hierarchical-approval 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -7,6 +7,118 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 _Nothing yet._
 
+## [0.8.0] - 2026-09-04
+
+### Added — boolean condition expressions
+
+- **A rule's `when` now accepts `all`, `any` and `not` groups, nestable to any
+  depth.** Conditions previously supported a single test or an array meaning
+  AND, so "escalate when the amount is large **or** the vendor is high-risk"
+  could not be written as one rule — it took two rules with duplicated
+  `addLevels`, and anything involving negation or a mix of AND and OR had no
+  expression at all.
+
+  ```ts
+  when: {
+    any: [
+      { all: [
+          { field: 'amount', operator: '>', value: 1000 },
+          { field: 'dept', operator: '==', value: 'engineering' },
+      ] },
+      { field: 'override', operator: '==', value: true },
+    ],
+  }
+  ```
+
+  A group sets exactly one combinator. `any` short-circuits on the first child
+  that holds. New `ConditionExpression` and `ConditionGroup` types are exported
+  from the package root.
+
+  **Fully backward compatible.** A bare condition still works, and an array is
+  shorthand for `all` — exactly what `when: [...]` already meant.
+
+- **Condition trees are validated when the template is defined.** `validateTemplate()`
+  and `defineTemplate()` now reject an empty `all`/`any`, a group setting more
+  than one combinator, a non-array `all`/`any`, and a leaf missing its `field`
+  or `operator` — reporting the offending path, e.g.
+  `conditions[0].when.any[1].operator`. Previously a malformed condition was
+  only discovered at submit time, on a real document.
+
+  Operator *names* are deliberately not checked at definition time, because
+  custom operators can be registered after a template is defined; an unknown
+  operator still throws when the condition is evaluated.
+
+- **`validateConditionExpression(expression, path)` is exported** for callers
+  that build condition trees dynamically and want to check one before handing it
+  to a template. It collects every problem rather than throwing on the first.
+
+## [0.7.0] - 2026-09-04
+
+### Fixed — two condition-evaluation bypasses
+
+Both of these let a `ConditionRule` fire when it should not have, and because
+conditions decide which levels an instance gets, a spurious match on a
+`skipLevels` rule **removes approval levels from a live document**. Anyone using
+`skipLevels` — or `addLevels` to *escalate* above a threshold — should upgrade.
+
+- **Numeric operators no longer coerce non-numbers to zero.** `>`, `<`, `>=` and
+  `<=` compared with `Number(actual)`, and `Number()` maps `null`, `''`, `'   '`,
+  `[]` and `false` all to `0`. So a fast-track rule like
+  `{ when: { field: 'amount', operator: '<', value: 5000 }, skipLevels: [2, 3] }`
+  matched a purchase order whose `amount` was `null` or blank, silently skipping
+  two approval levels on exactly the documents whose value was unknown. `false`
+  and `[]` did the same, and `true` compared as `1`.
+
+  A numeric comparison against a non-number is now treated as *undecidable* rather
+  than false-y: it reports **no match**, which is the outcome `undefined` has
+  always produced. Accepted operands are finite numbers, bigints, `Date`
+  (compared as epoch milliseconds), and numeric strings such as `'100'` or
+  `' 1e3 '` — ERP payloads routinely arrive as JSON strings, so string comparison
+  is retained. Rejected: `null`, `undefined`, booleans, arrays, objects, blank
+  strings, `NaN` and `Infinity`.
+
+  **Behaviour change.** A rule that was matching on blank or boolean data stops
+  matching. That is the fix, but it does change which levels such an instance
+  gets, so re-check any template whose conditions run against optional fields.
+  `==` and `!=` are untouched — they were already strict.
+
+- **Dot-path field lookup now reads own properties only.** `getField` tested
+  `key in obj`, which walks the prototype chain, so a condition on `isFastTrack`
+  was satisfied by an inherited `Object.prototype.isFastTrack` that no document
+  ever declared — turning any prototype pollution elsewhere in the dependency
+  tree into an approval-level bypass. Resolution now uses
+  `Object.prototype.hasOwnProperty`, so a segment that is not an own property
+  resolves to `undefined` exactly as an absent field does. This also closes
+  `__proto__`, `constructor` and `prototype` as readable paths.
+
+  **Behaviour change.** Context data whose fields live on a prototype (a class
+  instance with getters, rather than a plain object) no longer resolves. Plain
+  objects, arrays, array indices and `Object.create(null)` objects are
+  unaffected, and context data does not survive JSONB round-tripping as a class
+  instance in any case.
+
+### Added
+
+- **`toComparableNumber(value)` is exported from the package root.** The same
+  strict coercion the built-in numeric operators use, returning `number` or
+  `null`, so a custom operator registered with `registerConditionOperator()` can
+  inherit the identical semantics instead of re-introducing `Number()`. The
+  README's `between` recipe now uses it — the previous version of that snippet
+  demonstrated the zero-coercion bug.
+
+### Tests
+
+- Restored the **17 `ConditionEvaluator` unit tests that commit `8d648d8`
+  deleted**, having replaced the suite body with a `// ... existing tests ...`
+  placeholder and a single test. Coverage of the evaluator had silently dropped
+  to 74% of statements and 56% of functions.
+- Added 36 tests across the two fixes (per-type non-comparable operand matrix for
+  each numeric operator, the `skipLevels` bypass scenario, prototype-pollution
+  guards, `toComparableNumber` directly) plus an executable copy of the README's
+  custom-operator recipes, so a documented snippet cannot rot or stop compiling.
+  All 24 of the pre-existing-bug assertions were confirmed to fail against the
+  unfixed source.
+
 ## [0.6.0] - 2026-08-21
 
