@wildo-ai/saas-backend-lib 1.1.12 → 1.1.13

package/dist/esm/compliance/electronic-signatures/signature-requests.backend.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"signature-requests.backend.service.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-requests.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,SAAS,EACT,qBAAqB,EACrB,mCAAmC,EACnC,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,SAAS,EACT,UAAU,EACV,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uCAAuC,EACvC,uCAAuC,GAExC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAOpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AACrI,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACnH,OAAO,EAAE,0BAA0B,EAAE,MAAM,8EAA8E,CAAC;AAE1H,OAAO,EAAE,qBAAqB,EAA6D,MAAM,sCAAsC,CAAC;AACxI,OAAO,EAAE,6BAA6B,EAAsC,MAAM,4CAA4C,CAAC;AAE/H,sCAAsC;AACtC,MAAM,CAAN,IAAY,2BAmBX;AAnBD,WAAY,2BAA2B;IACrC,gEAAiC,CAAA;IACjC,wFAAwF;IACxF,kEAAmC,CAAA;IACnC,mFAAmF;IACnF,8EAA+C,CAAA;IAC/C,sDAAsD;IACtD,4EAA6C,CAAA;IAC7C,gFAAiD,CAAA;IACjD,6DAA6D;IAC7D,0EAA2C,CAAA;IAC3C,iFAAiF;IACjF,4EAA6C,CAAA;IAC7C,wDAAwD;IACxD,4DAA6B,CAAA;IAC7B,+EAA+E;IAC/E,gEAAiC,CAAA;IACjC,oHAAoH;IACpH,wEAAyC,CAAA;AAC3C,CAAC,EAnBW,2BAA2B,KAA3B,2BAA2B,QAmBtC;AAwBD,uFAAuF;AACvF,MAAM,CAAN,IAAY,2BAOX;AAPD,WAAY,2BAA2B;IACrC,uBAAuB;IACvB,sDAAuB,CAAA;IACvB,yFAAyF;IACzF,oDAAqB,CAAA;IACrB,8FAA8F;IAC9F,sDAAuB,CAAA;AACzB,CAAC,EAPW,2BAA2B,KAA3B,2BAA2B,QAOtC;AAmBD,MAAM,CAAC,MAAM,qCAAqC,GAA+B,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;AAajK,sFAAsF;AACtF,SAAS,QAAQ;IACf,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAGM,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAEY;IAC4B;IACG;IACX;IACK;IACI;IACJ;IAEU;IACb;IAV5E,YACsD,MAAqB,EACO,YAA2C,EACxC,uBAAwG,EACnH,SAAqC,EAChC,KAA8B,EAC1B,SAAmC,EACvC,YAA6D,EAEnD,aAA6C,EAC1D,SAAqE;QAT3F,WAAM,GAAN,MAAM,CAAe;QACO,iBAAY,GAAZ,YAAY,CAA+B;QACxC,4BAAuB,GAAvB,uBAAuB,CAAiF;QACnH,cAAS,GAAT,SAAS,CAA4B;QAChC,UAAK,GAAL,KAAK,CAAyB;QAC1B,cAAS,GAAT,SAAS,CAA0B;QACvC,iBAAY,GAAZ,YAAY,CAAiD;QAEnD,kBAAa,GAAb,aAAa,CAAgC;QAC1D,cAAS,GAAT,SAAS,CAA4D;IAC9I,CAAC;IAEJ;;;;;;OAMG;IACI,KAAK,CAAC,0BAA0B,CAAC,IAA4C;QAClF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,KAA+B,CAAC;gBAAE,SAAS;YACzF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,gBAA8B,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5K,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChG,IAAI,MAAM,CAAC,OAAO,KAAK,uCAAuC,CAAC,MAAM,EAAE,CAAC;oBACtE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,IAAI,6CAA6C,EAAE,CAAC,CAAC;oBACvG,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oGAAoG,EAAE;oBACrH,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe;iBACnH,CAAC,CAAC;gBACH,+GAA+G;gBAC/G,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,SAAS,EAAE,sBAAsB,CAAC,qCAAqC,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,SAAS;oBAC1I,OAAO,EAAE,MAAM,CAAC,OAAoH;oBACpI,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5F,kBAAkB,EAAE,mCAAmC,CAAC,eAAe;iBACxE,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAClC,MAAM,OAAO,GAAG,GAAG,QAAQ,CAAC,MAAM,mGAAmG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3J,MAAM,IAAI,CAAC,YAAY;YACrB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,EAAE,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,4CAA4C,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YACjM,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAAC,KAA4B;QACxD,MAAM,MAAM,GAAG,CAAC,OAAoC,EAAE,MAAc,EAAE,SAAS,GAAG,KAAK,EAAE,kBAA2B,EAA0B,EAAE,CAC9I,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QAEtF,iDAAiD;QACjD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;QACnK,IAAI,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,cAAc,EAAE,qBAAqB,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QACpH,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,2BAA2B,CAAC,eAAe,EAAE,wBAAwB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClK,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB,CAAC,2BAA2B,EAAE,CAAC;YAC1H,OAAO,MAAM,CAAC,2BAA2B,CAAC,qBAAqB,EAAE,sDAAsD,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,4DAA4D,CAAC,CAAC;QAE3I,oCAAoC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;QACpL,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,KAA+B,CAAC,CAAC,CAAC;QACjH,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAE,6DAA6D,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1J,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,EAAE,2CAA2C,CAAC,CAAC;QAChI,IAAI,QAAgB,CAAC;QACrB,IAAI,aAAiC,CAAC;QACtC,IAAI,YAAoB,CAAC;QACzB,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAA2H,CAAC;YACjL,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,EAAE,yBAAyB,MAAM,YAAY,CAAC,CAAC;YAC1H,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpE,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAa,EAAE,OAAO,CAAC,CAAC;YAClE,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC;YAClF,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,EAAE,2CAA2C,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,EAAE,CAAC;YAC5F,OAAO,MAAM,CAAC,2BAA2B,CAAC,mBAAmB,EAAE,4GAA4G,CAAC,CAAC;QAC/K,CAAC;QAED,kCAAkC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;QACxI,MAAM,UAAU,GAAqH,EAAE,CAAC;QACxI,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YACnJ,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YACjK,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,QAAQ,GAAG,OAAO,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpF,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,WAAW,MAAM,CAAC,MAAM,qEAAqE,CAAC,CAAC;YACjK,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtI,CAAC;QAED,kDAAkD;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YACrC,QAAQ,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa;YACrG,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;SAC/J,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,KAAK,8BAA8B,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEjJ,+EAA+E;QAC/E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,OAAO,GAAG,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzH,oHAAoH;QACpH,mHAAmH;QACnH,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,iBAAiB,GAAa,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;gBAC3F,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO;gBACxF,cAAc,EAAE,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;gBAClG,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;gBAC/G,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAChD,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;aACxF,EAAE,OAAO,CAAC,CAAC;YACZ,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,gBAAgB,CAAC,yBAAyB,EAAE;oBAClG,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,SAAS;oBACrH,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,qBAAqB,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;oBACrH,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;iBAC/B,EAAE,OAAO,CAAC,CAAC;gBACZ,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAChJ,CAAC;YACD,IAAI,cAAc;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACzJ,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnK,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,uCAAuC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAClI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qHAAqH,EAAE;gBACvI,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAClI,CAAC,CAAC;YACH,mHAAmH;YACnH,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5E,OAAO,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAE,oGAAoG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAClL,CAAC;YACD,OAAO,MAAM,CAAC,2BAA2B,CAAC,kBAAkB,EAC1D,sCAAsC,mBAAmB,CAAC,KAAK,CAAC,oCAAoC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,uCAAuC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACjM,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,sBAAsB,CAAC,sBAAsB;YACxD,kBAAkB,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;YACjI,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,qBAAqB,EAAE,aAAa;YACxE,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;SACvG,EAAE,MAAM,CAAC,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACvG,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,cAAc,CAAC,kBAA0B,EAAE,QAAsC,4BAA4B,CAAC,IAAI;QAC7H,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;QACpK,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,SAAS,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,qBAAqB,CAAC,WAAmB,EAAE,eAAuB;QAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAC7D,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE,OAAO,CACvG,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,gBAAgB,CAAC,SAAqC,qCAAqC;QACtG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAC5D,gBAAgB,CAAC,kBAAkB,EACnC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAC1F,OAAO,EACP,SAAS,EACT,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,CAClJ,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAAC,gBAAgB,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC/E,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,kBAAkB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBACvI,gBAAgB,IAAI,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAChH,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,4BAA4B,CAAC,IAAI,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpJ,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,kCAAkC,CAAC,KAAK;gBAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;iBAC9E,IAAI,MAAM,CAAC,OAAO,KAAK,2BAA2B,CAAC,QAAQ;gBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;iBACjF,IAAI,MAAM,CAAC,OAAO,KAAK,2BAA2B,CAAC,SAAS;gBAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;;gBACnF,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAA4B,EAC5B,OAAuG,EACvG,KAAmC;QAEnC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,KAA+B,CAAC;QACpD,IAAI,iCAAiC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,kHAAkH;YAClH,gEAAgE;YAChE,IAAI,KAAK,KAAK,4BAA4B,CAAC,YAAY,EAAE,CAAC;gBACxD,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,SAAS,EAAE,sBAAsB,CAAC,oCAAoC,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;iBACrI,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,gBAA8B,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5K,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAE5J,MAAM,QAAQ,GAA8C,EAAE,CAAC;QAC/D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;gBAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3H,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAA0B,CAAC;QAC/B,IAAI,SAA8C,CAAC;QACnD,IAAI,KAAK,KAAK,sBAAsB,CAAC,yBAAyB,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3D,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;YACvB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACjC,CAAC;QACD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACtI,MAAM,UAAU,GAAG,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,OAAO,KAAK,kCAAkC,CAAC,KAAK;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAExK,0GAA0G;QAC1G,IAAI,IAA8B,CAAC;QACnC,IAAI,UAAU,CAAC,KAAK,KAAK,sBAAsB,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,QAAQ,IAAI,OAAO;gBAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7J,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAC3D,gBAAgB,CAAC,kBAAkB,EACnC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAChC;YACE,GAAG,EAAE;gBACH,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;gBAC5D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;oBACT,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,EAAE,GAAG,EAAE;oBACrE,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,SAAS,EAAE,GAAG,EAAE;oBAC7E,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC,CAAC,EAAE,CAAC;aACR;SACF,EACD,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAC7D,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,6BAA6B,CAAC,eAAe,CAAC,CAAC;YAC9G,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,6BAA6B,CAAC,mBAAmB,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvI,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,sBAAsB,CAAC,uBAAuB,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK;YAC5I,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACT,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;gBACtD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;aACvC,CAAC,CAAC,CAAC,EAAE,CAAC;SACR,EAAE,GAAG,OAAO,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3H,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAA4B,EAC5B,OAAuG;QAEvG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,EAAE,mGAAmG,EAAE,CAAC;QAC1K,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,gBAA4B,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,EAAE,qCAAqC,UAAU,CAAC,MAAM,wEAAwE,EAAE,CAAC;QACrM,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,EAAE,aAAa,WAAW,+DAA+D,EAAE,CAAC;QACjL,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,yBAAyB,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACjL,MAAM,eAAe,GAAmF,EAAE,CAAC;QAC3G,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5I,eAAe,CAAC,IAAI,CAAC;gBACnB,YAAY,EAAE,MAAM;gBACpB,qHAAqH;gBACrH,KAAK,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACxD,GAAG,CAAC,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC;QAC1F,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC5C,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAA0C;YACvJ,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,cAAc;YACjG,aAAa,EAAE,GAAG,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;YACpH,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,mBAAmB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/I,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACxI,oHAAoH;QACpH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzI,OAAO;YACL,KAAK,EAAE,sBAAsB,CAAC,kBAAkB;YAChD,SAAS,EAAE;gBACT,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBACjD,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aAC5I;SACF,CAAC;IACJ,CAAC;IAED,wHAAwH;IAChH,KAAK,CAAC,YAAY,CAAC,GAA4B,EAAE,SAA8C;QACrG,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,iFAAiF,EAAE,CAAC;QACrH,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,EAAE,MAAM,EAAE,sFAAsF,EAAE,CAAC;QACnI,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,oBAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,oBAAoB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBACpD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,CAAC,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,aAAa;aACxK,CAAC,CAAC;YACH,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAC9D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,CAAC,mBAAmB;gBACtE,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,kBAAkB;aAChK,CAAC,CAAC;YACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;QAClI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,oBAAoB;gBAAE,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8GAA8G,EAAE;gBAC/H,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAC1D,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,6CAA6C,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,8GAA8G;IACtG,KAAK,CAAC,MAAM,CAAC,KAAyE,EAAE,aAAqB;QACnH,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE;YACrL,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;SAC5G,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAA;AA9aY,+BAA+B;IAD3C,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAC1D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAC9D,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAE1D,WAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IACpE,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;;GAX/C,+BAA+B,CA8a3C;;AAiBD,iFAAiF;AACjF,MAAM,UAAU,6BAA6B,CAAC,GAA4B;IACxE,OAAO;QACL,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACnC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;QAC1C,GAAG,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACpC,aAAa,EAAE,GAAG,CAAC,aAA0C;QAC7D,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA4D;IAChG,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,QAAQ,CAAC;QAAE,OAAO,sBAAsB,CAAC,wBAAwB,CAAC;IAChI,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,OAAO,CAAC;QAAE,OAAO,sBAAsB,CAAC,uBAAuB,CAAC;IAC9H,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,SAAS,CAAC;QAAE,OAAO,sBAAsB,CAAC,SAAS,CAAC;IAClH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,uCAAuC,CAAC,SAAS,CAAC;QAAE,OAAO,sBAAsB,CAAC,yBAAyB,CAAC;IAC7K,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,uCAAuC,CAAC,gBAAgB,IAAI,MAAM,KAAK,uCAAuC,CAAC,SAAS,CAAC,EAAE,CAAC;QACnK,OAAO,sBAAsB,CAAC,6BAA6B,CAAC;IAC9D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * # Sending a deliverable for its signers' electronic signatures (#2293)\n *\n * The send path of level 2: a deliverable a person approved (its approval SEALED, its file bound by hash, #2904) is sent\n * to the electronic-signature vendor with the people who must sign it, and recorded as a `signatureRequests` row with one\n * `signatureRequestSigners` row per signer.\n *\n * ## What it refuses, before anything leaves\n *\n * - **The approval is not sealed, or did not approve.** A request follows a sealed approval (#2293: \"the request is created\n *   only once the approval is sealed\"), and a refusal or a pending seal approves nothing to sign.\n * - **The seal binds no file.** Only a file deliverable whose bytes the approver approved (`deliverableFileId`, #2904) can\n *   be sent: what is signed must be what was approved.\n * - **The bytes changed.** The file is read and hashed again, and must match the hash it recorded (#2900): the vendor is\n *   sent exactly the frozen original, and the request keeps that hash to compare the signed revision with.\n * - **A signer cannot be invited**: unknown, not ACTIVE, or with no email or name to address them by.\n * - **An open request already exists for this approval.** One deliverable approval, one open request.\n *\n * ## Order of writes, and what a failure leaves\n *\n * The vendor is asked FIRST and the rows are written once it answers SENT: the state machine starts at SENT, and a row\n * written before the vendor answered would claim a sending that may never happen. The row and signer ids are minted\n * before sending, because the vendor maps its signers to the engine's references. If the rows cannot be written after\n * the vendor accepted, the request is cancelled at the vendor (and deleted there where the provider deletes on removal),\n * so no signer is invited to sign a document the application does not track.\n *\n * Stated residual: the \"one open request per approval\" check is a read before the write, not a constraint, so two\n * concurrent sends of one approval can both reach the vendor. The second is a duplicate the operator can cancel; a\n * unique slot is owed when a caller can race (the send trigger, #2925).\n */\nimport { createHash, randomBytes } from 'node:crypto';\nimport { injectable, inject, optional } from 'inversify';\nimport {\n  ApprovalSealStatus,\n  CoreAuditableEventType,\n  CoreResourceType,\n  ErrorCustomMessageReference,\n  ErrorType,\n  HumanDecision_Outcome,\n  SignatureRequest_CancellationReason,\n  SignatureRequest_Event,\n  SignatureRequest_RereadCause,\n  SignatureRequest_State,\n  SignatureRequest_TransitionOutcome,\n  SIGNATURE_REQUEST_TERMINAL_STATES,\n  SortOrder,\n  UserStatus,\n  advanceSignatureRequestState,\n} from '@wildo-ai/saas-models';\nimport {\n  ElectronicSignature_CancellationOutcome,\n  ElectronicSignature_VendorRequestStatus,\n  type ElectronicSignature_Level,\n} from '@wildo-ai/external-connectors-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { FilesBackendService } from '~wildo-backend-lib/files/services/files.backend.service';\nimport type { ElectronicSignatureBackendService } from '~wildo-backend-lib/external-providers/services/electronic-signature.backend.service';\nimport { ElectronicSignatureSendOutcome } from '~wildo-backend-lib/external-providers/services/electronic-signature.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { isUniqueConstraintConflict } from '~wildo-backend-lib/errors/utils/unique-conflict-classification.backend.utils';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport { SignedDocumentVerdict, type SignedDocumentEvidence, type SignedDocumentValidator } from './signed-document-validation.backend';\nimport { SignatureRequestEvidenceField, type SignatureRequestEvidenceFiles } from './signature-request-evidence-files.backend';\n\n/** Why a deliverable was not sent. */\nexport enum SignatureRequestSendRefusal {\n  SEAL_NOT_FOUND = 'seal_not_found',\n  /** The seal is still PENDING or IN_FLIGHT, or DEAD: there is no sealed approval yet. */\n  SEAL_NOT_SEALED = 'seal_not_sealed',\n  /** The sealed decision refused what was proposed: nothing was approved to sign. */\n  DECISION_NOT_APPROVED = 'decision_not_approved',\n  /** The seal binds no file deliverable by its hash. */\n  NO_BOUND_DELIVERABLE = 'no_bound_deliverable',\n  DELIVERABLE_UNREADABLE = 'deliverable_unreadable',\n  /** The file's bytes no longer match the hash it recorded. */\n  DELIVERABLE_CHANGED = 'deliverable_changed',\n  /** A signer is unknown, not active, or has no email or name to be invited by. */\n  SIGNER_NOT_INVITABLE = 'signer_not_invitable',\n  /** An open request already exists for this approval. */\n  ALREADY_OPEN = 'already_open',\n  /** The vendor (or the provider, or the absence of one) refused the sending. */\n  VENDOR_REFUSED = 'vendor_refused',\n  /** The vendor accepted the request and the record could not be written; the request was cancelled at the vendor. */\n  RECORD_NOT_WRITTEN = 'record_not_written',\n}\n\nexport interface SendForSignatureInput {\n  readonly approvalSealId: string;\n  /** The signers in signing order: the first signs first. Name a `signingOrder` to have several sign in parallel. */\n  readonly signers: ReadonlyArray<{ readonly userId: string; readonly signingOrder?: number }>;\n  readonly requiredLevel: ElectronicSignature_Level;\n  /**\n   * The request's id, when the caller derives it (the trigger derives it from the approval seal, so two concurrent sends\n   * of one approval cannot both be recorded: the second write fails and its vendor request is cancelled). Minted otherwise.