npm - @tailor-platform/erp-kit - Versions diffs - 0.7.0 → 0.8.0 - Mend

@tailor-platform/erp-kit 0.7.0 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (635) hide show

package/templates/scaffold/app/frontend/src/graphql/generated/schema.graphql CHANGED Viewed

@@ -2,347 +2,168 @@
 directive @tag(name: String!) on SCALAR | OBJECT | FIELD_DEFINITION | ARGUMENT_DEFINITION | INTERFACE | UNION | ENUM | ENUM_VALUE | INPUT_OBJECT | INPUT_FIELD_DEFINITION
 """"""
-type Query {
-  """
-  Get the current user `User`. This field is only available to authorized users.
-  """
-  me: User
-  """"""
-  _users(query: _UserQueryInput, first: Int, after: String): _UserConnection
-  """"""
-  _user(id: ID!): _User
-  """
-  getMyProfile resolver
-    Returns:
-    Current user profile
-  """
-  getMyProfile: GetMyProfileOutput!
-  """role(GetList)"""
-  roles(query: RoleQueryInput, first: Int, after: String, last: Int, before: String, order: [RoleOrderInput]): RoleConnection!
-  """role(GetOne)"""
-  role(id: ID!): Role
-  """userRole(GetOne)"""
-  userRole(id: ID!): UserRole
-  """userRoleBy(GetOneBy)"""
-  userRoleBy(id: ID, userRoleUniqueIdx: UserRoleUniqueIdx): UserRole
-  """permission(GetList)"""
-  permissions(query: PermissionQueryInput, first: Int, after: String, last: Int, before: String, order: [PermissionOrderInput]): PermissionConnection!
-  """userBy(GetOneBy)"""
-  userBy(
-    """"""
-    id: ID
-    """User email address (unique identifier)"""
-    email: String
-  ): User
-  """roleBy(GetOneBy)"""
-  roleBy(
-    """"""
-    id: ID
-    """Role name (unique identifier)"""
-    name: String
-  ): Role
-  """auditEvent(GetOne)"""
-  auditEvent(id: ID!): AuditEvent
-  """auditEvent(GetList)"""
-  auditEvents(query: AuditEventQueryInput, first: Int, after: String, last: Int, before: String, order: [AuditEventOrderInput]): AuditEventConnection!
-  """user(GetList)"""
-  users(query: UserQueryInput, first: Int, after: String, last: Int, before: String, order: [UserOrderInput]): UserConnection!
-  """rolePermission(GetOne)"""
-  rolePermission(id: ID!): RolePermission
-  """user(GetOne)"""
-  user(id: ID!): User
-  """rolePermission(GetList)"""
-  rolePermissions(query: RolePermissionQueryInput, first: Int, after: String, last: Int, before: String, order: [RolePermissionOrderInput]): RolePermissionConnection!
-  """userRole(GetList)"""
-  userRoles(before: String, order: [UserRoleOrderInput], query: UserRoleQueryInput, first: Int, after: String, last: Int): UserRoleConnection!
-  """rolePermissionBy(GetOneBy)"""
-  rolePermissionBy(id: ID, rolePermissionUniqueIdx: RolePermissionUniqueIdx): RolePermission
-  """permission(GetOne)"""
-  permission(id: ID!): Permission
-  """permissionBy(GetOneBy)"""
-  permissionBy(
-    """"""
-    id: ID
-    """Permission key in resource:action format (e.g., orders:read)"""
-    key: String
-  ): Permission
-}
-""""""
-type User {
-  """Document id"""
-  id: ID!
-  """Flattened permission keys from all assigned roles"""
-  permissions: [String!]
-  """User display name"""
-  name: String!
-  """User email address (unique identifier)"""
-  email: String!
-  """Create time"""
-  created: DateTime @deprecated
-  """Record creation timestamp"""
-  createdAt: DateTime!
+enum AuditEntryOrderFieldEnum {
   """"""
-  userRoles(first: Int, after: String, last: Int, before: String, order: [UserRoleOrderInput], query: UserRoleQueryInput): UserRoleConnection!
-  """User status"""
-  status: UserStatus!
-  """created by"""
-  createdByID: ID @deprecated
-  """Update time"""
-  updated: DateTime @deprecated
-  """updated by"""
-  updatedByID: ID @deprecated
-  """Record last update timestamp"""
-  updatedAt: DateTime
-}
+  createdAt
-""""""
-type _UserConnection {
   """"""
-  edges: [_UserEdge]
+  entityType
   """"""
-  pageInfo: _PageInfo
+  operationType
   """"""
-  totalCount: Int
-}
-"""
-The `DateTime` scalar type represents a DateTime. The DateTime is serialized as an RFC 3339 quoted string
-"""
-scalar DateTime
+  entityId
-""""""
-input _CreateUserInput {
   """"""
-  password: String
+  sessionId
   """"""
-  disabled: Boolean
+  updatedAt
   """"""
-  name: String!
-}
+  userAgent
-""""""
-input _UserQueryInput {
   """"""
-  ids: [ID!]
+  actorId
   """"""
-  names: [String!]
-}
+  actorType
-""""""
-type _PageInfo {
   """"""
-  startCursor: String
+  requestId
   """"""
-  endCursor: String
+  onBehalfOf
   """"""
-  hasNextPage: Boolean!
+  ipAddress
   """"""
-  hasPreviousPage: Boolean!
-}
-"""Input for sending a password reset email to a user."""
-input _SendPasswordResetEmailInput {
-  """The ID of the user to send the password reset email to."""
-  userId: ID!
-  """The URI to redirect to after the password reset is complete."""
-  redirectUri: String!
+  timestamp
 }
 """"""
-type _UserEdge {
+input UserRoleOrderInput {
   """"""
-  node: _User
+  field: UserRoleOrderFieldEnum!
   """"""
-  cursor: String
+  direction: OrderDirectionEnum
 }
-""""""
-type _User {
-  """"""
-  createdAt: DateTime!
+"""changeDetail(Connection)"""
+type ChangeDetailConnection {
   """"""
-  disabled: Boolean!
+  edges: [ChangeDetailEdge!]!
   """"""
-  id: ID!
+  pageInfo: PageInfo!
   """"""
-  name: String!
+  total: Int
 }
 """"""
-type Mutation {
+input StringArrayFilter {
   """"""
-  _sendPasswordResetEmail(input: _SendPasswordResetEmailInput): Boolean
+  len: ArrayLengthFilter
   """"""
-  _createUser(input: _CreateUserInput): _User
+  all: StringFilter
   """"""
-  _updateUser(input: _UpdateUserInput): _User
+  has: StringFilter
   """"""
-  _deleteUser(id: ID!): Boolean
-  """
-  createUser resolver
-    Returns:
-    Create user response
-  """
-  createUser(
-    """User name"""
-    name: String!
-    """User email"""
-    email: String!
-  ): CreateUserOutput!
