@grantjs/schema 1.18.11 → 1.19.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grantjs/schema",
-  "version": "1.18.11",
+  "version": "1.19.0",
   "license": "MIT",
   "repository": {
     "type": "git",

package/src/events/event-catalog.ts

@@ -151,6 +151,7 @@ export const EVENT_TYPES = [
   'user.updated',
   'user.deleted',
   'project.user_updated',
+  'project.user_email_changed',
   'api_key.deleted',
   'tag.created',
   'tag.updated',
@@ -226,6 +227,7 @@ export const EVENT_CATALOG: Readonly<Record<EventType, EventCatalogEntry>> = {
   'user.updated': webhookOnly('membership'),
   'user.deleted': webhookOnly('membership'),
   'project.user_updated': webhookOnly('membership'),
+  'project.user_email_changed': webhookOnly('membership'),
   'api_key.deleted': webhookOnly('security'),
   'tag.created': webhookOnly('iam'),
   'tag.updated': webhookOnly('iam'),

package/src/generated/graphql.ts

@@ -2174,6 +2174,20 @@ export type GetUsersListQuery = {
   };
 };
 
+export type SetProjectUserEmailMutationVariables = Exact<{
+  input: Types.SetProjectUserEmailInput;
+}>;
+
+export type SetProjectUserEmailMutation = {
+  setProjectUserEmail: {
+    id: string;
+    name: string;
+    metadata: Record<string, unknown>;
+    createdAt: Date;
+    updatedAt: Date;
+  };
+};
+
 export type UpdateUserMutationVariables = Exact<{
   id: string | number;
   input: Types.UpdateUserInput;
@@ -11155,6 +11169,52 @@ export const GetUsersListDocument = {
     },
   ],
 } as unknown as DocumentNode<GetUsersListQuery, GetUsersListQueryVariables>;
+export const SetProjectUserEmailDocument = {
+  kind: 'Document',
+  definitions: [
+    {
+      kind: 'OperationDefinition',
+      operation: 'mutation',
+      name: { kind: 'Name', value: 'SetProjectUserEmail' },
+      variableDefinitions: [
+        {
+          kind: 'VariableDefinition',
+          variable: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+          type: {
+            kind: 'NonNullType',
+            type: { kind: 'NamedType', name: { kind: 'Name', value: 'SetProjectUserEmailInput' } },
+          },
+        },
+      ],
+      selectionSet: {
+        kind: 'SelectionSet',
+        selections: [
+          {
+            kind: 'Field',
+            name: { kind: 'Name', value: 'setProjectUserEmail' },
+            arguments: [
+              {
+                kind: 'Argument',
+                name: { kind: 'Name', value: 'input' },
+                value: { kind: 'Variable', name: { kind: 'Name', value: 'input' } },
+              },
+            ],
+            selectionSet: {
+              kind: 'SelectionSet',
+              selections: [
+                { kind: 'Field', name: { kind: 'Name', value: 'id' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'name' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'metadata' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'createdAt' } },
+                { kind: 'Field', name: { kind: 'Name', value: 'updatedAt' } },
+              ],
+            },
+          },
+        ],
+      },
+    },
+  ],
+} as unknown as DocumentNode<SetProjectUserEmailMutation, SetProjectUserEmailMutationVariables>;
 export const UpdateUserDocument = {
   kind: 'Document',
   definitions: [

package/src/generated/resolvers.ts

@@ -501,6 +501,7 @@ export type ResolversTypes = ResolversObject<{
   SessionExportData: ResolverTypeWrapper<Types.SessionExportData>;
   SetMyNotificationPreferenceInput: Types.SetMyNotificationPreferenceInput;
   SetMyPrimaryMfaDeviceInput: Types.SetMyPrimaryMfaDeviceInput;
+  SetProjectUserEmailInput: Types.SetProjectUserEmailInput;
   SigningKey: ResolverTypeWrapper<Types.SigningKey>;
   SortOrder: Types.SortOrder;
   StartProjectExportInput: Types.StartProjectExportInput;
@@ -883,6 +884,7 @@ export type ResolversParentTypes = ResolversObject<{
   SessionExportData: Types.SessionExportData;
   SetMyNotificationPreferenceInput: Types.SetMyNotificationPreferenceInput;
   SetMyPrimaryMfaDeviceInput: Types.SetMyPrimaryMfaDeviceInput;
+  SetProjectUserEmailInput: Types.SetProjectUserEmailInput;
   SigningKey: Types.SigningKey;
   StartProjectExportInput: Types.StartProjectExportInput;
   String: Types.Scalars['String']['output'];
@@ -1960,6 +1962,12 @@ export type MutationResolvers<
     ContextType,
     RequireFields<Types.MutationSetMyPrimaryMfaDeviceArgs, 'input'>
   >;
+  setProjectUserEmail?: Resolver<
+    ResolversTypes['User'],
+    ParentType,
+    ContextType,
+    RequireFields<Types.MutationSetProjectUserEmailArgs, 'input'>
+  >;
   setupMfa?: Resolver<ResolversTypes['MfaSetupResponse'], ParentType, ContextType>;
   startProjectExport?: Resolver<
     ResolversTypes['ProjectSyncJob'],

