@grantjs/schema 1.4.2 → 1.5.0

package/src/operations/me/set-my-notification-preference.graphql

@@ -0,0 +1,11 @@
+mutation SetMyNotificationPreference($input: SetMyNotificationPreferenceInput!) {
+  setMyNotificationPreference(input: $input) {
+    id
+    scopeTenant
+    scopeId
+    category
+    channel
+    enabled
+    source
+  }
+}

package/src/operations/me/update-my-project-membership.graphql

@@ -0,0 +1,14 @@
+mutation UpdateMyProjectMembership($input: UpdateMyProjectMembershipInput!) {
+  updateMyProjectMembership(input: $input) {
+    projectId
+    projectName
+    displayName
+    pictureUrl
+    metadata
+    role
+    joinedAt
+    organizationId
+    organizationName
+    accountId
+  }
+}

package/src/operations/me/upload-my-project-membership-picture.graphql

@@ -0,0 +1,6 @@
+mutation UploadMyProjectMembershipPicture($input: UploadMyProjectMembershipPictureInput!) {
+  uploadMyProjectMembershipPicture(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/roles/getRoles.graphql

@@ -23,27 +23,14 @@ query GetRoles(
       metadata
       createdAt
       updatedAt
+      # Group ids/names only — no nested group.tags (unused by attachment UIs).
       groups {
         id
         name
-        tags {
-          id
-          name
-          color
-          isPrimary
-        }
       }
       rolePermissions {
         id
         permissionId
-        permission(scope: $scope) {
-          id
-          name
-          action
-          resource {
-            slug
-          }
-        }
       }
       tags {
         id

package/src/operations/webhooks/create-webhook-subscription.graphql

@@ -0,0 +1,13 @@
+mutation CreateWebhookSubscription($input: CreateWebhookSubscriptionMutationInput!) {
+  createWebhookSubscription(input: $input) {
+    id
+    projectId
+    url
+    eventTypes
+    active
+    description
+    secret
+    createdAt
+    updatedAt
+  }
+}

package/src/operations/webhooks/delete-webhook-subscription.graphql

@@ -0,0 +1,3 @@
+mutation DeleteWebhookSubscription($input: DeleteWebhookSubscriptionInput!) {
+  deleteWebhookSubscription(input: $input)
+}

package/src/operations/webhooks/replay-webhook-delivery.graphql

@@ -0,0 +1,11 @@
+mutation ReplayWebhookDelivery($input: ReplayWebhookDeliveryInput!) {
+  replayWebhookDelivery(input: $input) {
+    id
+    eventId
+    subscriptionId
+    status
+    attemptCount
+    nextRetryAt
+    updatedAt
+  }
+}

package/src/operations/webhooks/rotate-webhook-subscription-secret.graphql

@@ -0,0 +1,7 @@
+mutation RotateWebhookSubscriptionSecret($input: RotateWebhookSubscriptionSecretInput!) {
+  rotateWebhookSubscriptionSecret(input: $input) {
+    id
+    secret
+    updatedAt
+  }
+}

package/src/operations/webhooks/update-webhook-subscription.graphql

@@ -0,0 +1,10 @@
+mutation UpdateWebhookSubscription($id: ID!, $input: UpdateWebhookSubscriptionMutationInput!) {
+  updateWebhookSubscription(id: $id, input: $input) {
+    id
+    url
+    eventTypes
+    active
+    description
+    updatedAt
+  }
+}

package/src/operations/webhooks/webhook-deliveries.graphql

@@ -0,0 +1,31 @@
+query WebhookDeliveries(
+  $scope: Scope!
+  $subscriptionId: ID
+  $status: WebhookDeliveryStatus
+  $page: Int
+  $limit: Int
+) {
+  webhookDeliveries(
+    scope: $scope
+    subscriptionId: $subscriptionId
+    status: $status
+    page: $page
+    limit: $limit
+  ) {
+    items {
+      id
+      eventId
+      subscriptionId
+      status
+      attemptCount
+      nextRetryAt
+      lastResponseStatus
+      errorDetails
+      deliveredAt
+      createdAt
+      updatedAt
+    }
+    totalCount
+    hasNextPage
+  }
+}

package/src/operations/webhooks/webhook-subscription.graphql

@@ -0,0 +1,13 @@
+query WebhookSubscription($scope: Scope!, $id: ID!) {
+  webhookSubscription(scope: $scope, id: $id) {
+    id
+    projectId
+    url
+    eventTypes
+    active
+    description
+    createdById
+    createdAt
+    updatedAt
+  }
+}

package/src/operations/webhooks/webhook-subscriptions.graphql

@@ -0,0 +1,13 @@
+query WebhookSubscriptions($scope: Scope!) {
+  webhookSubscriptions(scope: $scope) {
+    id
+    projectId
+    url
+    eventTypes
+    active
+    description
+    createdById
+    createdAt
+    updatedAt
+  }
+}

