ecoportal-api-graphql 1.3.16 → 2.0.0

data/lib/ecoportal/api/graphql/logic/input.rb

@@ -5,6 +5,133 @@ module Ecoportal
         class Input < Logic::BaseModel
           passthrough :clientMutationId
 
+          # Declarative set-diff macro for id-list fields that the schema exposes as
+          # `IdDiffInput { additions: [ID!], removals: [ID!] }` on the *update* mutation.
+          #
+          # Mixed into any Input class (whether it inherits from {Logic::Input} or from a
+          # `Base::` data model) via `extend`. {Logic::Input} extends it for its own subclasses;
+          # data-model Input classes call `extend Logic::Input::IdDiffFields` explicitly.
+          #
+          # Usage:
+          #   class Update < Base::ContractorEntity
+          #     extend Logic::Input::IdDiffFields
+          #     id_diff_fields :associatedPeopleIds, :leadContractorIds
+          #   end
+          #
+          # It installs (or augments) a `from_model` that, for each declared field, computes the
+          # delta DIRECTLY from the READ model's `doc[key]` vs `original_doc[key]` arrays:
+          #   additions = current - original
+          #   removals  = original - current
+          # A field is omitted when unchanged. The delta is computed directly (NOT via the
+          # cascaded DiffService) because these array fields are dropped from the flat diff and
+          # the read model is `root!` (so its doc/original_doc resolve without cascade side effects).
+          module IdDiffFields
+            # @return [Array<Symbol>] the fields declared for set-diff on this class.
+            def id_diff_fields_list
+              @id_diff_fields_list ||= []
+            end
+
+            # Declares the id-list fields that must be reshaped into IdDiff `{ additions:, removals: }`.
+            # @param fields [Array<Symbol>] field names (as they appear in the read model's doc).
+            # @return [void]
+            def id_diff_fields(*fields)
+              id_diff_fields_list.concat(fields.flatten.map(&:to_sym)).uniq!
+            end
+
+            # Computes the IdDiff-shaped deltas for the declared fields and merges them into +diff+.
+            # @param model [Common::GraphQL::Model] the subject (read) model.
+            # @param diff [Hash, nil] the base mutation input hash to augment (may be nil).
+            # @return [Hash, nil] +diff+ with per-field `{ additions:, removals: }` merged in,
+            #   or the original value when nothing changed.
+            def merge_id_diffs(model, diff)
+              id_diff_fields_list.each do |field|
+                key      = field.to_s
+                current  = Array(model.doc[key])
+                original = Array(model.original_doc[key])
+                next if current == original
+
+                diff        ||= {}
+                diff[:id]   ||= model.id if model.respond_to?(:id)
+                diff[field]   = { additions: current - original, removals: original - current }
+              end
+              diff
+            end
+
+            # Reshaping `from_model`: base diff (via {Logic::Input.from_model}) + set-diff deltas.
+            # @param model [Common::GraphQL::Model] the subject model.
+            # @return [Hash, nil] the mutation input hash, or nil when there are no changes.
+            def from_model(model, **kargs)
+              diff = Logic::Input.from_model(model, **kargs)
+              merge_id_diffs(model, diff)
+            end
+          end
+
+          # Declarative FULL-ARRAY macro for id-list fields that the schema exposes as a plain
+          # `[ID!]` on the *update* mutation (NOT `IdDiffInput`). The server expects the COMPLETE
+          # current array, replacing the stored value wholesale — there is no additions/removals
+          # delta shape. This is the counterpart to {IdDiffFields}.
+          #
+          # Mixed into any Input class via `extend`, exactly like {IdDiffFields}. Data-model Input
+          # classes call `extend Logic::Input::FullArrayFields` explicitly.
+          #
+          # Usage:
+          #   class Update < Base::Action
+          #     extend Logic::Input::FullArrayFields
+          #     full_array_fields :assignedPersonMemberIds, :locationIds, :fileContainerIds
+          #   end
+          #
+          # It installs (or augments) a `from_model` that, for each declared field, emits the FULL
+          # current array taken DIRECTLY from the READ model's `doc[key]` whenever it differs from
+          # `original_doc[key]`. A field is omitted when unchanged. The value is read directly (NOT
+          # via the cascaded DiffService) because these array fields are dropped from the flat diff
+          # and the read model is `root!`.
+          #
+          # Schema evidence (live introspection 20260605, UpdateActionInput):
+          #   assignedPersonMemberIds : [ID!]
+          #   locationIds             : [ID!]
+          #   fileContainerIds        : [ID!]
+          # None are `IdDiffInput` — hence full-array, not delta.
+          module FullArrayFields
+            # @return [Array<Symbol>] the fields declared for full-array emission on this class.
+            def full_array_fields_list
+              @full_array_fields_list ||= []
+            end
+
+            # Declares the id-list fields that must be emitted as their COMPLETE current array.
+            # @param fields [Array<Symbol>] field names (as they appear in the read model's doc).
+            # @return [void]
+            def full_array_fields(*fields)
+              full_array_fields_list.concat(fields.flatten.map(&:to_sym)).uniq!
+            end
+
+            # Emits the full current array for each changed declared field and merges it into +diff+.
+            # @param model [Common::GraphQL::Model] the subject (read) model.
+            # @param diff [Hash, nil] the base mutation input hash to augment (may be nil).
+            # @return [Hash, nil] +diff+ with per-field full arrays merged in, or the original
+            #   value when nothing changed.
+            def merge_full_arrays(model, diff)
+              full_array_fields_list.each do |field|
+                key      = field.to_s
+                current  = Array(model.doc[key])
+                original = Array(model.original_doc[key])
+                next if current == original
+
+                diff        ||= {}
+                diff[:id]   ||= model.id if model.respond_to?(:id)
+                diff[field]   = current
+              end
+              diff
+            end
+
+            # Reshaping `from_model`: base diff (via {Logic::Input.from_model}) + full arrays.
+            # @param model [Common::GraphQL::Model] the subject model.
+            # @return [Hash, nil] the mutation input hash, or nil when there are no changes.
+            def from_model(model, **kargs)
+              diff = Logic::Input.from_model(model, **kargs)
+              merge_full_arrays(model, diff)
+            end
+          end
+
           class << self
             # Builds a mutation input hash from a model's diff.
             # Subclasses override this to reshape fields (e.g. array → IdDiffInput).

