@grantjs/schema 1.4.2 → 1.5.0

package/src/generated/schema-types.ts

@@ -686,6 +686,15 @@ export type CreateUserSessionInput = {
   userId: Scalars['ID']['input'];
 };
 
+export type CreateWebhookSubscriptionMutationInput = {
+  active?: InputMaybe<Scalars['Boolean']['input']>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  /** Domain event type filters (must be known catalog types). */
+  eventTypes: Array<Scalars['String']['input']>;
+  scope: Scope;
+  url: Scalars['String']['input'];
+};
+
 export type DeleteApiKeyInput = {
   hardDelete?: InputMaybe<Scalars['Boolean']['input']>;
   id: Scalars['ID']['input'];
@@ -704,6 +713,11 @@ export type DeleteUserSessionInput = {
   id: Scalars['ID']['input'];
 };
 
+export type DeleteWebhookSubscriptionInput = {
+  id: Scalars['ID']['input'];
+  scope: Scope;
+};
+
 export type EmailVerificationProofInput = {
   emailProofToken: Scalars['String']['input'];
   token: Scalars['String']['input'];
@@ -895,6 +909,11 @@ export type LogoutMyUserResponse = {
   message: Scalars['String']['output'];
 };
 
+export type MarkAllNotificationsReadResult = {
+  __typename?: 'MarkAllNotificationsReadResult';
+  updated: Scalars['Int']['output'];
+};
+
 export type MeResponse = {
   __typename?: 'MeResponse';
   accounts: Array<Account>;
@@ -979,6 +998,8 @@ export type Mutation = {
   createRole: Role;
   createTag: Tag;
   createUser: User;
+  /** Create a project webhook subscription. The signing secret is returned once. */
+  createWebhookSubscription: WebhookSubscriptionWithSecret;
   deleteApiKey: ApiKey;
   deleteGroup: Group;
   deleteMyAccounts: User;
@@ -991,16 +1012,22 @@ export type Mutation = {
   deleteRole: Role;
   deleteTag: Tag;
   deleteUser: User;
+  /** Soft-delete a webhook subscription. */
+  deleteWebhookSubscription: Scalars['Boolean']['output'];
   exchangeApiKey: ExchangeApiKeyResult;
   generateMyMfaRecoveryCodes: Array<Scalars['String']['output']>;
   inviteMember: OrganizationInvitation;
   login: LoginResponse;
   logoutMyUser: LogoutMyUserResponse;
+  markAllMyNotificationsRead: MarkAllNotificationsReadResult;
+  markMyNotificationRead: Scalars['Boolean']['output'];
   refreshSession: RefreshSessionResponse;
   register: CreateAccountResult;
   removeMyMfaDevice: MfaVerifyResult;
   removeOrganizationMember: OrganizationMember;
   renewInvitation: OrganizationInvitation;
+  /** Re-queue a delivery attempt for another POST. */
+  replayWebhookDelivery: WebhookDeliveryAttempt;
   requestPasswordReset: RequestPasswordResetResponse;
   resendInvitationEmail: OrganizationInvitation;
   resendVerification: ResendVerificationResponse;
@@ -1010,12 +1037,20 @@ export type Mutation = {
   revokeMyUserSession: RevokeMyUserSessionResult;
   revokeRolePermission: RolePermission;
   revokeUserPermission: UserPermission;
+  /**
+   * Rotate an API key secret in place. Returns the new plaintext secret once.
+   * Keeps the same key id and clientId; rejects revoked keys.
+   */
+  rotateApiKey: CreateApiKeyResult;
   /**
    * Rotate the signing key for the given scope: create a new active key and mark the previous one as rotated.
    * Allowed scopes: accountProject, organizationProject only.
    * Returns the new signing key (public info).
    */
   rotateSigningKey: SigningKey;
+  /** Rotate the signing secret. The new secret is returned once. */
+  rotateWebhookSubscriptionSecret: WebhookSubscriptionWithSecret;
+  setMyNotificationPreference: NotificationPreference;
   setMyPrimaryAuthenticationMethod: UserAuthenticationMethod;
   setMyPrimaryMfaDevice: MfaDevice;
   setupMfa: MfaSetupResponse;
@@ -1043,6 +1078,8 @@ export type Mutation = {
    */
   startProjectSync: ProjectSyncJob;
   updateGroup: Group;
+  /** Update the authenticated user's project membership profile (display name / picture). */
+  updateMyProjectMembership: MyProjectMembership;
   updateMyUser: User;
   updateOrganization: Organization;
   updateOrganizationMember: OrganizationMember;
@@ -1054,6 +1091,9 @@ export type Mutation = {
   updateRole: Role;
   updateTag: Tag;
   updateUser: User;
+  /** Update a webhook subscription URL, event filters, description, or active flag. */
+  updateWebhookSubscription: WebhookSubscription;
+  uploadMyProjectMembershipPicture: UploadUserPictureResult;
   uploadMyUserPicture: UploadUserPictureResult;
   uploadUserPicture: UploadUserPictureResult;
   verifyEmail: VerifyEmailResponse;
@@ -1128,6 +1168,10 @@ export type MutationCreateUserArgs = {
   input: CreateUserInput;
 };
 
