@dakkitor/api-contracts 1.7.1 → 1.9.1

package/dist/abilities/abilities.contract.d.ts

@@ -46,7 +46,7 @@ export type RoleAbilitiesType = typeof RoleAbilities;
  * Kept in sync with the abilities JSON files by abilities.contract.spec.ts,
  * which fails on any JSON subject missing from the known-subject registry.
  */
-export declare const VIRTUAL_SUBJECTS: readonly ["FaDashboardWidgets", "SaDashboardWidgets", "DashboardTrends", "AdminFaDashboardWidgets", "AdminSaDashboardWidgets", "AdminAgentStats", "AdminProofs", "AdminDashboardTrends", "FirstAgentTutorials", "CuratedMatchWorkspace", "JobCandidate", "LeadActivityEvent", "FilterCandidateContactHistorySchema", "SecondAgentTutorials", "SortActiveSchema", "SortBookingSchema", "SortJobSchema", "SortWorkerSchema", "SortCuratedWorkerSchema", "SortLeadSchema", "SortOwnResearchLeadSchema", "SortClientSchema", "SortCompanySchema", "SortCollaborationSchema", "SortCollaborationCheckingSchema", "SortClientContactSchema", "SortCallHistorySchema", "SortUserSchema", "SortCrewSchema", "FilterExportJobSchema", "OutreachClaim", "OutreachRequest", "RelayPod"];
+export declare const VIRTUAL_SUBJECTS: readonly ["FaDashboardWidgets", "SaDashboardWidgets", "DashboardTrends", "AdminFaDashboardWidgets", "AdminSaDashboardWidgets", "AdminAgentStats", "AdminProofs", "AdminDashboardTrends", "FirstAgentTutorials", "CuratedMatchWorkspace", "JobCandidate", "CandidateCallingQueue", "LeadActivityEvent", "FilterCandidateContactHistorySchema", "SecondAgentTutorials", "SortActiveSchema", "SortBookingSchema", "SortJobSchema", "SortWorkerSchema", "SortCuratedWorkerSchema", "SortLeadSchema", "SortOwnResearchLeadSchema", "SortClientSchema", "SortCompanySchema", "SortCollaborationSchema", "SortCollaborationCheckingSchema", "SortClientContactSchema", "SortCallHistorySchema", "SortUserSchema", "SortCrewSchema", "FilterExportJobSchema", "OutreachClaim", "OutreachRequest", "RelayPod"];
 export type VirtualSubjects = (typeof VIRTUAL_SUBJECTS)[number];
 /**
  * Roles an OFFICE_MANAGER may assign to users they create.

package/dist/abilities/abilities.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"abilities.contract.d.ts","sourceRoot":"","sources":["../../contracts/abilities/abilities.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,EAAE,WAAW,EAAoC,CAAC;AAC7E,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,mBAAmB,EAAE,WAAW,EACP,CAAC;AACvC,eAAO,MAAM,oBAAoB,EAAE,WAAW,EACP,CAAC;AACxC,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AACrC,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AAErC,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAahB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,OAAO,aAAa,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,8uBAkCnB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,+BAA+B,0CAGJ,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,GAC/C,QAAQ,EAAE,CAMZ;AAED,eAAO,MAAM,0BAA0B,yDAIC,CAAC;AAWzC,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAQT;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,uCAGC,CAAC;AAEzC;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAIT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAMT"}
+{"version":3,"file":"abilities.contract.d.ts","sourceRoot":"","sources":["../../contracts/abilities/abilities.contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAcH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAExE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,eAAO,MAAM,cAAc,EAAE,WAAW,EAAoC,CAAC;AAC7E,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,mBAAmB,EAAE,WAAW,EACP,CAAC;AACvC,eAAO,MAAM,oBAAoB,EAAE,WAAW,EACP,CAAC;AACxC,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AACrC,eAAO,MAAM,YAAY,EAAE,WAAW,EAAkC,CAAC;AACzE,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,sBAAsB,EAAE,WAAW,EACP,CAAC;AAC1C,eAAO,MAAM,wBAAwB,EAAE,WAAW,EACP,CAAC;AAC5C,eAAO,MAAM,iBAAiB,EAAE,WAAW,EACP,CAAC;AAErC,eAAO,MAAM,aAAa;;;;;;;;;;;;;CAahB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,OAAO,aAAa,CAAC;AAErD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,uwBAmCnB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,+BAA+B,0CAGJ,CAAC;AAEzC;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,eAAe,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,GAC/C,QAAQ,EAAE,CAMZ;AAED,eAAO,MAAM,0BAA0B,yDAIC,CAAC;AAWzC,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAQT;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,uCAGC,CAAC;AAEzC;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAIT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAC1C,OAAO,CAMT"}

package/dist/abilities/abilities.contract.js

@@ -72,6 +72,7 @@ exports.VIRTUAL_SUBJECTS = [
     'FirstAgentTutorials',
     'CuratedMatchWorkspace',
     'JobCandidate',
+    'CandidateCallingQueue',
     'LeadActivityEvent',
     'FilterCandidateContactHistorySchema',
     'SecondAgentTutorials',

