hierarchical-approval 0.1.0

package/dist/adapters/PostgresAdapter.d.ts

@@ -0,0 +1,45 @@
+import * as tls from 'tls';
+import * as pg from 'pg';
+import { I as IStorageAdapter, A as ApprovalTemplate, a as ApprovalInstance, P as PaginationOpts, b as PaginatedResult, c as InstanceFilter, d as AuditEntry, C as CursorPaginationOpts, e as CursorPaginatedResult } from '../IStorageAdapter-RAiLF8bc.js';
+
+interface PostgresAdapterOptions {
+    connectionString?: string;
+    /** Bring your own pre-configured pg.Pool instead of a connectionString. */
+    pool?: pg.Pool;
+    tablePrefix?: string;
+    /** PostgreSQL schema to use (default: 'public'). */
+    schema?: string;
+    /** Statement timeout in milliseconds applied to every query (default: none). */
+    statementTimeoutMs?: number;
+    ssl?: tls.ConnectionOptions;
+}
+declare class PostgresAdapter implements IStorageAdapter {
+    private readonly opts;
+    private _pool;
+    private readonly prefix;
+    private readonly schema;
+    private readonly statementTimeoutMs?;
+    private readonly externalPool;
+    constructor(opts: PostgresAdapterOptions);
+    private getPool;
+    private get p();
+    migrate(): Promise<void>;
+    /** Enable PostgreSQL Row Level Security for the instances and audit_log tables. */
+    enableRLS(): Promise<void>;
+    saveTemplate(template: ApprovalTemplate): Promise<void>;
+    getTemplate(tenantId: string, name: string): Promise<ApprovalTemplate | null>;
+    listTemplates(tenantId: string): Promise<ApprovalTemplate[]>;
+    saveInstance(instance: ApprovalInstance): Promise<void>;
+    updateInstance(instance: ApprovalInstance, expectedVersion: number): Promise<void>;
+    getInstance(tenantId: string, id: string): Promise<ApprovalInstance | null>;
+    getInstancesByApprover(tenantId: string, approverId: string, opts?: PaginationOpts): Promise<PaginatedResult<ApprovalInstance>>;
+    getInstancesByFilter(tenantId: string, filter: InstanceFilter, opts?: PaginationOpts): Promise<PaginatedResult<ApprovalInstance>>;
+    getOverdueInstances(tenantId: string, asOf: Date): Promise<ApprovalInstance[]>;
+    getIdempotentInstance(tenantId: string, idempotencyKey: string): Promise<ApprovalInstance | null>;
+    appendAuditEntry(tenantId: string, instanceId: string, entry: AuditEntry): Promise<void>;
+    getInstancesByCursor(tenantId: string, filter: InstanceFilter, opts: CursorPaginationOpts): Promise<CursorPaginatedResult<ApprovalInstance>>;
+    end(): Promise<void>;
+    private rowToInstance;
+}
+
+export { PostgresAdapter, type PostgresAdapterOptions };

package/dist/adapters/PostgresAdapter.js

@@ -0,0 +1,466 @@
+// src/errors.ts
+var ApprovalError = class extends Error {
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "ApprovalError";
+  }
+  toJSON() {
+    return { code: this.code, message: this.message, name: this.name };
+  }
+  toHttpStatus() {
+    const map = {
+      NOT_FOUND: 404,
+      CONFLICT: 409,
+      FORBIDDEN: 403,
+      VALIDATION: 422,
+      TEMPLATE_NOT_FOUND: 404
+    };
+    return map[this.code] ?? 500;
+  }
+};
+var ApprovalConflictError = class extends ApprovalError {
+  constructor(instanceId) {
+    super(
+      `Concurrent modification detected on instance "${instanceId}". The record was updated by another process. Please retry.`,
+      "CONFLICT"
+    );
+    this.name = "ApprovalConflictError";
+  }
+};
+var ApprovalValidationError = class extends ApprovalError {
+  constructor(message, cause) {
+    super(message, "VALIDATION");
+    this.cause = cause;
+    this.name = "ApprovalValidationError";
+  }
+};
+
+// src/adapters/PostgresAdapter.ts
+var TABLE_PREFIX_RE = /^[a-z][a-z0-9_]*$/;
+var PostgresAdapter = class {
+  constructor(opts) {
+    this.opts = opts;
+    this._pool = null;
+    const prefix = opts.tablePrefix ?? "ha";
+    if (!TABLE_PREFIX_RE.test(prefix)) {
+      throw new ApprovalValidationError(
+        `PostgresAdapter: tablePrefix "${prefix}" is invalid. Must match /^[a-z][a-z0-9_]*$/. Only lowercase letters, digits, and underscores are allowed.`
+      );
+    }
+    this.prefix = prefix;
+    this.schema = opts.schema ?? "public";
+    this.statementTimeoutMs = opts.statementTimeoutMs;
+    this.externalPool = opts.pool;
+  }
+  async getPool() {
+    if (this.externalPool) return this.externalPool;
+    if (this._pool) return this._pool;
+    const { default: pg } = await import('pg');
+    this._pool = new pg.Pool({
+      connectionString: this.opts.connectionString,
+      ssl: this.opts.ssl
+    });
+    return this._pool;
+  }
+  get p() {
+    return `${this.schema}.${this.prefix}`;
+  }
+  async migrate() {
+    const pool = await this.getPool();
+    await pool.query(`
+      CREATE TABLE IF NOT EXISTS ${this.p}_templates (
+        tenant_id   TEXT NOT NULL,
+        name        TEXT NOT NULL,
+        data        JSONB NOT NULL,
+        created_at  TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        PRIMARY KEY (tenant_id, name)
+      );
+
+      CREATE TABLE IF NOT EXISTS ${this.p}_instances (
+        id                  TEXT NOT NULL,
+        tenant_id           TEXT NOT NULL,
+        template_name       TEXT NOT NULL,
+        document_id         TEXT NOT NULL,
+        document_type       TEXT NOT NULL,
+        submitted_by        TEXT NOT NULL,
+        status              TEXT NOT NULL,
+        current_level       INT  NOT NULL,
+        version             INT  NOT NULL DEFAULT 1,
+        idempotency_key     TEXT,
+        data                JSONB NOT NULL DEFAULT '{}',
+        metadata            JSONB NOT NULL DEFAULT '{}',
+        levels              JSONB NOT NULL DEFAULT '[]',
+        parent_instance_id  TEXT,
+        expires_at          TIMESTAMPTZ,
+        deadline_action     TEXT,
+        sla_deadline_at     TIMESTAMPTZ,
+        sla_breached_at     TIMESTAMPTZ,
+        template_snapshot   JSONB,
+        created_at          TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        updated_at          TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+        PRIMARY KEY (tenant_id, id),
+        UNIQUE (tenant_id, idempotency_key)
+      );
+
+      CREATE TABLE IF NOT EXISTS ${this.p}_audit_log (
+        id               BIGSERIAL PRIMARY KEY,
+        tenant_id        TEXT NOT NULL,
+        instance_id      TEXT NOT NULL,
+        action           TEXT NOT NULL,
+        actor_id         TEXT NOT NULL,
+        actor_role       TEXT,
+        actor_ip         TEXT,
+        actor_user_agent TEXT,
+        trace_id         TEXT,
+        level            INT  NOT NULL,
+        timestamp        TIMESTAMPTZ NOT NULL,
+        old_value        JSONB,
+        new_value        JSONB,
+        comment          TEXT,
+        reason           TEXT,
+        delegate_to      TEXT
+      );
+
+      CREATE INDEX IF NOT EXISTS ${this.p}_instances_tenant_status
+        ON ${this.p}_instances (tenant_id, status);
