@tinacms/graphql 0.0.0-059f480-20260324232913 → 0.0.0-06c643a-20260521045804

package/README.md

@@ -137,7 +137,7 @@ Visit [Tina's documentation](https://tina.io/docs/) to learn more.
 [![Tweet](https://img.shields.io/twitter/url/http/shields.io.svg?style=social)](https://twitter.com/intent/tweet?url=https%3A%2F%2Ftinacms.org&text=I%20just%20checked%20out%20@tinacms%20on%20GitHub%20and%20it%20is%20sweet%21&hashtags=TinaCMS%2Cjamstack%2Cheadlesscms)
 [![Forum](https://shields.io/github/discussions/tinacms/tinacms)](https://github.com/tinacms/tinacms/discussions)
 
-Visit the [GitHub Discussions](https://github.com/tinacms/tinacms/discussions) or our [Community Discord](https://discord.com/invite/zumN63Ybpf) to ask questions, or look us up on on Twitter at [@tinacms](https://twitter.com/tinacms).
+Visit the [GitHub Discussions](https://github.com/tinacms/tinacms/discussions) or our [Community Discord](https://discord.com/invite/zumN63Ybpf) to ask questions, or look us up on Twitter at [@tinacms](https://twitter.com/tinacms).
 
 ## Contributing
 

package/dist/database/bridge/filesystem.d.ts

@@ -4,6 +4,11 @@ import type { Bridge } from './index';
  * The basic example here is for the filesystem, one is needed
  * for GitHub has well.
  *
+ * When `outputPath` differs from `rootPath` (multi-repo: generator +
+ * sibling content repo), paths under `tina/__generated__/` still resolve
+ * against `rootPath` — schema/graphql/lookup artifacts live only in the
+ * generator. Everything else (content files) resolves against `outputPath`.
+ *
  * @security All public methods validate their `filepath` / `pattern`
  * argument via `assertWithinBase` before performing any I/O. If you add a
  * new method that accepts a path, you MUST validate it the same way.
@@ -12,6 +17,8 @@ export declare class FilesystemBridge implements Bridge {
     rootPath: string;
     outputPath: string;
     constructor(rootPath: string, outputPath?: string);
+    private baseFor;
+    private assertGeneratedSubtree;
     glob(pattern: string, extension: string): Promise<string[]>;
     delete(filepath: string): Promise<void>;
     get(filepath: string): Promise<string>;

package/dist/database/index.d.ts

@@ -106,7 +106,7 @@ export declare class Database {
                 defaultItem?: import("@tinacms/schema-tools").DefaultItem<Record<string, any>>;
                 previewSrc?: string;
             };
-            fields: ((import("@tinacms/schema-tools").StringField | import("@tinacms/schema-tools").NumberField | import("@tinacms/schema-tools").BooleanField | import("@tinacms/schema-tools").DateTimeField | import("@tinacms/schema-tools").ImageField | import("@tinacms/schema-tools").ReferenceField | import("@tinacms/schema-tools").PasswordField | import("@tinacms/schema-tools").RichTextField<false> | import("@tinacms/schema-tools").ObjectField<false>) & {})[];
+            fields: ((import("@tinacms/schema-tools").StringField | import("@tinacms/schema-tools").NumberField | import("@tinacms/schema-tools").BooleanField | import("@tinacms/schema-tools").DateTimeField | import("@tinacms/schema-tools").ImageField | import("@tinacms/schema-tools").ReferenceField | import("@tinacms/schema-tools").PasswordField | import("@tinacms/schema-tools").DisplayOnlyField | import("@tinacms/schema-tools").RichTextField<false> | import("@tinacms/schema-tools").ObjectField<false>) & {})[];
         };
         info: CollectionTemplateable;
     }>;

package/dist/database/util.d.ts

@@ -16,8 +16,6 @@ yupSchema: (args: typeof yup) => yup.ObjectSchema<any>, markdownParseConfig?: {
     lineWidth?: number;
     frontmatterDelimiters?: [string, string] | string;
 }) => T;
-export declare const atob: (b64Encoded: string) => string;
-export declare const btoa: (string: string) => string;
 export declare const scanAllContent: (tinaSchema: TinaSchema, bridge: Bridge, callback: (collection: Collection<true>, contentPaths: string[]) => Promise<void>) => Promise<string[]>;
 export declare const scanContentByPaths: (tinaSchema: TinaSchema, documentPaths: string[], callback: (collection: Collection<true> | undefined, documentPaths: string[]) => Promise<void>) => Promise<void>;
 export declare const partitionPathsByCollection: (tinaSchema: TinaSchema, documentPaths: string[]) => Promise<{

