@careflair/common 1.0.41 → 1.0.42

package/dist/abilities/index.d.ts

@@ -10,17 +10,18 @@ export type Actions = "create" | "read" | "update" | "delete" | "apply" | "initi
 export type Subjects = "Job" | "Chat" | "NDISScreening" | "WorkingWithChildren" | "Profile" | "all";
 /**
  * AppAbility type for type-safe permission checks
- * Uses PureAbility (modern API) instead of deprecated Ability
+ * Uses PureAbility (modern API) + mongoQueryMatcher so we can define conditional rules
+ * (e.g. { postedBy: user.id }) without runtime errors.
  */
-export type AppAbility = PureAbility<[Actions, Subjects]>;
+export type AppAbility = PureAbility<[Actions, Subjects], any>;
 /**
- * User interface for ability definition
+ * User type for ability definition
  * Only requires id and role - minimal interface for permission checks
  */
-export interface UserForAbility {
+export type UserForAbility = {
     id: string;
     role: UserRole;
-}
+};
 /**
  * Define abilities for a user based on their role
  * This is the SINGLE SOURCE OF TRUTH for permissions

package/dist/abilities/index.js

@@ -64,5 +64,7 @@ function defineAbilitiesFor(user) {
         can("read", "Profile", { user: user.id });
         can("update", "Profile", { user: user.id });
     }
-    return build();
+    return build({
+        conditionsMatcher: ability_1.mongoQueryMatcher,
+    });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@careflair/common",
-  "version": "1.0.41",
+  "version": "1.0.42",
   "description": "Shared assets for CareFlair",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",