stepTypes.get(step.type);\n                if (!stepType) {\n                    let message = `Step \"${step.title}\" uses an unknown step type \"${step.type}\".`;\n                    if (step.type === AI_STEP_TYPE) {\n                        message = `Step \"${step.title}\" uses the step type \"ai\", which is not available.`;\n                    }\n                    return Result.fail(\n                        new WorkflowValidationError(message, { stepId: step.id, field: \"type\" })\n                    );\n                }\n                return stepType.validate({ step, workflow: input.workflow });\n            },\n            model => this.modelParser.parse(model) !== null\n        );\n        if (validation.isFail()) {\n            return Result.fail(validation.error);\n        }\n        const values = validation.value;\n\n        // Spec 6, R122: user targets must be members of the step's teams. One lookup for the user\n        // targets of every step, then each step's teams are checked in memory (the same check the\n        // users storage applies for `teams_in`). A membership lookup, not an access decision, so\n        // it runs as the system (`ListUsers` needs `adminUsers.user`, D48).\n        const userTargetIds = new Set<string>();\n        for (const step of values.steps) {\n            const config =\n                step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;\n            for (const rule of config?.assignment.rules ?? []) {\n                if (rule.target.type === \"user\") {\n                    userTargetIds.add(rule.target.id);\n                }\n            }\n        }\n        if (userTargetIds.size > 0) {\n            const userIds = [...userTargetIds];\n            let listed: Result<AdminUser[], ListUsersUseCase.Error>;\n            try {\n                listed = await this.identityContext.withoutAuthorization(() => {\n                    return this.listUsers.execute({ where: { id_in: userIds } });\n                });\n            } catch (error) {\n                return Result.fail(\n                    new WorkflowPersistenceError(\n                        error instanceof Error ? error : new Error(String(error))\n                    )\n                );\n            }\n            if (listed.isFail()) {\n                return Result.fail(new WorkflowPersistenceError(listed.error));\n            }\n            const usersById = new Map<string, AdminUser>();\n            for (const user of listed.value) {\n                usersById.set(user.id, user);\n            }\n\n            for (const step of values.steps) {\n                const config =\n                    step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;\n                if (!config) {\n                    continue;\n                }\n                const invalid = config.assignment.rules.find(rule => {\n                    if (rule.target.type !== \"user\") {\n                        return false;\n                    }\n                    const user = usersById.get(rule.target.id);\n                    const teams = user?.teams ?? [];\n                    return !teams.some(team => config.teams.includes(team));\n                });\n                if (invalid) {\n                    return Result.fail(\n                        new WorkflowValidationError(RULE_TARGET_USER_NOT_MEMBER_MESSAGE, {\n                            stepId: step.id,\n                            field: RULE_TARGET_FIELD,\n                            ruleId: invalid.id\n                        })\n                    );\n                }\n            }\n        }\n\n        // D174: a team target whose team was deleted is a rule error, as on the client. Only while\n        // teams are on (R287: no team query with teams off). One lookup for every step's team\n        // targets; a team target is one of the step's teams (validated above).\n        const teamTargetIds = new Set<string>();\n        for (const step of values.steps) {\n            const config =\n                step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;\n            for (const rule of config?.assignment.rules ?? []) {\n                if (rule.target.type === \"team\") {\n                    teamTargetIds.add(rule.target.id);\n                }\n            }\n        }\n        if (teamTargetIds.size > 0 && this.featureFlags.get().isEnabled(TEAMS_FEATURE_FLAG)) {\n            let loaded: Result<Team[], ReviewTeamLoader.Error>;\n            try {\n                loaded = await this.teamLoader.load([...teamTargetIds]);\n            } catch (error) {\n                return Result.fail(\n                    new WorkflowPersistenceError(\n                        error instanceof Error ? error : new Error(String(error))\n                    )\n                );\n            }\n            if (loaded.isFail()) {\n                return Result.fail(new WorkflowPersistenceError(loaded.error));\n            }\n            const existingTeamIds = new Set(loaded.value.map(team => team.id));\n            for (const step of values.steps) {\n                const config =\n                    step.type === REVIEW_STEP_TYPE ? parseReviewStepConfig(step.config) : null;\n                const deleted = config?.assignment.rules.find(rule => {\n                    return rule.target.type === \"team\" && !existingTeamIds.has(rule.target.id);\n                });\n                if (deleted) {\n                    return Result.fail(\n                        new WorkflowValidationError(RULE_TARGET_TEAM_DELETED_MESSAGE, {\n                            stepId: step.id,\n                            field: RULE_TARGET_FIELD,\n                            ruleId: deleted.id\n                        })\n                    );\n                }\n            }\n        }\n\n        const existingResult = await this.repository.get(values.id);\n        if (existingResult.isFail() && existingResult.error.code !== WORKFLOW_NOT_FOUND) {\n            return Result.fail(existingResult.error);\n        }\n        const existing = existingResult.isOk() ? existingResult.value : null;\n\n        // Read-then-write: two concurrent saves with the same `savedOn` can both pass; accepted (D131, admin edits are rare).\n        if (existing && existing.savedOn !