@rytass/wms-module-graphql 0.3.0 → 0.4.0

package/index.cjs.js

@@ -9,6 +9,7 @@ var lruCache = require('lru-cache');
 var typeorm = require('typeorm');
 var DataLoader = require('dataloader');
 var graphql = require('@nestjs/graphql');
+var core = require('@nestjs/core');
 var wmsBaseNestjsModule = require('@rytass/wms-base-nestjs-module');
 var warehouseMap_entity = require('@rytass/wms-base-nestjs-module/models/warehouse-map.entity');
 
@@ -212,6 +213,97 @@ function createWmsLoaders(loaderService) {
     };
 }
 
+/**
+ * Metadata key stamped on every `@WmsOperation` handler so that a host
+ * application's *globally registered* auth guard (`APP_GUARD`) treats WMS
+ * resolvers as "skip / public" and defers the real authorization decision to
+ * {@link WmsAuthGuard}.
+ *
+ * Why this exists
+ * ---------------
+ * A deny-by-default global guard — e.g. the `CasbinGuard` from
+ * `@rytass/member-base-nestjs-module` — blankets every resolver in the compiled
+ * schema, including the ones this library owns. WMS resolvers carry no
+ * host-specific permission metadata, so such a guard rejects them all. By
+ * stamping this key WMS tells the host guard "let me through", and then runs
+ * its own {@link WmsAuthGuard} (wired to the consumer's `authChecker`) to do the
+ * actual enforcement.
+ *
+ * The single coupling point
+ * -------------------------
+ * The default value matches `@rytass/member-base-nestjs-module`'s
+ * `IS_ROUTE_PUBLIC` metadata key. This is the *one and only* place WMS assumes
+ * anything about a specific host guard. If your host guard uses a different
+ * "public / skip" metadata key, fork this constant — nothing else changes.
+ *
+ * If you do not register a global guard at all (or set
+ * `enableGlobalGuard: false`), this marker is simply inert.
+ */
+const HOST_SKIP_METADATA_KEY = 'IS_ROUTE_PUBLIC';
+
+/** DI token holding the resolved {@link WmsAuthModuleOptions}. */
+const WMS_AUTH_OPTIONS = Symbol('WMS_AUTH_OPTIONS');
+/** Reflector metadata key carrying the {@link WmsOperationRequirement}. */
+const WMS_OPERATION_METADATA = 'wms:operation';
+
+/**
+ * Route-level guard applied automatically by `@WmsOperation`. It reads the
+ * requirement declared on the handler and delegates the allow/deny decision to
+ * the consumer-supplied {@link WmsAuthModuleOptions.authChecker}.
+ *
+ * It is deliberately permissive in two cases:
+ * - the handler carries no requirement (field resolvers reached only through an
+ *   already-authorized root operation), and
+ * - no `authChecker` was configured (local dev / auth handled elsewhere).
+ */
+exports.WmsAuthGuard = class WmsAuthGuard {
+    reflector;
+    options;
+    constructor(reflector, options) {
+        this.reflector = reflector;
+        this.options = options;
+    }
+    canActivate(context) {
+        const requirement = this.reflector.get(WMS_OPERATION_METADATA, context.getHandler());
+        if (!requirement) {
+            return true;
+        }
+        const { authChecker } = this.options;
+        if (!authChecker) {
+            return true;
+        }
+        return authChecker(context, requirement);
+    }
+};
+exports.WmsAuthGuard = tslib.__decorate([
+    common.Injectable(),
+    tslib.__param(1, common.Inject(WMS_AUTH_OPTIONS)),
+    tslib.__metadata("design:paramtypes", [core.Reflector, Object])
+], exports.WmsAuthGuard);
+
+/**
+ * Declares the permission requirement for a WMS root operation and wires up its
+ * enforcement. Apply it to every `@Query` / `@Mutation` the library exposes.
+ *
+ * It bundles three concerns so a single annotation keeps a resolver
+ * self-protecting and host-friendly:
+ *
+ * 1. {@link WMS_OPERATION_METADATA} — the host-neutral `{ resource, action }`
+ *    that {@link WmsAuthGuard} hands to the consumer's `authChecker`.
+ * 2. {@link HOST_SKIP_METADATA_KEY} — tells a host's global guard to defer (see
+ *    that constant for the single coupling point with member-base).
