@dakkitor/api-contracts 1.7.0 → 1.8.0

package/dist/abilities/abilities.contract.spec.js

@@ -42,8 +42,6 @@ const ENTITY_SUBJECTS = [
     'User',
     'Worker',
     'WorkerJobMatch',
-    'WorkerLeadAssignment',
-    'WorkerLeadProfile',
 ];
 /** Filter DTO subjects checked by name against field-filter grants. */
 const FILTER_SCHEMA_SUBJECTS = [
@@ -80,23 +78,27 @@ describe('abilities JSON subject validity', () => {
             .filter((subject) => !KNOWN_SUBJECTS.has(subject));
         expect(unknown).toEqual([]);
     });
+    it('no ability rule references a retired consent subject', () => {
+        const retired = [
+            'WorkerLeadAssignment',
+            'WorkerLeadProfile',
+            'LeadAgentArea',
+        ];
+        const violations = [];
+        for (const [role, rules] of Object.entries(abilities_contract_1.RoleAbilities)) {
+            for (const rule of rules) {
+                if (retired.includes(rule.subject)) {
+                    violations.push(`${role} still grants ${String(rule.subject)}`);
+                }
+            }
+        }
+        expect(violations).toEqual([]);
+    });
 });
-describe('Relay pod ownership grants', () => {
-    it('registers RelayPod and conditions outreach management on ownership', () => {
-        expect(abilities_contract_1.VIRTUAL_SUBJECTS).toContain('RelayPod');
-        expect(abilities_contract_1.RoleAbilities.OUTREACH).toContainEqual({
-            action: 'manage',
-            subject: 'RelayPod',
-            conditions: { ownerUserId: '{{ id }}' },
-        });
-        expect(abilities_contract_1.RoleAbilities.OUTREACH).toContainEqual({
-            action: 'update',
-            subject: 'OutreachRequest',
-            conditions: {
-                requestedByUserId: '{{ id }}',
-                status: 'PENDING',
-            },
-        });
+describe('Relay pod membership grants', () => {
+    it('grants no RelayPod authority; pod access comes from membership', () => {
+        const relayPodRules = abilities_contract_1.OutreachAbilities.filter((rule) => rule.subject === 'RelayPod');
+        expect(relayPodRules).toEqual([]);
     });
 });
 describe('hasGlobalCuratedCandidateScope', () => {
@@ -140,9 +142,13 @@ describe('shared curated match access', () => {
             { action: 'read', subject: 'CuratedMatchWorkspace' },
             { action: 'update', subject: 'CuratedMatchWorkspace' },
         ]));
+        // No read access to the curated directory — the only CuratedWorker rule
+        // permitted is the narrow, unconditioned job-seeking-signal update
+        // asserted below.
+        const readCuratedWorkerRules = abilities_contract_1.InterconnectionAbilities.filter((rule) => rule.subject === 'CuratedWorker' && rule.action === 'read');
+        expect(readCuratedWorkerRules).toEqual([]);
         const subjects = abilities_contract_1.InterconnectionAbilities.map((rule) => rule.subject);
         for (const forbidden of [
-            'CuratedWorker',
             'WorkerJobMatch',
             'WorkerLeadAssignment',
             'WorkerLeadProfile',
@@ -150,6 +156,20 @@ describe('shared curated match access', () => {
             expect(subjects).not.toContain(forbidden);
         }
     });
+    it('grants INTERCONNECTION only a narrow, unconditioned update on the two job-seeking signal fields', () => {
+        const curatedWorkerRules = abilities_contract_1.InterconnectionAbilities.filter((rule) => rule.subject === 'CuratedWorker');
+        expect(curatedWorkerRules).toEqual([
+            {
+                action: 'update',
+                subject: 'CuratedWorker',
+                fields: ['offerOpenness', 'offerNote'],
+            },
+        ]);
+    });
+    it('grants SECOND_AGENT no CuratedWorker rule', () => {
+        const subjects = abilities_contract_1.SecondAgentAbilities.map((rule) => rule.subject);
+        expect(subjects).not.toContain('CuratedWorker');
+    });
 });
 describe('isCandidateOnlyCuratedViewer', () => {
     it('is true for the SECOND_AGENT + INTERCONNECTION modifier pair', () => {

