@objectstack/spec 0.6.1 → 0.7.1

package/dist/api/graphql.zod.js

@@ -0,0 +1,724 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mapFieldTypeToGraphQL = exports.GraphQLConfig = exports.GraphQLConfigSchema = exports.GraphQLPersistedQuerySchema = exports.GraphQLRateLimitSchema = exports.GraphQLQueryComplexitySchema = exports.GraphQLQueryDepthLimitSchema = exports.GraphQLDirectiveConfigSchema = exports.GraphQLDirectiveLocation = exports.GraphQLDataLoaderConfigSchema = exports.GraphQLResolverConfigSchema = exports.GraphQLSubscriptionConfigSchema = exports.GraphQLMutationConfigSchema = exports.GraphQLQueryConfigSchema = exports.GraphQLTypeConfigSchema = exports.GraphQLScalarType = void 0;
+const zod_1 = require("zod");
+/**
+ * GraphQL Protocol Support
+ *
+ * GraphQL is a query language for APIs and a runtime for executing those queries.
+ * It provides a complete and understandable description of the data in your API,
+ * gives clients the power to ask for exactly what they need, and enables powerful
+ * developer tools.
+ *
+ * ## Overview
+ *
+ * GraphQL provides:
+ * - Type-safe schema definition
+ * - Precise data fetching (no over/under-fetching)
+ * - Introspection and documentation
+ * - Real-time subscriptions
+ * - Batched queries with DataLoader
+ *
+ * ## Use Cases
+ *
+ * 1. **Modern API Development**
+ *    - Mobile and web applications
+ *    - Microservices federation
+ *    - Real-time dashboards
+ *
+ * 2. **Data Aggregation**
+ *    - Multi-source data integration
+ *    - Complex nested queries
+ *    - Efficient data loading
+ *
+ * 3. **Developer Experience**
+ *    - Self-documenting API
+ *    - Type safety and validation
+ *    - GraphQL playground
+ *
+ * @see https://graphql.org/
+ * @see https://spec.graphql.org/
+ *
+ * @example GraphQL Query
+ * ```graphql
+ * query GetCustomer($id: ID!) {
+ *   customer(id: $id) {
+ *     id
+ *     name
+ *     email
+ *     orders(limit: 10, status: "active") {
+ *       id
+ *       total
+ *       items {
+ *         product {
+ *           name
+ *           price
+ *         }
+ *       }
+ *     }
+ *   }
+ * }
+ * ```
+ *
+ * @example GraphQL Mutation
+ * ```graphql
+ * mutation CreateOrder($input: CreateOrderInput!) {
+ *   createOrder(input: $input) {
+ *     id
+ *     orderNumber
+ *     status
+ *   }
+ * }
+ * ```
+ */
+// ==========================================
+// 1. GraphQL Type System
+// ==========================================
+/**
+ * GraphQL Scalar Types
+ *
+ * Built-in scalar types in GraphQL plus custom scalars.
+ */
+exports.GraphQLScalarType = zod_1.z.enum([
+    // Built-in GraphQL Scalars
+    'ID',
+    'String',
+    'Int',
+    'Float',
+    'Boolean',
+    // Extended Scalars (common custom types)
+    'DateTime',
+    'Date',
+    'Time',
+    'JSON',
+    'JSONObject',
+    'Upload',
+    'URL',
+    'Email',
+    'PhoneNumber',
+    'Currency',
+    'Decimal',
+    'BigInt',
+    'Long',
+    'UUID',
+    'Base64',
+    'Void',
+]);
+/**
+ * GraphQL Type Configuration
+ *
+ * Configuration for generating GraphQL types from Object definitions.