+  exists: Boolean
 }
-""""""
-input _UpdateUserInput {
-  """"""
-  password: String
-  """"""
-  disabled: Boolean
+"""policyFieldRule(Connection)"""
+type PolicyFieldRuleConnection {
   """"""
-  clearPassword: Boolean
+  total: Int
   """"""
-  id: ID!
+  edges: [PolicyFieldRuleEdge!]!
   """"""
-  name: String
+  pageInfo: PageInfo!
 }
-""""""
-input UUIDFilter {
-  """"""
-  in: [ID!]
+"""role(Connection)"""
+type RoleConnection {
   """"""
-  nin: [ID!]
+  total: Int
   """"""
-  eq: ID
+  edges: [RoleEdge!]!
   """"""
-  ne: ID
+  pageInfo: PageInfo!
 }
-""""""
-input StringFilter {
+"""auditEntry(QueryInput)"""
+input AuditEntryQueryInput {
   """"""
-  in: [String!]
+  actorType: StringFilter
   """"""
-  nin: [String!]
+  requestId: StringFilter
   """"""
-  contains: String
+  sessionId: StringFilter
   """"""
-  notContains: String
+  correlationId: UUIDFilter
   """"""
-  hasPrefix: String
+  onBehalfOf: StringFilter
   """"""
-  hasSuffix: String
+  actorId: StringFilter
   """"""
-  notHasPrefix: String
+  not: [AuditEntryQueryInput!]
   """"""
-  notHasSuffix: String
+  ipAddress: StringFilter
   """"""
-  regex: String
+  entityId: StringFilter
   """"""
-  eq: String
+  timestamp: DateFilter
   """"""
-  ne: String
-}
+  userAgent: StringFilter
-""""""
-input DateFilter {
   """"""
-  gte: Date
+  or: [AuditEntryQueryInput!]
   """"""
-  gt: Date
+  eventId: UUIDFilter
   """"""
-  lte: Date
+  updatedAt: DatetimeFilter
   """"""
-  lt: Date
+  operationType: StringFilter
   """"""
-  eq: Date
+  id: UUIDFilter
   """"""
-  ne: Date
+  companyId: UUIDFilter
   """"""
-  in: [Date]
+  entityType: StringFilter
   """"""
-  nin: [Date]
+  and: [AuditEntryQueryInput!]
   """"""
-  between: DateBetweenFilter
+  createdAt: DatetimeFilter
 }
 """"""
@@ -354,439 +175,472 @@ input DateBetweenFilter {
   max: Date
 }
-""""""
-input TimeFilter {
+"""auditableEntity(Edge)"""
+type AuditableEntityEdge {
   """"""
-  gte: Time
+  node: AuditableEntity!
   """"""
-  gt: Time
+  cursor: String!
+}
+""""""
+enum OrderDirectionEnum {
   """"""
-  lte: Time
+  Desc
   """"""
-  lt: Time
+  Asc
+}
+"""permission(Edge)"""
+type PermissionEdge {
   """"""
-  eq: Time
+  cursor: String!
   """"""
-  ne: Time
+  node: Permission!
+}
+""""""
+input ArrayLengthFilter {
   """"""
-  in: [Time]
+  gte: Int
   """"""
-  nin: [Time]
+  lt: Int
   """"""
-  between: TimeBetweenFilter
-}
+  lte: Int
-""""""
-input TimeBetweenFilter {
   """"""
-  min: Time
+  eq: Int
   """"""
-  max: Time
-}
+  ne: Int
-"""The `Date` scalar type represents a date in format `YYYY-MM-DD`."""
-scalar Date
+  """"""
+  gt: Int
+}
-"""
-The Time scalar type represents a Time. The Time is serialized as an `hh:mm` quoted string
-"""
-scalar Time
+"""user(Edge)"""
+type UserEdge {
+  """"""
+  node: User!
-"""Create user response"""
-type CreateUserOutput {
-  """Result message"""
-  message: String!
+  """"""
+  cursor: String!
 }
-"""Current user profile"""
-type GetMyProfileOutput {
-  """User ID"""
-  id: String!
+"""policyFieldRule(Edge)"""
+type PolicyFieldRuleEdge {
+  """"""
+  node: PolicyFieldRule!
-  """User name"""
-  name: String!
+  """"""
+  cursor: String!
+}
-  """User email"""
-  email: String!
+"""auditPolicy(Connection)"""
+type AuditPolicyConnection {
+  """"""
+  edges: [AuditPolicyEdge!]!
-  """User status"""
-  status: String!
+  """"""
+  pageInfo: PageInfo!
+  """"""
+  total: Int
 }
-""""""
-type UserRole {
-  """Create time"""
-  created: DateTime @deprecated
+"""
+A new scalar called FieldSet is a custom scalar type that is used to represent a set of fields.
+"""
+scalar FieldSet
-  """updated by"""
-  updatedByID: ID @deprecated
+""""""
+type Query {
+  """auditEntry(GetList)"""
+  auditEntries(query: AuditEntryQueryInput, first: Int, after: String, last: Int, before: String, order: [AuditEntryOrderInput]): AuditEntryConnection!
-  """Record last update timestamp"""
-  updatedAt: DateTime
+  """auditPolicy(GetList)"""
+  auditPolicies(before: String, order: [AuditPolicyOrderInput], query: AuditPolicyQueryInput, first: Int, after: String, last: Int): AuditPolicyConnection!
-  """created by"""
-  createdByID: ID @deprecated
+  """rolePermission(GetList)"""
+  rolePermissions(query: RolePermissionQueryInput, first: Int, after: String, last: Int, before: String, order: [RolePermissionOrderInput]): RolePermissionConnection!
-  """"""
-  role: Role
+  """permission(GetOne)"""
+  permission(id: ID!): Permission
-  """"""
-  user: User
+  """auditableEntity(GetList)"""
+  auditableEntities(order: [AuditableEntityOrderInput], query: AuditableEntityQueryInput, first: Int, after: String, last: Int, before: String): AuditableEntityConnection!
-  """Update time"""
-  updated: DateTime @deprecated
+  """userRole(GetOne)"""
+  userRole(id: ID!): UserRole
-  """Record creation timestamp"""
-  createdAt: DateTime!
+  """auditableEntityBy(GetOneBy)"""
+  auditableEntityBy(
+    """"""
+    id: ID
-  """Document id"""
-  id: ID!
+    """Unique entity name registered for audit tracking"""
+    entityName: String
+  ): AuditableEntity
-  """Foreign key to Role"""
-  roleId: ID!
+  """roleBy(GetOneBy)"""
+  roleBy(
+    """"""
+    id: ID
-  """Foreign key to User"""
-  userId: ID!
-}
+    """Role name (unique identifier)"""
+    name: String
+  ): Role
-""""""
-type Role {
-  """"""
-  rolePermissions(query: RolePermissionQueryInput, first: Int, after: String, last: Int, before: String, order: [RolePermissionOrderInput]): RolePermissionConnection!