+ * 3. `@UseGuards(WmsAuthGuard)` — the route-level guard that performs the real
+ *    authorization through the configured `authChecker`.
+ *
+ * @example
+ * ```ts
+ * @Query(() => MaterialDto)
+ * @WmsOperation({ resource: 'material', action: 'read' })
+ * material(@Args('id') id: string): Promise<MaterialDto> { ... }
+ * ```
+ */
+const WmsOperation = (requirement) => common.applyDecorators(common.SetMetadata(WMS_OPERATION_METADATA, requirement), common.SetMetadata(HOST_SKIP_METADATA_KEY, true), common.UseGuards(exports.WmsAuthGuard));
+
 const IdGenFunction = (input) => {
     const hash = crypto.createHash('sha256');
     hash.update(input);
@@ -1540,6 +1632,7 @@ let LoaderMutation = class LoaderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => [LoaderDto]),
+    WmsOperation({ resource: 'loader', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateLoaderArgs]),
@@ -1547,6 +1640,7 @@ tslib.__decorate([
 ], LoaderMutation.prototype, "createLoader", null);
 tslib.__decorate([
     graphql.Mutation(() => [LoaderDto]),
+    WmsOperation({ resource: 'loader', action: 'create' }),
     tslib.__param(0, graphql.Args('items', { type: () => [CreateLoadersArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -1554,6 +1648,7 @@ tslib.__decorate([
 ], LoaderMutation.prototype, "createBatchLoader", null);
 tslib.__decorate([
     graphql.Mutation(() => LoaderDto),
+    WmsOperation({ resource: 'loader', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateLoaderArgs]),
@@ -1561,6 +1656,7 @@ tslib.__decorate([
 ], LoaderMutation.prototype, "updateLoader", null);
 tslib.__decorate([
     graphql.Mutation(() => LoaderTypeDto),
+    WmsOperation({ resource: 'loader', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateLoaderTypeArgs]),
@@ -1568,6 +1664,7 @@ tslib.__decorate([
 ], LoaderMutation.prototype, "createLoaderType", null);
 tslib.__decorate([
     graphql.Mutation(() => LoaderTypeDto),
+    WmsOperation({ resource: 'loader', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateLoaderTypeArgs]),
@@ -1796,6 +1893,7 @@ let LoaderQuery = class LoaderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => LoaderDto),
+    WmsOperation({ resource: 'loader', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -1803,6 +1901,7 @@ tslib.__decorate([
 ], LoaderQuery.prototype, "loader", null);
 tslib.__decorate([
     graphql.Query(() => Loaders),
+    WmsOperation({ resource: 'loader', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindLoaderArgs]),
@@ -1810,6 +1909,7 @@ tslib.__decorate([
 ], LoaderQuery.prototype, "loaders", null);
 tslib.__decorate([
     graphql.Query(() => LoaderTypeDto),
+    WmsOperation({ resource: 'loader', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -1817,6 +1917,7 @@ tslib.__decorate([
 ], LoaderQuery.prototype, "loaderType", null);
 tslib.__decorate([
     graphql.Query(() => LoaderTypes),
+    WmsOperation({ resource: 'loader', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindLoaderTypeArgs]),
@@ -1824,6 +1925,7 @@ tslib.__decorate([
 ], LoaderQuery.prototype, "loaderTypes", null);
 tslib.__decorate([
     graphql.Query(() => [LoaderUnitDto]),
+    WmsOperation({ resource: 'loader', action: 'read' }),
     tslib.__param(0, graphql.Args('type', { type: () => LoaderUnit })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -1831,6 +1933,7 @@ tslib.__decorate([
 ], LoaderQuery.prototype, "loaderUnits", null);
 tslib.__decorate([
     graphql.Query(() => [LoaderDto]),
+    WmsOperation({ resource: 'loader', action: 'read' }),
     tslib.__param(0, graphql.Args('locationId', { type: () => graphql.ID, nullable: true })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -1924,6 +2027,7 @@ let MaterialMutation = class MaterialMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => MaterialDto),
+    WmsOperation({ resource: 'material', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateMaterialArgs]),
@@ -1931,6 +2035,7 @@ tslib.__decorate([
 ], MaterialMutation.prototype, "createMaterial", null);
 tslib.__decorate([
     graphql.Mutation(() => MaterialDto),
+    WmsOperation({ resource: 'material', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateMaterialArgs]),
@@ -1979,6 +2084,7 @@ let MaterialQuery = class MaterialQuery {
 };
 tslib.__decorate([