+
+      CREATE INDEX IF NOT EXISTS ${this.p}_instances_tenant_updated
+        ON ${this.p}_instances (tenant_id, updated_at);
+
+      CREATE INDEX IF NOT EXISTS ${this.p}_audit_log_instance
+        ON ${this.p}_audit_log (tenant_id, instance_id);
+
+      -- Add new columns to existing tables (idempotent for upgrades)
+      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS parent_instance_id TEXT;
+      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS expires_at TIMESTAMPTZ;
+      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS deadline_action TEXT;
+      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS sla_deadline_at TIMESTAMPTZ;
+      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS sla_breached_at TIMESTAMPTZ;
+      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS template_snapshot JSONB;
+    `);
+  }
+  /** Enable PostgreSQL Row Level Security for the instances and audit_log tables. */
+  async enableRLS() {
+    const pool = await this.getPool();
+    await pool.query(`
+      ALTER TABLE ${this.p}_instances ENABLE ROW LEVEL SECURITY;
+      ALTER TABLE ${this.p}_audit_log ENABLE ROW LEVEL SECURITY;
+
+      DROP POLICY IF EXISTS ${this.p}_tenant_isolation ON ${this.p}_instances;
+      CREATE POLICY ${this.p}_tenant_isolation ON ${this.p}_instances
+        USING (tenant_id = current_setting('rls.tenant_id', TRUE));
+
+      DROP POLICY IF EXISTS ${this.p}_audit_tenant_isolation ON ${this.p}_audit_log;
+      CREATE POLICY ${this.p}_audit_tenant_isolation ON ${this.p}_audit_log
+        USING (tenant_id = current_setting('rls.tenant_id', TRUE));
+    `);
+  }
+  // ─── Templates ────────────────────────────────────────────────────────────
+  async saveTemplate(template) {
+    const pool = await this.getPool();
+    await pool.query(
+      `INSERT INTO ${this.p}_templates (tenant_id, name, data, created_at)
+       VALUES ($1, $2, $3, $4)
+       ON CONFLICT (tenant_id, name) DO UPDATE SET data = EXCLUDED.data`,
+      [template.tenantId, template.name, JSON.stringify(template), template.createdAt.toISOString()]
+    );
+  }
+  async getTemplate(tenantId, name) {
+    const pool = await this.getPool();
+    const result = await pool.query(
+      `SELECT data FROM ${this.p}_templates WHERE tenant_id = $1 AND name = $2`,
+      [tenantId, name]
+    );
+    return result.rows[0]?.data ?? null;
+  }
+  async listTemplates(tenantId) {
+    const pool = await this.getPool();
+    const result = await pool.query(
+      `SELECT data FROM ${this.p}_templates WHERE tenant_id = $1 ORDER BY created_at ASC`,
+      [tenantId]
+    );
+    return result.rows.map((r) => r.data);
+  }
+  // ─── Instances ────────────────────────────────────────────────────────────
+  async saveInstance(instance) {
+    const pool = await this.getPool();
+    await pool.query(
+      `INSERT INTO ${this.p}_instances
+         (id, tenant_id, template_name, document_id, document_type, submitted_by,
+          status, current_level, version, idempotency_key,
+          data, metadata, levels,
+          parent_instance_id, expires_at, deadline_action,
+          sla_deadline_at, sla_breached_at, template_snapshot,
+          created_at, updated_at)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21)
+       ON CONFLICT (tenant_id, id) DO NOTHING`,
+      [
+        instance.id,
+        instance.tenantId,
+        instance.templateName,
+        instance.documentId,
+        instance.documentType,
+        instance.submittedBy,
+        instance.status,
+        instance.currentLevel,
+        instance.version,
+        instance.idempotencyKey ?? null,
+        JSON.stringify(instance.data),
+        JSON.stringify(instance.metadata),
+        JSON.stringify(instance.levels),
+        instance.parentInstanceId ?? null,
+        instance.expiresAt?.toISOString() ?? null,
+        instance.deadlineAction ?? null,
+        instance.slaDeadlineAt?.toISOString() ?? null,
+        instance.slaBreachedAt?.toISOString() ?? null,
+        instance.templateSnapshot ? JSON.stringify(instance.templateSnapshot) : null,
+        instance.createdAt.toISOString(),
+        instance.updatedAt.toISOString()
+      ]
+    );
+  }
+  async updateInstance(instance, expectedVersion) {
+    const pool = await this.getPool();
+    const result = await pool.query(
+      `UPDATE ${this.p}_instances SET
+         status           = $4,
+         current_level    = $5,
+         version          = $6 + 1,
+         levels           = $7,
+         sla_breached_at  = $8,
+         updated_at       = $9
+       WHERE tenant_id = $1 AND id = $2 AND version = $3
+       RETURNING id`,
+      [
+        instance.tenantId,
+        instance.id,
+        expectedVersion,
+        instance.status,
+        instance.currentLevel,
+        expectedVersion,
+        JSON.stringify(instance.levels),
+        instance.slaBreachedAt?.toISOString() ?? null,
+        instance.updatedAt.toISOString()
+      ]
+    );
+    if (result.rowCount === 0) throw new ApprovalConflictError(instance.id);
+  }
+  async getInstance(tenantId, id) {
+    const pool = await this.getPool();
+    const result = await pool.query(
+      `SELECT * FROM ${this.p}_instances WHERE tenant_id = $1 AND id = $2`,
+      [tenantId, id]
+    );
+    const row = result.rows[0];
+    if (!row) return null;
+    return this.rowToInstance(row);
+  }
+  async getInstancesByApprover(tenantId, approverId, opts) {
+    const pool = await this.getPool();
+    const offset = opts?.offset ?? 0;
+    const limit = opts?.limit ?? 50;
+    const result = await pool.query(
+      `SELECT *, COUNT(*) OVER() AS total_count
+       FROM ${this.p}_instances
+       WHERE tenant_id = $1
+         AND status = 'pending'
+         AND EXISTS (
+           SELECT 1 FROM jsonb_array_elements(levels) AS lvl
+           WHERE lvl->>'status' = 'pending'
+             AND lvl->'approverIds' @> $2::jsonb
+         )
+       ORDER BY updated_at ASC
+       LIMIT $3 OFFSET $4`,
+      [tenantId, JSON.stringify([approverId]), limit, offset]
+    );
+    const total = result.rows[0] ? Number(result.rows[0]["total_count"]) : 0;
+    return {
+      items: result.rows.map((r) => this.rowToInstance(r)),
+      total
+    };
+  }
+  async getInstancesByFilter(tenantId, filter, opts) {
+    const pool = await this.getPool();
+    const conditions = ["tenant_id = $1"];
+    const params = [tenantId];
+    let idx = 2;
+    if (filter.status) {
+      conditions.push(`status = $${idx++}`);
+      params.push(filter.status);
+    }
+    if (filter.documentType) {
+      conditions.push(`document_type = $${idx++}`);
+      params.push(filter.documentType);
+    }
+    if (filter.submittedBy) {
+      conditions.push(`submitted_by = $${idx++}`);
+      params.push(filter.submittedBy);
+    }
+    if (filter.fromDate) {
+      conditions.push(`created_at >= $${idx++}`);
+      params.push(filter.fromDate.toISOString());
