@grantjs/schema 1.8.0 → 1.9.1

package/src/generated/schema-types.ts

@@ -483,6 +483,66 @@ export type ChangeMyPasswordResult = {
   success: Scalars['Boolean']['output'];
 };
 
+export type ClearProjectAppPictureInput = {
+  projectAppId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type ClearProjectPictureInput = {
+  projectId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type ConfirmMyProjectMembershipPictureUploadInput = {
+  filename: Scalars['String']['input'];
+  projectId: Scalars['ID']['input'];
+};
+
+/**
+ * `filename` is repeated from the request step rather than carried in a token: the
+ * storage path is re-derived server-side from the caller's identity both times, so
+ * nothing the client sends can point the confirmation at another user's object.
+ */
+export type ConfirmMyUserPictureUploadInput = {
+  filename: Scalars['String']['input'];
+};
+
+/**
+ * `filename` is repeated from the request step rather than carried in a token: the
+ * storage path is re-derived server-side from the organization id both times.
+ */
+export type ConfirmOrganizationPictureUploadInput = {
+  filename: Scalars['String']['input'];
+  organizationId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+/**
+ * `filename` is repeated from the request step rather than carried in a token: the
+ * storage path is re-derived server-side from the project-app id both times.
+ */
+export type ConfirmProjectAppPictureUploadInput = {
+  filename: Scalars['String']['input'];
+  projectAppId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+/**
+ * `filename` is repeated from the request step rather than carried in a token: the
+ * storage path is re-derived server-side from the project id both times.
+ */
+export type ConfirmProjectPictureUploadInput = {
+  filename: Scalars['String']['input'];
+  projectId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type ConfirmUserPictureUploadInput = {
+  filename: Scalars['String']['input'];
+  scope: Scope;
+  userId: Scalars['ID']['input'];
+};
+
 export type CreateAccountInput = {
   ownerId: Scalars['String']['input'];
   provider: UserAuthenticationMethodProvider;
@@ -976,6 +1036,47 @@ export type Mutation = {
    */
   cancelProjectSync: ProjectSyncJob;
   changeMyPassword: ChangeMyPasswordResult;
+  /** Clear the project-app logo. Does not delete the stored object. */
+  clearProjectAppPicture: ProjectApp;
+  /** Clear the project logo. Does not delete the stored object. */
+  clearProjectPicture: Project;
+  /**
+   * Record a direct upload of a project-membership picture that has completed.
+   * Re-checks membership and reads the object back from storage before anything is
+   * written to the membership.
+   */
+  confirmMyProjectMembershipPictureUpload: UploadUserPictureResult;
+  /**
+   * Record a direct upload that has completed. Reads the object back from storage
+   * to confirm it exists and is within the size policy — what the client claimed
+   * when it asked for the URL is not evidence — then points the user's picture at
+   * it.
+   */
+  confirmMyUserPictureUpload: UploadUserPictureResult;
+  /**
+   * Record a direct organization-logo upload that has completed. Reads the object
+   * back from storage to confirm it exists and is within the size policy, then
+   * stores the object key on the organization (`picture_path`).
+   */
+  confirmOrganizationPictureUpload: UploadOrganizationPictureResult;
+  /**
+   * Record a direct project-app-logo upload that has completed. Reads the object
+   * back from storage to confirm it exists and is within the size policy, then
+   * stores the object key on the app (`picture_path`).
+   */
+  confirmProjectAppPictureUpload: UploadProjectAppPictureResult;
+  /**
+   * Record a direct project-logo upload that has completed. Reads the object
+   * back from storage to confirm it exists and is within the size policy, then
+   * stores the object key on the project (`picture_path`).
+   */
+  confirmProjectPictureUpload: UploadProjectPictureResult;
+  /**
+   * Record a completed direct upload of another user's picture. Re-runs the scope
+   * and permission checks, then reads the object back from storage before writing
+   * the picture to the user or to their project membership, as scope dictates.
+   */
+  confirmUserPictureUpload: UploadUserPictureResult;
   createApiKey: CreateApiKeyResult;
   createGroup: Group;
   createMyMfaEnrollment: MfaEnrollment;
@@ -1020,7 +1121,66 @@ export type Mutation = {
   renewInvitation: OrganizationInvitation;
   /** Re-queue a delivery attempt for another POST. */
   replayWebhookDelivery: WebhookDeliveryAttempt;
+  /**
+   * Ask for a URL to upload the signed-in user's picture for one project
+   * membership, directly to storage.
+   *
+   * Membership is checked before a URL exists, not only when the upload is
+   * recorded: a URL is a write capability, so issuing one for a project you do not
+   * belong to is the thing to prevent, not to detect afterwards.
+   */
+  requestMyProjectMembershipPictureUploadUrl: UploadUrl;
+  /**
+   * Ask for a URL to upload the signed-in user's picture directly to storage,
+   * without the bytes passing through this API.
+   *
+   * Validates content type, extension and size **before** issuing the URL, and
+   * binds the URL to a path derived from the caller's own identity. Call
+   * `confirmMyUserPictureUpload` once the PUT succeeds; until then nothing is
+   * recorded against the user.
+   */
+  requestMyUserPictureUploadUrl: UploadUrl;
+  /**
+   * Ask for a URL to upload an organization logo directly to storage, without the
+   * bytes passing through this API.
+   *
+   * Validates content type, extension and size **before** issuing the URL, and
+   * binds the URL to a path derived from the organization id. Call
+   * `confirmOrganizationPictureUpload` once the PUT succeeds; until then nothing
+   * is recorded against the organization.
+   */
+  requestOrganizationPictureUploadUrl: UploadUrl;
   requestPasswordReset: RequestPasswordResetResponse;
+  /**
+   * Ask for a URL to upload a project-app logo directly to storage, without the
+   * bytes passing through this API.
+   *
+   * Validates content type, extension and size **before** issuing the URL, and
+   * binds the URL to a path derived from the project-app id. Call
+   * `confirmProjectAppPictureUpload` once the PUT succeeds; until then nothing
+   * is recorded against the app.
+   */
+  requestProjectAppPictureUploadUrl: UploadUrl;
+  /**
+   * Ask for a URL to upload a project logo directly to storage, without the
+   * bytes passing through this API.
+   *
+   * Validates content type, extension and size **before** issuing the URL, and
+   * binds the URL to a path derived from the project id. Call
+   * `confirmProjectPictureUpload` once the PUT succeeds; until then nothing
+   * is recorded against the project.
+   */
+  requestProjectPictureUploadUrl: UploadUrl;
+  /**
+   * Ask for a URL to upload another user's picture directly to storage.
+   *
+   * Unlike the `me` variants, the storage path here is derived from the **target**
+   * user rather than the caller, so the permission check is the only thing standing
+   * between a caller and another user's picture. It therefore runs before a URL is
+   * issued — the same scope and self-managed-identity rules `uploadUserPicture`
+   * applies — and again when the upload is confirmed.
+   */
+  requestUserPictureUploadUrl: UploadUrl;
   resendInvitationEmail: OrganizationInvitation;
   resendVerification: ResendVerificationResponse;
   resetPassword: ResetPasswordResponse;
@@ -1089,6 +1249,10 @@ export type Mutation = {
   uploadMyUserPicture: UploadUserPictureResult;
   /** Upload an organization logo and persist its public URL. */
   uploadOrganizationPicture: UploadOrganizationPictureResult;
+  /** Upload a project-app logo and persist its public URL. */
+  uploadProjectAppPicture: UploadProjectAppPictureResult;
+  /** Upload a project logo and persist its public URL. */
+  uploadProjectPicture: UploadProjectPictureResult;
   uploadUserPicture: UploadUserPictureResult;
   verifyEmail: VerifyEmailResponse;
   verifyMfa: MfaVerifyResponse;
@@ -1118,6 +1282,38 @@ export type MutationChangeMyPasswordArgs = {
   input: ChangeMyPasswordInput;
 };
 
