@grantjs/schema 1.0.0

package/src/schema/root.graphql

@@ -0,0 +1,6 @@
+type Query {
+  _empty: String
+}
+type Mutation {
+  _empty: String
+}

package/src/schema/signing-keys/mutations/rotate-signing-key.graphql

@@ -0,0 +1,8 @@
+extend type Mutation {
+  """
+  Rotate the signing key for the given scope: create a new active key and mark the previous one as rotated.
+  Allowed scopes: accountProject, organizationProject only.
+  Returns the new signing key (public info).
+  """
+  rotateSigningKey(scope: Scope!): SigningKey!
+}

package/src/schema/signing-keys/queries/get-signing-keys.graphql

@@ -0,0 +1,7 @@
+extend type Query {
+  """
+  List signing keys for the given scope (current + rotated).
+  Allowed scopes: accountProject, organizationProject only.
+  """
+  signingKeys(scope: Scope!): [SigningKey!]!
+}

package/src/schema/signing-keys/types/signing-key.graphql

@@ -0,0 +1,26 @@
+"""
+Signing key for a scope (e.g. project). Used for RS256 API key tokens; public key is exposed in JWKS.
+Only project scopes (accountProject, organizationProject) have manageable keys; system key is internal.
+"""
+type SigningKey implements Auditable {
+  id: ID!
+  """
+  Key ID used in JWT header and JWKS.
+  """
+  kid: String!
+  """
+  Whether this key is currently used for signing new tokens.
+  """
+  active: Boolean!
+  createdAt: Date!
+  """
+  Set when the key was rotated (replaced by a new key); key remains in JWKS until existing tokens expire.
+  """
+  rotatedAt: Date
+  """
+  Public key PEM for JWKS / verification (optional in response for display or copy).
+  """
+  publicKeyPem: String
+  updatedAt: Date!
+  deletedAt: Date
+}

package/src/schema/tags/inputs/create-tag.graphql

@@ -0,0 +1,5 @@
+input CreateTagInput {
+  name: String!
+  color: String!
+  scope: Scope!
+}

package/src/schema/tags/inputs/tag-sort.graphql

@@ -0,0 +1,4 @@
+input TagSortInput {
+  field: TagSortField!
+  order: SortOrder!
+}

package/src/schema/tags/inputs/update-tag.graphql

@@ -0,0 +1,5 @@
+input UpdateTagInput {
+  scope: Scope!
+  name: String
+  color: String
+}

package/src/schema/tags/mutations/create-tag.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  createTag(input: CreateTagInput!): Tag!
+}

package/src/schema/tags/mutations/delete-tag.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  deleteTag(id: ID!, scope: Scope!): Tag!
+}

package/src/schema/tags/mutations/update-tag.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  updateTag(id: ID!, input: UpdateTagInput!): Tag!
+}

package/src/schema/tags/queries/get-tags.graphql

@@ -0,0 +1,10 @@
+extend type Query {
+  tags(
+    scope: Scope!
+    page: Int
+    limit: Int
+    search: String
+    sort: TagSortInput
+    ids: [ID!]
+  ): TagPage!
+}

package/src/schema/tags/types/tag-page.graphql

@@ -0,0 +1,5 @@
+type TagPage implements PaginatedResults {
+  tags: [Tag!]!
+  totalCount: Int!
+  hasNextPage: Boolean!
+}

package/src/schema/tags/types/tag-searchable-field.graphql

@@ -0,0 +1,3 @@
+enum TagSearchableField {
+  name
+}

package/src/schema/tags/types/tag-sortable-field.graphql

@@ -0,0 +1,6 @@
+enum TagSortField {
+  name
+  color
+  createdAt
+  updatedAt
+}

package/src/schema/tags/types/tag.graphql

@@ -0,0 +1,9 @@
+type Tag implements Auditable {
+  id: ID!
+  name: String!
+  color: String!
+  isPrimary: Boolean
+  createdAt: Date!
+  updatedAt: Date!
+  deletedAt: Date
+}

package/src/schema/user-authentication-method/inputs/create-user-authentication-method.graphql