+ */
+exports.GraphQLTypeConfigSchema = zod_1.z.object({
+    /** Type name in GraphQL schema */
+    name: zod_1.z.string().describe('GraphQL type name (PascalCase recommended)'),
+    /** Source Object name */
+    object: zod_1.z.string().describe('Source ObjectQL object name'),
+    /** Description for GraphQL schema documentation */
+    description: zod_1.z.string().optional().describe('Type description'),
+    /** Fields to include/exclude */
+    fields: zod_1.z.object({
+        /** Include only these fields (allow list) */
+        include: zod_1.z.array(zod_1.z.string()).optional().describe('Fields to include'),
+        /** Exclude these fields (deny list) */
+        exclude: zod_1.z.array(zod_1.z.string()).optional().describe('Fields to exclude (e.g., sensitive fields)'),
+        /** Custom field mappings */
+        mappings: zod_1.z.record(zod_1.z.object({
+            graphqlName: zod_1.z.string().optional().describe('Custom GraphQL field name'),
+            graphqlType: zod_1.z.string().optional().describe('Override GraphQL type'),
+            description: zod_1.z.string().optional().describe('Field description'),
+            deprecationReason: zod_1.z.string().optional().describe('Why field is deprecated'),
+            nullable: zod_1.z.boolean().optional().describe('Override nullable'),
+        })).optional().describe('Field-level customizations'),
+    }).optional().describe('Field configuration'),
+    /** Interfaces this type implements */
+    interfaces: zod_1.z.array(zod_1.z.string()).optional().describe('GraphQL interface names'),
+    /** Whether this is an interface definition */
+    isInterface: zod_1.z.boolean().optional().default(false).describe('Define as GraphQL interface'),
+    /** Custom directives */
+    directives: zod_1.z.array(zod_1.z.object({
+        name: zod_1.z.string().describe('Directive name'),
+        args: zod_1.z.record(zod_1.z.any()).optional().describe('Directive arguments'),
+    })).optional().describe('GraphQL directives'),
+});
+// ==========================================
+// 2. Query Generation Configuration
+// ==========================================
+/**
+ * GraphQL Query Configuration
+ *
+ * Configuration for auto-generating query fields from Objects.
+ */
+exports.GraphQLQueryConfigSchema = zod_1.z.object({
+    /** Query name */
+    name: zod_1.z.string().describe('Query field name (camelCase recommended)'),
+    /** Source Object */
+    object: zod_1.z.string().describe('Source ObjectQL object name'),
+    /** Query type: single record or list */
+    type: zod_1.z.enum(['get', 'list', 'search']).describe('Query type'),
+    /** Description */
+    description: zod_1.z.string().optional().describe('Query description'),
+    /** Input arguments */
+    args: zod_1.z.record(zod_1.z.object({
+        type: zod_1.z.string().describe('GraphQL type (e.g., "ID!", "String", "Int")'),
+        description: zod_1.z.string().optional().describe('Argument description'),
+        defaultValue: zod_1.z.any().optional().describe('Default value'),
+    })).optional().describe('Query arguments'),
+    /** Filtering configuration */
+    filtering: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Allow filtering'),
+        fields: zod_1.z.array(zod_1.z.string()).optional().describe('Filterable fields'),
+        operators: zod_1.z.array(zod_1.z.enum([
+            'eq', 'ne', 'gt', 'gte', 'lt', 'lte',
+            'in', 'notIn', 'contains', 'startsWith', 'endsWith',
+            'isNull', 'isNotNull',
+        ])).optional().describe('Allowed filter operators'),
+    }).optional().describe('Filtering capabilities'),
+    /** Sorting configuration */
+    sorting: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Allow sorting'),
+        fields: zod_1.z.array(zod_1.z.string()).optional().describe('Sortable fields'),
+        defaultSort: zod_1.z.object({
+            field: zod_1.z.string(),
+            direction: zod_1.z.enum(['ASC', 'DESC']),
+        }).optional().describe('Default sort order'),
+    }).optional().describe('Sorting capabilities'),
+    /** Pagination configuration */
+    pagination: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Enable pagination'),
+        type: zod_1.z.enum(['offset', 'cursor', 'relay']).default('offset').describe('Pagination style'),
+        defaultLimit: zod_1.z.number().int().min(1).default(20).describe('Default page size'),
+        maxLimit: zod_1.z.number().int().min(1).default(100).describe('Maximum page size'),
+    }).optional().describe('Pagination configuration'),
+    /** Field selection */
+    fields: zod_1.z.object({
+        /** Always include these fields */
+        required: zod_1.z.array(zod_1.z.string()).optional().describe('Required fields (always returned)'),
+        /** Allow selecting these fields */
+        selectable: zod_1.z.array(zod_1.z.string()).optional().describe('Selectable fields'),
+    }).optional().describe('Field selection configuration'),
+    /** Authorization */
+    authRequired: zod_1.z.boolean().default(true).describe('Require authentication'),
+    permissions: zod_1.z.array(zod_1.z.string()).optional().describe('Required permissions'),
+    /** Caching */
+    cache: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(false).describe('Enable caching'),
+        ttl: zod_1.z.number().int().min(0).optional().describe('Cache TTL in seconds'),
+        key: zod_1.z.string().optional().describe('Cache key template'),
+    }).optional().describe('Query caching'),
+});
+// ==========================================
+// 3. Mutation Generation Configuration
+// ==========================================
+/**
+ * GraphQL Mutation Configuration
+ *
+ * Configuration for auto-generating mutation fields from Objects.