+export type MutationClearProjectAppPictureArgs = {
+  input: ClearProjectAppPictureInput;
+};
+
+export type MutationClearProjectPictureArgs = {
+  input: ClearProjectPictureInput;
+};
+
+export type MutationConfirmMyProjectMembershipPictureUploadArgs = {
+  input: ConfirmMyProjectMembershipPictureUploadInput;
+};
+
+export type MutationConfirmMyUserPictureUploadArgs = {
+  input: ConfirmMyUserPictureUploadInput;
+};
+
+export type MutationConfirmOrganizationPictureUploadArgs = {
+  input: ConfirmOrganizationPictureUploadInput;
+};
+
+export type MutationConfirmProjectAppPictureUploadArgs = {
+  input: ConfirmProjectAppPictureUploadInput;
+};
+
+export type MutationConfirmProjectPictureUploadArgs = {
+  input: ConfirmProjectPictureUploadInput;
+};
+
+export type MutationConfirmUserPictureUploadArgs = {
+  input: ConfirmUserPictureUploadInput;
+};
+
 export type MutationCreateApiKeyArgs = {
   input: CreateApiKeyInput;
 };
@@ -1269,10 +1465,34 @@ export type MutationReplayWebhookDeliveryArgs = {
   input: ReplayWebhookDeliveryInput;
 };
 
