@jperezmart/nest-casl-testing 0.2.0 → 0.3.0

package/README.md

@@ -61,8 +61,10 @@ application would:
 | `detectSubjectType` | `(subject: object) => string` | Custom subject-type detection, for subjects CASL cannot name on its own.             |
 
 A role whose definition is `true` rather than a function also grants
-`manage all`. A user whose `roles` is missing or not an array is treated as
-having no roles, which is what `AbilityFactory` does.
+`manage all`. The `everyone` entry applies to every user before their Roles,
+and a role named `everyone` on the user is ignored. A user whose `roles` is
+missing or not an array is treated as having no roles (the Everyone
+permissions still apply), which is what `AbilityFactory` does.
 
 ## License
 

package/dist/index.cjs

@@ -4,9 +4,9 @@ let _casl_ability = require("@casl/ability");
 /**
 * Build a CASL ability directly from Role permissions and a user, without
 * booting a Nest application. Intended for unit-testing permission definitions
-* in projects that consume `@jperezmart/nest-casl`. The role union, user and
-* ability types are inferred from `permissions`; the user may carry roles the
-* map does not declare.
+* in projects that consume `@jperezmart/nest-casl`. The user and ability types
+* are inferred from `permissions`; the user may carry roles the map does not
+* declare. Everyone permissions apply first, then the user's Roles.
 *
 * @example
 * ```ts
@@ -22,10 +22,14 @@ function buildAbilityForTest(permissions, user, options = {}) {
 		builder.can("manage", "all");
 		return builder.build(buildOptions);
 	}
+	const abilityBuilder = builder;
+	const everyone = permissions["everyone"];
+	if (typeof everyone === "function") everyone(user, abilityBuilder);
 	for (const role of roles) {
+		if (role === "everyone") continue;
 		const definition = permissions[role];
 		if (definition === true) builder.can("manage", "all");
-		else if (typeof definition === "function") definition(user, builder);
+		else if (typeof definition === "function") definition(user, abilityBuilder);
 	}
 	return builder.build(buildOptions);
 }

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["AbilityBuilder","createMongoAbility"],"sources":["../src/index.ts"],"sourcesContent":["import type { AnyAbility, MongoAbility } from '@casl/ability';\nimport { AbilityBuilder, createMongoAbility } from '@casl/ability';\nimport type {\n  AuthorizableUser,\n  DefineRolePermissions,\n  RolePermissions,\n} from '@jperezmart/nest-casl';\n\n/** Extra options accepted by {@link buildAbilityForTest}. */\nexport interface BuildAbilityForTestOptions {\n  /**\n   * Role that bypasses all checks (mirrors `CaslModule.forRoot`). Any string:\n   * the superuser role usually has no entry in the Role permissions.\n   */\n  superuserRole?: string;\n\n  /** Custom subject-type detection (mirrors `CaslModule.forRoot`). */\n  detectSubjectType?: (subject: object) => string;\n}\n\n/**\n * Build a CASL ability directly from Role permissions and a user, without\n * booting a Nest application. Intended for unit-testing permission definitions\n * in projects that consume `@jperezmart/nest-casl`. The role union, user and\n * ability types are inferred from `permissions`; the user may carry roles the\n * map does not declare.\n *\n * @example\n * ```ts\n * const ability = buildAbilityForTest(permissions, { id: \"1\", roles: [\"author\"] });\n * expect(ability.can(\"update\", subject(\"Article\", { authorId: \"1\" }))).toBe(true);\n * ```\n */\nexport function buildAbilityForTest<\n  Roles extends string = string,\n  TUser extends AuthorizableUser = AuthorizableUser,\n  TAbility extends AnyAbility = AnyAbility,\n>(\n  permissions: RolePermissions<Roles, TUser, TAbility>,\n  user: TUser,\n  options: BuildAbilityForTestOptions = {},\n): TAbility {\n  const builder = new AbilityBuilder<MongoAbility>(createMongoAbility);\n  const buildOptions = options.detectSubjectType\n    ? { detectSubjectType: options.detectSubjectType }\n    : undefined;\n\n  // Mirror AbilityFactory: a missing / non-array `roles` means \"no roles\".