+ */
+exports.GraphQLMutationConfigSchema = zod_1.z.object({
+    /** Mutation name */
+    name: zod_1.z.string().describe('Mutation field name (camelCase recommended)'),
+    /** Source Object */
+    object: zod_1.z.string().describe('Source ObjectQL object name'),
+    /** Mutation type */
+    type: zod_1.z.enum(['create', 'update', 'delete', 'upsert', 'custom']).describe('Mutation type'),
+    /** Description */
+    description: zod_1.z.string().optional().describe('Mutation description'),
+    /** Input type configuration */
+    input: zod_1.z.object({
+        /** Input type name */
+        typeName: zod_1.z.string().optional().describe('Custom input type name'),
+        /** Fields to include in input */
+        fields: zod_1.z.object({
+            include: zod_1.z.array(zod_1.z.string()).optional().describe('Fields to include'),
+            exclude: zod_1.z.array(zod_1.z.string()).optional().describe('Fields to exclude'),
+            required: zod_1.z.array(zod_1.z.string()).optional().describe('Required input fields'),
+        }).optional().describe('Input field configuration'),
+        /** Validation */
+        validation: zod_1.z.object({
+            enabled: zod_1.z.boolean().default(true).describe('Enable input validation'),
+            rules: zod_1.z.array(zod_1.z.string()).optional().describe('Custom validation rules'),
+        }).optional().describe('Input validation'),
+    }).optional().describe('Input configuration'),
+    /** Return type configuration */
+    output: zod_1.z.object({
+        /** Type of output */
+        type: zod_1.z.enum(['object', 'payload', 'boolean', 'custom']).default('object').describe('Output type'),
+        /** Include success/error envelope */
+        includeEnvelope: zod_1.z.boolean().optional().default(false).describe('Wrap in success/error payload'),
+        /** Custom output type */
+        customType: zod_1.z.string().optional().describe('Custom output type name'),
+    }).optional().describe('Output configuration'),
+    /** Transaction handling */
+    transaction: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Use database transaction'),
+        isolationLevel: zod_1.z.enum(['read_uncommitted', 'read_committed', 'repeatable_read', 'serializable']).optional().describe('Transaction isolation level'),
+    }).optional().describe('Transaction configuration'),
+    /** Authorization */
+    authRequired: zod_1.z.boolean().default(true).describe('Require authentication'),
+    permissions: zod_1.z.array(zod_1.z.string()).optional().describe('Required permissions'),
+    /** Hooks */
+    hooks: zod_1.z.object({
+        before: zod_1.z.array(zod_1.z.string()).optional().describe('Pre-mutation hooks'),
+        after: zod_1.z.array(zod_1.z.string()).optional().describe('Post-mutation hooks'),
+    }).optional().describe('Lifecycle hooks'),
+});
+// ==========================================
+// 4. Subscription Configuration
+// ==========================================
+/**
+ * GraphQL Subscription Configuration
+ *
+ * Configuration for real-time GraphQL subscriptions.