+export type MutationCreateWebhookSubscriptionArgs = {
+  input: CreateWebhookSubscriptionMutationInput;
+};
+
 export type MutationDeleteApiKeyArgs = {
   input: DeleteApiKeyInput;
 };
@@ -1185,6 +1229,10 @@ export type MutationDeleteUserArgs = {
   scope: Scope;
 };
 
+export type MutationDeleteWebhookSubscriptionArgs = {
+  input: DeleteWebhookSubscriptionInput;
+};
+
 export type MutationExchangeApiKeyArgs = {
   input: ExchangeApiKeyInput;
 };
@@ -1201,6 +1249,10 @@ export type MutationLoginArgs = {
   input: LoginInput;
 };
 
+export type MutationMarkMyNotificationReadArgs = {
+  id: Scalars['ID']['input'];
+};
+
 export type MutationRegisterArgs = {
   input: RegisterInput;
 };
@@ -1219,6 +1271,10 @@ export type MutationRenewInvitationArgs = {
   scope: Scope;
 };
 
+export type MutationReplayWebhookDeliveryArgs = {
+  input: ReplayWebhookDeliveryInput;
+};
+
 export type MutationRequestPasswordResetArgs = {
   input: RequestPasswordResetInput;
 };
@@ -1257,10 +1313,22 @@ export type MutationRevokeUserPermissionArgs = {
   input: RevokeUserPermissionInput;
 };
 
+export type MutationRotateApiKeyArgs = {
+  input: RotateApiKeyInput;
+};
+
 export type MutationRotateSigningKeyArgs = {
   scope: Scope;
 };
 
+export type MutationRotateWebhookSubscriptionSecretArgs = {
+  input: RotateWebhookSubscriptionSecretInput;
+};
+
+export type MutationSetMyNotificationPreferenceArgs = {
+  input: SetMyNotificationPreferenceInput;
+};
+
 export type MutationSetMyPrimaryAuthenticationMethodArgs = {
   id: Scalars['ID']['input'];
 };
@@ -1286,6 +1354,10 @@ export type MutationUpdateGroupArgs = {
   input: UpdateGroupInput;
 };
 
+export type MutationUpdateMyProjectMembershipArgs = {
+  input: UpdateMyProjectMembershipInput;
+};
+
 export type MutationUpdateMyUserArgs = {
   input: UpdateMyUserInput;
 };
@@ -1335,6 +1407,15 @@ export type MutationUpdateUserArgs = {
   input: UpdateUserInput;
 };
 
+export type MutationUpdateWebhookSubscriptionArgs = {
+  id: Scalars['ID']['input'];
+  input: UpdateWebhookSubscriptionMutationInput;
+};
+
+export type MutationUploadMyProjectMembershipPictureArgs = {
+  input: UploadMyProjectMembershipPictureInput;
+};
+
 export type MutationUploadMyUserPictureArgs = {
   input: UploadMyUserPictureInput;
 };
@@ -1359,6 +1440,26 @@ export type MutationVerifyMyMfaEnrollmentArgs = {
   input: VerifyMyMfaEnrollmentInput;
 };
 
