@grantjs/schema 1.3.3 → 1.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grantjs/schema",
-  "version": "1.3.3",
+  "version": "1.4.1",
   "description": "GraphQL schema and generated types for Grant",
   "main": "src/index.ts",
   "types": "src/index.ts",

package/src/generated/resolvers.ts

@@ -443,8 +443,19 @@ export enum CdmIfMissing {
 }
 
 export type CdmKeyResolverInput = {
+  /**
+   * `id` references an existing Grant user id. `email` resolves or creates a
+   * global passwordless email authentication method. Other values are treated as
+   * CDM-local external keys for project import/export.
+   */
   findBy?: InputMaybe<CdmFindBy>;
   ifMissing?: InputMaybe<CdmIfMissing>;
+  /**
+   * Identifier value. For `findBy: email`, Grant normalizes this to lowercase
+   * and resolves it against the global email authentication method catalog.
+   * Imported email authentication methods start unverified until a later inbox
+   * proof flow, such as project OAuth email magic link, verifies them.
+   */
   value: Scalars['String']['input'];
 };
 
@@ -551,6 +562,7 @@ export type CreateOrganizationInput = {
 
 export type CreateOrganizationInvitationInput = {
   email: Scalars['String']['input'];
+  emailVerificationProofTokenHash?: InputMaybe<Scalars['String']['input']>;
   expiresAt: Scalars['Date']['input'];
   invitedAt?: InputMaybe<Scalars['Date']['input']>;
   invitedBy: Scalars['ID']['input'];
@@ -694,6 +706,16 @@ export type DeleteUserSessionInput = {
   id: Scalars['ID']['input'];
 };
 
+export type EmailVerificationProofInput = {
+  emailProofToken: Scalars['String']['input'];
+  token: Scalars['String']['input'];
+  type: EmailVerificationProofType;
+};
+
+export enum EmailVerificationProofType {
+  OrganizationInvitation = 'ORGANIZATION_INVITATION',
+}
+
 export type ExchangeApiKeyInput = {
   clientId: Scalars['String']['input'];
   clientSecret: Scalars['String']['input'];
@@ -851,6 +873,7 @@ export type IsAuthorizedPermissionInput = {
 };
 
 export type LoginInput = {
+  emailVerificationProof?: InputMaybe<EmailVerificationProofInput>;
   provider: UserAuthenticationMethodProvider;
   providerData: Scalars['JSON']['input'];
   providerId: Scalars['String']['input'];
@@ -2363,6 +2386,7 @@ export type RefreshSessionResponse = {
 };
 
 export type RegisterInput = {
+  emailVerificationProof?: InputMaybe<EmailVerificationProofInput>;
   provider: UserAuthenticationMethodProvider;
   providerData: Scalars['JSON']['input'];
   providerId: Scalars['String']['input'];
@@ -3035,6 +3059,7 @@ export type UpdateOrganizationInput = {
 
 export type UpdateOrganizationInvitationInput = {
   acceptedAt?: InputMaybe<Scalars['Date']['input']>;
+  emailVerificationProofTokenHash?: InputMaybe<Scalars['String']['input']>;
   expiresAt?: InputMaybe<Scalars['Date']['input']>;
   invitedAt?: InputMaybe<Scalars['Date']['input']>;
   status?: InputMaybe<OrganizationInvitationStatus>;
@@ -3739,6 +3764,8 @@ export type ResolversTypes = ResolversObject<{
   DeleteMyAccountsInput: DeleteMyAccountsInput;
   DeleteUserAuthenticationMethodInput: DeleteUserAuthenticationMethodInput;
   DeleteUserSessionInput: DeleteUserSessionInput;
+  EmailVerificationProofInput: EmailVerificationProofInput;
+  EmailVerificationProofType: EmailVerificationProofType;
   ExchangeApiKeyInput: ExchangeApiKeyInput;
   ExchangeApiKeyResult: ResolverTypeWrapper<ExchangeApiKeyResult>;
   GenerateMyMfaRecoveryCodesInput: GenerateMyMfaRecoveryCodesInput;
@@ -4096,6 +4123,7 @@ export type ResolversParentTypes = ResolversObject<{
   DeleteMyAccountsInput: DeleteMyAccountsInput;
   DeleteUserAuthenticationMethodInput: DeleteUserAuthenticationMethodInput;
   DeleteUserSessionInput: DeleteUserSessionInput;
+  EmailVerificationProofInput: EmailVerificationProofInput;
   ExchangeApiKeyInput: ExchangeApiKeyInput;
   ExchangeApiKeyResult: ExchangeApiKeyResult;
   GenerateMyMfaRecoveryCodesInput: GenerateMyMfaRecoveryCodesInput;

package/src/generated/schema-types.ts

@@ -441,8 +441,19 @@ export enum CdmIfMissing {
 }
 
 export type CdmKeyResolverInput = {
+  /**
+   * `id` references an existing Grant user id. `email` resolves or creates a
+   * global passwordless email authentication method. Other values are treated as
+   * CDM-local external keys for project import/export.
+   */
   findBy?: InputMaybe<CdmFindBy>;
   ifMissing?: InputMaybe<CdmIfMissing>;
+  /**
+   * Identifier value. For `findBy: email`, Grant normalizes this to lowercase
+   * and resolves it against the global email authentication method catalog.
+   * Imported email authentication methods start unverified until a later inbox
+   * proof flow, such as project OAuth email magic link, verifies them.
+   */
   value: Scalars['String']['input'];
 };
 