+  """user(GetOne)"""
+  user(id: ID!): User
-  """Record last update timestamp"""
-  updatedAt: DateTime
+  """auditEntry(GetOne)"""
+  auditEntry(id: ID!): AuditEntry
-  """Document id"""
-  id: ID!
+  """userRole(GetList)"""
+  userRoles(first: Int, after: String, last: Int, before: String, order: [UserRoleOrderInput], query: UserRoleQueryInput): UserRoleConnection!
-  """Create time"""
-  created: DateTime @deprecated
+  """changeDetail(GetOne)"""
+  changeDetail(id: ID!): ChangeDetail
-  """"""
-  userRoles(query: UserRoleQueryInput, first: Int, after: String, last: Int, before: String, order: [UserRoleOrderInput]): UserRoleConnection!
+  """changeDetail(GetList)"""
+  changeDetails(before: String, order: [ChangeDetailOrderInput], query: ChangeDetailQueryInput, first: Int, after: String, last: Int): ChangeDetailConnection!
-  """created by"""
-  createdByID: ID @deprecated
+  """permission(GetList)"""
+  permissions(query: PermissionQueryInput, first: Int, after: String, last: Int, before: String, order: [PermissionOrderInput]): PermissionConnection!
-  """updated by"""
-  updatedByID: ID @deprecated
+  """user(GetList)"""
+  users(last: Int, before: String, order: [UserOrderInput], query: UserQueryInput, first: Int, after: String): UserConnection!
-  """Role name (unique identifier)"""
-  name: String!
+  """policyFieldRule(GetOne)"""
+  policyFieldRule(id: ID!): PolicyFieldRule
-  """Update time"""
-  updated: DateTime @deprecated
+  """rolePermissionBy(GetOneBy)"""
+  rolePermissionBy(id: ID, rolePermissionUniqueIdx: RolePermissionUniqueIdx): RolePermission
-  """Record creation timestamp"""
-  createdAt: DateTime!
+  """userBy(GetOneBy)"""
+  userBy(
+    """"""
+    id: ID
-  """Optional description of what this role represents"""
-  description: String
-}
+    """User email address (unique identifier)"""
+    email: String
+  ): User
-""""""
-type RolePermission {
-  """Foreign key to Permission"""
-  permissionId: ID!
+  """permissionBy(GetOneBy)"""
+  permissionBy(
+    """Permission key in resource:action format (e.g., orders:read)"""
+    key: String
-  """Record last update timestamp"""
-  updatedAt: DateTime
+    """"""
+    id: ID
+  ): Permission
-  """Document id"""
-  id: ID!
+  """auditEntryBy(GetOneBy)"""
+  auditEntryBy(
+    """"""
+    id: ID
-  """created by"""
-  createdByID: ID @deprecated
+    """Globally unique event ID for idempotency"""
+    eventId: ID
+  ): AuditEntry
-  """"""
-  permission: Permission
+  """auditPolicy(GetOne)"""
+  auditPolicy(id: ID!): AuditPolicy
-  """updated by"""
-  updatedByID: ID @deprecated
+  """role(GetList)"""
+  roles(query: RoleQueryInput, first: Int, after: String, last: Int, before: String, order: [RoleOrderInput]): RoleConnection!
-  """"""
-  role: Role
+  """userRoleBy(GetOneBy)"""
+  userRoleBy(id: ID, userRoleUniqueIdx: UserRoleUniqueIdx): UserRole
-  """Foreign key to Role"""
-  roleId: ID!
+  """role(GetOne)"""
+  role(id: ID!): Role
-  """Record creation timestamp"""
-  createdAt: DateTime!
+  """policyFieldRule(GetList)"""
+  policyFieldRules(after: String, last: Int, before: String, order: [PolicyFieldRuleOrderInput], query: PolicyFieldRuleQueryInput, first: Int): PolicyFieldRuleConnection!
-  """Update time"""
-  updated: DateTime @deprecated
+  """rolePermission(GetOne)"""
+  rolePermission(id: ID!): RolePermission
-  """Create time"""
-  created: DateTime @deprecated
-}
+  """auditableEntity(GetOne)"""
+  auditableEntity(id: ID!): AuditableEntity
-"""role(Connection)"""
-type RoleConnection {
   """"""
-  edges: [RoleEdge!]!
+  _users(first: Int, after: String, query: _UserQueryInput): _UserConnection
   """"""
-  pageInfo: PageInfo!
+  _user(id: ID!): _User
   """"""
-  total: Int
+  _userBy(id: ID, name: String): _User
+  """
+  Get the current user `User`. This field is only available to authorized users.
+  """
+  me: User
 }
 """"""
-input UserOrderInput {
-  """"""
-  field: UserOrderFieldEnum!
+enum ChangeDetailOrderFieldEnum {
   """"""
-  direction: OrderDirectionEnum
-}
+  oldValue
-""""""
-input StringArrayFilter {
   """"""
-  len: ArrayLengthFilter
+  createdAt
   """"""
-  all: StringFilter
+  fieldName
   """"""
-  has: StringFilter
+  updatedAt
   """"""
-  exists: Boolean
+  newValue
 }
-"""role(QueryInput)"""
-input RoleQueryInput {
+"""permission(Connection)"""
+type PermissionConnection {
   """"""
-  description: StringFilter
+  edges: [PermissionEdge!]!
   """"""
-  name: StringFilter
+  pageInfo: PageInfo!
   """"""
-  and: [RoleQueryInput!]
+  total: Int
+}
+"""
+The `DateTime` scalar type represents a DateTime. The DateTime is serialized as an RFC 3339 quoted string
+"""
+scalar DateTime
+"""rolePermission(QueryInput)"""
+input RolePermissionQueryInput {
   """"""
-  or: [RoleQueryInput!]
+  or: [RolePermissionQueryInput!]
   """"""
-  not: [RoleQueryInput!]
+  not: [RolePermissionQueryInput!]
   """"""
   id: UUIDFilter
+  """"""
+  roleId: UUIDFilter
   """"""
   createdAt: DatetimeFilter
   """"""
   updatedAt: DatetimeFilter
-}
-""""""
-enum UserOrderFieldEnum {
   """"""
-  email
+  permissionId: UUIDFilter
   """"""
-  status
+  and: [RolePermissionQueryInput!]
+}
+""""""
+input DatetimeFilter {
   """"""
-  createdAt
+  in: [DateTime!]
   """"""
-  updatedAt
+  gt: DateTime
   """"""
-  name
-}
+  lte: DateTime
-""""""
-input PermissionOrderInput {
   """"""
-  field: PermissionOrderFieldEnum!
+  ne: DateTime
   """"""
-  direction: OrderDirectionEnum
-}
+  nin: [DateTime!]
-"""userRole(QueryInput)"""
-input UserRoleQueryInput {
   """"""
-  or: [UserRoleQueryInput!]
+  between: DatetimeBetweenFilter
   """"""
-  not: [UserRoleQueryInput!]
