hierarchical-approval 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -7,6 +7,51 @@ adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 _Nothing yet._
 
+## [0.8.0] - 2026-09-04
+
+### Added — boolean condition expressions
+
+- **A rule's `when` now accepts `all`, `any` and `not` groups, nestable to any
+  depth.** Conditions previously supported a single test or an array meaning
+  AND, so "escalate when the amount is large **or** the vendor is high-risk"
+  could not be written as one rule — it took two rules with duplicated
+  `addLevels`, and anything involving negation or a mix of AND and OR had no
+  expression at all.
+
+  ```ts
+  when: {
+    any: [
+      { all: [
+          { field: 'amount', operator: '>', value: 1000 },
+          { field: 'dept', operator: '==', value: 'engineering' },
+      ] },
+      { field: 'override', operator: '==', value: true },
+    ],
+  }
+  ```
+
+  A group sets exactly one combinator. `any` short-circuits on the first child
+  that holds. New `ConditionExpression` and `ConditionGroup` types are exported
+  from the package root.
+
+  **Fully backward compatible.** A bare condition still works, and an array is
+  shorthand for `all` — exactly what `when: [...]` already meant.
+
+- **Condition trees are validated when the template is defined.** `validateTemplate()`
+  and `defineTemplate()` now reject an empty `all`/`any`, a group setting more
+  than one combinator, a non-array `all`/`any`, and a leaf missing its `field`
+  or `operator` — reporting the offending path, e.g.
+  `conditions[0].when.any[1].operator`. Previously a malformed condition was
+  only discovered at submit time, on a real document.
+
+  Operator *names* are deliberately not checked at definition time, because
+  custom operators can be registered after a template is defined; an unknown
+  operator still throws when the condition is evaluated.
+
+- **`validateConditionExpression(expression, path)` is exported** for callers
+  that build condition trees dynamically and want to check one before handing it
+  to a template. It collects every problem rather than throwing on the first.
+
 ## [0.7.0] - 2026-09-04
 
 ### Fixed — two condition-evaluation bypasses

package/README.md

@@ -305,6 +305,47 @@ conditions: [
 
 **Built-in operators:** `>`, `<`, `>=`, `<=`, `==`, `!=`, `in`, `not_in`
 
+#### Combining conditions
+
+A `when` can be a single condition, an array (every element must hold), or a
+boolean group — `all`, `any`, `not` — which nest to any depth:
+
+```ts
+conditions: [
+  {
+    // (amount > 1000 AND dept is engineering) OR an explicit override flag
+    when: {
+      any: [
+        {
+          all: [
+            { field: 'amount', operator: '>', value: 1000 },
+            { field: 'dept', operator: '==', value: 'engineering' },
+          ],
+        },
+        { field: 'override', operator: '==', value: true },
+      ],
+    },
+    addLevels: [{ level: 3, name: 'CFO', approvers: [{ type: 'user', userId: 'cfo' }], mode: 'any' }],
+  },
+  {
+    // Everything outside the US skips the domestic finance review
+    when: { not: { field: 'region', operator: '==', value: 'US' } },
+    skipLevels: [2],
+  },
+]
+```
+
+A group sets exactly one of `all` / `any` / `not`. `any` short-circuits on the
+first child that holds. An array is shorthand for `all`, so every template
+written before groups existed keeps working unchanged.
+
+Groups are checked when the template is defined, not when a document is
+submitted — `validateTemplate()` and `defineTemplate()` reject an empty `all`,
+a group setting two combinators, or a leaf missing its `field`/`operator`, and
+report the offending path (`conditions[0].when.any[1].operator`). Operator
+*names* are deliberately not checked there, since custom operators may be
+registered after the template is defined.
+
 #### How values are compared
 
 `==` and `!=` compare **strictly** — `'100'` does not equal `100`.