\n   */\n  readonly requestId?: string;\n}\n\nexport type SendForSignatureResult =\n  | { readonly sent: true; readonly signatureRequestId: string; readonly signerRowIds: readonly string[] }\n  | { readonly sent: false; readonly refusal: SignatureRequestSendRefusal; readonly reason: string; readonly retryable: boolean; readonly signatureRequestId?: string };\n\n/** What the send path reads and writes through. Structural, so a test hands in what it holds. */\nexport type SignatureRequestsRepositories = Pick<RepositoriesRegistryHandlerBackendService, 'findManyForInfrastructure' | 'insertDocumentForInfrastructure' | 'deleteManyForInfrastructure' | 'atomicGuardedMutation'>;\nexport type SignatureRequestsFiles = Pick<FilesBackendService, 'getFile' | 'ensureContentHash' | 'readFileBytes'>;\nexport type SignatureRequestsTransport = Pick<ElectronicSignatureBackendService, 'send' | 'cancel' | 'read' | 'downloadSignedDocument'>\n  & Partial<Pick<ElectronicSignatureBackendService, 'vendorEnvironmentOf' | 'evidencePolicyOf'>>;\n\n/** Why a re-read did not reach the transition function, or did and could not write. */\nexport enum SignatureRequestRefreshStop {\n  /** No such request. */\n  NOT_FOUND = 'not_found',\n  /** The vendor could not be read, or answered unusably: the request is left as it was. */\n  NOT_READ = 'not_read',\n  /** Another re-read moved the request first (the state write is guarded on the state read). */\n  LOST_RACE = 'lost_race',\n}\n\n/** What one re-read of a request did. */\nexport interface SignatureRequestRefreshResult {\n  readonly signatureRequestId: string;\n  readonly outcome: SignatureRequest_TransitionOutcome | SignatureRequestRefreshStop;\n  readonly state?: SignatureRequest_State;\n  readonly event?: SignatureRequest_Event;\n  /** Why the vendor's answer, or the evidence, left the request where it was. */\n  readonly reason?: string;\n}\n\n/** The bounds of one poll (#2293): per run, per tenant and per provider, so one tenant or one vendor cannot use the run up. */\nexport interface SignatureRequestPollBounds {\n  readonly maxRequests: number;\n  readonly maxPerOrganization: number;\n  readonly maxPerProvider: number;\n}\n\nexport const DEFAULT_SIGNATURE_REQUEST_POLL_BOUNDS: SignatureRequestPollBounds = Object.freeze({ maxRequests: 100, maxPerOrganization: 20, maxPerProvider: 50 });\n\n/** What a poll run did, for its batch output. */\nexport interface SignatureRequestPollReport {\n  readonly examined: number;\n  readonly moved: number;\n  readonly unchanged: number;\n  readonly notRead: number;\n  readonly lostRace: number;\n  /** Open requests left for a later run by the per-tenant or per-provider bound. */\n  readonly deferredByBudget: number;\n}\n\n/** A new row id: 24 hex characters, the shape every adapter stores a string id in. */\nfunction newRowId(): string {\n  return randomBytes(12).toString('hex');\n}\n\n@injectable()\nexport class SignatureRequestsBackendService {\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositories: SignatureRequestsRepositories,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: Pick<ExecutionContextCreatorBackendService, 'createForInternalSystemOperation'>,\n    @inject(SAAS_SERVICE_TYPES.ElectronicSignatureService) private readonly transport: SignatureRequestsTransport,\n    @inject(SAAS_SERVICE_TYPES.FilesBackendService) @optional() private readonly files?: SignatureRequestsFiles,\n    @inject(SAAS_SERVICE_TYPES.SignedDocumentValidator) @optional() private readonly validator?: SignedDocumentValidator,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) @optional() private readonly errorBuilder?: Pick<ErrorBuilderBackendService, 'buildError'>,\n    /** Where a SIGNED request keeps its signed document and its validation's evidence. Absent, nothing becomes SIGNED. */\n    @inject(SAAS_SERVICE_TYPES.SignatureRequestEvidenceFiles) @optional() private readonly evidenceFiles?: SignatureRequestEvidenceFiles,\n    @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional() private readonly auditLogs?: Pick<AuditLogsBackendService, 'logSignatureRequestEvent'>,\n  ) {}\n\n  /**\n   * The removal effect of `signatureRequests` (#2293), registered at startup with the evidence teardown: before the rows of\n   * requests whose record goes are destroyed, every OPEN one is cancelled at its vendor, and deleted there where its\n   * provider deletes what it no longer needs. A request already final at the vendor needs nothing. A cancellation that\n   * fails THROWS, which refuses the removal: the record stays, and its removal is retried, rather than a signer still being\n   * invited to sign a document whose record is gone. Never called for a held request: the teardown keeps held evidence.\n   */\n  public async cancelOpenRequestsAtVendor(rows: ReadonlyArray<Record<string, unknown>>): Promise<void> {\n    const failures: string[] = [];\n    for (const row of rows) {\n      if (SIGNATURE_REQUEST_TERMINAL_STATES.has(row.state as SignatureRequest_State)) continue;\n      const providerRef = String(row.providerRef);\n      const references = Array.isArray(row.vendorReferences) ? (row.vendorReferences as unknown[]).filter((reference): reference is string => typeof reference === 'string') : [];\n      for (const reference of references) {\n        const result = await this.transport.cancel(providerRef, reference, { deleteAfterCancel: true });\n        if (result.outcome === ElectronicSignature_CancellationOutcome.FAILED) {\n          failures.push(`${String(row._id)}: ${result.reason ?? 'the vendor did not confirm the cancellation'}`);\n          continue;\n        }\n        this.logger.info('[signature-requests] An open signature request was cancelled at its vendor because its record went', {\n          signatureRequestId: String(row._id), providerRef, outcome: result.outcome, deletedAtVendor: result.deletedAtVendor,\n        });\n        // The row is destroyed next: this is the record that it was cancelled, why, and whether the vendor deleted it.\n        await this.record({\n          eventType: CoreAuditableEventType.SIGNATURE_REQUEST_CANCELLED_AT_VENDOR, ...signatureRequestEventFieldsOf(row), vendorReference: reference,\n          outcome: result.outcome as ElectronicSignature_CancellationOutcome.CANCELLED | ElectronicSignature_CancellationOutcome.ALREADY_FINAL,\n          ...(result.deletedAtVendor === undefined ? {} : { deletedAtVendor: result.deletedAtVendor }),\n          cancellationReason: SignatureRequest_CancellationReason.SUBJECT_REMOVED,\n        }, reference);\n      }\n    }\n    if (failures.length === 0) return;\n    const message = `${failures.length} open signature request(s) could not be cancelled at the vendor, so the record was not removed: ${failures.join('; ')}`;\n    throw this.errorBuilder\n      ? this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, undefined, { customMessageReference: ErrorCustomMessageReference.SIGNATURE_REQUEST_VENDOR_CANCELLATION_FAILED, context: { message } })\n      : new Error(message);\n  }\n\n  /**\n   * Send the file deliverable of a sealed approval to the selected vendor, for `input.signers` to sign at\n   * `input.requiredLevel`, and record the request. Never throws for a refusal; it answers why.\n   *\n   * assurance-control: WILDO.AI.HUMAN_OVERSIGHT, WILDO.AUDIT.EVIDENCE_INTEGRITY — a deliverable reaches its signers only after\n   * a person's approval of exactly its bytes was sealed, and the bytes sent are re-hashed against what was approved.\n   * (#2293 named `WILDO.DOCUMENTS.APPROVAL_BEFORE_PRESENTATION`; that objective is about governed documents, as #2903 found\n   * for the seal's bind check, so the sealed-deliverable gate is marked as that check is.)\n   */\n  public async sendForSignature(input: SendForSignatureInput): Promise<SendForSignatureResult> {\n    const refuse = (refusal: SignatureRequestSendRefusal, reason: string, retryable = false, signatureRequestId?: string): SendForSignatureResult =>\n      ({ sent: false, refusal, reason, retryable, ...(signatureRequestId ? { signatureRequestId } : {}) });\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n\n    // 1. The sealed approval, and the file it binds.\n    const [seal] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.APPROVAL_SEALS, { _id: input.approvalSealId }, context);\n    if (!seal) return refuse(SignatureRequestSendRefusal.SEAL_NOT_FOUND, `No approval seal \"${input.approvalSealId}\".`);\n    if (seal.status !== ApprovalSealStatus.SEALED) {\n      return refuse(SignatureRequestSendRefusal.SEAL_NOT_SEALED, `The approval seal is ${String(seal.status)}, not sealed.`, seal.status !== ApprovalSealStatus.DEAD);\n    }\n    if (seal.outcome !== HumanDecision_Outcome.ACCEPTED && seal.outcome !== HumanDecision_Outcome.ACCEPTED_WITH_MODIFICATIONS) {\n      return refuse(SignatureRequestSendRefusal.DECISION_NOT_APPROVED, 'The sealed decision did not approve the deliverable.');\n    }\n    const fileId = typeof seal.deliverableFileId === 'string' ? seal.deliverableFileId : undefined;\n    if (!fileId) return refuse(SignatureRequestSendRefusal.NO_BOUND_DELIVERABLE, 'The sealed approval binds no file deliverable by its hash.');\n\n    // 2. One open request per approval.\n    const existing = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.SIGNATURE_REQUESTS, { approvalSealId: input.approvalSealId }, context);\n    const open = existing.find((row) => !SIGNATURE_REQUEST_TERMINAL_STATES.has(row.state as SignatureRequest_State));\n    if (open) return refuse(SignatureRequestSendRefusal.ALREADY_OPEN, 'An open signature request already exists for this approval.', false, String(open._id));\n\n    // 3. The frozen original: its recorded hash, and its bytes, which must still match it.\n    if (!this.files) return refuse(SignatureRequestSendRefusal.DELIVERABLE_UNREADABLE, 'No file service is bound in this runtime.');\n    let document: Buffer;\n    let contentSha256: string | undefined;\n    let documentName: string;\n    let mimeType: string;\n    try {\n      const file = await this.files.getFile(fileId, context) as unknown as { originalName?: string; fileName?: string; name?: string; mimeType?: string; contentType?: string } | null;\n      if (!file) return refuse(SignatureRequestSendRefusal.DELIVERABLE_UNREADABLE, `The deliverable file \"${fileId}\" is gone.`);\n      contentSha256 = await this.files.ensureContentHash(fileId, context);\n      document = await this.files.readFileBytes(file as never, context);\n      documentName = file.originalName ?? file.fileName ?? file.name ?? `${fileId}.pdf`;\n      mimeType = file.mimeType ?? file.contentType ?? 'application/pdf';\n    } catch (error) {\n      return refuse(SignatureRequestSendRefusal.DELIVERABLE_UNREADABLE, `The deliverable file could not be read: ${describeCaughtError(error)}`, true);\n    }\n    if (!contentSha256 || createHash('sha256').update(document).digest('hex') !== contentSha256) {\n      return refuse(SignatureRequestSendRefusal.DELIVERABLE_CHANGED, 'The deliverable\\'s bytes do not match the hash it recorded; what would be signed is not what was approved.');\n    }\n\n    // 4. The signers, each invitable.\n    if (input.signers.length === 0) return refuse(SignatureRequestSendRefusal.SIGNER_NOT_INVITABLE, 'A request names at least one signer.');\n    const signerRows: Array<{ _id: string; userId: string; signingOrder: number; firstName: string; lastName: string; email: string }> = [];\n    for (const [index, signer] of input.signers.entries()) {\n      const [user] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.USERS, { _id: signer.userId }, context);\n      const [profile] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.USER_PROFILES, { userId: signer.userId }, context);\n      const email = typeof user?.email === 'string' ? user.email : '';\n      const firstName = typeof profile?.firstName === 'string' ? profile.firstName : '';\n      const lastName = typeof profile?.lastName === 'string' ? profile.lastName : '';\n      if (!user || user.status !== UserStatus.ACTIVE || !email || !firstName || !lastName) {\n        return refuse(SignatureRequestSendRefusal.SIGNER_NOT_INVITABLE, `Signer \"${signer.userId}\" is unknown, not active, or has no email or name to be invited by.`);\n      }\n      signerRows.push({ _id: newRowId(), userId: signer.userId, signingOrder: signer.signingOrder ?? index, firstName, lastName, email });\n    }\n\n    // 5. The vendor first: the record starts at SENT.\n    const sent = await this.transport.send({\n      document: new Uint8Array(document), documentName, mimeType, contentSha256, level: input.requiredLevel,\n      signers: signerRows.map((row) => ({ signerRef: row._id, signingOrder: row.signingOrder, firstName: row.firstName, lastName: row.lastName, email: row.email })),\n    });\n    if (sent.outcome !== ElectronicSignatureSendOutcome.SENT) return refuse(SignatureRequestSendRefusal.VENDOR_REFUSED, sent.reason, sent.retryable);\n\n    // 6. The record, and the vendor's request cancelled when it cannot be written.\n    const now = new Date();\n    const requestId = input.requestId ?? newRowId();\n    const organizationId = typeof seal.organizationId === 'string' ? { organizationId: seal.organizationId } : {};\n    const subject = { linkedResourceType: String(seal.linkedResourceType), linkedResourceId: String(seal.linkedResourceId) };\n    // What THIS call wrote, so a failure removes only its own rows: with a derived id, a concurrent sending of the same\n    // approval may own the request row this insert collided with, and deleting by id would remove the winner's record.\n    let requestWritten = false;\n    const signerRowsWritten: string[] = [];\n    try {\n      await this.repositories.insertDocumentForInfrastructure(CoreResourceType.SIGNATURE_REQUESTS, {\n        _id: requestId, applicationId: String(seal.applicationId), ...organizationId, ...subject,\n        originalFileId: fileId, originalContentSha256: contentSha256, approvalSealId: input.approvalSealId,\n        requiredLevel: input.requiredLevel, providerRef: sent.providerRef, vendorReferences: [...sent.vendorReferences],\n        primaryVendorReference: sent.vendorReferences[0],\n        state: SignatureRequest_State.SENT, stateChangedAt: now, createdAt: now, updatedAt: now,\n      }, context);\n      requestWritten = true;\n      for (const row of signerRows) {\n        await this.repositories.insertDocumentForInfrastructure(CoreResourceType.SIGNATURE_REQUEST_SIGNERS, {\n          _id: row._id, applicationId: String(seal.applicationId), ...organizationId, ...subject, signatureRequestId: requestId,\n          signerUserId: row.userId, signingOrder: row.signingOrder, vendorSignerReference: sent.vendorSignerReferences[row._id],\n          createdAt: now, updatedAt: now,\n        }, context);\n        signerRowsWritten.push(row._id);\n      }\n    } catch (error) {\n      for (const signerRowId of signerRowsWritten) {\n        await this.repositories.deleteManyForInfrastructure(CoreResourceType.SIGNATURE_REQUEST_SIGNERS, { _id: signerRowId }, context).catch(() => 0);\n      }\n      if (requestWritten) await this.repositories.deleteManyForInfrastructure(CoreResourceType.SIGNATURE_REQUESTS, { _id: requestId }, context).catch(() => 0);\n      const cancellations = await Promise.all(sent.vendorReferences.map((reference) => this.transport.cancel(sent.providerRef, reference, { deleteAfterCancel: true })));\n      const uncancelled = cancellations.filter((result) => result.outcome !== ElectronicSignature_CancellationOutcome.CANCELLED).length;\n      this.logger.error('[signature-requests] The vendor accepted a request the application could not record; it was cancelled at the vendor', {\n        providerRef: sent.providerRef, vendorReferenceCount: sent.vendorReferences.length, uncancelled, error: describeCaughtError(error),\n      });\n      // A collision with another sending of this approval: that one is recorded, and its vendor request is the live one.\n      if (!requestWritten && input.requestId && isUniqueConstraintConflict(error)) {\n        return refuse(SignatureRequestSendRefusal.ALREADY_OPEN, 'Another sending of this approval recorded its request first; this one was cancelled at the vendor.', false, requestId);\n      }\n      return refuse(SignatureRequestSendRefusal.RECORD_NOT_WRITTEN,\n        `The request could not be recorded (${describeCaughtError(error)}); it was cancelled at the vendor${uncancelled > 0 ? `, ${uncancelled} reference(s) not confirmed cancelled` : ''}.`, true);\n    }\n    await this.record({\n      eventType: CoreAuditableEventType.SIGNATURE_REQUEST_SENT,\n      signatureRequestId: requestId, approvalSealId: input.approvalSealId, ...organizationId, ...subject, providerRef: sent.providerRef,\n      requiredLevel: input.requiredLevel, originalContentSha256: contentSha256,\n      signerUserIds: signerRows.map((row) => row.userId), vendorReferenceCount: sent.vendorReferences.length,\n    }, 'sent');\n    return { sent: true, signatureRequestId: requestId, signerRowIds: signerRows.map((row) => row._id) };\n  }\n\n  /**\n   * Re-read one request at its vendor, through the provider it was sent through, and move it as its one transition\n   * function says. Used by the poll and by a vendor notification's re-read trigger (#2909): a notification is never\n   * trusted, it only causes this re-read.\n   *\n   * A request already final answers `ignored_after_terminal` and is not read: a late event changes nothing, and the caller\n   * records that it was ignored. A vendor reporting the request complete moves nothing by itself: the signed document is\n   * downloaded and handed to the validator, and only {@link SignedDocumentVerdict.VALID} for every document makes it\n   * SIGNED. The state is written with a guard on the state read, so two re-reads never both move it.\n   */\n  public async refreshRequest(signatureRequestId: string, cause: SignatureRequest_RereadCause = SignatureRequest_RereadCause.POLL): Promise<SignatureRequestRefreshResult> {\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    const [row] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.SIGNATURE_REQUESTS, { _id: signatureRequestId }, context);\n    if (!row) return { signatureRequestId, outcome: SignatureRequestRefreshStop.NOT_FOUND };\n    return this.refreshRow(row, context, cause);\n  }\n\n  /**\n   * The request a vendor's notification names (#2909), through the provider it came from, or `undefined`: what the\n   * notification handler's resolver and its run look the request up by. A notification is never believed; it only causes\n   * {@link refreshRequest}.\n   */\n  public async findByVendorReference(providerRef: string, vendorReference: string): Promise<Record<string, unknown> | undefined> {\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    const [row] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(\n      CoreResourceType.SIGNATURE_REQUESTS, { providerRef, primaryVendorReference: vendorReference }, context,\n    );\n    return row;\n  }\n\n  /**\n   * Re-read the open requests, oldest move first, within `bounds`: at most `maxRequests` in the run, `maxPerOrganization`\n   * of one tenant and `maxPerProvider` of one provider. A request left out by a bound is the next run's. Never throws for\n   * one request: each is reported.\n   */\n  public async pollOpenRequests(bounds: SignatureRequestPollBounds = DEFAULT_SIGNATURE_REQUEST_POLL_BOUNDS): Promise<SignatureRequestPollReport> {\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    const open = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(\n      CoreResourceType.SIGNATURE_REQUESTS,\n      { state: { $in: [SignatureRequest_State.SENT, SignatureRequest_State.PARTIALLY_SIGNED] } },\n      context,\n      undefined,\n      { sort: [{ field: 'stateChangedAt', order: SortOrder.ASC }, { field: '_id', order: SortOrder.ASC }], limit: Math.max(1, bounds.maxRequests * 4) },\n    );\n    const perOrganization = new Map<string, number>();\n    const perProvider = new Map<string, number>();\n    const selected: Record<string, unknown>[] = [];\n    let deferredByBudget = 0;\n    for (const row of open) {\n      if (selected.length >= bounds.maxRequests) { deferredByBudget += 1; continue; }\n      const organization = typeof row.organizationId === 'string' ? row.organizationId : '';\n      const provider = String(row.providerRef);\n      if ((perOrganization.get(organization) ?? 0) >= bounds.maxPerOrganization || (perProvider.get(provider) ?? 0) >= bounds.maxPerProvider) {\n        deferredByBudget += 1;\n        continue;\n      }\n      perOrganization.set(organization, (perOrganization.get(organization) ?? 0) + 1);\n      perProvider.set(provider, (perProvider.get(provider) ?? 0) + 1);\n      selected.push(row);\n    }\n    const report = { examined: selected.length, moved: 0, unchanged: 0, notRead: 0, lostRace: 0, deferredByBudget };\n    for (const row of selected) {\n      let result: SignatureRequestRefreshResult;\n      try {\n        result = await this.refreshRow(row, context, SignatureRequest_RereadCause.POLL);\n      } catch (error) {\n        this.logger.warn('[signature-requests] A request could not be re-read', { signatureRequestId: String(row._id), error: describeCaughtError(error) });\n        report.notRead += 1;\n        continue;\n      }\n      if (result.outcome === SignatureRequest_TransitionOutcome.MOVED) report.moved += 1;\n      else if (result.outcome === SignatureRequestRefreshStop.NOT_READ) report.notRead += 1;\n      else if (result.outcome === SignatureRequestRefreshStop.LOST_RACE) report.lostRace += 1;\n      else report.unchanged += 1;\n    }\n    return report;\n  }\n\n  private async refreshRow(\n    row: Record<string, unknown>,\n    context: Awaited<ReturnType<ExecutionContextCreatorBackendService['createForInternalSystemOperation']>>,\n    cause: SignatureRequest_RereadCause,\n  ): Promise<SignatureRequestRefreshResult> {\n    const signatureRequestId = String(row._id);\n    const current = row.state as SignatureRequest_State;\n    if (SIGNATURE_REQUEST_TERMINAL_STATES.has(current)) {\n      // A vendor event for a final request changes nothing. One that a notification brought is recorded: the poll never\n      // re-reads a final request, so only a notification can be late.