+export type MyNotificationsInput = {
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  page?: InputMaybe<Scalars['Int']['input']>;
+  unreadOnly?: InputMaybe<Scalars['Boolean']['input']>;
+};
+
+export type MyProjectMembership = {
+  __typename?: 'MyProjectMembership';
+  accountId?: Maybe<Scalars['ID']['output']>;
+  displayName?: Maybe<Scalars['String']['output']>;
+  joinedAt: Scalars['Date']['output'];
+  metadata: Scalars['JSON']['output'];
+  organizationId?: Maybe<Scalars['ID']['output']>;
+  organizationName?: Maybe<Scalars['String']['output']>;
+  pictureUrl?: Maybe<Scalars['String']['output']>;
+  projectId: Scalars['ID']['output'];
+  projectName: Scalars['String']['output'];
+  role?: Maybe<Scalars['String']['output']>;
+};
+
 export type MyUserSessionsInput = {
   audience?: InputMaybe<Scalars['String']['input']>;
   limit?: InputMaybe<Scalars['Int']['input']>;
@@ -1366,6 +1467,66 @@ export type MyUserSessionsInput = {
   search?: InputMaybe<Scalars['String']['input']>;
 };
 
+export type Notification = {
+  __typename?: 'Notification';
+  body?: Maybe<Scalars['String']['output']>;
+  category: Scalars['String']['output'];
+  channel: NotificationChannel;
+  createdAt: Scalars['Date']['output'];
+  eventId: Scalars['ID']['output'];
+  id: Scalars['ID']['output'];
+  readAt?: Maybe<Scalars['Date']['output']>;
+  refEntity?: Maybe<Scalars['String']['output']>;
+  refId?: Maybe<Scalars['ID']['output']>;
+  scope?: Maybe<NotificationEventScope>;
+  seenAt?: Maybe<Scalars['Date']['output']>;
+  status: NotificationStatus;
+  title: Scalars['String']['output'];
+  type: Scalars['String']['output'];
+};
+
+export enum NotificationChannel {
+  Email = 'email',
+  InApp = 'in_app',
+}
+
+export type NotificationEventScope = {
+  __typename?: 'NotificationEventScope';
+  id: Scalars['ID']['output'];
+  tenant: Scalars['String']['output'];
+};
+
+export type NotificationPage = {
+  __typename?: 'NotificationPage';
+  hasNextPage: Scalars['Boolean']['output'];
+  notifications: Array<Notification>;
+  totalCount: Scalars['Int']['output'];
+  unreadCount: Scalars['Int']['output'];
+};
+
+export type NotificationPreference = {
+  __typename?: 'NotificationPreference';
+  category: Scalars['String']['output'];
+  channel: NotificationChannel;
+  enabled: Scalars['Boolean']['output'];
+  id: Scalars['ID']['output'];
+  scopeId: Scalars['String']['output'];
+  scopeTenant: Scalars['String']['output'];
+  source: NotificationPreferenceSource;
+};
+
+export enum NotificationPreferenceSource {
+  OrgEnforced = 'org_enforced',
+  User = 'user',
+}
+
+export enum NotificationStatus {
+  Dead = 'dead',
+  Delivered = 'delivered',
+  Failed = 'failed',
+  Pending = 'pending',
+}
+
 export type Organization = Auditable & {
   __typename?: 'Organization';
   createdAt: Scalars['Date']['output'];
@@ -2009,6 +2170,13 @@ export type Query = {
   me: MeResponse;
   myMfaDevices: Array<MfaDevice>;
   myMfaRecoveryCodeStatus: MfaRecoveryCodeStatus;
+  myNotificationPreferences: Array<NotificationPreference>;
+  myNotifications: NotificationPage;
+  /** A single project membership for the authenticated user. */
+  myProjectMembership?: Maybe<MyProjectMembership>;
+  /** Project memberships for the authenticated user (project_users pivots). */
+  myProjectMemberships: Array<MyProjectMembership>;
+  myUnreadNotificationCount: UnreadNotificationCount;
   myUserAuthenticationMethods: Array<UserAuthenticationMethod>;
   myUserDataExport: UserDataExport;
   myUserSessions: UserSessionPage;
@@ -2040,6 +2208,12 @@ export type Query = {
   signingKeys: Array<SigningKey>;
   tags: TagPage;
   users: UserPage;
+  /** List delivery attempts for a project (optionally filtered by subscription or status). */
+  webhookDeliveries: WebhookDeliveryPage;
+  /** Get a single webhook subscription by id. */
+  webhookSubscription: WebhookSubscription;
+  /** List webhook subscriptions for a project scope. */
+  webhookSubscriptions: Array<WebhookSubscription>;
 };
 
 export type QueryApiKeysArgs = {
@@ -2069,6 +2243,18 @@ export type QueryIsAuthorizedArgs = {
   input: IsAuthorizedInput;
 };
 