 ### Fixed — event delivery, template reads, and the CI lint gate

package/README.md

@@ -305,6 +305,74 @@ conditions: [
 
 **Built-in operators:** `>`, `<`, `>=`, `<=`, `==`, `!=`, `in`, `not_in`
 
+#### Combining conditions
+
+A `when` can be a single condition, an array (every element must hold), or a
+boolean group — `all`, `any`, `not` — which nest to any depth:
+
+```ts
+conditions: [
+  {
+    // (amount > 1000 AND dept is engineering) OR an explicit override flag
+    when: {
+      any: [
+        {
+          all: [
+            { field: 'amount', operator: '>', value: 1000 },
+            { field: 'dept', operator: '==', value: 'engineering' },
+          ],
+        },
+        { field: 'override', operator: '==', value: true },
+      ],
+    },
+    addLevels: [{ level: 3, name: 'CFO', approvers: [{ type: 'user', userId: 'cfo' }], mode: 'any' }],
+  },
+  {
+    // Everything outside the US skips the domestic finance review
+    when: { not: { field: 'region', operator: '==', value: 'US' } },
+    skipLevels: [2],
+  },
+]
+```
+
+A group sets exactly one of `all` / `any` / `not`. `any` short-circuits on the
+first child that holds. An array is shorthand for `all`, so every template
+written before groups existed keeps working unchanged.
+
+Groups are checked when the template is defined, not when a document is
+submitted — `validateTemplate()` and `defineTemplate()` reject an empty `all`,
+a group setting two combinators, or a leaf missing its `field`/`operator`, and
+report the offending path (`conditions[0].when.any[1].operator`). Operator
+*names* are deliberately not checked there, since custom operators may be
+registered after the template is defined.
+
+#### How values are compared
+
+`==` and `!=` compare **strictly** — `'100'` does not equal `100`.
+
+The numeric operators (`>`, `<`, `>=`, `<=`) match only when **both** sides are
+unambiguously numeric: finite numbers, bigints, `Date` (compared as epoch
+milliseconds), and numeric strings such as `'100'` or `' 1e3 '` — because ERP
+payloads routinely arrive as JSON strings. Anything else — `null`, `undefined`,
+`true`/`false`, arrays, objects, blank strings, `NaN`, `Infinity` — is treated as
+*not comparable*, and the condition reports **no match**.
+
+This matters for safety. A rule that skips levels on small amounts must not fire
+on a document whose amount was never populated:
+
+```ts
+{ when: { field: 'amount', operator: '<', value: 5000 }, skipLevels: [2, 3] }
+
+// amount: 4999  -> matches, levels 2 and 3 are skipped
+// amount: null  -> NO match, every level is kept
+// amount: ''    -> NO match, every level is kept
+```
+
+Field paths resolve **own properties only**, so an inherited or polluted
+`Object.prototype` member can never satisfy a condition. A path segment that is
+not an own property — including `__proto__`, `constructor`, and `prototype` —
+resolves to `undefined`, exactly as a genuinely absent field does.
+
 **Register custom operators** at engine level:
 
 ```ts
@@ -312,11 +380,23 @@ engine.registerConditionOperator(
   'contains',
   (actual, expected) => typeof actual === 'string' && actual.includes(String(expected)),
 );
+```
 
-engine.registerConditionOperator(
-  'between',
-  (actual, [min, max]: number[]) => Number(actual) >= min && Number(actual) <= max,
-);
+Custom numeric operators should reuse the same strictness via the exported
+`toComparableNumber` helper, which returns `null` for anything that is not
+unambiguously a number:
+
+```ts
+import { toComparableNumber } from 'hierarchical-approval';
+
+engine.registerConditionOperator('between', (actual, expected) => {
+  const value = toComparableNumber(actual);
+  if (value === null || !Array.isArray(expected) || expected.length !== 2) return false;
+  const min = toComparableNumber(expected[0]);
+  const max = toComparableNumber(expected[1]);
+  if (min === null || max === null) return false;
+  return value >= min && value <= max;
+});
 ```
 