\n      if (cause === SignatureRequest_RereadCause.NOTIFICATION) {\n        await this.record({\n          eventType: CoreAuditableEventType.SIGNATURE_REQUEST_LATE_EVENT_IGNORED, ...signatureRequestEventFieldsOf(row), state: current, cause,\n        }, `${cause}|${Math.floor(Date.now() / 60_000)}`);\n      }\n      return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.IGNORED_AFTER_TERMINAL, state: current };\n    }\n    const providerRef = String(row.providerRef);\n    const references = Array.isArray(row.vendorReferences) ? (row.vendorReferences as unknown[]).filter((reference): reference is string => typeof reference === 'string') : [];\n    if (references.length === 0) return { signatureRequestId, outcome: SignatureRequestRefreshStop.NOT_READ, reason: 'The request holds no vendor reference.' };\n\n    const statuses: ElectronicSignature_VendorRequestStatus[] = [];\n    for (const reference of references) {\n      const read = await this.transport.read(providerRef, reference);\n      if (read.read === false) return { signatureRequestId, outcome: SignatureRequestRefreshStop.NOT_READ, reason: read.reason };\n      statuses.push(read.reading.status);\n    }\n    let event = eventOfVendorStatuses(statuses);\n    let reason: string | undefined;\n    let validated: ValidatedSignedDocument | undefined;\n    if (event === SignatureRequest_Event.VENDOR_REPORTED_COMPLETED) {\n      const evidence = await this.validateEvidence(row, context);\n      event = evidence.event;\n      reason = evidence.reason;\n      validated = evidence.validated;\n    }\n    if (event === undefined) return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.UNCHANGED, state: current, reason };\n    const transition = advanceSignatureRequestState(current, event);\n    if (transition.outcome !== SignatureRequest_TransitionOutcome.MOVED) return { signatureRequestId, outcome: transition.outcome, state: transition.state, event, reason };\n\n    // SIGNED names its evidence in the same write: the files first (unlinked), then the move, then the links.\n    let kept: KeptEvidence | undefined;\n    if (transition.state === SignatureRequest_State.SIGNED) {\n      const keeping = await this.keepEvidence(row, validated);\n      if ('reason' in keeping) return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.UNCHANGED, state: current, event, reason: keeping.reason };\n      kept = keeping;\n    }\n    const now = new Date();\n    const written = await this.repositories.atomicGuardedMutation(\n      CoreResourceType.SIGNATURE_REQUESTS,\n      { _id: row._id, state: current },\n      {\n        set: {\n          state: transition.state, stateChangedAt: now, updatedAt: now,\n          ...(kept ? {\n            signedDocument: { fileId: kept.signedDocumentFileId, updatedAt: now },\n            validationEvidence: { fileId: kept.validationEvidenceFileId, updatedAt: now },\n            validatedAt: now,\n          } : {}),\n        },\n      },\n      context,\n    );\n    if (!written) {\n      if (kept) {\n        await this.evidenceFiles?.discard(kept.signedDocumentFileId);\n        await this.evidenceFiles?.discard(kept.validationEvidenceFileId);\n      }\n      return { signatureRequestId, outcome: SignatureRequestRefreshStop.LOST_RACE, reason: 'Another re-read moved the request first.' };\n    }\n    if (kept) {\n      await this.evidenceFiles?.link(kept.signedDocumentFileId, row, SignatureRequestEvidenceField.SIGNED_DOCUMENT);\n      await this.evidenceFiles?.link(kept.validationEvidenceFileId, row, SignatureRequestEvidenceField.VALIDATION_EVIDENCE);\n    }\n    this.logger.info('[signature-requests] A signature request moved', { signatureRequestId, from: current, to: transition.state, event });\n    await this.record({\n      eventType: CoreAuditableEventType.SIGNATURE_REQUEST_MOVED, ...signatureRequestEventFieldsOf(row), from: current, to: transition.state, event,\n      ...(reason ? { reason } : {}),\n      ...(kept ? {\n        signedContentSha256: kept.evidence.signedContentSha256,\n        signedDocumentFileId: kept.signedDocumentFileId,\n        validationEvidenceFileId: kept.validationEvidenceFileId,\n        signerUserIds: [...kept.signerUserIds],\n      } : {}),\n    }, `${current}->${transition.state}`);\n    return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.MOVED, state: transition.state, event, reason };\n  }\n\n  /**\n   * The evidence of a request the vendor reports complete: its signed document downloaded and validated. VALID is\n   * EVIDENCE_VALIDATED (with the document and its evidence, kept on the move); MISMATCHED is EVIDENCE_MISMATCHED; anything\n   * else (no validator, a download that failed, a document that did not validate) is EVIDENCE_REJECTED, which leaves the\n   * request open.\n   *\n   * One signed document per request: the engine sends one deliverable per request, so a request a vendor split into\n   * several references cannot keep its evidence in the request's own fields and is left open (stated, never guessed).\n   */\n  private async validateEvidence(\n    row: Record<string, unknown>,\n    context: Awaited<ReturnType<ExecutionContextCreatorBackendService['createForInternalSystemOperation']>>,\n  ): Promise<{ event: SignatureRequest_Event; reason?: string; validated?: ValidatedSignedDocument }> {\n    if (!this.validator) {\n      return { event: SignatureRequest_Event.EVIDENCE_REJECTED, reason: 'The vendor reports the request complete and no signed-document validator is bound: it stays open.' };\n    }\n    const providerRef = String(row.providerRef);\n    const references = row.vendorReferences as string[];\n    if (references.length !== 1) {\n      return { event: SignatureRequest_Event.EVIDENCE_REJECTED, reason: `The vendor split the request into ${references.length} documents; one signed document per request is kept, so it stays open.` };\n    }\n    const evidencePolicy = this.transport.evidencePolicyOf?.(providerRef);\n    if (!evidencePolicy) return { event: SignatureRequest_Event.EVIDENCE_REJECTED, reason: `Provider \"${providerRef}\" declares no evidence policy (trust anchors): it stays open.` };\n    const signers = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.SIGNATURE_REQUEST_SIGNERS, { signatureRequestId: row._id }, context);\n    const expectedSigners: Array<{ signerUserId: string; email: string; vendorSignerReference?: string }> = [];\n    for (const signer of signers) {\n      const userId = String(signer.signerUserId);\n      const [user] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.USERS, { _id: userId }, context);\n      expectedSigners.push({\n        signerUserId: userId,\n        // The address the person is known by now: one they changed since they were invited does not match their certificate.\n        email: typeof user?.email === 'string' ? user.email : '',\n        ...(typeof signer.vendorSignerReference === 'string' ? { vendorSignerReference: signer.vendorSignerReference } : {}),\n      });\n    }\n    const download = await this.transport.downloadSignedDocument(providerRef, references[0]!);\n    if (download.downloaded === false) return { event: SignatureRequest_Event.EVIDENCE_REJECTED, reason: download.reason };\n    const verdict = await this.validator.validate({\n      signedDocument: download.bytes, originalContentSha256: String(row.originalContentSha256), requiredLevel: row.requiredLevel as ElectronicSignature_Level,\n      providerRef, vendorEnvironment: this.transport.vendorEnvironmentOf?.(providerRef), evidencePolicy,\n      requestSentAt: row.createdAt instanceof Date ? row.createdAt : new Date(String(row.createdAt ?? row.stateChangedAt)),\n      expectedSigners,\n    });\n    if (verdict.verdict === SignedDocumentVerdict.MISMATCHED) return { event: SignatureRequest_Event.EVIDENCE_MISMATCHED, reason: verdict.reason };\n    if (verdict.verdict !== SignedDocumentVerdict.VALID) return { event: SignatureRequest_Event.EVIDENCE_REJECTED, reason: verdict.reason };\n    // The signers the evidence PROVED: those a validated certificate names. At SIMPLE a vendor's own seal names nobody.\n    const provedEmails = new Set(verdict.evidence.signatures.flatMap((signature) => (signature.signerEmail ? [signature.signerEmail] : [])));\n    return {\n      event: SignatureRequest_Event.EVIDENCE_VALIDATED,\n      validated: {\n        bytes: download.bytes, evidence: verdict.evidence,\n        signerUserIds: expectedSigners.filter((signer) => provedEmails.has(signer.email.trim().toLowerCase())).map((signer) => signer.signerUserId),\n      },\n    };\n  }\n\n  /** Write the request's two evidence files, unlinked. A reason when they cannot be kept: the request then stays open. */\n  private async keepEvidence(row: Record<string, unknown>, validated: ValidatedSignedDocument | undefined): Promise<KeptEvidence | { reason: string }> {\n    if (!validated) return { reason: 'The signed document validated and its evidence was not returned: it stays open.' };\n    if (!this.evidenceFiles) return { reason: 'No evidence store is bound, so the validated document cannot be kept: it stays open.' };\n    const id = String(row._id);\n    let signedDocumentFileId: string | undefined;\n    try {\n      signedDocumentFileId = await this.evidenceFiles.write({\n        request: row, field: SignatureRequestEvidenceField.SIGNED_DOCUMENT, bytes: validated.bytes, mimeType: 'application/pdf', filename: `signature-request-${id}-signed.pdf`,\n      });\n      const validationEvidenceFileId = await this.evidenceFiles.write({\n        request: row, field: SignatureRequestEvidenceField.VALIDATION_EVIDENCE,\n        bytes: new TextEncoder().encode(JSON.stringify(validated.evidence, null, 2)), mimeType: 'application/json', filename: `signature-request-${id}-validation.json`,\n      });\n      return { signedDocumentFileId, validationEvidenceFileId, evidence: validated.evidence, signerUserIds: validated.signerUserIds };\n    } catch (error) {\n      if (signedDocumentFileId) await this.evidenceFiles.discard(signedDocumentFileId);\n      this.logger.warn('[signature-requests] A validated signed document could not be kept; the request stays open and is read again', {\n        signatureRequestId: id, error: describeCaughtError(error),\n      });\n      return { reason: `The validated document could not be kept: ${describeCaughtError(error)}` };\n    }\n  }\n\n  /** One request event on the trail. Never throws: the request's state is the record, the trail observes it. */\n  private async record(event: Parameters<AuditLogsBackendService['logSignatureRequestEvent']>[0], occurrenceKey: string): Promise<void> {\n    if (!this.auditLogs) return;\n    await this.auditLogs.logSignatureRequestEvent(event, occurrenceKey).catch((error: unknown) => this.logger.warn('[signature-requests] A signature request event could not be recorded', {\n      signatureRequestId: event.signatureRequestId, eventType: event.eventType, error: describeCaughtError(error),\n    }));\n  }\n}\n\n/** A signed document that validated, with what the validation proved. */\ninterface ValidatedSignedDocument {\n  readonly bytes: Uint8Array;\n  readonly evidence: SignedDocumentEvidence;\n  readonly signerUserIds: readonly string[];\n}\n\n/** The evidence files a SIGNED request names. */\ninterface KeptEvidence {\n  readonly signedDocumentFileId: string;\n  readonly validationEvidenceFileId: string;\n  readonly evidence: SignedDocumentEvidence;\n  readonly signerUserIds: readonly string[];\n}\n\n/** The fields every signature request event names, read from the request row. */\nexport function signatureRequestEventFieldsOf(row: Record<string, unknown>) {\n  return {\n    signatureRequestId: String(row._id),\n    approvalSealId: String(row.approvalSealId),\n    ...(typeof row.organizationId === 'string' ? { organizationId: row.organizationId } : {}),\n    linkedResourceType: String(row.linkedResourceType),\n    linkedResourceId: String(row.linkedResourceId),\n    providerRef: String(row.providerRef),\n    requiredLevel: row.requiredLevel as ElectronicSignature_Level,\n    originalContentSha256: String(row.originalContentSha256),\n  };\n}\n\n/**\n * The one event the vendor's statuses of a request's references mean. Final vendor statuses win (a decline or an expiry\n * of any document ends the request; a cancellation at the vendor ends it), then completion of EVERY document, then any\n * progress. `undefined` when nothing moved.\n */\nexport function eventOfVendorStatuses(statuses: readonly ElectronicSignature_VendorRequestStatus[]): SignatureRequest_Event | undefined {\n  if (statuses.includes(ElectronicSignature_VendorRequestStatus.DECLINED)) return SignatureRequest_Event.VENDOR_REPORTED_DECLINED;\n  if (statuses.includes(ElectronicSignature_VendorRequestStatus.EXPIRED)) return SignatureRequest_Event.VENDOR_REPORTED_EXPIRED;\n  if (statuses.includes(ElectronicSignature_VendorRequestStatus.CANCELLED)) return SignatureRequest_Event.CANCELLED;\n  if (statuses.length > 0 && statuses.every((status) => status === ElectronicSignature_VendorRequestStatus.COMPLETED)) return SignatureRequest_Event.VENDOR_REPORTED_COMPLETED;\n  if (statuses.some((status) => status === ElectronicSignature_VendorRequestStatus.PARTIALLY_SIGNED || status === ElectronicSignature_VendorRequestStatus.COMPLETED)) {\n    return SignatureRequest_Event.VENDOR_REPORTED_SIGNER_SIGNED;\n  }\n  return undefined;\n}\n"]}
+{"version":3,"file":"signature-requests.backend.service.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signature-requests.backend.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACpE,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,SAAS,EACT,qBAAqB,EACrB,mCAAmC,EACnC,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,EACtB,kCAAkC,EAClC,iCAAiC,EACjC,SAAS,EACT,UAAU,EACV,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uCAAuC,EACvC,uCAAuC,GAExC,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAOpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,qFAAqF,CAAC;AACrI,OAAO,EAAE,mBAAmB,EAAE,MAAM,8EAA8E,CAAC;AACnH,OAAO,EAAE,0BAA0B,EAAE,MAAM,8EAA8E,CAAC;AAE1H,OAAO,EAAE,qBAAqB,EAA6D,MAAM,sCAAsC,CAAC;AACxI,OAAO,EACL,+BAA+B,EAC/B,6BAA6B,EAC7B,mCAAmC,GAEpC,MAAM,4CAA4C,CAAC;AAGpD,sCAAsC;AACtC,MAAM,CAAN,IAAY,2BAmBX;AAnBD,WAAY,2BAA2B;IACrC,gEAAiC,CAAA;IACjC,wFAAwF;IACxF,kEAAmC,CAAA;IACnC,mFAAmF;IACnF,8EAA+C,CAAA;IAC/C,sDAAsD;IACtD,4EAA6C,CAAA;IAC7C,gFAAiD,CAAA;IACjD,6DAA6D;IAC7D,0EAA2C,CAAA;IAC3C,iFAAiF;IACjF,4EAA6C,CAAA;IAC7C,wDAAwD;IACxD,4DAA6B,CAAA;IAC7B,+EAA+E;IAC/E,gEAAiC,CAAA;IACjC,oHAAoH;IACpH,wEAAyC,CAAA;AAC3C,CAAC,EAnBW,2BAA2B,KAA3B,2BAA2B,QAmBtC;AAkBD;;;GAGG;AACH,MAAM,CAAN,IAAY,+BAeX;AAfD,WAAY,+BAA+B;IACzC,6DAA6D;IAC7D,gEAA6B,CAAA;IAC7B,oGAAoG;IACpG,kEAA+B,CAAA;IAC/B,gEAAgE;IAChE,4EAAyC,CAAA;IACzC,mDAAmD;IACnD,sEAAmC,CAAA;IACnC,uHAAuH;IACvH,wDAAqB,CAAA;IACrB,0GAA0G;IAC1G,4DAAyB,CAAA;IACzB,8GAA8G;IAC9G,wDAAqB,CAAA;AACvB,CAAC,EAfW,+BAA+B,KAA/B,+BAA+B,QAe1C;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,SAAS,CAAC;AAChE,oFAAoF;AACpF,MAAM,kCAAkC,GAAG,KAAK,CAAC;AACjD,MAAM,iCAAiC,GAAG,GAAG,CAAC;AAoB9C,uFAAuF;AACvF,MAAM,CAAN,IAAY,2BAOX;AAPD,WAAY,2BAA2B;IACrC,uBAAuB;IACvB,sDAAuB,CAAA;IACvB,yFAAyF;IACzF,oDAAqB,CAAA;IACrB,8FAA8F;IAC9F,sDAAuB,CAAA;AACzB,CAAC,EAPW,2BAA2B,KAA3B,2BAA2B,QAOtC;AAmBD,MAAM,CAAC,MAAM,qCAAqC,GAA+B,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;AAajK,sFAAsF;AACtF,SAAS,QAAQ;IACf,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAGM,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAEY;IAC4B;IACG;IACX;IACK;IACI;IACJ;IAEU;IACb;IACF;IAX1E,YACsD,MAAqB,EACO,YAA2C,EACxC,uBAAwG,EACnH,SAAqC,EAChC,KAA8B,EAC1B,SAAmC,EACvC,YAA6D,EAEnD,aAA6C,EAC1D,SAAqE,EACvE,OACgH,EAE3K,KAAkB;QAbqB,WAAM,GAAN,MAAM,CAAe;QACO,iBAAY,GAAZ,YAAY,CAA+B;QACxC,4BAAuB,GAAvB,uBAAuB,CAAiF;QACnH,cAAS,GAAT,SAAS,CAA4B;QAChC,UAAK,GAAL,KAAK,CAAyB;QAC1B,cAAS,GAAT,SAAS,CAA0B;QACvC,iBAAY,GAAZ,YAAY,CAAiD;QAEnD,kBAAa,GAAb,aAAa,CAAgC;QAC1D,cAAS,GAAT,SAAS,CAA4D;QACvE,YAAO,GAAP,OAAO,CACyG;QAIxL,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAEgB,KAAK,CAAa;IACnC,kHAAkH;IACjG,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1D;;;;;;OAMG;IACI,KAAK,CAAC,0BAA0B,CAAC,IAA4C;QAClF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,KAA+B,CAAC;gBAAE,SAAS;YACzF,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,gBAA8B,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5K,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChG,IAAI,MAAM,CAAC,OAAO,KAAK,uCAAuC,CAAC,MAAM,EAAE,CAAC;oBACtE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,MAAM,IAAI,6CAA6C,EAAE,CAAC,CAAC;oBACvG,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oGAAoG,EAAE;oBACrH,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe;iBACnH,CAAC,CAAC;gBACH,+GAA+G;gBAC/G,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,SAAS,EAAE,sBAAsB,CAAC,qCAAqC,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,EAAE,eAAe,EAAE,SAAS;oBAC1I,OAAO,EAAE,MAAM,CAAC,OAAoH;oBACpI,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;oBAC5F,kBAAkB,EAAE,mCAAmC,CAAC,eAAe;iBACxE,EAAE,SAAS,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAClC,MAAM,OAAO,GAAG,GAAG,QAAQ,CAAC,MAAM,mGAAmG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3J,MAAM,IAAI,CAAC,YAAY;YACrB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,gBAAgB,EAAE,SAAS,EAAE,EAAE,sBAAsB,EAAE,2BAA2B,CAAC,4CAA4C,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC;YACjM,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,gBAAgB,CAAC,KAA4B;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,EAAE,OAAO,EAAE,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;QACtK,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,KAA4B;QACjD,MAAM,MAAM,GAAG,CAAC,OAAoC,EAAE,MAAc,EAAE,SAAS,GAAG,KAAK,EAAE,kBAA2B,EAA0B,EAAE,CAC9I,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QAEtF,iDAAiD;QACjD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;QACnK,IAAI,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,cAAc,EAAE,qBAAqB,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;QACpH,IAAI,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM,EAAE,CAAC;YAC9C,OAAO,MAAM,CAAC,2BAA2B,CAAC,eAAe,EAAE,wBAAwB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,KAAK,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClK,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,qBAAqB,CAAC,2BAA2B,EAAE,CAAC;YAC1H,OAAO,MAAM,CAAC,2BAA2B,CAAC,qBAAqB,EAAE,sDAAsD,CAAC,CAAC;QAC3H,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/F,IAAI,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,4DAA4D,CAAC,CAAC;QAE3I,oCAAoC;QACpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC;QACpL,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,KAA+B,CAAC,CAAC,CAAC;QACjH,IAAI,IAAI;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAE,6DAA6D,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAE1J,uFAAuF;QACvF,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,EAAE,2CAA2C,CAAC,CAAC;QAChI,IAAI,QAAgB,CAAC;QACrB,IAAI,aAAiC,CAAC;QACtC,IAAI,YAAoB,CAAC;QACzB,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAA2H,CAAC;YACjL,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,EAAE,yBAAyB,MAAM,YAAY,CAAC,CAAC;YAC1H,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpE,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAa,EAAE,OAAO,CAAC,CAAC;YAClE,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,IAAI,GAAG,MAAM,MAAM,CAAC;YAClF,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,iBAAiB,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,2BAA2B,CAAC,sBAAsB,EAAE,2CAA2C,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,EAAE,CAAC;YAC5F,OAAO,MAAM,CAAC,2BAA2B,CAAC,mBAAmB,EAAE,4GAA4G,CAAC,CAAC;QAC/K,CAAC;QAED,kCAAkC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,sCAAsC,CAAC,CAAC;QACxI,MAAM,UAAU,GAAqH,EAAE,CAAC;QACxI,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YACnJ,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YACjK,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,OAAO,OAAO,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,QAAQ,GAAG,OAAO,OAAO,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpF,OAAO,MAAM,CAAC,2BAA2B,CAAC,oBAAoB,EAAE,WAAW,MAAM,CAAC,MAAM,qEAAqE,CAAC,CAAC;YACjK,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtI,CAAC;QAED,kDAAkD;QAClD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YACrC,QAAQ,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa;YACrG,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;SAC/J,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,KAAK,8BAA8B,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,2BAA2B,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAEjJ,+EAA+E;QAC/E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,QAAQ,EAAE,CAAC;QAChD,MAAM,cAAc,GAAG,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9G,MAAM,OAAO,GAAG,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzH,oHAAoH;QACpH,mHAAmH;QACnH,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,iBAAiB,GAAa,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE;gBAC3F,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO;gBACxF,cAAc,EAAE,MAAM,EAAE,qBAAqB,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc;gBAClG,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;gBAC/G,sBAAsB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;gBAChD,KAAK,EAAE,sBAAsB,CAAC,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;aACxF,EAAE,OAAO,CAAC,CAAC;YACZ,cAAc,GAAG,IAAI,CAAC;YACtB,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,+BAA+B,CAAC,gBAAgB,CAAC,yBAAyB,EAAE;oBAClG,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,kBAAkB,EAAE,SAAS;oBACrH,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,qBAAqB,EAAE,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;oBACrH,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;iBAC/B,EAAE,OAAO,CAAC,CAAC;gBACZ,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,MAAM,WAAW,IAAI,iBAAiB,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YAChJ,CAAC;YACD,IAAI,cAAc;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC,2BAA2B,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;YACzJ,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACnK,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,uCAAuC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAClI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qHAAqH,EAAE;gBACvI,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAClI,CAAC,CAAC;YACH,mHAAmH;YACnH,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5E,OAAO,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAE,oGAAoG,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAClL,CAAC;YACD,OAAO,MAAM,CAAC,2BAA2B,CAAC,kBAAkB,EAC1D,sCAAsC,mBAAmB,CAAC,KAAK,CAAC,oCAAoC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,WAAW,uCAAuC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACjM,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,sBAAsB,CAAC,sBAAsB;YACxD,kBAAkB,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;YACjI,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,qBAAqB,EAAE,aAAa;YACxE,aAAa,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;SACvG,EAAE,MAAM,CAAC,CAAC;QACX,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IACvG,CAAC;IAED;;;;;;;;;OASG;IACI,KAAK,CAAC,cAAc,CAAC,kBAA0B,EAAE,QAAsC,4BAA4B,CAAC,IAAI;QAC7H,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,kBAAkB,EAAE,EAAE,OAAO,CAAC,CAAC;QACpK,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,SAAS,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,qBAAqB,CAAC,WAAmB,EAAE,eAAuB;QAC7E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAC7D,gBAAgB,CAAC,kBAAkB,EAAE,EAAE,WAAW,EAAE,sBAAsB,EAAE,eAAe,EAAE,EAAE,OAAO,CACvG,CAAC;QACF,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,gBAAgB,CAAC,SAAqC,qCAAqC;QACtG,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAC5D,gBAAgB,CAAC,kBAAkB,EACnC,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAC1F,OAAO,EACP,SAAS,EACT,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,CAClJ,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,MAAM,QAAQ,GAA8B,EAAE,CAAC;QAC/C,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAAC,gBAAgB,IAAI,CAAC,CAAC;gBAAC,SAAS;YAAC,CAAC;YAC/E,MAAM,YAAY,GAAG,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACzC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,kBAAkB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;gBACvI,gBAAgB,IAAI,CAAC,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChF,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC;QAChH,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,IAAI,MAAqC,CAAC;YAC1C,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,4BAA4B,CAAC,IAAI,CAAC,CAAC;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACpJ,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,SAAS;YACX,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,KAAK,kCAAkC,CAAC,KAAK;gBAAE,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;iBAC9E,IAAI,MAAM,CAAC,OAAO,KAAK,2BAA2B,CAAC,QAAQ;gBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;iBACjF,IAAI,MAAM,CAAC,OAAO,KAAK,2BAA2B,CAAC,SAAS;gBAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;;gBACnF,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,UAAU,CACtB,GAA4B,EAC5B,OAAuG,EACvG,KAAmC;QAEnC,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,KAA+B,CAAC;QACpD,IAAI,iCAAiC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,kHAAkH;YAClH,gEAAgE;YAChE,IAAI,KAAK,KAAK,4BAA4B,CAAC,YAAY,EAAE,CAAC;gBACxD,MAAM,IAAI,CAAC,MAAM,CAAC;oBAChB,SAAS,EAAE,sBAAsB,CAAC,oCAAoC,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;iBACrI,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;YACD,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACpH,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,gBAA8B,CAAC,MAAM,CAAC,CAAC,SAAS,EAAuB,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5K,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;QAE5J,MAAM,QAAQ,GAA8C,EAAE,CAAC;QAC/D,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,mCAAmC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACpG,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,KAAK,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAA0B,CAAC;QAC/B,IAAI,SAA8C,CAAC;QACnD,IAAI,KAAK,KAAK,sBAAsB,CAAC,yBAAyB,EAAE,CAAC;YAC/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC3D,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;YACvB,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YAC/B,IAAI,QAAQ,CAAC,OAAO;gBAAE,IAAI,CAAC,OAAO,EAAE,qCAAqC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACxH,CAAC;QACD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACtI,MAAM,UAAU,GAAG,4BAA4B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAChE,IAAI,UAAU,CAAC,OAAO,KAAK,kCAAkC,CAAC,KAAK;YAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAExK,0GAA0G;QAC1G,IAAI,IAA8B,CAAC;QACnC,IAAI,UAAU,CAAC,KAAK,KAAK,sBAAsB,CAAC,MAAM,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,CAAC,OAAO,EAAE,qCAAqC,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,+BAA+B,CAAC,QAAQ,EAAE,CAAC,CAAC;gBACxH,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YACtI,CAAC;YACD,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,qBAAqB,CAC3D,gBAAgB,CAAC,kBAAkB,EACnC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,EAChC;YACE,GAAG,EAAE;gBACH,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG;gBAC5D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;oBACT,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,EAAE,GAAG,EAAE;oBACrE,kBAAkB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,wBAAwB,EAAE,SAAS,EAAE,GAAG,EAAE;oBAC7E,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC,CAAC,EAAE,CAAC;aACR;SACF,EACD,OAAO,CACR,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBAC7D,MAAM,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QACpI,CAAC;QACD,IAAI,IAAI,EAAE,CAAC;YACT,oHAAoH;YACpH,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,6BAA6B,CAAC,eAAe,CAAC,CAAC;YAC3G,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,6BAA6B,CAAC,mBAAmB,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gDAAgD,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvI,IAAI,CAAC,OAAO,EAAE,2BAA2B,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,sBAAsB,CAAC,uBAAuB,EAAE,GAAG,6BAA6B,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK;YAC5I,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACT,mBAAmB,EAAE,IAAI,CAAC,QAAQ,CAAC,mBAAmB;gBACtD,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;gBACvD,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC;aACvC,CAAC,CAAC,CAAC,EAAE,CAAC;SACR,EAAE,GAAG,OAAO,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,kCAAkC,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3H,CAAC;IAED;;;;;;;;OAQG;IACK,KAAK,CAAC,gBAAgB,CAC5B,GAA4B,EAC5B,OAAuG;QAEvG,MAAM,CAAC,GAAG,+BAA+B,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,mGAAmG,EAAE,CAAC;QACnM,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,GAAG,CAAC,gBAA4B,CAAC;QACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,aAAa,EAAE,MAAM,EAAE,qCAAqC,UAAU,CAAC,MAAM,wEAAwE,EAAE,CAAC;QAC/N,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC,WAAW,CAAC,CAAC;QACtE,IAAI,CAAC,cAAc;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,kBAAkB,EAAE,MAAM,EAAE,aAAa,WAAW,+DAA+D,EAAE,CAAC;QAChN,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,yBAAyB,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;QACjL,MAAM,eAAe,GAAmF,EAAE,CAAC;QAC3G,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAA0B,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC;YAC5I,eAAe,CAAC,IAAI,CAAC;gBACnB,YAAY,EAAE,MAAM;gBACpB,qHAAqH;gBACrH,KAAK,EAAE,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACxD,GAAG,CAAC,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC;QAC1F,IAAI,QAAQ,CAAC,UAAU,KAAK,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACnJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC5C,cAAc,EAAE,QAAQ,CAAC,KAAK,EAAE,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAA0C;YACvJ,WAAW,EAAE,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,cAAc;YACjG,aAAa,EAAE,GAAG,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;YACpH,eAAe;SAChB,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtK,IAAI,OAAO,CAAC,OAAO,KAAK,qBAAqB,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,iBAAiB,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7J,oHAAoH;QACpH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACzI,OAAO;YACL,KAAK,EAAE,sBAAsB,CAAC,kBAAkB;YAChD,SAAS,EAAE;gBACT,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBACjD,aAAa,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;aAC5I;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,mBAAmB;QAC9B,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,MAAM,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,gCAAgC,EAAE,CAAC;QACtF,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrB,KAAK,MAAM,KAAK,IAAI,CAAC,6BAA6B,CAAC,eAAe,EAAE,6BAA6B,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACvH,MAAM,MAAM,GAAI,GAAG,CAAC,KAAK,CAAsC,EAAE,MAAM,CAAC;gBACxE,IAAI,OAAO,MAAM,KAAK,QAAQ;oBAAE,SAAS;gBACzC,IAAI,OAA4C,CAAC;gBACjD,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC5D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sFAAsF,EAAE,EAAE,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAC7L,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;oBACpB,SAAS;gBACX,CAAC;gBACD,IAAI,OAAO,KAAK,mCAAmC,CAAC,MAAM;oBAAE,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;qBAC1E,IAAI,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC;oBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;qBACtE,IAAI,OAAO,KAAK,mCAAmC,CAAC,IAAI;oBAAE,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,gBAAgB,CAAC,MAAc,EAAE,GAA4B,EAAE,KAAoC;QAC/G,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,mCAAmC,CAAC,MAAM,CAAC;QAC3E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,OAAO,KAAK,mCAAmC,CAAC,cAAc;YAAE,OAAO,OAAO,CAAC;QACnF,IAAI,OAAO,KAAK,mCAAmC,CAAC,IAAI,EAAE,CAAC;YACzD,IAAI,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,OAAO,CAAC;YAC1D,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,GAAG,MAAM;gBAAE,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACnF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kLAAkL,EAAE;gBACpM,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK;aACnD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,+BAA+B,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0IAA0I,EAAE;gBAC3J,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO;aAC5D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,kCAAkC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,CAAC,kBAAkB,CAAC,OAAuG;QACvI,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,iCAAiC,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,IAAI,QAAQ,GAAG,iCAAiC,CAAC;QACjD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,kCAAkC,GAAG,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAC5D,gBAAgB,CAAC,kBAAkB,EACnC,EAAE,KAAK,EAAE,sBAAsB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EACrE,OAAO,EACP,SAAS,EACT,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpH,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,IAAI,QAAQ,IAAI,kCAAkC;oBAAE,OAAO;gBACrF,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,EAAE,kCAAkC,CAAC,CAAC;gBACtE,SAAS;YACX,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC,CAAC;gBACb,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;gBAAE,OAAO;YACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,WAAW,CAAC;YAChD,IAAI,GAAG,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,wHAAwH;IAChH,KAAK,CAAC,YAAY,CAAC,GAA4B,EAAE,SAA8C;QACrG,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,iFAAiF,EAAE,CAAC;QACrH,IAAI,CAAC,IAAI,CAAC,aAAa;YAAE,OAAO,EAAE,MAAM,EAAE,sFAAsF,EAAE,CAAC;QACnI,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,oBAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,oBAAoB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBACpD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,CAAC,eAAe,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,iBAAiB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,aAAa;aACxK,CAAC,CAAC;YACH,MAAM,wBAAwB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBAC9D,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,CAAC,mBAAmB;gBACtE,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,qBAAqB,EAAE,kBAAkB;aAChK,CAAC,CAAC;YACH,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,aAAa,EAAE,CAAC;QAClI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,oBAAoB;gBAAE,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8GAA8G,EAAE;gBAC/H,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;aAC1D,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,6CAA6C,mBAAmB,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,8GAA8G;IACtG,KAAK,CAAC,MAAM,CAAC,KAAyE,EAAE,aAAqB;QACnH,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,sEAAsE,EAAE;YACrL,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,CAAC;SAC5G,CAAC,CAAC,CAAC;IACN,CAAC;CACF,CAAA;AAliBY,+BAA+B;IAD3C,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,kCAAkC,CAAC,CAAA;IAC7D,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,0BAA0B,CAAC,CAAA;IACrD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAC1D,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAC9D,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAE1D,WAAA,MAAM,CAAC,kBAAkB,CAAC,6BAA6B,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IACpE,WAAA,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IACvD,WAAA,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAAE,WAAA,QAAQ,EAAE,CAAA;IAGrD,YAAA,SAAS,EAAE,CAAA;;GAfH,+BAA+B,CAkiB3C;;AAiBD,iFAAiF;AACjF,MAAM,UAAU,6BAA6B,CAAC,GAA4B;IACxE,OAAO;QACL,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACnC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;QAC1C,GAAG,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAClD,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACpC,aAAa,EAAE,GAAG,CAAC,aAA0C;QAC7D,qBAAqB,EAAE,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAA4D;IAChG,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,QAAQ,CAAC;QAAE,OAAO,sBAAsB,CAAC,wBAAwB,CAAC;IAChI,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,OAAO,CAAC;QAAE,OAAO,sBAAsB,CAAC,uBAAuB,CAAC;IAC9H,IAAI,QAAQ,CAAC,QAAQ,CAAC,uCAAuC,CAAC,SAAS,CAAC;QAAE,OAAO,sBAAsB,CAAC,SAAS,CAAC;IAClH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,uCAAuC,CAAC,SAAS,CAAC;QAAE,OAAO,sBAAsB,CAAC,yBAAyB,CAAC;IAC7K,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,uCAAuC,CAAC,gBAAgB,IAAI,MAAM,KAAK,uCAAuC,CAAC,SAAS,CAAC,EAAE,CAAC;QACnK,OAAO,sBAAsB,CAAC,6BAA6B,CAAC;IAC9D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * # Sending a deliverable for its signers' electronic signatures (#2293)\n *\n * The send path of level 2: a deliverable a person approved (its approval SEALED, its file bound by hash, #2904) is sent\n * to the electronic-signature vendor with the people who must sign it, and recorded as a `signatureRequests` row with one\n * `signatureRequestSigners` row per signer.\n *\n * ## What it refuses, before anything leaves\n *\n * - **The approval is not sealed, or did not approve.** A request follows a sealed approval (#2293: \"the request is created\n *   only once the approval is sealed\"), and a refusal or a pending seal approves nothing to sign.\n * - **The seal binds no file.** Only a file deliverable whose bytes the approver approved (`deliverableFileId`, #2904) can\n *   be sent: what is signed must be what was approved.\n * - **The bytes changed.** The file is read and hashed again, and must match the hash it recorded (#2900): the vendor is\n *   sent exactly the frozen original, and the request keeps that hash to compare the signed revision with.\n * - **A signer cannot be invited**: unknown, not ACTIVE, or with no email or name to address them by.\n * - **An open request already exists for this approval.** One deliverable approval, one open request.\n *\n * ## Order of writes, and what a failure leaves\n *\n * The vendor is asked FIRST and the rows are written once it answers SENT: the state machine starts at SENT, and a row\n * written before the vendor answered would claim a sending that may never happen. The row and signer ids are minted\n * before sending, because the vendor maps its signers to the engine's references. If the rows cannot be written after\n * the vendor accepted, the request is cancelled at the vendor (and deleted there where the provider deletes on removal),\n * so no signer is invited to sign a document the application does not track.\n *\n * Stated residual: the \"one open request per approval\" check is a read before the write, not a constraint, so two\n * concurrent sends of one approval can both reach the vendor. The second is a duplicate the operator can cancel; a\n * unique slot is owed when a caller can race (the send trigger, #2925).\n */\nimport { createHash, randomBytes } from 'node:crypto';\nimport { injectable, inject, optional, unmanaged } from 'inversify';\nimport {\n  ApprovalSealStatus,\n  CoreAuditableEventType,\n  CoreResourceType,\n  ErrorCustomMessageReference,\n  ErrorType,\n  HumanDecision_Outcome,\n  SignatureRequest_CancellationReason,\n  SignatureRequest_Event,\n  SignatureRequest_RereadCause,\n  SignatureRequest_State,\n  SignatureRequest_TransitionOutcome,\n  SIGNATURE_REQUEST_TERMINAL_STATES,\n  SortOrder,\n  UserStatus,\n  advanceSignatureRequestState,\n} from '@wildo-ai/saas-models';\nimport {\n  ElectronicSignature_CancellationOutcome,\n  ElectronicSignature_VendorRequestStatus,\n  type ElectronicSignature_Level,\n} from '@wildo-ai/external-connectors-models';\n\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { RepositoriesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/repositories/repositories-registry-handler.backend.service';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { FilesBackendService } from '~wildo-backend-lib/files/services/files.backend.service';\nimport type { ElectronicSignatureBackendService } from '~wildo-backend-lib/external-providers/services/electronic-signature.backend.service';\nimport { ElectronicSignatureSendOutcome } from '~wildo-backend-lib/external-providers/services/electronic-signature.backend.service';\nimport { describeCaughtError } from '~wildo-backend-lib/errors/utils/error-log-level-classification.backend.utils';\nimport { isUniqueConstraintConflict } from '~wildo-backend-lib/errors/utils/unique-conflict-classification.backend.utils';\nimport type { AuditLogsBackendService } from '~wildo-backend-lib/compliance/audit-trails/services/audit-logs.backend.service';\nimport { SignedDocumentVerdict, type SignedDocumentEvidence, type SignedDocumentValidator } from './signed-document-validation.backend';\nimport {\n  SIGNATURE_EVIDENCE_LINK_RETRIED,\n  SignatureRequestEvidenceField,\n  SignatureRequestEvidenceLinkOutcome,\n  type SignatureRequestEvidenceFiles,\n} from './signature-request-evidence-files.backend';\nimport type { MetricsService } from '~wildo-backend-lib/monitoring/observability/services/metrics.service';\n\n/** Why a deliverable was not sent. */\nexport enum SignatureRequestSendRefusal {\n  SEAL_NOT_FOUND = 'seal_not_found',\n  /** The seal is still PENDING or IN_FLIGHT, or DEAD: there is no sealed approval yet. */\n  SEAL_NOT_SEALED = 'seal_not_sealed',\n  /** The sealed decision refused what was proposed: nothing was approved to sign. */\n  DECISION_NOT_APPROVED = 'decision_not_approved',\n  /** The seal binds no file deliverable by its hash. */\n  NO_BOUND_DELIVERABLE = 'no_bound_deliverable',\n  DELIVERABLE_UNREADABLE = 'deliverable_unreadable',\n  /** The file's bytes no longer match the hash it recorded. */\n  DELIVERABLE_CHANGED = 'deliverable_changed',\n  /** A signer is unknown, not active, or has no email or name to be invited by. */\n  SIGNER_NOT_INVITABLE = 'signer_not_invitable',\n  /** An open request already exists for this approval. */\n  ALREADY_OPEN = 'already_open',\n  /** The vendor (or the provider, or the absence of one) refused the sending. */\n  VENDOR_REFUSED = 'vendor_refused',\n  /** The vendor accepted the request and the record could not be written; the request was cancelled at the vendor. */\n  RECORD_NOT_WRITTEN = 'record_not_written',\n}\n\nexport interface SendForSignatureInput {\n  readonly approvalSealId: string;\n  /** The signers in signing order: the first signs first. Name a `signingOrder` to have several sign in parallel. */\n  readonly signers: ReadonlyArray<{ readonly userId: string; readonly signingOrder?: number }>;\n  readonly requiredLevel: ElectronicSignature_Level;\n  /**\n   * The request's id, when the caller derives it (the trigger derives it from the approval seal, so two concurrent sends\n   * of one approval cannot both be recorded: the second write fails and its vendor request is cancelled). Minted otherwise.\n   */\n  readonly requestId?: string;\n}\n\nexport type SendForSignatureResult =\n  | { readonly sent: true; readonly signatureRequestId: string; readonly signerRowIds: readonly string[] }\n  | { readonly sent: false; readonly refusal: SignatureRequestSendRefusal; readonly reason: string; readonly retryable: boolean; readonly signatureRequestId?: string };\n\n/**\n * Why a request the vendor reported complete was not made SIGNED by its evidence: the label of\n * `signature_request_evidence_refused_total`, and what the re-read's reason explains in words.\n */\nexport enum SignatureRequestEvidenceFailure {\n  /** No signed-document validator is bound in this runtime. */\n  NO_VALIDATOR = 'no_validator',\n  /** The vendor split the request into several documents; one signed document per request is kept. */\n  SPLIT_REQUEST = 'split_request',\n  /** The provider declares no evidence policy (trust anchors). */\n  NO_EVIDENCE_POLICY = 'no_evidence_policy',\n  /** The signed document could not be downloaded. */\n  DOWNLOAD_FAILED = 'download_failed',\n  /** The document did not validate (tampered, updated after signing, untrusted chain, refused algorithm, revocation). */\n  REJECTED = 'rejected',\n  /** The document validated and proves another signer or a lower level than required: the request FAILS. */\n  MISMATCHED = 'mismatched',\n  /** The document validated and its evidence could not be written: the request stays open and is read again. */\n  NOT_KEPT = 'not_kept',\n}\n\n/**\n * How long after a request became SIGNED the poll keeps linking its evidence files (#2293). Longer than the files\n * cleanup waits before it removes an unlinked file (a day after its scan ended, its default `unlinkedThresholdMs`), so a\n * scan that ends late is still linked; a file the cleanup removed first is reported lost.