av6-core 1.7.14 → 1.7.16

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { JsonValue } from '@prisma/client/runtime/library';
+import { JsonValue, Decimal, DecimalJsLike, InputJsonValue } from '@prisma/client/runtime/library';
 import { AsyncLocalStorage } from 'async_hooks';
 import { AxiosResponse } from 'axios';
 import ExcelJs from 'exceljs';
@@ -6,6 +6,7 @@ import { Readable } from 'stream';
 import winston from 'winston';
 import * as PrismaNamespace from '@prisma/client';
 import { PrismaClient, Prisma } from '@prisma/client';
+import EventEmitter from 'events';
 
 declare enum ErrorMessageType {
     INVALID_ID = "Invalid id: %1 Numeric value expected.",
@@ -520,6 +521,106 @@ interface CommonServiceResponse {
 
 declare const commonService: (serviceDeps: Deps) => CommonServiceResponse;
 
+declare enum ApprovalStatus {
+    PENDING = 0,
+    PARTIALLY_APPROVED = 1,
+    APPROVED = 2,
+    REJECTED = 3,
+    CANCELLED = 4
+}
+type StepType = "MIN_MAX" | "NORMAL";
+type ApprovalStep = {
+    id?: number;
+    flowId: number;
+    level: number;
+    minAmount?: Decimal | DecimalJsLike | number | string | null;
+    maxAmount?: Decimal | DecimalJsLike | number | string | null;
+    stepType?: StepType;
+    config?: InputJsonValue;
+    childConfig?: InputJsonValue;
+    isActive?: boolean;
+    createdBy?: number | null;
+    updatedBy?: number | null;
+    createdAt?: Date | string;
+    updatedAt?: Date | string;
+};
+type ApprovalInstance = {
+    id?: number;
+    flowId: number;
+    subjectType: string;
+    service: string;
+    subjectId: number;
+    refNo?: string | null;
+    currentStep: number;
+    netTotal?: Decimal | DecimalJsLike | number | string | null;
+    status?: ApprovalStatus;
+    extra?: JsonValue | InputJsonValue;
+    isActive?: boolean;
+    createdBy?: number | null;
+    updatedBy?: number | null;
+    createdAt?: Date | string;
+    updatedAt?: Date | string;
+};
+type LevelReadyEvt = {
+    instanceId: number;
+    subjectType: string;
+    subjectId: number;
+    level: number;
+    approverIds: number[];
+};
+type LevelDoneEvt = {
+    instanceId: number;
+    level: number;
+    actedBy: number;
+    action: "APPROVE" | "REJECT";
+    comment?: string;
+};
+declare global {
+    interface ApprovalEvents {
+        "approval:LEVEL_READY": (e: LevelReadyEvt) => void;
+        "approval:LEVEL_DONE": (e: LevelDoneEvt) => void;
+        "approval:APPROVED": (i: ApprovalInstance) => void;
+        "approval:REJECTED": (i: ApprovalInstance) => void;
+    }
+}
+interface ActInput {
+    instanceId: number;
+    approverId: number;
+    action: "APPROVE" | "REJECT";
+    ccId: number;
+    comment?: string;
+}
+interface StartFlowReq {
+    service: string;
+    subjectType: string;
+    subjectId: number;
+    netTotal: number;
+    ccId: number;
+    refNo: string;
+    level?: number;
+    extra?: Record<string, string | number | boolean | null>;
+}
+interface ApprovalDeps {
+    helpers: Helpers;
+    logger: winston.Logger;
+    requestStorage: AsyncLocalStorage<Store>;
+    prisma: PrismaClient;
+    eventBus: EventEmitter;
+}
+type PrismaTransactionClient = Omit<PrismaClient, "$connect" | "$disconnect" | "$on" | "$transaction" | "$use" | "$extends">;
+
+declare class ApprovalService {
+    private deps;
+    private approvalRepo;
+    constructor(deps: ApprovalDeps);
+    startFlow(tx: PrismaClient | PrismaTransactionClient, { service, subjectType, subjectId, netTotal, ccId, refNo, level, extra }: StartFlowReq): Promise<void>;
+    lastLevel(steps: ApprovalStep[]): Promise<number>;
+    /** Approver clicks “Approve” or “Reject”. */
+    act({ instanceId, approverId, action, ccId, comment }: ActInput): Promise<any>;
+    private emitEvents;
+    private assertPermission;
+}
+
 declare function customOmit<T extends object, K extends keyof T>(obj: T, keys: K[]): {
     rest: Omit<T, K>;
     omitted: Pick<T, K>;
@@ -713,4 +814,4 @@ declare class AuditProxy<Module extends string = "OPD" | "PROCEDURE" | "GENERAL_
     createAuditedService<T extends object>(serviceName: string, service: T): T;
 }
 