+  eq: DateTime
   """"""
-  id: UUIDFilter
+  gte: DateTime
   """"""
-  roleId: UUIDFilter
+  lt: DateTime
+}
+"""userRole(Edge)"""
+type UserRoleEdge {
   """"""
-  userId: UUIDFilter
+  node: UserRole!
   """"""
-  createdAt: DatetimeFilter
+  cursor: String!
+}
+"""auditEntry(Edge)"""
+type AuditEntryEdge {
   """"""
-  updatedAt: DatetimeFilter
+  node: AuditEntry!
   """"""
-  and: [UserRoleQueryInput!]
+  cursor: String!
 }
 """"""
-enum UserStatus {
-  """"""
-  PENDING
+type AuditableEntity {
+  """updated by"""
+  updatedByID: ID @deprecated
-  """"""
-  ACTIVE
+  """Document id"""
+  id: ID!
-  """"""
-  INACTIVE
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """Unique entity name registered for audit tracking"""
+  entityName: String!
+  """Entity scope: COMPANY_BOUND or GLOBAL"""
+  entityScope: String!
+  """Create time"""
+  created: DateTime @deprecated
+  """Record last update timestamp"""
+  updatedAt: DateTime
+  """
+  JSON-serialized array of field definitions ({fieldName, fieldType?}) eligible for audit capture
+  """
+  auditableFields: String!
+  """Update time"""
+  updated: DateTime @deprecated
+  """created by"""
+  createdByID: ID @deprecated
 }
 """"""
-enum RoleOrderFieldEnum {
+input DatetimeBetweenFilter {
   """"""
-  createdAt
+  max: DateTime
   """"""
-  updatedAt
+  min: DateTime
+}
+"""rolePermission(Edge)"""
+type RolePermissionEdge {
   """"""
-  description
+  node: RolePermission!
   """"""
-  name
+  cursor: String!
 }
-""""""
-enum AuditEventEventType {
+"""userRole(QueryInput)"""
+input UserRoleQueryInput {
   """"""
-  PERMISSION_REVOKED
+  roleId: UUIDFilter
   """"""
-  USER_CREATED
+  userId: UUIDFilter
   """"""
-  USER_ACTIVATED
+  createdAt: DatetimeFilter
   """"""
-  USER_DEACTIVATED
+  updatedAt: DatetimeFilter
   """"""
-  USER_REACTIVATED
+  and: [UserRoleQueryInput!]
   """"""
-  ROLE_ASSIGNED
+  or: [UserRoleQueryInput!]
   """"""
-  ROLE_REVOKED
+  not: [UserRoleQueryInput!]
   """"""
-  PERMISSION_ASSIGNED
+  id: UUIDFilter
 }
 """"""
-input DatetimeBetweenFilter {
-  """"""
-  min: DateTime
-  """"""
-  max: DateTime
-}
-"""Information about pagination in a connection"""
-type PageInfo {
+type User {
   """"""
-  endCursor: String
+  userRoles(first: Int, after: String, last: Int, before: String, order: [UserRoleOrderInput], query: UserRoleQueryInput): UserRoleConnection!
-  """"""
-  hasNextPage: Boolean!
+  """created by"""
+  createdByID: ID @deprecated
-  """"""
-  hasPreviousPage: Boolean!
+  """updated by"""
+  updatedByID: ID @deprecated
-  """"""
-  startCursor: String
-}
+  """User email address (unique identifier)"""
+  email: String!
-"""permission(QueryInput)"""
-input PermissionQueryInput {
-  """"""
-  updatedAt: DatetimeFilter
+  """Record last update timestamp"""
+  updatedAt: DateTime
-  """"""
-  description: StringFilter
+  """User status"""
+  status: UserStatus!
-  """"""
-  key: StringFilter
+  """Record creation timestamp"""
+  createdAt: DateTime!
-  """"""
-  and: [PermissionQueryInput!]
+  """Update time"""
+  updated: DateTime @deprecated
-  """"""
-  or: [PermissionQueryInput!]
+  """Create time"""
+  created: DateTime @deprecated
-  """"""
-  not: [PermissionQueryInput!]
+  """Flattened permission keys from all assigned roles"""
+  permissions: [String!]
-  """"""
-  id: UUIDFilter
+  """Document id"""
+  id: ID!
-  """"""
-  createdAt: DatetimeFilter
+  """User display name"""
+  name: String!
 }
 """"""
-enum PermissionOrderFieldEnum {
+enum UserRoleOrderFieldEnum {
   """"""
   createdAt
   """"""
   updatedAt
-  """"""
-  description
-  """"""
-  key
 }
-""""""
-input UserRoleOrderInput {
-  """"""
-  field: UserRoleOrderFieldEnum!
+"""userRole(Connection)"""
+type UserRoleConnection {
   """"""
-  direction: OrderDirectionEnum
-}
+  total: Int
-"""permission(Edge)"""
-type PermissionEdge {
   """"""
-  node: Permission!
+  edges: [UserRoleEdge!]!
   """"""
-  cursor: String!
+  pageInfo: PageInfo!
 }
 """"""
 input UserStatusEnumFilter {
+  """"""
+  eq: UserStatus
   """"""
   ne: UserStatus
@@ -795,242 +649,324 @@ input UserStatusEnumFilter {
   """"""
   nin: [UserStatus!]
+}
-  """"""
-  eq: UserStatus
+""""""
+input RolePermissionUniqueIdx {
+  """Foreign key to Role"""
+  roleId: ID!
+  """Foreign key to Permission"""
+  permissionId: ID!
 }
-"""rolePermission(QueryInput)"""
-input RolePermissionQueryInput {
+"""auditPolicy(Edge)"""
+type AuditPolicyEdge {
   """"""
-  permissionId: UUIDFilter
+  node: AuditPolicy!
   """"""
-  roleId: UUIDFilter
+  cursor: String!
+}
+"""auditableEntity(Connection)"""
+type AuditableEntityConnection {
   """"""
-  createdAt: DatetimeFilter
+  edges: [AuditableEntityEdge!]!
   """"""
-  and: [RolePermissionQueryInput!]
+  pageInfo: PageInfo!
   """"""
-  or: [RolePermissionQueryInput!]
+  total: Int
+}
+""""""
+enum UserStatus {
   """"""
-  not: [RolePermissionQueryInput!]
+  PENDING
   """"""
-  id: UUIDFilter
+  ACTIVE
   """"""
-  updatedAt: DatetimeFilter
+  INACTIVE
 }
-""""""
-enum RolePermissionOrderFieldEnum {
+"""changeDetail(Edge)"""
+type ChangeDetailEdge {
   """"""
-  createdAt
+  node: ChangeDetail!
   """"""
-  updatedAt
+  cursor: String!
 }
+"""The `Date` scalar type represents a date in format `YYYY-MM-DD`."""
+scalar Date
 """"""
-input RolePermissionOrderInput {
+input UserOrderInput {
   """"""
-  field: RolePermissionOrderFieldEnum!