     graphql.Query(() => MaterialDto),
+    WmsOperation({ resource: 'material', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID, nullable: true })),
     tslib.__param(1, graphql.Args('key', { type: () => String, nullable: true })),
     tslib.__metadata("design:type", Function),
@@ -1987,6 +2093,7 @@ tslib.__decorate([
 ], MaterialQuery.prototype, "material", null);
 tslib.__decorate([
     graphql.Query(() => Materials),
+    WmsOperation({ resource: 'material', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindMaterialArgs]),
@@ -2098,6 +2205,7 @@ let StockQuery = class StockQuery {
 };
 tslib.__decorate([
     graphql.Query(() => StockDto),
+    WmsOperation({ resource: 'stock', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -2105,6 +2213,7 @@ tslib.__decorate([
 ], StockQuery.prototype, "stock", null);
 tslib.__decorate([
     graphql.Query(() => Stocks),
+    WmsOperation({ resource: 'stock', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindStockArgs]),
@@ -2112,6 +2221,7 @@ tslib.__decorate([
 ], StockQuery.prototype, "stocks", null);
 tslib.__decorate([
     graphql.Query(() => Materials),
+    WmsOperation({ resource: 'stock', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindStockArgs]),
@@ -2119,6 +2229,7 @@ tslib.__decorate([
 ], StockQuery.prototype, "stocksGroupedByMaterial", null);
 tslib.__decorate([
     graphql.Query(() => AggregatedStocks),
+    WmsOperation({ resource: 'stock', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindStockArgs]),
@@ -2126,6 +2237,7 @@ tslib.__decorate([
 ], StockQuery.prototype, "aggregatedStocks", null);
 tslib.__decorate([
     graphql.Query(() => ChangeLogs),
+    WmsOperation({ resource: 'stock', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindStockArgs]),
@@ -2318,6 +2430,7 @@ let ReceiveInventoryOrderMutation = class ReceiveInventoryOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => ReceiveInventoryOrderDto),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateReceiveInventoryOrderArgs]),
@@ -2325,6 +2438,7 @@ tslib.__decorate([
 ], ReceiveInventoryOrderMutation.prototype, "createReceiveInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => ReceiveInventoryOrderDto),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateReceiveInventoryOrderArgs]),
@@ -2332,6 +2446,7 @@ tslib.__decorate([
 ], ReceiveInventoryOrderMutation.prototype, "updateReceiveInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'receive' }),
     tslib.__param(0, graphql.Args('items', { type: () => [ReceiveOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -2428,6 +2543,7 @@ let ReceiveInventoryOrderQuery = class ReceiveInventoryOrderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => ReceiveInventoryOrderDto),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -2435,6 +2551,7 @@ tslib.__decorate([
 ], ReceiveInventoryOrderQuery.prototype, "receiveInventoryOrder", null);
 tslib.__decorate([
     graphql.Query(() => ReceiveInventoryOrders),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindReceiveInventoryOrderArgs]),
@@ -2672,6 +2789,7 @@ let ShipInventoryOrderMutation = class ShipInventoryOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => ShipInventoryOrderDto),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateShipInventoryOrderArgs]),
@@ -2679,6 +2797,7 @@ tslib.__decorate([
 ], ShipInventoryOrderMutation.prototype, "createShipInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => ShipInventoryOrderDto),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateShipInventoryOrderArgs]),
@@ -2686,6 +2805,7 @@ tslib.__decorate([
 ], ShipInventoryOrderMutation.prototype, "updateShipInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'ship' }),
     tslib.__param(0, graphql.Args('items', { type: () => [ShipOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -2693,6 +2813,7 @@ tslib.__decorate([
 ], ShipInventoryOrderMutation.prototype, "ship", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'cancel' }),
     tslib.__param(0, graphql.Args('items', { type: () => [CancelShipOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -2789,6 +2910,7 @@ let ShipInventoryOrderQuery = class ShipInventoryOrderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => ShipInventoryOrderDto),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -2796,6 +2918,7 @@ tslib.__decorate([
