@dakkitor/api-contracts 1.5.0 → 1.6.0

package/dist/abilities/abilities.contract.d.ts

@@ -24,6 +24,7 @@ export declare const OutreachServiceAbilities: AbilityRule[];
 export declare const OfficeManagerAbilities: AbilityRule[];
 export declare const WorkerCuratorAbilities: AbilityRule[];
 export declare const InterconnectionAbilities: AbilityRule[];
+export declare const OutreachAbilities: AbilityRule[];
 export declare const RoleAbilities: {
     readonly ADMIN: AbilityRule[];
     readonly KPI: AbilityRule[];
@@ -36,14 +37,17 @@ export declare const RoleAbilities: {
     readonly OFFICE_MANAGER: AbilityRule[];
     readonly WORKER_CURATOR: AbilityRule[];
     readonly INTERCONNECTION: AbilityRule[];
+    readonly OUTREACH: AbilityRule[];
 };
 export type RoleAbilitiesType = typeof RoleAbilities;
 /**
  * Virtual subjects that don't correspond to entity classes.
  * Used for feature-level permission checking.
- * These must be kept in sync with the subjects in the abilities JSON files.
+ * Kept in sync with the abilities JSON files by abilities.contract.spec.ts,
+ * which fails on any JSON subject missing from the known-subject registry.
  */
-export type VirtualSubjects = 'FaDashboardWidgets' | 'SaDashboardWidgets' | 'DashboardTrends' | 'AdminFaDashboardWidgets' | 'AdminSaDashboardWidgets' | 'AdminAgentStats' | 'AdminProofs' | 'AdminDashboardTrends' | 'FirstAgentTutorials' | 'CuratedMatchWorkspace' | 'JobCandidate' | 'LeadActivityEvent' | 'FilterCandidateContactHistorySchema' | 'SecondAgentTutorials' | 'SortActiveSchema' | 'SortBookingSchema' | 'SortJobSchema' | 'SortWorkerSchema' | 'SortCuratedWorkerSchema' | 'SortLeadSchema' | 'SortOwnResearchLeadSchema' | 'SortClientSchema' | 'SortCompanySchema' | 'SortCollaborationSchema' | 'SortCollaborationCheckingSchema' | 'SortClientContactSchema' | 'SortCallHistorySchema' | 'SortUserSchema' | 'SortCrewSchema' | 'FilterExportJobSchema' | 'OutreachClaim' | 'OutreachRequest';
+export declare const VIRTUAL_SUBJECTS: readonly ["FaDashboardWidgets", "SaDashboardWidgets", "DashboardTrends", "AdminFaDashboardWidgets", "AdminSaDashboardWidgets", "AdminAgentStats", "AdminProofs", "AdminDashboardTrends", "FirstAgentTutorials", "CuratedMatchWorkspace", "JobCandidate", "LeadActivityEvent", "FilterCandidateContactHistorySchema", "SecondAgentTutorials", "SortActiveSchema", "SortBookingSchema", "SortJobSchema", "SortWorkerSchema", "SortCuratedWorkerSchema", "SortLeadSchema", "SortOwnResearchLeadSchema", "SortClientSchema", "SortCompanySchema", "SortCollaborationSchema", "SortCollaborationCheckingSchema", "SortClientContactSchema", "SortCallHistorySchema", "SortUserSchema", "SortCrewSchema", "FilterExportJobSchema", "OutreachClaim", "OutreachRequest", "RelayPod"];
+export type VirtualSubjects = (typeof VIRTUAL_SUBJECTS)[number];
 /**
  * Roles an OFFICE_MANAGER may assign to users they create.
  * Single source of truth for the office-manager create-user role policy.