 ---

package/dist/{ApprovalEngine-D3rHIli1.d.ts → ApprovalEngine-DFY53zRK.d.ts}

@@ -1,14 +1,14 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-D-oPxxun.js';
-import { m as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-D8D7b07N.js';
-import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-BdfVjYa8.js';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-D7jsZT6O.js';
+import { k as ConditionExpression, o as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-CtkmEkYa.js';
+import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-Hn70VShV.js';
 import { z } from 'zod';
 import { L as Logger } from './Logger-BplhlU7l.js';
 import { C as Clock } from './Clock-3FnOczFJ.js';
-import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-KGAwT9f-.js';
-import { I as IAuditAdapter } from './IAuditAdapter-B3vvU09m.js';
+import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-BCcAqSzT.js';
+import { I as IAuditAdapter } from './IAuditAdapter-CaM3A2Kt.js';
 import { I as IMetricsAdapter } from './IMetricsAdapter-D9PUz4tM.js';
 import { I as ISchedulerAdapter } from './ISchedulerAdapter-DKv_QjVN.js';
-import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-CZESF3CJ.js';
+import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-DFD0ELtO.js';
 
 declare const SubmitOptionsSchema: z.ZodObject<{
     templateName: z.ZodString;
@@ -130,6 +130,44 @@ type ApproverResolverFn = (config: Record<string, unknown>, ctx: {
 }) => Promise<string[]> | string[];
 
 type ConditionOperatorFn = (actual: unknown, expected: unknown) => boolean;
+/**
+ * Coerce a value to a number *only* when it unambiguously represents one.
+ *
+ * Plain `Number()` maps `null`, `''`, `'   '`, `[]` and `false` all to `0`, which
+ * in an approval engine is an approval-bypass hazard: a rule such as
+ * `{ amount: '<' 5000 } -> skipLevels: [2, 3]` would fire on a document whose
+ * `amount` is missing or blank, silently skipping two approval levels. Numeric
+ * comparison against a value that is not a number is not "false-y", it is
+ * *undecidable*, so this returns `null` and the comparison reports no match —
+ * the same outcome `undefined` has always produced.
+ *
+ * Accepted: finite numbers, bigints, `Date` (compared as epoch ms), and numeric
+ * strings such as `'100'` or `' 1e3 '` (ERP payloads routinely arrive as JSON
+ * strings). Rejected: `null`, `undefined`, booleans, arrays, objects, blank
+ * strings, and the non-finite `NaN` / `Infinity`.
+ *
+ * @param value - The raw value taken from the condition or the context data.
+ * @returns The numeric value, or `null` when the value is not comparable.
+ */
+declare function toComparableNumber(value: unknown): number | null;
+/**
+ * Statically check a condition expression tree, collecting every problem rather
+ * than throwing on the first.
+ *
+ * Runs at template-definition time so a malformed group is caught while the
+ * author is looking at it, instead of at submit time on a real document. The
+ * operator check is deliberately deferred: custom operators can be registered
+ * after a template is defined, so an unknown name is only an error once the
+ * condition is actually evaluated.
+ *
+ * @param expression - The `when` expression to check.
+ * @param path - Field path prefix used in reported errors.
+ * @returns One entry per problem found; empty when the tree is well formed.
+ */
+declare function validateConditionExpression(expression: ConditionExpression, path: string): Array<{
+    field: string;
+    message: string;
+}>;
 