== input.savedOn) {\n            return Result.fail(\n                new WorkflowConflictError({\n                    savedOn: existing.savedOn,\n                    savedBy: existing.savedBy\n                })\n            );\n        }\n        if (!existing && input.savedOn) {\n            // No tombstone: the caller only learns that the workflow no longer exists (D123).\n            return Result.fail(new WorkflowNotFoundError({ id: values.id }));\n        }\n\n        // v1: one workflow per model; the race between two saves is accepted (D41). `limit: 10` is\n        // enough because the v1 invariant allows at most one other workflow per model.\n        // On OpenSearch the list lags DynamoDB, widening the accepted D41 race to saves within the refresh window.\n        const sameModel = await this.repository.list({\n            where: { models_in: values.models },\n            limit: 10\n        });\n        if (sameModel.isFail()) {\n            return Result.fail(sameModel.error);\n        }\n        const other = sameModel.value.items.find(item => item.id !== values.id);\n        if (other) {\n            const model =\n                other.models.find(item => values.models.includes(item)) ?? values.models[0];\n            return Result.fail(\n                new WorkflowValidationError(\n                    `The model \"${model}\" already has a workflow: \"${other.name}\".`,\n                    { field: \"models\", workflowId: other.id }\n                )\n            );\n        }\n\n        // R165: the I/O check of a step type runs only for a step that is new or changed versus\n        // the stored workflow, so a workflow whose model or connection was removed later can still\n        // be saved without touching that step. It runs after the conflict, not-found and\n        // same-model checks above, so those win over a check failure. A stored config that went\n        // through storage with an `undefined` key dropped compares as changed, which only means\n        // one more check.\n        const storedSteps = new Map((existing?.steps ?? []).map(step => [step.id, step]));\n        for (const step of values.steps) {\n            const stepType = this.stepTypes.get(step.type);\n            if (!stepType?.checkConfig) {\n                continue;\n            }\n            const stored = storedSteps.get(step.id);\n            if (\n                stored &&\n                stored.type === step.type &&\n                isDeepStrictEqual(stored.config, step.config)\n            ) {\n                continue;\n            }\n            let checked: Result<void, WorkflowValidationError>;\n            try {\n                // oxlint-disable-next-line no-await-in-loop -- a step type's save-time check (R165), only for changed steps.\n                checked = await stepType.checkConfig({ step, workflow: values });\n            } catch (error) {\n                return Result.fail(\n                    new WorkflowPersistenceError(\n                        error instanceof Error ? error : new Error(String(error))\n                    )\n                );\n            }\n            if (checked.isFail()) {\n                return Result.fail(checked.error);\n            }\n        }\n\n        const actor = input.actor;\n\n        if (existing) {\n            // Before handlers reject a save by throwing `WorkflowValidationError`.\n            try {\n                await this.eventPublisher.publish(\n                    new WorkflowBeforeUpdateEvent({ original: existing, workflow: values, actor })\n                );\n            } catch (error) {\n                if (isWorkflowValidationError(error)) {\n                    return Result.fail(error);\n                }\n                throw error;\n            }\n\n            const updated = await this.repository.update(values);\n            if (updated.isFail()) {\n                return Result.fail(updated.error);\n            }\n\n            await this.eventPublisher.publish(\n                new WorkflowAfterUpdateEvent({ original: existing, workflow: updated.value, actor })\n            );\n            return Result.ok(updated.value);\n        }\n\n        // Before handlers reject a save by throwing `WorkflowValidationError`.\n        try {\n            await this.eventPublisher.publish(\n                new WorkflowBeforeCreateEvent({ workflow: values, actor })\n            );\n        } catch (error) {\n            if (isWorkflowValidationError(error)) {\n                return Result.fail(error);\n            }\n            throw error;\n        }\n\n        const created = await this.repository.create(values);\n        if (created.isFail()) {\n            return Result.fail(created.error);\n        }\n\n        await this.eventPublisher.publish(\n            new WorkflowAfterCreateEvent({ workflow: created.value, actor })\n        );\n        return Result.ok(created.value);\n    }\n}\n\nexport const StoreWorkflowUseCase = UseCase.createImplementation({\n    implementation: StoreWorkflowUseCaseImpl,\n    dependencies: [\n        WorkflowRepository,\n        EventPublisher,\n        IdentityContext,\n        ListUsersUseCase,\n        StepTypeRegistryService,\n        WorkflowModelParserService,\n        FeatureFlags,\n        ReviewTeamLoader\n    ]\n});\n"],"names":["WORKFLOW_NOT_FOUND","StoreWorkflowUseCaseImpl","repository","eventPublisher","identityContext","listUsers","stepTypes","modelParser","featureFlags","teamLoader","input","validation","WorkflowValidator","step","stepType","message","AI_STEP_TYPE","Result","WorkflowValidationError","model","values","userTargetIds","Set","config","REVIEW_STEP_TYPE","parseReviewStepConfig","rule","userIds","listed","error","WorkflowPersistenceError","Error","String","usersById","Map","user","invalid","teams","team","RULE_TARGET_USER_NOT_MEMBER_MESSAGE","RULE_TARGET_FIELD","teamTargetIds","TEAMS_FEATURE_FLAG","loaded","existingTeamIds","deleted","RULE_TARGET_TEAM_DELETED_MESSAGE","existingResult","existing","WorkflowConflictError","WorkflowNotFoundError","sameModel","other","item","storedSteps","stored","isDeepStrictEqual","checked","actor","WorkflowBeforeUpdateEvent","isWorkflowValidationError","updated","WorkflowAfterUpdateEvent","WorkflowBeforeCreateEvent","created","WorkflowAfterCreateEvent","StoreWorkflowUseCase","UseCase","WorkflowRepository","EventPublisher","IdentityContext","ListUsersUseCase","StepTypeRegistryService","WorkflowModelParserService","FeatureFlags","ReviewTeamLoader"],"mappings":";;;;;;;;;;;;;;;;;;AAkCA,MAAMA,qBAAqB;AAE3B,MAAMC;IACF,YACYC,UAAwC,EACxCC,cAAwC,EACxCC,eAA0C,EAC1CC,SAAqC,EACrCC,SAA4C,EAC5CC,WAAiD,EACjDC,YAAoC,EACpCC,UAAsC,CAChD;aARUP,UAAU,GAAVA;aACAC,cAAc,GAAdA;aACAC,eAAe,GAAfA;aACAC,SAAS,GAATA;aACAC,SAAS,GAATA;aACAC,WAAW,GAAXA;aACAC,YAAY,GAAZA;aACAC,UAAU,GAAVA;IACT;IAEH,MAAM,QAAQC,KAAoB,EAAkB;QAGhD,MAAMC,aAAaC,kBAAkB,QAAQ,CACzCF,MAAM,QAAQ,EACdG,CAAAA;YACI,MAAMC,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAACD,KAAK,IAAI;YAC7C,IAAI,CAACC,UAAU;gBACX,IAAIC,UAAU,CAAC,MAAM,EAAEF,KAAK,KAAK,CAAC,6BAA6B,EAAEA,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC9E,IAAIA,KAAK,IAAI,KAAKG,cACdD,UAAU,CAAC,MAAM,EAAEF,KAAK,KAAK,CAAC,kDAAkD,CAAC;gBAErF,OAAOI,OAAO,IAAI,CACd,IAAIC,wBAAwBH,SAAS;oBAAE,QAAQF,KAAK,EAAE;oBAAE,OAAO;gBAAO;YAE9E;YACA,OAAOC,SAAS,QAAQ,CAAC;gBAAED;gBAAM,UAAUH,MAAM,QAAQ;YAAC;QAC9D,GACAS,CAAAA,QAAS,AAAkC,SAAlC,IAAI,CAAC,WAAW,CAAC,KAAK,CAACA;QAEpC,IAAIR,WAAW,MAAM,IACjB,OAAOM,OAAO,IAAI,CAACN,WAAW,KAAK;QAEvC,MAAMS,SAAST,WAAW,KAAK;QAM/B,MAAMU,gBAAgB,IAAIC;QAC1B,KAAK,MAAMT,QAAQO,OAAO,KAAK,CAAE;YAC7B,MAAMG,SACFV,KAAK,IAAI,KAAKW,mBAAmBC,sBAAsBZ,KAAK,MAAM,IAAI;YAC1E,KAAK,MAAMa,QAAQH,QAAQ,WAAW,SAAS,EAAE,CAC7C,IAAIG,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,EAChBL,cAAc,GAAG,CAACK,KAAK,MAAM,CAAC,EAAE;QAG5C;QACA,IAAIL,cAAc,IAAI,GAAG,GAAG;YACxB,MAAMM,UAAU;mBAAIN;aAAc;YAClC,IAAIO;YACJ,IAAI;gBACAA,SAAS,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,IAC9C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;wBAAE,OAAO;4BAAE,OAAOD;wBAAQ;oBAAE;YAElE,EAAE,OAAOE,OAAO;gBACZ,OAAOZ,OAAO,IAAI,CACd,IAAIa,yBACAD,iBAAiBE,QAAQF,QAAQ,IAAIE,MAAMC,OAAOH;YAG9D;YACA,IAAID,OAAO,MAAM,IACb,OAAOX,OAAO,IAAI,CAAC,IAAIa,yBAAyBF,OAAO,KAAK;YAEhE,MAAMK,YAAY,IAAIC;YACtB,KAAK,MAAMC,QAAQP,OAAO,KAAK,CAC3BK,UAAU,GAAG,CAACE,KAAK,EAAE,EAAEA;YAG3B,KAAK,MAAMtB,QAAQO,OAAO,KAAK,CAAE;gBAC7B,MAAMG,SACFV,KAAK,IAAI,KAAKW,mBAAmBC,sBAAsBZ,KAAK,MAAM,IAAI;gBAC1E,IAAI,CAACU,QACD;gBAEJ,MAAMa,UAAUb,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAACG,CAAAA;oBACzC,IAAIA,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,EAChB,OAAO;oBAEX,MAAMS,OAAOF,UAAU,GAAG,CAACP,KAAK,MAAM,CAAC,EAAE;oBACzC,MAAMW,QAAQF,MAAM,SAAS,EAAE;oBAC/B,OAAO,CAACE,MAAM,IAAI,CAACC,CAAAA,OAAQf,OAAO,KAAK,CAAC,QAAQ,CAACe;gBACrD;gBACA,IAAIF,SACA,OAAOnB,OAAO,IAAI,CACd,IAAIC,wBAAwBqB,qCAAqC;oBAC7D,QAAQ1B,KAAK,EAAE;oBACf,OAAO2B;oBACP,QAAQJ,QAAQ,EAAE;gBACtB;YAGZ;QACJ;QAKA,MAAMK,gBAAgB,IAAInB;QAC1B,KAAK,MAAMT,QAAQO,OAAO,KAAK,CAAE;YAC7B,MAAMG,SACFV,KAAK,IAAI,KAAKW,mBAAmBC,sBAAsBZ,KAAK,MAAM,IAAI;YAC1E,KAAK,MAAMa,QAAQH,QAAQ,WAAW,SAAS,EAAE,CAC7C,IAAIG,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,EAChBe,cAAc,GAAG,CAACf,KAAK,MAAM,CAAC,EAAE;QAG5C;QACA,IAAIe,cAAc,IAAI,GAAG,KAAK,IAAI,CAAC,YAAY,CAAC,GAAG,GAAG,SAAS,CAACC,qBAAqB;YACjF,IAAIC;YACJ,IAAI;gBACAA,SAAS,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;uBAAIF;iBAAc;YAC1D,EAAE,OAAOZ,OAAO;gBACZ,OAAOZ,OAAO,IAAI,CACd,IAAIa,yBACAD,iBAAiBE,QAAQF,QAAQ,IAAIE,MAAMC,OAAOH;YAG9D;YACA,IAAIc,OAAO,MAAM,IACb,OAAO1B,OAAO,IAAI,CAAC,IAAIa,yBAAyBa,OAAO,KAAK;YAEhE,MAAMC,kBAAkB,IAAItB,IAAIqB,OAAO,KAAK,CAAC,GAAG,CAACL,CAAAA,OAAQA,KAAK,EAAE;YAChE,KAAK,MAAMzB,QAAQO,OAAO,KAAK,CAAE;gBAC7B,MAAMG,SACFV,KAAK,IAAI,KAAKW,mBAAmBC,sBAAsBZ,KAAK,MAAM,IAAI;gBAC1E,MAAMgC,UAAUtB,QAAQ,WAAW,MAAM,KAAKG,CAAAA,OACnCA,AAAqB,WAArBA,KAAK,MAAM,CAAC,IAAI,IAAe,CAACkB,gBAAgB,GAAG,CAAClB,KAAK,MAAM,CAAC,EAAE;gBAE7E,IAAImB,SACA,OAAO5B,OAAO,IAAI,CACd,IAAIC,wBAAwB4B,kCAAkC;oBAC1D,QAAQjC,KAAK,EAAE;oBACf,OAAO2B;oBACP,QAAQK,QAAQ,EAAE;gBACtB;YAGZ;QACJ;QAEA,MAAME,iBAAiB,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC3B,OAAO,EAAE;QAC1D,IAAI2B,eAAe,MAAM,MAAMA,eAAe,KAAK,CAAC,IAAI,KAAK/C,oBACzD,OAAOiB,OAAO,IAAI,CAAC8B,eAAe,KAAK;QAE3C,MAAMC,WAAWD,eAAe,IAAI,KAAKA,eAAe,KAAK,GAAG;QAGhE,IAAIC,YAAYA,SAAS,OAAO,KAAKtC,MAAM,OAAO,EAC9C,OAAOO,OAAO,IAAI,CACd,IAAIgC,sBAAsB;YACtB,SAASD,SAAS,OAAO;YACzB,SAASA,SAAS,OAAO;QAC7B;QAGR,IAAI,CAACA,YAAYtC,MAAM,OAAO,EAE1B,OAAOO,OAAO,IAAI,CAAC,IAAIiC,sBAAsB;YAAE,IAAI9B,OAAO,EAAE;QAAC;QAMjE,MAAM+B,YAAY,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YACzC,OAAO;gBAAE,WAAW/B,OAAO,MAAM;YAAC;YAClC,OAAO;QACX;QACA,IAAI+B,UAAU,MAAM,IAChB,OAAOlC,OAAO,IAAI,CAACkC,UAAU,KAAK;QAEtC,MAAMC,QAAQD,UAAU,KAAK,CAAC,KAAK,CAAC,IAAI,CAACE,CAAAA,OAAQA,KAAK,EAAE,KAAKjC,OAAO,EAAE;QACtE,IAAIgC,OAAO;YACP,MAAMjC,QACFiC,MAAM,MAAM,CAAC,IAAI,CAACC,CAAAA,OAAQjC,OAAO,MAAM,CAAC,QAAQ,CAACiC,UAAUjC,OAAO,MAAM,CAAC,EAAE;YAC/E,OAAOH,OAAO,IAAI,CACd,IAAIC,wBACA,CAAC,WAAW,EAAEC,MAAM,2BAA2B,EAAEiC,MAAM,IAAI,CAAC,EAAE,CAAC,EAC/D;gBAAE,OAAO;gBAAU,YAAYA,MAAM,EAAE;YAAC;QAGpD;QAQA,MAAME,cAAc,IAAIpB,IAAKc,AAAAA,CAAAA,UAAU,SAAS,EAAC,EAAG,GAAG,CAACnC,CAAAA,OAAQ;gBAACA,KAAK,EAAE;gBAAEA;aAAK;QAC/E,KAAK,MAAMA,QAAQO,OAAO,KAAK,CAAE;YAC7B,MAAMN,WAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAACD,KAAK,IAAI;YAC7C,IAAI,CAACC,UAAU,aACX;YAEJ,MAAMyC,SAASD,YAAY,GAAG,CAACzC,KAAK,EAAE;YACtC,IACI0C,UACAA,OAAO,IAAI,KAAK1C,KAAK,IAAI,IACzB2C,kBAAkBD,OAAO,MAAM,EAAE1C,KAAK,MAAM,GAE5C;YAEJ,IAAI4C;YACJ,IAAI;gBAEAA,UAAU,MAAM3C,SAAS,WAAW,CAAC;oBAAED;oBAAM,UAAUO;gBAAO;YAClE,EAAE,OAAOS,OAAO;gBACZ,OAAOZ,OAAO,IAAI,CACd,IAAIa,yBACAD,iBAAiBE,QAAQF,QAAQ,IAAIE,MAAMC,OAAOH;YAG9D;YACA,IAAI4B,QAAQ,MAAM,IACd,OAAOxC,OAAO,IAAI,CAACwC,QAAQ,KAAK;QAExC;QAEA,MAAMC,QAAQhD,MAAM,KAAK;QAEzB,IAAIsC,UAAU;YAEV,IAAI;gBACA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIW,0BAA0B;oBAAE,UAAUX;oBAAU,UAAU5B;oBAAQsC;gBAAM;YAEpF,EAAE,OAAO7B,OAAO;gBACZ,IAAI+B,0BAA0B/B,QAC1B,OAAOZ,OAAO,IAAI,CAACY;gBAEvB,MAAMA;YACV;YAEA,MAAMgC,UAAU,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAACzC;YAC7C,IAAIyC,QAAQ,MAAM,IACd,OAAO5C,OAAO,IAAI,CAAC4C,QAAQ,KAAK;YAGpC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,yBAAyB;gBAAE,UAAUd;gBAAU,UAAUa,QAAQ,KAAK;gBAAEH;YAAM;YAEtF,OAAOzC,OAAO,EAAE,CAAC4C,QAAQ,KAAK;QAClC;QAGA,IAAI;YACA,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIE,0BAA0B;gBAAE,UAAU3C;gBAAQsC;YAAM;QAEhE,EAAE,OAAO7B,OAAO;YACZ,IAAI+B,0BAA0B/B,QAC1B,OAAOZ,OAAO,IAAI,CAACY;YAEvB,MAAMA;QACV;QAEA,MAAMmC,UAAU,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC5C;QAC7C,IAAI4C,QAAQ,MAAM,IACd,OAAO/C,OAAO,IAAI,CAAC+C,QAAQ,KAAK;QAGpC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAC7B,IAAIC,yBAAyB;YAAE,UAAUD,QAAQ,KAAK;YAAEN;QAAM;QAElE,OAAOzC,OAAO,EAAE,CAAC+C,QAAQ,KAAK;IAClC;AACJ;AAEO,MAAME,4CAAuBC,qBAAAA,oBAA4B,CAAC;IAC7D,gBAAgBlE;IAChB,cAAc;QACVmE;QACAC;QACAC;QACAC;QACAC;QACAC;QACAC;QACAC;KACH;AACL"}