 ], ShipInventoryOrderQuery.prototype, "shipInventoryOrder", null);
 tslib.__decorate([
     graphql.Query(() => ShipInventoryOrders),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindShipInventoryOrderArgs]),
@@ -3345,6 +3468,7 @@ let WarehouseMapMutation = class WarehouseMapMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => MapDataDto),
+    WmsOperation({ resource: 'warehouse-map', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateWarehouseMapArgs]),
@@ -3446,6 +3570,7 @@ let LocationQuery = class LocationQuery {
 };
 tslib.__decorate([
     graphql.Query(() => LocationDto),
+    WmsOperation({ resource: 'location', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -3453,6 +3578,7 @@ tslib.__decorate([
 ], LocationQuery.prototype, "location", null);
 tslib.__decorate([
     graphql.Query(() => Locations),
+    WmsOperation({ resource: 'location', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindLocationArgs]),
@@ -3523,6 +3649,7 @@ let LocationMutation = class LocationMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => LocationDto),
+    WmsOperation({ resource: 'location', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateLocationArgs]),
@@ -3530,6 +3657,7 @@ tslib.__decorate([
 ], LocationMutation.prototype, "createLocation", null);
 tslib.__decorate([
     graphql.Mutation(() => LocationDto),
+    WmsOperation({ resource: 'location', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateLocationArgs]),
@@ -3572,6 +3700,7 @@ let UnitQuery = class UnitQuery {
 };
 tslib.__decorate([
     graphql.Query(() => [UnitDto]),
+    WmsOperation({ resource: 'unit', action: 'read' }),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", []),
     tslib.__metadata("design:returntype", Promise)
@@ -3831,6 +3960,7 @@ let TransferOrderMutation = class TransferOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => TransferOrderDto),
+    WmsOperation({ resource: 'transfer-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateTransferOrderArgs]),
@@ -3838,6 +3968,7 @@ tslib.__decorate([
 ], TransferOrderMutation.prototype, "createTransferOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => TransferOrderDto),
+    WmsOperation({ resource: 'transfer-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateTransferOrderArgs]),
@@ -3845,6 +3976,7 @@ tslib.__decorate([
 ], TransferOrderMutation.prototype, "updateTransferOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'transfer-order', action: 'transfer' }),
     tslib.__param(0, graphql.Args('items', { type: () => [TransferOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -3852,6 +3984,7 @@ tslib.__decorate([
 ], TransferOrderMutation.prototype, "transfer", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'transfer-order', action: 'cancel' }),
     tslib.__param(0, graphql.Args('items', { type: () => [CancelTransferOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -3956,6 +4089,7 @@ let TransferOrderQuery = class TransferOrderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => TransferOrders),
+    WmsOperation({ resource: 'transfer-order', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindTransferOrderArgs]),
@@ -3963,6 +4097,7 @@ tslib.__decorate([
 ], TransferOrderQuery.prototype, "transferOrders", null);
 tslib.__decorate([
     graphql.Query(() => TransferOrderDto),
+    WmsOperation({ resource: 'transfer-order', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -4300,6 +4435,7 @@ let HoldInventoryOrderMutation = class HoldInventoryOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => HoldInventoryOrderDto),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateHoldInventoryOrderArgs]),
@@ -4307,6 +4443,7 @@ tslib.__decorate([
 ], HoldInventoryOrderMutation.prototype, "createHoldInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => HoldInventoryOrderDto),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateHoldInventoryOrderArgs]),
@@ -4314,6 +4451,7 @@ tslib.__decorate([
 ], HoldInventoryOrderMutation.prototype, "updateHoldInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'release' }),