 interface ValidationResult {
     valid: boolean;
@@ -415,4 +453,4 @@ declare class ApprovalEngine {
     private runExternalAudit;
 }
 
-export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, weekendCalendar as w };
+export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, toComparableNumber as t, validateConditionExpression as v, weekendCalendar as w };

package/dist/{ApprovalEngine-CIQFYhsX.d.cts → ApprovalEngine-DVMMtiSm.d.cts}

@@ -1,14 +1,14 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-BibHlgPw.cjs';
-import { m as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-D8D7b07N.cjs';
-import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-DVVmXU6a.cjs';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-egPQD6Ry.cjs';
+import { k as ConditionExpression, o as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-CtkmEkYa.cjs';
+import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-Ci0gf6ac.cjs';
 import { z } from 'zod';
 import { L as Logger } from './Logger-BplhlU7l.cjs';
 import { C as Clock } from './Clock-3FnOczFJ.cjs';
-import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-CXgXmGUF.cjs';
-import { I as IAuditAdapter } from './IAuditAdapter-B_DhuPsU.cjs';
+import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-DOlOraCX.cjs';
+import { I as IAuditAdapter } from './IAuditAdapter-BODIlw4h.cjs';
 import { I as IMetricsAdapter } from './IMetricsAdapter-D9PUz4tM.cjs';
 import { I as ISchedulerAdapter } from './ISchedulerAdapter-DKv_QjVN.cjs';
-import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-B6JzRNUk.cjs';
+import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-cT7LSHtl.cjs';
 
 declare const SubmitOptionsSchema: z.ZodObject<{
     templateName: z.ZodString;
@@ -130,6 +130,44 @@ type ApproverResolverFn = (config: Record<string, unknown>, ctx: {
 }) => Promise<string[]> | string[];
 
 type ConditionOperatorFn = (actual: unknown, expected: unknown) => boolean;
+/**
+ * Coerce a value to a number *only* when it unambiguously represents one.
+ *
+ * Plain `Number()` maps `null`, `''`, `'   '`, `[]` and `false` all to `0`, which
+ * in an approval engine is an approval-bypass hazard: a rule such as
+ * `{ amount: '<' 5000 } -> skipLevels: [2, 3]` would fire on a document whose
+ * `amount` is missing or blank, silently skipping two approval levels. Numeric
+ * comparison against a value that is not a number is not "false-y", it is
+ * *undecidable*, so this returns `null` and the comparison reports no match —
+ * the same outcome `undefined` has always produced.
+ *
+ * Accepted: finite numbers, bigints, `Date` (compared as epoch ms), and numeric
+ * strings such as `'100'` or `' 1e3 '` (ERP payloads routinely arrive as JSON
+ * strings). Rejected: `null`, `undefined`, booleans, arrays, objects, blank
+ * strings, and the non-finite `NaN` / `Infinity`.
+ *
+ * @param value - The raw value taken from the condition or the context data.
+ * @returns The numeric value, or `null` when the value is not comparable.
+ */
+declare function toComparableNumber(value: unknown): number | null;
+/**
+ * Statically check a condition expression tree, collecting every problem rather
+ * than throwing on the first.
+ *
+ * Runs at template-definition time so a malformed group is caught while the
+ * author is looking at it, instead of at submit time on a real document. The
+ * operator check is deliberately deferred: custom operators can be registered
+ * after a template is defined, so an unknown name is only an error once the
+ * condition is actually evaluated.
+ *
+ * @param expression - The `when` expression to check.
+ * @param path - Field path prefix used in reported errors.
+ * @returns One entry per problem found; empty when the tree is well formed.
+ */
+declare function validateConditionExpression(expression: ConditionExpression, path: string): Array<{
+    field: string;
+    message: string;
+}>;
 