+export type QueryMyNotificationPreferencesArgs = {
+  scopeTenant: Scalars['String']['input'];
+};
+
+export type QueryMyNotificationsArgs = {
+  input?: InputMaybe<MyNotificationsInput>;
+};
+
+export type QueryMyProjectMembershipArgs = {
+  projectId: Scalars['ID']['input'];
+};
+
 export type QueryMyUserSessionsArgs = {
   input: MyUserSessionsInput;
 };
@@ -2191,6 +2377,23 @@ export type QueryUsersArgs = {
   tagIds?: InputMaybe<Array<Scalars['ID']['input']>>;
 };
 
+export type QueryWebhookDeliveriesArgs = {
+  limit?: InputMaybe<Scalars['Int']['input']>;
+  page?: InputMaybe<Scalars['Int']['input']>;
+  scope: Scope;
+  status?: InputMaybe<WebhookDeliveryStatus>;
+  subscriptionId?: InputMaybe<Scalars['ID']['input']>;
+};
+
+export type QueryWebhookSubscriptionArgs = {
+  id: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type QueryWebhookSubscriptionsArgs = {
+  scope: Scope;
+};
+
 export type QueryAccountProjectApiKeysInput = {
   accountId?: InputMaybe<Scalars['ID']['input']>;
   apiKeyId?: InputMaybe<Scalars['ID']['input']>;
@@ -2572,6 +2775,11 @@ export type RemoveUserTagInput = {
   userId: Scalars['ID']['input'];
 };
 
+export type ReplayWebhookDeliveryInput = {
+  deliveryId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
 export type RequestPasswordResetInput = {
   email: Scalars['String']['input'];
 };
@@ -2826,6 +3034,16 @@ export type RoleTagTagArgs = {
   scope: Scope;
 };
 
+export type RotateApiKeyInput = {
+  id: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type RotateWebhookSubscriptionSecretInput = {
+  id: Scalars['ID']['input'];
+  scope: Scope;
+};
+
 export type Scope = {
   id: Scalars['ID']['input'];
   tenant: Tenant;
@@ -2847,6 +3065,15 @@ export type SessionExportData = {
   userAgent?: Maybe<Scalars['String']['output']>;
 };
 
+export type SetMyNotificationPreferenceInput = {
+  /** Notification preference category (security, iam, membership, integrations). */
+  category: Scalars['String']['input'];
+  channel: NotificationChannel;
+  enabled: Scalars['Boolean']['input'];
+  scopeId?: InputMaybe<Scalars['String']['input']>;
+  scopeTenant: Scalars['String']['input'];
+};
+
 export type SetMyPrimaryMfaDeviceInput = {
   factorId: Scalars['ID']['input'];
 };
@@ -3007,6 +3234,11 @@ export enum TokenType {
   System = 'system',
 }
 
+export type UnreadNotificationCount = {
+  __typename?: 'UnreadNotificationCount';
+  unreadCount: Scalars['Int']['output'];
+};
+
 export type UpdateAccountProjectTagInput = {
   accountId: Scalars['ID']['input'];
   isPrimary: Scalars['Boolean']['input'];
@@ -3036,6 +3268,12 @@ export type UpdateGroupTagInput = {
   tagId: Scalars['ID']['input'];
 };
 
+export type UpdateMyProjectMembershipInput = {
+  displayName?: InputMaybe<Scalars['String']['input']>;
+  pictureUrl?: InputMaybe<Scalars['String']['input']>;
+  projectId: Scalars['ID']['input'];
+};
+
 export type UpdateMyUserAuthenticationMethodInput = {
   isPrimary?: InputMaybe<Scalars['Boolean']['input']>;
   isVerified?: InputMaybe<Scalars['Boolean']['input']>;
@@ -3211,6 +3449,21 @@ export type UpdateUserTagInput = {
   userId: Scalars['ID']['input'];
 };
 