+    }
+    if (filter.toDate) {
+      conditions.push(`created_at <= $${idx++}`);
+      params.push(filter.toDate.toISOString());
+    }
+    const offset = opts?.offset ?? 0;
+    const limit = opts?.limit ?? 50;
+    params.push(limit, offset);
+    const sql = `SELECT *, COUNT(*) OVER() AS total_count
+                 FROM ${this.p}_instances
+                 WHERE ${conditions.join(" AND ")}
+                 ORDER BY created_at DESC
+                 LIMIT $${idx++} OFFSET $${idx}`;
+    const result = await pool.query(sql, params);
+    const total = result.rows[0] ? Number(result.rows[0]["total_count"]) : 0;
+    return {
+      items: result.rows.map((r) => this.rowToInstance(r)),
+      total
+    };
+  }
+  async getOverdueInstances(tenantId, asOf) {
+    const pool = await this.getPool();
+    const result = await pool.query(
+      `SELECT * FROM ${this.p}_instances
+       WHERE tenant_id = $1
+         AND status = 'pending'
+         AND (
+           EXISTS (
+             SELECT 1 FROM jsonb_array_elements(levels) AS lvl
+             WHERE (lvl->>'escalationDueAt') IS NOT NULL
+               AND (lvl->>'escalationDueAt')::timestamptz <= $2
+           )
+           OR (expires_at IS NOT NULL AND expires_at <= $2)
+           OR (sla_deadline_at IS NOT NULL AND sla_deadline_at <= $2 AND sla_breached_at IS NULL)
+           OR EXISTS (
+             SELECT 1 FROM jsonb_array_elements(levels) AS lvl
+             WHERE lvl->>'status' = 'pending'
+               AND (lvl->>'delegatedUntil') IS NOT NULL
+               AND (lvl->>'delegatedUntil')::timestamptz <= $2
+               AND (lvl->>'delegatedFrom') IS NOT NULL
+           )
+         )`,
+      [tenantId, asOf.toISOString()]
+    );
+    return result.rows.map((r) => this.rowToInstance(r));
+  }
+  async getIdempotentInstance(tenantId, idempotencyKey) {
+    const pool = await this.getPool();
+    const result = await pool.query(
+      `SELECT * FROM ${this.p}_instances WHERE tenant_id = $1 AND idempotency_key = $2`,
+      [tenantId, idempotencyKey]
+    );
+    const row = result.rows[0];
+    if (!row) return null;
+    return this.rowToInstance(row);
+  }
+  // ─── Audit (append-only) ──────────────────────────────────────────────────
+  async appendAuditEntry(tenantId, instanceId, entry) {
+    const pool = await this.getPool();
+    await pool.query(
+      `INSERT INTO ${this.p}_audit_log
+         (tenant_id, instance_id, action, actor_id, actor_role, actor_ip,
+          actor_user_agent, trace_id, level, timestamp,
+          old_value, new_value, comment, reason, delegate_to)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)`,
+      [
+        tenantId,
+        instanceId,
+        entry.action,
+        entry.actorId,
+        entry.actorRole ?? null,
+        entry.actorIp ?? null,
+        entry.actorUserAgent ?? null,
+        entry.traceId ?? null,
+        entry.level,
+        entry.timestamp.toISOString(),
+        entry.oldValue ? JSON.stringify(entry.oldValue) : null,
+        entry.newValue ? JSON.stringify(entry.newValue) : null,
+        entry.comment ?? null,
+        entry.reason ?? null,
+        entry.delegateTo ?? null
+      ]
+    );
+  }
+  async getInstancesByCursor(tenantId, filter, opts) {
+    const pool = await this.getPool();
+    const conditions = ["tenant_id = $1"];
+    const params = [tenantId];
+    let idx = 2;
+    if (filter.status) {
+      conditions.push(`status = $${idx++}`);
+      params.push(filter.status);
+    }
+    if (filter.documentType) {
+      conditions.push(`document_type = $${idx++}`);
+      params.push(filter.documentType);
+    }
+    if (filter.submittedBy) {
+      conditions.push(`submitted_by = $${idx++}`);
+      params.push(filter.submittedBy);
+    }
+    const { cursor, limit, direction = "forward" } = opts;
+    if (cursor) {
+      const decoded = Buffer.from(cursor, "base64").toString("utf8");
+      const colonIdx = decoded.indexOf(":");
+      const ts = decoded.slice(0, colonIdx);
+      const id = decoded.slice(colonIdx + 1);
+      if (direction === "forward") {
+        conditions.push(`(updated_at, id) > ($${idx++}::timestamptz, $${idx++})`);
+        params.push(ts, id);
+      } else {
+        conditions.push(`(updated_at, id) < ($${idx++}::timestamptz, $${idx++})`);
+        params.push(ts, id);
+      }
+    }
+    params.push(limit + 1);
+    const order = direction === "backward" ? "DESC" : "ASC";
+    const sql = `SELECT * FROM ${this.p}_instances
+                 WHERE ${conditions.join(" AND ")}
+                 ORDER BY updated_at ${order}, id ${order}
+                 LIMIT $${idx}`;
+    const result = await pool.query(sql, params);
+    const hasMore = result.rows.length > limit;
+    const rows = result.rows.slice(0, limit);
+    const items = rows.map((r) => this.rowToInstance(r));
+    const nextCursor = hasMore ? Buffer.from(`${rows[rows.length - 1]["updated_at"]}:${rows[rows.length - 1]["id"]}`).toString("base64") : void 0;
+    return { items, nextCursor, hasMore };
+  }
+  async end() {
+    await this._pool?.end();
+    this._pool = null;
+  }
+  rowToInstance(row) {
+    return {
+      id: row["id"],
+      tenantId: row["tenant_id"],
+      templateId: "",
+      templateName: row["template_name"],
+      documentId: row["document_id"],
+      documentType: row["document_type"],
+      submittedBy: row["submitted_by"],
+      status: row["status"],
+      currentLevel: row["current_level"],
+      version: row["version"],
+      idempotencyKey: row["idempotency_key"] ?? void 0,
+      data: row["data"],
+      metadata: row["metadata"],
+      levels: row["levels"],
+      auditLog: [],
+      parentInstanceId: row["parent_instance_id"] ?? void 0,
+      expiresAt: row["expires_at"] ? new Date(row["expires_at"]) : void 0,
+      deadlineAction: row["deadline_action"] ?? void 0,
+      slaDeadlineAt: row["sla_deadline_at"] ? new Date(row["sla_deadline_at"]) : void 0,
+      slaBreachedAt: row["sla_breached_at"] ? new Date(row["sla_breached_at"]) : void 0,
+      templateSnapshot: row["template_snapshot"] ?? void 0,
+      createdAt: new Date(row["created_at"]),
+      updatedAt: new Date(row["updated_at"])
+    };
+  }
+};
+
+export { PostgresAdapter };
+//# sourceMappingURL=PostgresAdapter.js.map
+//# sourceMappingURL=PostgresAdapter.js.map