 interface ValidationResult {
     valid: boolean;
@@ -415,4 +453,4 @@ declare class ApprovalEngine {
     private runExternalAudit;
 }
 
-export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, weekendCalendar as w };
+export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, toComparableNumber as t, validateConditionExpression as v, weekendCalendar as w };

package/dist/{IAuditAdapter-B_DhuPsU.d.cts → IAuditAdapter-BODIlw4h.d.cts}

@@ -1,4 +1,4 @@
-import { b as AuditEntry, a as ApprovalInstance } from './instance-D8D7b07N.cjs';
+import { b as AuditEntry, a as ApprovalInstance } from './instance-CtkmEkYa.cjs';
 
 interface IAuditAdapter {
     /**

package/dist/{IAuditAdapter-B3vvU09m.d.ts → IAuditAdapter-CaM3A2Kt.d.ts}

@@ -1,4 +1,4 @@
-import { b as AuditEntry, a as ApprovalInstance } from './instance-D8D7b07N.js';
+import { b as AuditEntry, a as ApprovalInstance } from './instance-CtkmEkYa.js';
 
 interface IAuditAdapter {
     /**

package/dist/{IAuthorizationPolicy-CZESF3CJ.d.ts → IAuthorizationPolicy-DFD0ELtO.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-D8D7b07N.js';
+import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-CtkmEkYa.js';
 
 interface AuthorizationContext {
     operation: 'submit' | 'approve' | 'reject' | 'delegate' | 'reassign' | 'cancel' | 'escalate' | 'override' | 'resubmit' | 'addComment';

package/dist/{IAuthorizationPolicy-B6JzRNUk.d.cts → IAuthorizationPolicy-cT7LSHtl.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-D8D7b07N.cjs';
+import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-CtkmEkYa.cjs';
 
 interface AuthorizationContext {
     operation: 'submit' | 'approve' | 'reject' | 'delegate' | 'reassign' | 'cancel' | 'escalate' | 'override' | 'resubmit' | 'addComment';

package/dist/{INotificationAdapter-DVVmXU6a.d.cts → INotificationAdapter-Ci0gf6ac.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, b as AuditEntry } from './instance-D8D7b07N.cjs';
+import { a as ApprovalInstance, b as AuditEntry } from './instance-CtkmEkYa.cjs';
 
 interface ApprovalEvent {
     instanceId: string;

package/dist/{INotificationAdapter-BdfVjYa8.d.ts → INotificationAdapter-Hn70VShV.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, b as AuditEntry } from './instance-D8D7b07N.js';
+import { a as ApprovalInstance, b as AuditEntry } from './instance-CtkmEkYa.js';
 
 interface ApprovalEvent {
     instanceId: string;

package/dist/{IOperationMiddleware-KGAwT9f-.d.ts → IOperationMiddleware-BCcAqSzT.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance } from './instance-D8D7b07N.js';
+import { a as ApprovalInstance } from './instance-CtkmEkYa.js';
 
 declare class ApprovalError extends Error {
     readonly code: string;

package/dist/{IOperationMiddleware-CXgXmGUF.d.cts → IOperationMiddleware-DOlOraCX.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance } from './instance-D8D7b07N.cjs';
+import { a as ApprovalInstance } from './instance-CtkmEkYa.cjs';
 
 declare class ApprovalError extends Error {
     readonly code: string;