@@ -549,6 +560,7 @@ export type CreateOrganizationInput = {
 
 export type CreateOrganizationInvitationInput = {
   email: Scalars['String']['input'];
+  emailVerificationProofTokenHash?: InputMaybe<Scalars['String']['input']>;
   expiresAt: Scalars['Date']['input'];
   invitedAt?: InputMaybe<Scalars['Date']['input']>;
   invitedBy: Scalars['ID']['input'];
@@ -692,6 +704,16 @@ export type DeleteUserSessionInput = {
   id: Scalars['ID']['input'];
 };
 
+export type EmailVerificationProofInput = {
+  emailProofToken: Scalars['String']['input'];
+  token: Scalars['String']['input'];
+  type: EmailVerificationProofType;
+};
+
+export enum EmailVerificationProofType {
+  OrganizationInvitation = 'ORGANIZATION_INVITATION',
+}
+
 export type ExchangeApiKeyInput = {
   clientId: Scalars['String']['input'];
   clientSecret: Scalars['String']['input'];
@@ -849,6 +871,7 @@ export type IsAuthorizedPermissionInput = {
 };
 
 export type LoginInput = {
+  emailVerificationProof?: InputMaybe<EmailVerificationProofInput>;
   provider: UserAuthenticationMethodProvider;
   providerData: Scalars['JSON']['input'];
   providerId: Scalars['String']['input'];
@@ -2361,6 +2384,7 @@ export type RefreshSessionResponse = {
 };
 
 export type RegisterInput = {
+  emailVerificationProof?: InputMaybe<EmailVerificationProofInput>;
   provider: UserAuthenticationMethodProvider;
   providerData: Scalars['JSON']['input'];
   providerId: Scalars['String']['input'];
@@ -3033,6 +3057,7 @@ export type UpdateOrganizationInput = {
 
 export type UpdateOrganizationInvitationInput = {
   acceptedAt?: InputMaybe<Scalars['Date']['input']>;
+  emailVerificationProofTokenHash?: InputMaybe<Scalars['String']['input']>;
   expiresAt?: InputMaybe<Scalars['Date']['input']>;
   invitedAt?: InputMaybe<Scalars['Date']['input']>;
   status?: InputMaybe<OrganizationInvitationStatus>;

package/src/schema/auth/inputs/email-verification-proof.graphql

@@ -0,0 +1,5 @@
+input EmailVerificationProofInput {
+  type: EmailVerificationProofType!
+  token: String!
+  emailProofToken: String!
+}

package/src/schema/auth/inputs/login.graphql

@@ -2,4 +2,5 @@ input LoginInput {
   provider: UserAuthenticationMethodProvider!
   providerId: String!
   providerData: JSON!
+  emailVerificationProof: EmailVerificationProofInput
 }

package/src/schema/auth/inputs/register.graphql

@@ -3,4 +3,5 @@ input RegisterInput {
   provider: UserAuthenticationMethodProvider!
   providerId: String!
   providerData: JSON!
+  emailVerificationProof: EmailVerificationProofInput
 }

package/src/schema/auth/types/email-verification-proof-type.graphql

@@ -0,0 +1,3 @@
+enum EmailVerificationProofType {
+  ORGANIZATION_INVITATION
+}

package/src/schema/organization-invitations/inputs/create-organization-invitation.graphql

@@ -3,6 +3,7 @@ input CreateOrganizationInvitationInput {
   email: String!
   roleId: ID!
   token: String!
+  emailVerificationProofTokenHash: String
   expiresAt: Date!
   invitedBy: ID!
   invitedAt: Date

package/src/schema/organization-invitations/inputs/update-organization-invitation.graphql

@@ -2,6 +2,7 @@ input UpdateOrganizationInvitationInput {
   status: OrganizationInvitationStatus
   acceptedAt: Date
   token: String
+  emailVerificationProofTokenHash: String
   expiresAt: Date
   invitedAt: Date
 }

package/src/schema/projects/inputs/sync-project-cdm.graphql

@@ -30,7 +30,18 @@ input CdmModeInput {
 }
 
 input CdmKeyResolverInput {
+  """
+  Identifier value. For `findBy: email`, Grant normalizes this to lowercase
+  and resolves it against the global email authentication method catalog.
+  Imported email authentication methods start unverified until a later inbox
+  proof flow, such as project OAuth email magic link, verifies them.
+  """
   value: String!
+  """
+  `id` references an existing Grant user id. `email` resolves or creates a
+  global passwordless email authentication method. Other values are treated as
+  CDM-local external keys for project import/export.
+  """
   findBy: CdmFindBy
   ifMissing: CdmIfMissing
 }