package/dist/abilities/abilities.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abilities.contract.d.ts","sourceRoot":"","sources":["../../contracts/abilities/abilities.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,EAAE,WAAW,EAAoC,CAAC;AAC7E,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,mBAAmB,EAAE,WAAW,EACP,CAAC;AACvC,eAAO,MAAM,oBAAoB,EAAE,WAAW,EACP,CAAC;AACxC,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AACrC,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAE5C,eAAO,MAAM,aAAa;;;;;;;;;;;;CAYhB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,OAAO,aAAa,CAAC;AAErD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,yBAAyB,GACzB,yBAAyB,GACzB,iBAAiB,GACjB,aAAa,GACb,sBAAsB,GACtB,qBAAqB,GACrB,uBAAuB,GACvB,cAAc,GACd,mBAAmB,GACnB,qCAAqC,GACrC,sBAAsB,GACtB,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,kBAAkB,GAClB,yBAAyB,GACzB,gBAAgB,GAChB,2BAA2B,GAC3B,kBAAkB,GAClB,mBAAmB,GACnB,yBAAyB,GACzB,iCAAiC,GACjC,yBAAyB,GACzB,uBAAuB,GACvB,gBAAgB,GAChB,gBAAgB,GAChB,uBAAuB,GACvB,eAAe,GACf,iBAAiB,CAAC;AAEtB;;;GAGG;AACH,eAAO,MAAM,+BAA+B,0CAGJ,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,GAC/C,QAAQ,EAAE,CAMZ;AAED,eAAO,MAAM,0BAA0B,yDAIC,CAAC;AAWzC,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAQT;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,uCAGC,CAAC;AAEzC;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAIT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAMT"}
+{"version":3,"file":"abilities.contract.d.ts","sourceRoot":"","sources":["../../contracts/abilities/abilities.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,EAAE,WAAW,EAAoC,CAAC;AAC7E,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,mBAAmB,EAAE,WAAW,EACP,CAAC;AACvC,eAAO,MAAM,oBAAoB,EAAE,WAAW,EACP,CAAC;AACxC,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AACrC,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AAErC,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAahB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,OAAO,aAAa,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,8uBAkCnB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,+BAA+B,0CAGJ,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,GAC/C,QAAQ,EAAE,CAMZ;AAED,eAAO,MAAM,0BAA0B,yDAIC,CAAC;AAWzC,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAQT;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,uCAGC,CAAC;AAEzC;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAIT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAMT"}

package/dist/abilities/abilities.contract.js

@@ -10,7 +10,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GLOBAL_CURATED_SCOPE_ROLES = exports.SHARED_CURATED_MATCH_ROLES = exports.OFFICE_MANAGER_ASSIGNABLE_ROLES = exports.RoleAbilities = exports.InterconnectionAbilities = exports.WorkerCuratorAbilities = exports.OfficeManagerAbilities = exports.OutreachServiceAbilities = exports.CronSchedulerAbilities = exports.BotAbilities = exports.TeamLeadAbilities = exports.SecondAgentAbilities = exports.FirstAgentAbilities = exports.KpiAbilities = exports.AdminAbilities = void 0;
+exports.GLOBAL_CURATED_SCOPE_ROLES = exports.SHARED_CURATED_MATCH_ROLES = exports.OFFICE_MANAGER_ASSIGNABLE_ROLES = exports.VIRTUAL_SUBJECTS = exports.RoleAbilities = exports.OutreachAbilities = exports.InterconnectionAbilities = exports.WorkerCuratorAbilities = exports.OfficeManagerAbilities = exports.OutreachServiceAbilities = exports.CronSchedulerAbilities = exports.BotAbilities = exports.TeamLeadAbilities = exports.SecondAgentAbilities = exports.FirstAgentAbilities = exports.KpiAbilities = exports.AdminAbilities = void 0;
 exports.getRolesOmCannotAssign = getRolesOmCannotAssign;
 exports.hasSharedCuratedMatchAccess = hasSharedCuratedMatchAccess;
 exports.hasGlobalCuratedCandidateScope = hasGlobalCuratedCandidateScope;
@@ -26,6 +26,7 @@ const second_agent_abilities_json_1 = __importDefault(require("./second-agent.ab
 const team_leads_json_1 = __importDefault(require("./team-leads.json"));
 const worker_curator_abilities_json_1 = __importDefault(require("./worker-curator.abilities.json"));
 const interconnection_abilities_json_1 = __importDefault(require("./interconnection.abilities.json"));
+const outreach_abilities_json_1 = __importDefault(require("./outreach.abilities.json"));
 const users_contract_1 = require("../users/users.contract");
 exports.AdminAbilities = admin_abilities_json_1.default;
 exports.KpiAbilities = kpi_abilities_json_1.default;
@@ -38,6 +39,7 @@ exports.OutreachServiceAbilities = outreach_service_abilities_json_1.default;
 exports.OfficeManagerAbilities = office_manager_abilities_json_1.default;
 exports.WorkerCuratorAbilities = worker_curator_abilities_json_1.default;
 exports.InterconnectionAbilities = interconnection_abilities_json_1.default;
+exports.OutreachAbilities = outreach_abilities_json_1.default;
 exports.RoleAbilities = {
     ADMIN: exports.AdminAbilities,
     KPI: exports.KpiAbilities,
@@ -50,7 +52,49 @@ exports.RoleAbilities = {
     OFFICE_MANAGER: exports.OfficeManagerAbilities,
     WORKER_CURATOR: exports.WorkerCuratorAbilities,
     INTERCONNECTION: exports.InterconnectionAbilities,
+    OUTREACH: exports.OutreachAbilities,
 };
+/**
+ * Virtual subjects that don't correspond to entity classes.
+ * Used for feature-level permission checking.
+ * Kept in sync with the abilities JSON files by abilities.contract.spec.ts,
+ * which fails on any JSON subject missing from the known-subject registry.
+ */
+exports.VIRTUAL_SUBJECTS = [
+    'FaDashboardWidgets',
+    'SaDashboardWidgets',
+    'DashboardTrends',
+    'AdminFaDashboardWidgets',
+    'AdminSaDashboardWidgets',
+    'AdminAgentStats',
+    'AdminProofs',
+    'AdminDashboardTrends',
+    'FirstAgentTutorials',
+    'CuratedMatchWorkspace',
+    'JobCandidate',
+    'LeadActivityEvent',
+    'FilterCandidateContactHistorySchema',
+    'SecondAgentTutorials',
+    'SortActiveSchema',
+    'SortBookingSchema',
+    'SortJobSchema',
+    'SortWorkerSchema',
+    'SortCuratedWorkerSchema',
+    'SortLeadSchema',
+    'SortOwnResearchLeadSchema',
+    'SortClientSchema',
+    'SortCompanySchema',
+    'SortCollaborationSchema',
+    'SortCollaborationCheckingSchema',
+    'SortClientContactSchema',
+    'SortCallHistorySchema',
+    'SortUserSchema',
+    'SortCrewSchema',
+    'FilterExportJobSchema',
+    'OutreachClaim',
+    'OutreachRequest',
+    'RelayPod',
+];
 /**
  * Roles an OFFICE_MANAGER may assign to users they create.
  * Single source of truth for the office-manager create-user role policy.