+export type UpdateWebhookSubscriptionMutationInput = {
+  active?: InputMaybe<Scalars['Boolean']['input']>;
+  description?: InputMaybe<Scalars['String']['input']>;
+  eventTypes?: InputMaybe<Array<Scalars['String']['input']>>;
+  scope: Scope;
+  url?: InputMaybe<Scalars['String']['input']>;
+};
+
+export type UploadMyProjectMembershipPictureInput = {
+  contentType: Scalars['String']['input'];
+  file: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  projectId: Scalars['ID']['input'];
+};
+
 export type UploadMyUserPictureInput = {
   contentType: Scalars['String']['input'];
   file: Scalars['String']['input'];
@@ -3498,3 +3751,62 @@ export type VerifyMfaRecoveryCodeInput = {
 export type VerifyMyMfaEnrollmentInput = {
   code: Scalars['String']['input'];
 };
+
+export type WebhookDeliveryAttempt = {
+  __typename?: 'WebhookDeliveryAttempt';
+  attemptCount: Scalars['Int']['output'];
+  createdAt: Scalars['Date']['output'];
+  deliveredAt?: Maybe<Scalars['Date']['output']>;
+  errorDetails?: Maybe<Scalars['JSON']['output']>;
+  eventId: Scalars['ID']['output'];
+  id: Scalars['ID']['output'];
+  lastResponseStatus?: Maybe<Scalars['Int']['output']>;
+  nextRetryAt?: Maybe<Scalars['Date']['output']>;
+  status: WebhookDeliveryStatus;
+  subscriptionId: Scalars['ID']['output'];
+  updatedAt: Scalars['Date']['output'];
+};
+
+export type WebhookDeliveryPage = {
+  __typename?: 'WebhookDeliveryPage';
+  hasNextPage: Scalars['Boolean']['output'];
+  items: Array<WebhookDeliveryAttempt>;
+  totalCount: Scalars['Int']['output'];
+};
+
+export enum WebhookDeliveryStatus {
+  Dead = 'dead',
+  Delivered = 'delivered',
+  Failed = 'failed',
+  Pending = 'pending',
+  Running = 'running',
+}
+
+export type WebhookSubscription = {
+  __typename?: 'WebhookSubscription';
+  active: Scalars['Boolean']['output'];
+  createdAt: Scalars['Date']['output'];
+  createdById?: Maybe<Scalars['ID']['output']>;
+  description?: Maybe<Scalars['String']['output']>;
+  eventTypes: Array<Scalars['String']['output']>;
+  id: Scalars['ID']['output'];
+  projectId: Scalars['ID']['output'];
+  updatedAt: Scalars['Date']['output'];
+  url: Scalars['String']['output'];
+};
+
+/** Returned only at creation or secret rotation. Store the secret immediately. */
+export type WebhookSubscriptionWithSecret = {
+  __typename?: 'WebhookSubscriptionWithSecret';
+  active: Scalars['Boolean']['output'];
+  createdAt: Scalars['Date']['output'];
+  createdById?: Maybe<Scalars['ID']['output']>;
+  description?: Maybe<Scalars['String']['output']>;
+  eventTypes: Array<Scalars['String']['output']>;
+  id: Scalars['ID']['output'];
+  projectId: Scalars['ID']['output'];
+  /** Plaintext signing secret. Shown once; never returned by list/get/update. */
+  secret: Scalars['String']['output'];
+  updatedAt: Scalars['Date']['output'];
+  url: Scalars['String']['output'];
+};

package/src/index.ts

@@ -1,4 +1,5 @@
 export * from './cdm/cdm-export-sections';
+export * from './events';
 export * from './generated/graphql';
 export type {
   AccountResolvers,
@@ -25,6 +26,7 @@ export type {
   UserResolvers,
 } from './generated/resolvers';
 export * from './generated/schema-types';
+export * from './notifications/notification.types';
 export type {
   ProjectAppPublicInfo,
   ProjectAppScopeInfo,
@@ -32,3 +34,4 @@ export type {
   ProjectConsentInfoUser,
   ProjectConsentRedirectResult,
 } from './project-oauth.types';
+export * from './webhooks/webhook.types';