data/lib/ecoportal/api/graphql/model/action_event.rb

@@ -0,0 +1,14 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        class ActionEvent < Base::ActionEvent
+          # assignedPersonMembers: [PreviewPersonMember!]! — Model::PersonMember's
+          # read fields are a compatible superset.
+          embeds_many :assignedPersonMembers, klass: Model::PersonMember
+          embeds_many :pages, klass: "Ecoportal::API::GraphQL::Model::ActionEventPage"
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/action_event_page.rb

@@ -0,0 +1,10 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        class ActionEventPage < Base::ActionEventPage
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/activity.rb

@@ -0,0 +1,14 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        # Concrete read model for a page activity/history entry. Adds the
+        # relational embeds on top of the common interface fields in Base::Activity.
+        class Activity < Base::Activity
+          embeds_one :personMember, klass: Model::PersonMember, nullable: true
+          embeds_one :user, klass: Model::User, nullable: true
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/activity_log.rb

@@ -0,0 +1,31 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        # Concrete read model for a System Access Log entry. Adds the relational
+        # embeds on top of the common union fields in Base::ActivityLog.
+        #
+        # `parentResource*` and `resource` are present only on the Dashboard* union
+        # members (DashboardAccess/Create/Delete/Update, DeniedDashboardAccess);
+        # they are nullable here so page/file/scim members resolve cleanly.
+        class ActivityLog < Base::ActivityLog
+          # Lightweight wrapper for the union members' `resource { isVisible }` selection.
+          # Defined before the embeds_one below that references it.
+          class Resource < Logic::BaseModel
+            read_only!
+
+            passthrough :__typename
+            embeds_one :isVisible, klass: Model::AuthorizationResult, nullable: true
+          end
+
+          passthrough :parentResourceId, :parentResourceName, :parentResourceType
+
+          embeds_one :user, klass: Model::User, nullable: true
+          # resource: only `isVisible: AuthorizationResult` is selected (the web
+          # feature's shape); the full Dashboard subtree is not modelled here.
+          embeds_one :resource, klass: Model::ActivityLog::Resource, nullable: true
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/auth_log.rb