package/dist/{IStorageAdapter-D-oPxxun.d.ts → IStorageAdapter-D7jsZT6O.d.ts}

@@ -1,4 +1,4 @@
-import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-D8D7b07N.js';
+import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-CtkmEkYa.js';
 
 interface PaginationOpts {
     limit: number;

package/dist/{IStorageAdapter-BibHlgPw.d.cts → IStorageAdapter-egPQD6Ry.d.cts}

@@ -1,4 +1,4 @@
-import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-D8D7b07N.cjs';
+import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-CtkmEkYa.cjs';
 
 interface PaginationOpts {
     limit: number;

package/dist/adapters/MemoryAdapter.d.cts

@@ -1,5 +1,5 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-BibHlgPw.cjs';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.cjs';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-egPQD6Ry.cjs';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.cjs';
 
 declare class MemoryAdapter implements IStorageAdapter {
     private templates;

package/dist/adapters/MemoryAdapter.d.ts

@@ -1,5 +1,5 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D-oPxxun.js';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.js';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D7jsZT6O.js';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.js';
 
 declare class MemoryAdapter implements IStorageAdapter {
     private templates;

package/dist/adapters/PostgresAdapter.d.cts

@@ -1,7 +1,7 @@
 import * as tls from 'tls';
 import * as pg from 'pg';
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-BibHlgPw.cjs';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.cjs';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-egPQD6Ry.cjs';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.cjs';
 
 interface PostgresAdapterOptions {
     connectionString?: string;

package/dist/adapters/PostgresAdapter.d.ts

@@ -1,7 +1,7 @@
 import * as tls from 'tls';
 import * as pg from 'pg';
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D-oPxxun.js';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.js';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D7jsZT6O.js';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.js';
 
 interface PostgresAdapterOptions {
     connectionString?: string;

package/dist/index.cjs

@@ -439,11 +439,33 @@ var EscalationScheduler = class {
 };
 
