@grantjs/schema 1.10.0 → 1.12.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grantjs/schema",
-  "version": "1.10.0",
+  "version": "1.12.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -23,14 +23,14 @@
   },
   "devDependencies": {
     "@graphql-codegen/add": "^7.1.0",
-    "@graphql-codegen/cli": "^7.4.1",
+    "@graphql-codegen/cli": "^7.4.3",
     "@graphql-codegen/typed-document-node": "^7.1.0",
     "@graphql-codegen/typescript": "^6.1.0",
-    "@graphql-codegen/typescript-operations": "^6.1.6",
+    "@graphql-codegen/typescript-operations": "^6.1.7",
     "@graphql-codegen/typescript-resolvers": "^6.1.0",
     "@parcel/watcher": "^2.6.0",
-    "@types/node": "^26.6.1",
-    "eslint": "^10.10.0",
+    "@types/node": "^26.6.2",
+    "eslint": "^10.11.0",
     "graphql": "^16.14.2",
     "@typescript/native": "npm:typescript@^7.0.2",
     "typescript": "npm:@typescript/typescript6@^6.0.2",

package/src/generated/graphql.ts

@@ -122,6 +122,12 @@ export type RotateApiKeyMutation = {
   };
 };
 
+export type AuthSignupPolicyQueryVariables = Exact<{ [key: string]: never }>;
+
+export type AuthSignupPolicyQuery = {
+  authSignupPolicy: { publicSignupEnabled: boolean; bootstrapOpen: boolean };
+};
+
 export type LoginMutationVariables = Exact<{
   input: Types.LoginInput;
 }>;
@@ -2690,6 +2696,32 @@ export const RotateApiKeyDocument = {
     },
   ],
 } as unknown as DocumentNode<RotateApiKeyMutation, RotateApiKeyMutationVariables>;
+export const AuthSignupPolicyDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'query',
+      name: { kind: 'Name', value: 'AuthSignupPolicy' },
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'authSignupPolicy' },
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'publicSignupEnabled' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'bootstrapOpen' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<AuthSignupPolicyQuery, AuthSignupPolicyQueryVariables>;
 export const LoginDocument = {
   kind: 'Document',
   definitions: [

package/src/generated/resolvers.ts

@@ -226,6 +226,7 @@ export type ResolversTypes = ResolversObject<{
   AssignRolePermissionInput: Types.AssignRolePermissionInput;
   AssignUserPermissionInput: Types.AssignUserPermissionInput;
   Auditable: ResolverTypeWrapper<ResolversInterfaceTypes<ResolversTypes>['Auditable']>;
+  AuthSignupPolicy: ResolverTypeWrapper<Types.AuthSignupPolicy>;
   AuthenticationMethodExportData: ResolverTypeWrapper<Types.AuthenticationMethodExportData>;
   AuthorizationReason: Types.AuthorizationReason;
   AuthorizationResult: ResolverTypeWrapper<Types.AuthorizationResult>;
@@ -636,6 +637,7 @@ export type ResolversParentTypes = ResolversObject<{
   AssignRolePermissionInput: Types.AssignRolePermissionInput;
   AssignUserPermissionInput: Types.AssignUserPermissionInput;
   Auditable: ResolversInterfaceTypes<ResolversParentTypes>['Auditable'];
+  AuthSignupPolicy: Types.AuthSignupPolicy;
   AuthenticationMethodExportData: Types.AuthenticationMethodExportData;
   AuthorizationResult: Types.AuthorizationResult;
   Boolean: Types.Scalars['Boolean']['output'];
@@ -1181,6 +1183,15 @@ export type AuditableResolvers<
   >;
 }>;
 
