@rytass/wms-module-graphql 0.3.0 → 0.4.0

package/lib/auth/host-skip.constant.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Metadata key stamped on every `@WmsOperation` handler so that a host
+ * application's *globally registered* auth guard (`APP_GUARD`) treats WMS
+ * resolvers as "skip / public" and defers the real authorization decision to
+ * {@link WmsAuthGuard}.
+ *
+ * Why this exists
+ * ---------------
+ * A deny-by-default global guard — e.g. the `CasbinGuard` from
+ * `@rytass/member-base-nestjs-module` — blankets every resolver in the compiled
+ * schema, including the ones this library owns. WMS resolvers carry no
+ * host-specific permission metadata, so such a guard rejects them all. By
+ * stamping this key WMS tells the host guard "let me through", and then runs
+ * its own {@link WmsAuthGuard} (wired to the consumer's `authChecker`) to do the
+ * actual enforcement.
+ *
+ * The single coupling point
+ * -------------------------
+ * The default value matches `@rytass/member-base-nestjs-module`'s
+ * `IS_ROUTE_PUBLIC` metadata key. This is the *one and only* place WMS assumes
+ * anything about a specific host guard. If your host guard uses a different
+ * "public / skip" metadata key, fork this constant — nothing else changes.
+ *
+ * If you do not register a global guard at all (or set
+ * `enableGlobalGuard: false`), this marker is simply inert.
+ */
+export declare const HOST_SKIP_METADATA_KEY = "IS_ROUTE_PUBLIC";

package/lib/auth/host-skip.constant.js

@@ -0,0 +1,29 @@
+/**
+ * Metadata key stamped on every `@WmsOperation` handler so that a host
+ * application's *globally registered* auth guard (`APP_GUARD`) treats WMS
+ * resolvers as "skip / public" and defers the real authorization decision to
+ * {@link WmsAuthGuard}.
+ *
+ * Why this exists
+ * ---------------
+ * A deny-by-default global guard — e.g. the `CasbinGuard` from
+ * `@rytass/member-base-nestjs-module` — blankets every resolver in the compiled
+ * schema, including the ones this library owns. WMS resolvers carry no
+ * host-specific permission metadata, so such a guard rejects them all. By
+ * stamping this key WMS tells the host guard "let me through", and then runs
+ * its own {@link WmsAuthGuard} (wired to the consumer's `authChecker`) to do the
+ * actual enforcement.
+ *
+ * The single coupling point
+ * -------------------------
+ * The default value matches `@rytass/member-base-nestjs-module`'s
+ * `IS_ROUTE_PUBLIC` metadata key. This is the *one and only* place WMS assumes
+ * anything about a specific host guard. If your host guard uses a different
+ * "public / skip" metadata key, fork this constant — nothing else changes.
+ *
+ * If you do not register a global guard at all (or set
+ * `enableGlobalGuard: false`), this marker is simply inert.
+ */
+const HOST_SKIP_METADATA_KEY = 'IS_ROUTE_PUBLIC';
+
+export { HOST_SKIP_METADATA_KEY };

package/lib/auth/index.d.ts

@@ -0,0 +1,4 @@
+export { HOST_SKIP_METADATA_KEY } from './host-skip.constant';
+export { WmsAuthGuard } from './wms-auth.guard';
+export { WmsOperation } from './wms-operation.decorator';
+export { WMS_AUTH_OPTIONS, WMS_OPERATION_METADATA, type WmsAuthChecker, type WmsAuthModuleOptions, type WmsOperationRequirement, } from './wms-auth.types';

package/lib/auth/wms-auth.guard.d.ts

@@ -0,0 +1,19 @@
+import { type CanActivate, type ExecutionContext } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { type WmsAuthModuleOptions } from './wms-auth.types';
+/**
+ * Route-level guard applied automatically by `@WmsOperation`. It reads the
+ * requirement declared on the handler and delegates the allow/deny decision to
+ * the consumer-supplied {@link WmsAuthModuleOptions.authChecker}.
+ *
+ * It is deliberately permissive in two cases:
+ * - the handler carries no requirement (field resolvers reached only through an
+ *   already-authorized root operation), and
+ * - no `authChecker` was configured (local dev / auth handled elsewhere).
+ */
+export declare class WmsAuthGuard implements CanActivate {
+    private readonly reflector;
+    private readonly options;
+    constructor(reflector: Reflector, options: WmsAuthModuleOptions);
+    canActivate(context: ExecutionContext): boolean | Promise<boolean>;
+}