-export { type AuditContext, type AuditContextProvider, AuditCore, type AuditLogPayload, AuditLogger, AuditProxy, type BulkAtomicResult, type BulkConfig, type BulkConflictConfig, type BulkOnConflict, type CacheAdapter, type CalculationRes, type ColValue, type CommonCreateRequestRepository, type CommonExcelRequest, type CommonFilterRequest, type CommonFilterWithDate, type CommonServiceResponse, type CommonUpdateRequestRepository, type Config, type Context, type CreateUINConfigRequest, type CrudContext, type CrudDelegate, type DataType, type DeepMerge, type DeleteParams, type DeleteRequestRepository, type Deps, type DropdownRequest, type DropdownRequestService, type DtoFromMapping, type DtoNullOnMissing, type DynamicCreateInput, type DynamicCrudConfig, type DynamicShortCode, type DynamicUpdateInput, type EmitPayload, type EmployeeCache, type ExcelConfig, type ExportExcel, type ExportExcelRequestService, type FetchRequest, type FetchRequestRepository, type FieldConfig, type FieldRules, type FieldType, type FixedMap, type FixedSearchRequest, type FixedSearchRequestService, type Helpers, type ImportExcel, type ImportExcelRequestService, type LockUnlockParams, type LockUnlockRequestRepository, type LogicNode, type Mapper, type MergeAll, type NewFixedSearchRequest, type NewFixedSearchRequestService, type NewSearchRequest, NotificationEmitter, type Op, type PaginatedResponse, type PathToSelectWithSelect, type PathValue, type PathsToSelectWithSelect, type Presence, type Recipient, type RelationConfig, type RelationStrategy, type RelationWriteConfig, type SearchRequest, type SearchRequestService, type ServiceCacheAdapter, type SingleValidationMapping, type SourcePath, type Store, type ToggleActive, type TxClient, type UINConfigDTO, type UINPreviewRequest, type UINSegment, type UINSegmentType, type UIN_RESET_POLICY, type UinDeps, type UnionToIntersection, type UniqueConfig, type UpdateConfigByCodeInput, type UpdateStatusRequestRepository, type UpdateUINConfigRequest, type ValidationErrorItem, commonService, convertArrayPatternToEachBlocksGeneric, customOmit, findDifferences, formatDatesDeep, fromTimestampToSqlDatetime, getDynamicValue, getNestedValue, getNestedValueV2, getPattern, interpolate, objectTo2DArray, renderEmailTemplate, renderTemplate, toNumberOrNull, toUINConfigDTO, uinConfigService, type updateStatusParams };
+export { ApprovalService, type AuditContext, type AuditContextProvider, AuditCore, type AuditLogPayload, AuditLogger, AuditProxy, type BulkAtomicResult, type BulkConfig, type BulkConflictConfig, type BulkOnConflict, type CacheAdapter, type CalculationRes, type ColValue, type CommonCreateRequestRepository, type CommonExcelRequest, type CommonFilterRequest, type CommonFilterWithDate, type CommonServiceResponse, type CommonUpdateRequestRepository, type Config, type Context, type CreateUINConfigRequest, type CrudContext, type CrudDelegate, type DataType, type DeepMerge, type DeleteParams, type DeleteRequestRepository, type Deps, type DropdownRequest, type DropdownRequestService, type DtoFromMapping, type DtoNullOnMissing, type DynamicCreateInput, type DynamicCrudConfig, type DynamicShortCode, type DynamicUpdateInput, type EmitPayload, type EmployeeCache, type ExcelConfig, type ExportExcel, type ExportExcelRequestService, type FetchRequest, type FetchRequestRepository, type FieldConfig, type FieldRules, type FieldType, type FixedMap, type FixedSearchRequest, type FixedSearchRequestService, type Helpers, type ImportExcel, type ImportExcelRequestService, type LockUnlockParams, type LockUnlockRequestRepository, type LogicNode, type Mapper, type MergeAll, type NewFixedSearchRequest, type NewFixedSearchRequestService, type NewSearchRequest, NotificationEmitter, type Op, type PaginatedResponse, type PathToSelectWithSelect, type PathValue, type PathsToSelectWithSelect, type Presence, type Recipient, type RelationConfig, type RelationStrategy, type RelationWriteConfig, type SearchRequest, type SearchRequestService, type ServiceCacheAdapter, type SingleValidationMapping, type SourcePath, type Store, type ToggleActive, type TxClient, type UINConfigDTO, type UINPreviewRequest, type UINSegment, type UINSegmentType, type UIN_RESET_POLICY, type UinDeps, type UnionToIntersection, type UniqueConfig, type UpdateConfigByCodeInput, type UpdateStatusRequestRepository, type UpdateUINConfigRequest, type ValidationErrorItem, commonService, convertArrayPatternToEachBlocksGeneric, customOmit, findDifferences, formatDatesDeep, fromTimestampToSqlDatetime, getDynamicValue, getNestedValue, getNestedValueV2, getPattern, interpolate, objectTo2DArray, renderEmailTemplate, renderTemplate, toNumberOrNull, toUINConfigDTO, uinConfigService, type updateStatusParams };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { JsonValue } from '@prisma/client/runtime/library';
+import { JsonValue, Decimal, DecimalJsLike, InputJsonValue } from '@prisma/client/runtime/library';
 import { AsyncLocalStorage } from 'async_hooks';
 import { AxiosResponse } from 'axios';
 import ExcelJs from 'exceljs';
@@ -6,6 +6,7 @@ import { Readable } from 'stream';
 import winston from 'winston';
 import * as PrismaNamespace from '@prisma/client';
 import { PrismaClient, Prisma } from '@prisma/client';
+import EventEmitter from 'events';
 
 declare enum ErrorMessageType {
     INVALID_ID = "Invalid id: %1 Numeric value expected.",
@@ -520,6 +521,106 @@ interface CommonServiceResponse {
 
 declare const commonService: (serviceDeps: Deps) => CommonServiceResponse;
 
