Function minVotesForRule

cli/src/audit/resolver.ts:105–142

(
  rule: RequestPolicyRule,
  users: User[],
  namedRules: Map<UUID, NamedRule>,
  visited: Set<UUID> = new Set(),
)

 * Unresolvable cases (cycle, missing NamedRule) return Infinity to avoid false positives.
 */
export const minVotesForRule = (
  rule: RequestPolicyRule,
  users: User[],
  namedRules: Map<UUID, NamedRule>,
  visited: Set<UUID> = new Set(),
): number => {
  if ('AutoApproved' in rule) return 0;
  if ('AllowListed' in rule || 'AllowListedByMetadata' in rule) return 0;
  if ('Quorum' in rule) {
    const resolved = resolveApprovers(rule.Quorum.approvers, users);
    return Math.min(rule.Quorum.min_approved, resolved.length);
  }
  if ('QuorumPercentage' in rule) {
    const resolved = resolveApprovers(rule.QuorumPercentage.approvers, users);
    const scaled = rule.QuorumPercentage.min_approved * resolved.length;
    return scaled === 0 ? 0 : Math.ceil(scaled / 100);
  }
  if ('AnyOf' in rule) {
    return rule.AnyOf.reduce(
      (acc, child) => Math.min(acc, minVotesForRule(child, users, namedRules, visited)),
      Number.POSITIVE_INFINITY,
    );
  }
  if ('AllOf' in rule) {
    return rule.AllOf.reduce(
      (acc, child) => Math.max(acc, minVotesForRule(child, users, namedRules, visited)),
      0,
    );
  }
  if ('Not' in rule) return Number.POSITIVE_INFINITY;
  if ('NamedRule' in rule) {
    if (visited.has(rule.NamedRule)) return Number.POSITIVE_INFINITY;
    const named = namedRules.get(rule.NamedRule);
    if (!named) return Number.POSITIVE_INFINITY;
    return minVotesForRule(named.rule, users, namedRules, new Set([...visited, rule.NamedRule]));
  }
  return Number.POSITIVE_INFINITY;
};