package/lib/auth/wms-auth.guard.js

@@ -0,0 +1,41 @@
+import { __decorate, __param, __metadata } from 'tslib';
+import { Injectable, Inject } from '@nestjs/common';
+import { Reflector } from '@nestjs/core';
+import { WMS_AUTH_OPTIONS, WMS_OPERATION_METADATA } from './wms-auth.types.js';
+
+/**
+ * Route-level guard applied automatically by `@WmsOperation`. It reads the
+ * requirement declared on the handler and delegates the allow/deny decision to
+ * the consumer-supplied {@link WmsAuthModuleOptions.authChecker}.
+ *
+ * It is deliberately permissive in two cases:
+ * - the handler carries no requirement (field resolvers reached only through an
+ *   already-authorized root operation), and
+ * - no `authChecker` was configured (local dev / auth handled elsewhere).
+ */
+let WmsAuthGuard = class WmsAuthGuard {
+    reflector;
+    options;
+    constructor(reflector, options) {
+        this.reflector = reflector;
+        this.options = options;
+    }
+    canActivate(context) {
+        const requirement = this.reflector.get(WMS_OPERATION_METADATA, context.getHandler());
+        if (!requirement) {
+            return true;
+        }
+        const { authChecker } = this.options;
+        if (!authChecker) {
+            return true;
+        }
+        return authChecker(context, requirement);
+    }
+};
+WmsAuthGuard = __decorate([
+    Injectable(),
+    __param(1, Inject(WMS_AUTH_OPTIONS)),
+    __metadata("design:paramtypes", [Reflector, Object])
+], WmsAuthGuard);
+
+export { WmsAuthGuard };

package/lib/auth/wms-auth.types.d.ts

@@ -0,0 +1,36 @@
+import type { ExecutionContext } from '@nestjs/common';
+/**
+ * A single, host-neutral permission requirement attached to a WMS root
+ * operation. `resource` and `action` are plain strings on purpose — the WMS
+ * library never knows (nor cares) how a consumer maps them onto Casbin, RBAC
+ * tiers, JWT scopes or anything else. The mapping lives entirely in the
+ * consumer-supplied {@link WmsAuthChecker}.
+ */
+export interface WmsOperationRequirement {
+    readonly resource: string;
+    readonly action: string;
+}
+/**
+ * The authorization contract a consumer wires into
+ * `WmsModuleGraphqlModule.forRootAsync({ authChecker })`. It receives the live
+ * NestJS {@link ExecutionContext} (so the consumer can reach the request,
+ * GraphQL context, current member, enforcer, etc.) plus the requirement
+ * declared by `@WmsOperation` on the resolver being invoked.
+ *
+ * Return `true` to allow, `false` to deny. Throwing is also fine — the
+ * exception propagates exactly like any guard rejection.
+ */
+export type WmsAuthChecker = (context: ExecutionContext, requirement: WmsOperationRequirement) => boolean | Promise<boolean>;
+/**
+ * Options accepted by `WmsModuleGraphqlModule.forRootAsync` that govern
+ * authorization. Intentionally optional: when `authChecker` is omitted the
+ * module stays fully permissive, preserving the pre-auth release behaviour for
+ * local development and consumers that handle authorization elsewhere.
+ */
+export interface WmsAuthModuleOptions {
+    readonly authChecker?: WmsAuthChecker;
+}
+/** DI token holding the resolved {@link WmsAuthModuleOptions}. */
+export declare const WMS_AUTH_OPTIONS: unique symbol;
+/** Reflector metadata key carrying the {@link WmsOperationRequirement}. */
+export declare const WMS_OPERATION_METADATA = "wms:operation";

package/lib/auth/wms-auth.types.js

@@ -0,0 +1,6 @@
+/** DI token holding the resolved {@link WmsAuthModuleOptions}. */
+const WMS_AUTH_OPTIONS = Symbol('WMS_AUTH_OPTIONS');
+/** Reflector metadata key carrying the {@link WmsOperationRequirement}. */
+const WMS_OPERATION_METADATA = 'wms:operation';
+
+export { WMS_AUTH_OPTIONS, WMS_OPERATION_METADATA };