package/dist/abilities/abilities.contract.spec.js

@@ -1,6 +1,104 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const abilities_contract_1 = require("./abilities.contract");
+/**
+ * Entity subjects the API resolves through SUBJECT_CLASS_MAP
+ * (apps/api/src/modules/casl/casl-ability.factory.ts). Mirrored here because
+ * the contracts package cannot import API entity classes. A subject used in
+ * an abilities JSON but absent from BOTH this list and VIRTUAL_SUBJECTS is a
+ * typo that would silently grant nothing — the validity test below turns it
+ * into a loud failure. Adding a genuinely new subject means registering it
+ * here (or in VIRTUAL_SUBJECTS) on purpose.
+ */
+const ENTITY_SUBJECTS = [
+    'Active',
+    'AgentClientLink',
+    'Booking',
+    'CallHistory',
+    'Client',
+    'ClientContact',
+    'Collaboration',
+    'CollaborationChecking',
+    'Company',
+    'Crew',
+    'CronExecution',
+    'CuratedWorker',
+    'CuratedWorkerLeadConfig',
+    'File',
+    'InteractionEvent',
+    'Job',
+    'Lead',
+    'LeadAssignment',
+    'Location',
+    'Office',
+    'OwnResearchLead',
+    'OwnedWorkerJobMatch',
+    'Proof',
+    'ProofEntityLink',
+    'ProofPhoto',
+    'Qualification',
+    'QualificationType',
+    'Trade',
+    'User',
+    'Worker',
+    'WorkerJobMatch',
+    'WorkerLeadAssignment',
+    'WorkerLeadProfile',
+];
+/** Filter DTO subjects checked by name against field-filter grants. */
+const FILTER_SCHEMA_SUBJECTS = [
+    'FilterActiveSchema',
+    'FilterAgentClientLinkSchema',
+    'FilterBookingSchema',
+    'FilterCallHistorySchema',
+    'FilterClientContactSchema',
+    'FilterClientSchema',
+    'FilterCollaborationCheckingSchema',
+    'FilterCollaborationSchema',
+    'FilterCompanySchema',
+    'FilterCrewSchema',
+    'FilterCuratedWorkerSchema',
+    'FilterJobSchema',
+    'FilterLeadSchema',
+    'FilterLocationSchema',
+    'FilterOwnResearchLeadSchema',
+    'FilterProofsSchema',
+    'FilterUserSchema',
+    'FilterWorkerSchema',
+];
+const KNOWN_SUBJECTS = new Set([
+    ...abilities_contract_1.VIRTUAL_SUBJECTS,
+    ...ENTITY_SUBJECTS,
+    ...FILTER_SCHEMA_SUBJECTS,
+    'Schema:BookingItem',
+    'all',
+]);
+describe('abilities JSON subject validity', () => {
+    it.each(Object.entries(abilities_contract_1.RoleAbilities))('%s abilities reference only known subjects', (_role, rules) => {
+        const unknown = rules
+            .map((rule) => rule.subject)
+            .filter((subject) => !KNOWN_SUBJECTS.has(subject));
+        expect(unknown).toEqual([]);
+    });
+});
+describe('Relay pod ownership grants', () => {
+    it('registers RelayPod and conditions outreach management on ownership', () => {
+        expect(abilities_contract_1.VIRTUAL_SUBJECTS).toContain('RelayPod');
+        expect(abilities_contract_1.RoleAbilities.OUTREACH).toContainEqual({
+            action: 'manage',
+            subject: 'RelayPod',
+            conditions: { ownerUserId: '{{ id }}' },
+        });
+        expect(abilities_contract_1.RoleAbilities.OUTREACH).toContainEqual({
+            action: 'update',
+            subject: 'OutreachRequest',
+            conditions: {
+                requestedByUserId: '{{ id }}',
+                status: 'PENDING',
+            },
+        });
+    });
+});
 describe('hasGlobalCuratedCandidateScope', () => {
     it('true for ADMIN', () => {
         expect((0, abilities_contract_1.hasGlobalCuratedCandidateScope)(['ADMIN'])).toBe(true);