package/src/notifications/notification.types.ts

@@ -0,0 +1,21 @@
+import type { EventCategory } from '../events/event-catalog';
+
+export const NOTIFICATION_CHANNELS = ['in_app', 'email'] as const;
+
+export const NOTIFICATION_STATUSES = ['pending', 'delivered', 'failed', 'dead'] as const;
+
+export const NOTIFICATION_PREFERENCE_SOURCES = ['user', 'org_enforced'] as const;
+
+export interface ListNotificationsInput {
+  unreadOnly?: boolean;
+  page?: number;
+  limit?: number;
+}
+
+export interface SetNotificationPreferenceInput {
+  scopeTenant: string;
+  scopeId?: string;
+  category: EventCategory;
+  channel: (typeof NOTIFICATION_CHANNELS)[number];
+  enabled: boolean;
+}

package/src/operations/api-keys/rotate-api-key.graphql

@@ -0,0 +1,11 @@
+mutation RotateApiKey($input: RotateApiKeyInput!) {
+  rotateApiKey(input: $input) {
+    id
+    clientId
+    clientSecret
+    name
+    description
+    expiresAt
+    createdAt
+  }
+}

package/src/operations/groups/getGroups.graphql

@@ -23,16 +23,9 @@ query GetGroups(
       metadata
       createdAt
       updatedAt
+      # IDs only — enough for inheritance maps; avoid nested permission.tags (N+1).
       permissions {
         id
-        name
-        action
-        tags {
-          id
-          name
-          color
-          isPrimary
-        }
       }
       tags {
         id

package/src/operations/groups/getGroupsList.graphql

@@ -29,6 +29,12 @@ query GetGroupsList(
         color
         isPrimary
       }
+      tags {
+        id
+        name
+        color
+        isPrimary
+      }
       permissionCount
       tagCount
     }

package/src/operations/me/mark-all-my-notifications-read.graphql

@@ -0,0 +1,5 @@
+mutation MarkAllMyNotificationsRead {
+  markAllMyNotificationsRead {
+    updated
+  }
+}

package/src/operations/me/mark-my-notification-read.graphql

@@ -0,0 +1,3 @@
+mutation MarkMyNotificationRead($id: ID!) {
+  markMyNotificationRead(id: $id)
+}

package/src/operations/me/my-notification-preferences.graphql

@@ -0,0 +1,11 @@
+query MyNotificationPreferences($scopeTenant: String!) {
+  myNotificationPreferences(scopeTenant: $scopeTenant) {
+    id
+    scopeTenant
+    scopeId
+    category
+    channel
+    enabled
+    source
+  }
+}

package/src/operations/me/my-notifications.graphql

@@ -0,0 +1,26 @@
+query MyNotifications($input: MyNotificationsInput) {
+  myNotifications(input: $input) {
+    notifications {
+      id
+      eventId
+      category
+      type
+      channel
+      title
+      body
+      refEntity
+      refId
+      scope {
+        tenant
+        id
+      }
+      status
+      seenAt
+      readAt
+      createdAt
+    }
+    totalCount
+    unreadCount
+    hasNextPage
+  }
+}

package/src/operations/me/my-project-membership.graphql

@@ -0,0 +1,14 @@
+query MyProjectMembership($projectId: ID!) {
+  myProjectMembership(projectId: $projectId) {
+    projectId
+    projectName
+    displayName
+    pictureUrl
+    metadata
+    role
+    joinedAt
+    organizationId
+    organizationName
+    accountId
+  }
+}

package/src/operations/me/my-project-memberships.graphql

@@ -0,0 +1,14 @@
+query MyProjectMemberships {
+  myProjectMemberships {
+    projectId
+    projectName
+    displayName
+    pictureUrl
+    metadata
+    role
+    joinedAt
+    organizationId
+    organizationName
+    accountId
+  }
+}

package/src/operations/me/my-unread-notification-count.graphql

@@ -0,0 +1,5 @@
+query MyUnreadNotificationCount {
+  myUnreadNotificationCount {
+    unreadCount
+  }
+}