@@ -0,0 +1,11 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        class AuthLog < Base::AuthLog
+          embeds_one :targetUser, klass: Model::User
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/authorization_result.rb

@@ -0,0 +1,12 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        # Concrete model for a permission-check result. No extra wiring today; exists so
+        # `canXXX` fields embed `Model::AuthorizationResult` (and can grow a `reasons` model later).
+        class AuthorizationResult < Base::AuthorizationResult
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/minimal_dashboard.rb

@@ -0,0 +1,14 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        class MinimalDashboard < Base::MinimalDashboard
+          # owner: MinimalUser (id/email/name) — modelled with the User model.
+          embeds_one :owner, klass: Model::User
+          # register: MinimalRegister — Model::Register's read fields are a compatible superset.
+          embeds_one :register, klass: Model::Register
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/organization.rb

@@ -7,6 +7,13 @@ module Ecoportal
         class Organization < Base::Organization
           DEFAULT_PATH = ['currentOrganization'].freeze
 
+          # permissions: Permissions! — the org-level canXXX ability set (~83 AuthorizationResult
+          # fields, e.g. dashboardCanManage, locationStructuresCanAiGenerateStructure,
+          # generatedPageFilterCanUseSmartQuery). Typed read when a fetched doc includes it;
+          # fetch natively via the `permissions` query below.
+          embeds_one :permissions,
+                     klass: "Ecoportal::API::GraphQL::Model::Permissions", nullable: true
+
           class << self
             extend Ecoportal::API::Common::GraphQL::QueryIntegration
 
@@ -29,6 +36,26 @@ module Ecoportal
 
             query :contractorEntities,
               query_klass: 'Ecoportal::API::GraphQL::Query::ContractorEntities'
+            # System access logs (SCIM/security auditing) — AuthLogConnection
+            query :authLogs,
+              query_klass: 'Ecoportal::API::GraphQL::Query::AuthLogs'
+            # Org-level permission set (canXXX abilities) — Permissions
+            query :permissions,
+              query_klass: 'Ecoportal::API::GraphQL::Query::Permissions'
+            # System Access Logs feature — ActivityLogUnionConnection (rich filters:
+            # userIds/resourceIds/filterSuperusers/activityType/resourceType/source/dateFilter)
+            query :activityLogs,
+              query_klass: 'Ecoportal::API::GraphQL::Query::ActivityLogs'
+            # Page history / activity feed — ActivityInterfaceConnection.
+            # Resolves currentOrganization.page(id:).activities; pass `id:` (page id).
+            query :pageActivities,
+              query_klass: 'Ecoportal::API::GraphQL::Query::PageActivities'
+            # Person member changelog history — PersonMemberChangelogConnection
+            query :personMemberChangelogs,
+              query_klass: 'Ecoportal::API::GraphQL::Query::PersonMemberChangelogs'
+            # Dashboard search — MinimalDashboardConnection
+            query :dashboardSearch,
+              query_klass: 'Ecoportal::API::GraphQL::Query::DashboardSearch'
             #contractorEntity,
             query :actionCategories,
               query_klass: 'Ecoportal::API::GraphQL::Query::ActionCategories'