\n */\nexport const SIGNATURE_EVIDENCE_LINK_WINDOW_MS = 48 * 3_600_000;\n/** The SIGNED requests one poll reads, a page at a time, to link their evidence. */\nconst SIGNATURE_EVIDENCE_LINK_SCAN_LIMIT = 2_000;\nconst SIGNATURE_EVIDENCE_LINK_SCAN_PAGE = 100;\n\n/** What one evidence-link pass of the poll did. */\nexport interface SignatureEvidenceLinkReport {\n  /** SIGNED requests of the window whose evidence was looked at. */\n  readonly examined: number;\n  /** Evidence files linked by this pass. */\n  readonly linked: number;\n  /** Evidence files still not linkable (their scan has not ended) or whose link failed for now: the next pass tries again. */\n  readonly pending: number;\n  /** Evidence files that can never be linked: the request names evidence nothing keeps. Each is logged once. */\n  readonly lost: number;\n}\n\n/** What the send path reads and writes through. Structural, so a test hands in what it holds. */\nexport type SignatureRequestsRepositories = Pick<RepositoriesRegistryHandlerBackendService, 'findManyForInfrastructure' | 'insertDocumentForInfrastructure' | 'deleteManyForInfrastructure' | 'atomicGuardedMutation'>;\nexport type SignatureRequestsFiles = Pick<FilesBackendService, 'getFile' | 'ensureContentHash' | 'readFileBytes'>;\nexport type SignatureRequestsTransport = Pick<ElectronicSignatureBackendService, 'send' | 'cancel' | 'read' | 'downloadSignedDocument'>\n  & Partial<Pick<ElectronicSignatureBackendService, 'vendorEnvironmentOf' | 'evidencePolicyOf'>>;\n\n/** Why a re-read did not reach the transition function, or did and could not write. */\nexport enum SignatureRequestRefreshStop {\n  /** No such request. */\n  NOT_FOUND = 'not_found',\n  /** The vendor could not be read, or answered unusably: the request is left as it was. */\n  NOT_READ = 'not_read',\n  /** Another re-read moved the request first (the state write is guarded on the state read). */\n  LOST_RACE = 'lost_race',\n}\n\n/** What one re-read of a request did. */\nexport interface SignatureRequestRefreshResult {\n  readonly signatureRequestId: string;\n  readonly outcome: SignatureRequest_TransitionOutcome | SignatureRequestRefreshStop;\n  readonly state?: SignatureRequest_State;\n  readonly event?: SignatureRequest_Event;\n  /** Why the vendor's answer, or the evidence, left the request where it was. */\n  readonly reason?: string;\n}\n\n/** The bounds of one poll (#2293): per run, per tenant and per provider, so one tenant or one vendor cannot use the run up. */\nexport interface SignatureRequestPollBounds {\n  readonly maxRequests: number;\n  readonly maxPerOrganization: number;\n  readonly maxPerProvider: number;\n}\n\nexport const DEFAULT_SIGNATURE_REQUEST_POLL_BOUNDS: SignatureRequestPollBounds = Object.freeze({ maxRequests: 100, maxPerOrganization: 20, maxPerProvider: 50 });\n\n/** What a poll run did, for its batch output. */\nexport interface SignatureRequestPollReport {\n  readonly examined: number;\n  readonly moved: number;\n  readonly unchanged: number;\n  readonly notRead: number;\n  readonly lostRace: number;\n  /** Open requests left for a later run by the per-tenant or per-provider bound. */\n  readonly deferredByBudget: number;\n}\n\n/** A new row id: 24 hex characters, the shape every adapter stores a string id in. */\nfunction newRowId(): string {\n  return randomBytes(12).toString('hex');\n}\n\n@injectable()\nexport class SignatureRequestsBackendService {\n  constructor(\n    @inject(SAAS_SERVICE_TYPES.Logger) private readonly logger: LoggerService,\n    @inject(SAAS_SERVICE_TYPES.RepositoriesRegistryHandlerService) private readonly repositories: SignatureRequestsRepositories,\n    @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) private readonly executionContextCreator: Pick<ExecutionContextCreatorBackendService, 'createForInternalSystemOperation'>,\n    @inject(SAAS_SERVICE_TYPES.ElectronicSignatureService) private readonly transport: SignatureRequestsTransport,\n    @inject(SAAS_SERVICE_TYPES.FilesBackendService) @optional() private readonly files?: SignatureRequestsFiles,\n    @inject(SAAS_SERVICE_TYPES.SignedDocumentValidator) @optional() private readonly validator?: SignedDocumentValidator,\n    @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) @optional() private readonly errorBuilder?: Pick<ErrorBuilderBackendService, 'buildError'>,\n    /** Where a SIGNED request keeps its signed document and its validation's evidence. Absent, nothing becomes SIGNED. */\n    @inject(SAAS_SERVICE_TYPES.SignatureRequestEvidenceFiles) @optional() private readonly evidenceFiles?: SignatureRequestEvidenceFiles,\n    @inject(SAAS_SERVICE_TYPES.AuditLogsService) @optional() private readonly auditLogs?: Pick<AuditLogsBackendService, 'logSignatureRequestEvent'>,\n    @inject(SAAS_SERVICE_TYPES.MetricsService) @optional() private readonly metrics?: Pick<MetricsService,\n      'recordSignatureRequestSent' | 'recordSignatureRequestMoved' | 'recordSignatureRequestEvidenceRefused' | 'recordSignatureRequestVendorNotRead' | 'recordSignatureRequestEvidenceLink'>,\n    /** A test seam, `@unmanaged()`: the container's instance reads the system clock (Inversify counts every parameter). */\n    @unmanaged() clock?: () => Date,\n  ) {\n    this.clock = clock ?? (() => new Date());\n  }\n\n  private readonly clock: () => Date;\n  /** Evidence files already reported lost by this process, so a lost file is logged once rather than every poll. */\n  private readonly reportedLostEvidence = new Set<string>();\n\n  /**\n   * The removal effect of `signatureRequests` (#2293), registered at startup with the evidence teardown: before the rows of\n   * requests whose record goes are destroyed, every OPEN one is cancelled at its vendor, and deleted there where its\n   * provider deletes what it no longer needs. A request already final at the vendor needs nothing. A cancellation that\n   * fails THROWS, which refuses the removal: the record stays, and its removal is retried, rather than a signer still being\n   * invited to sign a document whose record is gone. Never called for a held request: the teardown keeps held evidence.\n   */\n  public async cancelOpenRequestsAtVendor(rows: ReadonlyArray<Record<string, unknown>>): Promise<void> {\n    const failures: string[] = [];\n    for (const row of rows) {\n      if (SIGNATURE_REQUEST_TERMINAL_STATES.has(row.state as SignatureRequest_State)) continue;\n      const providerRef = String(row.providerRef);\n      const references = Array.isArray(row.vendorReferences) ? (row.vendorReferences as unknown[]).filter((reference): reference is string => typeof reference === 'string') : [];\n      for (const reference of references) {\n        const result = await this.transport.cancel(providerRef, reference, { deleteAfterCancel: true });\n        if (result.outcome === ElectronicSignature_CancellationOutcome.FAILED) {\n          failures.push(`${String(row._id)}: ${result.reason ?? 'the vendor did not confirm the cancellation'}`);\n          continue;\n        }\n        this.logger.info('[signature-requests] An open signature request was cancelled at its vendor because its record went', {\n          signatureRequestId: String(row._id), providerRef, outcome: result.outcome, deletedAtVendor: result.deletedAtVendor,\n        });\n        // The row is destroyed next: this is the record that it was cancelled, why, and whether the vendor deleted it.\n        await this.record({\n          eventType: CoreAuditableEventType.SIGNATURE_REQUEST_CANCELLED_AT_VENDOR, ...signatureRequestEventFieldsOf(row), vendorReference: reference,\n          outcome: result.outcome as ElectronicSignature_CancellationOutcome.CANCELLED | ElectronicSignature_CancellationOutcome.ALREADY_FINAL,\n          ...(result.deletedAtVendor === undefined ? {} : { deletedAtVendor: result.deletedAtVendor }),\n          cancellationReason: SignatureRequest_CancellationReason.SUBJECT_REMOVED,\n        }, reference);\n      }\n    }\n    if (failures.length === 0) return;\n    const message = `${failures.length} open signature request(s) could not be cancelled at the vendor, so the record was not removed: ${failures.join('; ')}`;\n    throw this.errorBuilder\n      ? this.errorBuilder.buildError(ErrorType.EXTERNAL_SERVICE, undefined, { customMessageReference: ErrorCustomMessageReference.SIGNATURE_REQUEST_VENDOR_CANCELLATION_FAILED, context: { message } })\n      : new Error(message);\n  }\n\n  /**\n   * Send the file deliverable of a sealed approval to the selected vendor, for `input.signers` to sign at\n   * `input.requiredLevel`, and record the request. Never throws for a refusal; it answers why.\n   *\n   * assurance-control: WILDO.AI.HUMAN_OVERSIGHT, WILDO.AUDIT.EVIDENCE_INTEGRITY — a deliverable reaches its signers only after\n   * a person's approval of exactly its bytes was sealed, and the bytes sent are re-hashed against what was approved.\n   * (#2293 named `WILDO.DOCUMENTS.APPROVAL_BEFORE_PRESENTATION`; that objective is about governed documents, as #2903 found\n   * for the seal's bind check, so the sealed-deliverable gate is marked as that check is.)\n   */\n  public async sendForSignature(input: SendForSignatureInput): Promise<SendForSignatureResult> {\n    const result = await this.sendOnce(input);\n    this.metrics?.recordSignatureRequestSent({ outcome: 'refusal' in result ? result.refusal : ElectronicSignatureSendOutcome.SENT, requiredLevel: input.requiredLevel });\n    return result;\n  }\n\n  private async sendOnce(input: SendForSignatureInput): Promise<SendForSignatureResult> {\n    const refuse = (refusal: SignatureRequestSendRefusal, reason: string, retryable = false, signatureRequestId?: string): SendForSignatureResult =>\n      ({ sent: false, refusal, reason, retryable, ...(signatureRequestId ? { signatureRequestId } : {}) });\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n\n    // 1. The sealed approval, and the file it binds.\n    const [seal] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.APPROVAL_SEALS, { _id: input.approvalSealId }, context);\n    if (!seal) return refuse(SignatureRequestSendRefusal.SEAL_NOT_FOUND, `No approval seal \"${input.approvalSealId}\".`);\n    if (seal.status !== ApprovalSealStatus.SEALED) {\n      return refuse(SignatureRequestSendRefusal.SEAL_NOT_SEALED, `The approval seal is ${String(seal.status)}, not sealed.`, seal.status !== ApprovalSealStatus.DEAD);\n    }\n    if (seal.outcome !== HumanDecision_Outcome.ACCEPTED && seal.outcome !== HumanDecision_Outcome.ACCEPTED_WITH_MODIFICATIONS) {\n      return refuse(SignatureRequestSendRefusal.DECISION_NOT_APPROVED, 'The sealed decision did not approve the deliverable.');\n    }\n    const fileId = typeof seal.deliverableFileId === 'string' ? seal.deliverableFileId : undefined;\n    if (!fileId) return refuse(SignatureRequestSendRefusal.NO_BOUND_DELIVERABLE, 'The sealed approval binds no file deliverable by its hash.');\n\n    // 2. One open request per approval.\n    const existing = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.SIGNATURE_REQUESTS, { approvalSealId: input.approvalSealId }, context);\n    const open = existing.find((row) => !SIGNATURE_REQUEST_TERMINAL_STATES.has(row.state as SignatureRequest_State));\n    if (open) return refuse(SignatureRequestSendRefusal.ALREADY_OPEN, 'An open signature request already exists for this approval.', false, String(open._id));\n\n    // 3. The frozen original: its recorded hash, and its bytes, which must still match it.\n    if (!this.files) return refuse(SignatureRequestSendRefusal.DELIVERABLE_UNREADABLE, 'No file service is bound in this runtime.');\n    let document: Buffer;\n    let contentSha256: string | undefined;\n    let documentName: string;\n    let mimeType: string;\n    try {\n      const file = await this.files.getFile(fileId, context) as unknown as { originalName?: string; fileName?: string; name?: string; mimeType?: string; contentType?: string } | null;\n      if (!file) return refuse(SignatureRequestSendRefusal.DELIVERABLE_UNREADABLE, `The deliverable file \"${fileId}\" is gone.`);\n      contentSha256 = await this.files.ensureContentHash(fileId, context);\n      document = await this.files.readFileBytes(file as never, context);\n      documentName = file.originalName ?? file.fileName ?? file.name ?? `${fileId}.pdf`;\n      mimeType = file.mimeType ?? file.contentType ?? 'application/pdf';\n    } catch (error) {\n      return refuse(SignatureRequestSendRefusal.DELIVERABLE_UNREADABLE, `The deliverable file could not be read: ${describeCaughtError(error)}`, true);\n    }\n    if (!contentSha256 || createHash('sha256').update(document).digest('hex') !== contentSha256) {\n      return refuse(SignatureRequestSendRefusal.DELIVERABLE_CHANGED, 'The deliverable\\'s bytes do not match the hash it recorded; what would be signed is not what was approved.');\n    }\n\n    // 4. The signers, each invitable.\n    if (input.signers.length === 0) return refuse(SignatureRequestSendRefusal.SIGNER_NOT_INVITABLE, 'A request names at least one signer.');\n    const signerRows: Array<{ _id: string; userId: string; signingOrder: number; firstName: string; lastName: string; email: string }> = [];\n    for (const [index, signer] of input.signers.entries()) {\n      const [user] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.USERS, { _id: signer.userId }, context);\n      const [profile] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.USER_PROFILES, { userId: signer.userId }, context);\n      const email = typeof user?.email === 'string' ? user.email : '';\n      const firstName = typeof profile?.firstName === 'string' ? profile.firstName : '';\n      const lastName = typeof profile?.lastName === 'string' ? profile.lastName : '';\n      if (!user || user.status !== UserStatus.ACTIVE || !email || !firstName || !lastName) {\n        return refuse(SignatureRequestSendRefusal.SIGNER_NOT_INVITABLE, `Signer \"${signer.userId}\" is unknown, not active, or has no email or name to be invited by.`);\n      }\n      signerRows.push({ _id: newRowId(), userId: signer.userId, signingOrder: signer.signingOrder ?? index, firstName, lastName, email });\n    }\n\n    // 5. The vendor first: the record starts at SENT.\n    const sent = await this.transport.send({\n      document: new Uint8Array(document), documentName, mimeType, contentSha256, level: input.requiredLevel,\n      signers: signerRows.map((row) => ({ signerRef: row._id, signingOrder: row.signingOrder, firstName: row.firstName, lastName: row.lastName, email: row.email })),\n    });\n    if (sent.outcome !== ElectronicSignatureSendOutcome.SENT) return refuse(SignatureRequestSendRefusal.VENDOR_REFUSED, sent.reason, sent.retryable);\n\n    // 6. The record, and the vendor's request cancelled when it cannot be written.\n    const now = new Date();\n    const requestId = input.requestId ?? newRowId();\n    const organizationId = typeof seal.organizationId === 'string' ? { organizationId: seal.organizationId } : {};\n    const subject = { linkedResourceType: String(seal.linkedResourceType), linkedResourceId: String(seal.linkedResourceId) };\n    // What THIS call wrote, so a failure removes only its own rows: with a derived id, a concurrent sending of the same\n    // approval may own the request row this insert collided with, and deleting by id would remove the winner's record.\n    let requestWritten = false;\n    const signerRowsWritten: string[] = [];\n    try {\n      await this.repositories.insertDocumentForInfrastructure(CoreResourceType.SIGNATURE_REQUESTS, {\n        _id: requestId, applicationId: String(seal.applicationId), ...organizationId, ...subject,\n        originalFileId: fileId, originalContentSha256: contentSha256, approvalSealId: input.approvalSealId,\n        requiredLevel: input.requiredLevel, providerRef: sent.providerRef, vendorReferences: [...sent.vendorReferences],\n        primaryVendorReference: sent.vendorReferences[0],\n        state: SignatureRequest_State.SENT, stateChangedAt: now, createdAt: now, updatedAt: now,\n      }, context);\n      requestWritten = true;\n      for (const row of signerRows) {\n        await this.repositories.insertDocumentForInfrastructure(CoreResourceType.SIGNATURE_REQUEST_SIGNERS, {\n          _id: row._id, applicationId: String(seal.applicationId), ...organizationId, ...subject, signatureRequestId: requestId,\n          signerUserId: row.userId, signingOrder: row.signingOrder, vendorSignerReference: sent.vendorSignerReferences[row._id],\n          createdAt: now, updatedAt: now,\n        }, context);\n        signerRowsWritten.push(row._id);\n      }\n    } catch (error) {\n      for (const signerRowId of signerRowsWritten) {\n        await this.repositories.deleteManyForInfrastructure(CoreResourceType.SIGNATURE_REQUEST_SIGNERS, { _id: signerRowId }, context).catch(() => 0);\n      }\n      if (requestWritten) await this.repositories.deleteManyForInfrastructure(CoreResourceType.SIGNATURE_REQUESTS, { _id: requestId }, context).catch(() => 0);\n      const cancellations = await Promise.all(sent.vendorReferences.map((reference) => this.transport.cancel(sent.providerRef, reference, { deleteAfterCancel: true })));\n      const uncancelled = cancellations.filter((result) => result.outcome !== ElectronicSignature_CancellationOutcome.CANCELLED).length;\n      this.logger.error('[signature-requests] The vendor accepted a request the application could not record; it was cancelled at the vendor', {\n        providerRef: sent.providerRef, vendorReferenceCount: sent.vendorReferences.length, uncancelled, error: describeCaughtError(error),\n      });\n      // A collision with another sending of this approval: that one is recorded, and its vendor request is the live one.\n      if (!requestWritten && input.requestId && isUniqueConstraintConflict(error)) {\n        return refuse(SignatureRequestSendRefusal.ALREADY_OPEN, 'Another sending of this approval recorded its request first; this one was cancelled at the vendor.', false, requestId);\n      }\n      return refuse(SignatureRequestSendRefusal.RECORD_NOT_WRITTEN,\n        `The request could not be recorded (${describeCaughtError(error)}); it was cancelled at the vendor${uncancelled > 0 ? `, ${uncancelled} reference(s) not confirmed cancelled` : ''}.`, true);\n    }\n    await this.record({\n      eventType: CoreAuditableEventType.SIGNATURE_REQUEST_SENT,\n      signatureRequestId: requestId, approvalSealId: input.approvalSealId, ...organizationId, ...subject, providerRef: sent.providerRef,\n      requiredLevel: input.requiredLevel, originalContentSha256: contentSha256,\n      signerUserIds: signerRows.map((row) => row.userId), vendorReferenceCount: sent.vendorReferences.length,\n    }, 'sent');\n    return { sent: true, signatureRequestId: requestId, signerRowIds: signerRows.map((row) => row._id) };\n  }\n\n  /**\n   * Re-read one request at its vendor, through the provider it was sent through, and move it as its one transition\n   * function says. Used by the poll and by a vendor notification's re-read trigger (#2909): a notification is never\n   * trusted, it only causes this re-read.\n   *\n   * A request already final answers `ignored_after_terminal` and is not read: a late event changes nothing, and the caller\n   * records that it was ignored. A vendor reporting the request complete moves nothing by itself: the signed document is\n   * downloaded and handed to the validator, and only {@link SignedDocumentVerdict.VALID} for every document makes it\n   * SIGNED. The state is written with a guard on the state read, so two re-reads never both move it.\n   */\n  public async refreshRequest(signatureRequestId: string, cause: SignatureRequest_RereadCause = SignatureRequest_RereadCause.POLL): Promise<SignatureRequestRefreshResult> {\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    const [row] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.SIGNATURE_REQUESTS, { _id: signatureRequestId }, context);\n    if (!row) return { signatureRequestId, outcome: SignatureRequestRefreshStop.NOT_FOUND };\n    return this.refreshRow(row, context, cause);\n  }\n\n  /**\n   * The request a vendor's notification names (#2909), through the provider it came from, or `undefined`: what the\n   * notification handler's resolver and its run look the request up by. A notification is never believed; it only causes\n   * {@link refreshRequest}.\n   */\n  public async findByVendorReference(providerRef: string, vendorReference: string): Promise<Record<string, unknown> | undefined> {\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    const [row] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(\n      CoreResourceType.SIGNATURE_REQUESTS, { providerRef, primaryVendorReference: vendorReference }, context,\n    );\n    return row;\n  }\n\n  /**\n   * Re-read the open requests, oldest move first, within `bounds`: at most `maxRequests` in the run, `maxPerOrganization`\n   * of one tenant and `maxPerProvider` of one provider. A request left out by a bound is the next run's. Never throws for\n   * one request: each is reported.\n   */\n  public async pollOpenRequests(bounds: SignatureRequestPollBounds = DEFAULT_SIGNATURE_REQUEST_POLL_BOUNDS): Promise<SignatureRequestPollReport> {\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    const open = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(\n      CoreResourceType.SIGNATURE_REQUESTS,\n      { state: { $in: [SignatureRequest_State.SENT, SignatureRequest_State.PARTIALLY_SIGNED] } },\n      context,\n      undefined,\n      { sort: [{ field: 'stateChangedAt', order: SortOrder.ASC }, { field: '_id', order: SortOrder.ASC }], limit: Math.max(1, bounds.maxRequests * 4) },\n    );\n    const perOrganization = new Map<string, number>();\n    const perProvider = new Map<string, number>();\n    const selected: Record<string, unknown>[] = [];\n    let deferredByBudget = 0;\n    for (const row of open) {\n      if (selected.length >= bounds.maxRequests) { deferredByBudget += 1; continue; }\n      const organization = typeof row.organizationId === 'string' ? row.organizationId : '';\n      const provider = String(row.providerRef);\n      if ((perOrganization.get(organization) ?? 