@@ -0,0 +1,8 @@
+input CreateUserAuthenticationMethodInput {
+  userId: String!
+  provider: UserAuthenticationMethodProvider!
+  providerId: String!
+  providerData: JSON!
+  isVerified: Boolean
+  isPrimary: Boolean
+}

package/src/schema/user-authentication-method/inputs/delete-user-authentication-method.graphql

@@ -0,0 +1,3 @@
+input DeleteUserAuthenticationMethodInput {
+  id: ID!
+}

package/src/schema/user-authentication-method/inputs/get-user-authentication-methods.graphql

@@ -0,0 +1,4 @@
+input GetUserAuthenticationMethodsInput {
+  userId: ID
+  provider: UserAuthenticationMethodProvider
+}

package/src/schema/user-authentication-method/inputs/update-user-authentication-method.graphql

@@ -0,0 +1,7 @@
+input UpdateUserAuthenticationMethodInput {
+  providerId: String
+  provider: UserAuthenticationMethodProvider
+  providerData: JSON
+  isVerified: Boolean
+  isPrimary: Boolean
+}

package/src/schema/user-authentication-method/types/user-authentication-email-provider-action.graphql

@@ -0,0 +1,5 @@
+enum UserAuthenticationEmailProviderAction {
+  login
+  register
+  connect
+}

package/src/schema/user-authentication-method/types/user-authentication-method-provider.graphql

@@ -0,0 +1,5 @@
+enum UserAuthenticationMethodProvider {
+  email
+  google
+  github
+}

package/src/schema/user-authentication-method/types/user-authentication-method.graphql

@@ -0,0 +1,14 @@
+type UserAuthenticationMethod implements Auditable {
+  id: ID!
+  userId: ID!
+  user: User
+  provider: UserAuthenticationMethodProvider!
+  providerId: String!
+  providerData: JSON!
+  isVerified: Boolean!
+  isPrimary: Boolean!
+  lastUsedAt: Date
+  createdAt: Date!
+  updatedAt: Date!
+  deletedAt: Date
+}

package/src/schema/user-roles/inputs/add-user-role.graphql

@@ -0,0 +1,4 @@
+input AddUserRoleInput {
+  userId: ID!
+  roleId: ID!
+}

package/src/schema/user-roles/inputs/query-user-roles.graphql

@@ -0,0 +1,4 @@
+input QueryUserRolesInput {
+  userId: ID
+  roleId: ID
+}

package/src/schema/user-roles/inputs/remove-user-role.graphql

@@ -0,0 +1,4 @@
+input RemoveUserRoleInput {
+  userId: ID!
+  roleId: ID!
+}

package/src/schema/user-roles/types/user-role.graphql

@@ -0,0 +1,10 @@
+type UserRole implements Auditable {
+  id: ID!
+  userId: ID!
+  roleId: ID!
+  user(scope: Scope!): User
+  role(scope: Scope!): Role
+  createdAt: Date!
+  updatedAt: Date!
+  deletedAt: Date
+}

package/src/schema/user-sessions/inputs/create-user-session.graphql

@@ -0,0 +1,9 @@
+input CreateUserSessionInput {
+  userId: ID!
+  userAuthenticationMethodId: ID!
+  token: String!
+  lastUsedAt: Date!
+  expiresAt: Date!
+  userAgent: String
+  ipAddress: String
+}

package/src/schema/user-sessions/inputs/delete-user-session.graphql

@@ -0,0 +1,3 @@
+input DeleteUserSessionInput {
+  id: ID!
+}

package/src/schema/user-sessions/inputs/get-user-sessions.graphql

@@ -0,0 +1,13 @@
+input GetUserSessionsInput {
+  page: Int
+  limit: Int
+  search: String
+  sort: UserSessionSortInput
+  ids: [ID!]
+  userId: ID
+  audience: String
+  expiresAtMin: Date
+  userAgent: String
+  ipAddress: String
+  requestedFields: [String!]
+}