data/lib/ecoportal/api/graphql/model/permissions.rb

@@ -0,0 +1,179 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        # Org-level permission set (Organization.permissions). Each `canXXX` field is an
+        # AuthorizationResult (`{ value message }`); all are non-null in the schema but modelled
+        # nullable so a partial selection (fetching only some canXXX) still reads cleanly.
+        class Permissions < Base::Permissions
+          embeds_one :actionCanCreateStandalone,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :actionCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :alertNotificationCanAccessBroadcastNotifications,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :alertNotificationCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :alertNotificationCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canAccessAdminTools,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canAccessPeopleManager,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canDeleteActionCategories,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canListAttachablePersonMembers,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canManageActionCategories,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canManageStandaloneActionsPermissions,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canResetActionsCounter,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :canUpload,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanAccessContractorManager,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanAttach,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanDestroy,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanEdit,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanEditLinkedUsers,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanManageParentContractors,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :contractorEntityCanManageSubcontractors,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :crossReferenceReportsCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :dashboardCanManage,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :dataSetsCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :dataSpaceCanShow,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :dataViewsCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :emailReportCanConfigureSmartReport,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :filesCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :filesCanUpload,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :generatedPageFilterCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :generatedPageFilterCanUseSmartQuery,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :hasFileAbilityToDownload,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationClassificationsCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationClassificationsCanUpdate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanAccess,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanAdministrate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanAiGenerateStructure,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanManage,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanManageSftpIntegration,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanPublish,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanRead,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanScheduleUpdate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :locationStructuresCanUpdate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :organizationCanViewSettings,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :pageAiSummaryCanAccess,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :pageCanListDrafts,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :pageCanRestore,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :pageCanUseDrafts,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :pageSmartAssistantCanChat,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :personSchemaCanAccessManager,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :publicTemplatesCanCopyLink,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :publicTemplatesCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :publicTemplatesCanListEntries,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :publicTemplatesCanManage,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :registerAssistantCanChat,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :registerCanAccessRegisterTools,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :registerCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :registerCanLimitTemplates,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanAddCodeHooks,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanCreate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanDestroy,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanGenerateApiKey,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanShow,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanShowLogs,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :scimIntegrationCanUpdate,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :spatialCanUpdateLocationNodeGeojson,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :structuresCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :templateCanRestore,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :userAccessLogsCanShow,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :userCanAccessAdminArea,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :userCanAccessPageCreationTools,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :visitorLogCanAdminCheckIn,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :visitorLogCanEdit,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :visitorLogCanManage,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :visitorLogCanShow,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :visitorManagementCanAccessVisitorManager,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :visitorManagementCanIndex,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :webhooksCanManageSubscriptions,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+          embeds_one :webhooksCanViewSubscriptions,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model/person_member.rb

@@ -6,6 +6,13 @@ module Ecoportal
           embeds_one :contractorOrganization, klass: "Ecoportal::API::GraphQL::Model::ContractorEntity"
           embeds_one :account, klass: Model::Account
 
+          # changelogs: [PersonMemberChangelog!] — audit history for this member.
+          embeds_many :changelogs, klass: "Ecoportal::API::GraphQL::Model::PersonMemberChangelog"
+
+          # canManageContractorAdmins: AuthorizationResult — permission check (nullable).
+          embeds_one :canManageContractorAdmins,
+                     klass: "Ecoportal::API::GraphQL::Model::AuthorizationResult", nullable: true
+
           # embeds_many :privateFields, enum_class: Ecoportal::API::GraphQL::Model::MemberSchemaFields
           # embeds_many :publicFields, enum_class: Ecoportal::API::GraphQL::Model::MemberSchemaFields
         end

data/lib/ecoportal/api/graphql/model/person_member_changelog.rb

@@ -0,0 +1,15 @@
+module Ecoportal
+  module API
+    class GraphQL
+      module Model
+        class PersonMemberChangelog < Base::PersonMemberChangelog
+          # `personMember` is a PreviewPersonMember (id/name/email) — modelled with the
+          # PersonMember model, whose read fields are a compatible superset.
+          embeds_one :personMember, klass: Model::PersonMember
+          # `user` is a MinimalUser (id/email/name) — modelled with the User model.
+          embeds_one :user, klass: Model::User
+        end
+      end
+    end
+  end
+end

data/lib/ecoportal/api/graphql/model.rb

@@ -20,11 +20,20 @@ require_relative 'model/page_union'
 require_relative 'model/preview_page'
 require_relative 'model/resource'
 require_relative 'model/action'
+require_relative 'model/action_event_page'
+require_relative 'model/action_event'
 require_relative 'model/contractor_entity'
+require_relative 'model/authorization_result'
+require_relative 'model/permissions'
+require_relative 'model/activity'
+require_relative 'model/activity_log'
+require_relative 'model/auth_log'
+require_relative 'model/person_member_changelog'
 require_relative 'model/organization'
 
 require_relative 'model/register'
 require_relative 'model/preset_view'
+require_relative 'model/minimal_dashboard'
 
 require_relative 'model/ai_summary_version'
 require_relative 'model/pages_workflow'