 // src/engine/ConditionEvaluator.ts
+function toComparableNumber(value) {
+  if (typeof value === "number") return Number.isFinite(value) ? value : null;
+  if (typeof value === "bigint") return Number(value);
+  if (value instanceof Date) {
+    const time = value.getTime();
+    return Number.isFinite(time) ? time : null;
+  }
+  if (typeof value === "string") {
+    if (value.trim() === "") return null;
+    const parsed = Number(value);
+    return Number.isFinite(parsed) ? parsed : null;
+  }
+  return null;
+}
+function numeric(compare) {
+  return (actual, expected) => {
+    const left = toComparableNumber(actual);
+    const right = toComparableNumber(expected);
+    if (left === null || right === null) return false;
+    return compare(left, right);
+  };
+}
 var operatorRegistry = /* @__PURE__ */ new Map([
-  [">", (a, e) => Number(a) > Number(e)],
-  ["<", (a, e) => Number(a) < Number(e)],
-  [">=", (a, e) => Number(a) >= Number(e)],
-  ["<=", (a, e) => Number(a) <= Number(e)],
+  [">", numeric((a, e) => a > e)],
+  ["<", numeric((a, e) => a < e)],
+  [">=", numeric((a, e) => a >= e)],
+  ["<=", numeric((a, e) => a <= e)],
   ["==", (a, e) => a === e],
   ["!=", (a, e) => a !== e],
   ["in", (a, e) => Array.isArray(e) && e.includes(a)],
@@ -460,7 +482,7 @@ function registerConditionOperator(name, fn) {
 }
 function getField(data, path) {
   return path.split(".").reduce((obj, key) => {
-    if (obj !== null && typeof obj === "object" && key in obj) {
+    if (obj !== null && typeof obj === "object" && Object.prototype.hasOwnProperty.call(obj, key)) {
       return obj[key];
     }
     return void 0;
@@ -476,16 +498,88 @@ function evaluateCondition(condition, data) {
   const actual = getField(data, condition.field);
   return fn(actual, condition.value);
 }
-function evaluateRule(rule, data) {
-  if (Array.isArray(rule)) {
-    return rule.every((c) => evaluateCondition(c, data));
+function asGroup(expression) {
+  if (expression === null || typeof expression !== "object" || Array.isArray(expression)) {
+    return null;
+  }
+  const candidate = expression;
+  const keys = ["all", "any", "not"].filter((k) => candidate[k] !== void 0);
+  if (keys.length === 0) return null;
+  if (keys.length > 1) {
+    throw new ApprovalValidationError(
+      `Condition group must set exactly one of "all", "any" or "not" (got ${keys.join(", ")}).`
+    );
+  }
+  const key = keys[0];
+  if (key !== "not" && !Array.isArray(candidate[key])) {
+    throw new ApprovalValidationError(`Condition group "${key}" must be an array of expressions.`);
+  }
+  if (key !== "not" && candidate[key].length === 0) {
+    throw new ApprovalValidationError(`Condition group "${key}" must not be empty.`);
+  }
+  return expression;
+}
+function evaluateExpression(expression, data) {
+  if (Array.isArray(expression)) {
+    return expression.every((child) => evaluateExpression(child, data));
+  }
+  const group = asGroup(expression);
+  if (group === null) {
+    return evaluateCondition(expression, data);
   }
-  return evaluateCondition(rule, data);
+  if (group.all !== void 0) {
+    return group.all.every((child) => evaluateExpression(child, data));
+  }
+  if (group.any !== void 0) {
+    return group.any.some((child) => evaluateExpression(child, data));
+  }
+  return !evaluateExpression(group.not, data);
+}
+function validateConditionExpression(expression, path) {
+  const errors = [];
+  const walk = (node, at) => {
+    if (Array.isArray(node)) {
+      if (node.length === 0) {
+        errors.push({ field: at, message: "Condition list must not be empty." });
+      }
+      node.forEach((child, i) => walk(child, `${at}[${i}]`));
+      return;
+    }
+    let group;
+    try {
+      group = asGroup(node);
+    } catch (err) {
+      errors.push({ field: at, message: err.message });
+      return;
+    }
+    if (group === null) {
+      const leaf = node;
+      if (typeof leaf?.field !== "string" || leaf.field.length === 0) {
+        errors.push({
+          field: `${at}.field`,
+          message: "Condition requires a non-empty field path."
+        });
+      }
+      if (typeof leaf?.operator !== "string" || leaf.operator.length === 0) {
+        errors.push({ field: `${at}.operator`, message: "Condition requires an operator." });
+      }
+      return;
+    }
+    if (group.all !== void 0) {
+      group.all.forEach((child, i) => walk(child, `${at}.all[${i}]`));
+    } else if (group.any !== void 0) {
+      group.any.forEach((child, i) => walk(child, `${at}.any[${i}]`));
+    } else {
+      walk(group.not, `${at}.not`);
+    }
+  };
+  walk(expression, path);
+  return errors;
 }
 function evaluateConditions(conditions, data) {
   const mutations = { addLevels: [], skipLevels: /* @__PURE__ */ new Set() };
   for (const rule of conditions) {
-    if (evaluateRule(rule.when, data)) {
+    if (evaluateExpression(rule.when, data)) {
       if (rule.addLevels) mutations.addLevels.push(...rule.addLevels);
       if (rule.skipLevels) rule.skipLevels.forEach((l) => mutations.skipLevels.add(l));
     }
@@ -783,6 +877,9 @@ var ApprovalEngine = class {
     }
     if (config.conditions) {
       config.conditions.forEach((rule, ruleIdx) => {
+        errors.push(
+          ...validateConditionExpression(rule.when, `conditions[${ruleIdx}].when`)
+        );
         if (rule.addLevels) {
           rule.addLevels.forEach((al, alIdx) => {
             const conflictsWithStatic = config.levels.some((l) => l.level === al.level);
@@ -2596,6 +2693,8 @@ exports.MemoryAdapter = MemoryAdapter;
 exports.defaultIdGenerator = defaultIdGenerator;
 exports.noopLogger = noopLogger;
 exports.systemClock = systemClock;
+exports.toComparableNumber = toComparableNumber;
+exports.validateConditionExpression = validateConditionExpression;
 exports.weekendCalendar = weekendCalendar;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map