+ */
+exports.GraphQLSubscriptionConfigSchema = zod_1.z.object({
+    /** Subscription name */
+    name: zod_1.z.string().describe('Subscription field name (camelCase recommended)'),
+    /** Source Object */
+    object: zod_1.z.string().describe('Source ObjectQL object name'),
+    /** Subscription trigger events */
+    events: zod_1.z.array(zod_1.z.enum(['created', 'updated', 'deleted', 'custom'])).describe('Events to subscribe to'),
+    /** Description */
+    description: zod_1.z.string().optional().describe('Subscription description'),
+    /** Filtering */
+    filter: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Allow filtering subscriptions'),
+        fields: zod_1.z.array(zod_1.z.string()).optional().describe('Filterable fields'),
+    }).optional().describe('Subscription filtering'),
+    /** Payload configuration */
+    payload: zod_1.z.object({
+        /** Include the modified entity */
+        includeEntity: zod_1.z.boolean().default(true).describe('Include entity in payload'),
+        /** Include previous values (for updates) */
+        includePreviousValues: zod_1.z.boolean().optional().default(false).describe('Include previous field values'),
+        /** Include mutation metadata */
+        includeMeta: zod_1.z.boolean().optional().default(true).describe('Include metadata (timestamp, user, etc.)'),
+    }).optional().describe('Payload configuration'),
+    /** Authorization */
+    authRequired: zod_1.z.boolean().default(true).describe('Require authentication'),
+    permissions: zod_1.z.array(zod_1.z.string()).optional().describe('Required permissions'),
+    /** Rate limiting for subscriptions */
+    rateLimit: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Enable rate limiting'),
+        maxSubscriptionsPerUser: zod_1.z.number().int().min(1).default(10).describe('Max concurrent subscriptions per user'),
+        throttleMs: zod_1.z.number().int().min(0).optional().describe('Throttle interval in milliseconds'),
+    }).optional().describe('Subscription rate limiting'),
+});
+// ==========================================
+// 5. Resolver Configuration
+// ==========================================
+/**
+ * GraphQL Resolver Configuration
+ *
+ * Configuration for custom resolver logic.
+ */
+exports.GraphQLResolverConfigSchema = zod_1.z.object({
+    /** Field path (e.g., "Query.users", "Mutation.createUser") */
+    path: zod_1.z.string().describe('Resolver path (Type.field)'),
+    /** Resolver implementation type */
+    type: zod_1.z.enum(['datasource', 'computed', 'script', 'proxy']).describe('Resolver implementation type'),
+    /** Implementation details */
+    implementation: zod_1.z.object({
+        /** For datasource type */
+        datasource: zod_1.z.string().optional().describe('Datasource ID'),
+        query: zod_1.z.string().optional().describe('Query/SQL to execute'),
+        /** For computed type */
+        expression: zod_1.z.string().optional().describe('Computation expression'),
+        dependencies: zod_1.z.array(zod_1.z.string()).optional().describe('Dependent fields'),
+        /** For script type */
+        script: zod_1.z.string().optional().describe('Script ID or inline code'),
+        /** For proxy type */
+        url: zod_1.z.string().optional().describe('Proxy URL'),
+        method: zod_1.z.enum(['GET', 'POST', 'PUT', 'DELETE']).optional().describe('HTTP method'),
+    }).optional().describe('Implementation configuration'),
+    /** Caching */
+    cache: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(false).describe('Enable resolver caching'),
+        ttl: zod_1.z.number().int().min(0).optional().describe('Cache TTL in seconds'),
+        keyArgs: zod_1.z.array(zod_1.z.string()).optional().describe('Arguments to include in cache key'),
+    }).optional().describe('Resolver caching'),
+});
+// ==========================================
+// 6. DataLoader Configuration
+// ==========================================
+/**
+ * GraphQL DataLoader Configuration
+ *
+ * Configuration for batching and caching with DataLoader pattern.
+ * Prevents N+1 query problems in GraphQL.
+ */
+exports.GraphQLDataLoaderConfigSchema = zod_1.z.object({
+    /** Loader name */
+    name: zod_1.z.string().describe('DataLoader name'),
+    /** Source Object or datasource */
+    source: zod_1.z.string().describe('Source object or datasource'),
+    /** Batch function configuration */
+    batchFunction: zod_1.z.object({
+        /** Type of batch operation */
+        type: zod_1.z.enum(['findByIds', 'query', 'script', 'custom']).describe('Batch function type'),
+        /** For findByIds */
+        keyField: zod_1.z.string().optional().describe('Field to batch on (e.g., "id")'),
+        /** For query */
+        query: zod_1.z.string().optional().describe('Query template'),
+        /** For script */
+        script: zod_1.z.string().optional().describe('Script ID'),
+        /** Maximum batch size */
+        maxBatchSize: zod_1.z.number().int().min(1).optional().default(100).describe('Maximum batch size'),
+    }).describe('Batch function configuration'),
+    /** Caching */
+    cache: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Enable per-request caching'),
+        /** Cache key function */
+        keyFn: zod_1.z.string().optional().describe('Custom cache key function'),
+    }).optional().describe('DataLoader caching'),
+    /** Options */
+    options: zod_1.z.object({
+        /** Batch multiple requests in single tick */
+        batch: zod_1.z.boolean().default(true).describe('Enable batching'),
+        /** Cache loaded values */
+        cache: zod_1.z.boolean().default(true).describe('Enable caching'),
+        /** Maximum cache size */
+        maxCacheSize: zod_1.z.number().int().min(0).optional().describe('Max cache entries'),
+    }).optional().describe('DataLoader options'),
+});
+// ==========================================
+// 7. GraphQL Directive Schema
+// ==========================================
+/**
+ * GraphQL Directive Location
+ *
+ * Where a directive can be used in the schema.