package/features/workflow/StoreWorkflow/abstractions.d.ts

@@ -1,32 +1,36 @@
-import type { Result } from "@webiny/feature/api";
-import type { IWorkflow } from "../../../domain/workflow/abstractions.js";
-import type { NonEmptyArray } from "@webiny/api/types.js";
-import { type WorkflowNotFoundError, type WorkflowNotAuthorizedError, type WorkflowPersistenceError, type WorkflowValidationError } from "../../../domain/workflow/errors.js";
-import type { IWorkflowStepInput } from "../../../features/shared/abstractions.js";
-export interface IStoreWorkflowInput {
-    app: string;
-    id: string;
-    name: string;
-    steps: NonEmptyArray<IWorkflowStepInput>;
-}
-/**
- * StoreWorkflow use case interface - delegates to CreateWorkflow or UpdateWorkflow
- */
-export interface IStoreWorkflowUseCase {
-    execute(input: IStoreWorkflowInput): Promise<Result<IWorkflow, UseCaseError>>;
+import { type Result } from "@webiny/feature/api";
+import type { Actor } from "../../../domain/review/types.js";
+import type { Workflow, WorkflowValues } from "../../../domain/workflow/types.js";
+import type { WorkflowConflictError, WorkflowNotFoundError, WorkflowPersistenceError, WorkflowValidationError } from "../../../domain/workflow/errors.js";
+export interface StoreWorkflowInput {
+    workflow: WorkflowValues;
+    /** The `savedOn` the caller loaded. Omit when creating a new workflow (D131). */
+    savedOn?: string | null;
+    /** Who saves; built by the app wrapper (D132, R58). Carried on the workflow events. */
+    actor: Actor;
 }
 export interface IStoreWorkflowUseCaseErrors {
+    validation: WorkflowValidationError;
+    conflict: WorkflowConflictError;
     notFound: WorkflowNotFoundError;
-    notAuthorized: WorkflowNotAuthorizedError;
     persistence: WorkflowPersistenceError;
-    validation: WorkflowValidationError;
 }
 type UseCaseError = IStoreWorkflowUseCaseErrors[keyof IStoreWorkflowUseCaseErrors];
+export interface IStoreWorkflowUseCase {
+    execute(input: StoreWorkflowInput): Promise<Result<Workflow, UseCaseError>>;
+}
+/**
+ * Create or update a workflow through one validation path, with an optimistic `savedOn` check
+ * on updates. Internal (D132): no permission check; each app's store wrapper checks `editor`.
+ * Rule user targets must be members of their step's teams (spec 6, R122): checked with one user
+ * lookup for the user targets of all steps, run as the system; a failed lookup is
+ * `WorkflowPersistenceError`.
+ */
 export declare const StoreWorkflowUseCase: import("@webiny/di").Abstraction<IStoreWorkflowUseCase>;
 export declare namespace StoreWorkflowUseCase {
     type Interface = IStoreWorkflowUseCase;
-    type Input = IStoreWorkflowInput;
-    type Return = Promise<Result<IWorkflow, UseCaseError>>;
+    type Input = StoreWorkflowInput;
     type Error = UseCaseError;
+    type Return = Promise<Result<Workflow, UseCaseError>>;
 }
 export {};