package/dist/abilities/abilities.contract.spec.js

@@ -42,8 +42,6 @@ const ENTITY_SUBJECTS = [
     'User',
     'Worker',
     'WorkerJobMatch',
-    'WorkerLeadAssignment',
-    'WorkerLeadProfile',
 ];
 /** Filter DTO subjects checked by name against field-filter grants. */
 const FILTER_SCHEMA_SUBJECTS = [
@@ -80,23 +78,38 @@ describe('abilities JSON subject validity', () => {
             .filter((subject) => !KNOWN_SUBJECTS.has(subject));
         expect(unknown).toEqual([]);
     });
+    it('no ability rule references a retired consent subject', () => {
+        const retired = [
+            'WorkerLeadAssignment',
+            'WorkerLeadProfile',
+            'LeadAgentArea',
+        ];
+        const violations = [];
+        for (const [role, rules] of Object.entries(abilities_contract_1.RoleAbilities)) {
+            for (const rule of rules) {
+                if (retired.includes(rule.subject)) {
+                    violations.push(`${role} still grants ${String(rule.subject)}`);
+                }
+            }
+        }
+        expect(violations).toEqual([]);
+    });
 });
-describe('Relay pod ownership grants', () => {
-    it('registers RelayPod and conditions outreach management on ownership', () => {
-        expect(abilities_contract_1.VIRTUAL_SUBJECTS).toContain('RelayPod');
-        expect(abilities_contract_1.RoleAbilities.OUTREACH).toContainEqual({
-            action: 'manage',
-            subject: 'RelayPod',
-            conditions: { ownerUserId: '{{ id }}' },
-        });
-        expect(abilities_contract_1.RoleAbilities.OUTREACH).toContainEqual({
-            action: 'update',
-            subject: 'OutreachRequest',
-            conditions: {
-                requestedByUserId: '{{ id }}',
-                status: 'PENDING',
-            },
-        });
+describe('candidate calling queue grants', () => {
+    it('registers the virtual subject and grants SECOND_AGENT queue control', () => {
+        expect(abilities_contract_1.VIRTUAL_SUBJECTS).toContain('CandidateCallingQueue');
+        expect(abilities_contract_1.SecondAgentAbilities.filter((rule) => rule.subject === 'CandidateCallingQueue')).toEqual([
+            { action: 'read', subject: 'CandidateCallingQueue' },
+            { action: 'create', subject: 'CandidateCallingQueue' },
+            { action: 'update', subject: 'CandidateCallingQueue' },
+            { action: 'delete', subject: 'CandidateCallingQueue' },
+        ]);
+    });
+});
+describe('Relay pod membership grants', () => {
+    it('grants no RelayPod authority; pod access comes from membership', () => {
+        const relayPodRules = abilities_contract_1.OutreachAbilities.filter((rule) => rule.subject === 'RelayPod');
+        expect(relayPodRules).toEqual([]);
     });
 });
 describe('hasGlobalCuratedCandidateScope', () => {
@@ -140,9 +153,13 @@ describe('shared curated match access', () => {
             { action: 'read', subject: 'CuratedMatchWorkspace' },
             { action: 'update', subject: 'CuratedMatchWorkspace' },
         ]));
+        // No read access to the curated directory — the only CuratedWorker rule
+        // permitted is the narrow, unconditioned job-seeking-signal update
+        // asserted below.
+        const readCuratedWorkerRules = abilities_contract_1.InterconnectionAbilities.filter((rule) => rule.subject === 'CuratedWorker' && rule.action === 'read');
+        expect(readCuratedWorkerRules).toEqual([]);
         const subjects = abilities_contract_1.InterconnectionAbilities.map((rule) => rule.subject);
         for (const forbidden of [
-            'CuratedWorker',
             'WorkerJobMatch',
             'WorkerLeadAssignment',
             'WorkerLeadProfile',
@@ -150,6 +167,20 @@ describe('shared curated match access', () => {
             expect(subjects).not.toContain(forbidden);
         }
     });
+    it('grants INTERCONNECTION only a narrow, unconditioned update on the two job-seeking signal fields', () => {
+        const curatedWorkerRules = abilities_contract_1.InterconnectionAbilities.filter((rule) => rule.subject === 'CuratedWorker');
+        expect(curatedWorkerRules).toEqual([
+            {
+                action: 'update',
+                subject: 'CuratedWorker',
+                fields: ['offerOpenness', 'offerNote'],
+            },
+        ]);
+    });
+    it('grants SECOND_AGENT no CuratedWorker rule', () => {
+        const subjects = abilities_contract_1.SecondAgentAbilities.map((rule) => rule.subject);
+        expect(subjects).not.toContain('CuratedWorker');
+    });
 });
 describe('isCandidateOnlyCuratedViewer', () => {
     it('is true for the SECOND_AGENT + INTERCONNECTION modifier pair', () => {