+export type MutationRequestMyProjectMembershipPictureUploadUrlArgs = {
+  input: RequestMyProjectMembershipPictureUploadUrlInput;
+};
+
+export type MutationRequestMyUserPictureUploadUrlArgs = {
+  input: RequestMyUserPictureUploadUrlInput;
+};
+
+export type MutationRequestOrganizationPictureUploadUrlArgs = {
+  input: RequestOrganizationPictureUploadUrlInput;
+};
+
 export type MutationRequestPasswordResetArgs = {
   input: RequestPasswordResetInput;
 };
 
+export type MutationRequestProjectAppPictureUploadUrlArgs = {
+  input: RequestProjectAppPictureUploadUrlInput;
+};
+
+export type MutationRequestProjectPictureUploadUrlArgs = {
+  input: RequestProjectPictureUploadUrlInput;
+};
+
+export type MutationRequestUserPictureUploadUrlArgs = {
+  input: RequestUserPictureUploadUrlInput;
+};
+
 export type MutationResendInvitationEmailArgs = {
   id: Scalars['ID']['input'];
   scope: Scope;
@@ -1418,6 +1638,14 @@ export type MutationUploadOrganizationPictureArgs = {
   input: UploadOrganizationPictureInput;
 };
 
+export type MutationUploadProjectAppPictureArgs = {
+  input: UploadProjectAppPictureInput;
+};
+
+export type MutationUploadProjectPictureArgs = {
+  input: UploadProjectPictureInput;
+};
+
 export type MutationUploadUserPictureArgs = {
   input: UploadUserPictureInput;
 };
@@ -1853,8 +2081,13 @@ export type Project = Auditable & {
   name: Scalars['String']['output'];
   organizationTags?: Maybe<Array<Tag>>;
   permissions?: Maybe<Array<Permission>>;
+  pictureUrl?: Maybe<Scalars['String']['output']>;
+  /** Brand hex (`#RRGGBB`). Null uses Grant's default OAuth theme. */
+  primaryColor?: Maybe<Scalars['String']['output']>;
   resources?: Maybe<Array<Resource>>;
   roles?: Maybe<Array<Role>>;
+  /** Whether the OAuth help panel is shown. Null uses Grant's default (shown). */
+  showHelpPanel?: Maybe<Scalars['Boolean']['output']>;
   slug: Scalars['String']['output'];
   tags?: Maybe<Array<Tag>>;
   updatedAt: Scalars['Date']['output'];
@@ -1872,15 +2105,22 @@ export type ProjectApp = Auditable & {
   enabledProviders?: Maybe<Array<Scalars['String']['output']>>;
   id: Scalars['ID']['output'];
   name?: Maybe<Scalars['String']['output']>;
+  pictureUrl?: Maybe<Scalars['String']['output']>;
+  /** Brand hex (`#RRGGBB`). Null inherits the project color. */
+  primaryColor?: Maybe<Scalars['String']['output']>;
   project?: Maybe<Project>;
   projectId: Scalars['ID']['output'];
   redirectUris: Array<Scalars['String']['output']>;
   scopes?: Maybe<Array<Scalars['String']['output']>>;
+  /** Whether the OAuth help panel is shown. Null inherits the project setting. */
+  showHelpPanel?: Maybe<Scalars['Boolean']['output']>;
   /** Resolved role for signUpRoleId (for display). */
   signUpRole?: Maybe<Role>;
   /** Role assigned to users who sign up via this app. Required when allowSignUp is true. */
   signUpRoleId?: Maybe<Scalars['ID']['output']>;
   tags?: Maybe<Array<Tag>>;
+  /** Forced OAuth appearance (`light`, `dark`, `system`). Null keeps the visitor's Grant theme. */
+  themeMode?: Maybe<Scalars['String']['output']>;
   updatedAt: Scalars['Date']['output'];
 };
 