package/features/workflow/StoreWorkflow/abstractions.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/workflow/StoreWorkflow/abstractions.js","sources":["../../../../src/features/workflow/StoreWorkflow/abstractions.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport type { Result } from \"@webiny/feature/api\";\nimport type { IWorkflow } from \"~/domain/workflow/abstractions.js\";\nimport type { NonEmptyArray } from \"@webiny/api/types.js\";\nimport {\n    type WorkflowNotFoundError,\n    type WorkflowNotAuthorizedError,\n    type WorkflowPersistenceError,\n    type WorkflowValidationError\n} from \"~/domain/workflow/errors.js\";\nimport type { IWorkflowStepInput } from \"~/features/shared/abstractions.js\";\n\n// Input types (from context/abstractions/WorkflowsContext.ts)\nexport interface IStoreWorkflowInput {\n    app: string;\n    id: string;\n    name: string;\n    steps: NonEmptyArray<IWorkflowStepInput>;\n}\n\n/**\n * StoreWorkflow use case interface - delegates to CreateWorkflow or UpdateWorkflow\n */\nexport interface IStoreWorkflowUseCase {\n    execute(input: IStoreWorkflowInput): Promise<Result<IWorkflow, UseCaseError>>;\n}\n\nexport interface IStoreWorkflowUseCaseErrors {\n    notFound: WorkflowNotFoundError;\n    notAuthorized: WorkflowNotAuthorizedError;\n    persistence: WorkflowPersistenceError;\n    validation: WorkflowValidationError;\n}\n\ntype UseCaseError = IStoreWorkflowUseCaseErrors[keyof IStoreWorkflowUseCaseErrors];\n\nexport const StoreWorkflowUseCase =\n    createAbstraction<IStoreWorkflowUseCase>(\"StoreWorkflowUseCase\");\n\nexport namespace StoreWorkflowUseCase {\n    export type Interface = IStoreWorkflowUseCase;\n    export type Input = IStoreWorkflowInput;\n    export type Return = Promise<Result<IWorkflow, UseCaseError>>;\n    export type Error = UseCaseError;\n}\n"],"names":["StoreWorkflowUseCase","createAbstraction"],"mappings":";AAoCO,MAAMA,uBACTC,kBAAyC"}
+{"version":3,"file":"features/workflow/StoreWorkflow/abstractions.js","sources":["../../../../src/features/workflow/StoreWorkflow/abstractions.ts"],"sourcesContent":["import { createAbstraction, type Result } from \"@webiny/feature/api\";\nimport type { Actor } from \"~/domain/review/types.js\";\nimport type { Workflow, WorkflowValues } from \"~/domain/workflow/types.js\";\nimport type {\n    WorkflowConflictError,\n    WorkflowNotFoundError,\n    WorkflowPersistenceError,\n    WorkflowValidationError\n} from \"~/domain/workflow/errors.js\";\n\nexport interface StoreWorkflowInput {\n    workflow: WorkflowValues;\n    /** The `savedOn` the caller loaded. Omit when creating a new workflow (D131). */\n    savedOn?: string | null;\n    /** Who saves; built by the app wrapper (D132, R58). Carried on the workflow events. */\n    actor: Actor;\n}\n\nexport interface IStoreWorkflowUseCaseErrors {\n    validation: WorkflowValidationError;\n    conflict: WorkflowConflictError;\n    notFound: WorkflowNotFoundError;\n    persistence: WorkflowPersistenceError;\n}\n\ntype UseCaseError = IStoreWorkflowUseCaseErrors[keyof IStoreWorkflowUseCaseErrors];\n\nexport interface IStoreWorkflowUseCase {\n    execute(input: StoreWorkflowInput): Promise<Result<Workflow, UseCaseError>>;\n}\n\n/**\n * Create or update a workflow through one validation path, with an optimistic `savedOn` check\n * on updates. Internal (D132): no permission check; each app's store wrapper checks `editor`.\n * Rule user targets must be members of their step's teams (spec 6, R122): checked with one user\n * lookup for the user targets of all steps, run as the system; a failed lookup is\n * `WorkflowPersistenceError`.\n */\nexport const StoreWorkflowUseCase =\n    createAbstraction<IStoreWorkflowUseCase>(\"StoreWorkflowUseCase\");\n\nexport namespace StoreWorkflowUseCase {\n    export type Interface = IStoreWorkflowUseCase;\n    export type Input = StoreWorkflowInput;\n    export type Error = UseCaseError;\n    export type Return = Promise<Result<Workflow, UseCaseError>>;\n}\n"],"names":["StoreWorkflowUseCase","createAbstraction"],"mappings":";AAsCO,MAAMA,uBACTC,kBAAyC"}

package/features/workflow/StoreWorkflow/events.d.ts

@@ -0,0 +1,75 @@
+import { DomainEvent } from "@webiny/api-core/features/eventPublisher/index.js";
+import type { IEventHandler } from "@webiny/api-core/features/eventPublisher/index.js";
+import type { Actor } from "../../../domain/review/types.js";
+import type { Workflow, WorkflowValues } from "../../../domain/workflow/types.js";
+/** Event payloads. `actor` is who saved, built by the app wrapper (R58). */
+export interface WorkflowBeforeCreatePayload {
+    workflow: WorkflowValues;
+    actor: Actor;
+}
+export interface WorkflowAfterCreatePayload {
+    workflow: Workflow;
+    actor: Actor;
+}
+export interface WorkflowBeforeUpdatePayload {
+    original: Workflow;
+    workflow: WorkflowValues;
+    actor: Actor;
+}
+export interface WorkflowAfterUpdatePayload {
+    original: Workflow;
+    workflow: Workflow;
+    actor: Actor;
+}
+/**
+ * WorkflowBeforeCreateEvent - published before a workflow is created.
+ */
+export declare class WorkflowBeforeCreateEvent extends DomainEvent<WorkflowBeforeCreatePayload> {
+    eventType: "Workflows/Workflow/BeforeCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<WorkflowBeforeCreateEvent>>;
+}
+/** Hook in before a workflow is created. Throw `WorkflowValidationError` to reject the save. */
+export declare const WorkflowBeforeCreateEventHandler: import("@webiny/di").Abstraction<IEventHandler<WorkflowBeforeCreateEvent>>;
+export declare namespace WorkflowBeforeCreateEventHandler {
+    type Interface = IEventHandler<WorkflowBeforeCreateEvent>;
+    type Event = WorkflowBeforeCreateEvent;
+}
+/**
+ * WorkflowAfterCreateEvent - published after a workflow is created.
+ */
+export declare class WorkflowAfterCreateEvent extends DomainEvent<WorkflowAfterCreatePayload> {
+    eventType: "Workflows/Workflow/AfterCreate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<WorkflowAfterCreateEvent>>;
+}
+/** Hook in after a workflow is created. */
+export declare const WorkflowAfterCreateEventHandler: import("@webiny/di").Abstraction<IEventHandler<WorkflowAfterCreateEvent>>;
+export declare namespace WorkflowAfterCreateEventHandler {
+    type Interface = IEventHandler<WorkflowAfterCreateEvent>;
+    type Event = WorkflowAfterCreateEvent;
+}
+/**
+ * WorkflowBeforeUpdateEvent - published before a workflow is updated.
+ */
+export declare class WorkflowBeforeUpdateEvent extends DomainEvent<WorkflowBeforeUpdatePayload> {
+    eventType: "Workflows/Workflow/BeforeUpdate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<WorkflowBeforeUpdateEvent>>;
+}
+/** Hook in before a workflow is updated. Throw `WorkflowValidationError` to reject the save. */
+export declare const WorkflowBeforeUpdateEventHandler: import("@webiny/di").Abstraction<IEventHandler<WorkflowBeforeUpdateEvent>>;
+export declare namespace WorkflowBeforeUpdateEventHandler {
+    type Interface = IEventHandler<WorkflowBeforeUpdateEvent>;
+    type Event = WorkflowBeforeUpdateEvent;
+}
+/**
+ * WorkflowAfterUpdateEvent - published after a workflow is updated.
+ */
+export declare class WorkflowAfterUpdateEvent extends DomainEvent<WorkflowAfterUpdatePayload> {
+    eventType: "Workflows/Workflow/AfterUpdate";
+    getHandlerAbstraction(): import("@webiny/di").Abstraction<IEventHandler<WorkflowAfterUpdateEvent>>;
+}
+/** Hook in after a workflow is updated. */
+export declare const WorkflowAfterUpdateEventHandler: import("@webiny/di").Abstraction<IEventHandler<WorkflowAfterUpdateEvent>>;
+export declare namespace WorkflowAfterUpdateEventHandler {
+    type Interface = IEventHandler<WorkflowAfterUpdateEvent>;
+    type Event = WorkflowAfterUpdateEvent;
+}