0) >= bounds.maxPerOrganization || (perProvider.get(provider) ?? 0) >= bounds.maxPerProvider) {\n        deferredByBudget += 1;\n        continue;\n      }\n      perOrganization.set(organization, (perOrganization.get(organization) ?? 0) + 1);\n      perProvider.set(provider, (perProvider.get(provider) ?? 0) + 1);\n      selected.push(row);\n    }\n    const report = { examined: selected.length, moved: 0, unchanged: 0, notRead: 0, lostRace: 0, deferredByBudget };\n    for (const row of selected) {\n      let result: SignatureRequestRefreshResult;\n      try {\n        result = await this.refreshRow(row, context, SignatureRequest_RereadCause.POLL);\n      } catch (error) {\n        this.logger.warn('[signature-requests] A request could not be re-read', { signatureRequestId: String(row._id), error: describeCaughtError(error) });\n        report.notRead += 1;\n        continue;\n      }\n      if (result.outcome === SignatureRequest_TransitionOutcome.MOVED) report.moved += 1;\n      else if (result.outcome === SignatureRequestRefreshStop.NOT_READ) report.notRead += 1;\n      else if (result.outcome === SignatureRequestRefreshStop.LOST_RACE) report.lostRace += 1;\n      else report.unchanged += 1;\n    }\n    return report;\n  }\n\n  private async refreshRow(\n    row: Record<string, unknown>,\n    context: Awaited<ReturnType<ExecutionContextCreatorBackendService['createForInternalSystemOperation']>>,\n    cause: SignatureRequest_RereadCause,\n  ): Promise<SignatureRequestRefreshResult> {\n    const signatureRequestId = String(row._id);\n    const current = row.state as SignatureRequest_State;\n    if (SIGNATURE_REQUEST_TERMINAL_STATES.has(current)) {\n      // A vendor event for a final request changes nothing. One that a notification brought is recorded: the poll never\n      // re-reads a final request, so only a notification can be late.\n      if (cause === SignatureRequest_RereadCause.NOTIFICATION) {\n        await this.record({\n          eventType: CoreAuditableEventType.SIGNATURE_REQUEST_LATE_EVENT_IGNORED, ...signatureRequestEventFieldsOf(row), state: current, cause,\n        }, `${cause}|${Math.floor(Date.now() / 60_000)}`);\n      }\n      return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.IGNORED_AFTER_TERMINAL, state: current };\n    }\n    const providerRef = String(row.providerRef);\n    const references = Array.isArray(row.vendorReferences) ? (row.vendorReferences as unknown[]).filter((reference): reference is string => typeof reference === 'string') : [];\n    if (references.length === 0) return { signatureRequestId, outcome: SignatureRequestRefreshStop.NOT_READ, reason: 'The request holds no vendor reference.' };\n\n    const statuses: ElectronicSignature_VendorRequestStatus[] = [];\n    for (const reference of references) {\n      const read = await this.transport.read(providerRef, reference);\n      if (read.read === false) {\n        this.metrics?.recordSignatureRequestVendorNotRead({ providerRef });\n        return { signatureRequestId, outcome: SignatureRequestRefreshStop.NOT_READ, reason: read.reason };\n      }\n      statuses.push(read.reading.status);\n    }\n    let event = eventOfVendorStatuses(statuses);\n    let reason: string | undefined;\n    let validated: ValidatedSignedDocument | undefined;\n    if (event === SignatureRequest_Event.VENDOR_REPORTED_COMPLETED) {\n      const evidence = await this.validateEvidence(row, context);\n      event = evidence.event;\n      reason = evidence.reason;\n      validated = evidence.validated;\n      if (evidence.failure) this.metrics?.recordSignatureRequestEvidenceRefused({ providerRef, failure: evidence.failure });\n    }\n    if (event === undefined) return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.UNCHANGED, state: current, reason };\n    const transition = advanceSignatureRequestState(current, event);\n    if (transition.outcome !== SignatureRequest_TransitionOutcome.MOVED) return { signatureRequestId, outcome: transition.outcome, state: transition.state, event, reason };\n\n    // SIGNED names its evidence in the same write: the files first (unlinked), then the move, then the links.\n    let kept: KeptEvidence | undefined;\n    if (transition.state === SignatureRequest_State.SIGNED) {\n      const keeping = await this.keepEvidence(row, validated);\n      if ('reason' in keeping) {\n        this.metrics?.recordSignatureRequestEvidenceRefused({ providerRef, failure: SignatureRequestEvidenceFailure.NOT_KEPT });\n        return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.UNCHANGED, state: current, event, reason: keeping.reason };\n      }\n      kept = keeping;\n    }\n    const now = new Date();\n    const written = await this.repositories.atomicGuardedMutation(\n      CoreResourceType.SIGNATURE_REQUESTS,\n      { _id: row._id, state: current },\n      {\n        set: {\n          state: transition.state, stateChangedAt: now, updatedAt: now,\n          ...(kept ? {\n            signedDocument: { fileId: kept.signedDocumentFileId, updatedAt: now },\n            validationEvidence: { fileId: kept.validationEvidenceFileId, updatedAt: now },\n            validatedAt: now,\n          } : {}),\n        },\n      },\n      context,\n    );\n    if (!written) {\n      if (kept) {\n        await this.evidenceFiles?.discard(kept.signedDocumentFileId);\n        await this.evidenceFiles?.discard(kept.validationEvidenceFileId);\n      }\n      return { signatureRequestId, outcome: SignatureRequestRefreshStop.LOST_RACE, reason: 'Another re-read moved the request first.' };\n    }\n    if (kept) {\n      // A file not linkable yet (its scan is in flight) is linked by a later poll (`linkPendingEvidence`), never dropped.\n      await this.linkEvidenceFile(kept.signedDocumentFileId, row, SignatureRequestEvidenceField.SIGNED_DOCUMENT);\n      await this.linkEvidenceFile(kept.validationEvidenceFileId, row, SignatureRequestEvidenceField.VALIDATION_EVIDENCE);\n    }\n    this.logger.info('[signature-requests] A signature request moved', { signatureRequestId, from: current, to: transition.state, event });\n    this.metrics?.recordSignatureRequestMoved({ providerRef, to: transition.state });\n    await this.record({\n      eventType: CoreAuditableEventType.SIGNATURE_REQUEST_MOVED, ...signatureRequestEventFieldsOf(row), from: current, to: transition.state, event,\n      ...(reason ? { reason } : {}),\n      ...(kept ? {\n        signedContentSha256: kept.evidence.signedContentSha256,\n        signedDocumentFileId: kept.signedDocumentFileId,\n        validationEvidenceFileId: kept.validationEvidenceFileId,\n        signerUserIds: [...kept.signerUserIds],\n      } : {}),\n    }, `${current}->${transition.state}`);\n    return { signatureRequestId, outcome: SignatureRequest_TransitionOutcome.MOVED, state: transition.state, event, reason };\n  }\n\n  /**\n   * The evidence of a request the vendor reports complete: its signed document downloaded and validated. VALID is\n   * EVIDENCE_VALIDATED (with the document and its evidence, kept on the move); MISMATCHED is EVIDENCE_MISMATCHED; anything\n   * else (no validator, a download that failed, a document that did not validate) is EVIDENCE_REJECTED, which leaves the\n   * request open.\n   *\n   * One signed document per request: the engine sends one deliverable per request, so a request a vendor split into\n   * several references cannot keep its evidence in the request's own fields and is left open (stated, never guessed).\n   */\n  private async validateEvidence(\n    row: Record<string, unknown>,\n    context: Awaited<ReturnType<ExecutionContextCreatorBackendService['createForInternalSystemOperation']>>,\n  ): Promise<{ event: SignatureRequest_Event; reason?: string; validated?: ValidatedSignedDocument; failure?: SignatureRequestEvidenceFailure }> {\n    const F = SignatureRequestEvidenceFailure;\n    if (!this.validator) {\n      return { event: SignatureRequest_Event.EVIDENCE_REJECTED, failure: F.NO_VALIDATOR, reason: 'The vendor reports the request complete and no signed-document validator is bound: it stays open.' };\n    }\n    const providerRef = String(row.providerRef);\n    const references = row.vendorReferences as string[];\n    if (references.length !== 1) {\n      return { event: SignatureRequest_Event.EVIDENCE_REJECTED, failure: F.SPLIT_REQUEST, reason: `The vendor split the request into ${references.length} documents; one signed document per request is kept, so it stays open.` };\n    }\n    const evidencePolicy = this.transport.evidencePolicyOf?.(providerRef);\n    if (!evidencePolicy) return { event: SignatureRequest_Event.EVIDENCE_REJECTED, failure: F.NO_EVIDENCE_POLICY, reason: `Provider \"${providerRef}\" declares no evidence policy (trust anchors): it stays open.` };\n    const signers = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.SIGNATURE_REQUEST_SIGNERS, { signatureRequestId: row._id }, context);\n    const expectedSigners: Array<{ signerUserId: string; email: string; vendorSignerReference?: string }> = [];\n    for (const signer of signers) {\n      const userId = String(signer.signerUserId);\n      const [user] = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(CoreResourceType.USERS, { _id: userId }, context);\n      expectedSigners.push({\n        signerUserId: userId,\n        // The address the person is known by now: one they changed since they were invited does not match their certificate.\n        email: typeof user?.email === 'string' ? user.email : '',\n        ...(typeof signer.vendorSignerReference === 'string' ? { vendorSignerReference: signer.vendorSignerReference } : {}),\n      });\n    }\n    const download = await this.transport.downloadSignedDocument(providerRef, references[0]!);\n    if (download.downloaded === false) return { event: SignatureRequest_Event.EVIDENCE_REJECTED, failure: F.DOWNLOAD_FAILED, reason: download.reason };\n    const verdict = await this.validator.validate({\n      signedDocument: download.bytes, originalContentSha256: String(row.originalContentSha256), requiredLevel: row.requiredLevel as ElectronicSignature_Level,\n      providerRef, vendorEnvironment: this.transport.vendorEnvironmentOf?.(providerRef), evidencePolicy,\n      requestSentAt: row.createdAt instanceof Date ? row.createdAt : new Date(String(row.createdAt ?? row.stateChangedAt)),\n      expectedSigners,\n    });\n    if (verdict.verdict === SignedDocumentVerdict.MISMATCHED) return { event: SignatureRequest_Event.EVIDENCE_MISMATCHED, failure: F.MISMATCHED, reason: verdict.reason };\n    if (verdict.verdict !== SignedDocumentVerdict.VALID) return { event: SignatureRequest_Event.EVIDENCE_REJECTED, failure: F.REJECTED, reason: verdict.reason };\n    // The signers the evidence PROVED: those a validated certificate names. At SIMPLE a vendor's own seal names nobody.\n    const provedEmails = new Set(verdict.evidence.signatures.flatMap((signature) => (signature.signerEmail ? [signature.signerEmail] : [])));\n    return {\n      event: SignatureRequest_Event.EVIDENCE_VALIDATED,\n      validated: {\n        bytes: download.bytes, evidence: verdict.evidence,\n        signerUserIds: expectedSigners.filter((signer) => provedEmails.has(signer.email.trim().toLowerCase())).map((signer) => signer.signerUserId),\n      },\n    };\n  }\n\n  /**\n   * Link the evidence files of the requests that became SIGNED in the last {@link SIGNATURE_EVIDENCE_LINK_WINDOW_MS} and\n   * are not linked yet (#2293). Run by the poll. A file whose scan has not ended is linked by a later run; one that can\n   * never be linked is reported lost, once. Without this, a signed document scanned on write was never linked (its link\n   * is refused while it is SCANNING) and the files cleanup removed it a day later. Never throws for one request.\n   *\n   * Read cost, stated: each run reads every SIGNED request of the window and each of its two files once, a primary-key read\n   * per file, up to {@link SIGNATURE_EVIDENCE_LINK_SCAN_LIMIT} requests.\n   */\n  public async linkPendingEvidence(): Promise<SignatureEvidenceLinkReport> {\n    const report = { examined: 0, linked: 0, pending: 0, lost: 0 };\n    if (!this.evidenceFiles) return report;\n    const context = await this.executionContextCreator.createForInternalSystemOperation();\n    for await (const row of this.signedInLinkWindow(context)) {\n      report.examined += 1;\n      for (const field of [SignatureRequestEvidenceField.SIGNED_DOCUMENT, SignatureRequestEvidenceField.VALIDATION_EVIDENCE]) {\n        const fileId = (row[field] as { fileId?: unknown } | undefined)?.fileId;\n        if (typeof fileId !== 'string') continue;\n        let outcome: SignatureRequestEvidenceLinkOutcome;\n        try {\n          outcome = await this.linkEvidenceFile(fileId, row, field);\n        } catch (error) {\n          this.logger.warn('[signature-requests] An evidence file could not be linked; the next poll tries again', { signatureRequestId: String(row._id), fileId, error: describeCaughtError(error) });\n          report.pending += 1;\n          continue;\n        }\n        if (outcome === SignatureRequestEvidenceLinkOutcome.LINKED) report.linked += 1;\n        else if (SIGNATURE_EVIDENCE_LINK_RETRIED.has(outcome)) report.pending += 1;\n        else if (outcome === SignatureRequestEvidenceLinkOutcome.LOST) report.lost += 1;\n      }\n    }\n    return report;\n  }\n\n  /**\n   * Link one evidence file and say what happened: a lost file at error (once per process, with its metric), a link left\n   * for a later poll at info. Never throws; the port never does.\n   */\n  private async linkEvidenceFile(fileId: string, row: Record<string, unknown>, field: SignatureRequestEvidenceField): Promise<SignatureRequestEvidenceLinkOutcome> {\n    if (!this.evidenceFiles) return SignatureRequestEvidenceLinkOutcome.FAILED;\n    const outcome = await this.evidenceFiles.link(fileId, row, field);\n    if (outcome === SignatureRequestEvidenceLinkOutcome.ALREADY_LINKED) return outcome;\n    if (outcome === SignatureRequestEvidenceLinkOutcome.LOST) {\n      if (this.reportedLostEvidence.has(fileId)) return outcome;\n      if (this.reportedLostEvidence.size < 10_000) this.reportedLostEvidence.add(fileId);\n      this.logger.error('[signature-requests] A SIGNED request names an evidence file that can never be linked to it (gone, infected, quarantined, failed, or linked elsewhere); its evidence is not kept', {\n        signatureRequestId: String(row._id), fileId, field,\n      });\n    } else if (SIGNATURE_EVIDENCE_LINK_RETRIED.has(outcome)) {\n      this.logger.info('[signature-requests] An evidence file is not linkable yet (its scan has not ended, or the store did not answer); the poll links it later', {\n        signatureRequestId: String(row._id), fileId, field, outcome,\n      });\n    }\n    this.metrics?.recordSignatureRequestEvidenceLink({ outcome });\n    return outcome;\n  }\n\n  /**\n   * The SIGNED requests validated in the link window, oldest first, a page at a time. Pages advance on `validatedAt`, ids\n   * already seen skipped, so requests validated in the same instant are not lost between pages (the trigger's paging).\n   */\n  private async *signedInLinkWindow(context: Awaited<ReturnType<ExecutionContextCreatorBackendService['createForInternalSystemOperation']>>): AsyncGenerator<Record<string, unknown>> {\n    let from = new Date(this.clock().getTime() - SIGNATURE_EVIDENCE_LINK_WINDOW_MS);\n    const seen = new Set<string>();\n    let pageSize = SIGNATURE_EVIDENCE_LINK_SCAN_PAGE;\n    for (let scanned = 0; scanned < SIGNATURE_EVIDENCE_LINK_SCAN_LIMIT;) {\n      const page = await this.repositories.findManyForInfrastructure<Record<string, unknown>>(\n        CoreResourceType.SIGNATURE_REQUESTS,\n        { state: SignatureRequest_State.SIGNED, validatedAt: { $gte: from } },\n        context,\n        undefined,\n        { sort: [{ field: 'validatedAt', order: SortOrder.ASC }, { field: '_id', order: SortOrder.ASC }], limit: pageSize },\n      );\n      const fresh = page.filter((row) => !seen.has(String(row._id)));\n      if (fresh.length === 0) {\n        if (page.length < pageSize || pageSize >= SIGNATURE_EVIDENCE_LINK_SCAN_LIMIT) return;\n        pageSize = Math.min(pageSize * 2, SIGNATURE_EVIDENCE_LINK_SCAN_LIMIT);\n        continue;\n      }\n      for (const row of fresh) {\n        seen.add(String(row._id));\n        scanned += 1;\n        yield row;\n      }\n      if (page.length < pageSize) return;\n      const last = page[page.length - 1]!.validatedAt;\n      from = last instanceof Date ? last : new Date(String(last));\n    }\n  }\n\n  /** Write the request's two evidence files, unlinked. A reason when they cannot be kept: the request then stays open. */\n  private async keepEvidence(row: Record<string, unknown>, validated: ValidatedSignedDocument | undefined): Promise<KeptEvidence | { reason: string }> {\n    if (!validated) return { reason: 'The signed document validated and its evidence was not returned: it stays open.' };\n    if (!this.evidenceFiles) return { reason: 'No evidence store is bound, so the validated document cannot be kept: it stays open.' };\n    const id = String(row._id);\n    let signedDocumentFileId: string | undefined;\n    try {\n      signedDocumentFileId = await this.evidenceFiles.write({\n        request: row, field: SignatureRequestEvidenceField.SIGNED_DOCUMENT, bytes: validated.bytes, mimeType: 'application/pdf', filename: `signature-request-${id}-signed.pdf`,\n      });\n      const validationEvidenceFileId = await this.evidenceFiles.write({\n        request: row, field: SignatureRequestEvidenceField.VALIDATION_EVIDENCE,\n        bytes: new TextEncoder().encode(JSON.stringify(validated.evidence, null, 2)), mimeType: 'application/json', filename: `signature-request-${id}-validation.json`,\n      });\n      return { signedDocumentFileId, validationEvidenceFileId, evidence: validated.evidence, signerUserIds: validated.signerUserIds };\n    } catch (error) {\n      if (signedDocumentFileId) await this.evidenceFiles.discard(signedDocumentFileId);\n      this.logger.warn('[signature-requests] A validated signed document could not be kept; the request stays open and is read again', {\n        signatureRequestId: id, error: describeCaughtError(error),\n      });\n      return { reason: `The validated document could not be kept: ${describeCaughtError(error)}` };\n    }\n  }\n\n  /** One request event on the trail. Never throws: the request's state is the record, the trail observes it. */\n  private async record(event: Parameters<AuditLogsBackendService['logSignatureRequestEvent']>[0], occurrenceKey: string): Promise<void> {\n    if (!this.auditLogs) return;\n    await this.auditLogs.logSignatureRequestEvent(event, occurrenceKey).catch((error: unknown) => this.logger.warn('[signature-requests] A signature request event could not be recorded', {\n      signatureRequestId: event.signatureRequestId, eventType: event.eventType, error: describeCaughtError(error),\n    }));\n  }\n}\n\n/** A signed document that validated, with what the validation proved. */\ninterface ValidatedSignedDocument {\n  readonly bytes: Uint8Array;\n  readonly evidence: SignedDocumentEvidence;\n  readonly signerUserIds: readonly string[];\n}\n\n/** The evidence files a SIGNED request names. */\ninterface KeptEvidence {\n  readonly signedDocumentFileId: string;\n  readonly validationEvidenceFileId: string;\n  readonly evidence: SignedDocumentEvidence;\n  readonly signerUserIds: readonly string[];\n}\n\n/** The fields every signature request event names, read from the request row. */\nexport function signatureRequestEventFieldsOf(row: Record<string, unknown>) {\n  return {\n    signatureRequestId: String(row._id),\n    approvalSealId: String(row.approvalSealId),\n    ...(typeof row.organizationId === 'string' ? { organizationId: row.organizationId } : {}),\n    linkedResourceType: String(row.linkedResourceType),\n    linkedResourceId: String(row.linkedResourceId),\n    providerRef: String(row.providerRef),\n    requiredLevel: row.requiredLevel as ElectronicSignature_Level,\n    originalContentSha256: String(row.originalContentSha256),\n  };\n}\n\n/**\n * The one event the vendor's statuses of a request's references mean. Final vendor statuses win (a decline or an expiry\n * of any document ends the request; a cancellation at the vendor ends it), then completion of EVERY document, then any\n * progress. `undefined` when nothing moved.\n */\nexport function eventOfVendorStatuses(statuses: readonly ElectronicSignature_VendorRequestStatus[]): SignatureRequest_Event | undefined {\n  if (statuses.includes(ElectronicSignature_VendorRequestStatus.DECLINED)) return SignatureRequest_Event.VENDOR_REPORTED_DECLINED;\n  if (statuses.includes(ElectronicSignature_VendorRequestStatus.EXPIRED)) return SignatureRequest_Event.VENDOR_REPORTED_EXPIRED;\n  if (statuses.includes(ElectronicSignature_VendorRequestStatus.CANCELLED)) return SignatureRequest_Event.CANCELLED;\n  if (statuses.length > 0 && statuses.every((status) => status === ElectronicSignature_VendorRequestStatus.COMPLETED)) return SignatureRequest_Event.VENDOR_REPORTED_COMPLETED;\n  if (statuses.some((status) => status === ElectronicSignature_VendorRequestStatus.PARTIALLY_SIGNED || status === ElectronicSignature_VendorRequestStatus.COMPLETED)) {\n    return SignatureRequest_Event.VENDOR_REPORTED_SIGNER_SIGNED;\n  }\n  return undefined;\n}\n"]}

package/dist/esm/compliance/electronic-signatures/signed-document-validation.backend.d.ts

@@ -8,6 +8,53 @@
  * The answer carries the EVIDENCE of a valid document: what was checked, against which chain, at which date, with which
  * revocation data. The service keeps it as a file beside the signed document, so a request says "validated at T with this
  * revocation data" for as long as its record lives.