@@ -2762,6 +3002,40 @@ export type ReplayWebhookDeliveryInput = {
   scope: Scope;
 };
 
+export type RequestMyProjectMembershipPictureUploadUrlInput = {
+  /**
+   * Exact byte length the client will send. Validated against the upload policy
+   * before a URL is issued, and committed to by the URL itself.
+   */
+  contentLength: Scalars['Int']['input'];
+  contentType: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  projectId: Scalars['ID']['input'];
+};
+
+export type RequestMyUserPictureUploadUrlInput = {
+  /**
+   * Exact byte length the client will send. Validated against the upload policy
+   * before a URL is issued, and committed to by the URL itself — a body of any
+   * other length is refused by the store.
+   */
+  contentLength: Scalars['Int']['input'];
+  contentType: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+};
+
+export type RequestOrganizationPictureUploadUrlInput = {
+  /**
+   * Exact byte length the client will send. Validated against the upload policy
+   * before a URL is issued, and committed to by the URL itself.
+   */
+  contentLength: Scalars['Int']['input'];
+  contentType: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  organizationId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
 export type RequestPasswordResetInput = {
   email: Scalars['String']['input'];
 };
@@ -2773,6 +3047,42 @@ export type RequestPasswordResetResponse = {
   success: Scalars['Boolean']['output'];
 };
 
+export type RequestProjectAppPictureUploadUrlInput = {
+  /**
+   * Exact byte length the client will send. Validated against the upload policy
+   * before a URL is issued, and committed to by the URL itself.
+   */
+  contentLength: Scalars['Int']['input'];
+  contentType: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  projectAppId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type RequestProjectPictureUploadUrlInput = {
+  /**
+   * Exact byte length the client will send. Validated against the upload policy
+   * before a URL is issued, and committed to by the URL itself.
+   */
+  contentLength: Scalars['Int']['input'];
+  contentType: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  projectId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type RequestUserPictureUploadUrlInput = {
+  /**
+   * Exact byte length the client will send. Validated against the upload policy
+   * before a URL is issued, and committed to by the URL itself.
+   */
+  contentLength: Scalars['Int']['input'];
+  contentType: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  scope: Scope;
+  userId: Scalars['ID']['input'];
+};
+
 export type ResendVerificationInput = {
   email: Scalars['String']['input'];
 };
@@ -3319,15 +3629,21 @@ export type UpdateProjectAppInput = {
   enabledProviders?: InputMaybe<Array<Scalars['String']['input']>>;
   /** Display name for the app. */
   name?: InputMaybe<Scalars['String']['input']>;
+  /** Brand hex (`#RRGGBB`). Null inherits the project color. */
+  primaryColor?: InputMaybe<Scalars['String']['input']>;
   primaryTagId?: InputMaybe<Scalars['ID']['input']>;
   /** Allowed redirect URIs for OAuth callback. If provided, at least one required. */
   redirectUris?: InputMaybe<Array<Scalars['String']['input']>>;
   scope: Scope;
   /** Optional OAuth scopes the app may request. */
   scopes?: InputMaybe<Array<Scalars['String']['input']>>;
+  /** Whether the OAuth help panel is shown. Null inherits the project setting. */
+  showHelpPanel?: InputMaybe<Scalars['Boolean']['input']>;
   /** Role to assign to users who sign up via this app. Required when allowSignUp is true; must be a role in the project. */
   signUpRoleId?: InputMaybe<Scalars['ID']['input']>;
   tagIds?: InputMaybe<Array<Scalars['ID']['input']>>;
+  /** Forced OAuth appearance (`light`, `dark`, `system`). Null keeps the visitor's Grant theme. */
+  themeMode?: InputMaybe<Scalars['String']['input']>;
 };
 