package/lib/auth/wms-operation.decorator.d.ts

@@ -0,0 +1,23 @@
+import { type WmsOperationRequirement } from './wms-auth.types';
+/**
+ * Declares the permission requirement for a WMS root operation and wires up its
+ * enforcement. Apply it to every `@Query` / `@Mutation` the library exposes.
+ *
+ * It bundles three concerns so a single annotation keeps a resolver
+ * self-protecting and host-friendly:
+ *
+ * 1. {@link WMS_OPERATION_METADATA} — the host-neutral `{ resource, action }`
+ *    that {@link WmsAuthGuard} hands to the consumer's `authChecker`.
+ * 2. {@link HOST_SKIP_METADATA_KEY} — tells a host's global guard to defer (see
+ *    that constant for the single coupling point with member-base).
+ * 3. `@UseGuards(WmsAuthGuard)` — the route-level guard that performs the real
+ *    authorization through the configured `authChecker`.
+ *
+ * @example
+ * ```ts
+ * @Query(() => MaterialDto)
+ * @WmsOperation({ resource: 'material', action: 'read' })
+ * material(@Args('id') id: string): Promise<MaterialDto> { ... }
+ * ```
+ */
+export declare const WmsOperation: (requirement: WmsOperationRequirement) => MethodDecorator;

package/lib/auth/wms-operation.decorator.js

@@ -0,0 +1,29 @@
+import { applyDecorators, SetMetadata, UseGuards } from '@nestjs/common';
+import { HOST_SKIP_METADATA_KEY } from './host-skip.constant.js';
+import { WmsAuthGuard } from './wms-auth.guard.js';
+import { WMS_OPERATION_METADATA } from './wms-auth.types.js';
+
+/**
+ * Declares the permission requirement for a WMS root operation and wires up its
+ * enforcement. Apply it to every `@Query` / `@Mutation` the library exposes.
+ *
+ * It bundles three concerns so a single annotation keeps a resolver
+ * self-protecting and host-friendly:
+ *
+ * 1. {@link WMS_OPERATION_METADATA} — the host-neutral `{ resource, action }`
+ *    that {@link WmsAuthGuard} hands to the consumer's `authChecker`.
+ * 2. {@link HOST_SKIP_METADATA_KEY} — tells a host's global guard to defer (see
+ *    that constant for the single coupling point with member-base).
+ * 3. `@UseGuards(WmsAuthGuard)` — the route-level guard that performs the real
+ *    authorization through the configured `authChecker`.
+ *
+ * @example
+ * ```ts
+ * @Query(() => MaterialDto)
+ * @WmsOperation({ resource: 'material', action: 'read' })
+ * material(@Args('id') id: string): Promise<MaterialDto> { ... }
+ * ```
+ */
+const WmsOperation = (requirement) => applyDecorators(SetMetadata(WMS_OPERATION_METADATA, requirement), SetMetadata(HOST_SKIP_METADATA_KEY, true), UseGuards(WmsAuthGuard));
+
+export { WmsOperation };

package/lib/graphql.module.d.ts

@@ -1,5 +1,12 @@
 import { DynamicModule } from '@nestjs/common';
 import type { WmsModuleCoreModuleAsyncOptions } from '@rytass/wms-module-core';
+import { type WmsAuthModuleOptions } from './auth';
+/**
+ * Options for `WmsModuleGraphqlModule.forRootAsync`. Extends the core module
+ * options with an optional {@link WmsAuthModuleOptions.authChecker}; when the
+ * checker is omitted the module stays fully permissive (pre-auth behaviour).
+ */
+export type WmsModuleGraphqlModuleAsyncOptions = WmsModuleCoreModuleAsyncOptions & WmsAuthModuleOptions;
 export declare class WmsModuleGraphqlModule {
-    static forRootAsync(options: WmsModuleCoreModuleAsyncOptions): DynamicModule;
+    static forRootAsync(options: WmsModuleGraphqlModuleAsyncOptions): DynamicModule;
 }