\n  const roles: readonly string[] = Array.isArray(user.roles) ? user.roles : [];\n\n  if (\n    options.superuserRole !== undefined &&\n    roles.includes(options.superuserRole)\n  ) {\n    builder.can('manage', 'all');\n    return builder.build(buildOptions) as unknown as TAbility;\n  }\n\n  for (const role of roles) {\n    const definition = (permissions as Record<string, unknown>)[role];\n    if (definition === true) {\n      builder.can('manage', 'all');\n    } else if (typeof definition === 'function') {\n      (definition as DefineRolePermissions<TUser, AnyAbility>)(\n        user,\n        builder as unknown as AbilityBuilder<AnyAbility>,\n      );\n    }\n  }\n\n  return builder.build(buildOptions) as unknown as TAbility;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiCA,SAAgB,oBAKd,aACA,MACA,UAAsC,CAAC,GAC7B;CACV,MAAM,UAAU,IAAIA,cAAAA,eAA6BC,cAAAA,kBAAkB;CACnE,MAAM,eAAe,QAAQ,oBACzB,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,KAAA;CAGJ,MAAM,QAA2B,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC;CAE3E,IACE,QAAQ,kBAAkB,KAAA,KAC1B,MAAM,SAAS,QAAQ,aAAa,GACpC;EACA,QAAQ,IAAI,UAAU,KAAK;EAC3B,OAAO,QAAQ,MAAM,YAAY;CACnC;CAEA,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,aAAc,YAAwC;EAC5D,IAAI,eAAe,MACjB,QAAQ,IAAI,UAAU,KAAK;OACtB,IAAI,OAAO,eAAe,YAC/B,WACE,MACA,OACF;CAEJ;CAEA,OAAO,QAAQ,MAAM,YAAY;AACnC"}
+{"version":3,"file":"index.cjs","names":["AbilityBuilder","createMongoAbility"],"sources":["../src/index.ts"],"sourcesContent":["import type { AnyAbility, MongoAbility } from '@casl/ability';\nimport { AbilityBuilder, createMongoAbility } from '@casl/ability';\nimport type {\n  AuthorizableUser,\n  DefineRolePermissions,\n  RolePermissions,\n} from '@jperezmart/nest-casl';\n\n/** Extra options accepted by {@link buildAbilityForTest}. */\nexport interface BuildAbilityForTestOptions {\n  /**\n   * Role that bypasses all checks (mirrors `CaslModule.forRoot`). Any string:\n   * the superuser role usually has no entry in the Role permissions.\n   */\n  superuserRole?: string;\n\n  /** Custom subject-type detection (mirrors `CaslModule.forRoot`). */\n  detectSubjectType?: (subject: object) => string;\n}\n\n/**\n * Build a CASL ability directly from Role permissions and a user, without\n * booting a Nest application. Intended for unit-testing permission definitions\n * in projects that consume `@jperezmart/nest-casl`. The user and ability types\n * are inferred from `permissions`; the user may carry roles the map does not\n * declare. Everyone permissions apply first, then the user's Roles.\n *\n * @example\n * ```ts\n * const ability = buildAbilityForTest(permissions, { id: \"1\", roles: [\"author\"] });\n * expect(ability.can(\"update\", subject(\"Article\", { authorId: \"1\" }))).toBe(true);\n * ```\n */\nexport function buildAbilityForTest<\n  TUser extends AuthorizableUser = AuthorizableUser,\n  TAbility extends AnyAbility = AnyAbility,\n>(\n  permissions: RolePermissions<string, TUser, TAbility>,\n  user: TUser,\n  options: BuildAbilityForTestOptions = {},\n): TAbility {\n  const builder = new AbilityBuilder<MongoAbility>(createMongoAbility);\n  const buildOptions = options.detectSubjectType\n    ? { detectSubjectType: options.detectSubjectType }\n    : undefined;\n\n  // Mirror AbilityFactory: a missing / non-array `roles` means \"no roles\"\n  // (Everyone permissions still apply).\n  const roles: readonly string[] = Array.isArray(user.roles) ? user.roles : [];\n\n  if (\n    options.superuserRole !== undefined &&\n    roles.includes(options.superuserRole)\n  ) {\n    builder.can('manage', 'all');\n    return builder.build(buildOptions) as unknown as TAbility;\n  }\n\n  const abilityBuilder = builder as unknown as AbilityBuilder<AnyAbility>;\n  const everyone = (permissions as Record<string, unknown>)['everyone'];\n  if (typeof everyone === 'function') {\n    (everyone as DefineRolePermissions<TUser, AnyAbility>)(\n      user,\n      abilityBuilder,\n    );\n  }\n\n  for (const role of roles) {\n    // A foreign Role named `everyone` is not a Role: its rules are already in.