+export type AuthSignupPolicyResolvers<
+  ContextType = any,
+  ParentType extends ResolversParentTypes['AuthSignupPolicy'] =
+    ResolversParentTypes['AuthSignupPolicy'],
+> = ResolversObject<{
+  bootstrapOpen?: Resolver<ResolversTypes['Boolean'], ParentType, ContextType>;
+  publicSignupEnabled?: Resolver<ResolversTypes['Boolean'], ParentType, ContextType>;
+}>;
+
 export type AuthenticationMethodExportDataResolvers<
   ContextType = any,
   ParentType extends ResolversParentTypes['AuthenticationMethodExportData'] =
@@ -2825,6 +2836,7 @@ export type QueryResolvers<
     ContextType,
     RequireFields<Types.QueryApiKeysArgs, 'scope'>
   >;
+  authSignupPolicy?: Resolver<ResolversTypes['AuthSignupPolicy'], ParentType, ContextType>;
   groups?: Resolver<
     ResolversTypes['GroupPage'],
     ParentType,
@@ -3684,6 +3696,7 @@ export type Resolvers<ContextType = any> = ResolversObject<{
   ApiKey?: ApiKeyResolvers<ContextType>;
   ApiKeyPage?: ApiKeyPageResolvers<ContextType>;
   Auditable?: AuditableResolvers<ContextType>;
+  AuthSignupPolicy?: AuthSignupPolicyResolvers<ContextType>;
   AuthenticationMethodExportData?: AuthenticationMethodExportDataResolvers<ContextType>;
   AuthorizationResult?: AuthorizationResultResolvers<ContextType>;
   ChangeMyPasswordResult?: ChangeMyPasswordResultResolvers<ContextType>;

package/src/generated/schema-types.ts

@@ -392,6 +392,15 @@ export type Auditable = {
   updatedAt: Scalars['Date']['output'];
 };
 
+/** Public flags the unauthenticated UI uses to hide or show platform registration. */
+export type AuthSignupPolicy = {
+  __typename?: 'AuthSignupPolicy';
+  /** True when no human user exists yet (first-operator bootstrap). */
+  bootstrapOpen: Scalars['Boolean']['output'];
+  /** True when AUTH_PUBLIC_SIGNUP_ENABLED is on (open SaaS). */
+  publicSignupEnabled: Scalars['Boolean']['output'];
+};
+
 export type AuthenticationMethodExportData = {
   __typename?: 'AuthenticationMethodExportData';
   createdAt: Scalars['Date']['output'];
@@ -2449,6 +2458,8 @@ export type Query = {
   __typename?: 'Query';
   _empty?: Maybe<Scalars['String']['output']>;
   apiKeys: ApiKeyPage;
+  /** Public signup policy. No authentication required. */
+  authSignupPolicy: AuthSignupPolicy;
   groups: GroupPage;
   invitation?: Maybe<OrganizationInvitation>;
   /** Evaluate authorization for the current session or API key token. */

package/src/operations/auth/authSignupPolicy.graphql

@@ -0,0 +1,6 @@
+query AuthSignupPolicy {
+  authSignupPolicy {
+    publicSignupEnabled
+    bootstrapOpen
+  }
+}

package/src/schema/auth/queries/auth-signup-policy.graphql

@@ -0,0 +1,6 @@
+extend type Query {
+  """
+  Public signup policy. No authentication required.
+  """
+  authSignupPolicy: AuthSignupPolicy!
+}

package/src/schema/auth/types/auth-signup-policy.graphql

@@ -0,0 +1,13 @@
+"""
+Public flags the unauthenticated UI uses to hide or show platform registration.
+"""
+type AuthSignupPolicy {
+  """
+  True when AUTH_PUBLIC_SIGNUP_ENABLED is on (open SaaS).
+  """
+  publicSignupEnabled: Boolean!
+  """
+  True when no human user exists yet (first-operator bootstrap).
+  """
+  bootstrapOpen: Boolean!
+}

package/src/sdl-contract.test.ts

@@ -49,10 +49,11 @@ describe('operation documents', () => {
   // 132 after project branding: request/confirm/upload/clear for project and
   // project-app pictures (eight operation documents).
   // 135 after project OAuth connections: get/upsert/clear (three operation documents).
+  // 136 after closed-install: AuthSignupPolicyDocument (publicSignupEnabled, bootstrapOpen).
   // Updating this number is the point of the pin, not a nuisance: every change
   // to it should be a line in a commit message.
   it('finds every document under src/operations', () => {
-    expect(files).toHaveLength(135);
+    expect(files).toHaveLength(136);
   });
 
   it.each(files.map((f) => [relative(process.cwd(), f), f]))('%s validates', (_label, file) => {