package/dist/{ApprovalEngine-BGfrrFxl.d.ts → ApprovalEngine-DFY53zRK.d.ts}

@@ -1,14 +1,14 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-D-oPxxun.js';
-import { m as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-D8D7b07N.js';
-import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-BdfVjYa8.js';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-D7jsZT6O.js';
+import { k as ConditionExpression, o as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-CtkmEkYa.js';
+import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-Hn70VShV.js';
 import { z } from 'zod';
 import { L as Logger } from './Logger-BplhlU7l.js';
 import { C as Clock } from './Clock-3FnOczFJ.js';
-import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-KGAwT9f-.js';
-import { I as IAuditAdapter } from './IAuditAdapter-B3vvU09m.js';
+import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-BCcAqSzT.js';
+import { I as IAuditAdapter } from './IAuditAdapter-CaM3A2Kt.js';
 import { I as IMetricsAdapter } from './IMetricsAdapter-D9PUz4tM.js';
 import { I as ISchedulerAdapter } from './ISchedulerAdapter-DKv_QjVN.js';
-import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-CZESF3CJ.js';
+import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-DFD0ELtO.js';
 
 declare const SubmitOptionsSchema: z.ZodObject<{
     templateName: z.ZodString;
@@ -150,6 +150,24 @@ type ConditionOperatorFn = (actual: unknown, expected: unknown) => boolean;
  * @returns The numeric value, or `null` when the value is not comparable.
  */
 declare function toComparableNumber(value: unknown): number | null;
+/**
+ * Statically check a condition expression tree, collecting every problem rather
+ * than throwing on the first.
+ *
+ * Runs at template-definition time so a malformed group is caught while the
+ * author is looking at it, instead of at submit time on a real document. The
+ * operator check is deliberately deferred: custom operators can be registered
+ * after a template is defined, so an unknown name is only an error once the
+ * condition is actually evaluated.
+ *
+ * @param expression - The `when` expression to check.
+ * @param path - Field path prefix used in reported errors.
+ * @returns One entry per problem found; empty when the tree is well formed.
+ */
+declare function validateConditionExpression(expression: ConditionExpression, path: string): Array<{
+    field: string;
+    message: string;
+}>;
 
 interface ValidationResult {
     valid: boolean;
@@ -435,4 +453,4 @@ declare class ApprovalEngine {
     private runExternalAudit;
 }
 
-export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, toComparableNumber as t, weekendCalendar as w };
+export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, toComparableNumber as t, validateConditionExpression as v, weekendCalendar as w };

package/dist/{ApprovalEngine-BET-UqQo.d.cts → ApprovalEngine-DVMMtiSm.d.cts}

@@ -1,14 +1,14 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-BibHlgPw.cjs';
-import { m as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-D8D7b07N.cjs';
-import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-DVVmXU6a.cjs';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from './IStorageAdapter-egPQD6Ry.cjs';
+import { k as ConditionExpression, o as ResolverFn, g as ApprovalTemplateConfig, A as ApprovalTemplate, j as AuditContext, a as ApprovalInstance, e as ApprovalMode, b as AuditEntry } from './instance-CtkmEkYa.cjs';
+import { I as INotificationAdapter, b as ApprovalEventName, a as ApprovalEventMap } from './INotificationAdapter-Ci0gf6ac.cjs';
 import { z } from 'zod';
 import { L as Logger } from './Logger-BplhlU7l.cjs';
 import { C as Clock } from './Clock-3FnOczFJ.cjs';
-import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-CXgXmGUF.cjs';
-import { I as IAuditAdapter } from './IAuditAdapter-B_DhuPsU.cjs';
+import { I as IOperationMiddleware, a as ApprovalError } from './IOperationMiddleware-DOlOraCX.cjs';
+import { I as IAuditAdapter } from './IAuditAdapter-BODIlw4h.cjs';
 import { I as IMetricsAdapter } from './IMetricsAdapter-D9PUz4tM.cjs';
 import { I as ISchedulerAdapter } from './ISchedulerAdapter-DKv_QjVN.cjs';
-import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-B6JzRNUk.cjs';
+import { I as IAuthorizationPolicy } from './IAuthorizationPolicy-cT7LSHtl.cjs';
 