+ */
+exports.GraphQLDirectiveLocation = zod_1.z.enum([
+    // Executable Directive Locations
+    'QUERY',
+    'MUTATION',
+    'SUBSCRIPTION',
+    'FIELD',
+    'FRAGMENT_DEFINITION',
+    'FRAGMENT_SPREAD',
+    'INLINE_FRAGMENT',
+    'VARIABLE_DEFINITION',
+    // Type System Directive Locations
+    'SCHEMA',
+    'SCALAR',
+    'OBJECT',
+    'FIELD_DEFINITION',
+    'ARGUMENT_DEFINITION',
+    'INTERFACE',
+    'UNION',
+    'ENUM',
+    'ENUM_VALUE',
+    'INPUT_OBJECT',
+    'INPUT_FIELD_DEFINITION',
+]);
+/**
+ * GraphQL Directive Configuration
+ *
+ * Custom directives for schema metadata and behavior.
+ */
+exports.GraphQLDirectiveConfigSchema = zod_1.z.object({
+    /** Directive name */
+    name: zod_1.z.string().regex(/^[a-z][a-zA-Z0-9]*$/).describe('Directive name (camelCase)'),
+    /** Description */
+    description: zod_1.z.string().optional().describe('Directive description'),
+    /** Where directive can be used */
+    locations: zod_1.z.array(exports.GraphQLDirectiveLocation).describe('Directive locations'),
+    /** Arguments */
+    args: zod_1.z.record(zod_1.z.object({
+        type: zod_1.z.string().describe('Argument type'),
+        description: zod_1.z.string().optional().describe('Argument description'),
+        defaultValue: zod_1.z.any().optional().describe('Default value'),
+    })).optional().describe('Directive arguments'),
+    /** Is repeatable */
+    repeatable: zod_1.z.boolean().optional().default(false).describe('Can be applied multiple times'),
+    /** Implementation */
+    implementation: zod_1.z.object({
+        /** Directive behavior type */
+        type: zod_1.z.enum(['auth', 'validation', 'transform', 'cache', 'deprecation', 'custom']).describe('Directive type'),
+        /** Handler function */
+        handler: zod_1.z.string().optional().describe('Handler function name or script'),
+    }).optional().describe('Directive implementation'),
+});
+// ==========================================
+// 8. GraphQL Security - Query Depth Limiting
+// ==========================================
+/**
+ * Query Depth Limiting Configuration
+ *
+ * Prevents deeply nested queries that could cause performance issues.
+ */
+exports.GraphQLQueryDepthLimitSchema = zod_1.z.object({
+    /** Enable depth limiting */
+    enabled: zod_1.z.boolean().default(true).describe('Enable query depth limiting'),
+    /** Maximum allowed depth */
+    maxDepth: zod_1.z.number().int().min(1).default(10).describe('Maximum query depth'),
+    /** Fields to ignore in depth calculation */
+    ignoreFields: zod_1.z.array(zod_1.z.string()).optional().describe('Fields excluded from depth calculation'),
+    /** Callback on depth exceeded */
+    onDepthExceeded: zod_1.z.enum(['reject', 'log', 'warn']).default('reject').describe('Action when depth exceeded'),
+    /** Custom error message */
+    errorMessage: zod_1.z.string().optional().describe('Custom error message for depth violations'),
+});
+// ==========================================
+// 9. GraphQL Security - Query Complexity
+// ==========================================
+/**
+ * Query Complexity Calculation Configuration
+ *
+ * Assigns complexity scores to fields and limits total query complexity.