package/src/schema/user-sessions/inputs/update-user-session.graphql

@@ -0,0 +1,6 @@
+input UpdateUserSessionInput {
+  id: ID!
+  lastUsedAt: Date
+  userAgent: String
+  ipAddress: String
+}

package/src/schema/user-sessions/inputs/user-session-sort.graphql

@@ -0,0 +1,4 @@
+input UserSessionSortInput {
+  field: UserSessionSortableField!
+  order: SortOrder!
+}

package/src/schema/user-sessions/types/user-session-page.graphql

@@ -0,0 +1,5 @@
+type UserSessionPage implements PaginatedResults {
+  userSessions: [UserSession!]!
+  totalCount: Int!
+  hasNextPage: Boolean!
+}

package/src/schema/user-sessions/types/user-session-searchable-field.graphql

@@ -0,0 +1,6 @@
+enum UserSessionSearchableField {
+  token
+  audience
+  userAgent
+  ipAddress
+}

package/src/schema/user-sessions/types/user-session-sortable-field.graphql

@@ -0,0 +1,3 @@
+enum UserSessionSortableField {
+  lastUsedAt
+}

package/src/schema/user-sessions/types/user-session.graphql

@@ -0,0 +1,16 @@
+type UserSession implements Auditable {
+  id: ID!
+  userId: ID!
+  user: User
+  userAuthenticationMethodId: ID!
+  userAuthenticationMethod: UserAuthenticationMethod
+  token: String!
+  audience: String!
+  expiresAt: Date!
+  userAgent: String
+  ipAddress: String
+  lastUsedAt: Date
+  createdAt: Date!
+  updatedAt: Date!
+  deletedAt: Date
+}

package/src/schema/user-tags/inputs/add-user-tag.graphql

@@ -0,0 +1,5 @@
+input AddUserTagInput {
+  userId: ID!
+  tagId: ID!
+  isPrimary: Boolean
+}

package/src/schema/user-tags/inputs/query-user-tags.graphql

@@ -0,0 +1,4 @@
+input QueryUserTagsInput {
+  userId: ID
+  tagId: ID
+}

package/src/schema/user-tags/inputs/remove-user-tag.graphql

@@ -0,0 +1,4 @@
+input RemoveUserTagInput {
+  userId: ID!
+  tagId: ID!
+}

package/src/schema/user-tags/inputs/update-user-tag.graphql

@@ -0,0 +1,5 @@
+input UpdateUserTagInput {
+  userId: ID!
+  tagId: ID!
+  isPrimary: Boolean!
+}

package/src/schema/user-tags/types/user-tag.graphql

@@ -0,0 +1,11 @@
+type UserTag implements Auditable {
+  id: ID!
+  userId: ID!
+  tagId: ID!
+  isPrimary: Boolean!
+  user(scope: Scope!): User
+  tag(scope: Scope!): Tag
+  createdAt: Date!
+  updatedAt: Date!
+  deletedAt: Date
+}

package/src/schema/users/inputs/create-user.graphql

@@ -0,0 +1,9 @@
+input CreateUserInput {
+  name: String!
+  pictureUrl: String
+  metadata: JSON
+  tagIds: [ID!]
+  roleIds: [ID!]
+  scope: Scope!
+  primaryTagId: ID
+}

package/src/schema/users/inputs/update-user.graphql

@@ -0,0 +1,9 @@
+input UpdateUserInput {
+  scope: Scope!
+  name: String
+  pictureUrl: String
+  metadata: JSON
+  tagIds: [ID!]
+  roleIds: [ID!]
+  primaryTagId: ID
+}