+declare enum ApprovalStatus {
+    PENDING = 0,
+    PARTIALLY_APPROVED = 1,
+    APPROVED = 2,
+    REJECTED = 3,
+    CANCELLED = 4
+}
+type StepType = "MIN_MAX" | "NORMAL";
+type ApprovalStep = {
+    id?: number;
+    flowId: number;
+    level: number;
+    minAmount?: Decimal | DecimalJsLike | number | string | null;
+    maxAmount?: Decimal | DecimalJsLike | number | string | null;
+    stepType?: StepType;
+    config?: InputJsonValue;
+    childConfig?: InputJsonValue;
+    isActive?: boolean;
+    createdBy?: number | null;
+    updatedBy?: number | null;
+    createdAt?: Date | string;
+    updatedAt?: Date | string;
+};
+type ApprovalInstance = {
+    id?: number;
+    flowId: number;
+    subjectType: string;
+    service: string;
+    subjectId: number;
+    refNo?: string | null;
+    currentStep: number;
+    netTotal?: Decimal | DecimalJsLike | number | string | null;
+    status?: ApprovalStatus;
+    extra?: JsonValue | InputJsonValue;
+    isActive?: boolean;
+    createdBy?: number | null;
+    updatedBy?: number | null;
+    createdAt?: Date | string;
+    updatedAt?: Date | string;
+};
+type LevelReadyEvt = {
+    instanceId: number;
+    subjectType: string;
+    subjectId: number;
+    level: number;
+    approverIds: number[];
+};
+type LevelDoneEvt = {
+    instanceId: number;
+    level: number;
+    actedBy: number;
+    action: "APPROVE" | "REJECT";
+    comment?: string;
+};
+declare global {
+    interface ApprovalEvents {
+        "approval:LEVEL_READY": (e: LevelReadyEvt) => void;
+        "approval:LEVEL_DONE": (e: LevelDoneEvt) => void;
+        "approval:APPROVED": (i: ApprovalInstance) => void;
+        "approval:REJECTED": (i: ApprovalInstance) => void;
+    }
+}
+interface ActInput {
+    instanceId: number;
+    approverId: number;
+    action: "APPROVE" | "REJECT";
+    ccId: number;
+    comment?: string;
+}
+interface StartFlowReq {
+    service: string;
+    subjectType: string;
+    subjectId: number;
+    netTotal: number;
+    ccId: number;
+    refNo: string;
+    level?: number;
+    extra?: Record<string, string | number | boolean | null>;
+}
+interface ApprovalDeps {
+    helpers: Helpers;
+    logger: winston.Logger;
+    requestStorage: AsyncLocalStorage<Store>;
+    prisma: PrismaClient;
+    eventBus: EventEmitter;
+}
+type PrismaTransactionClient = Omit<PrismaClient, "$connect" | "$disconnect" | "$on" | "$transaction" | "$use" | "$extends">;
+
+declare class ApprovalService {
+    private deps;
+    private approvalRepo;
+    constructor(deps: ApprovalDeps);
+    startFlow(tx: PrismaClient | PrismaTransactionClient, { service, subjectType, subjectId, netTotal, ccId, refNo, level, extra }: StartFlowReq): Promise<void>;
+    lastLevel(steps: ApprovalStep[]): Promise<number>;
+    /** Approver clicks “Approve” or “Reject”. */
+    act({ instanceId, approverId, action, ccId, comment }: ActInput): Promise<any>;
+    private emitEvents;
+    private assertPermission;
+}
+
 declare function customOmit<T extends object, K extends keyof T>(obj: T, keys: K[]): {
     rest: Omit<T, K>;
     omitted: Pick<T, K>;
@@ -713,4 +814,4 @@ declare class AuditProxy<Module extends string = "OPD" | "PROCEDURE" | "GENERAL_
     createAuditedService<T extends object>(serviceName: string, service: T): T;
 }
 