package/dist/adapters/PostgresAdapter.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/errors.ts","../../src/adapters/PostgresAdapter.ts"],"names":[],"mappings":";AAAO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvC,WAAA,CACE,SACgB,IAAA,EAChB;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AAFG,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AAAA,EACd;AAAA,EAEA,MAAA,GAA0D;AACxD,IAAA,OAAO,EAAE,MAAM,IAAA,CAAK,IAAA,EAAM,SAAS,IAAA,CAAK,OAAA,EAAS,IAAA,EAAM,IAAA,CAAK,IAAA,EAAK;AAAA,EACnE;AAAA,EAEA,YAAA,GAAuB;AACrB,IAAA,MAAM,GAAA,GAA8B;AAAA,MAClC,SAAA,EAAW,GAAA;AAAA,MACX,QAAA,EAAU,GAAA;AAAA,MACV,SAAA,EAAW,GAAA;AAAA,MACX,UAAA,EAAY,GAAA;AAAA,MACZ,kBAAA,EAAoB;AAAA,KACtB;AACA,IAAA,OAAO,GAAA,CAAI,IAAA,CAAK,IAAI,CAAA,IAAK,GAAA;AAAA,EAC3B;AACF,CAAA;AASO,IAAM,qBAAA,GAAN,cAAoC,aAAA,CAAc;AAAA,EACvD,YAAY,UAAA,EAAoB;AAC9B,IAAA,KAAA;AAAA,MACE,iDAAiD,UAAU,CAAA,2DAAA,CAAA;AAAA,MAC3D;AAAA,KACF;AACA,IAAA,IAAA,CAAK,IAAA,GAAO,uBAAA;AAAA,EACd;AACF,CAAA;AASO,IAAM,uBAAA,GAAN,cAAsC,aAAA,CAAc;AAAA,EACzD,WAAA,CACE,SACgB,KAAA,EAChB;AACA,IAAA,KAAA,CAAM,SAAS,YAAY,CAAA;AAFX,IAAA,IAAA,CAAA,KAAA,GAAA,KAAA;AAGhB,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AAAA,EACd;AACF,CAAA;;;ACtBA,IAAM,eAAA,GAAkB,mBAAA;AAEjB,IAAM,kBAAN,MAAiD;AAAA,EAOtD,YAA6B,IAAA,EAA8B;AAA9B,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAN7B,IAAA,IAAA,CAAQ,KAAA,GAAkC,IAAA;AAOxC,IAAA,MAAM,MAAA,GAAS,KAAK,WAAA,IAAe,IAAA;AACnC,IAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA,EAAG;AACjC,MAAA,MAAM,IAAI,uBAAA;AAAA,QACR,iCAAiC,MAAM,CAAA,0GAAA;AAAA,OACzC;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,MAAA,GAAS,KAAK,MAAA,IAAU,QAAA;AAC7B,IAAA,IAAA,CAAK,qBAAqB,IAAA,CAAK,kBAAA;AAC/B,IAAA,IAAA,CAAK,eAAe,IAAA,CAAK,IAAA;AAAA,EAC3B;AAAA,EAEA,MAAc,OAAA,GAAsC;AAClD,IAAA,IAAI,IAAA,CAAK,YAAA,EAAc,OAAO,IAAA,CAAK,YAAA;AACnC,IAAA,IAAI,IAAA,CAAK,KAAA,EAAO,OAAO,IAAA,CAAK,KAAA;AAC5B,IAAA,MAAM,EAAE,OAAA,EAAS,EAAA,EAAG,GAAI,MAAM,OAAO,IAAI,CAAA;AACzC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAI,EAAA,CAAG,IAAA,CAAK;AAAA,MACvB,gBAAA,EAAkB,KAAK,IAAA,CAAK,gBAAA;AAAA,MAC5B,GAAA,EAAK,KAAK,IAAA,CAAK;AAAA,KAChB,CAAA;AACD,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,IAAY,CAAA,GAAI;AACd,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,CAAA,EAAI,KAAK,MAAM,CAAA,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,KAAK,KAAA,CAAM;AAAA,iCAAA,EACc,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,iCAAA,EAQN,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,iCAAA,EA0BN,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,iCAAA,EAmBN,KAAK,CAAC,CAAA;AAAA,WAAA,EAC5B,KAAK,CAAC,CAAA;;AAAA,iCAAA,EAEgB,KAAK,CAAC,CAAA;AAAA,WAAA,EAC5B,KAAK,CAAC,CAAA;;AAAA,iCAAA,EAEgB,KAAK,CAAC,CAAA;AAAA,WAAA,EAC5B,KAAK,CAAC,CAAA;;AAAA;AAAA,4BAAA,EAGW,KAAK,CAAC,CAAA;AAAA,4BAAA,EACN,KAAK,CAAC,CAAA;AAAA,4BAAA,EACN,KAAK,CAAC,CAAA;AAAA,4BAAA,EACN,KAAK,CAAC,CAAA;AAAA,4BAAA,EACN,KAAK,CAAC,CAAA;AAAA,4BAAA,EACN,KAAK,CAAC,CAAA;AAAA,IAAA,CAC/B,CAAA;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,SAAA,GAA2B;AAC/B,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,KAAK,KAAA,CAAM;AAAA,kBAAA,EACD,KAAK,CAAC,CAAA;AAAA,kBAAA,EACN,KAAK,CAAC,CAAA;;AAAA,4BAAA,EAEI,IAAA,CAAK,CAAC,CAAA,qBAAA,EAAwB,IAAA,CAAK,CAAC,CAAA;AAAA,oBAAA,EAC5C,IAAA,CAAK,CAAC,CAAA,qBAAA,EAAwB,IAAA,CAAK,CAAC,CAAA;AAAA;;AAAA,4BAAA,EAG5B,IAAA,CAAK,CAAC,CAAA,2BAAA,EAA8B,IAAA,CAAK,CAAC,CAAA;AAAA,oBAAA,EAClD,IAAA,CAAK,CAAC,CAAA,2BAAA,EAA8B,IAAA,CAAK,CAAC,CAAA;AAAA;AAAA,IAAA,CAE3D,CAAA;AAAA,EACH;AAAA;AAAA,EAIA,MAAM,aAAa,QAAA,EAA2C;AAC5D,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,IAAA,CAAK,KAAA;AAAA,MACT,CAAA,YAAA,EAAe,KAAK,CAAC,CAAA;AAAA;AAAA,uEAAA,CAAA;AAAA,MAGrB,CAAC,QAAA,CAAS,QAAA,EAAU,QAAA,CAAS,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA,EAAG,QAAA,CAAS,SAAA,CAAU,WAAA,EAAa;AAAA,KAC/F;AAAA,EACF;AAAA,EAEA,MAAM,WAAA,CAAY,QAAA,EAAkB,IAAA,EAAgD;AAClF,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA,iBAAA,EAAoB,KAAK,CAAC,CAAA,6CAAA,CAAA;AAAA,MAC1B,CAAC,UAAU,IAAI;AAAA,KACjB;AACA,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAG,IAAA,IAAQ,IAAA;AAAA,EACjC;AAAA,EAEA,MAAM,cAAc,QAAA,EAA+C;AACjE,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA,iBAAA,EAAoB,KAAK,CAAC,CAAA,uDAAA,CAAA;AAAA,MAC1B,CAAC,QAAQ;AAAA,KACX;AACA,IAAA,OAAO,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,EACtC;AAAA;AAAA,EAIA,MAAM,aAAa,QAAA,EAA2C;AAC5D,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,IAAA,CAAK,KAAA;AAAA,MACT,CAAA,YAAA,EAAe,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6CAAA,CAAA;AAAA,MASrB;AAAA,QACE,QAAA,CAAS,EAAA;AAAA,QACT,QAAA,CAAS,QAAA;AAAA,QACT,QAAA,CAAS,YAAA;AAAA,QACT,QAAA,CAAS,UAAA;AAAA,QACT,QAAA,CAAS,YAAA;AAAA,QACT,QAAA,CAAS,WAAA;AAAA,QACT,QAAA,CAAS,MAAA;AAAA,QACT,QAAA,CAAS,YAAA;AAAA,QACT,QAAA,CAAS,OAAA;AAAA,QACT,SAAS,cAAA,IAAkB,IAAA;AAAA,QAC3B,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,IAAI,CAAA;AAAA,QAC5B,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,QAAQ,CAAA;AAAA,QAChC,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA;AAAA,QAC9B,SAAS,gBAAA,IAAoB,IAAA;AAAA,QAC7B,QAAA,CAAS,SAAA,EAAW,WAAA,EAAY,IAAK,IAAA;AAAA,QACrC,SAAS,cAAA,IAAkB,IAAA;AAAA,QAC3B,QAAA,CAAS,aAAA,EAAe,WAAA,EAAY,IAAK,IAAA;AAAA,QACzC,QAAA,CAAS,aAAA,EAAe,WAAA,EAAY,IAAK,IAAA;AAAA,QACzC,SAAS,gBAAA,GAAmB,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,gBAAgB,CAAA,GAAI,IAAA;AAAA,QACxE,QAAA,CAAS,UAAU,WAAA,EAAY;AAAA,QAC/B,QAAA,CAAS,UAAU,WAAA;AAAY;AACjC,KACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CAAe,QAAA,EAA4B,eAAA,EAAwC;AACvF,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA,OAAA,EAAU,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,CAAA;AAAA,MAShB;AAAA,QACE,QAAA,CAAS,QAAA;AAAA,QACT,QAAA,CAAS,EAAA;AAAA,QACT,eAAA;AAAA,QACA,QAAA,CAAS,MAAA;AAAA,QACT,QAAA,CAAS,YAAA;AAAA,QACT,eAAA;AAAA,QACA,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,MAAM,CAAA;AAAA,QAC9B,QAAA,CAAS,aAAA,EAAe,WAAA,EAAY,IAAK,IAAA;AAAA,QACzC,QAAA,CAAS,UAAU,WAAA;AAAY;AACjC,KACF;AACA,IAAA,IAAI,OAAO,QAAA,KAAa,CAAA,QAAS,IAAI,qBAAA,CAAsB,SAAS,EAAE,CAAA;AAAA,EACxE;AAAA,EAEA,MAAM,WAAA,CAAY,QAAA,EAAkB,EAAA,EAA8C;AAChF,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA,cAAA,EAAiB,KAAK,CAAC,CAAA,2CAAA,CAAA;AAAA,MACvB,CAAC,UAAU,EAAE;AAAA,KACf;AACA,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AACzB,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,cAAc,GAA8B,CAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,sBAAA,CACJ,QAAA,EACA,UAAA,EACA,IAAA,EAC4C;AAC5C,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,IAAU,CAAA;AAC/B,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,EAAA;AAE7B,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA;AAAA,YAAA,EACQ,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAA,CAAA;AAAA,MAUd,CAAC,UAAU,IAAA,CAAK,SAAA,CAAU,CAAC,UAAU,CAAC,CAAA,EAAG,KAAA,EAAO,MAAM;AAAA,KACxD;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,GAAI,MAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAA8B,aAAa,CAAC,CAAA,GAAI,CAAA;AACpG,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,IAAA,CAAK,aAAA,CAAc,CAA4B,CAAC,CAAA;AAAA,MAC9E;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACJ,QAAA,EACA,MAAA,EACA,IAAA,EAC4C;AAC5C,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,UAAA,GAAuB,CAAC,gBAAgB,CAAA;AAC9C,IAAA,MAAM,MAAA,GAAoB,CAAC,QAAQ,CAAA;AACnC,IAAA,IAAI,GAAA,GAAM,CAAA;AAEV,IAAA,IAAI,OAAO,MAAA,EAAQ;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,UAAA,EAAa,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA,IAAG;AACxF,IAAA,IAAI,OAAO,YAAA,EAAc;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,iBAAA,EAAoB,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