package/lib/graphql.module.js

@@ -4,6 +4,8 @@ import { WmsModuleCoreModule } from '@rytass/wms-module-core';
 import './helpers/loader.service.js';
 import { HelperModule } from './helpers/helper.module.js';
 import './helpers/query-path.js';
+import { WmsAuthGuard } from './auth/wms-auth.guard.js';
+import { WMS_AUTH_OPTIONS } from './auth/wms-auth.types.js';
 import { LoaderMutation } from './mutations/loader.mutation.js';
 import { LoaderQuery } from './queries/loader.query.js';
 import { MaterialMutation } from './mutations/material.mutation.js';
@@ -108,12 +110,19 @@ const exportDependencies = [
 ];
 let WmsModuleGraphqlModule = WmsModuleGraphqlModule_1 = class WmsModuleGraphqlModule {
     static forRootAsync(options) {
-        const coreModule = WmsModuleCoreModule.forRootAsync(options);
+        const { authChecker, ...coreOptions } = options;
+        const coreModule = WmsModuleCoreModule.forRootAsync(coreOptions);
+        const authOptions = { authChecker };
+        const providers = [
+            ...exportDependencies,
+            WmsAuthGuard,
+            { provide: WMS_AUTH_OPTIONS, useValue: authOptions },
+        ];
         return {
             module: WmsModuleGraphqlModule_1,
             imports: [coreModule, HelperModule],
-            providers: exportDependencies,
-            exports: [...exportDependencies, HelperModule, coreModule],
+            providers,
+            exports: [...exportDependencies, WmsAuthGuard, HelperModule, coreModule],
         };
     }
 };

package/lib/mutations/allocate-inventory-order.mutation.js

@@ -5,6 +5,8 @@ import { AllocateInventoryOrderService, StockService } from '@rytass/wms-module-
 import { AllocateInventoryOrderDto } from '../dto/allocate-inventory-order.dto.js';
 import { CreateAllocateInventoryOrderArgs, UpdateAllocateInventoryOrderArgs } from '../inputs/create-allocate-inventory-order.args.js';
 import { DeallocateOrderArgs } from '../inputs/deallocate-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let AllocateInventoryOrderMutation = class AllocateInventoryOrderMutation {
     allocateInventoryOrderService;
@@ -53,6 +55,7 @@ let AllocateInventoryOrderMutation = class AllocateInventoryOrderMutation {
 };
 __decorate([
     Mutation(() => AllocateInventoryOrderDto),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateAllocateInventoryOrderArgs]),
@@ -60,6 +63,7 @@ __decorate([
 ], AllocateInventoryOrderMutation.prototype, "createAllocateInventoryOrder", null);
 __decorate([
     Mutation(() => AllocateInventoryOrderDto),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateAllocateInventoryOrderArgs]),
@@ -67,6 +71,7 @@ __decorate([
 ], AllocateInventoryOrderMutation.prototype, "updateAllocateInventoryOrder", null);
 __decorate([
     Mutation(() => Boolean),
+    WmsOperation({ resource: 'allocate-inventory-order', action: 'deallocate' }),
     __param(0, Args('items', { type: () => [DeallocateOrderArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),

package/lib/mutations/hold-inventory-order.mutation.js

@@ -5,6 +5,8 @@ import { HoldInventoryOrderService, StockService } from '@rytass/wms-module-core
 import { HoldInventoryOrderDto } from '../dto/hold-inventory-order.dto.js';
 import { CreateHoldInventoryOrderArgs, UpdateHoldInventoryOrderArgs } from '../inputs/create-hold-inventory-order.args.js';
 import { ReleaseOrderArgs } from '../inputs/release-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let HoldInventoryOrderMutation = class HoldInventoryOrderMutation {
     holdInventoryOrderService;
@@ -53,6 +55,7 @@ let HoldInventoryOrderMutation = class HoldInventoryOrderMutation {
 };
 __decorate([
     Mutation(() => HoldInventoryOrderDto),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateHoldInventoryOrderArgs]),
@@ -60,6 +63,7 @@ __decorate([
 ], HoldInventoryOrderMutation.prototype, "createHoldInventoryOrder", null);
 __decorate([
     Mutation(() => HoldInventoryOrderDto),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateHoldInventoryOrderArgs]),
@@ -67,6 +71,7 @@ __decorate([
 ], HoldInventoryOrderMutation.prototype, "updateHoldInventoryOrder", null);
 __decorate([
     Mutation(() => Boolean),
+    WmsOperation({ resource: 'hold-inventory-order', action: 'release' }),
     __param(0, Args('items', { type: () => [ReleaseOrderArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),