package/src/schema/api-keys/inputs/rotate-api-key.graphql

@@ -0,0 +1,4 @@
+input RotateApiKeyInput {
+  id: ID!
+  scope: Scope!
+}

package/src/schema/api-keys/mutations/rotate-api-key.graphql

@@ -0,0 +1,7 @@
+extend type Mutation {
+  """
+  Rotate an API key secret in place. Returns the new plaintext secret once.
+  Keeps the same key id and clientId; rejects revoked keys.
+  """
+  rotateApiKey(input: RotateApiKeyInput!): CreateApiKeyResult!
+}

package/src/schema/me/input/notification.graphql

@@ -0,0 +1,16 @@
+input MyNotificationsInput {
+  unreadOnly: Boolean
+  page: Int
+  limit: Int
+}
+
+input SetMyNotificationPreferenceInput {
+  scopeTenant: String!
+  scopeId: String
+  """
+  Notification preference category (security, iam, membership, integrations).
+  """
+  category: String!
+  channel: NotificationChannel!
+  enabled: Boolean!
+}

package/src/schema/me/input/update-my-project-membership.graphql

@@ -0,0 +1,5 @@
+input UpdateMyProjectMembershipInput {
+  projectId: ID!
+  displayName: String
+  pictureUrl: String
+}

package/src/schema/me/input/upload-my-project-membership-picture.graphql

@@ -0,0 +1,6 @@
+input UploadMyProjectMembershipPictureInput {
+  projectId: ID!
+  file: String!
+  filename: String!
+  contentType: String!
+}

package/src/schema/me/mutations/my-notifications.graphql

@@ -0,0 +1,5 @@
+extend type Mutation {
+  markMyNotificationRead(id: ID!): Boolean!
+  markAllMyNotificationsRead: MarkAllNotificationsReadResult!
+  setMyNotificationPreference(input: SetMyNotificationPreferenceInput!): NotificationPreference!
+}

package/src/schema/me/mutations/update-my-project-membership.graphql

@@ -0,0 +1,6 @@
+extend type Mutation {
+  """
+  Update the authenticated user's project membership profile (display name / picture).
+  """
+  updateMyProjectMembership(input: UpdateMyProjectMembershipInput!): MyProjectMembership!
+}

package/src/schema/me/mutations/upload-my-project-membership-picture.graphql

@@ -0,0 +1,5 @@
+extend type Mutation {
+  uploadMyProjectMembershipPicture(
+    input: UploadMyProjectMembershipPictureInput!
+  ): UploadUserPictureResult!
+}

package/src/schema/me/queries/my-notifications.graphql

@@ -0,0 +1,5 @@
+extend type Query {
+  myNotifications(input: MyNotificationsInput): NotificationPage!
+  myUnreadNotificationCount: UnreadNotificationCount!
+  myNotificationPreferences(scopeTenant: String!): [NotificationPreference!]!
+}

package/src/schema/me/queries/my-project-membership.graphql

@@ -0,0 +1,6 @@
+extend type Query {
+  """
+  A single project membership for the authenticated user.
+  """
+  myProjectMembership(projectId: ID!): MyProjectMembership
+}

package/src/schema/me/queries/my-project-memberships.graphql

@@ -0,0 +1,6 @@
+extend type Query {
+  """
+  Project memberships for the authenticated user (project_users pivots).
+  """
+  myProjectMemberships: [MyProjectMembership!]!
+}

package/src/schema/me/types/my-project-membership.graphql

@@ -0,0 +1,12 @@
+type MyProjectMembership {
+  projectId: ID!
+  projectName: String!
+  displayName: String
+  pictureUrl: String
+  metadata: JSON!
+  role: String
+  joinedAt: Date!
+  organizationId: ID
+  organizationName: String
+  accountId: ID
+}

package/src/schema/me/types/notification.graphql

@@ -0,0 +1,63 @@
+enum NotificationChannel {
+  in_app
+  email
+}
+
+enum NotificationStatus {
+  pending
+  delivered
+  failed
+  dead
+}
+
+enum NotificationPreferenceSource {
+  user
+  org_enforced
+}
+
+type NotificationEventScope {
+  tenant: String!
+  id: ID!
+}
+
+type Notification {
+  id: ID!
+  eventId: ID!
+  category: String!
+  type: String!
+  channel: NotificationChannel!
+  title: String!
+  body: String
+  refEntity: String
+  refId: ID
+  scope: NotificationEventScope
+  status: NotificationStatus!
+  seenAt: Date
+  readAt: Date
+  createdAt: Date!
+}
+
+type NotificationPage {
+  notifications: [Notification!]!
+  totalCount: Int!
+  unreadCount: Int!
+  hasNextPage: Boolean!
+}
+
+type UnreadNotificationCount {
+  unreadCount: Int!
+}
+
+type NotificationPreference {
+  id: ID!
+  scopeTenant: String!
+  scopeId: String!
+  category: String!
+  channel: NotificationChannel!
+  enabled: Boolean!
+  source: NotificationPreferenceSource!
+}
+
+type MarkAllNotificationsReadResult {
+  updated: Int!
+}