,YAAY,CAAA;AAAA,IAAG;AAC3G,IAAA,IAAI,OAAO,WAAA,EAAa;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,gBAAA,EAAmB,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,IAAG;AACxG,IAAA,IAAI,OAAO,QAAA,EAAU;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,eAAA,EAAkB,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,QAAA,CAAS,WAAA,EAAa,CAAA;AAAA,IAAG;AAC/G,IAAA,IAAI,OAAO,MAAA,EAAQ;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,eAAA,EAAkB,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,WAAA,EAAa,CAAA;AAAA,IAAG;AAE3G,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,IAAU,CAAA;AAC/B,IAAA,MAAM,KAAA,GAAQ,MAAM,KAAA,IAAS,EAAA;AAC7B,IAAA,MAAA,CAAO,IAAA,CAAK,OAAO,MAAM,CAAA;AAEzB,IAAA,MAAM,GAAA,GAAM,CAAA;AAAA,sBAAA,EACQ,KAAK,CAAC,CAAA;AAAA,uBAAA,EACL,UAAA,CAAW,IAAA,CAAK,OAAO,CAAC;AAAA;AAAA,wBAAA,EAEvB,GAAA,EAAK,YAAY,GAAG,CAAA,CAAA;AAE1C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA,CAAM,KAAK,MAAM,CAAA;AAC3C,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,GAAI,MAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAA8B,aAAa,CAAC,CAAA,GAAI,CAAA;AACpG,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,IAAA,CAAK,aAAA,CAAc,CAA4B,CAAC,CAAA;AAAA,MAC9E;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAA,CAAoB,QAAA,EAAkB,IAAA,EAAyC;AACnF,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA,cAAA,EAAiB,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAAA,CAAA;AAAA,MAmBvB,CAAC,QAAA,EAAU,IAAA,CAAK,WAAA,EAAa;AAAA,KAC/B;AACA,IAAA,OAAO,MAAA,CAAO,KAAK,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,aAAA,CAAc,CAA4B,CAAC,CAAA;AAAA,EAChF;AAAA,EAEA,MAAM,qBAAA,CACJ,QAAA,EACA,cAAA,EACkC;AAClC,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA;AAAA,MACxB,CAAA,cAAA,EAAiB,KAAK,CAAC,CAAA,wDAAA,CAAA;AAAA,MACvB,CAAC,UAAU,cAAc;AAAA,KAC3B;AACA,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA;AACzB,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,cAAc,GAA8B,CAAA;AAAA,EAC1D;AAAA;AAAA,EAIA,MAAM,gBAAA,CAAiB,QAAA,EAAkB,UAAA,EAAoB,KAAA,EAAkC;AAC7F,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,IAAA,CAAK,KAAA;AAAA,MACT,CAAA,YAAA,EAAe,KAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA,kEAAA,CAAA;AAAA,MAKrB;AAAA,QACE,QAAA;AAAA,QACA,UAAA;AAAA,QACA,KAAA,CAAM,MAAA;AAAA,QACN,KAAA,CAAM,OAAA;AAAA,QACN,MAAM,SAAA,IAAa,IAAA;AAAA,QACnB,MAAM,OAAA,IAAW,IAAA;AAAA,QACjB,MAAM,cAAA,IAAkB,IAAA;AAAA,QACxB,MAAM,OAAA,IAAW,IAAA;AAAA,QACjB,KAAA,CAAM,KAAA;AAAA,QACN,KAAA,CAAM,UAAU,WAAA,EAAY;AAAA,QAC5B,MAAM,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,QAAQ,CAAA,GAAI,IAAA;AAAA,QAClD,MAAM,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,QAAQ,CAAA,GAAI,IAAA;AAAA,QAClD,MAAM,OAAA,IAAW,IAAA;AAAA,QACjB,MAAM,MAAA,IAAU,IAAA;AAAA,QAChB,MAAM,UAAA,IAAc;AAAA;AACtB,KACF;AAAA,EACF;AAAA,EAEA,MAAM,oBAAA,CACJ,QAAA,EACA,MAAA,EACA,IAAA,EACkD;AAClD,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,OAAA,EAAQ;AAChC,IAAA,MAAM,UAAA,GAAuB,CAAC,gBAAgB,CAAA;AAC9C,IAAA,MAAM,MAAA,GAAoB,CAAC,QAAQ,CAAA;AACnC,IAAA,IAAI,GAAA,GAAM,CAAA;AAEV,IAAA,IAAI,OAAO,MAAA,EAAQ;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,UAAA,EAAa,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,MAAM,CAAA;AAAA,IAAG;AACxF,IAAA,IAAI,OAAO,YAAA,EAAc;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,iBAAA,EAAoB,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,YAAY,CAAA;AAAA,IAAG;AAC3G,IAAA,IAAI,OAAO,WAAA,EAAa;AAAE,MAAA,UAAA,CAAW,IAAA,CAAK,CAAA,gBAAA,EAAmB,GAAA,EAAK,CAAA,CAAE,CAAA;AAAG,MAAA,MAAA,CAAO,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,IAAG;AAExG,IAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAA,GAAY,WAAU,GAAI,IAAA;AAEjD,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,QAAQ,QAAQ,CAAA,CAAE,SAAS,MAAM,CAAA;AAC7D,MAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,GAAG,CAAA;AACpC,MAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AACpC,MAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,KAAA,CAAM,QAAA,GAAW,CAAC,CAAA;AACrC,MAAA,IAAI,cAAc,SAAA,EAAW;AAC3B,QAAA,UAAA,CAAW,IAAA,CAAK,CAAA,qBAAA,EAAwB,GAAA,EAAK,CAAA,gBAAA,EAAmB,KAAK,CAAA,CAAA,CAAG,CAAA;AACxE,QAAA,MAAA,CAAO,IAAA,CAAK,IAAI,EAAE,CAAA;AAAA,MACpB,CAAA,MAAO;AACL,QAAA,UAAA,CAAW,IAAA,CAAK,CAAA,qBAAA,EAAwB,GAAA,EAAK,CAAA,gBAAA,EAAmB,KAAK,CAAA,CAAA,CAAG,CAAA;AACxE,QAAA,MAAA,CAAO,IAAA,CAAK,IAAI,EAAE,CAAA;AAAA,MACpB;AAAA,IACF;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAA;AACrB,IAAA,MAAM,KAAA,GAAQ,SAAA,KAAc,UAAA,GAAa,MAAA,GAAS,KAAA;AAClD,IAAA,MAAM,GAAA,GAAM,CAAA,cAAA,EAAiB,IAAA,CAAK,CAAC,CAAA;AAAA,uBAAA,EACd,UAAA,CAAW,IAAA,CAAK,OAAO,CAAC;AAAA,qCAAA,EACV,KAAK,QAAQ,KAAK;AAAA,wBAAA,EAC/B,GAAG,CAAA,CAAA;AAEzB,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,KAAA,CAAM,KAAK,MAAM,CAAA;AAC3C,IAAA,MAAM,OAAA,GAAU,MAAA,CAAO,IAAA,CAAK,MAAA,GAAS,KAAA;AACrC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,KAAA,CAAM,GAAG,KAAK,CAAA;AACvC,IAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,aAAA,CAAc,CAA4B,CAAC,CAAA;AAE9E,IAAA,MAAM,UAAA,GAAa,OAAA,GACf,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,KAAK,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,CAAG,YAAY,CAAC,IAAI,IAAA,CAAK,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,CAAG,IAAI,CAAC,CAAA,CAAE,CAAA,CAAE,QAAA,CAAS,QAAQ,CAAA,GACxG,MAAA;AAEJ,IAAA,OAAO,EAAE,KAAA,EAAO,UAAA,EAAY,OAAA,EAAQ;AAAA,EACtC;AAAA,EAEA,MAAM,GAAA,GAAqB;AACzB,IAAA,MAAM,IAAA,CAAK,OAAO,GAAA,EAAI;AACtB,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AAAA,EACf;AAAA,EAEQ,cAAc,GAAA,EAAgD;AACpE,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,IAAI,IAAI,CAAA;AAAA,MACZ,QAAA,EAAU,IAAI,WAAW,CAAA;AAAA,MACzB,UAAA,EAAY,EAAA;AAAA,MACZ,YAAA,EAAc,IAAI,eAAe,CAAA;AAAA,MACjC,UAAA,EAAY,IAAI,aAAa,CAAA;AAAA,MAC7B,YAAA,EAAc,IAAI,eAAe,CAAA;AAAA,MACjC,WAAA,EAAa,IAAI,cAAc,CAAA;AAAA,MAC/B,MAAA,EAAQ,IAAI,QAAQ,CAAA;AAAA,MACpB,YAAA,EAAc,IAAI,eAAe,CAAA;AAAA,MACjC,OAAA,EAAS,IAAI,SAAS,CAAA;AAAA,MACtB,cAAA,EAAiB,GAAA,CAAI,iBAAiB,CAAA,IAAuB,MAAA;AAAA,MAC7D,IAAA,EAAM,IAAI,MAAM,CAAA;AAAA,MAChB,QAAA,EAAU,IAAI,UAAU,CAAA;AAAA,MACxB,MAAA,EAAQ,IAAI,QAAQ,CAAA;AAAA,MACpB,UAAU,EAAC;AAAA,MACX,gBAAA,EAAmB,GAAA,CAAI,oBAAoB,CAAA,IAAuB,MAAA;AAAA,MAClE,SAAA,EAAW,IAAI,YAAY,CAAA,GAAI,IAAI,IAAA,CAAK,GAAA,CAAI,YAAY,CAAW,CAAA,GAAI,MAAA;AAAA,MACvE,cAAA,EAAiB,GAAA,CAAI,iBAAiB,CAAA,IAAoC,MAAA;AAAA,MAC1E,aAAA,EAAe,IAAI,iBAAiB,CAAA,GAAI,IAAI,IAAA,CAAK,GAAA,CAAI,iBAAiB,CAAW,CAAA,GAAI,MAAA;AAAA,MACrF,aAAA,EAAe,IAAI,iBAAiB,CAAA,GAAI,IAAI,IAAA,CAAK,GAAA,CAAI,iBAAiB,CAAW,CAAA,GAAI,MAAA;AAAA,MACrF,gBAAA,EAAmB,GAAA,CAAI,mBAAmB,CAAA,IAAqD,MAAA;AAAA,MAC/F,SAAA,EAAW,IAAI,IAAA,CAAK,GAAA,CAAI,YAAY,CAAW,CAAA;AAAA,MAC/C,SAAA,EAAW,IAAI,IAAA,CAAK,GAAA,CAAI,YAAY,CAAW;AAAA,KACjD;AAAA,EACF;AACF","file":"PostgresAdapter.js","sourcesContent":["export class ApprovalError extends Error {\n  constructor(\n    message: string,\n    public readonly code: string,\n  ) {\n    super(message);\n    this.name = 'ApprovalError';\n  }\n\n  toJSON(): { code: string; message: string; name: string } {\n    return { code: this.code, message: this.message, name: this.name };\n  }\n\n  toHttpStatus(): number {\n    const map: Record<string, number> = {\n      NOT_FOUND: 404,\n      CONFLICT: 409,\n      FORBIDDEN: 403,\n      VALIDATION: 422,\n      TEMPLATE_NOT_FOUND: 404,\n    };\n    return map[this.code] ?? 