+  field: UserOrderFieldEnum!
   """"""
   direction: OrderDirectionEnum
 }
 """"""
-input RoleOrderInput {
+enum UserOrderFieldEnum {
   """"""
-  field: RoleOrderFieldEnum!
+  email
   """"""
-  direction: OrderDirectionEnum
-}
+  status
-""""""
-enum AuditEventOrderFieldEnum {
   """"""
-  payload
+  createdAt
   """"""
-  createdAt
+  updatedAt
   """"""
-  eventType
+  name
+}
+""""""
+input AuditableEntityOrderInput {
   """"""
-  updatedAt
+  field: AuditableEntityOrderFieldEnum!
   """"""
-  targetType
+  direction: OrderDirectionEnum
 }
-"""auditEvent(Edge)"""
-type AuditEventEdge {
+"""auditableEntity(QueryInput)"""
+input AuditableEntityQueryInput {
   """"""
-  cursor: String!
+  not: [AuditableEntityQueryInput!]
   """"""
-  node: AuditEvent!
-}
+  id: UUIDFilter
-""""""
-enum UserRoleOrderFieldEnum {
   """"""
-  createdAt
+  updatedAt: DatetimeFilter
   """"""
-  updatedAt
-}
+  entityName: StringFilter
-"""userRole(Edge)"""
-type UserRoleEdge {
   """"""
-  node: UserRole!
+  entityScope: StringFilter
   """"""
-  cursor: String!
-}
+  and: [AuditableEntityQueryInput!]
-"""rolePermission(Connection)"""
-type RolePermissionConnection {
   """"""
-  edges: [RolePermissionEdge!]!
+  createdAt: DatetimeFilter
   """"""
-  pageInfo: PageInfo!
+  auditableFields: StringFilter
   """"""
-  total: Int
+  or: [AuditableEntityQueryInput!]
 }
-"""role(Edge)"""
-type RoleEdge {
+"""Information about pagination in a connection"""
+type PageInfo {
   """"""
-  node: Role!
+  hasPreviousPage: Boolean!
   """"""
-  cursor: String!
+  startCursor: String
+  """"""
+  endCursor: String
+  """"""
+  hasNextPage: Boolean!
 }
 """"""
-type AuditEvent {
-  """Record creation timestamp"""
-  createdAt: DateTime!
+type AuditEntry {
+  """Type name of the audited entity"""
+  entityType: String!
-  """updated by"""
-  updatedByID: ID @deprecated
+  """created by"""
+  createdByID: ID @deprecated
-  """Document id"""
-  id: ID!
+  """Actor session ID metadata"""
+  sessionId: String
-  """Type of audit event"""
-  eventType: AuditEventEventType!
+  """Actor identifier"""
+  actorId: String!
-  """Type of the affected entity (User, Role, Permission)"""
-  targetType: String
+  """Record last update timestamp"""
+  updatedAt: DateTime
-  """Create time"""
-  created: DateTime @deprecated
+  """Optional correlation ID grouping related events"""
+  correlationId: ID
+  """Actor type: USER, SYSTEM, or SERVICE"""
+  actorType: String!
+  """Foreign key to Company; null for global entities"""
+  companyId: ID
+  """System-generated timestamp at ingestion time"""
+  timestamp: Date!
+  """Actor IP address metadata"""
+  ipAddress: String
+  """Operation type: CREATE, UPDATE, or DELETE"""
+  operationType: String!
+  """Globally unique event ID for idempotency"""
+  eventId: ID!
+  """Delegated user identity when acting on behalf of another"""
+  onBehalfOf: String
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """ID of the audited entity"""
+  entityId: String!
+  """updated by"""
+  updatedByID: ID @deprecated
+  """Request ID metadata"""
+  requestId: String
+  """Document id"""
+  id: ID!
   """Update time"""
   updated: DateTime @deprecated
-  """ID of the user who performed the action"""
-  actorId: ID!
+  """"""
+  changeDetails(before: String, order: [ChangeDetailOrderInput], query: ChangeDetailQueryInput, first: Int, after: String, last: Int): ChangeDetailConnection!
+  """Create time"""
+  created: DateTime @deprecated
+  """Actor user agent metadata"""
+  userAgent: String
+}
-  """JSON payload with additional event details"""
-  payload: String
+""""""
+type ChangeDetail {
+  """Update time"""
+  updated: DateTime @deprecated
-  """ID of the affected entity"""
-  targetId: ID
+  """Create time"""
+  created: DateTime @deprecated
   """created by"""
   createdByID: ID @deprecated
+  """updated by"""
+  updatedByID: ID @deprecated
+  """Document id"""
+  id: ID!
+  """"""
+  auditEntry: AuditEntry
+  """Foreign key to parent AuditEntry"""
+  auditEntryId: ID!
+  """Name of the field that changed"""
+  fieldName: String!
   """Record last update timestamp"""
   updatedAt: DateTime
+  """Previous value (serialized string); null for CREATE operations"""
+  oldValue: String
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """New value (serialized string); null for DELETE operations"""
+  newValue: String
 }
-"""auditEvent(Connection)"""
-type AuditEventConnection {
+"""user(QueryInput)"""
+input UserQueryInput {
   """"""
-  edges: [AuditEventEdge!]!
+  id: UUIDFilter
   """"""
-  pageInfo: PageInfo!
+  name: StringFilter
   """"""
-  total: Int
-}
+  email: StringFilter
-""""""
-input ArrayLengthFilter {
   """"""
-  lte: Int
+  status: UserStatusEnumFilter
   """"""
-  eq: Int
+  or: [UserQueryInput!]
   """"""
-  ne: Int
+  not: [UserQueryInput!]
   """"""
-  gt: Int
+  createdAt: DatetimeFilter
   """"""
-  gte: Int
+  updatedAt: DatetimeFilter
   """"""
-  lt: Int
+  permissions: StringArrayFilter
+  """"""
+  and: [UserQueryInput!]
 }
-"""user(Edge)"""
-type UserEdge {
+""""""
+enum AuditPolicyOrderFieldEnum {
   """"""
-  node: User!
+  updatedAt
   """"""
-  cursor: String!
-}
+  entityName
-"""permission(Connection)"""
-type PermissionConnection {
   """"""
-  edges: [PermissionEdge!]!
+  operationType
   """"""
-  pageInfo: PageInfo!
+  status
   """"""
-  total: Int
+  createdAt
 }
-"""
-A new scalar called FieldSet is a custom scalar type that is used to represent a set of fields.
-"""
-scalar FieldSet
 """"""
-input RolePermissionUniqueIdx {
-  """Foreign key to Role"""
-  roleId: ID!
+enum RolePermissionOrderFieldEnum {
+  """"""
+  createdAt
-  """Foreign key to Permission"""
-  permissionId: ID!
+  """"""
+  updatedAt
 }
-"""user(Connection)"""
-type UserConnection {
+"""role(Edge)"""
+type RoleEdge {
   """"""
-  edges: [UserEdge!]!