     tslib.__param(0, graphql.Args('items', { type: () => [ReleaseOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -4373,6 +4511,7 @@ let HoldInventoryOrderQuery = class HoldInventoryOrderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => HoldInventoryOrders),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindHoldInventoryOrderArgs]),
@@ -4434,6 +4573,7 @@ let BatchQuery = class BatchQuery {
 };
 tslib.__decorate([
     graphql.Query(() => Batches),
+    WmsOperation({ resource: 'batch', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindBatchArgs]),
@@ -4653,6 +4793,7 @@ let AllocateInventoryOrderQuery = class AllocateInventoryOrderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => AllocateInventoryOrders),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindAllocateInventoryOrderArgs]),
@@ -4828,6 +4969,7 @@ let AllocateInventoryOrderMutation = class AllocateInventoryOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => AllocateInventoryOrderDto),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateAllocateInventoryOrderArgs]),
@@ -4835,6 +4977,7 @@ tslib.__decorate([
 ], AllocateInventoryOrderMutation.prototype, "createAllocateInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => AllocateInventoryOrderDto),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateAllocateInventoryOrderArgs]),
@@ -4842,6 +4985,7 @@ tslib.__decorate([
 ], AllocateInventoryOrderMutation.prototype, "updateAllocateInventoryOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'deallocate' }),
     tslib.__param(0, graphql.Args('items', { type: () => [DeallocateOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -5178,6 +5322,7 @@ let SaleOrderQuery = class SaleOrderQuery {
 };
 tslib.__decorate([
     graphql.Query(() => [String]),
+    WmsOperation({ resource: 'sale-order', action: 'read' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [FindSaleOrderArgs]),
@@ -5185,6 +5330,7 @@ tslib.__decorate([
 ], SaleOrderQuery.prototype, "saleOrderDistinctIds", null);
 tslib.__decorate([
     graphql.Query(() => [String]),
+    WmsOperation({ resource: 'sale-order', action: 'read' }),
     tslib.__param(0, graphql.Args('id', { type: () => graphql.ID })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -5295,6 +5441,7 @@ let SplitBatchMutation = class SplitBatchMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => SplitBatchOrderDto),
+    WmsOperation({ resource: 'batch', action: 'split' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [SplitBatchArgs]),
@@ -5413,6 +5560,7 @@ let MergeBatchMutation = class MergeBatchMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => MergeBatchOrderDto),
+    WmsOperation({ resource: 'batch', action: 'merge' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [MergeBatchArgs]),
@@ -5537,6 +5685,7 @@ let ReclassifyInventoryOrderMutation = class ReclassifyInventoryOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => ReclassifyInventoryOrderDto),
+    WmsOperation({ resource: 'reclassify-inventory-order', action: 'reclassify' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [ReclassifyInventoryOrderArgs]),
@@ -5709,6 +5858,7 @@ let TransferCustomerOrderMutation = class TransferCustomerOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => TransferCustomerOrderDto),
+    WmsOperation({ resource: 'transfer-customer-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateTransferCustomerOrderArgs]),
@@ -5716,6 +5866,7 @@ tslib.__decorate([
 ], TransferCustomerOrderMutation.prototype, "createTransferCustomerOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => TransferCustomerOrderDto),
+    WmsOperation({ resource: 'transfer-customer-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateTransferCustomerOrderArgs]),
@@ -5723,6 +5874,7 @@ tslib.__decorate([
 ], TransferCustomerOrderMutation.prototype, "updateTransferCustomerOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'transfer-customer-order', action: 'return' }),
     tslib.__param(0, graphql.Args('items', { type: () => [ReturnTransferCustomerOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -5914,6 +6066,7 @@ let TransferVendorOrderMutation = class TransferVendorOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => TransferVendorOrderDto),
+    WmsOperation({ resource: 'transfer-vendor-order', action: 'create' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateTransferVendorOrderArgs]),
@@ -5921,6 +6074,7 @@ tslib.__decorate([