package/dist/abilities/interconnection.abilities.json

@@ -15,6 +15,11 @@
         "action": "update",
         "subject": "JobCandidate"
     },
+    {
+        "action": "update",
+        "subject": "CuratedWorker",
+        "fields": ["offerOpenness", "offerNote"]
+    },
     {
         "action": "read",
         "subject": "LeadActivityEvent",
@@ -23,6 +28,7 @@
             "agentId",
             "subjectKind",
             "subjectId",
+            "viewerWorkerId",
             "worker",
             "worker.*",
             "job",

package/dist/abilities/outreach.abilities.json

@@ -14,12 +14,5 @@
             "requestedByUserId": "{{ id }}",
             "status": "PENDING"
         }
-    },
-    {
-        "action": "manage",
-        "subject": "RelayPod",
-        "conditions": {
-            "ownerUserId": "{{ id }}"
-        }
     }
 ]

package/dist/abilities/second-agent.abilities.json

@@ -90,65 +90,6 @@
             "updatedAt"
         ]
     },
-    {
-        "action": "read",
-        "subject": "SortCuratedWorkerSchema",
-        "fields": [
-            "nameSimilarity",
-            "fullName",
-            "distance",
-            "email",
-            "phone",
-            "postcode",
-            "englishLevel",
-            "nationality",
-            "hasTools",
-            "hasPpe",
-            "transportation",
-            "dateOfBirth",
-            "mainTrade",
-            "bio",
-            "qualificationsCount",
-            "nino",
-            "shareCodeExpiry",
-            "createdAt",
-            "updatedAt"
-        ]
-    },
-    {
-        "action": "read",
-        "subject": "FilterCuratedWorkerSchema",
-        "fields": [
-            "name",
-            "name.*",
-            "email",
-            "phone",
-            "englishLevels",
-            "nationality",
-            "location",
-            "location.*",
-            "qualificationFilters",
-            "qualificationFilters[*].*",
-            "nino",
-            "blacklisted",
-            "parked",
-            "tradeFilters",
-            "tradeFilters[*].*",
-            "transportationMethods",
-            "hasTools",
-            "hasPpe",
-            "createdAt",
-            "createdAt.*",
-            "updatedAt",
-            "updatedAt.*",
-            "occupancy",
-            "contact",
-            "sort",
-            "sort.*",
-            "page",
-            "limit"
-        ]
-    },
     {
         "action": "read",
         "subject": "Worker",
@@ -230,6 +171,7 @@
             "status",
             "status.type",
             "status.category",
+            "comment",
             "workingDays"
         ]
     },
@@ -700,38 +642,6 @@
             "sort.*"
         ]
     },
-    {
-        "action": "read",
-        "subject": "CuratedWorker",
-        "conditions": {
-            "leadAssignments.agentId": "{{ id }}",
-            "leadAssignments.status": "CONSENTED"
-        }
-    },
-    {
-        "action": "update",
-        "subject": "CuratedWorker",
-        "fields": ["offerOpenness", "offerNote"],
-        "conditions": {
-            "leadAssignments.agentId": "{{ id }}",
-            "leadAssignments.status": { "$in": ["CONSENT_PENDING", "CONSENTED"] }
-        }
-    },
-    {
-        "action": "read",
-        "subject": "WorkerLeadAssignment",
-        "conditions": { "agentId": "{{ id }}" }
-    },
-    {
-        "action": "update",
-        "subject": "WorkerLeadAssignment",
-        "conditions": { "agentId": "{{ id }}" }
-    },
-    {
-        "action": "read",
-        "subject": "WorkerLeadProfile",
-        "conditions": { "currentAgentId": "{{ id }}" }
-    },
     {
         "action": "read",
         "subject": "WorkerJobMatch",
@@ -776,6 +686,7 @@
             "agentId",
             "subjectKind",
             "subjectId",
+            "viewerWorkerId",
             "worker",
             "worker.*",
             "job",

package/dist/abilities/team-leads.json

@@ -89,6 +89,7 @@
             "dateOfBirth",
             "mainTrade",
             "bio",
+            "source",
             "qualificationsCount",
             "nino",
             "shareCodeExpiry",

package/dist/abilities/worker-curator.abilities.json

@@ -133,6 +133,7 @@
             "dateOfBirth",
             "mainTrade",
             "bio",
+            "source",
             "qualificationsCount",
             "nino",
             "shareCodeExpiry",
@@ -181,6 +182,7 @@
             "agentId",
             "subjectKind",
             "subjectId",
+            "viewerWorkerId",
             "worker",
             "worker.*",
             "job",