\n    if (role === 'everyone') continue;\n    const definition = (permissions as Record<string, unknown>)[role];\n    if (definition === true) {\n      builder.can('manage', 'all');\n    } else if (typeof definition === 'function') {\n      (definition as DefineRolePermissions<TUser, AnyAbility>)(\n        user,\n        abilityBuilder,\n      );\n    }\n  }\n\n  return builder.build(buildOptions) as unknown as TAbility;\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiCA,SAAgB,oBAId,aACA,MACA,UAAsC,CAAC,GAC7B;CACV,MAAM,UAAU,IAAIA,cAAAA,eAA6BC,cAAAA,kBAAkB;CACnE,MAAM,eAAe,QAAQ,oBACzB,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,KAAA;CAIJ,MAAM,QAA2B,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC;CAE3E,IACE,QAAQ,kBAAkB,KAAA,KAC1B,MAAM,SAAS,QAAQ,aAAa,GACpC;EACA,QAAQ,IAAI,UAAU,KAAK;EAC3B,OAAO,QAAQ,MAAM,YAAY;CACnC;CAEA,MAAM,iBAAiB;CACvB,MAAM,WAAY,YAAwC;CAC1D,IAAI,OAAO,aAAa,YACtB,SACE,MACA,cACF;CAGF,KAAK,MAAM,QAAQ,OAAO;EAExB,IAAI,SAAS,YAAY;EACzB,MAAM,aAAc,YAAwC;EAC5D,IAAI,eAAe,MACjB,QAAQ,IAAI,UAAU,KAAK;OACtB,IAAI,OAAO,eAAe,YAC/B,WACE,MACA,cACF;CAEJ;CAEA,OAAO,QAAQ,MAAM,YAAY;AACnC"}

package/dist/index.d.cts

@@ -15,9 +15,9 @@ interface BuildAbilityForTestOptions {
 /**
  * Build a CASL ability directly from Role permissions and a user, without
  * booting a Nest application. Intended for unit-testing permission definitions
- * in projects that consume `@jperezmart/nest-casl`. The role union, user and
- * ability types are inferred from `permissions`; the user may carry roles the
- * map does not declare.
+ * in projects that consume `@jperezmart/nest-casl`. The user and ability types
+ * are inferred from `permissions`; the user may carry roles the map does not
+ * declare. Everyone permissions apply first, then the user's Roles.
  *
  * @example
  * ```ts
@@ -25,7 +25,7 @@ interface BuildAbilityForTestOptions {
  * expect(ability.can("update", subject("Article", { authorId: "1" }))).toBe(true);
  * ```
  */
-declare function buildAbilityForTest<Roles extends string = string, TUser extends AuthorizableUser = AuthorizableUser, TAbility extends AnyAbility = AnyAbility>(permissions: RolePermissions<Roles, TUser, TAbility>, user: TUser, options?: BuildAbilityForTestOptions): TAbility;
+declare function buildAbilityForTest<TUser extends AuthorizableUser = AuthorizableUser, TAbility extends AnyAbility = AnyAbility>(permissions: RolePermissions<string, TUser, TAbility>, user: TUser, options?: BuildAbilityForTestOptions): TAbility;
 //#endregion
 export { BuildAbilityForTestOptions, buildAbilityForTest };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/index.ts"],"mappings":";;;;;UASiB,0BAAA;EAAA;;;;EAKf,aAAA;EAGA;EAAA,iBAAA,IAAqB,OAAA;AAAA;AAAe;AAgBtC;;;;;;;;;;;;AAhBsC,iBAgBtB,mBAAA,8CAEA,gBAAA,GAAmB,gBAAA,mBAChB,UAAA,GAAa,UAAA,EAE9B,WAAA,EAAa,eAAA,CAAgB,KAAA,EAAO,KAAA,EAAO,QAAA,GAC3C,IAAA,EAAM,KAAA,EACN,OAAA,GAAS,0BAAA,GACR,QAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/index.ts"],"mappings":";;;;;UASiB,0BAAA;EAAA;;;;EAKf,aAAA;EAGA;EAAA,iBAAA,IAAqB,OAAA;AAAA;AAAe;AAgBtC;;;;;;;;;;;;AAhBsC,iBAgBtB,mBAAA,eACA,gBAAA,GAAmB,gBAAA,mBAChB,UAAA,GAAa,UAAA,EAE9B,WAAA,EAAa,eAAA,SAAwB,KAAA,EAAO,QAAA,GAC5C,IAAA,EAAM,KAAA,EACN,OAAA,GAAS,0BAAA,GACR,QAAA"}

package/dist/index.d.ts

@@ -15,9 +15,9 @@ interface BuildAbilityForTestOptions {
 /**
  * Build a CASL ability directly from Role permissions and a user, without
  * booting a Nest application. Intended for unit-testing permission definitions
- * in projects that consume `@jperezmart/nest-casl`. The role union, user and
- * ability types are inferred from `permissions`; the user may carry roles the
- * map does not declare.