-export { type AuditContext, type AuditContextProvider, AuditCore, type AuditLogPayload, AuditLogger, AuditProxy, type BulkAtomicResult, type BulkConfig, type BulkConflictConfig, type BulkOnConflict, type CacheAdapter, type CalculationRes, type ColValue, type CommonCreateRequestRepository, type CommonExcelRequest, type CommonFilterRequest, type CommonFilterWithDate, type CommonServiceResponse, type CommonUpdateRequestRepository, type Config, type Context, type CreateUINConfigRequest, type CrudContext, type CrudDelegate, type DataType, type DeepMerge, type DeleteParams, type DeleteRequestRepository, type Deps, type DropdownRequest, type DropdownRequestService, type DtoFromMapping, type DtoNullOnMissing, type DynamicCreateInput, type DynamicCrudConfig, type DynamicShortCode, type DynamicUpdateInput, type EmitPayload, type EmployeeCache, type ExcelConfig, type ExportExcel, type ExportExcelRequestService, type FetchRequest, type FetchRequestRepository, type FieldConfig, type FieldRules, type FieldType, type FixedMap, type FixedSearchRequest, type FixedSearchRequestService, type Helpers, type ImportExcel, type ImportExcelRequestService, type LockUnlockParams, type LockUnlockRequestRepository, type LogicNode, type Mapper, type MergeAll, type NewFixedSearchRequest, type NewFixedSearchRequestService, type NewSearchRequest, NotificationEmitter, type Op, type PaginatedResponse, type PathToSelectWithSelect, type PathValue, type PathsToSelectWithSelect, type Presence, type Recipient, type RelationConfig, type RelationStrategy, type RelationWriteConfig, type SearchRequest, type SearchRequestService, type ServiceCacheAdapter, type SingleValidationMapping, type SourcePath, type Store, type ToggleActive, type TxClient, type UINConfigDTO, type UINPreviewRequest, type UINSegment, type UINSegmentType, type UIN_RESET_POLICY, type UinDeps, type UnionToIntersection, type UniqueConfig, type UpdateConfigByCodeInput, type UpdateStatusRequestRepository, type UpdateUINConfigRequest, type ValidationErrorItem, commonService, convertArrayPatternToEachBlocksGeneric, customOmit, findDifferences, formatDatesDeep, fromTimestampToSqlDatetime, getDynamicValue, getNestedValue, getNestedValueV2, getPattern, interpolate, objectTo2DArray, renderEmailTemplate, renderTemplate, toNumberOrNull, toUINConfigDTO, uinConfigService, type updateStatusParams };
+export { ApprovalService, type AuditContext, type AuditContextProvider, AuditCore, type AuditLogPayload, AuditLogger, AuditProxy, type BulkAtomicResult, type BulkConfig, type BulkConflictConfig, type BulkOnConflict, type CacheAdapter, type CalculationRes, type ColValue, type CommonCreateRequestRepository, type CommonExcelRequest, type CommonFilterRequest, type CommonFilterWithDate, type CommonServiceResponse, type CommonUpdateRequestRepository, type Config, type Context, type CreateUINConfigRequest, type CrudContext, type CrudDelegate, type DataType, type DeepMerge, type DeleteParams, type DeleteRequestRepository, type Deps, type DropdownRequest, type DropdownRequestService, type DtoFromMapping, type DtoNullOnMissing, type DynamicCreateInput, type DynamicCrudConfig, type DynamicShortCode, type DynamicUpdateInput, type EmitPayload, type EmployeeCache, type ExcelConfig, type ExportExcel, type ExportExcelRequestService, type FetchRequest, type FetchRequestRepository, type FieldConfig, type FieldRules, type FieldType, type FixedMap, type FixedSearchRequest, type FixedSearchRequestService, type Helpers, type ImportExcel, type ImportExcelRequestService, type LockUnlockParams, type LockUnlockRequestRepository, type LogicNode, type Mapper, type MergeAll, type NewFixedSearchRequest, type NewFixedSearchRequestService, type NewSearchRequest, NotificationEmitter, type Op, type PaginatedResponse, type PathToSelectWithSelect, type PathValue, type PathsToSelectWithSelect, type Presence, type Recipient, type RelationConfig, type RelationStrategy, type RelationWriteConfig, type SearchRequest, type SearchRequestService, type ServiceCacheAdapter, type SingleValidationMapping, type SourcePath, type Store, type ToggleActive, type TxClient, type UINConfigDTO, type UINPreviewRequest, type UINSegment, type UINSegmentType, type UIN_RESET_POLICY, type UinDeps, type UnionToIntersection, type UniqueConfig, type UpdateConfigByCodeInput, type UpdateStatusRequestRepository, type UpdateUINConfigRequest, type ValidationErrorItem, commonService, convertArrayPatternToEachBlocksGeneric, customOmit, findDifferences, formatDatesDeep, fromTimestampToSqlDatetime, getDynamicValue, getNestedValue, getNestedValueV2, getPattern, interpolate, objectTo2DArray, renderEmailTemplate, renderTemplate, toNumberOrNull, toUINConfigDTO, uinConfigService, type updateStatusParams };

package/dist/index.js

@@ -30,6 +30,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ApprovalService: () => ApprovalService,
   AuditCore: () => AuditCore,
   AuditLogger: () => AuditLogger,
   AuditProxy: () => AuditProxy,
@@ -2300,6 +2301,295 @@ var commonService = (serviceDeps) => {
   };
 };
 