package/features/workflow/StoreWorkflow/events.js

@@ -0,0 +1,41 @@
+import { createAbstraction } from "@webiny/feature/api";
+import { DomainEvent } from "@webiny/api-core/features/eventPublisher/index.js";
+class WorkflowBeforeCreateEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return WorkflowBeforeCreateEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "Workflows/Workflow/BeforeCreate";
+    }
+}
+const WorkflowBeforeCreateEventHandler = createAbstraction("WorkflowBeforeCreateEventHandler");
+class WorkflowAfterCreateEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return WorkflowAfterCreateEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "Workflows/Workflow/AfterCreate";
+    }
+}
+const WorkflowAfterCreateEventHandler = createAbstraction("WorkflowAfterCreateEventHandler");
+class WorkflowBeforeUpdateEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return WorkflowBeforeUpdateEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "Workflows/Workflow/BeforeUpdate";
+    }
+}
+const WorkflowBeforeUpdateEventHandler = createAbstraction("WorkflowBeforeUpdateEventHandler");
+class WorkflowAfterUpdateEvent extends DomainEvent {
+    getHandlerAbstraction() {
+        return WorkflowAfterUpdateEventHandler;
+    }
+    constructor(...args){
+        super(...args), this.eventType = "Workflows/Workflow/AfterUpdate";
+    }
+}
+const WorkflowAfterUpdateEventHandler = createAbstraction("WorkflowAfterUpdateEventHandler");
+export { WorkflowAfterCreateEvent, WorkflowAfterCreateEventHandler, WorkflowAfterUpdateEvent, WorkflowAfterUpdateEventHandler, WorkflowBeforeCreateEvent, WorkflowBeforeCreateEventHandler, WorkflowBeforeUpdateEvent, WorkflowBeforeUpdateEventHandler };
+
+//# sourceMappingURL=events.js.map

package/features/workflow/StoreWorkflow/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/workflow/StoreWorkflow/events.js","sources":["../../../../src/features/workflow/StoreWorkflow/events.ts"],"sourcesContent":["import { createAbstraction } from \"@webiny/feature/api\";\nimport { DomainEvent } from \"@webiny/api-core/features/eventPublisher/index.js\";\nimport type { IEventHandler } from \"@webiny/api-core/features/eventPublisher/index.js\";\nimport type { Actor } from \"~/domain/review/types.js\";\nimport type { Workflow, WorkflowValues } from \"~/domain/workflow/types.js\";\n\n/** Event payloads. `actor` is who saved, built by the app wrapper (R58). */\nexport interface WorkflowBeforeCreatePayload {\n    workflow: WorkflowValues;\n    actor: Actor;\n}\n\nexport interface WorkflowAfterCreatePayload {\n    workflow: Workflow;\n    actor: Actor;\n}\n\nexport interface WorkflowBeforeUpdatePayload {\n    original: Workflow;\n    workflow: WorkflowValues;\n    actor: Actor;\n}\n\nexport interface WorkflowAfterUpdatePayload {\n    original: Workflow;\n    workflow: Workflow;\n    actor: Actor;\n}\n\n/**\n * WorkflowBeforeCreateEvent - published before a workflow is created.\n */\nexport class WorkflowBeforeCreateEvent extends DomainEvent<WorkflowBeforeCreatePayload> {\n    eventType = \"Workflows/Workflow/BeforeCreate\" as const;\n\n    getHandlerAbstraction() {\n        return WorkflowBeforeCreateEventHandler;\n    }\n}\n\n/** Hook in before a workflow is created. Throw `WorkflowValidationError` to reject the save. */\nexport const WorkflowBeforeCreateEventHandler = createAbstraction<\n    IEventHandler<WorkflowBeforeCreateEvent>\n>(\"WorkflowBeforeCreateEventHandler\");\n\nexport namespace WorkflowBeforeCreateEventHandler {\n    export type Interface = IEventHandler<WorkflowBeforeCreateEvent>;\n    export type Event = WorkflowBeforeCreateEvent;\n}\n\n/**\n * WorkflowAfterCreateEvent - published after a workflow is created.\n */\nexport class WorkflowAfterCreateEvent extends DomainEvent<WorkflowAfterCreatePayload> {\n    eventType = \"Workflows/Workflow/AfterCreate\" as const;\n\n    getHandlerAbstraction() {\n        return WorkflowAfterCreateEventHandler;\n    }\n}\n\n/** Hook in after a workflow is created. */\nexport const WorkflowAfterCreateEventHandler = createAbstraction<\n    IEventHandler<WorkflowAfterCreateEvent>\n>(\"WorkflowAfterCreateEventHandler\");\n\nexport namespace WorkflowAfterCreateEventHandler {\n    export type Interface = IEventHandler<WorkflowAfterCreateEvent>;\n    export type Event = WorkflowAfterCreateEvent;\n}\n\n/**\n * WorkflowBeforeUpdateEvent - published before a workflow is updated.\n */\nexport class WorkflowBeforeUpdateEvent extends DomainEvent<WorkflowBeforeUpdatePayload> {\n    eventType = \"Workflows/Workflow/BeforeUpdate\" as const;\n\n    getHandlerAbstraction() {\n        return WorkflowBeforeUpdateEventHandler;\n    }\n}\n\n/** Hook in before a workflow is updated. Throw `WorkflowValidationError` to reject the save. */\nexport const WorkflowBeforeUpdateEventHandler = createAbstraction<\n    IEventHandler<WorkflowBeforeUpdateEvent>\n>(\"WorkflowBeforeUpdateEventHandler\");\n\nexport namespace WorkflowBeforeUpdateEventHandler {\n    export type Interface = IEventHandler<WorkflowBeforeUpdateEvent>;\n    export type Event = WorkflowBeforeUpdateEvent;\n}\n\n/**\n * WorkflowAfterUpdateEvent - published after a workflow is updated.\n */\nexport class WorkflowAfterUpdateEvent extends DomainEvent<WorkflowAfterUpdatePayload> {\n    eventType = \"Workflows/Workflow/AfterUpdate\" as const;\n\n    getHandlerAbstraction() {\n        return WorkflowAfterUpdateEventHandler;\n    }\n}\n\n/** Hook in after a workflow is updated. */\nexport const WorkflowAfterUpdateEventHandler = createAbstraction<\n    IEventHandler<WorkflowAfterUpdateEvent>\n>(\"WorkflowAfterUpdateEventHandler\");\n\nexport namespace WorkflowAfterUpdateEventHandler {\n    export type Interface = IEventHandler<WorkflowAfterUpdateEvent>;\n    export type Event = WorkflowAfterUpdateEvent;\n}\n"],"names":["WorkflowBeforeCreateEvent","DomainEvent","WorkflowBeforeCreateEventHandler","createAbstraction","WorkflowAfterCreateEvent","WorkflowAfterCreateEventHandler","WorkflowBeforeUpdateEvent","WorkflowBeforeUpdateEventHandler","WorkflowAfterUpdateEvent","WorkflowAfterUpdateEventHandler"],"mappings":";;AAgCO,MAAMA,kCAAkCC;IAG3C,wBAAwB;QACpB,OAAOC;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,mCAAmCC,kBAE9C;AAUK,MAAMC,iCAAiCH;IAG1C,wBAAwB;QACpB,OAAOI;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,kCAAkCF,kBAE7C;AAUK,MAAMG,kCAAkCL;IAG3C,wBAAwB;QACpB,OAAOM;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,mCAAmCJ,kBAE9C;AAUK,MAAMK,iCAAiCP;IAG1C,wBAAwB;QACpB,OAAOQ;IACX;;QALG,qBACH,SAAS,GAAG;;AAKhB;AAGO,MAAMA,kCAAkCN,kBAE7C"}