package/src/generated/schema-types.ts

@@ -757,6 +757,11 @@ export type CreateUserAuthenticationMethodInput = {
 };
 
 export type CreateUserInput = {
+  /**
+   * Optional. Project-scope create only. Stores an unverified Email authentication method.
+   * A provider can only be linked to one user account (no sharing), and a user can only have one method per provider (no duplicates).
+   */
+  email?: InputMaybe<Scalars['String']['input']>;
   groupIds?: InputMaybe<Array<Scalars['ID']['input']>>;
   metadata?: InputMaybe<Scalars['JSON']['input']>;
   name: Scalars['String']['input'];
@@ -1285,6 +1290,11 @@ export type Mutation = {
   setMyNotificationPreference: NotificationPreference;
   setMyPrimaryAuthenticationMethod: UserAuthenticationMethod;
   setMyPrimaryMfaDevice: MfaDevice;
+  /**
+   * Set or replace a project member's Email authentication method as unverified.
+   * `project.user_email_changed` carries ids only, never the address.
+   */
+  setProjectUserEmail: User;
   setupMfa: MfaSetupResponse;
   /**
    * Enqueue an asynchronous CDM **export** job for the given project. The worker
@@ -1647,6 +1657,10 @@ export type MutationSetMyPrimaryMfaDeviceArgs = {
   input: SetMyPrimaryMfaDeviceInput;
 };
 
+export type MutationSetProjectUserEmailArgs = {
+  input: SetProjectUserEmailInput;
+};
+
 export type MutationStartProjectExportArgs = {
   id: Scalars['ID']['input'];
   input: StartProjectExportInput;
@@ -3541,6 +3555,16 @@ export type SetMyPrimaryMfaDeviceInput = {
   factorId: Scalars['ID']['input'];
 };
 
+export type SetProjectUserEmailInput = {
+  /**
+   * Unverified Email authentication method. Project-scope only.
+   * A provider can only be linked to one user account (no sharing), and a user can only have one method per provider (no duplicates).
+   */
+  email: Scalars['String']['input'];
+  scope: Scope;
+  userId: Scalars['ID']['input'];
+};
+
 /**
  * Signing key for a scope (e.g. project). Used for RS256 API key tokens; public key is exposed in JWKS.
  * Only project scopes (accountProject, organizationProject) have manageable keys; system key is internal.

package/src/operations/users/setProjectUserEmail.graphql

@@ -0,0 +1,9 @@
+mutation SetProjectUserEmail($input: SetProjectUserEmailInput!) {
+  setProjectUserEmail(input: $input) {
+    id
+    name
+    metadata
+    createdAt
+    updatedAt
+  }
+}

package/src/schema/users/inputs/create-user.graphql

@@ -8,4 +8,9 @@ input CreateUserInput {
   permissionIds: [ID!]
   scope: Scope!
   primaryTagId: ID
+  """
+  Optional. Project-scope create only. Stores an unverified Email authentication method.
+  A provider can only be linked to one user account (no sharing), and a user can only have one method per provider (no duplicates).
+  """
+  email: String
 }

package/src/schema/users/inputs/set-project-user-email.graphql

@@ -0,0 +1,9 @@
+input SetProjectUserEmailInput {
+  userId: ID!
+  """
+  Unverified Email authentication method. Project-scope only.
+  A provider can only be linked to one user account (no sharing), and a user can only have one method per provider (no duplicates).
+  """
+  email: String!
+  scope: Scope!
+}

package/src/schema/users/mutations/set-project-user-email.graphql

@@ -0,0 +1,7 @@
+extend type Mutation {
+  """
+  Set or replace a project member's Email authentication method as unverified.
+  `project.user_email_changed` carries ids only, never the address.
+  """
+  setProjectUserEmail(input: SetProjectUserEmailInput!): User!
+}

package/src/sdl-contract.test.ts

@@ -51,10 +51,11 @@ describe('operation documents', () => {
   // 135 after project OAuth connections: get/upsert/clear (three operation documents).
   // 136 after closed-install: AuthSignupPolicyDocument (publicSignupEnabled, bootstrapOpen).
   // 137 after CDM imports by reference: RequestProjectSyncUploadUrlDocument.
+  // 138 after operator-set-email: SetProjectUserEmailDocument.
   // Updating this number is the point of the pin, not a nuisance: every change
   // to it should be a line in a commit message.
   it('finds every document under src/operations', () => {
-    expect(files).toHaveLength(137);
+    expect(files).toHaveLength(138);
   });
 
   it.each(files.map((f) => [relative(process.cwd(), f), f]))('%s validates', (_label, file) => {