+// src/repository/approval.repository.ts
+var approvalRepository = (helpers) => {
+  return {
+    async findMatchingFlow(tx, type, service, ccId, netTotal, level = 1) {
+      const result = await tx.$queryRaw(`
+    SELECT  af.id         AS flowId,
+            s.id          AS stepId,
+            s.level,
+            s.min_amount  AS minAmount,
+            s.max_amount  AS maxAmount,
+            s.step_type   AS stepType,
+            af.service
+    FROM    core_approval_flow               AS af
+    JOIN    core_approval_step               AS s  ON s.flow_id = af.id AND s.level = ${level}
+    WHERE   af.subject_type = ${type}
+      AND   af.service = ${service}
+      AND   af.is_active     = TRUE
+      AND   s.is_active      = TRUE
+      AND ( (s.step_type = 'MIN_MAX'
+              AND s.min_amount <= ${netTotal}
+              AND s.max_amount >= ${netTotal})
+         OR (s.step_type = 'NORMAL') )
+    LIMIT 1;      -- we expect exactly one matching step
+  `);
+      if (result.length === 0) {
+        throw new helpers.ErrorHandler(400, "No matching flow found.");
+      }
+      return result[0];
+    }
+  };
+};
+
+// src/services/approval.service.ts
+var ApprovalService = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.approvalRepo = approvalRepository(deps.helpers);
+  }
+  deps;
+  approvalRepo;
+  async startFlow(tx, { service, subjectType, subjectId, netTotal, ccId, refNo, level = 1, extra }) {
+    const store = this.deps.requestStorage.getStore();
+    const currentUser = store?.user?.id;
+    const flow = await this.approvalRepo.findMatchingFlow(tx, subjectType, service, ccId, netTotal, level);
+    if (!flow) throw new Error("No approval flow configured");
+    await tx.approvalInstance.updateMany({
+      where: {
+        service: flow.service,
+        subjectType,
+        subjectId
+      },
+      data: {
+        isActive: false,
+        updatedBy: currentUser
+      }
+    });
+    const inst = await tx.approvalInstance.create({
+      data: {
+        flowId: flow.flowId,
+        service: flow.service,
+        subjectType,
+        subjectId,
+        currentStep: flow.stepId,
+        netTotal,
+        refNo,
+        extra,
+        createdBy: currentUser
+      }
+    });
+    const approvers = await tx.approverMapping.findMany({
+      where: { stepId: flow.stepId, ccId, isActive: true }
+    });
+    this.deps.eventBus.emit("approval:LEVEL_READY", {
+      instanceId: inst.id,
+      subjectType: inst.subjectType,
+      service: inst.service,
+      subjectId: inst.subjectId,
+      level: 1,
+      approvers,
+      ccId
+    });
+  }
+  async lastLevel(steps) {
+    if (steps.length === 0) throw new Error("No steps defined in the approval flow");
+    return Math.max(...steps.map((s) => s.level));
+  }
+  /** Approver clicks “Approve” or “Reject”. */
+  async act({ instanceId, approverId, action, ccId, comment }) {
+    return this.deps.prisma.$transaction(async (tx) => {
+      const inst = await tx.approvalInstance.findUnique({
+        where: { id: instanceId },
+        include: { flow: { where: { isActive: true }, include: { steps: { where: { isActive: true } } } } }
+      });
+      if (!inst) throw new this.deps.helpers.ErrorHandler(400, "Approval instance not found");
+      if (!inst.flow) throw new this.deps.helpers.ErrorHandler(400, "Approval flow not found");
+      const step = inst.flow.steps.find((s) => s.id === inst.currentStep);
+      if (!step) throw new this.deps.helpers.ErrorHandler(400, "Current step not found in the flow");
+      await this.assertPermission(step, approverId, instanceId, ccId, tx);
+      inst.flow.steps = inst.flow.steps.filter((s) => {
+        return s.stepType === "NORMAL" || s.stepType === "MIN_MAX" && Number(inst.netTotal) >= Number(s.minAmount) && Number(inst.netTotal) <= Number(s.maxAmount);
+      });
+      const lastLevel = await this.lastLevel(inst.flow.steps);
+      const newStatus = action === "REJECT" ? 3 /* REJECTED */ : step.level === lastLevel ? 2 /* APPROVED */ : 1 /* PARTIALLY_APPROVED */;
+      await tx.approvalAction.create({
+        data: {
+          instanceId,
+          level: step.level,
+          actedBy: approverId,
+          comment,
+          statusAfter: newStatus
+        }
+      });
+      let newFlow = null;
+      if (newStatus === 1 /* PARTIALLY_APPROVED */) {
+        newFlow = await this.approvalRepo.findMatchingFlow(
+          tx,
+          inst.flow.subjectType,
+          inst.flow.service,
+          ccId,
+          Number(inst.netTotal || 0),
+          step.level + 1
+        );
+        if (!newFlow) {
+          throw new this.deps.helpers.ErrorHandler(400, "No next step found for the approval flow");
+        }
+      }
+      const updated = await tx.approvalInstance.update({
+        where: { id: instanceId },
+        data: {
+          currentStep: newStatus === 1 /* PARTIALLY_APPROVED */ ? newFlow?.stepId : step.id,
+          status: newStatus
+        }
+      });
+      setImmediate(() => this.emitEvents(updated, inst.flow?.flowType, approverId, step, comment));
+      this.deps.eventBus.emit("approval:LEVEL_DONE", {
+        instanceId: inst.id,
+        level: step.level,
+        actedBy: approverId,
+        action,
+        comment
+      });
+      if (newStatus === 1 /* PARTIALLY_APPROVED */) {
+        const nextLevel = step.level + 1;
+        const approvers = await tx.approverMapping.findMany({
+          where: { stepId: updated.currentStep, ccId, isActive: true }
+        });
+        this.deps.eventBus.emit("approval:LEVEL_READY", {
+          instanceId: inst.id,
+          subjectType: inst.subjectType,