+ *
+ * ## Identity proofing that does not rely on the operator's contact data: DESIGNED, not built (#2293, 2026-11-12)
+ *
+ * **The gap.** Today a signer is proved by the e-mail address their certificate carries, compared with the address on
+ * their user record (`expectedSigners[].email`), and the vendor invites them at that address. Both are the OPERATOR's
+ * data: a person who can write the users table can change a signer's address to their own, receive the invitation, and
+ * complete an advanced signature that this validator accepts as the signer's.
+ *
+ * **What the field does, which settles the approach.** An advanced signature must be "capable of identifying the
+ * signatory" (eIDAS Art. 26(b)). Who the signatory is gets established by IDENTITY PROOFING, which ETSI TS 119 461
+ * V2.1.1 specifies for trust services at two levels, Baseline LoIP (substantial) and Extended LoIP (high) (§3.1), through
+ * a fixed set of use cases: an identity document with physical presence, attended remote or unattended remote; eID means;
+ * an existing signature with certificate (§9.2.1–§9.2.5). An identity proofing provider conforming to it may name its
+ * policy with 0.4.0.19461.1.1 (baseline) or 0.4.0.19461.1.2 (extended) (§4.6). Vendors expose it as a per-signer option
+ * chosen when the request is sent (DocuSign's recipient `identityVerification` names an account's ID-verification
+ * workflow), and the identity it established reaches the SIGNED DOCUMENT as the signer's certificate, issued after that
+ * proofing under a certificate policy the vendor publishes.
+ * spec-cite: Regulation (EU) No 910/2014 Art. 26 (point b), retained text at legislation.gov.uk/eur/2014/910/article/26;
+ * ETSI TS 119 461 V2.1.1 (2025-02) §3.1 (Baseline LoIP, extended LoIP), §4.6 (the two OIDs), §9.2 (use cases).
+ *
+ * **The design.**
+ * 1. A requirement `ElectronicSignature_IdentityProofing` (`CONTACT_CHANNEL`, today's and the default; `BASELINE_LOIP`;
+ *    `EXTENDED_LOIP`, which also meets baseline) beside the level, in `@wildo-ai/external-connectors-models`, declared on a
+ *    tool's `electronicSignature` and RECORDED on the request (`requiredIdentityProofing`: a field, so a migration on the
+ *    five surfaces), because a request is validated against what it was sent with, not against today's tool.
+ * 2. The provider contract declares `supportedIdentityProofing` (startup refuses a requirement it cannot meet, as for
+ *    levels) and, in `evidence`, `identityProofingCertificatePolicies`: per level, the certificate-policy OIDs of the
+ *    certificates the vendor issues only after proofing at that level. The send input carries the requirement per signer.
+ * 3. This validator proves it from the document, never from the vendor's API: each expected signer's signature must chain
+ *    to a pinned anchor (as today) AND its certificate must carry a declared OID of the required level or a higher one,
+ *    else MISMATCHED. The evidence records the achieved proofing level and the certificate's verified name.
+ * 4. The verified name is bound to a name the operator could not rewrite afterwards: the approver's name as SEALED in the
+ *    approval (the approver disclosure, committed to by the custodian's signature, #2903), not their current profile.
+ *    The comparison is on name tokens (NFKD, marks removed, case-folded, order ignored) of the certificate's
+ *    `givenName` + `surname`, else its `commonName`; a difference is MISMATCHED. An approver whose sealed name was erased
+ *    leaves the request open. The vendor is sent that sealed name, so its own proofing checks the same identity.
+ *
+ * **Why it is not built yet.** Every step needs a vendor that offers ID-verified signing and publishes the policy its
+ * certificates carry, and none is integrated: IgniSign (#2912) and the simulator (#2911) are where it is proven. Without
+ * them the requirement would be refused at startup by every provider, so nothing could use it.
+ *
+ * **Rejected.** The vendor's identity-evidence API (an ID-verification result read over HTTP) as the proof: it is the
+ * vendor's word, unsigned and outside the document, which is exactly what "the vendor's API is not the authority" rules
+ * out. Comparing the certificate's name with the user's CURRENT profile name: that is operator data again, the threat
+ * itself.
+ * **What would remain.** A person who changed the approver's name and address BEFORE the approval was sealed, and also
+ * holds an identity document in that name.
  */
 import type { ElectronicSignature_Level, ElectronicSignature_VendorEnvironment } from '@wildo-ai/external-connectors-models';
 /**

package/dist/esm/compliance/electronic-signatures/signed-document-validation.backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signed-document-validation.backend.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signed-document-validation.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,yBAAyB,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAE7H;;;GAGG;AACH,oBAAY,qBAAqB;IAC/B;iHAC6G;IAC7G,KAAK,UAAU;IACf;sEACkE;IAClE,QAAQ,aAAa;IACrB,0HAA0H;IAC1H,UAAU,eAAe;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9G,qFAAqF;IACrF,QAAQ,CAAC,oCAAoC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClE;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;IACpC,8FAA8F;IAC9F,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,qCAAqC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;IACtD,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7I;AAED,0CAA0C;AAC1C,oBAAY,4BAA4B;IACtC,sGAAsG;IACtG,GAAG,QAAQ;IACX,6GAA6G;IAC7G,IAAI,SAAS;CACd;AAED,kDAAkD;AAClD,oBAAY,8BAA8B;IACxC,6GAA6G;IAC7G,QAAQ,aAAa;IACrB,wEAAwE;IACxE,OAAO,YAAY;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qDAAqD;AACrD,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,wFAAwF;IACxF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,uEAAuE;AACvE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;IAClE,QAAQ,CAAC,UAAU,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC9D;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErH,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACnF"}
+{"version":3,"file":"signed-document-validation.backend.d.ts","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signed-document-validation.backend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,KAAK,EAAE,yBAAyB,EAAE,qCAAqC,EAAE,MAAM,sCAAsC,CAAC;AAE7H;;;GAGG;AACH,oBAAY,qBAAqB;IAC/B;iHAC6G;IAC7G,KAAK,UAAU;IACf;sEACkE;IAClE,QAAQ,aAAa;IACrB,0HAA0H;IAC1H,UAAU,eAAe;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,yCAAyC;IACzC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9G,qFAAqF;IACrF,QAAQ,CAAC,oCAAoC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClE;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;IACpC,8FAA8F;IAC9F,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,qCAAqC,GAAG,SAAS,CAAC;IAC9E,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;IACtD,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC;IAC7B;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7I;AAED,0CAA0C;AAC1C,oBAAY,4BAA4B;IACtC,sGAAsG;IACtG,GAAG,QAAQ;IACX,6GAA6G;IAC7G,IAAI,SAAS;CACd;AAED,kDAAkD;AAClD,oBAAY,8BAA8B;IACxC,6GAA6G;IAC7G,QAAQ,aAAa;IACrB,wEAAwE;IACxE,OAAO,YAAY;CACpB;AAED,8EAA8E;AAC9E,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,qDAAqD;AACrD,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,yBAAyB,CAAC;IAClD,wFAAwF;IACxF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,uEAAuE;AACvE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,qCAAqC,CAAC;IAClE,QAAQ,CAAC,UAAU,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC9D;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC,QAAQ,GAAG,qBAAqB,CAAC,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErH,iEAAiE;AACjE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACnF"}

package/dist/esm/compliance/electronic-signatures/signed-document-validation.backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"signed-document-validation.backend.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signed-document-validation.backend.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,MAAM,CAAN,IAAY,qBASX;AATD,WAAY,qBAAqB;IAC/B;iHAC6G;IAC7G,wCAAe,CAAA;IACf;sEACkE;IAClE,8CAAqB,CAAA;IACrB,0HAA0H;IAC1H,kDAAyB,CAAA;AAC3B,CAAC,EATW,qBAAqB,KAArB,qBAAqB,QAShC;AA+BD,0CAA0C;AAC1C,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,sGAAsG;IACtG,2CAAW,CAAA;IACX,6GAA6G;IAC7G,6CAAa,CAAA;AACf,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED,kDAAkD;AAClD,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,6GAA6G;IAC7G,uDAAqB,CAAA;IACrB,wEAAwE;IACxE,qDAAmB,CAAA;AACrB,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC","sourcesContent":["/**\n * # The signed-document validator port (#2293)\n *\n * What the signature-request service asks of the validator, and what the validator answers. A port, so the request's life\n * does not depend on the implementation: the engine binds `PadesSignedDocumentValidator`; with none bound, a request the\n * vendor reports complete stays open (it is never SIGNED on the vendor's word).\n *\n * The answer carries the EVIDENCE of a valid document: what was checked, against which chain, at which date, with which\n * revocation data. The service keeps it as a file beside the signed document, so a request says \"validated at T with this\n * revocation data\" for as long as its record lives.\n */\nimport type { ElectronicSignature_Level, ElectronicSignature_VendorEnvironment } from '@wildo-ai/external-connectors-models';\n\n/**\n * What the validator concluded about one signed document. The engine never takes the vendor's word: a request becomes\n * SIGNED only on {@link SignedDocumentVerdict.VALID} for every document of the request.\n */\nexport enum SignedDocumentVerdict {\n  /** The document validated (byte range, signed revision equal to the bytes sent, chain to a pinned anchor, revocation\n   *  data fetched and stored, no refused algorithm) and proves every expected signer at the required level. */\n  VALID = 'valid',\n  /** The document did not validate: tampered, updated after the signature, an untrusted or development chain, a refused\n   *  algorithm. The request stays open for a document that does. */\n  REJECTED = 'rejected',\n  /** The document validated and proves another signer, or a lower level, than required: the request can never be SIGNED. */\n  MISMATCHED = 'mismatched',\n}\n\n/**\n * The provider's declaration of what its evidence must chain to (from its contract's `evidence`). Anchors are declared\n * PER VENDOR ENVIRONMENT, and the validator reads only the set of the environment the contract reaches: production pins\n * production anchors only.\n */\nexport interface SignedDocumentEvidencePolicy {\n  /** PEM certificates, per environment. */\n  readonly trustAnchorsPem: Readonly<Partial<Record<ElectronicSignature_VendorEnvironment, readonly string[]>>>;\n  /** The certificate-policy OIDs of the vendor's advanced signatures' certificates. */\n  readonly advancedSignatureCertificatePolicies: readonly string[];\n}\n\nexport interface SignedDocumentValidationInput {\n  readonly signedDocument: Uint8Array;\n  /** The SHA-256 of the bytes sent: the signed revision must start with exactly these bytes. */\n  readonly originalContentSha256: string;\n  readonly requiredLevel: ElectronicSignature_Level;\n  readonly providerRef: string;\n  readonly vendorEnvironment: ElectronicSignature_VendorEnvironment | undefined;\n  readonly evidencePolicy: SignedDocumentEvidencePolicy;\n  /** When the request was sent: no signature can predate it. */\n  readonly requestSentAt: Date;\n  /**\n   * The signers the request invited, each with the e-mail address on their record NOW (an address changed since the\n   * invitation does not match their certificate; an empty one cannot be compared, and leaves the request open).\n   */\n  readonly expectedSigners: ReadonlyArray<{ readonly signerUserId: string; readonly email: string; readonly vendorSignerReference?: string }>;\n}\n\n/** What a piece of revocation data is. */\nexport enum SignedDocumentRevocationKind {\n  /** A certificate revocation list (RFC 5280 §5), signed by the issuer of the certificates it lists. */\n  CRL = 'crl',\n  /** An OCSP response (RFC 6960) about one certificate. Read when the signature carries one; never fetched. */\n  OCSP = 'ocsp',\n}\n\n/** Where a piece of revocation data came from. */\nexport enum SignedDocumentRevocationSource {\n  /** Carried by the signature itself (its CMS `crls`, or Adobe's revocation-information archive attribute). */\n  EMBEDDED = 'embedded',\n  /** Fetched at receipt from the certificate's CRL distribution point. */\n  FETCHED = 'fetched',\n}\n\n/** One piece of revocation data a validation used, kept with the evidence. */\nexport interface SignedDocumentRevocationData {\n  readonly kind: SignedDocumentRevocationKind;\n  readonly source: SignedDocumentRevocationSource;\n  readonly url?: string;\n  readonly fetchedAt?: string;\n  readonly derBase64: string;\n}\n\n/** What one signature of a valid document proved. */\nexport interface SignedDocumentSignatureEvidence {\n  readonly index: number;\n  readonly subFilter: string;\n  readonly byteRange: readonly number[];\n  readonly signerSubject: string;\n  readonly signerEmail?: string;\n  readonly signerCertificateSerialHex: string;\n  readonly certificatePolicies: readonly string[];\n  readonly achievedLevel: ElectronicSignature_Level;\n  /** The signing time the signature dictionary CLAIMS: the vendor's word, never proof. */\n  readonly claimedSigningTime?: string;\n  /** The date the chain and revocation were checked at. */\n  readonly checkDate: string;\n  /** The validated chain, signer first, anchor last, as DER in base64. */\n  readonly chainDerBase64: readonly string[];\n}\n\n/** The evidence of a valid document, kept as a JSON file beside it. */\nexport interface SignedDocumentEvidence {\n  readonly validatorVersion: 1;\n  readonly checkedAt: string;\n  readonly originalContentSha256: string;\n  readonly signedContentSha256: string;\n  readonly originalLength: number;\n  readonly vendorEnvironment: ElectronicSignature_VendorEnvironment;\n  readonly signatures: readonly SignedDocumentSignatureEvidence[];\n  readonly revocation: readonly SignedDocumentRevocationData[];\n}\n\nexport type SignedDocumentValidation =\n  | { readonly verdict: SignedDocumentVerdict.VALID; readonly evidence: SignedDocumentEvidence }\n  | { readonly verdict: SignedDocumentVerdict.REJECTED | SignedDocumentVerdict.MISMATCHED; readonly reason: string };\n\n/** The validator of a signed document. See the module header. */\nexport interface SignedDocumentValidator {\n  validate(input: SignedDocumentValidationInput): Promise<SignedDocumentValidation>;\n}\n"]}
+{"version":3,"file":"signed-document-validation.backend.js","sourceRoot":"","sources":["../../../../src/compliance/electronic-signatures/signed-document-validation.backend.ts"],"names":[],"mappings":"AA4DA;;;GAGG;AACH,MAAM,CAAN,IAAY,qBASX;AATD,WAAY,qBAAqB;IAC/B;iHAC6G;IAC7G,wCAAe,CAAA;IACf;sEACkE;IAClE,8CAAqB,CAAA;IACrB,0HAA0H;IAC1H,kDAAyB,CAAA;AAC3B,CAAC,EATW,qBAAqB,KAArB,qBAAqB,QAShC;AA+BD,0CAA0C;AAC1C,MAAM,CAAN,IAAY,4BAKX;AALD,WAAY,4BAA4B;IACtC,sGAAsG;IACtG,2CAAW,CAAA;IACX,6GAA6G;IAC7G,6CAAa,CAAA;AACf,CAAC,EALW,4BAA4B,KAA5B,4BAA4B,QAKvC;AAED,kDAAkD;AAClD,MAAM,CAAN,IAAY,8BAKX;AALD,WAAY,8BAA8B;IACxC,6GAA6G;IAC7G,uDAAqB,CAAA;IACrB,wEAAwE;IACxE,qDAAmB,CAAA;AACrB,CAAC,EALW,8BAA8B,KAA9B,8BAA8B,QAKzC","sourcesContent":["/**\n * # The signed-document validator port (#2293)\n *\n * What the signature-request service asks of the validator, and what the validator answers. A port, so the request's life\n * does not depend on the implementation: the engine binds `PadesSignedDocumentValidator`; with none bound, a request the\n * vendor reports complete stays open (it is never SIGNED on the vendor's word).\n *\n * The answer carries the EVIDENCE of a valid document: what was checked, against which chain, at which date, with which\n * revocation data. The service keeps it as a file beside the signed document, so a request says \"validated at T with this\n * revocation data\" for as long as its record lives.\n *\n * ## Identity proofing that does not rely on the operator's contact data: DESIGNED, not built (#2293, 2026-11-12)\n *\n * **The gap.** Today a signer is proved by the e-mail address their certificate carries, compared with the address on\n * their user record (`expectedSigners[].email`), and the vendor invites them at that address. Both are the OPERATOR's\n * data: a person who can write the users table can change a signer's address to their own, receive the invitation, and\n * complete an advanced signature that this validator accepts as the signer's.\n *\n * **What the field does, which settles the approach.** An advanced signature must be \"capable of identifying the\n * signatory\" (eIDAS Art. 26(b)). Who the signatory is gets established by IDENTITY PROOFING, which ETSI TS 119 461\n * V2.1.1 specifies for trust services at two levels, Baseline LoIP (substantial) and Extended LoIP (high) (§3.1), through\n * a fixed set of use cases: an identity document with physical presence, attended remote or unattended remote; eID means;\n * an existing signature with certificate (§9.2.1–§9.2.5). An identity proofing provider conforming to it may name its\n * policy with 0.4.0.19461.1.1 (baseline) or 0.4.0.19461.1.2 (extended) (§4.6). Vendors expose it as a per-signer option\n * chosen when the request is sent (DocuSign's recipient `identityVerification` names an account's ID-verification\n * workflow), and the identity it established reaches the SIGNED DOCUMENT as the signer's certificate, issued after that\n * proofing under a certificate policy the vendor publishes.\n * spec-cite: Regulation (EU) No 910/2014 Art. 26 (point b), retained text at legislation.gov.uk/eur/2014/910/article/26;\n * ETSI TS 119 461 V2.1.1 (2025-02) §3.1 (Baseline LoIP, extended LoIP), §4.6 (the two OIDs), §9.2 (use cases).\n *\n * **The design.**\n * 1. A requirement `ElectronicSignature_IdentityProofing` (`CONTACT_CHANNEL`, today's and the default; `BASELINE_LOIP`;\n *    `EXTENDED_LOIP`, which also meets baseline) beside the level, in `@wildo-ai/external-connectors-models`, declared on a\n *    tool's `electronicSignature` and RECORDED on the request (`requiredIdentityProofing`: a field, so a migration on the\n *    five surfaces), because a request is validated against what it was sent with, not against today's tool.