package/features/workflow/StoreWorkflow/feature.js

@@ -1,12 +1,8 @@
 import { createFeature } from "@webiny/feature/api";
 import { StoreWorkflowUseCase } from "./StoreWorkflowUseCase.js";
-import { CreateWorkflowFeature } from "../CreateWorkflow/index.js";
-import { UpdateWorkflowFeature } from "../UpdateWorkflow/index.js";
 const StoreWorkflowFeature = createFeature({
     name: "Workflows/StoreWorkflow",
     register (container) {
-        CreateWorkflowFeature.register(container);
-        UpdateWorkflowFeature.register(container);
         container.register(StoreWorkflowUseCase);
     }
 });

package/features/workflow/StoreWorkflow/feature.js.map

@@ -1 +1 @@
-{"version":3,"file":"features/workflow/StoreWorkflow/feature.js","sources":["../../../../src/features/workflow/StoreWorkflow/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { StoreWorkflowUseCase } from \"./StoreWorkflowUseCase.js\";\nimport { CreateWorkflowFeature } from \"../CreateWorkflow/index.js\";\nimport { UpdateWorkflowFeature } from \"../UpdateWorkflow/index.js\";\n\nexport const StoreWorkflowFeature = createFeature({\n    name: \"Workflows/StoreWorkflow\",\n    register(container) {\n        // Register dependencies\n        CreateWorkflowFeature.register(container);\n        UpdateWorkflowFeature.register(container);\n\n        // Register StoreWorkflow use case\n        container.register(StoreWorkflowUseCase);\n    }\n});\n"],"names":["StoreWorkflowFeature","createFeature","container","CreateWorkflowFeature","UpdateWorkflowFeature","StoreWorkflowUseCase"],"mappings":";;;;AAKO,MAAMA,uBAAuBC,cAAc;IAC9C,MAAM;IACN,UAASC,SAAS;QAEdC,sBAAsB,QAAQ,CAACD;QAC/BE,sBAAsB,QAAQ,CAACF;QAG/BA,UAAU,QAAQ,CAACG;IACvB;AACJ"}
+{"version":3,"file":"features/workflow/StoreWorkflow/feature.js","sources":["../../../../src/features/workflow/StoreWorkflow/feature.ts"],"sourcesContent":["import { createFeature } from \"@webiny/feature/api\";\nimport { StoreWorkflowUseCase } from \"./StoreWorkflowUseCase.js\";\n\nexport const StoreWorkflowFeature = createFeature({\n    name: \"Workflows/StoreWorkflow\",\n    register(container) {\n        container.register(StoreWorkflowUseCase);\n    }\n});\n"],"names":["StoreWorkflowFeature","createFeature","container","StoreWorkflowUseCase"],"mappings":";;AAGO,MAAMA,uBAAuBC,cAAc;IAC9C,MAAM;IACN,UAASC,SAAS;QACdA,UAAU,QAAQ,CAACC;IACvB;AACJ"}

package/features/workflow/StoreWorkflow/index.d.ts

@@ -1,3 +1,4 @@
-export { StoreWorkflowFeature } from "./feature.js";
 export { StoreWorkflowUseCase } from "./abstractions.js";
-export type { IStoreWorkflowInput } from "./abstractions.js";
+export type { StoreWorkflowInput } from "./abstractions.js";
+export { WorkflowAfterCreateEventHandler, WorkflowAfterUpdateEventHandler, WorkflowBeforeCreateEventHandler, WorkflowBeforeUpdateEventHandler } from "./events.js";
+export type { WorkflowAfterCreatePayload, WorkflowAfterUpdatePayload, WorkflowBeforeCreatePayload, WorkflowBeforeUpdatePayload } from "./events.js";

package/features/workflow/StoreWorkflow/index.js

@@ -1,2 +1,2 @@
-export { StoreWorkflowFeature } from "./feature.js";
 export { StoreWorkflowUseCase } from "./abstractions.js";
+export { WorkflowAfterCreateEventHandler, WorkflowAfterUpdateEventHandler, WorkflowBeforeCreateEventHandler, WorkflowBeforeUpdateEventHandler } from "./events.js";

package/features/workflow/shared/WorkflowEntryMapper.d.ts

@@ -0,0 +1,22 @@
+import type { CmsEntry } from "@webiny/api-headless-cms/types/index.js";
+import type { Workflow, WorkflowStepNotification, WorkflowValues } from "../../../domain/workflow/types.js";
+export interface WorkflowEntryStep {
+    id: string;
+    title: string;
+    color: string | null;
+    description: string | null;
+    type: string;
+    notifications: WorkflowStepNotification[] | null;
+    config: unknown;
+}
+export interface WorkflowEntryValues {
+    name: string;
+    models: string[] | null;
+    steps: WorkflowEntryStep[] | null;
+}
+/** Maps workflows to and from `wbyWorkflow` entries. */
+export declare class WorkflowEntryMapper {
+    static toValues(values: WorkflowValues): WorkflowEntryValues;
+    static fromEntry(entry: CmsEntry<WorkflowEntryValues>): Workflow;
+    private static stepFromEntry;
+}