 export type UpdateProjectAppTagInput = {
@@ -3339,8 +3655,12 @@ export type UpdateProjectAppTagInput = {
 export type UpdateProjectInput = {
   description?: InputMaybe<Scalars['String']['input']>;
   name?: InputMaybe<Scalars['String']['input']>;
+  /** Brand hex (`#RRGGBB`). Null resets to Grant's default. */
+  primaryColor?: InputMaybe<Scalars['String']['input']>;
   primaryTagId?: InputMaybe<Scalars['ID']['input']>;
   scope: Scope;
+  /** Whether the OAuth help panel is shown. Null resets to Grant's default (shown). */
+  showHelpPanel?: InputMaybe<Scalars['Boolean']['input']>;
   tagIds?: InputMaybe<Array<Scalars['ID']['input']>>;
 };
 
@@ -3458,6 +3778,67 @@ export type UploadOrganizationPictureResult = {
   url: Scalars['String']['output'];
 };
 
+export type UploadProjectAppPictureInput = {
+  contentType: Scalars['String']['input'];
+  file: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  projectAppId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type UploadProjectAppPictureResult = {
+  __typename?: 'UploadProjectAppPictureResult';
+  path: Scalars['String']['output'];
+  url: Scalars['String']['output'];
+};
+
+export type UploadProjectPictureInput = {
+  contentType: Scalars['String']['input'];
+  file: Scalars['String']['input'];
+  filename: Scalars['String']['input'];
+  projectId: Scalars['ID']['input'];
+  scope: Scope;
+};
+
+export type UploadProjectPictureResult = {
+  __typename?: 'UploadProjectPictureResult';
+  path: Scalars['String']['output'];
+  url: Scalars['String']['output'];
+};
+
+/**
+ * A bounded, time-limited URL the client writes bytes to directly.
+ *
+ * The URL is a bearer capability: it permits exactly `contentLength` bytes of
+ * exactly `contentType` at exactly one server-derived path, until `expiresAt`.
+ * It is not single-use and cannot be revoked, so it is short-lived by design.
+ */
+export type UploadUrl = {
+  __typename?: 'UploadUrl';
+  /** Instant after which the store refuses the URL. */
+  expiresAt: Scalars['Date']['output'];
+  /**
+   * Headers the client must set verbatim. `Content-Length` is deliberately absent:
+   * browsers set it from the body and forbid setting it by hand, even though the
+   * URL commits to the value.
+   */
+  headers: Array<UploadUrlHeader>;
+  /** HTTP method the client must use. Always PUT today. */
+  method: Scalars['String']['output'];
+  /**
+   * Absolute for object stores; application-relative for targets this API serves
+   * itself. Resolve it against the API origin before using it.
+   */
+  url: Scalars['String']['output'];
+};
+
+/** A header the client must send with the direct upload. */
+export type UploadUrlHeader = {
+  __typename?: 'UploadUrlHeader';
+  name: Scalars['String']['output'];
+  value: Scalars['String']['output'];
+};
+
 export type UploadUserPictureInput = {
   contentType: Scalars['String']['input'];
   file: Scalars['String']['input'];

package/src/index.ts

@@ -4,11 +4,14 @@ export * from './generated/graphql';
 export * from './generated/resolvers';
 export * from './generated/schema-types';
 export * from './notifications/notification.types';
-export type {
-  ProjectAppPublicInfo,
-  ProjectAppScopeInfo,
-  ProjectConsentInfo,
-  ProjectConsentInfoUser,
-  ProjectConsentRedirectResult,
+export {
+  isProjectOAuthThemeMode,
+  PROJECT_OAUTH_THEME_MODES,
+  type ProjectAppPublicInfo,
+  type ProjectAppScopeInfo,
+  type ProjectConsentInfo,
+  type ProjectConsentInfoUser,
+  type ProjectConsentRedirectResult,
+  type ProjectOAuthThemeMode,
 } from './project-oauth.types';
 export * from './webhooks/webhook.types';

package/src/operations/project-apps/clear-project-app-picture.graphql

@@ -0,0 +1,7 @@
+mutation ClearProjectAppPicture($input: ClearProjectAppPictureInput!) {
+  clearProjectAppPicture(input: $input) {
+    id
+    pictureUrl
+    updatedAt
+  }
+}