+ * in projects that consume `@jperezmart/nest-casl`. The user and ability types
+ * are inferred from `permissions`; the user may carry roles the map does not
+ * declare. Everyone permissions apply first, then the user's Roles.
  *
  * @example
  * ```ts
@@ -25,7 +25,7 @@ interface BuildAbilityForTestOptions {
  * expect(ability.can("update", subject("Article", { authorId: "1" }))).toBe(true);
  * ```
  */
-declare function buildAbilityForTest<Roles extends string = string, TUser extends AuthorizableUser = AuthorizableUser, TAbility extends AnyAbility = AnyAbility>(permissions: RolePermissions<Roles, TUser, TAbility>, user: TUser, options?: BuildAbilityForTestOptions): TAbility;
+declare function buildAbilityForTest<TUser extends AuthorizableUser = AuthorizableUser, TAbility extends AnyAbility = AnyAbility>(permissions: RolePermissions<string, TUser, TAbility>, user: TUser, options?: BuildAbilityForTestOptions): TAbility;
 //#endregion
 export { BuildAbilityForTestOptions, buildAbilityForTest };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":";;;;;UASiB,0BAAA;EAAA;;;;EAKf,aAAA;EAGA;EAAA,iBAAA,IAAqB,OAAA;AAAA;AAAe;AAgBtC;;;;;;;;;;;;AAhBsC,iBAgBtB,mBAAA,8CAEA,gBAAA,GAAmB,gBAAA,mBAChB,UAAA,GAAa,UAAA,EAE9B,WAAA,EAAa,eAAA,CAAgB,KAAA,EAAO,KAAA,EAAO,QAAA,GAC3C,IAAA,EAAM,KAAA,EACN,OAAA,GAAS,0BAAA,GACR,QAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":";;;;;UASiB,0BAAA;EAAA;;;;EAKf,aAAA;EAGA;EAAA,iBAAA,IAAqB,OAAA;AAAA;AAAe;AAgBtC;;;;;;;;;;;;AAhBsC,iBAgBtB,mBAAA,eACA,gBAAA,GAAmB,gBAAA,mBAChB,UAAA,GAAa,UAAA,EAE9B,WAAA,EAAa,eAAA,SAAwB,KAAA,EAAO,QAAA,GAC5C,IAAA,EAAM,KAAA,EACN,OAAA,GAAS,0BAAA,GACR,QAAA"}

package/dist/index.js

@@ -3,9 +3,9 @@ import { AbilityBuilder, createMongoAbility } from "@casl/ability";
 /**
 * Build a CASL ability directly from Role permissions and a user, without
 * booting a Nest application. Intended for unit-testing permission definitions
-* in projects that consume `@jperezmart/nest-casl`. The role union, user and
-* ability types are inferred from `permissions`; the user may carry roles the
-* map does not declare.
+* in projects that consume `@jperezmart/nest-casl`. The user and ability types
+* are inferred from `permissions`; the user may carry roles the map does not
+* declare. Everyone permissions apply first, then the user's Roles.
