veloce-ts 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -7,6 +7,36 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.1] - 2026-06-26
+
+### Fixed
+
+- **GraphQL decorator pipeline wired up.** `@Resolver`, `@GQLQuery`, `@GQLMutation`, `@GQLSubscription`, and `@Arg` decorators now correctly connect to `GraphQLPlugin`. Previously the decorators wrote metadata using local symbols that `GraphQLSchemaBuilder` never read — the schema was always empty.
+
+  Pass resolver classes to the plugin via the new `resolvers` option:
+  ```typescript
+  app.usePlugin(new GraphQLPlugin({ resolvers: [UserResolver, PostResolver] }));
+  ```
+  Or register them with `app.include()` before calling `usePlugin()`:
+  ```typescript
+  app.include(UserResolver);
+  app.usePlugin(new GraphQLPlugin());
+  ```
+
+- **`PermissionManager.revokePermission()` bug fixed.** When called without a `resourceId`, the filter condition `resourceId ? p.resourceId !== resourceId : true` always returned `true` (kept all records, removed nothing). Now correctly removes all permissions for the user+resource pair when no `resourceId` is specified.
+
+- **`app.include()` now recognises `@Resolver` classes.** Previously silently ignored — now registers resolver metadata into `MetadataRegistry` so `GraphQLPlugin` can pick it up automatically.
+
+### Added
+
+- **89 new tests** (507 total, 0 failures) covering:
+  - GraphQL decorator metadata pipeline end-to-end
+  - `app.include()` + `resolvers: []` option merge
+  - `PermissionPlugin` construction, `PermissionManager` unit logic, management route auth guards
+  - `HealthCheckPlugin` `/health`, `/ready`, `/live` endpoints, custom check logic, `HealthCheckers` factory
+  - `OAuthPlugin` route behavior, `BaseOAuthProvider`/`GoogleOAuthProvider`/`GitHubOAuthProvider`, `OAuthStateManager`, `PKCEUtils`
+  - Logger (`createLogger`, `getLogger`, `initializeLogger`, `createChildLogger`, child context propagation)
+
 ## [1.0.0] - 2026-06-26
 
 First stable release. Establishes a frozen public API with semver guarantees going forward.

package/README.md

@@ -243,7 +243,7 @@ app.listen(3000);
 <summary><b>WebSocket Support</b></summary>
 
 ```typescript
-import { WebSocket, OnConnect, OnMessage, OnDisconnect } from 'veloce-ts';
+import { WebSocket, OnConnect, OnMessage, OnDisconnect, WebSocketConnection } from 'veloce-ts';
 import { z } from 'zod';
 
 const MessageSchema = z.object({
@@ -496,11 +496,32 @@ app.usePlugin(new OpenAPIPlugin({
   docsPath: '/docs',
 }));
 
-// GraphQL support
+// GraphQL support — pass resolver classes via the resolvers option
+import { Resolver, GQLQuery, GQLMutation, Arg } from 'veloce-ts/graphql';
+import { z } from 'zod';
+
+@Resolver('user')
+class UserResolver {
+  @GQLQuery('getUser')
+  async getUser(@Arg('id', z.string()) id: string) {
+    return { id, name: 'Alice' };
+  }
+
+  @GQLMutation('createUser')
+  async createUser(@Arg('name', z.string()) name: string) {
+    return { id: '1', name };
+  }
+}
+
 app.usePlugin(new GraphQLPlugin({
   path: '/graphql',
   playground: true,
+  resolvers: [UserResolver],   // pass all @Resolver classes here
 }));
+
+// Alternatively, register via app.include() before usePlugin():
+// app.include(UserResolver);
+// app.usePlugin(new GraphQLPlugin({ playground: true }));
 ```
 
 ## 🌐 Multi-Runtime Support