500;\n  }\n}\n\nexport class ApprovalNotFoundError extends ApprovalError {\n  constructor(resource: string, id: string) {\n    super(`${resource} \"${id}\" not found.`, 'NOT_FOUND');\n    this.name = 'ApprovalNotFoundError';\n  }\n}\n\nexport class ApprovalConflictError extends ApprovalError {\n  constructor(instanceId: string) {\n    super(\n      `Concurrent modification detected on instance \"${instanceId}\". The record was updated by another process. Please retry.`,\n      'CONFLICT',\n    );\n    this.name = 'ApprovalConflictError';\n  }\n}\n\nexport class ApprovalForbiddenError extends ApprovalError {\n  constructor(message: string) {\n    super(message, 'FORBIDDEN');\n    this.name = 'ApprovalForbiddenError';\n  }\n}\n\nexport class ApprovalValidationError extends ApprovalError {\n  constructor(\n    message: string,\n    public readonly cause?: unknown,\n  ) {\n    super(message, 'VALIDATION');\n    this.name = 'ApprovalValidationError';\n  }\n}\n\nexport class ApprovalTemplateNotFoundError extends ApprovalError {\n  constructor(name: string) {\n    super(`Template \"${name}\" not found.`, 'TEMPLATE_NOT_FOUND');\n    this.name = 'ApprovalTemplateNotFoundError';\n  }\n}\n","/**\n * PostgreSQL adapter for hierarchical-approval.\n *\n * Peer dependency: `pg` >= 8\n *\n * Run the bundled migration before using:\n *   const adapter = new PostgresAdapter({ connectionString: '...' });\n *   await adapter.migrate();\n *\n * For PostgreSQL Row Level Security, call:\n *   await adapter.enableRLS();\n */\nimport type {\n  IStorageAdapter,\n  PaginationOpts,\n  PaginatedResult,\n  InstanceFilter,\n  CursorPaginationOpts,\n  CursorPaginatedResult,\n} from './IStorageAdapter.js';\nimport type { ApprovalTemplate, ApprovalInstance, AuditEntry } from '../types/index.js';\nimport { ApprovalConflictError, ApprovalValidationError } from '../errors.js';\n\nexport interface PostgresAdapterOptions {\n  connectionString?: string;\n  /** Bring your own pre-configured pg.Pool instead of a connectionString. */\n  pool?: import('pg').Pool;\n  tablePrefix?: string;\n  /** PostgreSQL schema to use (default: 'public'). */\n  schema?: string;\n  /** Statement timeout in milliseconds applied to every query (default: none). */\n  statementTimeoutMs?: number;\n  ssl?: import('tls').ConnectionOptions;\n}\n\nconst TABLE_PREFIX_RE = /^[a-z][a-z0-9_]*$/;\n\nexport class PostgresAdapter implements IStorageAdapter {\n  private _pool: import('pg').Pool | null = null;\n  private readonly prefix: string;\n  private readonly schema: string;\n  private readonly statementTimeoutMs?: number;\n  private readonly externalPool: import('pg').Pool | undefined;\n\n  constructor(private readonly opts: PostgresAdapterOptions) {\n    const prefix = opts.tablePrefix ?? 'ha';\n    if (!TABLE_PREFIX_RE.test(prefix)) {\n      throw new ApprovalValidationError(\n        `PostgresAdapter: tablePrefix \"${prefix}\" is invalid. Must match /^[a-z][a-z0-9_]*$/. Only lowercase letters, digits, and underscores are allowed.`,\n      );\n    }\n    this.prefix = prefix;\n    this.schema = opts.schema ?? 'public';\n    this.statementTimeoutMs = opts.statementTimeoutMs;\n    this.externalPool = opts.pool;\n  }\n\n  private async getPool(): Promise<import('pg').Pool> {\n    if (this.externalPool) return this.externalPool;\n    if (this._pool) return this._pool;\n    const { default: pg } = await import('pg');\n    this._pool = new pg.Pool({\n      connectionString: this.opts.connectionString,\n      ssl: this.opts.ssl,\n    });\n    return this._pool;\n  }\n\n  private get p() {\n    return `${this.schema}.${this.prefix}`;\n  }\n\n  async migrate(): Promise<void> {\n    const pool = await this.getPool();\n    await pool.query(`\n      CREATE TABLE IF NOT EXISTS ${this.p}_templates (\n        tenant_id   TEXT NOT NULL,\n        name        TEXT NOT NULL,\n        data        JSONB NOT NULL,\n        created_at  TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n        PRIMARY KEY (tenant_id, name)\n      );\n\n      CREATE TABLE IF NOT EXISTS ${this.p}_instances (\n        id                  TEXT NOT NULL,\n        tenant_id           TEXT NOT NULL,\n        template_name       TEXT NOT NULL,\n        document_id         TEXT NOT NULL,\n        document_type       TEXT NOT NULL,\n        submitted_by        TEXT NOT NULL,\n        status              TEXT NOT NULL,\n        current_level       INT  NOT NULL,\n        version             INT  NOT NULL DEFAULT 1,\n        idempotency_key     TEXT,\n        data                JSONB NOT NULL DEFAULT '{}',\n        metadata            JSONB NOT NULL DEFAULT '{}',\n        levels              JSONB NOT NULL DEFAULT '[]',\n        parent_instance_id  TEXT,\n        expires_at          TIMESTAMPTZ,\n        deadline_action     TEXT,\n        sla_deadline_at     TIMESTAMPTZ,\n        sla_breached_at     TIMESTAMPTZ,\n        template_snapshot   JSONB,\n        created_at          TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n        updated_at          TIMESTAMPTZ NOT NULL DEFAULT NOW(),\n        PRIMARY KEY (tenant_id, id),\n        UNIQUE (tenant_id, idempotency_key)\n      );\n\n      CREATE TABLE IF NOT EXISTS ${this.p}_audit_log (\n        id               BIGSERIAL PRIMARY KEY,\n        tenant_id        TEXT NOT NULL,\n        instance_id      TEXT NOT NULL,\n        action           TEXT NOT NULL,\n        actor_id         TEXT NOT NULL,\n        actor_role       TEXT,\n        actor_ip         TEXT,\n        actor_user_agent TEXT,\n        trace_id         TEXT,\n        level            INT  NOT NULL,\n        timestamp        TIMESTAMPTZ NOT NULL,\n        old_value        JSONB,\n        new_value        JSONB,\n        comment          TEXT,\n        reason           TEXT,\n        delegate_to      TEXT\n      );\n\n      CREATE INDEX IF NOT EXISTS ${this.p}_instances_tenant_status\n        ON ${this.p}_instances (tenant_id, status);\n\n      CREATE INDEX IF NOT EXISTS ${this.p}_instances_tenant_updated\n        ON ${this.p}_instances (tenant_id, updated_at);\n\n      CREATE INDEX IF NOT EXISTS ${this.p}_audit_log_instance\n        ON ${this.p}_audit_log (tenant_id, instance_id);\n\n      -- Add new columns to existing tables (idempotent for upgrades)\n      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS parent_instance_id TEXT;\n      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS expires_at TIMESTAMPTZ;\n      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS deadline_action TEXT;\n      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS sla_deadline_at TIMESTAMPTZ;\n      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS sla_breached_at TIMESTAMPTZ;\n      