package/features/workflow/shared/WorkflowEntryMapper.js

@@ -0,0 +1,58 @@
+import { parseIdentifier } from "@webiny/utils";
+const toIdentity = (identity)=>({
+        id: identity.id,
+        displayName: identity.displayName,
+        type: identity.type
+    });
+class WorkflowEntryMapper {
+    static toValues(values) {
+        return {
+            name: values.name,
+            models: [
+                ...values.models
+            ],
+            steps: values.steps.map((step)=>({
+                    id: step.id,
+                    title: step.title,
+                    color: step.color,
+                    description: step.description ?? null,
+                    type: step.type,
+                    notifications: step.notifications.map((notification)=>({
+                            id: notification.id
+                        })),
+                    config: step.config
+                }))
+        };
+    }
+    static fromEntry(entry) {
+        const { id } = parseIdentifier(entry.id);
+        return {
+            id,
+            name: entry.values.name,
+            models: entry.values.models ?? [],
+            steps: (entry.values.steps ?? []).map((step)=>WorkflowEntryMapper.stepFromEntry(step)),
+            createdOn: entry.createdOn,
+            savedOn: entry.savedOn,
+            createdBy: toIdentity(entry.createdBy),
+            savedBy: toIdentity(entry.savedBy)
+        };
+    }
+    static stepFromEntry(step) {
+        return {
+            id: step.id,
+            title: step.title,
+            color: step.color ?? "",
+            ...step.description ? {
+                description: step.description
+            } : {},
+            type: step.type,
+            notifications: (step.notifications ?? []).map((notification)=>({
+                    id: notification.id
+                })),
+            config: step.config ?? null
+        };
+    }
+}
+export { WorkflowEntryMapper };
+
+//# sourceMappingURL=WorkflowEntryMapper.js.map

package/features/workflow/shared/WorkflowEntryMapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"features/workflow/shared/WorkflowEntryMapper.js","sources":["../../../../src/features/workflow/shared/WorkflowEntryMapper.ts"],"sourcesContent":["import { parseIdentifier } from \"@webiny/utils\";\nimport type { CmsEntry, CmsIdentity } from \"@webiny/api-headless-cms/types/index.js\";\nimport type {\n    Workflow,\n    WorkflowIdentity,\n    WorkflowStep,\n    WorkflowStepNotification,\n    WorkflowValues\n} from \"~/domain/workflow/types.js\";\n\nexport interface WorkflowEntryStep {\n    id: string;\n    title: string;\n    color: string | null;\n    description: string | null;\n    type: string;\n    notifications: WorkflowStepNotification[] | null;\n    config: unknown;\n}\n\nexport interface WorkflowEntryValues {\n    name: string;\n    models: string[] | null;\n    steps: WorkflowEntryStep[] | null;\n}\n\nconst toIdentity = (identity: CmsIdentity): WorkflowIdentity => {\n    return {\n        id: identity.id,\n        displayName: identity.displayName,\n        type: identity.type\n    };\n};\n\n/** Maps workflows to and from `wbyWorkflow` entries. */\nexport class WorkflowEntryMapper {\n    public static toValues(values: WorkflowValues): WorkflowEntryValues {\n        return {\n            name: values.name,\n            models: [...values.models],\n            steps: values.steps.map(step => ({\n                id: step.id,\n                title: step.title,\n                color: step.color,\n                description: step.description ?? null,\n                type: step.type,\n                notifications: step.notifications.map(notification => ({ id: notification.id })),\n                config: step.config\n            }))\n        };\n    }\n\n    public static fromEntry(entry: CmsEntry<WorkflowEntryValues>): Workflow {\n        const { id } = parseIdentifier(entry.id);\n        return {\n            id,\n            name: entry.values.name,\n            models: entry.values.models ?? [],\n            steps: (entry.values.steps ?? []).map(step => WorkflowEntryMapper.stepFromEntry(step)),\n            createdOn: entry.createdOn,\n            savedOn: entry.savedOn,\n            createdBy: toIdentity(entry.createdBy),\n            savedBy: toIdentity(entry.savedBy)\n        };\n    }\n\n    private static stepFromEntry(step: WorkflowEntryStep): WorkflowStep {\n        return {\n            id: step.id,\n            title: step.title,\n            color: step.color ?? \"\",\n            ...(step.description ? { description: step.description } : {}),\n            type: step.type,\n            notifications: (step.notifications ?? []).map(notification => ({\n                id: notification.id\n            })),\n            config: step.config ?? null\n        };\n    }\n}\n"],"names":["toIdentity","identity","WorkflowEntryMapper","values","step","notification","entry","id","parseIdentifier"],"mappings":";AA0BA,MAAMA,aAAa,CAACC,WACT;QACH,IAAIA,SAAS,EAAE;QACf,aAAaA,SAAS,WAAW;QACjC,MAAMA,SAAS,IAAI;IACvB;AAIG,MAAMC;IACT,OAAc,SAASC,MAAsB,EAAuB;QAChE,OAAO;YACH,MAAMA,OAAO,IAAI;YACjB,QAAQ;mBAAIA,OAAO,MAAM;aAAC;YAC1B,OAAOA,OAAO,KAAK,CAAC,GAAG,CAACC,CAAAA,OAAS;oBAC7B,IAAIA,KAAK,EAAE;oBACX,OAAOA,KAAK,KAAK;oBACjB,OAAOA,KAAK,KAAK;oBACjB,aAAaA,KAAK,WAAW,IAAI;oBACjC,MAAMA,KAAK,IAAI;oBACf,eAAeA,KAAK,aAAa,CAAC,GAAG,CAACC,CAAAA,eAAiB;4BAAE,IAAIA,aAAa,EAAE;wBAAC;oBAC7E,QAAQD,KAAK,MAAM;gBACvB;QACJ;IACJ;IAEA,OAAc,UAAUE,KAAoC,EAAY;QACpE,MAAM,EAAEC,EAAE,EAAE,GAAGC,gBAAgBF,MAAM,EAAE;QACvC,OAAO;YACHC;YACA,MAAMD,MAAM,MAAM,CAAC,IAAI;YACvB,QAAQA,MAAM,MAAM,CAAC,MAAM,IAAI,EAAE;YACjC,OAAQA,AAAAA,CAAAA,MAAM,MAAM,CAAC,KAAK,IAAI,EAAC,EAAG,GAAG,CAACF,CAAAA,OAAQF,oBAAoB,aAAa,CAACE;YAChF,WAAWE,MAAM,SAAS;YAC1B,SAASA,MAAM,OAAO;YACtB,WAAWN,WAAWM,MAAM,SAAS;YACrC,SAASN,WAAWM,MAAM,OAAO;QACrC;IACJ;IAEA,OAAe,cAAcF,IAAuB,EAAgB;QAChE,OAAO;YACH,IAAIA,KAAK,EAAE;YACX,OAAOA,KAAK,KAAK;YACjB,OAAOA,KAAK,KAAK,IAAI;YACrB,GAAIA,KAAK,WAAW,GAAG;gBAAE,aAAaA,KAAK,WAAW;YAAC,IAAI,CAAC,CAAC;YAC7D,MAAMA,KAAK,IAAI;YACf,eAAgBA,AAAAA,CAAAA,KAAK,aAAa,IAAI,EAAC,EAAG,GAAG,CAACC,CAAAA,eAAiB;oBAC3D,IAAIA,aAAa,EAAE;gBACvB;YACA,QAAQD,KAAK,MAAM,IAAI;QAC3B;IACJ;AACJ"}