 declare const SubmitOptionsSchema: z.ZodObject<{
     templateName: z.ZodString;
@@ -150,6 +150,24 @@ type ConditionOperatorFn = (actual: unknown, expected: unknown) => boolean;
  * @returns The numeric value, or `null` when the value is not comparable.
  */
 declare function toComparableNumber(value: unknown): number | null;
+/**
+ * Statically check a condition expression tree, collecting every problem rather
+ * than throwing on the first.
+ *
+ * Runs at template-definition time so a malformed group is caught while the
+ * author is looking at it, instead of at submit time on a real document. The
+ * operator check is deliberately deferred: custom operators can be registered
+ * after a template is defined, so an unknown name is only an error once the
+ * condition is actually evaluated.
+ *
+ * @param expression - The `when` expression to check.
+ * @param path - Field path prefix used in reported errors.
+ * @returns One entry per problem found; empty when the tree is well formed.
+ */
+declare function validateConditionExpression(expression: ConditionExpression, path: string): Array<{
+    field: string;
+    message: string;
+}>;
 
 interface ValidationResult {
     valid: boolean;
@@ -435,4 +453,4 @@ declare class ApprovalEngine {
     private runExternalAudit;
 }
 
-export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, toComparableNumber as t, weekendCalendar as w };
+export { type AddCommentOptions as A, type BulkResult as B, type CanApproveResult as C, type DelegateOptions as D, type EscalateOptions as E, type HealthResult as H, type IdGeneratorFn as I, type OrgProvider as O, type PreviewChainLevel as P, type ReassignOptions as R, type SubmitOptions as S, type ValidationResult as V, type WeekendCalendarOptions as W, ApprovalEngine as a, type ApprovalEngineOptions as b, type ApprovalStatistics as c, type ApproveOptions as d, type ApproverResolverFn as e, type BusinessCalendar as f, type CancelOptions as g, type ConditionOperatorFn as h, type CycleTimeStats as i, type IdempotencyKeyFn as j, type OverrideOptions as k, type PreviewResult as l, type RejectOptions as m, type ResubmitOptions as n, type RetryPolicy as o, defaultIdGenerator as p, toComparableNumber as t, validateConditionExpression as v, weekendCalendar as w };

package/dist/{IAuditAdapter-B_DhuPsU.d.cts → IAuditAdapter-BODIlw4h.d.cts}

@@ -1,4 +1,4 @@
-import { b as AuditEntry, a as ApprovalInstance } from './instance-D8D7b07N.cjs';
+import { b as AuditEntry, a as ApprovalInstance } from './instance-CtkmEkYa.cjs';
 
 interface IAuditAdapter {
     /**

package/dist/{IAuditAdapter-B3vvU09m.d.ts → IAuditAdapter-CaM3A2Kt.d.ts}

@@ -1,4 +1,4 @@
-import { b as AuditEntry, a as ApprovalInstance } from './instance-D8D7b07N.js';
+import { b as AuditEntry, a as ApprovalInstance } from './instance-CtkmEkYa.js';
 
 interface IAuditAdapter {
     /**

package/dist/{IAuthorizationPolicy-CZESF3CJ.d.ts → IAuthorizationPolicy-DFD0ELtO.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-D8D7b07N.js';
+import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-CtkmEkYa.js';
 
 interface AuthorizationContext {
     operation: 'submit' | 'approve' | 'reject' | 'delegate' | 'reassign' | 'cancel' | 'escalate' | 'override' | 'resubmit' | 'addComment';

package/dist/{IAuthorizationPolicy-B6JzRNUk.d.cts → IAuthorizationPolicy-cT7LSHtl.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-D8D7b07N.cjs';
+import { a as ApprovalInstance, d as ApprovalLevelInstance } from './instance-CtkmEkYa.cjs';
 
 interface AuthorizationContext {
     operation: 'submit' | 'approve' | 'reject' | 'delegate' | 'reassign' | 'cancel' | 'escalate' | 'override' | 'resubmit' | 'addComment';