+  cursor: String!
+  """"""
+  node: Role!
+}
+"""auditEntry(Connection)"""
+type AuditEntryConnection {
+  """"""
+  edges: [AuditEntryEdge!]!
   """"""
   pageInfo: PageInfo!
@@ -1040,96 +976,78 @@ type UserConnection {
 }
 """"""
-input UserRoleUniqueIdx {
-  """Foreign key to User"""
-  userId: ID!
+input RolePermissionOrderInput {
+  """"""
+  field: RolePermissionOrderFieldEnum!
-  """Foreign key to Role"""
-  roleId: ID!
+  """"""
+  direction: OrderDirectionEnum
 }
 """"""
 type Permission {
+  """Create time"""
+  created: DateTime @deprecated
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """"""
+  rolePermissions(first: Int, after: String, last: Int, before: String, order: [RolePermissionOrderInput], query: RolePermissionQueryInput): RolePermissionConnection!
   """created by"""
   createdByID: ID @deprecated
+  """updated by"""
+  updatedByID: ID @deprecated
   """Optional description of what this permission grants"""
   description: String
-  """"""
-  rolePermissions(order: [RolePermissionOrderInput], query: RolePermissionQueryInput, first: Int, after: String, last: Int, before: String): RolePermissionConnection!
+  """Permission key in resource:action format (e.g., orders:read)"""
+  key: String!
   """Record last update timestamp"""
   updatedAt: DateTime
-  """Update time"""
-  updated: DateTime @deprecated
-  """Permission key in resource:action format (e.g., orders:read)"""
-  key: String!
   """Document id"""
   id: ID!
-  """Record creation timestamp"""
-  createdAt: DateTime!
-  """updated by"""
-  updatedByID: ID @deprecated
-  """Create time"""
-  created: DateTime @deprecated
+  """Update time"""
+  updated: DateTime @deprecated
 }
 """"""
-input AuditEventEventTypeEnumFilter {
-  """"""
-  eq: AuditEventEventType
-  """"""
-  ne: AuditEventEventType
+input PermissionOrderInput {
   """"""
-  in: [AuditEventEventType!]
+  field: PermissionOrderFieldEnum!
   """"""
-  nin: [AuditEventEventType!]
+  direction: OrderDirectionEnum
 }
-""""""
-input DatetimeFilter {
-  """"""
-  nin: [DateTime!]
-  """"""
-  eq: DateTime
-  """"""
-  lte: DateTime
+"""auditPolicy(QueryInput)"""
+input AuditPolicyQueryInput {
   """"""
-  lt: DateTime
+  companyId: UUIDFilter
   """"""
-  gte: DateTime
+  operationType: StringFilter
   """"""
-  in: [DateTime!]
+  or: [AuditPolicyQueryInput!]
   """"""
-  between: DatetimeBetweenFilter
+  not: [AuditPolicyQueryInput!]
   """"""
-  ne: DateTime
+  entityName: StringFilter
   """"""
-  gt: DateTime
-}
+  and: [AuditPolicyQueryInput!]
-"""auditEvent(QueryInput)"""
-input AuditEventQueryInput {
   """"""
-  and: [AuditEventQueryInput!]
+  id: UUIDFilter
   """"""
   createdAt: DatetimeFilter
@@ -1138,98 +1056,903 @@ input AuditEventQueryInput {
   updatedAt: DatetimeFilter
   """"""
-  or: [AuditEventQueryInput!]
+  status: StringFilter
+}
+""""""
+enum PermissionOrderFieldEnum {
   """"""
-  not: [AuditEventQueryInput!]
+  updatedAt
   """"""
-  eventType: AuditEventEventTypeEnumFilter
+  description
   """"""
-  actorId: UUIDFilter
+  key
   """"""
-  payload: StringFilter
+  createdAt
+}
+""""""
+enum RoleOrderFieldEnum {
   """"""
-  id: UUIDFilter
+  name
   """"""
-  targetId: UUIDFilter
+  createdAt
   """"""
-  targetType: StringFilter
-}
+  updatedAt
-"""user(QueryInput)"""
-input UserQueryInput {
   """"""
-  updatedAt: DatetimeFilter
+  description
+}
-  """"""
-  or: [UserQueryInput!]
+""""""
+type PolicyFieldRule {
+  """Create time"""
+  created: DateTime @deprecated
-  """"""
-  not: [UserQueryInput!]
+  """updated by"""
+  updatedByID: ID @deprecated
-  """"""
-  id: UUIDFilter
+  """Record creation timestamp"""
+  createdAt: DateTime!
   """"""
-  name: StringFilter
+  auditPolicy: AuditPolicy
-  """"""
-  email: StringFilter
+  """Sensitivity mode: CAPTURE, MASK, HASH, or EXCLUDE"""
+  sensitivityMode: String!
-  """"""
-  status: UserStatusEnumFilter
+  """Document id"""
+  id: ID!
-  """"""
-  permissions: StringArrayFilter
+  """Field name to audit"""
+  fieldName: String!
-  """"""
-  and: [UserQueryInput!]
+  """Foreign key to parent AuditPolicy"""
+  auditPolicyId: ID!
-  """"""
-  createdAt: DatetimeFilter
-}
+  """Update time"""
+  updated: DateTime @deprecated
-""""""
-enum OrderDirectionEnum {
-  """"""
-  Desc
+  """created by"""
+  createdByID: ID @deprecated
-  """"""
-  Asc
+  """Record last update timestamp"""
+  updatedAt: DateTime
 }
 """"""
-input AuditEventOrderInput {
-  """"""
-  field: AuditEventOrderFieldEnum!
+type AuditPolicy {
+  """Update time"""
+  updated: DateTime @deprecated
-  """"""
-  direction: OrderDirectionEnum
-}
+  """updated by"""
+  updatedByID: ID @deprecated
-"""userRole(Connection)"""
-type UserRoleConnection {
   """"""
-  total: Int
+  policyFieldRules(query: PolicyFieldRuleQueryInput, first: Int, after: String, last: Int, before: String, order: [PolicyFieldRuleOrderInput]): PolicyFieldRuleConnection!
-  """"""
-  edges: [UserRoleEdge!]!
+  """Target entity name for audit tracking"""
+  entityName: String!
-  """"""
-  pageInfo: PageInfo!
-}
+  """Create time"""
+  created: DateTime @deprecated
+  """Policy lifecycle status: DRAFT, ACTIVE, INACTIVE"""
+  status: String!
+  """Record last update timestamp"""
+  updatedAt: DateTime
+  """Document id"""
+  id: ID!
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """Foreign key to Company; null for global entities"""
+  companyId: ID
+  """Operation type: CREATE, UPDATE, or DELETE"""
+  operationType: String!
+  """created by"""
+  createdByID: ID @deprecated
+}
+""""""
+type Company {
+  """Document id"""
+  id: ID!