+          service: inst.service,
+          subjectId: inst.subjectId,
+          level: nextLevel,
+          approvers,
+          ccId
+        });
+      }
+      return updated;
+    });
+  }
+  /* ------------ private helpers ------------ */
+  // private async advance(id: number, ccId: number, stepId: number, tx: PrismaClient | PrismaTransactionClient = this.deps.prisma) {
+  //   console.log(`Advancing approval instance ${id}`);
+  //   // // Fetch the approval instance by its id, including associated flow steps
+  //   const inst = await tx.approvalInstance.findUniqueOrThrow({
+  //     where: { id },
+  //     include: { flow: { include: { steps: true } } },
+  //   });
+  //   if (!inst) throw new this.deps.helpers.ErrorHandler(400, "Approval instance not found");
+  //   if (!inst.flow) throw new this.deps.helpers.ErrorHandler(400, "Approval flow not found");
+  //   // Get the current step for the instance
+  //   let nextLevel: number;
+  //   if (inst.currentLevel === 0) {
+  //     nextLevel = 1;
+  //   } else {
+  //     const currentStep = inst.flow.steps.find((s) => s.level === inst.currentLevel);
+  //     if (!currentStep) throw new Error(`Invalid level ${inst.currentLevel} for the instance`);
+  //     // If this step is done (e.g., approved or rejected), move on to the next level
+  //     nextLevel = inst.currentLevel + 1;
+  //   }
+  //   // Check if there is a next level defined
+  //   const nextStep = inst.flow.steps.find((s) => s.level === nextLevel);
+  //   if (nextStep) {
+  //     // Update the instance to move to the next level
+  //     await tx.approvalInstance.update({
+  //       where: { id },
+  //       data: {
+  //         currentLevel: nextLevel,
+  //         status: "PENDING", // Reset to "PENDING" as we are progressing the approval to the next level
+  //       },
+  //     });
+  //     const approvers = await tx.approverMapping.findMany({
+  //       where: { stepId: nextStep.id, ccId, isActive: true },
+  //     });
+  //     // Emit event for the next level approvers
+  //     this.deps.eventBus.emit("approval:LEVEL_READY", {
+  //       instanceId: inst.id,
+  //       subjectType: inst.subjectType,
+  //       subjectId: inst.subjectId,
+  //       level: nextLevel,
+  //       approvers: approvers,
+  // ccId,
+  //     });
+  //   } else {
+  //     // If no next step, mark the instance as fully approved (completed)
+  //     await tx.approvalInstance.update({
+  //       where: { id },
+  //       data: { status: "APPROVED" }, // or REJECTED if the final level is not approved
+  //     });
+  //     // Emit event for final approval
+  //     this.deps.eventBus.emit("approval:APPROVED", {
+  //       instanceId: inst.id,
+  //       subjectType: inst.subjectType,
+  //       subjectId: inst.subjectId,
+  //     });
+  //   }
+  // }
+  emitEvents(instance, flowType, approverId, step, comment) {
+    this.deps.eventBus.emit(`approval:${instance.status}`, {
+      instanceId: instance.id,
+      flowType,
+      subjectId: instance.subjectId,
+      approverId,
+      step,
+      comment,
+      subjectType: instance.subjectType,
+      service: instance.service
+    });
+  }
+  async assertPermission(step, approverId, instanceId, ccId, tx) {
+    const result = await tx.$queryRaw(`
+    SELECT COUNT(*) AS count
+    FROM (
+        SELECT am.staff_id AS staff_id
+        FROM core_approver_mapping am
+        WHERE am.step_id = ${step.id}
+          AND am.is_active = TRUE
+          AND am.cc_id = ${ccId}
+          AND am.staff_id = ${approverId}
+
+        UNION
+
+        SELECT scc.staff_id AS staff_id
+        FROM core_approver_mapping am
+        LEFT JOIN staff_roles sr 
+          ON sr.role_id = am.role_id
+        LEFT JOIN staff_collection_center scc 
+          ON scc.collection_center_id = am.cc_id 
+        AND scc.staff_id = sr.staff_id
+        WHERE am.step_id = ${step.id}
+          AND am.is_active = TRUE
+          AND am.cc_id = ${ccId}
+          AND scc.staff_id = ${approverId}
+    ) AS staff_union; 
+      `);
+    if (Number(result[0].count) === 0) {
+      throw new this.deps.helpers.ErrorHandler(403, "You are not allowed to act on this approval step");
+    }
+    const existingActsQuery = `
+      SELECT COUNT(*) AS count
+      FROM core_approval_action a
+      JOIN core_approval_instance ai ON ai.id = a.instance_id
+      WHERE ai.id = ?
+      AND a.level = ?
+      AND a.acted_by = ?
+      AND a.is_active = true
+      AND ai.is_active = true
+    `;
+    const actionsResult = await tx.$queryRawUnsafe(existingActsQuery, instanceId, step.level, approverId);
+    if (Number(actionsResult[0].count) > 0) {
+      throw new this.deps.helpers.ErrorHandler(409, "You have already submitted a decision for this level");
+    }
+    const prevApproversQuery = `
+      SELECT COUNT(*) AS count
+      FROM core_approval_action a
+      JOIN core_approval_instance ai ON ai.id = a.instance_id
+      WHERE ai.id = ?
+      AND a.level < ?
+      AND a.is_active = true
+      AND ai.is_active = true
+      AND a.acted_by IS NOT NULL
+    `;
+    const prevActionsResult = await tx.$queryRawUnsafe(prevApproversQuery, instanceId, step.level);
+    if (Number(prevActionsResult[0].count) !== step.level - 1) {
+      throw new this.deps.helpers.ErrorHandler(403, "You must wait for previous approvers to act first");
+    }
+    return step;
+  }
+};
+
 // src/utils/audit.utils.ts
 function isValidDate(value) {
   if (value instanceof Date) {
@@ -4294,6 +4584,7 @@ var AuditProxy = class {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ApprovalService,
   AuditCore,
   AuditLogger,
   AuditProxy,

