Function evaluate

apps/sim/lib/core/config/feature-flags.ts:182–195

* The admin clause is resolved last and lazily: a global/userId/orgId match * short-circuits before any DB read, a rule without `admins` never queries, and a * missing `userId` resolves to `false` without a query.

(
  rule: FeatureFlagRule | undefined,
  ctx: FeatureFlagContext
)

 * missing `userId` resolves to `false` without a query.
 */
async function evaluate(
  rule: FeatureFlagRule | undefined,
  ctx: FeatureFlagContext
): Promise<boolean> {
  if (!rule) return false
  if (rule.enabled) return true
  if (ctx.userId && rule.userIds?.includes(ctx.userId)) return true
  if (ctx.orgId && rule.orgIds?.includes(ctx.orgId)) return true
  if (rule.adminEnabled) {
    const admin = ctx.isAdmin ?? (ctx.userId ? await resolveAdmin(ctx.userId) : false)
    if (admin) return true
  }
  return false
}

/**
 * Resolve the full flag document. Reads from AWS AppConfig on hosted deployments