+  """Create time"""
+  created: DateTime @deprecated
+  """Update time"""
+  updated: DateTime @deprecated
+  """created by"""
+  createdByID: ID @deprecated
+  """updated by"""
+  updatedByID: ID @deprecated
+}
+""""""
+enum AuditableEntityOrderFieldEnum {
+  """"""
+  updatedAt
+  """"""
+  entityName
+  """"""
+  entityScope
+  """"""
+  auditableFields
+  """"""
+  createdAt
+}
+""""""
+type Role {
+  """created by"""
+  createdByID: ID @deprecated
+  """"""
+  rolePermissions(last: Int, before: String, order: [RolePermissionOrderInput], query: RolePermissionQueryInput, first: Int, after: String): RolePermissionConnection!
+  """Role name (unique identifier)"""
+  name: String!
+  """Record last update timestamp"""
+  updatedAt: DateTime
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """Optional description of what this role represents"""
+  description: String
+  """"""
+  userRoles(query: UserRoleQueryInput, first: Int, after: String, last: Int, before: String, order: [UserRoleOrderInput]): UserRoleConnection!
+  """Document id"""
+  id: ID!
+  """updated by"""
+  updatedByID: ID @deprecated
+  """Create time"""
+  created: DateTime @deprecated
+  """Update time"""
+  updated: DateTime @deprecated
+}
+""""""
+input UUIDFilter {
+  """"""
+  ne: ID
+  """"""
+  in: [ID!]
+  """"""
+  nin: [ID!]
+  """"""
+  eq: ID
+}
+"""rolePermission(Connection)"""
+type RolePermissionConnection {
+  """"""
+  edges: [RolePermissionEdge!]!
+  """"""
+  pageInfo: PageInfo!
+  """"""
+  total: Int
+}
+""""""
+type UserRole {
+  """updated by"""
+  updatedByID: ID @deprecated
+  """Foreign key to User"""
+  userId: ID!
+  """Create time"""
+  created: DateTime @deprecated
+  """Foreign key to Role"""
+  roleId: ID!
+  """Document id"""
+  id: ID!
+  """"""
+  role: Role
+  """"""
+  user: User
+  """Record last update timestamp"""
+  updatedAt: DateTime
+  """Update time"""
+  updated: DateTime @deprecated
+  """created by"""
+  createdByID: ID @deprecated
+  """Record creation timestamp"""
+  createdAt: DateTime!
+}
+"""changeDetail(QueryInput)"""
+input ChangeDetailQueryInput {
+  """"""
+  and: [ChangeDetailQueryInput!]
+  """"""
+  id: UUIDFilter
+  """"""
+  auditEntryId: UUIDFilter
+  """"""
+  oldValue: StringFilter
+  """"""
+  or: [ChangeDetailQueryInput!]
+  """"""
+  updatedAt: DatetimeFilter
+  """"""
+  newValue: StringFilter
+  """"""
+  createdAt: DatetimeFilter
+  """"""
+  fieldName: StringFilter
+  """"""
+  not: [ChangeDetailQueryInput!]
+}
+""""""
+input StringFilter {
+  """"""
+  notHasSuffix: String
+  """"""
+  in: [String!]
+  """"""
+  contains: String
+  """"""
+  notContains: String
+  """"""
+  regex: String
+  """"""
+  eq: String
+  """"""
+  ne: String
+  """"""
+  nin: [String!]
+  """"""
+  hasPrefix: String
+  """"""
+  hasSuffix: String
+  """"""
+  notHasPrefix: String
+}
+""""""
+enum PolicyFieldRuleOrderFieldEnum {
+  """"""
+  updatedAt
+  """"""
+  sensitivityMode
+  """"""
+  createdAt
+  """"""
+  fieldName
+}
+""""""
+input UserRoleUniqueIdx {
+  """Foreign key to User"""
+  userId: ID!
+  """Foreign key to Role"""
+  roleId: ID!
+}
+""""""
+type RolePermission {
+  """Create time"""
+  created: DateTime @deprecated
+  """"""
+  permission: Permission
+  """Update time"""
+  updated: DateTime @deprecated
+  """updated by"""
+  updatedByID: ID @deprecated
+  """Record last update timestamp"""
+  updatedAt: DateTime
+  """Record creation timestamp"""
+  createdAt: DateTime!
+  """Foreign key to Permission"""
+  permissionId: ID!
+  """created by"""
+  createdByID: ID @deprecated
+  """Foreign key to Role"""
+  roleId: ID!
+  """Document id"""
+  id: ID!
+  """"""
+  role: Role
+}
+""""""
+input ChangeDetailOrderInput {
+  """"""
+  field: ChangeDetailOrderFieldEnum!
+  """"""
+  direction: OrderDirectionEnum
+}
+"""user(Connection)"""
+type UserConnection {
+  """"""
+  edges: [UserEdge!]!
+  """"""
+  pageInfo: PageInfo!
+  """"""
+  total: Int
+}
+"""policyFieldRule(QueryInput)"""
+input PolicyFieldRuleQueryInput {
+  """"""
+  and: [PolicyFieldRuleQueryInput!]
+  """"""
+  fieldName: StringFilter
+  """"""
+  id: UUIDFilter
+  """"""
+  createdAt: DatetimeFilter
+  """"""
+  or: [PolicyFieldRuleQueryInput!]
+  """"""
+  not: [PolicyFieldRuleQueryInput!]
+  """"""
+  sensitivityMode: StringFilter
+  """"""
+  updatedAt: DatetimeFilter
+  """"""
+  auditPolicyId: UUIDFilter
+}
+""""""
+input AuditPolicyOrderInput {
+  """"""
+  field: AuditPolicyOrderFieldEnum!
+  """"""
+  direction: OrderDirectionEnum
+}
+"""
+The Time scalar type represents a Time. The Time is serialized as an `hh:mm` quoted string
+"""
+scalar Time
+"""permission(QueryInput)"""
+input PermissionQueryInput {
+  """"""
+  or: [PermissionQueryInput!]
+  """"""
+  not: [PermissionQueryInput!]
+  """"""
+  id: UUIDFilter
+  """"""
+  key: StringFilter
+  """"""
+  createdAt: DatetimeFilter
+  """"""
+  updatedAt: DatetimeFilter
+  """"""
+  description: StringFilter
+  """"""
+  and: [PermissionQueryInput!]
+}
+""""""
+input PolicyFieldRuleOrderInput {
+  """"""
+  direction: OrderDirectionEnum
+  """"""
+  field: PolicyFieldRuleOrderFieldEnum!
+}
+"""role(QueryInput)"""
+input RoleQueryInput {
+  """"""
+  name: StringFilter
+  """"""
+  createdAt: DatetimeFilter
+  """"""
+  updatedAt: DatetimeFilter
+  """"""
+  description: StringFilter
+  """"""
+  and: [RoleQueryInput!]
+  """"""
+  or: [RoleQueryInput!]
