I'm struggling with Laravel 11 policies

@tykus component

class Todolist extends Component
{
    public $description;

    public function done($id) {
        sleep(0.5);
        todo::where('id',$id)->first()->update([
            'is_done' => true,
        ]);
    }

    public function restore($id) {
        sleep(0.5);
        todo::where('id',$id)->first()->update([
            'is_done' => false,
        ]);
    }

    public function delete($id) {
        sleep(0.5);
        todo::where('id',$id)->first()->delete();
    }

    public function add(todo $todo) {
        $this->authorize('create',$todo);
        
        $this->validate([
            'description' => ['required','max:128'],
        ]);
        sleep(0.5);
        todo::create([
            'user_id' => session('user_id'),
            'description' => $this->description,
        ]);
        $this->reset();
    }

    public function render()
    {
        return view('livewire.elements.todolist.todolist',[
            'todos' => todo::orderBy('is_done','ASC')->orderBy('created_at','DESC')->get(),
        ]);
    }
}

policy

namespace App\Policies;

use App\Models\User;
use App\Models\Todo;
use Illuminate\Auth\Access\Response;

class TodoPolicy
{
    /**
     * Determine whether the user can view any models.
     */
    public function viewAny(User $user): bool
    {

    }

    /**
     * Determine whether the user can view the model.
     */
    public function view(User $user, todo $todo): bool
    {

    }

    /**
     * Determine whether the user can create models.
     */
    public function create(User $user): bool
    {
        return true;
    }

    /**
     * Determine whether the user can update the model.
     */
    public function update(User $user, todo $todo): bool
    {
        //
    }

    /**
     * Determine whether the user can delete the model.
     */
    public function delete(User $user, todo $todo): bool
    {
        //
    }

    /**
     * Determine whether the user can restore the model.
     */
    public function restore(User $user, todo $todo): bool
    {
        //
    }

    /**
     * Determine whether the user can permanently delete the model.
     */
    public function forceDelete(User $user, todo $todo): bool
    {
        //
    }
}

@mehdi79 the create Policy method does not take an instance of the Model; there is no Model instance.

public function add()
{
    $this->authorize('create', todo::class);

    // ...

@tykus I had tested all of these, tested again, not working

@mehdi79 I wonder if the non-conventional Model name (todo rather than Todo) is your issue

@tykus I use Todo and TodoPolicy, also tested todo and todoPolicy , thats not problem

@mehdi79 do you actually have an authenticated user?

@tykus I don't use Laravel Authentication system and I built it myself, also in this case I'm returning true for all create requests in policy just to test it.

@mehdi79 now we're getting to the source of the issue - the create Policy method is expecting an authenticated User? Make it optional if you're not authenticated:

public function create(?User $user): bool
{
    return true;
}

@tykus Allah bless you, thanks a lot

@valentin_vranic policies should be registered automatically when you use for example TodoPolicy for Todo model

@mehdi79 your model is named todo or Todo?

@tykus It's Todo but also tested todo, I'm testing and trying for 2 days

@rickt96 You can do something like that

public function __construct(?Category $category, $id)
{
	Gate::authorize('updateCategory', $category->find($id));
}

in your policy

public function updateCategory(?User $current_user, ?Category $category)
{
	//your logic here
}

for create it's simple

public function __construct()
{
	Gate::authorize('createCategory');
}

public function createCategory(?User $current_user)
{
	//your logic here
}