package/lib/mutations/loader.mutation.js

@@ -29,6 +29,8 @@ import { Mutation, Args } from '@nestjs/graphql';
 import { CreateLoaderTypeArgs, UpdateLoaderTypeArgs } from '../inputs/create-loader-type.args.js';
 import { CreateLoaderArgs, CreateLoadersArgs, UpdateLoaderArgs } from '../inputs/create-loader.args.js';
 import { In } from 'typeorm';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let LoaderMutation = class LoaderMutation {
     loaderService;
@@ -64,6 +66,7 @@ let LoaderMutation = class LoaderMutation {
 };
 __decorate([
     Mutation(() => [LoaderDto]),
+    WmsOperation({ resource: 'loader', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateLoaderArgs]),
@@ -71,6 +74,7 @@ __decorate([
 ], LoaderMutation.prototype, "createLoader", null);
 __decorate([
     Mutation(() => [LoaderDto]),
+    WmsOperation({ resource: 'loader', action: 'create' }),
     __param(0, Args('items', { type: () => [CreateLoadersArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),
@@ -78,6 +82,7 @@ __decorate([
 ], LoaderMutation.prototype, "createBatchLoader", null);
 __decorate([
     Mutation(() => LoaderDto),
+    WmsOperation({ resource: 'loader', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateLoaderArgs]),
@@ -85,6 +90,7 @@ __decorate([
 ], LoaderMutation.prototype, "updateLoader", null);
 __decorate([
     Mutation(() => LoaderTypeDto),
+    WmsOperation({ resource: 'loader', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateLoaderTypeArgs]),
@@ -92,6 +98,7 @@ __decorate([
 ], LoaderMutation.prototype, "createLoaderType", null);
 __decorate([
     Mutation(() => LoaderTypeDto),
+    WmsOperation({ resource: 'loader', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateLoaderTypeArgs]),

package/lib/mutations/location.mutation.js

@@ -4,6 +4,8 @@ import { Mutation, Args } from '@nestjs/graphql';
 import { LocationService } from '@rytass/wms-module-core';
 import { LocationDto } from '../dto/location.dto.js';
 import { CreateLocationArgs, UpdateLocationArgs } from '../inputs/create-location.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let LocationMutation = class LocationMutation {
     locationService;
@@ -19,6 +21,7 @@ let LocationMutation = class LocationMutation {
 };
 __decorate([
     Mutation(() => LocationDto),
+    WmsOperation({ resource: 'location', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateLocationArgs]),
@@ -26,6 +29,7 @@ __decorate([
 ], LocationMutation.prototype, "createLocation", null);
 __decorate([
     Mutation(() => LocationDto),
+    WmsOperation({ resource: 'location', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateLocationArgs]),

package/lib/mutations/material.mutation.js

@@ -27,6 +27,8 @@ import '../dto/quality-inspection-order.dto.js';
 import '../dto/quality-inspection-order-item.dto.js';
 import { CreateMaterialArgs, UpdateMaterialArgs } from '../inputs/create-material.args.js';
 import { MaterialService } from '@rytass/wms-module-core';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let MaterialMutation = class MaterialMutation {
     materialService;
@@ -42,6 +44,7 @@ let MaterialMutation = class MaterialMutation {
 };
 __decorate([
     Mutation(() => MaterialDto),
+    WmsOperation({ resource: 'material', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateMaterialArgs]),
@@ -49,6 +52,7 @@ __decorate([
 ], MaterialMutation.prototype, "createMaterial", null);
 __decorate([
     Mutation(() => MaterialDto),
+    WmsOperation({ resource: 'material', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateMaterialArgs]),

package/lib/mutations/merge-batch.mutation.js

@@ -4,6 +4,8 @@ import { Mutation, Args, Resolver } from '@nestjs/graphql';
 import { StockService, MergeBatchOrderService } from '@rytass/wms-module-core';
 import { MergeBatchArgs } from '../inputs/merge-batch.args.js';
 import { MergeBatchOrderDto } from '../dto/merge-batch-order.dto.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let MergeBatchMutation = class MergeBatchMutation {
     stockService;
@@ -29,6 +31,7 @@ let MergeBatchMutation = class MergeBatchMutation {
 };
 __decorate([
     Mutation(() => MergeBatchOrderDto),
+    WmsOperation({ resource: 'batch', action: 'merge' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [MergeBatchArgs]),