package/dist/abilities/first-agent.abilities.json

@@ -168,7 +168,10 @@
             "endDate",
             "createdAt",
             "updatedAt",
-            "createdById"
+            "createdById",
+            "sourceMessageDeletedAt",
+            "minimumRateDeletionExemptAt",
+            "minimumRateDeletionExemptById"
         ],
         "conditions": {
             "faUserId": "{{ id }}"
@@ -204,7 +207,10 @@
             "endDate",
             "createdAt",
             "updatedAt",
-            "createdById"
+            "createdById",
+            "sourceMessageDeletedAt",
+            "minimumRateDeletionExemptAt",
+            "minimumRateDeletionExemptById"
         ],
         "conditions": {
             "createdById": "{{ id }}"
@@ -955,18 +961,6 @@
             "createdByUserId": "{{ id }}"
         }
     },
-    {
-        "action": "create",
-        "subject": "OutreachRequest"
-    },
-    {
-        "action": "read",
-        "subject": "OutreachRequest"
-    },
-    {
-        "action": "update",
-        "subject": "OutreachRequest"
-    },
     {
         "action": "read",
         "subject": "FilterCrewSchema",

package/dist/abilities/outreach.abilities.json

@@ -0,0 +1,25 @@
+[
+    {
+        "action": "create",
+        "subject": "OutreachRequest"
+    },
+    {
+        "action": "read",
+        "subject": "OutreachRequest"
+    },
+    {
+        "action": "update",
+        "subject": "OutreachRequest",
+        "conditions": {
+            "requestedByUserId": "{{ id }}",
+            "status": "PENDING"
+        }
+    },
+    {
+        "action": "manage",
+        "subject": "RelayPod",
+        "conditions": {
+            "ownerUserId": "{{ id }}"
+        }
+    }
+]

package/dist/abilities/second-agent.abilities.json

@@ -205,7 +205,10 @@
             "updatedAt.*",
             "createdById",
             "createdBy",
-            "createdBy.*"
+            "createdBy.*",
+            "sourceMessageDeletedAt",
+            "minimumRateDeletionExemptAt",
+            "minimumRateDeletionExemptById"
         ]
     },
     {
@@ -817,18 +820,6 @@
         ],
         "conditions": { "agentId": "{{ id }}" }
     },
-    {
-        "action": "create",
-        "subject": "OutreachRequest"
-    },
-    {
-        "action": "read",
-        "subject": "OutreachRequest"
-    },
-    {
-        "action": "update",
-        "subject": "OutreachRequest"
-    },
     {
         "action": "read",
         "subject": "FilterCandidateContactHistorySchema",