 *
 * @example
 * ```ts
@@ -21,10 +21,14 @@ function buildAbilityForTest(permissions, user, options = {}) {
 		builder.can("manage", "all");
 		return builder.build(buildOptions);
 	}
+	const abilityBuilder = builder;
+	const everyone = permissions["everyone"];
+	if (typeof everyone === "function") everyone(user, abilityBuilder);
 	for (const role of roles) {
+		if (role === "everyone") continue;
 		const definition = permissions[role];
 		if (definition === true) builder.can("manage", "all");
-		else if (typeof definition === "function") definition(user, builder);
+		else if (typeof definition === "function") definition(user, abilityBuilder);
 	}
 	return builder.build(buildOptions);
 }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["import type { AnyAbility, MongoAbility } from '@casl/ability';\nimport { AbilityBuilder, createMongoAbility } from '@casl/ability';\nimport type {\n  AuthorizableUser,\n  DefineRolePermissions,\n  RolePermissions,\n} from '@jperezmart/nest-casl';\n\n/** Extra options accepted by {@link buildAbilityForTest}. */\nexport interface BuildAbilityForTestOptions {\n  /**\n   * Role that bypasses all checks (mirrors `CaslModule.forRoot`). Any string:\n   * the superuser role usually has no entry in the Role permissions.\n   */\n  superuserRole?: string;\n\n  /** Custom subject-type detection (mirrors `CaslModule.forRoot`). */\n  detectSubjectType?: (subject: object) => string;\n}\n\n/**\n * Build a CASL ability directly from Role permissions and a user, without\n * booting a Nest application. Intended for unit-testing permission definitions\n * in projects that consume `@jperezmart/nest-casl`. The role union, user and\n * ability types are inferred from `permissions`; the user may carry roles the\n * map does not declare.\n *\n * @example\n * ```ts\n * const ability = buildAbilityForTest(permissions, { id: \"1\", roles: [\"author\"] });\n * expect(ability.can(\"update\", subject(\"Article\", { authorId: \"1\" }))).toBe(true);\n * ```\n */\nexport function buildAbilityForTest<\n  Roles extends string = string,\n  TUser extends AuthorizableUser = AuthorizableUser,\n  TAbility extends AnyAbility = AnyAbility,\n>(\n  permissions: RolePermissions<Roles, TUser, TAbility>,\n  user: TUser,\n  options: BuildAbilityForTestOptions = {},\n): TAbility {\n  const builder = new AbilityBuilder<MongoAbility>(createMongoAbility);\n  const buildOptions = options.detectSubjectType\n    ? { detectSubjectType: options.detectSubjectType }\n    : undefined;\n\n  // Mirror AbilityFactory: a missing / non-array `roles` means \"no roles\".\n  const roles: readonly string[] = Array.isArray(user.roles) ? user.roles : [];\n\n  if (\n    options.superuserRole !== undefined &&\n    roles.includes(options.superuserRole)\n  ) {\n    builder.can('manage', 'all');\n    return builder.build(buildOptions) as unknown as TAbility;\n  }\n\n  for (const role of roles) {\n    const definition = (permissions as Record<string, unknown>)[role];\n    if (definition === true) {\n      builder.can('manage', 'all');\n    } else if (typeof definition === 'function') {\n      (definition as DefineRolePermissions<TUser, AnyAbility>)(\n        user,\n        builder as unknown as AbilityBuilder<AnyAbility>,\n      );\n    }\n  }\n\n  return builder.build(buildOptions) as unknown as TAbility;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAiCA,SAAgB,oBAKd,aACA,MACA,UAAsC,CAAC,GAC7B;CACV,MAAM,UAAU,IAAI,eAA6B,kBAAkB;CACnE,MAAM,eAAe,QAAQ,oBACzB,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,KAAA;CAGJ,MAAM,QAA2B,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC;CAE3E,IACE,QAAQ,kBAAkB,KAAA,KAC1B,MAAM,SAAS,QAAQ,aAAa,GACpC;EACA,QAAQ,IAAI,UAAU,KAAK;EAC3B,OAAO,QAAQ,MAAM,YAAY;CACnC;CAEA,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,aAAc,YAAwC;EAC5D,IAAI,eAAe,MACjB,QAAQ,IAAI,UAAU,KAAK;OACtB,IAAI,OAAO,eAAe,YAC/B,WACE,MACA,OACF;CAEJ;CAEA,OAAO,QAAQ,MAAM,YAAY;AACnC"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["import type { AnyAbility, MongoAbility } from '@casl/ability';\nimport { AbilityBuilder, createMongoAbility } from '@casl/ability';\nimport type {\n  AuthorizableUser,\n  DefineRolePermissions,\n  RolePermissions,\n} from '@jperezmart/nest-casl';\n\n/** Extra options accepted by {@link buildAbilityForTest}. */\nexport interface BuildAbilityForTestOptions {\n  /**\n   * Role that bypasses all checks (mirrors `CaslModule.forRoot`). Any string:\n   * the superuser role usually has no entry in the Role permissions.