package/lib/mutations/quality-inspection-order.mutation.js

@@ -4,6 +4,8 @@ import { Mutation, Args } from '@nestjs/graphql';
 import { QualityInspectionOrderService, StockService } from '@rytass/wms-module-core';
 import { QualityInspectionOrderDto } from '../dto/quality-inspection-order.dto.js';
 import { CreateQualityInspectionOrderArgs } from '../inputs/create-quality-inspection-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let QualityInspectionOrderMutation = class QualityInspectionOrderMutation {
     qualityInspectionOrderService;
@@ -30,6 +32,7 @@ let QualityInspectionOrderMutation = class QualityInspectionOrderMutation {
 };
 __decorate([
     Mutation(() => QualityInspectionOrderDto),
+    WmsOperation({ resource: 'quality-inspection-order', action: 'inspect' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateQualityInspectionOrderArgs]),

package/lib/mutations/receive-inventory-order.mutation.js

@@ -29,6 +29,8 @@ import '../dto/quality-inspection-order-item.dto.js';
 import { CreateReceiveInventoryOrderArgs, UpdateReceiveInventoryOrderArgs } from '../inputs/create-receive-inventory-order.args.js';
 import { DataSource } from 'typeorm';
 import { ReceiveOrderArgs } from '../inputs/receive-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let ReceiveInventoryOrderMutation = class ReceiveInventoryOrderMutation {
     dataSource;
@@ -64,6 +66,7 @@ let ReceiveInventoryOrderMutation = class ReceiveInventoryOrderMutation {
 };
 __decorate([
     Mutation(() => ReceiveInventoryOrderDto),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateReceiveInventoryOrderArgs]),
@@ -71,6 +74,7 @@ __decorate([
 ], ReceiveInventoryOrderMutation.prototype, "createReceiveInventoryOrder", null);
 __decorate([
     Mutation(() => ReceiveInventoryOrderDto),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateReceiveInventoryOrderArgs]),
@@ -78,6 +82,7 @@ __decorate([
 ], ReceiveInventoryOrderMutation.prototype, "updateReceiveInventoryOrder", null);
 __decorate([
     Mutation(() => Boolean),
+    WmsOperation({ resource: 'receive-inventory-order', action: 'receive' }),
     __param(0, Args('items', { type: () => [ReceiveOrderArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),

package/lib/mutations/reclassify-inventory-order.mutation.js

@@ -4,6 +4,8 @@ import { Mutation, Args, Resolver } from '@nestjs/graphql';
 import { StockService, ReclassifyInventoryOrderService } from '@rytass/wms-module-core';
 import { ReclassifyInventoryOrderArgs } from '../inputs/reclassify-inventory-order.args.js';
 import { ReclassifyInventoryOrderDto } from '../dto/reclassify-inventory-order.dto.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let ReclassifyInventoryOrderMutation = class ReclassifyInventoryOrderMutation {
     stockService;
@@ -30,6 +32,7 @@ let ReclassifyInventoryOrderMutation = class ReclassifyInventoryOrderMutation {
 };
 __decorate([
     Mutation(() => ReclassifyInventoryOrderDto),
+    WmsOperation({ resource: 'reclassify-inventory-order', action: 'reclassify' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [ReclassifyInventoryOrderArgs]),

package/lib/mutations/scrape-order.mutation.js

@@ -4,6 +4,8 @@ import { Mutation, Args } from '@nestjs/graphql';
 import { ScrapeService, StockService } from '@rytass/wms-module-core';
 import { ScrapeOrderDto } from '../dto/scrape-order.dto.js';
 import { ScrapeOrderArgs } from '../inputs/scrape-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let ScrapeMutation = class ScrapeMutation {
     scrapeService;
@@ -24,6 +26,7 @@ let ScrapeMutation = class ScrapeMutation {
 };
 __decorate([
     Mutation(() => ScrapeOrderDto),
+    WmsOperation({ resource: 'scrape-order', action: 'scrape' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [ScrapeOrderArgs]),