 ], TransferVendorOrderMutation.prototype, "createTransferVendorOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => TransferVendorOrderDto),
+    WmsOperation({ resource: 'transfer-vendor-order', action: 'update' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [UpdateTransferVendorOrderArgs]),
@@ -5928,6 +6082,7 @@ tslib.__decorate([
 ], TransferVendorOrderMutation.prototype, "updateTransferVendorOrder", null);
 tslib.__decorate([
     graphql.Mutation(() => Boolean),
+    WmsOperation({ resource: 'transfer-vendor-order', action: 'return' }),
     tslib.__param(0, graphql.Args('items', { type: () => [ReturnTransferVendorOrderArgs] })),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [Array]),
@@ -6049,6 +6204,7 @@ let ScrapeMutation = class ScrapeMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => ScrapeOrderDto),
+    WmsOperation({ resource: 'scrape-order', action: 'scrape' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [ScrapeOrderArgs]),
@@ -6131,6 +6287,7 @@ let QualityInspectionOrderMutation = class QualityInspectionOrderMutation {
 };
 tslib.__decorate([
     graphql.Mutation(() => QualityInspectionOrderDto),
+    WmsOperation({ resource: 'quality-inspection-order', action: 'inspect' }),
     tslib.__param(0, graphql.Args()),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [CreateQualityInspectionOrderArgs]),
@@ -6154,6 +6311,7 @@ let WarehouseMapDataQuery = class WarehouseMapDataQuery {
 };
 tslib.__decorate([
     graphql.Query(() => MapDataDto),
+    WmsOperation({ resource: 'warehouse-map', action: 'read' }),
     tslib.__param(0, graphql.Args('key')),
     tslib.__metadata("design:type", Function),
     tslib.__metadata("design:paramtypes", [String]),
@@ -6243,12 +6401,19 @@ const exportDependencies = [
 ];
 exports.WmsModuleGraphqlModule = WmsModuleGraphqlModule_1 = class WmsModuleGraphqlModule {
     static forRootAsync(options) {
-        const coreModule = wmsModuleCore.WmsModuleCoreModule.forRootAsync(options);
+        const { authChecker, ...coreOptions } = options;
+        const coreModule = wmsModuleCore.WmsModuleCoreModule.forRootAsync(coreOptions);
+        const authOptions = { authChecker };
+        const providers = [
+            ...exportDependencies,
+            exports.WmsAuthGuard,
+            { provide: WMS_AUTH_OPTIONS, useValue: authOptions },
+        ];
         return {
             module: WmsModuleGraphqlModule_1,
             imports: [coreModule, HelperModule],
-            providers: exportDependencies,
-            exports: [...exportDependencies, HelperModule, coreModule],
+            providers,
+            exports: [...exportDependencies, exports.WmsAuthGuard, HelperModule, coreModule],
         };
     }
 };
@@ -6258,4 +6423,8 @@ exports.WmsModuleGraphqlModule = WmsModuleGraphqlModule_1 = tslib.__decorate([
     })
 ], exports.WmsModuleGraphqlModule);
 
+exports.HOST_SKIP_METADATA_KEY = HOST_SKIP_METADATA_KEY;
+exports.WMS_AUTH_OPTIONS = WMS_AUTH_OPTIONS;
+exports.WMS_OPERATION_METADATA = WMS_OPERATION_METADATA;
+exports.WmsOperation = WmsOperation;
 exports.createWmsLoaders = createWmsLoaders;

package/index.d.ts

@@ -3,3 +3,5 @@ export { LoaderService } from './lib/helpers/loader.service';
 export type { LoaderOptions, LoaderOptionsWithPagination, } from './lib/helpers/loader.service';
 export type { LoaderType } from './lib/helpers/dataloader.type';
 export { createWmsLoaders, type WmsLoaders, } from './lib/helpers/create-wms-loaders';
+export { HOST_SKIP_METADATA_KEY, WmsAuthGuard, WmsOperation, WMS_AUTH_OPTIONS, WMS_OPERATION_METADATA, type WmsAuthChecker, type WmsAuthModuleOptions, type WmsOperationRequirement, } from './lib/auth';
+export type { WmsModuleGraphqlModuleAsyncOptions } from './lib/graphql.module';

package/index.js

@@ -1,3 +1,7 @@
 export { WmsModuleGraphqlModule } from './lib/graphql.module.js';
 export { LoaderService } from './lib/helpers/loader.service.js';
 export { createWmsLoaders } from './lib/helpers/create-wms-loaders.js';
+export { HOST_SKIP_METADATA_KEY } from './lib/auth/host-skip.constant.js';
+export { WmsAuthGuard } from './lib/auth/wms-auth.guard.js';
+export { WmsOperation } from './lib/auth/wms-operation.decorator.js';
+export { WMS_AUTH_OPTIONS, WMS_OPERATION_METADATA } from './lib/auth/wms-auth.types.js';