package/dist/{INotificationAdapter-DVVmXU6a.d.cts → INotificationAdapter-Ci0gf6ac.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, b as AuditEntry } from './instance-D8D7b07N.cjs';
+import { a as ApprovalInstance, b as AuditEntry } from './instance-CtkmEkYa.cjs';
 
 interface ApprovalEvent {
     instanceId: string;

package/dist/{INotificationAdapter-BdfVjYa8.d.ts → INotificationAdapter-Hn70VShV.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance, b as AuditEntry } from './instance-D8D7b07N.js';
+import { a as ApprovalInstance, b as AuditEntry } from './instance-CtkmEkYa.js';
 
 interface ApprovalEvent {
     instanceId: string;

package/dist/{IOperationMiddleware-KGAwT9f-.d.ts → IOperationMiddleware-BCcAqSzT.d.ts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance } from './instance-D8D7b07N.js';
+import { a as ApprovalInstance } from './instance-CtkmEkYa.js';
 
 declare class ApprovalError extends Error {
     readonly code: string;

package/dist/{IOperationMiddleware-CXgXmGUF.d.cts → IOperationMiddleware-DOlOraCX.d.cts}

@@ -1,4 +1,4 @@
-import { a as ApprovalInstance } from './instance-D8D7b07N.cjs';
+import { a as ApprovalInstance } from './instance-CtkmEkYa.cjs';
 
 declare class ApprovalError extends Error {
     readonly code: string;

package/dist/{IStorageAdapter-D-oPxxun.d.ts → IStorageAdapter-D7jsZT6O.d.ts}

@@ -1,4 +1,4 @@
-import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-D8D7b07N.js';
+import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-CtkmEkYa.js';
 
 interface PaginationOpts {
     limit: number;

package/dist/{IStorageAdapter-BibHlgPw.d.cts → IStorageAdapter-egPQD6Ry.d.cts}

@@ -1,4 +1,4 @@
-import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-D8D7b07N.cjs';
+import { A as ApprovalTemplate, a as ApprovalInstance, f as ApprovalStatus, b as AuditEntry } from './instance-CtkmEkYa.cjs';
 
 interface PaginationOpts {
     limit: number;

package/dist/adapters/MemoryAdapter.d.cts

@@ -1,5 +1,5 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-BibHlgPw.cjs';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.cjs';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-egPQD6Ry.cjs';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.cjs';
 
 declare class MemoryAdapter implements IStorageAdapter {
     private templates;

package/dist/adapters/MemoryAdapter.d.ts

@@ -1,5 +1,5 @@
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D-oPxxun.js';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.js';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D7jsZT6O.js';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.js';
 
 declare class MemoryAdapter implements IStorageAdapter {
     private templates;

package/dist/adapters/PostgresAdapter.d.cts

@@ -1,7 +1,7 @@
 import * as tls from 'tls';
 import * as pg from 'pg';
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-BibHlgPw.cjs';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.cjs';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-egPQD6Ry.cjs';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.cjs';
 
 interface PostgresAdapterOptions {
     connectionString?: string;

package/dist/adapters/PostgresAdapter.d.ts

@@ -1,7 +1,7 @@
 import * as tls from 'tls';
 import * as pg from 'pg';
-import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D-oPxxun.js';
-import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-D8D7b07N.js';
+import { I as IStorageAdapter, P as PaginationOpts, a as PaginatedResult, b as InstanceFilter, C as CursorPaginationOpts, c as CursorPaginatedResult } from '../IStorageAdapter-D7jsZT6O.js';
+import { A as ApprovalTemplate, a as ApprovalInstance, b as AuditEntry } from '../instance-CtkmEkYa.js';
 
 interface PostgresAdapterOptions {
     connectionString?: string;