\n   */\n  superuserRole?: string;\n\n  /** Custom subject-type detection (mirrors `CaslModule.forRoot`). */\n  detectSubjectType?: (subject: object) => string;\n}\n\n/**\n * Build a CASL ability directly from Role permissions and a user, without\n * booting a Nest application. Intended for unit-testing permission definitions\n * in projects that consume `@jperezmart/nest-casl`. The user and ability types\n * are inferred from `permissions`; the user may carry roles the map does not\n * declare. Everyone permissions apply first, then the user's Roles.\n *\n * @example\n * ```ts\n * const ability = buildAbilityForTest(permissions, { id: \"1\", roles: [\"author\"] });\n * expect(ability.can(\"update\", subject(\"Article\", { authorId: \"1\" }))).toBe(true);\n * ```\n */\nexport function buildAbilityForTest<\n  TUser extends AuthorizableUser = AuthorizableUser,\n  TAbility extends AnyAbility = AnyAbility,\n>(\n  permissions: RolePermissions<string, TUser, TAbility>,\n  user: TUser,\n  options: BuildAbilityForTestOptions = {},\n): TAbility {\n  const builder = new AbilityBuilder<MongoAbility>(createMongoAbility);\n  const buildOptions = options.detectSubjectType\n    ? { detectSubjectType: options.detectSubjectType }\n    : undefined;\n\n  // Mirror AbilityFactory: a missing / non-array `roles` means \"no roles\"\n  // (Everyone permissions still apply).\n  const roles: readonly string[] = Array.isArray(user.roles) ? user.roles : [];\n\n  if (\n    options.superuserRole !== undefined &&\n    roles.includes(options.superuserRole)\n  ) {\n    builder.can('manage', 'all');\n    return builder.build(buildOptions) as unknown as TAbility;\n  }\n\n  const abilityBuilder = builder as unknown as AbilityBuilder<AnyAbility>;\n  const everyone = (permissions as Record<string, unknown>)['everyone'];\n  if (typeof everyone === 'function') {\n    (everyone as DefineRolePermissions<TUser, AnyAbility>)(\n      user,\n      abilityBuilder,\n    );\n  }\n\n  for (const role of roles) {\n    // A foreign Role named `everyone` is not a Role: its rules are already in.\n    if (role === 'everyone') continue;\n    const definition = (permissions as Record<string, unknown>)[role];\n    if (definition === true) {\n      builder.can('manage', 'all');\n    } else if (typeof definition === 'function') {\n      (definition as DefineRolePermissions<TUser, AnyAbility>)(\n        user,\n        abilityBuilder,\n      );\n    }\n  }\n\n  return builder.build(buildOptions) as unknown as TAbility;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAiCA,SAAgB,oBAId,aACA,MACA,UAAsC,CAAC,GAC7B;CACV,MAAM,UAAU,IAAI,eAA6B,kBAAkB;CACnE,MAAM,eAAe,QAAQ,oBACzB,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,KAAA;CAIJ,MAAM,QAA2B,MAAM,QAAQ,KAAK,KAAK,IAAI,KAAK,QAAQ,CAAC;CAE3E,IACE,QAAQ,kBAAkB,KAAA,KAC1B,MAAM,SAAS,QAAQ,aAAa,GACpC;EACA,QAAQ,IAAI,UAAU,KAAK;EAC3B,OAAO,QAAQ,MAAM,YAAY;CACnC;CAEA,MAAM,iBAAiB;CACvB,MAAM,WAAY,YAAwC;CAC1D,IAAI,OAAO,aAAa,YACtB,SACE,MACA,cACF;CAGF,KAAK,MAAM,QAAQ,OAAO;EAExB,IAAI,SAAS,YAAY;EACzB,MAAM,aAAc,YAAwC;EAC5D,IAAI,eAAe,MACjB,QAAQ,IAAI,UAAU,KAAK;OACtB,IAAI,OAAO,eAAe,YAC/B,WACE,MACA,cACF;CAEJ;CAEA,OAAO,QAAQ,MAAM,YAAY;AACnC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jperezmart/nest-casl-testing",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Testing utilities for @jperezmart/nest-casl — build and assert abilities without booting Nest.",
   "repository": {
     "type": "git",
@@ -35,7 +35,7 @@
   "devDependencies": {
     "@casl/ability": "^7.0.0",
     "@jperezmart/eslint-config": "^1.0.0",
-    "@jperezmart/nest-casl": "0.2.0",
+    "@jperezmart/nest-casl": "0.3.0",
     "@jperezmart/typescript-config": "^1.0.0",
     "eslint": "^10.3.0",
     "tsdown": "^0.22.2",
@@ -44,7 +44,7 @@
   },
   "peerDependencies": {
     "@casl/ability": "^7.0.0",
-    "@jperezmart/nest-casl": "^0.2.0"
+    "@jperezmart/nest-casl": "^0.3.0"
   },
   "publishConfig": {
     "access": "public"