package/lib/mutations/ship-inventory-order.mutation.js

@@ -29,6 +29,8 @@ import { Mutation, Args } from '@nestjs/graphql';
 import { CreateShipInventoryOrderArgs, UpdateShipInventoryOrderArgs } from '../inputs/create-ship-inventory-order.args.js';
 import { ShipOrderArgs } from '../inputs/ship-order.args.js';
 import { CancelShipOrderArgs } from '../inputs/cancel-ship-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let ShipInventoryOrderMutation = class ShipInventoryOrderMutation {
     shipInventoryOrderService;
@@ -72,6 +74,7 @@ let ShipInventoryOrderMutation = class ShipInventoryOrderMutation {
 };
 __decorate([
     Mutation(() => ShipInventoryOrderDto),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateShipInventoryOrderArgs]),
@@ -79,6 +82,7 @@ __decorate([
 ], ShipInventoryOrderMutation.prototype, "createShipInventoryOrder", null);
 __decorate([
     Mutation(() => ShipInventoryOrderDto),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateShipInventoryOrderArgs]),
@@ -86,6 +90,7 @@ __decorate([
 ], ShipInventoryOrderMutation.prototype, "updateShipInventoryOrder", null);
 __decorate([
     Mutation(() => Boolean),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'ship' }),
     __param(0, Args('items', { type: () => [ShipOrderArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),
@@ -93,6 +98,7 @@ __decorate([
 ], ShipInventoryOrderMutation.prototype, "ship", null);
 __decorate([
     Mutation(() => Boolean),
+    WmsOperation({ resource: 'ship-inventory-order', action: 'cancel' }),
     __param(0, Args('items', { type: () => [CancelShipOrderArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),

package/lib/mutations/split-batch.mutation.js

@@ -4,6 +4,8 @@ import { Mutation, Args, Resolver } from '@nestjs/graphql';
 import { StockService, SplitBatchOrderService } from '@rytass/wms-module-core';
 import { SplitBatchArgs } from '../inputs/split-batch.args.js';
 import { SplitBatchOrderDto } from '../dto/split-batch-order.dto.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let SplitBatchMutation = class SplitBatchMutation {
     stockService;
@@ -23,6 +25,7 @@ let SplitBatchMutation = class SplitBatchMutation {
 };
 __decorate([
     Mutation(() => SplitBatchOrderDto),
+    WmsOperation({ resource: 'batch', action: 'split' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [SplitBatchArgs]),

package/lib/mutations/transfer-customer-order.mutation.js

@@ -5,6 +5,8 @@ import { TransferCustomerOrderService, StockService } from '@rytass/wms-module-c
 import { TransferCustomerOrderDto } from '../dto/transfer-customer-order.dto.js';
 import { CreateTransferCustomerOrderArgs, UpdateTransferCustomerOrderArgs } from '../inputs/create-transfer-customer-order.args.js';
 import { ReturnTransferCustomerOrderArgs } from '../inputs/return-transfer-customer-order.args.js';
+import '../auth/wms-auth.guard.js';
+import { WmsOperation } from '../auth/wms-operation.decorator.js';
 
 let TransferCustomerOrderMutation = class TransferCustomerOrderMutation {
     transferCustomerOrderService;
@@ -53,6 +55,7 @@ let TransferCustomerOrderMutation = class TransferCustomerOrderMutation {
 };
 __decorate([
     Mutation(() => TransferCustomerOrderDto),
+    WmsOperation({ resource: 'transfer-customer-order', action: 'create' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [CreateTransferCustomerOrderArgs]),
@@ -60,6 +63,7 @@ __decorate([
 ], TransferCustomerOrderMutation.prototype, "createTransferCustomerOrder", null);
 __decorate([
     Mutation(() => TransferCustomerOrderDto),
+    WmsOperation({ resource: 'transfer-customer-order', action: 'update' }),
     __param(0, Args()),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [UpdateTransferCustomerOrderArgs]),
@@ -67,6 +71,7 @@ __decorate([
 ], TransferCustomerOrderMutation.prototype, "updateTransferCustomerOrder", null);
 __decorate([
     Mutation(() => Boolean),
+    WmsOperation({ resource: 'transfer-customer-order', action: 'return' }),
     __param(0, Args('items', { type: () => [ReturnTransferCustomerOrderArgs] })),
     __metadata("design:type", Function),
     __metadata("design:paramtypes", [Array]),