\n * 2. The provider contract declares `supportedIdentityProofing` (startup refuses a requirement it cannot meet, as for\n *    levels) and, in `evidence`, `identityProofingCertificatePolicies`: per level, the certificate-policy OIDs of the\n *    certificates the vendor issues only after proofing at that level. The send input carries the requirement per signer.\n * 3. This validator proves it from the document, never from the vendor's API: each expected signer's signature must chain\n *    to a pinned anchor (as today) AND its certificate must carry a declared OID of the required level or a higher one,\n *    else MISMATCHED. The evidence records the achieved proofing level and the certificate's verified name.\n * 4. The verified name is bound to a name the operator could not rewrite afterwards: the approver's name as SEALED in the\n *    approval (the approver disclosure, committed to by the custodian's signature, #2903), not their current profile.\n *    The comparison is on name tokens (NFKD, marks removed, case-folded, order ignored) of the certificate's\n *    `givenName` + `surname`, else its `commonName`; a difference is MISMATCHED. An approver whose sealed name was erased\n *    leaves the request open. The vendor is sent that sealed name, so its own proofing checks the same identity.\n *\n * **Why it is not built yet.** Every step needs a vendor that offers ID-verified signing and publishes the policy its\n * certificates carry, and none is integrated: IgniSign (#2912) and the simulator (#2911) are where it is proven. Without\n * them the requirement would be refused at startup by every provider, so nothing could use it.\n *\n * **Rejected.** The vendor's identity-evidence API (an ID-verification result read over HTTP) as the proof: it is the\n * vendor's word, unsigned and outside the document, which is exactly what \"the vendor's API is not the authority\" rules\n * out. Comparing the certificate's name with the user's CURRENT profile name: that is operator data again, the threat\n * itself.\n * **What would remain.** A person who changed the approver's name and address BEFORE the approval was sealed, and also\n * holds an identity document in that name.\n */\nimport type { ElectronicSignature_Level, ElectronicSignature_VendorEnvironment } from '@wildo-ai/external-connectors-models';\n\n/**\n * What the validator concluded about one signed document. The engine never takes the vendor's word: a request becomes\n * SIGNED only on {@link SignedDocumentVerdict.VALID} for every document of the request.\n */\nexport enum SignedDocumentVerdict {\n  /** The document validated (byte range, signed revision equal to the bytes sent, chain to a pinned anchor, revocation\n   *  data fetched and stored, no refused algorithm) and proves every expected signer at the required level. */\n  VALID = 'valid',\n  /** The document did not validate: tampered, updated after the signature, an untrusted or development chain, a refused\n   *  algorithm. The request stays open for a document that does. */\n  REJECTED = 'rejected',\n  /** The document validated and proves another signer, or a lower level, than required: the request can never be SIGNED. */\n  MISMATCHED = 'mismatched',\n}\n\n/**\n * The provider's declaration of what its evidence must chain to (from its contract's `evidence`). Anchors are declared\n * PER VENDOR ENVIRONMENT, and the validator reads only the set of the environment the contract reaches: production pins\n * production anchors only.\n */\nexport interface SignedDocumentEvidencePolicy {\n  /** PEM certificates, per environment. */\n  readonly trustAnchorsPem: Readonly<Partial<Record<ElectronicSignature_VendorEnvironment, readonly string[]>>>;\n  /** The certificate-policy OIDs of the vendor's advanced signatures' certificates. */\n  readonly advancedSignatureCertificatePolicies: readonly string[];\n}\n\nexport interface SignedDocumentValidationInput {\n  readonly signedDocument: Uint8Array;\n  /** The SHA-256 of the bytes sent: the signed revision must start with exactly these bytes. */\n  readonly originalContentSha256: string;\n  readonly requiredLevel: ElectronicSignature_Level;\n  readonly providerRef: string;\n  readonly vendorEnvironment: ElectronicSignature_VendorEnvironment | undefined;\n  readonly evidencePolicy: SignedDocumentEvidencePolicy;\n  /** When the request was sent: no signature can predate it. */\n  readonly requestSentAt: Date;\n  /**\n   * The signers the request invited, each with the e-mail address on their record NOW (an address changed since the\n   * invitation does not match their certificate; an empty one cannot be compared, and leaves the request open).\n   */\n  readonly expectedSigners: ReadonlyArray<{ readonly signerUserId: string; readonly email: string; readonly vendorSignerReference?: string }>;\n}\n\n/** What a piece of revocation data is. */\nexport enum SignedDocumentRevocationKind {\n  /** A certificate revocation list (RFC 5280 §5), signed by the issuer of the certificates it lists. */\n  CRL = 'crl',\n  /** An OCSP response (RFC 6960) about one certificate. Read when the signature carries one; never fetched. */\n  OCSP = 'ocsp',\n}\n\n/** Where a piece of revocation data came from. */\nexport enum SignedDocumentRevocationSource {\n  /** Carried by the signature itself (its CMS `crls`, or Adobe's revocation-information archive attribute). */\n  EMBEDDED = 'embedded',\n  /** Fetched at receipt from the certificate's CRL distribution point. */\n  FETCHED = 'fetched',\n}\n\n/** One piece of revocation data a validation used, kept with the evidence. */\nexport interface SignedDocumentRevocationData {\n  readonly kind: SignedDocumentRevocationKind;\n  readonly source: SignedDocumentRevocationSource;\n  readonly url?: string;\n  readonly fetchedAt?: string;\n  readonly derBase64: string;\n}\n\n/** What one signature of a valid document proved. */\nexport interface SignedDocumentSignatureEvidence {\n  readonly index: number;\n  readonly subFilter: string;\n  readonly byteRange: readonly number[];\n  readonly signerSubject: string;\n  readonly signerEmail?: string;\n  readonly signerCertificateSerialHex: string;\n  readonly certificatePolicies: readonly string[];\n  readonly achievedLevel: ElectronicSignature_Level;\n  /** The signing time the signature dictionary CLAIMS: the vendor's word, never proof. */\n  readonly claimedSigningTime?: string;\n  /** The date the chain and revocation were checked at. */\n  readonly checkDate: string;\n  /** The validated chain, signer first, anchor last, as DER in base64. */\n  readonly chainDerBase64: readonly string[];\n}\n\n/** The evidence of a valid document, kept as a JSON file beside it. */\nexport interface SignedDocumentEvidence {\n  readonly validatorVersion: 1;\n  readonly checkedAt: string;\n  readonly originalContentSha256: string;\n  readonly signedContentSha256: string;\n  readonly originalLength: number;\n  readonly vendorEnvironment: ElectronicSignature_VendorEnvironment;\n  readonly signatures: readonly SignedDocumentSignatureEvidence[];\n  readonly revocation: readonly SignedDocumentRevocationData[];\n}\n\nexport type SignedDocumentValidation =\n  | { readonly verdict: SignedDocumentVerdict.VALID; readonly evidence: SignedDocumentEvidence }\n  | { readonly verdict: SignedDocumentVerdict.REJECTED | SignedDocumentVerdict.MISMATCHED; readonly reason: string };\n\n/** The validator of a signed document. See the module header. */\nexport interface SignedDocumentValidator {\n  validate(input: SignedDocumentValidationInput): Promise<SignedDocumentValidation>;\n}\n"]}

package/dist/esm/external-providers/services/content-safety.backend.service.d.ts

@@ -1,5 +1,5 @@
-import { type AgentCallTraceSink, type AgentTraceabilityPolicy, A2ATokenBudgetDenialReason, type TokenSpendCeiling } from '@wildo-ai/saas-models';
-import { ContentSafety_HarmCategory, type ContentSafety_HarmCategoryVerdict, type ContentSafety_PromptInjectionLimits, ContentSafetyModerationOutcome, ContentSafetyScreeningOutcome } from '@wildo-ai/external-connectors-models';
+import { type AgentCallTraceSink, type AgentTraceabilityPolicy, A2ATokenBudgetDenialReason, type EnvironmentAgentContentGuardrailsReading, type TokenSpendCeiling } from '@wildo-ai/saas-models';
+import { ContentSafetyProvider_OperationKey, ContentSafety_HarmCategory, type ContentSafety_HarmCategoryVerdict, type ContentSafety_PromptInjectionLimits, ContentSafetyModerationOutcome, ContentSafetyScreeningOutcome } from '@wildo-ai/external-connectors-models';
 import type { LoggerService } from '../../monitoring/logger/services/logger.service';
 import type { ErrorBuilderBackendService } from '../../errors/services/error-builder.backend.service';
 import type { ExternalProvidersRegistryBackendService } from '../../external-providers/services/external-providers-registry.backend.service';
@@ -95,6 +95,31 @@ export declare class ContentSafetyBackendService {
     private admitScreening;
     /** #3030: charge the text records a screening or moderation sent (counted once the vendor answered). Never throws. */
     private chargeScreening;
+    /**
+     * What this environment declared about agents' classifier-backed guardrails where no classifier serves them
+     * (`agentContentGuardrails` in `wildo.infra.<env>.config.ts`, projected to `WILDO_AGENT_CONTENT_GUARDRAILS`). Read once,
+     * when the service is built: the posture of a running process does not change under it. An unreadable value reads as
+     * REFUSE (fail closed), and the startup report says so.
+     */
+    private readonly guardrailsWithoutClassifier;
+    /** The environment's declaration, as read when the service was built. */
+    agentGuardrailsWithoutClassifier(): EnvironmentAgentContentGuardrailsReading;
+    /**
+     * Whether a classifier for `operation` is PRESENT in this environment, as opposed to absent from it. Absent (`false`)
+     * in exactly three cases, each a fact of this environment's configuration:
+     *
+     * - the configuration declares no provider for `AI_CONTENT_SAFETY`;
+     * - the selected provider's contract does not offer `operation` (`openai-moderation` declares no screening);
+     * - the selected provider's credentials are not authored HERE: its API key slot, or the host slot it reads its endpoint
+     *   from, is unset in this environment. The classifier is declared once for the whole application, so this is the one
+     *   way an environment can be without it while another has it (staging without an Azure key, production with one).
+     *
+     * Everything else is `true` (present): a declared provider that did not load (a data residency refusal), a malformed
+     * host, a category it does not assess, a key that is set and wrong, an outage, and anything this cannot read. An
+     * environment that declares it runs agents unguarded where no classifier is present must still refuse, or withhold,
+     * when one is there and broken, because that is a failure, not the absence the environment declared.
+     */
+    classifierPresentFor(operation: ContentSafetyProvider_OperationKey): boolean;
     /**
      * Whether this process records the screenings it makes (a provider-call recorder is bound). An agent that declares
      * screening refuses to run where it does not: a screening nobody can show happened is the gap R7 exists to close.

package/dist/esm/external-providers/services/content-safety.backend.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content-safety.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/services/content-safety.backend.service.ts"],"names":[],"mappings":"AAiDA,OAAO,EAUL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,0BAA0B,EAG1B,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAEL,0BAA0B,EAK1B,KAAK,iCAAiC,EAEtC,KAAK,mCAAmC,EAGxC,8BAA8B,EAC9B,6BAA6B,EAC9B,MAAM,sCAAsC,CAAC;AAI9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iFAAiF,CAAC;AAI1I,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,+EAA+E,CAAC;AAGrI,0HAA0H;AAC1H,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD,4GAA4G;AAC5G,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,6CAA6C,SAAU,CAAC;AAErE,yDAAyD;AACzD,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;CAC7C;AAED,mCAAmC;AACnC,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,KAAK,GAAG,6BAA6B,CAAC,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvI;IACE,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,YAAY,CAAC;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iHAAiH;IACjH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yGAAyG;IACzG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACjE,CAAC;AAEN,oCAAoC;AACpC,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yGAAyG;IACzG,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;CACnE,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,aAAa,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wGAAwG;IACxG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0GAA0G;IAC1G,QAAQ,CAAC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACjE,CAAC;AAsBN,gIAAgI;AAChI,MAAM,MAAM,8BAA8B,GACtC;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAA;CAAE,CAAC;AAkBhE;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CA2B/E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAInE;AAED,oHAAoH;AACpH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,mCAAmC,GAAG,MAAM,EAAE,EAAE,CAgBvH;AAgCD,qBACa,2BAA2B;IAED,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAChB,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAGrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBARtC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAC3B,yBAAyB,EAAE,uCAAuC,EACpE,cAAc,CAAC,EAAE,kBAAkB,EAC9B,gBAAgB,CAAC,EAAE,uBAAuB,EAC7C,oBAAoB,CAAC,EAAE,kCAAkC,EAGxD,UAAU,CAAC,EAAE,eAAe;IAG7G;;;;OAIG;YACW,cAAc;IAoB5B,sHAAsH;IACtH,OAAO,CAAC,eAAe;IASvB;;;OAGG;IACI,iBAAiB,IAAI,OAAO;IAInC;;;;OAIG;IACI,6BAA6B,IAAI,8BAA8B;IAKtE;;;;OAIG;IACI,8BAA8B,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,GAAG,8BAA8B;IAKxH;;;;;;;;;OASG;IACU,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAmC1F;;;;;;;;;;;;OAYG;IACU,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,0BAA0B,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAqCpI;;;;OAIG;YACW,uBAAuB;YASvB,QAAQ;IAwCtB,0HAA0H;YAC5G,YAAY;YAwBZ,MAAM;IA+BpB,8GAA8G;YAChG,WAAW;YAsBX,IAAI;IAkClB,4GAA4G;IAC5G,OAAO,CAAC,WAAW;IAYnB;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAqB/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAalB;;;;OAIG;IACH,OAAO,CAAC,4BAA4B;IA0BpC,kIAAkI;IAClI,OAAO,CAAC,kBAAkB;IAwB1B,kIAAkI;IAClI,OAAO,CAAC,cAAc;IAkBtB;;;OAGG;YACW,SAAS;CAgDxB"}
+{"version":3,"file":"content-safety.backend.service.d.ts","sourceRoot":"","sources":["../../../../src/external-providers/services/content-safety.backend.service.ts"],"names":[],"mappings":"AAiDA,OAAO,EAUL,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,0BAA0B,EAI1B,KAAK,wCAAwC,EAC7C,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,kCAAkC,EAClC,0BAA0B,EAK1B,KAAK,iCAAiC,EAEtC,KAAK,mCAAmC,EAGxC,8BAA8B,EAC9B,6BAA6B,EAC9B,MAAM,sCAAsC,CAAC;AAI9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AACnH,OAAO,KAAK,EAAE,uCAAuC,EAAE,MAAM,4FAA4F,CAAC;AAC1J,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iFAAiF,CAAC;AAI1I,OAAO,KAAK,EAAkB,eAAe,EAAE,MAAM,+EAA+E,CAAC;AAGrI,0HAA0H;AAC1H,eAAO,MAAM,iCAAiC,QAAS,CAAC;AAExD,4GAA4G;AAC5G,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,6CAA6C,SAAU,CAAC;AAErE,yDAAyD;AACzD,eAAO,MAAM,8BAA8B,0BAA0B,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;CAC7C;AAED,mCAAmC;AACnC,MAAM,MAAM,4BAA4B,GACpC;IAAE,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,KAAK,GAAG,6BAA6B,CAAC,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACvI;IACE,QAAQ,CAAC,OAAO,EAAE,6BAA6B,CAAC,YAAY,CAAC;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iHAAiH;IACjH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yGAAyG;IACzG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACjE,CAAC;AAEN,oCAAoC;AACpC,MAAM,MAAM,6BAA6B,GACrC;IACE,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,SAAS,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,yGAAyG;IACzG,QAAQ,CAAC,UAAU,EAAE,SAAS,iCAAiC,EAAE,CAAC;CACnE,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC,aAAa,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wGAAwG;IACxG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0GAA0G;IAC1G,QAAQ,CAAC,mBAAmB,CAAC,EAAE,gCAAgC,CAAC;CACjE,CAAC;AAsBN,gIAAgI;AAChI,MAAM,MAAM,8BAA8B,GACtC;IAAE,UAAU,EAAE,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAA;CAAE,CAAC;AAkBhE;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,CA2B/E;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAInE;AAED,oHAAoH;AACpH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,mCAAmC,GAAG,MAAM,EAAE,EAAE,CAgBvH;AAgCD,qBACa,2BAA2B;IAED,OAAO,CAAC,QAAQ,CAAC,MAAM;IACV,OAAO,CAAC,QAAQ,CAAC,YAAY;IAChB,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC5C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACrC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAGrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;gBARtC,MAAM,EAAE,aAAa,EACR,YAAY,EAAE,0BAA0B,EAC3B,yBAAyB,EAAE,uCAAuC,EACpE,cAAc,CAAC,EAAE,kBAAkB,EAC9B,gBAAgB,CAAC,EAAE,uBAAuB,EAC7C,oBAAoB,CAAC,EAAE,kCAAkC,EAGxD,UAAU,CAAC,EAAE,eAAe;IAG7G;;;;OAIG;YACW,cAAc;IAoB5B,sHAAsH;IACtH,OAAO,CAAC,eAAe;IASvB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAgG;IAE5I,yEAAyE;IAClE,gCAAgC,IAAI,wCAAwC;IAInF;;;;;;;;;;;;;;OAcG;IACI,oBAAoB,CAAC,SAAS,EAAE,kCAAkC,GAAG,OAAO;IAenF;;;OAGG;IACI,iBAAiB,IAAI,OAAO;IAInC;;;;OAIG;IACI,6BAA6B,IAAI,8BAA8B;IAKtE;;;;OAIG;IACI,8BAA8B,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,GAAG,8BAA8B;IAKxH;;;;;;;;;OASG;IACU,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,4BAA4B,CAAC;IAmC1F;;;;;;;;;;;;OAYG;IACU,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,0BAA0B,EAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAqCpI;;;;OAIG;YACW,uBAAuB;YASvB,QAAQ;IAwCtB,0HAA0H;YAC5G,YAAY;YAwBZ,MAAM;IA+BpB,8GAA8G;YAChG,WAAW;YAsBX,IAAI;IAkClB,4GAA4G;IAC5G,OAAO,CAAC,WAAW;IAYnB;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAqB/B;;;;;;OAMG;IACH,OAAO,CAAC,UAAU;IAalB;;;;OAIG;IACH,OAAO,CAAC,4BAA4B;IA0BpC,kIAAkI;IAClI,OAAO,CAAC,kBAAkB;IAwB1B,kIAAkI;IAClI,OAAO,CAAC,cAAc;IAkBtB;;;OAGG;YACW,SAAS;CAgDxB"}