+ * Prevents expensive queries from overloading the server.
+ */
+exports.GraphQLQueryComplexitySchema = zod_1.z.object({
+    /** Enable complexity limiting */
+    enabled: zod_1.z.boolean().default(true).describe('Enable query complexity limiting'),
+    /** Maximum allowed complexity score */
+    maxComplexity: zod_1.z.number().int().min(1).default(1000).describe('Maximum query complexity'),
+    /** Default field complexity */
+    defaultFieldComplexity: zod_1.z.number().int().min(0).default(1).describe('Default complexity per field'),
+    /** Field-specific complexity scores */
+    fieldComplexity: zod_1.z.record(zod_1.z.union([
+        zod_1.z.number().int().min(0),
+        zod_1.z.object({
+            /** Base complexity */
+            base: zod_1.z.number().int().min(0).describe('Base complexity'),
+            /** Multiplier based on arguments */
+            multiplier: zod_1.z.string().optional().describe('Argument multiplier (e.g., "limit")'),
+            /** Custom complexity calculation */
+            calculator: zod_1.z.string().optional().describe('Custom calculator function'),
+        }),
+    ])).optional().describe('Per-field complexity configuration'),
+    /** List multiplier */
+    listMultiplier: zod_1.z.number().min(0).default(10).describe('Multiplier for list fields'),
+    /** Callback on complexity exceeded */
+    onComplexityExceeded: zod_1.z.enum(['reject', 'log', 'warn']).default('reject').describe('Action when complexity exceeded'),
+    /** Custom error message */
+    errorMessage: zod_1.z.string().optional().describe('Custom error message for complexity violations'),
+});
+// ==========================================
+// 10. GraphQL Security - Rate Limiting
+// ==========================================
+/**
+ * GraphQL Rate Limiting Configuration
+ *
+ * Rate limiting for GraphQL operations.
+ */
+exports.GraphQLRateLimitSchema = zod_1.z.object({
+    /** Enable rate limiting */
+    enabled: zod_1.z.boolean().default(true).describe('Enable rate limiting'),
+    /** Rate limit strategy */
+    strategy: zod_1.z.enum(['token_bucket', 'fixed_window', 'sliding_window', 'cost_based']).default('token_bucket').describe('Rate limiting strategy'),
+    /** Global rate limits */
+    global: zod_1.z.object({
+        /** Requests per time window */
+        maxRequests: zod_1.z.number().int().min(1).default(1000).describe('Maximum requests per window'),
+        /** Time window in milliseconds */
+        windowMs: zod_1.z.number().int().min(1000).default(60000).describe('Time window in milliseconds'),
+    }).optional().describe('Global rate limits'),
+    /** Per-user rate limits */
+    perUser: zod_1.z.object({
+        /** Requests per time window */
+        maxRequests: zod_1.z.number().int().min(1).default(100).describe('Maximum requests per user per window'),
+        /** Time window in milliseconds */
+        windowMs: zod_1.z.number().int().min(1000).default(60000).describe('Time window in milliseconds'),
+    }).optional().describe('Per-user rate limits'),
+    /** Cost-based rate limiting */
+    costBased: zod_1.z.object({
+        /** Enable cost-based limiting */
+        enabled: zod_1.z.boolean().default(false).describe('Enable cost-based rate limiting'),
+        /** Maximum cost per time window */
+        maxCost: zod_1.z.number().int().min(1).default(10000).describe('Maximum cost per window'),
+        /** Time window in milliseconds */
+        windowMs: zod_1.z.number().int().min(1000).default(60000).describe('Time window in milliseconds'),
+        /** Use complexity as cost */
+        useComplexityAsCost: zod_1.z.boolean().default(true).describe('Use query complexity as cost'),
+    }).optional().describe('Cost-based rate limiting'),
+    /** Operation-specific limits */
+    operations: zod_1.z.record(zod_1.z.object({
+        maxRequests: zod_1.z.number().int().min(1).describe('Max requests for this operation'),
+        windowMs: zod_1.z.number().int().min(1000).describe('Time window'),
+    })).optional().describe('Per-operation rate limits'),
+    /** Callback on limit exceeded */
+    onLimitExceeded: zod_1.z.enum(['reject', 'queue', 'log']).default('reject').describe('Action when rate limit exceeded'),
+    /** Custom error message */
+    errorMessage: zod_1.z.string().optional().describe('Custom error message for rate limit violations'),
+    /** Headers to include in response */
+    includeHeaders: zod_1.z.boolean().default(true).describe('Include rate limit headers in response'),
+});
+// ==========================================
+// 11. GraphQL Security - Persisted Queries
+// ==========================================
+/**
+ * Persisted Queries Configuration
+ *
+ * Only allow pre-registered queries to execute (allow list approach).