+  """"""
+  not: [RoleQueryInput!]
+  """"""
+  id: UUIDFilter
+}
+""""""
+input RoleOrderInput {
+  """"""
+  direction: OrderDirectionEnum
+  """"""
+  field: RoleOrderFieldEnum!
+}
+""""""
+input DateFilter {
+  """"""
+  gt: Date
+  """"""
+  in: [Date!]
+  """"""
+  nin: [Date!]
+  """"""
+  between: DateBetweenFilter
+  """"""
+  eq: Date
-"""rolePermission(Edge)"""
-type RolePermissionEdge {
   """"""
-  node: RolePermission!
+  ne: Date
   """"""
-  cursor: String!
+  lt: Date
+  """"""
+  lte: Date
+  """"""
+  gte: Date
+}
+""""""
+input AuditEntryOrderInput {
+  """"""
+  direction: OrderDirectionEnum
+  """"""
+  field: AuditEntryOrderFieldEnum!
+}
+""""""
+input TimeFilter {
+  """"""
+  gte: Time
+  """"""
+  gt: Time
+  """"""
+  lte: Time
+  """"""
+  lt: Time
+  """"""
+  eq: Time
+  """"""
+  ne: Time
+  """"""
+  in: [Time]
+  """"""
+  nin: [Time]
+  """"""
+  between: TimeBetweenFilter
+}
+""""""
+input TimeBetweenFilter {
+  """"""
+  min: Time
+  """"""
+  max: Time
+}
+"""Permission assignment result"""
+type AssignPermissionToRoleOutput {
+  """Role ID"""
+  roleId: String!
+  """Assigned permission ID"""
+  permissionId: String!
+}
+"""Role assignment result"""
+type AssignRoleToUserOutput {
+  """User ID"""
+  userId: String!
+  """Assigned role ID"""
+  roleId: String!
+}
+"""Created role"""
+type CreateRoleOutput {
+  """Role ID"""
+  id: String!
+  """Role name"""
+  name: String!
+  """Role description"""
+  description: String!
+}
+"""Created user"""
+type CreateUserOutput {
+  """User ID"""
+  id: String!
+  """User name"""
+  name: String!
+  """User email"""
+  email: String!
+  """User status"""
+  status: String!
+  """Auto-generated initial password"""
+  initialPassword: String!
+}
+"""Deactivated user"""
+type DeactivateUserOutput {
+  """User ID"""
+  id: String!
+  """Updated status"""
+  status: String!
+}
+"""Reactivated user"""
+type ReactivateUserOutput {
+  """User ID"""
+  id: String!
+  """Updated status"""
+  status: String!
+}
+"""Permission revocation result"""
+type RevokePermissionFromRoleOutput {
+  """Role ID"""
+  roleId: String!
+  """Revoked permission ID"""
+  permissionId: String!
+}
+"""Role revocation result"""
+type RevokeRoleFromUserOutput {
+  """User ID"""
+  userId: String!
+  """Revoked role ID"""
+  roleId: String!
+}
+"""Updated profile"""
+type UpdateOwnProfileOutput {
+  """User ID"""
+  id: String!
+  """Updated name"""
+  name: String!
+  """Updated email"""
+  email: String!
+}
+"""Updated user profile"""
+type UpdateUserProfileOutput {
+  """User ID"""
+  id: String!
+  """Updated name"""
+  name: String!
+  """Updated email"""
+  email: String!
+}
+""""""
+type Mutation {
+  """
+  assignPermissionToRole resolver
+    Returns:
+    Permission assignment result
+  """
+  assignPermissionToRole(
+    """Role ID"""
+    roleId: String!
+    """Permission ID to assign"""
+    permissionId: String!
+  ): AssignPermissionToRoleOutput!
+  """
+  assignRoleToUser resolver
+    Returns:
+    Role assignment result
+  """
+  assignRoleToUser(
+    """User ID"""
+    userId: String!
+    """Role ID to assign"""
+    roleId: String!
+  ): AssignRoleToUserOutput!
+  """
+  createRole resolver
+    Returns:
+    Created role
+  """
+  createRole(
+    """Role name"""
+    name: String!
+    """Role description"""
+    description: String
+  ): CreateRoleOutput!
+  """
+  createUser resolver
+    Returns:
+    Created user
+  """
+  createUser(
+    """User name"""
+    name: String!
+    """User email"""
+    email: String!
+    """Role IDs to assign"""
+    roleIds: [String]
+  ): CreateUserOutput!
+  """
+  deactivateUser resolver
+    Returns:
+    Deactivated user
+  """
+  deactivateUser(
+    """ID of the user to deactivate"""
+    userId: String!
+  ): DeactivateUserOutput!
+  """
+  reactivateUser resolver
+    Returns:
+    Reactivated user
+  """
+  reactivateUser(
+    """ID of the user to reactivate"""
+    userId: String!
+  ): ReactivateUserOutput!
+  """
+  revokePermissionFromRole resolver
+    Returns:
+    Permission revocation result
+  """
+  revokePermissionFromRole(
+    """Role ID"""
+    roleId: String!
+    """Permission ID to revoke"""
+    permissionId: String!
+  ): RevokePermissionFromRoleOutput!
+  """
+  revokeRoleFromUser resolver
+    Returns:
+    Role revocation result
+  """
+  revokeRoleFromUser(
+    """User ID"""
+    userId: String!
+    """Role ID to revoke"""
+    roleId: String!
+  ): RevokeRoleFromUserOutput!
+  """
+  updateOwnProfile resolver
+    Returns:
+    Updated profile
+  """
+  updateOwnProfile(
+    """New display name"""
+    name: String
+    """New email address"""
+    email: String
+  ): UpdateOwnProfileOutput!
+  """
+  updateUserProfile resolver
+    Returns:
+    Updated user profile
+  """
+  updateUserProfile(
+    """ID of the user to update"""
+    userId: String!
+    """New display name"""
+    name: String
+    """New email address"""
+    email: String
+  ): UpdateUserProfileOutput!
+  """Placeholder field (IdP mutation operations are disabled)"""
+  _placeholder: Boolean
+}
+""""""
+input _UserQueryInput {
+  """"""
+  names: [String!]
+  """"""
+  ids: [ID!]
+}
+""""""
+type _UserConnection {
+  """"""
+  totalCount: Int
+  """"""
+  edges: [_UserEdge]
+  """"""
+  pageInfo: _PageInfo
+}
+""""""
+type _UserEdge {
+  """"""
+  node: _User
+  """"""
+  cursor: String
+}
+""""""
+type _User {
+  """"""
+  createdAt: DateTime!
+  """"""
+  disabled: Boolean!
+  """"""
+  id: ID!
+  """"""
+  name: String!
+}
+""""""
+type _PageInfo {
+  """"""
+  hasPreviousPage: Boolean!
+  """"""
+  startCursor: String
+  """"""
+  endCursor: String
+  """"""
+  hasNextPage: Boolean!
 }