package/src/operations/project-apps/get-project-apps.graphql

@@ -21,6 +21,10 @@ query GetProjectApps(
       projectId
       clientId
       name
+      pictureUrl
+      primaryColor
+      showHelpPanel
+      themeMode
       redirectUris
       scopes
       enabledProviders
@@ -36,6 +40,9 @@ query GetProjectApps(
       project {
         id
         name
+        pictureUrl
+        primaryColor
+        showHelpPanel
       }
       tags {
         id

package/src/operations/project-apps/update-project-app.graphql

@@ -4,6 +4,10 @@ mutation UpdateProjectApp($id: ID!, $input: UpdateProjectAppInput!) {
     projectId
     clientId
     name
+    pictureUrl
+    primaryColor
+    showHelpPanel
+    themeMode
     redirectUris
     scopes
     enabledProviders
@@ -15,6 +19,9 @@ mutation UpdateProjectApp($id: ID!, $input: UpdateProjectAppInput!) {
     project {
       id
       name
+      pictureUrl
+      primaryColor
+      showHelpPanel
     }
   }
 }

package/src/operations/project-apps/upload-project-app-picture.graphql

@@ -0,0 +1,6 @@
+mutation UploadProjectAppPicture($input: UploadProjectAppPictureInput!) {
+  uploadProjectAppPicture(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/projects/clear-project-picture.graphql

@@ -0,0 +1,7 @@
+mutation ClearProjectPicture($input: ClearProjectPictureInput!) {
+  clearProjectPicture(input: $input) {
+    id
+    pictureUrl
+    updatedAt
+  }
+}

package/src/operations/projects/getProjects.graphql

@@ -21,6 +21,9 @@ query GetProjects(
       name
       slug
       description
+      pictureUrl
+      primaryColor
+      showHelpPanel
       createdAt
       updatedAt
       organizationTags {

package/src/operations/projects/updateProject.graphql

@@ -4,6 +4,9 @@ mutation UpdateProject($id: ID!, $input: UpdateProjectInput!) {
     name
     slug
     description
+    pictureUrl
+    primaryColor
+    showHelpPanel
     createdAt
     updatedAt
   }

package/src/operations/projects/upload-project-picture.graphql

@@ -0,0 +1,6 @@
+mutation UploadProjectPicture($input: UploadProjectPictureInput!) {
+  uploadProjectPicture(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/confirm-my-project-membership-picture-upload.graphql

@@ -0,0 +1,8 @@
+mutation ConfirmMyProjectMembershipPictureUpload(
+  $input: ConfirmMyProjectMembershipPictureUploadInput!
+) {
+  confirmMyProjectMembershipPictureUpload(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/confirm-my-user-picture-upload.graphql

@@ -0,0 +1,6 @@
+mutation ConfirmMyUserPictureUpload($input: ConfirmMyUserPictureUploadInput!) {
+  confirmMyUserPictureUpload(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/confirm-organization-picture-upload.graphql

@@ -0,0 +1,6 @@
+mutation ConfirmOrganizationPictureUpload($input: ConfirmOrganizationPictureUploadInput!) {
+  confirmOrganizationPictureUpload(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/confirm-project-app-picture-upload.graphql

@@ -0,0 +1,6 @@
+mutation ConfirmProjectAppPictureUpload($input: ConfirmProjectAppPictureUploadInput!) {
+  confirmProjectAppPictureUpload(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/confirm-project-picture-upload.graphql

@@ -0,0 +1,6 @@
+mutation ConfirmProjectPictureUpload($input: ConfirmProjectPictureUploadInput!) {
+  confirmProjectPictureUpload(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/confirm-user-picture-upload.graphql

@@ -0,0 +1,6 @@
+mutation ConfirmUserPictureUpload($input: ConfirmUserPictureUploadInput!) {
+  confirmUserPictureUpload(input: $input) {
+    url
+    path
+  }
+}

package/src/operations/uploads/request-my-project-membership-picture-upload-url.graphql

@@ -0,0 +1,13 @@
+mutation RequestMyProjectMembershipPictureUploadUrl(
+  $input: RequestMyProjectMembershipPictureUploadUrlInput!
+) {
+  requestMyProjectMembershipPictureUploadUrl(input: $input) {
+    url
+    method
+    expiresAt
+    headers {
+      name
+      value
+    }
+  }
+}