ALTER TABLE IF EXISTS ${this.p}_instances ADD COLUMN IF NOT EXISTS template_snapshot JSONB;\n    `);\n  }\n\n  /** Enable PostgreSQL Row Level Security for the instances and audit_log tables. */\n  async enableRLS(): Promise<void> {\n    const pool = await this.getPool();\n    await pool.query(`\n      ALTER TABLE ${this.p}_instances ENABLE ROW LEVEL SECURITY;\n      ALTER TABLE ${this.p}_audit_log ENABLE ROW LEVEL SECURITY;\n\n      DROP POLICY IF EXISTS ${this.p}_tenant_isolation ON ${this.p}_instances;\n      CREATE POLICY ${this.p}_tenant_isolation ON ${this.p}_instances\n        USING (tenant_id = current_setting('rls.tenant_id', TRUE));\n\n      DROP POLICY IF EXISTS ${this.p}_audit_tenant_isolation ON ${this.p}_audit_log;\n      CREATE POLICY ${this.p}_audit_tenant_isolation ON ${this.p}_audit_log\n        USING (tenant_id = current_setting('rls.tenant_id', TRUE));\n    `);\n  }\n\n  // ─── Templates ────────────────────────────────────────────────────────────\n\n  async saveTemplate(template: ApprovalTemplate): Promise<void> {\n    const pool = await this.getPool();\n    await pool.query(\n      `INSERT INTO ${this.p}_templates (tenant_id, name, data, created_at)\n       VALUES ($1, $2, $3, $4)\n       ON CONFLICT (tenant_id, name) DO UPDATE SET data = EXCLUDED.data`,\n      [template.tenantId, template.name, JSON.stringify(template), template.createdAt.toISOString()],\n    );\n  }\n\n  async getTemplate(tenantId: string, name: string): Promise<ApprovalTemplate | null> {\n    const pool = await this.getPool();\n    const result = await pool.query<{ data: ApprovalTemplate }>(\n      `SELECT data FROM ${this.p}_templates WHERE tenant_id = $1 AND name = $2`,\n      [tenantId, name],\n    );\n    return result.rows[0]?.data ?? null;\n  }\n\n  async listTemplates(tenantId: string): Promise<ApprovalTemplate[]> {\n    const pool = await this.getPool();\n    const result = await pool.query<{ data: ApprovalTemplate }>(\n      `SELECT data FROM ${this.p}_templates WHERE tenant_id = $1 ORDER BY created_at ASC`,\n      [tenantId],\n    );\n    return result.rows.map((r) => r.data);\n  }\n\n  // ─── Instances ────────────────────────────────────────────────────────────\n\n  async saveInstance(instance: ApprovalInstance): Promise<void> {\n    const pool = await this.getPool();\n    await pool.query(\n      `INSERT INTO ${this.p}_instances\n         (id, tenant_id, template_name, document_id, document_type, submitted_by,\n          status, current_level, version, idempotency_key,\n          data, metadata, levels,\n          parent_instance_id, expires_at, deadline_action,\n          sla_deadline_at, sla_breached_at, template_snapshot,\n          created_at, updated_at)\n       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21)\n       ON CONFLICT (tenant_id, id) DO NOTHING`,\n      [\n        instance.id,\n        instance.tenantId,\n        instance.templateName,\n        instance.documentId,\n        instance.documentType,\n        instance.submittedBy,\n        instance.status,\n        instance.currentLevel,\n        instance.version,\n        instance.idempotencyKey ?? null,\n        JSON.stringify(instance.data),\n        JSON.stringify(instance.metadata),\n        JSON.stringify(instance.levels),\n        instance.parentInstanceId ?? null,\n        instance.expiresAt?.toISOString() ?? null,\n        instance.deadlineAction ?? null,\n        instance.slaDeadlineAt?.toISOString() ?? null,\n        instance.slaBreachedAt?.toISOString() ?? null,\n        instance.templateSnapshot ? JSON.stringify(instance.templateSnapshot) : null,\n        instance.createdAt.toISOString(),\n        instance.updatedAt.toISOString(),\n      ],\n    );\n  }\n\n  async updateInstance(instance: ApprovalInstance, expectedVersion: number): Promise<void> {\n    const pool = await this.getPool();\n    const result = await pool.query(\n      `UPDATE ${this.p}_instances SET\n         status           = $4,\n         current_level    = $5,\n         version          = $6 + 1,\n         levels           = $7,\n         sla_breached_at  = $8,\n         updated_at       = $9\n       WHERE tenant_id = $1 AND id = $2 AND version = $3\n       RETURNING id`,\n      [\n        instance.tenantId,\n        instance.id,\n        expectedVersion,\n        instance.status,\n        instance.currentLevel,\n        expectedVersion,\n        JSON.stringify(instance.levels),\n        instance.slaBreachedAt?.toISOString() ?? null,\n        instance.updatedAt.toISOString(),\n      ],\n    );\n    if (result.rowCount === 0) throw new ApprovalConflictError(instance.id);\n  }\n\n  async getInstance(tenantId: string, id: string): Promise<ApprovalInstance | null> {\n    const pool = await this.getPool();\n    const result = await pool.query(\n      `SELECT * FROM ${this.p}_instances WHERE tenant_id = $1 AND id = $2`,\n      [tenantId, id],\n    );\n    const row = result.rows[0];\n    if (!row) return null;\n    return this.rowToInstance(row as Record<string, unknown>);\n  }\n\n  async getInstancesByApprover(\n    tenantId: string,\n    approverId: string,\n    opts?: PaginationOpts,\n  ): Promise<PaginatedResult<ApprovalInstance>> {\n    const pool = await this.getPool();\n    const offset = opts?.offset ?? 0;\n    const limit = opts?.limit ?? 50;\n\n    const result = await pool.query(\n      `SELECT *, COUNT(*) OVER() AS total_count\n       FROM ${this.p}_instances\n       WHERE tenant_id = $1\n         AND status = 'pending'\n         AND EXISTS (\n           SELECT 1 FROM jsonb_array_elements(levels) AS lvl\n           WHERE lvl->>'status' = 'pending'\n             AND lvl->'approverIds' @> $2::jsonb\n         )\n       ORDER BY updated_at ASC\n       LIMIT $3 OFFSET $4`,\n      [tenantId, JSON.stringify([approverId]), limit, offset],\n    );\n\n    const total = result.rows[0] ? Number((result.rows[0] as Record<string, unknown>)['total_count']) : 0;\n    return {\n      items: result.rows.map((r) => this.rowToInstance(r as Record<string, unknown>)),\n      total,\n    };\n  }\n\n  async getInstancesByFilter(\n    tenantId: string,\n    filter: InstanceFilter,\n    opts?: PaginationOpts,\n  ): Promise<PaginatedResult<ApprovalInstance>> {\n    const pool = await this.getPool();\n    const conditions: string[] = ['tenant_id = $1'];\n    const params: unknown[] = [tenantId];\n    let idx = 2;\n\n    if (filter.status) { conditions.push(`status = $${idx++}`); params.push(filter.status); }\n    if (filter.documentType) { conditions.push(`document_type = $${idx++}`); params.push(filter.documentType); }\n    if (filter.submittedBy) { conditions.push(`submitted_by = $${idx++}`); params.push(filter.submittedBy); }\n    if (filter.fromDate) { conditions.push(`created_at >= $${idx++}`); params.push(filter.fromDate.toISOString()); }\n    if (filter.toDate) { conditions.push(`created_at <= $${idx++}`); params.push(filter.toDate.toISOString()); }\n\n    const offset = opts?.offset ?? 