package/dist/index.cjs

@@ -498,16 +498,88 @@ function evaluateCondition(condition, data) {
   const actual = getField(data, condition.field);
   return fn(actual, condition.value);
 }
-function evaluateRule(rule, data) {
-  if (Array.isArray(rule)) {
-    return rule.every((c) => evaluateCondition(c, data));
+function asGroup(expression) {
+  if (expression === null || typeof expression !== "object" || Array.isArray(expression)) {
+    return null;
+  }
+  const candidate = expression;
+  const keys = ["all", "any", "not"].filter((k) => candidate[k] !== void 0);
+  if (keys.length === 0) return null;
+  if (keys.length > 1) {
+    throw new ApprovalValidationError(
+      `Condition group must set exactly one of "all", "any" or "not" (got ${keys.join(", ")}).`
+    );
+  }
+  const key = keys[0];
+  if (key !== "not" && !Array.isArray(candidate[key])) {
+    throw new ApprovalValidationError(`Condition group "${key}" must be an array of expressions.`);
+  }
+  if (key !== "not" && candidate[key].length === 0) {
+    throw new ApprovalValidationError(`Condition group "${key}" must not be empty.`);
+  }
+  return expression;
+}
+function evaluateExpression(expression, data) {
+  if (Array.isArray(expression)) {
+    return expression.every((child) => evaluateExpression(child, data));
+  }
+  const group = asGroup(expression);
+  if (group === null) {
+    return evaluateCondition(expression, data);
+  }
+  if (group.all !== void 0) {
+    return group.all.every((child) => evaluateExpression(child, data));
+  }
+  if (group.any !== void 0) {
+    return group.any.some((child) => evaluateExpression(child, data));
   }
-  return evaluateCondition(rule, data);
+  return !evaluateExpression(group.not, data);
+}
+function validateConditionExpression(expression, path) {
+  const errors = [];
+  const walk = (node, at) => {
+    if (Array.isArray(node)) {
+      if (node.length === 0) {
+        errors.push({ field: at, message: "Condition list must not be empty." });
+      }
+      node.forEach((child, i) => walk(child, `${at}[${i}]`));
+      return;
+    }
+    let group;
+    try {
+      group = asGroup(node);
+    } catch (err) {
+      errors.push({ field: at, message: err.message });
+      return;
+    }
+    if (group === null) {
+      const leaf = node;
+      if (typeof leaf?.field !== "string" || leaf.field.length === 0) {
+        errors.push({
+          field: `${at}.field`,
+          message: "Condition requires a non-empty field path."
+        });
+      }
+      if (typeof leaf?.operator !== "string" || leaf.operator.length === 0) {
+        errors.push({ field: `${at}.operator`, message: "Condition requires an operator." });
+      }
+      return;
+    }
+    if (group.all !== void 0) {
+      group.all.forEach((child, i) => walk(child, `${at}.all[${i}]`));
+    } else if (group.any !== void 0) {
+      group.any.forEach((child, i) => walk(child, `${at}.any[${i}]`));
+    } else {
+      walk(group.not, `${at}.not`);
+    }
+  };
+  walk(expression, path);
+  return errors;
 }
 function evaluateConditions(conditions, data) {
   const mutations = { addLevels: [], skipLevels: /* @__PURE__ */ new Set() };
   for (const rule of conditions) {
-    if (evaluateRule(rule.when, data)) {
+    if (evaluateExpression(rule.when, data)) {
       if (rule.addLevels) mutations.addLevels.push(...rule.addLevels);
       if (rule.skipLevels) rule.skipLevels.forEach((l) => mutations.skipLevels.add(l));
     }
@@ -805,6 +877,9 @@ var ApprovalEngine = class {
     }
     if (config.conditions) {
       config.conditions.forEach((rule, ruleIdx) => {
+        errors.push(
+          ...validateConditionExpression(rule.when, `conditions[${ruleIdx}].when`)
+        );
         if (rule.addLevels) {
           rule.addLevels.forEach((al, alIdx) => {
             const conflictsWithStatic = config.levels.some((l) => l.level === al.level);
@@ -2619,6 +2694,7 @@ exports.defaultIdGenerator = defaultIdGenerator;
 exports.noopLogger = noopLogger;
 exports.systemClock = systemClock;
 exports.toComparableNumber = toComparableNumber;
+exports.validateConditionExpression = validateConditionExpression;
 exports.weekendCalendar = weekendCalendar;
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map