package/src/schema/webhooks/inputs/webhook-subscription.graphql

@@ -0,0 +1,33 @@
+input CreateWebhookSubscriptionMutationInput {
+  scope: Scope!
+  url: String!
+  """
+  Domain event type filters (must be known catalog types).
+  """
+  eventTypes: [String!]!
+  description: String
+  active: Boolean
+}
+
+input UpdateWebhookSubscriptionMutationInput {
+  scope: Scope!
+  url: String
+  eventTypes: [String!]
+  description: String
+  active: Boolean
+}
+
+input DeleteWebhookSubscriptionInput {
+  scope: Scope!
+  id: ID!
+}
+
+input RotateWebhookSubscriptionSecretInput {
+  scope: Scope!
+  id: ID!
+}
+
+input ReplayWebhookDeliveryInput {
+  scope: Scope!
+  deliveryId: ID!
+}

package/src/schema/webhooks/mutations/webhook-subscriptions.graphql

@@ -0,0 +1,33 @@
+extend type Mutation {
+  """
+  Create a project webhook subscription. The signing secret is returned once.
+  """
+  createWebhookSubscription(
+    input: CreateWebhookSubscriptionMutationInput!
+  ): WebhookSubscriptionWithSecret!
+
+  """
+  Update a webhook subscription URL, event filters, description, or active flag.
+  """
+  updateWebhookSubscription(
+    id: ID!
+    input: UpdateWebhookSubscriptionMutationInput!
+  ): WebhookSubscription!
+
+  """
+  Soft-delete a webhook subscription.
+  """
+  deleteWebhookSubscription(input: DeleteWebhookSubscriptionInput!): Boolean!
+
+  """
+  Rotate the signing secret. The new secret is returned once.
+  """
+  rotateWebhookSubscriptionSecret(
+    input: RotateWebhookSubscriptionSecretInput!
+  ): WebhookSubscriptionWithSecret!
+
+  """
+  Re-queue a delivery attempt for another POST.
+  """
+  replayWebhookDelivery(input: ReplayWebhookDeliveryInput!): WebhookDeliveryAttempt!
+}

package/src/schema/webhooks/queries/webhook-subscriptions.graphql

@@ -0,0 +1,22 @@
+extend type Query {
+  """
+  List webhook subscriptions for a project scope.
+  """
+  webhookSubscriptions(scope: Scope!): [WebhookSubscription!]!
+
+  """
+  Get a single webhook subscription by id.
+  """
+  webhookSubscription(scope: Scope!, id: ID!): WebhookSubscription!
+
+  """
+  List delivery attempts for a project (optionally filtered by subscription or status).
+  """
+  webhookDeliveries(
+    scope: Scope!
+    subscriptionId: ID
+    status: WebhookDeliveryStatus
+    page: Int
+    limit: Int
+  ): WebhookDeliveryPage!
+}

package/src/schema/webhooks/types/webhook-subscription.graphql

@@ -0,0 +1,58 @@
+enum WebhookDeliveryStatus {
+  pending
+  running
+  delivered
+  failed
+  dead
+}
+
+type WebhookSubscription {
+  id: ID!
+  projectId: ID!
+  url: String!
+  eventTypes: [String!]!
+  active: Boolean!
+  description: String
+  createdById: ID
+  createdAt: Date!
+  updatedAt: Date!
+}
+
+"""
+Returned only at creation or secret rotation. Store the secret immediately.
+"""
+type WebhookSubscriptionWithSecret {
+  id: ID!
+  projectId: ID!
+  url: String!
+  eventTypes: [String!]!
+  active: Boolean!
+  description: String
+  createdById: ID
+  createdAt: Date!
+  updatedAt: Date!
+  """
+  Plaintext signing secret. Shown once; never returned by list/get/update.
+  """
+  secret: String!
+}
+
+type WebhookDeliveryAttempt {
+  id: ID!
+  eventId: ID!
+  subscriptionId: ID!
+  status: WebhookDeliveryStatus!
+  attemptCount: Int!
+  nextRetryAt: Date
+  lastResponseStatus: Int
+  errorDetails: JSON
+  deliveredAt: Date
+  createdAt: Date!
+  updatedAt: Date!
+}
+
+type WebhookDeliveryPage {
+  items: [WebhookDeliveryAttempt!]!
+  totalCount: Int!
+  hasNextPage: Boolean!
+}

package/src/webhooks/webhook.types.ts

@@ -0,0 +1,25 @@
+import type { EventType } from '../events/event-catalog';
+
+export const WEBHOOK_DELIVERY_STATUSES = [
+  'pending',
+  'running',
+  'delivered',
+  'failed',
+  'dead',
+] as const;
+
+/** Service-layer create payload (scope is passed separately). */
+export interface CreateWebhookSubscriptionInput {
+  url: string;
+  eventTypes: EventType[];
+  description?: string | null;
+  active?: boolean;
+}
+
+/** Service-layer update payload (scope is passed separately). */
+export interface UpdateWebhookSubscriptionInput {
+  url?: string;
+  eventTypes?: EventType[];
+  description?: string | null;
+  active?: boolean;
+}