0;\n    const limit = opts?.limit ?? 50;\n    params.push(limit, offset);\n\n    const sql = `SELECT *, COUNT(*) OVER() AS total_count\n                 FROM ${this.p}_instances\n                 WHERE ${conditions.join(' AND ')}\n                 ORDER BY created_at DESC\n                 LIMIT $${idx++} OFFSET $${idx}`;\n\n    const result = await pool.query(sql, params);\n    const total = result.rows[0] ? Number((result.rows[0] as Record<string, unknown>)['total_count']) : 0;\n    return {\n      items: result.rows.map((r) => this.rowToInstance(r as Record<string, unknown>)),\n      total,\n    };\n  }\n\n  async getOverdueInstances(tenantId: string, asOf: Date): Promise<ApprovalInstance[]> {\n    const pool = await this.getPool();\n    const result = await pool.query(\n      `SELECT * FROM ${this.p}_instances\n       WHERE tenant_id = $1\n         AND status = 'pending'\n         AND (\n           EXISTS (\n             SELECT 1 FROM jsonb_array_elements(levels) AS lvl\n             WHERE (lvl->>'escalationDueAt') IS NOT NULL\n               AND (lvl->>'escalationDueAt')::timestamptz <= $2\n           )\n           OR (expires_at IS NOT NULL AND expires_at <= $2)\n           OR (sla_deadline_at IS NOT NULL AND sla_deadline_at <= $2 AND sla_breached_at IS NULL)\n           OR EXISTS (\n             SELECT 1 FROM jsonb_array_elements(levels) AS lvl\n             WHERE lvl->>'status' = 'pending'\n               AND (lvl->>'delegatedUntil') IS NOT NULL\n               AND (lvl->>'delegatedUntil')::timestamptz <= $2\n               AND (lvl->>'delegatedFrom') IS NOT NULL\n           )\n         )`,\n      [tenantId, asOf.toISOString()],\n    );\n    return result.rows.map((r) => this.rowToInstance(r as Record<string, unknown>));\n  }\n\n  async getIdempotentInstance(\n    tenantId: string,\n    idempotencyKey: string,\n  ): Promise<ApprovalInstance | null> {\n    const pool = await this.getPool();\n    const result = await pool.query(\n      `SELECT * FROM ${this.p}_instances WHERE tenant_id = $1 AND idempotency_key = $2`,\n      [tenantId, idempotencyKey],\n    );\n    const row = result.rows[0];\n    if (!row) return null;\n    return this.rowToInstance(row as Record<string, unknown>);\n  }\n\n  // ─── Audit (append-only) ──────────────────────────────────────────────────\n\n  async appendAuditEntry(tenantId: string, instanceId: string, entry: AuditEntry): Promise<void> {\n    const pool = await this.getPool();\n    await pool.query(\n      `INSERT INTO ${this.p}_audit_log\n         (tenant_id, instance_id, action, actor_id, actor_role, actor_ip,\n          actor_user_agent, trace_id, level, timestamp,\n          old_value, new_value, comment, reason, delegate_to)\n       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15)`,\n      [\n        tenantId,\n        instanceId,\n        entry.action,\n        entry.actorId,\n        entry.actorRole ?? null,\n        entry.actorIp ?? null,\n        entry.actorUserAgent ?? null,\n        entry.traceId ?? null,\n        entry.level,\n        entry.timestamp.toISOString(),\n        entry.oldValue ? JSON.stringify(entry.oldValue) : null,\n        entry.newValue ? JSON.stringify(entry.newValue) : null,\n        entry.comment ?? null,\n        entry.reason ?? null,\n        entry.delegateTo ?? null,\n      ],\n    );\n  }\n\n  async getInstancesByCursor(\n    tenantId: string,\n    filter: InstanceFilter,\n    opts: CursorPaginationOpts,\n  ): Promise<CursorPaginatedResult<ApprovalInstance>> {\n    const pool = await this.getPool();\n    const conditions: string[] = ['tenant_id = $1'];\n    const params: unknown[] = [tenantId];\n    let idx = 2;\n\n    if (filter.status) { conditions.push(`status = $${idx++}`); params.push(filter.status); }\n    if (filter.documentType) { conditions.push(`document_type = $${idx++}`); params.push(filter.documentType); }\n    if (filter.submittedBy) { conditions.push(`submitted_by = $${idx++}`); params.push(filter.submittedBy); }\n\n    const { cursor, limit, direction = 'forward' } = opts;\n\n    if (cursor) {\n      const decoded = Buffer.from(cursor, 'base64').toString('utf8');\n      const colonIdx = decoded.indexOf(':');\n      const ts = decoded.slice(0, colonIdx);\n      const id = decoded.slice(colonIdx + 1);\n      if (direction === 'forward') {\n        conditions.push(`(updated_at, id) > ($${idx++}::timestamptz, $${idx++})`);\n        params.push(ts, id);\n      } else {\n        conditions.push(`(updated_at, id) < ($${idx++}::timestamptz, $${idx++})`);\n        params.push(ts, id);\n      }\n    }\n\n    params.push(limit + 1);\n    const order = direction === 'backward' ? 'DESC' : 'ASC';\n    const sql = `SELECT * FROM ${this.p}_instances\n                 WHERE ${conditions.join(' AND ')}\n                 ORDER BY updated_at ${order}, id ${order}\n                 LIMIT $${idx}`;\n\n    const result = await pool.query(sql, params);\n    const hasMore = result.rows.length > limit;\n    const rows = result.rows.slice(0, limit);\n    const items = rows.map((r) => this.rowToInstance(r as Record<string, unknown>));\n\n    const nextCursor = hasMore\n      ? Buffer.from(`${rows[rows.length - 1]!['updated_at']}:${rows[rows.length - 1]!['id']}`).toString('base64')\n      : undefined;\n\n    return { items, nextCursor, hasMore };\n  }\n\n  async end(): Promise<void> {\n    await this._pool?.end();\n    this._pool = null;\n  }\n\n  private rowToInstance(row: Record<string, unknown>): ApprovalInstance {\n    return {\n      id: row['id'] as string,\n      tenantId: row['tenant_id'] as string,\n      templateId: '',\n      templateName: row['template_name'] as string,\n      documentId: row['document_id'] as string,\n      documentType: row['document_type'] as string,\n      submittedBy: row['submitted_by'] as string,\n      status: row['status'] as ApprovalInstance['status'],\n      currentLevel: row['current_level'] as number,\n      version: row['version'] as number,\n      idempotencyKey: (row['idempotency_key'] as string | null) ?? undefined,\n      data: row['data'] as Record<string, unknown>,\n      metadata: row['metadata'] as Record<string, unknown>,\n      levels: row['levels'] as ApprovalInstance['levels'],\n      auditLog: [],\n      parentInstanceId: (row['parent_instance_id'] as string | null) ?? undefined,\n      expiresAt: row['expires_at'] ? new Date(row['expires_at'] as string) : undefined,\n      deadlineAction: (row['deadline_action'] as 'cancel' | 'reject' | null) ?? undefined,\n      slaDeadlineAt: row['sla_deadline_at'] ? new Date(row['sla_deadline_at'] as string) : undefined,\n      slaBreachedAt: row['sla_breached_at'] ? new Date(row['sla_breached_at'] as string) : undefined,\n      templateSnapshot: (row['template_snapshot'] as ApprovalInstance['templateSnapshot'] | null) ?? undefined,\n      createdAt: new Date(row['created_at'] as string),\n      updatedAt: new Date(row['updated_at'] as string),\n    };\n  }\n}\n"]}