+ * Improves security and performance.
+ */
+exports.GraphQLPersistedQuerySchema = zod_1.z.object({
+    /** Enable persisted queries */
+    enabled: zod_1.z.boolean().default(false).describe('Enable persisted queries'),
+    /** Enforcement mode */
+    mode: zod_1.z.enum(['optional', 'required']).default('optional').describe('Persisted query mode (optional: allow both, required: only persisted)'),
+    /** Query store configuration */
+    store: zod_1.z.object({
+        /** Store type */
+        type: zod_1.z.enum(['memory', 'redis', 'database', 'file']).default('memory').describe('Query store type'),
+        /** Store connection string */
+        connection: zod_1.z.string().optional().describe('Store connection string or path'),
+        /** TTL for cached queries */
+        ttl: zod_1.z.number().int().min(0).optional().describe('TTL in seconds for stored queries'),
+    }).optional().describe('Query store configuration'),
+    /** Automatic Persisted Queries (APQ) */
+    apq: zod_1.z.object({
+        /** Enable APQ */
+        enabled: zod_1.z.boolean().default(true).describe('Enable Automatic Persisted Queries'),
+        /** Hash algorithm */
+        hashAlgorithm: zod_1.z.enum(['sha256', 'sha1', 'md5']).default('sha256').describe('Hash algorithm for query IDs'),
+        /** Cache control */
+        cache: zod_1.z.object({
+            /** Cache TTL */
+            ttl: zod_1.z.number().int().min(0).default(3600).describe('Cache TTL in seconds'),
+            /** Max cache size */
+            maxSize: zod_1.z.number().int().min(1).optional().describe('Maximum number of cached queries'),
+        }).optional().describe('APQ cache configuration'),
+    }).optional().describe('Automatic Persisted Queries configuration'),
+    /** Query allow list */
+    allowlist: zod_1.z.object({
+        /** Enable allow list mode */
+        enabled: zod_1.z.boolean().default(false).describe('Enable query allow list (reject queries not in list)'),
+        /** Allowed query IDs */
+        queries: zod_1.z.array(zod_1.z.object({
+            id: zod_1.z.string().describe('Query ID or hash'),
+            operation: zod_1.z.string().optional().describe('Operation name'),
+            query: zod_1.z.string().optional().describe('Query string'),
+        })).optional().describe('Allowed queries'),
+        /** External allow list source */
+        source: zod_1.z.string().optional().describe('External allow list source (file path or URL)'),
+    }).optional().describe('Query allow list configuration'),
+    /** Security */
+    security: zod_1.z.object({
+        /** Maximum query size */
+        maxQuerySize: zod_1.z.number().int().min(1).optional().describe('Maximum query string size in bytes'),
+        /** Reject introspection in production */
+        rejectIntrospection: zod_1.z.boolean().default(false).describe('Reject introspection queries'),
+    }).optional().describe('Security configuration'),
+});
+// ==========================================
+// 12. Complete GraphQL Configuration
+// ==========================================
+/**
+ * Complete GraphQL Configuration
+ *
+ * Root configuration for GraphQL API generation and security.