package/src/schema/users/inputs/upload-user-picture.graphql

@@ -0,0 +1,7 @@
+input UploadUserPictureInput {
+  scope: Scope!
+  userId: ID!
+  file: String!
+  filename: String!
+  contentType: String!
+}

package/src/schema/users/inputs/user-sort.graphql

@@ -0,0 +1,4 @@
+input UserSortInput {
+  field: UserSortableField!
+  order: SortOrder!
+}

package/src/schema/users/mutations/create-user.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  createUser(input: CreateUserInput!): User!
+}

package/src/schema/users/mutations/delete-user.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  deleteUser(id: ID!, scope: Scope!): User!
+}

package/src/schema/users/mutations/update-user.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  updateUser(id: ID!, input: UpdateUserInput!): User!
+}

package/src/schema/users/mutations/upload-user-picture.graphql

@@ -0,0 +1,3 @@
+extend type Mutation {
+  uploadUserPicture(input: UploadUserPictureInput!): UploadUserPictureResult!
+}

package/src/schema/users/queries/get-users.graphql

@@ -0,0 +1,11 @@
+extend type Query {
+  users(
+    scope: Scope!
+    page: Int
+    limit: Int
+    search: String
+    sort: UserSortInput
+    ids: [ID!]
+    tagIds: [ID!]
+  ): UserPage!
+}

package/src/schema/users/types/upload-user-picture-result.graphql

@@ -0,0 +1,4 @@
+type UploadUserPictureResult {
+  url: String!
+  path: String!
+}

package/src/schema/users/types/user-data-export.graphql

@@ -0,0 +1,55 @@
+type UserDataExport {
+  user: UserExportData!
+  accounts: [AccountExportData!]!
+  authenticationMethods: [AuthenticationMethodExportData!]!
+  sessions: [SessionExportData!]!
+  organizationMemberships: [OrganizationMembershipExportData!]!
+  projectMemberships: [ProjectMembershipExportData!]!
+  exportedAt: Date!
+}
+
+type UserExportData {
+  id: ID!
+  name: String!
+  email: String
+  createdAt: Date!
+  updatedAt: Date!
+}
+
+type AccountExportData {
+  id: ID!
+  type: AccountType!
+  createdAt: Date!
+  updatedAt: Date!
+}
+
+type AuthenticationMethodExportData {
+  provider: String!
+  providerId: String!
+  isVerified: Boolean!
+  isPrimary: Boolean!
+  lastUsedAt: Date
+  createdAt: Date!
+}
+
+type SessionExportData {
+  userAgent: String
+  ipAddress: String
+  lastUsedAt: Date
+  expiresAt: Date!
+  createdAt: Date!
+}
+
+type OrganizationMembershipExportData {
+  organizationId: ID!
+  organizationName: String!
+  role: String!
+  joinedAt: Date!
+}
+
+type ProjectMembershipExportData {
+  projectId: ID!
+  projectName: String!
+  role: String!
+  joinedAt: Date!
+}

package/src/schema/users/types/user-page.graphql

@@ -0,0 +1,5 @@
+type UserPage implements PaginatedResults {
+  users: [User!]!
+  totalCount: Int!
+  hasNextPage: Boolean!
+}

package/src/schema/users/types/user-searchable-field.graphql

@@ -0,0 +1,3 @@
+enum UserSearchableField {
+  name
+}

package/src/schema/users/types/user-sortable-field.graphql

@@ -0,0 +1,3 @@
+enum UserSortableField {
+  name
+}

package/src/schema/users/types/user.graphql

@@ -0,0 +1,13 @@
+type User implements Auditable {
+  id: ID!
+  name: String!
+  pictureUrl: String
+  metadata: JSON!
+  roles: [Role!]
+  tags: [Tag!]
+  authenticationMethods: [UserAuthenticationMethod!]
+  accounts: [Account!]
+  createdAt: Date!
+  updatedAt: Date!
+  deletedAt: Date
+}