package/dist/index.mjs

@@ -2244,6 +2244,295 @@ var commonService = (serviceDeps) => {
   };
 };
 
+// src/repository/approval.repository.ts
+var approvalRepository = (helpers) => {
+  return {
+    async findMatchingFlow(tx, type, service, ccId, netTotal, level = 1) {
+      const result = await tx.$queryRaw(`
+    SELECT  af.id         AS flowId,
+            s.id          AS stepId,
+            s.level,
+            s.min_amount  AS minAmount,
+            s.max_amount  AS maxAmount,
+            s.step_type   AS stepType,
+            af.service
+    FROM    core_approval_flow               AS af
+    JOIN    core_approval_step               AS s  ON s.flow_id = af.id AND s.level = ${level}
+    WHERE   af.subject_type = ${type}
+      AND   af.service = ${service}
+      AND   af.is_active     = TRUE
+      AND   s.is_active      = TRUE
+      AND ( (s.step_type = 'MIN_MAX'
+              AND s.min_amount <= ${netTotal}
+              AND s.max_amount >= ${netTotal})
+         OR (s.step_type = 'NORMAL') )
+    LIMIT 1;      -- we expect exactly one matching step
+  `);
+      if (result.length === 0) {
+        throw new helpers.ErrorHandler(400, "No matching flow found.");
+      }
+      return result[0];
+    }
+  };
+};
+
+// src/services/approval.service.ts
+var ApprovalService = class {
+  constructor(deps) {
+    this.deps = deps;
+    this.approvalRepo = approvalRepository(deps.helpers);
+  }
+  deps;
+  approvalRepo;
+  async startFlow(tx, { service, subjectType, subjectId, netTotal, ccId, refNo, level = 1, extra }) {
+    const store = this.deps.requestStorage.getStore();
+    const currentUser = store?.user?.id;
+    const flow = await this.approvalRepo.findMatchingFlow(tx, subjectType, service, ccId, netTotal, level);
+    if (!flow) throw new Error("No approval flow configured");
+    await tx.approvalInstance.updateMany({
+      where: {
+        service: flow.service,
+        subjectType,
+        subjectId
+      },
+      data: {
+        isActive: false,
+        updatedBy: currentUser
+      }
+    });
+    const inst = await tx.approvalInstance.create({
+      data: {
+        flowId: flow.flowId,
+        service: flow.service,
+        subjectType,
+        subjectId,
+        currentStep: flow.stepId,
+        netTotal,
+        refNo,
+        extra,
+        createdBy: currentUser
+      }
+    });
+    const approvers = await tx.approverMapping.findMany({
+      where: { stepId: flow.stepId, ccId, isActive: true }
+    });
+    this.deps.eventBus.emit("approval:LEVEL_READY", {
+      instanceId: inst.id,
+      subjectType: inst.subjectType,
+      service: inst.service,
+      subjectId: inst.subjectId,
+      level: 1,
+      approvers,
+      ccId
+    });
+  }
+  async lastLevel(steps) {
+    if (steps.length === 0) throw new Error("No steps defined in the approval flow");
+    return Math.max(...steps.map((s) => s.level));
+  }
+  /** Approver clicks “Approve” or “Reject”. */
+  async act({ instanceId, approverId, action, ccId, comment }) {
+    return this.deps.prisma.$transaction(async (tx) => {
+      const inst = await tx.approvalInstance.findUnique({
+        where: { id: instanceId },
+        include: { flow: { where: { isActive: true }, include: { steps: { where: { isActive: true } } } } }
+      });
+      if (!inst) throw new this.deps.helpers.ErrorHandler(400, "Approval instance not found");
+      if (!inst.flow) throw new this.deps.helpers.ErrorHandler(400, "Approval flow not found");
+      const step = inst.flow.steps.find((s) => s.id === inst.currentStep);
+      if (!step) throw new this.deps.helpers.ErrorHandler(400, "Current step not found in the flow");
+      await this.assertPermission(step, approverId, instanceId, ccId, tx);
+      inst.flow.steps = inst.flow.steps.filter((s) => {
+        return s.stepType === "NORMAL" || s.stepType === "MIN_MAX" && Number(inst.netTotal) >= Number(s.minAmount) && Number(inst.netTotal) <= Number(s.maxAmount);
+      });
+      const lastLevel = await this.lastLevel(inst.flow.steps);
+      const newStatus = action === "REJECT" ? 3 /* REJECTED */ : step.level === lastLevel ? 2 /* APPROVED */ : 1 /* PARTIALLY_APPROVED */;
+      await tx.approvalAction.create({
+        data: {
+          instanceId,
+          level: step.level,
+          actedBy: approverId,
+          comment,
+          statusAfter: newStatus
+        }
+      });
+      let newFlow = null;
+      if (newStatus === 1 /* PARTIALLY_APPROVED */) {
+        newFlow = await this.approvalRepo.findMatchingFlow(
+          tx,
+          inst.flow.subjectType,
+          inst.flow.service,
+          ccId,
+          Number(inst.netTotal || 0),
+          step.level + 1
+        );
+        if (!newFlow) {
+          throw new this.deps.helpers.ErrorHandler(400, "No next step found for the approval flow");
+        }
+      }
+      const updated = await tx.approvalInstance.update({
+        where: { id: instanceId },
+        data: {
+          currentStep: newStatus === 1 /* PARTIALLY_APPROVED */ ? newFlow?.stepId : step.id,
+          status: newStatus
+        }
+      });
+      setImmediate(() => this.emitEvents(updated, inst.flow?.flowType, approverId, step, comment));
+      this.deps.eventBus.emit("approval:LEVEL_DONE", {
+        instanceId: inst.id,
+        level: step.level,
+        actedBy: approverId,
+        action,
+        comment
+      });
+      if (newStatus === 1 /* PARTIALLY_APPROVED */) {
+        const nextLevel = step.level + 1;
+        const approvers = await tx.approverMapping.findMany({
+          where: { stepId: updated.currentStep, ccId, isActive: true }
+        });
+        this.deps.eventBus.emit("approval:LEVEL_READY", {
+          instanceId: inst.id,
+          subjectType: inst.subjectType,
+          service: inst.service,