package/dist/abilities/interconnection.abilities.json

@@ -15,6 +15,11 @@
         "action": "update",
         "subject": "JobCandidate"
     },
+    {
+        "action": "update",
+        "subject": "CuratedWorker",
+        "fields": ["offerOpenness", "offerNote"]
+    },
     {
         "action": "read",
         "subject": "LeadActivityEvent",
@@ -23,6 +28,7 @@
             "agentId",
             "subjectKind",
             "subjectId",
+            "viewerWorkerId",
             "worker",
             "worker.*",
             "job",

package/dist/abilities/outreach.abilities.json

@@ -14,12 +14,5 @@
             "requestedByUserId": "{{ id }}",
             "status": "PENDING"
         }
-    },
-    {
-        "action": "manage",
-        "subject": "RelayPod",
-        "conditions": {
-            "ownerUserId": "{{ id }}"
-        }
     }
 ]

package/dist/abilities/second-agent.abilities.json

@@ -90,65 +90,6 @@
             "updatedAt"
         ]
     },
-    {
-        "action": "read",
-        "subject": "SortCuratedWorkerSchema",
-        "fields": [
-            "nameSimilarity",
-            "fullName",
-            "distance",
-            "email",
-            "phone",
-            "postcode",
-            "englishLevel",
-            "nationality",
-            "hasTools",
-            "hasPpe",
-            "transportation",
-            "dateOfBirth",
-            "mainTrade",
-            "bio",
-            "qualificationsCount",
-            "nino",
-            "shareCodeExpiry",
-            "createdAt",
-            "updatedAt"
-        ]
-    },
-    {
-        "action": "read",
-        "subject": "FilterCuratedWorkerSchema",
-        "fields": [
-            "name",
-            "name.*",
-            "email",
-            "phone",
-            "englishLevels",
-            "nationality",
-            "location",
-            "location.*",
-            "qualificationFilters",
-            "qualificationFilters[*].*",
-            "nino",
-            "blacklisted",
-            "parked",
-            "tradeFilters",
-            "tradeFilters[*].*",
-            "transportationMethods",
-            "hasTools",
-            "hasPpe",
-            "createdAt",
-            "createdAt.*",
-            "updatedAt",
-            "updatedAt.*",
-            "occupancy",
-            "contact",
-            "sort",
-            "sort.*",
-            "page",
-            "limit"
-        ]
-    },
     {
         "action": "read",
         "subject": "Worker",
@@ -230,6 +171,7 @@
             "status",
             "status.type",
             "status.category",
+            "comment",
             "workingDays"
         ]
     },
@@ -700,38 +642,6 @@
             "sort.*"
         ]
     },
-    {
-        "action": "read",
-        "subject": "CuratedWorker",
-        "conditions": {
-            "leadAssignments.agentId": "{{ id }}",
-            "leadAssignments.status": "CONSENTED"
-        }
-    },
-    {
-        "action": "update",
-        "subject": "CuratedWorker",
-        "fields": ["offerOpenness", "offerNote"],
-        "conditions": {
-            "leadAssignments.agentId": "{{ id }}",
-            "leadAssignments.status": { "$in": ["CONSENT_PENDING", "CONSENTED"] }
-        }
-    },
-    {
-        "action": "read",
-        "subject": "WorkerLeadAssignment",
-        "conditions": { "agentId": "{{ id }}" }
-    },
-    {
-        "action": "update",
-        "subject": "WorkerLeadAssignment",
-        "conditions": { "agentId": "{{ id }}" }
-    },
-    {
-        "action": "read",
-        "subject": "WorkerLeadProfile",
-        "conditions": { "currentAgentId": "{{ id }}" }
-    },
     {
         "action": "read",
         "subject": "WorkerJobMatch",
@@ -776,6 +686,7 @@
             "agentId",
             "subjectKind",
             "subjectId",
+            "viewerWorkerId",
             "worker",
             "worker.*",
             "job",
@@ -824,5 +735,21 @@
         "action": "read",
         "subject": "FilterCandidateContactHistorySchema",
         "fields": ["worker", "worker.*", "job", "job.*", "status", "channel"]
+    },
+    {
+        "action": "read",
+        "subject": "CandidateCallingQueue"
+    },
+    {
+        "action": "create",
+        "subject": "CandidateCallingQueue"
+    },
+    {
+        "action": "update",
+        "subject": "CandidateCallingQueue"
+    },
+    {
+        "action": "delete",
+        "subject": "CandidateCallingQueue"
     }
 ]

package/dist/abilities/team-leads.json

@@ -89,6 +89,7 @@
             "dateOfBirth",
             "mainTrade",
             "bio",
+            "source",
             "qualificationsCount",
             "nino",
             "shareCodeExpiry",

package/dist/abilities/worker-curator.abilities.json

@@ -133,6 +133,7 @@
             "dateOfBirth",
             "mainTrade",
             "bio",
+            "source",
             "qualificationsCount",
             "nino",
             "shareCodeExpiry",
@@ -181,6 +182,7 @@
             "agentId",
             "subjectKind",
             "subjectId",
+            "viewerWorkerId",
             "worker",
             "worker.*",
             "job",