+ */
+exports.GraphQLConfigSchema = zod_1.z.object({
+    /** Enable GraphQL API */
+    enabled: zod_1.z.boolean().default(true).describe('Enable GraphQL API'),
+    /** GraphQL endpoint path */
+    path: zod_1.z.string().default('/graphql').describe('GraphQL endpoint path'),
+    /** GraphQL Playground */
+    playground: zod_1.z.object({
+        enabled: zod_1.z.boolean().default(true).describe('Enable GraphQL Playground'),
+        path: zod_1.z.string().default('/playground').describe('Playground path'),
+    }).optional().describe('GraphQL Playground configuration'),
+    /** Schema generation */
+    schema: zod_1.z.object({
+        /** Auto-generate types from Objects */
+        autoGenerateTypes: zod_1.z.boolean().default(true).describe('Auto-generate types from Objects'),
+        /** Type configurations */
+        types: zod_1.z.array(exports.GraphQLTypeConfigSchema).optional().describe('Type configurations'),
+        /** Query configurations */
+        queries: zod_1.z.array(exports.GraphQLQueryConfigSchema).optional().describe('Query configurations'),
+        /** Mutation configurations */
+        mutations: zod_1.z.array(exports.GraphQLMutationConfigSchema).optional().describe('Mutation configurations'),
+        /** Subscription configurations */
+        subscriptions: zod_1.z.array(exports.GraphQLSubscriptionConfigSchema).optional().describe('Subscription configurations'),
+        /** Custom resolvers */
+        resolvers: zod_1.z.array(exports.GraphQLResolverConfigSchema).optional().describe('Custom resolver configurations'),
+        /** Custom directives */
+        directives: zod_1.z.array(exports.GraphQLDirectiveConfigSchema).optional().describe('Custom directive configurations'),
+    }).optional().describe('Schema generation configuration'),
+    /** DataLoader configurations */
+    dataLoaders: zod_1.z.array(exports.GraphQLDataLoaderConfigSchema).optional().describe('DataLoader configurations'),
+    /** Security configuration */
+    security: zod_1.z.object({
+        /** Query depth limiting */
+        depthLimit: exports.GraphQLQueryDepthLimitSchema.optional().describe('Query depth limiting'),
+        /** Query complexity */
+        complexity: exports.GraphQLQueryComplexitySchema.optional().describe('Query complexity calculation'),
+        /** Rate limiting */
+        rateLimit: exports.GraphQLRateLimitSchema.optional().describe('Rate limiting'),
+        /** Persisted queries */
+        persistedQueries: exports.GraphQLPersistedQuerySchema.optional().describe('Persisted queries'),
+    }).optional().describe('Security configuration'),
+});
+exports.GraphQLConfig = Object.assign(exports.GraphQLConfigSchema, {
+    create: (config) => config,
+});
+// ==========================================
+// Helper Functions
+// ==========================================
+/**
+ * Helper to map ObjectQL field type to GraphQL scalar type
+ */
+const mapFieldTypeToGraphQL = (fieldType) => {
+    const mapping = {
+        // Core Text
+        'text': 'String',
+        'textarea': 'String',
+        'email': 'Email',
+        'url': 'URL',
+        'phone': 'PhoneNumber',
+        'password': 'String',
+        // Rich Content
+        'markdown': 'String',
+        'html': 'String',
+        'richtext': 'String',
+        // Numbers
+        'number': 'Float',
+        'currency': 'Currency',
+        'percent': 'Float',
+        // Date & Time
+        'date': 'Date',
+        'datetime': 'DateTime',
+        'time': 'Time',
+        // Logic
+        'boolean': 'Boolean',
+        'toggle': 'Boolean',
+        // Selection
+        'select': 'String',
+        'multiselect': '[String]',
+        'radio': 'String',
+        'checkboxes': '[String]',
+        // Relational
+        'lookup': 'ID',
+        'master_detail': 'ID',
+        'tree': 'ID',
+        // Media
+        'image': 'URL',
+        'file': 'URL',
+        'avatar': 'URL',
+        'video': 'URL',
+        'audio': 'URL',
+        // Calculated
+        'formula': 'String',
+        'summary': 'Float',
+        'autonumber': 'String',
+        // Enhanced Types
+        'location': 'JSONObject',
+        'address': 'JSONObject',
+        'code': 'String',
+        'json': 'JSON',
+        'color': 'String',
+        'rating': 'Float',
+        'slider': 'Float',
+        'signature': 'String',
+        'qrcode': 'String',
+        'progress': 'Float',
+        'tags': '[String]',
+        // AI/ML
+        'vector': '[Float]',
+    };
+    return mapping[fieldType] || 'String';
+};
+exports.mapFieldTypeToGraphQL = mapFieldTypeToGraphQL;