+          subjectId: inst.subjectId,
+          level: nextLevel,
+          approvers,
+          ccId
+        });
+      }
+      return updated;
+    });
+  }
+  /* ------------ private helpers ------------ */
+  // private async advance(id: number, ccId: number, stepId: number, tx: PrismaClient | PrismaTransactionClient = this.deps.prisma) {
+  //   console.log(`Advancing approval instance ${id}`);
+  //   // // Fetch the approval instance by its id, including associated flow steps
+  //   const inst = await tx.approvalInstance.findUniqueOrThrow({
+  //     where: { id },
+  //     include: { flow: { include: { steps: true } } },
+  //   });
+  //   if (!inst) throw new this.deps.helpers.ErrorHandler(400, "Approval instance not found");
+  //   if (!inst.flow) throw new this.deps.helpers.ErrorHandler(400, "Approval flow not found");
+  //   // Get the current step for the instance
+  //   let nextLevel: number;
+  //   if (inst.currentLevel === 0) {
+  //     nextLevel = 1;
+  //   } else {
+  //     const currentStep = inst.flow.steps.find((s) => s.level === inst.currentLevel);
+  //     if (!currentStep) throw new Error(`Invalid level ${inst.currentLevel} for the instance`);
+  //     // If this step is done (e.g., approved or rejected), move on to the next level
+  //     nextLevel = inst.currentLevel + 1;
+  //   }
+  //   // Check if there is a next level defined
+  //   const nextStep = inst.flow.steps.find((s) => s.level === nextLevel);
+  //   if (nextStep) {
+  //     // Update the instance to move to the next level
+  //     await tx.approvalInstance.update({
+  //       where: { id },
+  //       data: {
+  //         currentLevel: nextLevel,
+  //         status: "PENDING", // Reset to "PENDING" as we are progressing the approval to the next level
+  //       },
+  //     });
+  //     const approvers = await tx.approverMapping.findMany({
+  //       where: { stepId: nextStep.id, ccId, isActive: true },
+  //     });
+  //     // Emit event for the next level approvers
+  //     this.deps.eventBus.emit("approval:LEVEL_READY", {
+  //       instanceId: inst.id,
+  //       subjectType: inst.subjectType,
+  //       subjectId: inst.subjectId,
+  //       level: nextLevel,
+  //       approvers: approvers,
+  // ccId,
+  //     });
+  //   } else {
+  //     // If no next step, mark the instance as fully approved (completed)
+  //     await tx.approvalInstance.update({
+  //       where: { id },
+  //       data: { status: "APPROVED" }, // or REJECTED if the final level is not approved
+  //     });
+  //     // Emit event for final approval
+  //     this.deps.eventBus.emit("approval:APPROVED", {
+  //       instanceId: inst.id,
+  //       subjectType: inst.subjectType,
+  //       subjectId: inst.subjectId,
+  //     });
+  //   }
+  // }
+  emitEvents(instance, flowType, approverId, step, comment) {
+    this.deps.eventBus.emit(`approval:${instance.status}`, {
+      instanceId: instance.id,
+      flowType,
+      subjectId: instance.subjectId,
+      approverId,
+      step,
+      comment,
+      subjectType: instance.subjectType,
+      service: instance.service
+    });
+  }
+  async assertPermission(step, approverId, instanceId, ccId, tx) {
+    const result = await tx.$queryRaw(`
+    SELECT COUNT(*) AS count
+    FROM (
+        SELECT am.staff_id AS staff_id
+        FROM core_approver_mapping am
+        WHERE am.step_id = ${step.id}
+          AND am.is_active = TRUE
+          AND am.cc_id = ${ccId}
+          AND am.staff_id = ${approverId}
+
+        UNION
+
+        SELECT scc.staff_id AS staff_id
+        FROM core_approver_mapping am
+        LEFT JOIN staff_roles sr 
+          ON sr.role_id = am.role_id
+        LEFT JOIN staff_collection_center scc 
+          ON scc.collection_center_id = am.cc_id 
+        AND scc.staff_id = sr.staff_id
+        WHERE am.step_id = ${step.id}
+          AND am.is_active = TRUE
+          AND am.cc_id = ${ccId}
+          AND scc.staff_id = ${approverId}
+    ) AS staff_union; 
+      `);
+    if (Number(result[0].count) === 0) {
+      throw new this.deps.helpers.ErrorHandler(403, "You are not allowed to act on this approval step");
+    }
+    const existingActsQuery = `
+      SELECT COUNT(*) AS count
+      FROM core_approval_action a
+      JOIN core_approval_instance ai ON ai.id = a.instance_id
+      WHERE ai.id = ?
+      AND a.level = ?
+      AND a.acted_by = ?
+      AND a.is_active = true
+      AND ai.is_active = true
+    `;
+    const actionsResult = await tx.$queryRawUnsafe(existingActsQuery, instanceId, step.level, approverId);
+    if (Number(actionsResult[0].count) > 0) {
+      throw new this.deps.helpers.ErrorHandler(409, "You have already submitted a decision for this level");
+    }
+    const prevApproversQuery = `
+      SELECT COUNT(*) AS count
+      FROM core_approval_action a
+      JOIN core_approval_instance ai ON ai.id = a.instance_id
+      WHERE ai.id = ?
+      AND a.level < ?
+      AND a.is_active = true
+      AND ai.is_active = true
+      AND a.acted_by IS NOT NULL
+    `;
+    const prevActionsResult = await tx.$queryRawUnsafe(prevApproversQuery, instanceId, step.level);
+    if (Number(prevActionsResult[0].count) !== step.level - 1) {
+      throw new this.deps.helpers.ErrorHandler(403, "You must wait for previous approvers to act first");
+    }
+    return step;
+  }
+};
+
 // src/utils/audit.utils.ts
 function isValidDate(value) {
   if (value instanceof Date) {
@@ -4237,6 +4526,7 @@ var AuditProxy = class {
   }
 };
 export {
+  ApprovalService,
   AuditCore,
   AuditLogger,
   AuditProxy,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "av6-core",
-  "version": "1.7.14",
+  "version": "1.7.16",
   "main": "dist/index.js",
   "module": "dist/index.mjs",
   "types": "dist/index.d.ts",