data/lib/ecoportal/api/graphql/mutation/ai_summary/generate.rb

@@ -3,27 +3,38 @@
     class GraphQL
       module Mutation
         module AiSummary
-          # Triggers AI summary generation for a page or stage.
-          # Returns an AiSummaryVersion with the generated text and token usage.
-          # Generation is synchronous — the response contains the result or an error.
+          # Triggers AI summary generation for a page or stage. Returns an `AiSummaryVersion`.
           #
-          # stageId is optional: omit for page-level summary, provide for stage-level.
+          # ★ Corrected 2026-07-30 against the live schema — the previous wiring could never run:
+          # the mutation is `generatePageSummary(input: GenerateInput!)`, NOT `generateAiSummary`
+          # with flat `pageId`/`stageId` arguments, and `AiSummaryVersion` has no token fields.
+          #
+          # `stage_id` is optional: omit for a page-level summary, pass it for stage-level.
           class Generate < Logic::Mutation
-            field_name :generateAiSummary
+            field_name :generatePageSummary
 
             class_resolver :payload_class, 'Ecoportal::API::GraphQL::Payload::AiSummaryGenerate'
 
+            def query(page_id:, stage_id: nil, **kargs, &block)
+              input = { pageId: page_id }
+              input[:stageId] = stage_id if stage_id
+              super(input: input, **kargs, &block)
+            end
+
             private
 
             def basic_block(&block)
               payload_block = block || default_payload_block
               proc {
-                mutation(pageId: :id!, stageId: :id) {
-                  generateAiSummary(pageId: :pageId, stageId: :stageId, &payload_block)
+                mutation(input: :GenerateInput!) {
+                  generatePageSummary(input: :input, &payload_block)
                 }
               }
             end
 
+            # AiSummaryVersion exposes: aiSummary, alreadyRated, createdAt, dataFieldLogs,
+            # generationErrors, id, pagePatchVer, status. Only the plain scalars are selected —
+            # `dataFieldLogs` / `generationErrors` / `createdAt` need their own selections.
             def default_payload_block
               proc {
                 errors { details fullMessages }
@@ -31,9 +42,8 @@
                   id
                   aiSummary
                   status
-                  inputTokens
-                  outputTokens
-                  totalTokens
+                  alreadyRated
+                  pagePatchVer
                 }
               }
             end

data/lib/ecoportal/api/graphql/mutation/ai_summary/submit_feedback.rb

@@ -3,25 +3,40 @@
     class GraphQL
       module Mutation
         module AiSummary
-          # Submit a thumbs-up / thumbs-down rating on an AI summary version.
-          # sentiment: "THUMBS_UP" | "THUMBS_DOWN"
-          # aiSummaryVersionId: returned from generateAiSummary.item.id
+          # Submit a rating on an AI summary version.
+          #
+          # ★ Corrected 2026-07-30 against the live schema — the previous wiring could never run:
+          # the mutation is `submitPageAiSummaryFeedback(input: SubmitFeedbackInput!)`, the enum is
+          # `SentimentEnum` (there is no `AiSummarySentimentEnum`), and its values are
+          # **`positive` / `negative`** — not the "THUMBS_UP"/"THUMBS_DOWN" this used to document.
+          #
+          # `ai_summary_version_id` comes from `generatePageSummary`'s `item.id`.
           class SubmitFeedback < Logic::Mutation
-            field_name :submitAiSummaryFeedback
+            SENTIMENTS = %w[positive negative].freeze
+
+            field_name :submitPageAiSummaryFeedback
 
             class_resolver :payload_class, 'Ecoportal::API::GraphQL::Payload::OkPayload'
 
+            def query(ai_summary_version_id:, sentiment:, **kargs, &block)
+              unless SENTIMENTS.include?(sentiment.to_s)
+                raise ArgumentError, "sentiment must be one of #{SENTIMENTS.join(' / ')}; got #{sentiment.inspect}"
+              end
+
+              super(
+                input: { aiSummaryVersionId: ai_summary_version_id, sentiment: sentiment.to_s },
+                **kargs,
+                &block
+              )
+            end
+
             private
 
             def basic_block(&block)
               payload_block = block || default_payload_block
               proc {
-                mutation(aiSummaryVersionId: :id!, sentiment: :AiSummarySentimentEnum!) {
-                  submitAiSummaryFeedback(
-                    aiSummaryVersionId: :aiSummaryVersionId,
-                    sentiment:          :sentiment,
-                    &payload_block
-                  )
+                mutation(input: :SubmitFeedbackInput!) {
+                  submitPageAiSummaryFeedback(input: :input, &payload_block)
                 }
               }
             end