package/dist/index.js

@@ -1909,6 +1909,8 @@ var Builder = class {
   };
   _buildFieldNodeForFragments = async (field, depth) => {
     switch (field.type) {
+      case "displayOnly":
+        return false;
       case "string":
       case "image":
       case "datetime":
@@ -2350,6 +2352,8 @@ var Builder = class {
   };
   _buildFieldFilter = async (field) => {
     switch (field.type) {
+      case "displayOnly":
+        return void 0;
       case "boolean":
         return astBuilder.InputValueDefinition({
           name: field.name,
@@ -2511,6 +2515,8 @@ var Builder = class {
   };
   _buildFieldMutation = async (field) => {
     switch (field.type) {
+      case "displayOnly":
+        return void 0;
       case "boolean":
         return astBuilder.InputValueDefinition({
           name: field.name,
@@ -2739,6 +2745,8 @@ Visit https://tina.io/docs/r/content-fields/#list-fields/ for more information
 
 `;
     switch (field.type) {
+      case "displayOnly":
+        return void 0;
       case "boolean":
       case "datetime":
       case "number":
@@ -2884,7 +2892,8 @@ var FIELD_TYPES = [
   "reference",
   "object",
   "rich-text",
-  "password"
+  "password",
+  "displayOnly"
 ];
 var validateSchema = async (schema) => {
   const schema2 = addNamespaceToSchema(
@@ -3026,7 +3035,7 @@ var validateField = async (field) => {
 var package_default = {
   name: "@tinacms/graphql",
   type: "module",
-  version: "2.2.0",
+  version: "2.4.1",
   main: "dist/index.js",
   module: "./dist/index.js",
   files: [
@@ -3676,7 +3685,7 @@ var scanAllContent = async (tinaSchema, bridge, callback) => {
         `"${path9}" Found in multiple collections: ${filesSeen.get(path9).map((collection2) => `"${collection2}"`).join(
           ", "
         )}. This can cause unexpected behavior. We recommend updating the \`match\` property of those collections so that each file is in only one collection.
-This will be an error in the future. See https://tina.io/docs/errors/file-in-mutpliple-collections/
+This will be an error in the future. See https://tina.io/docs/r/content-modelling-collections#path-matching
 `
       );
     });
@@ -3770,6 +3779,9 @@ var getTemplateForFile = (templateInfo, data) => {
   throw new Error(`Unable to determine template`);
 };
 var loadAndParseWithAliases = async (bridge, filepath, collection, templateInfo) => {
+  if (filepath.endsWith(".gitkeep")) {
+    return { _is_tina_folder_placeholder: true };
+  }
   const dataString = await bridge.get(normalizePath(filepath));
   const data = parseFile(
     dataString,
@@ -3783,7 +3795,7 @@ var loadAndParseWithAliases = async (bridge, filepath, collection, templateInfo)
   const template = getTemplateForFile(templateInfo, data);
   if (!template) {
     console.warn(
-      `Document: ${filepath} has an ambiguous template, skipping from indexing. See https://tina.io/docs/errors/ambiguous-template/ for more info.`
+      `Document: ${filepath} has an ambiguous template, skipping from indexing. See https://tina.io/docs/r/ambiguous-template for more info.`
     );
     return;
   }
@@ -4628,22 +4640,19 @@ var resolveMediaCloudToRelative = (value, config = { useRelativeMedia: true }, s
       return value;
     }
     if (hasTinaMediaConfig(schema) === true) {
-      const assetsURL = `https://${config.assetsHost}/${config.clientId}`;
-      if (typeof value === "string" && value.includes(assetsURL)) {
-        const cleanMediaRoot = cleanUpSlashes(
-          schema.config.media.tina.mediaRoot
-        );
-        const strippedURL = value.replace(assetsURL, "");
-        return `${cleanMediaRoot}${strippedURL}`;
+      const cleanMediaRoot = cleanUpSlashes(schema.config.media.tina.mediaRoot);
+      const cloudUrl = cloudUrlPattern(config.clientId);
+      if (typeof value === "string" && cloudUrl.test(value)) {
+        return `${cleanMediaRoot}${stripStagingPrefix(
+          value.replace(cloudUrl, "")
+        )}`;
       }
       if (Array.isArray(value)) {
         return value.map((v) => {
           if (!v || typeof v !== "string") return v;
-          const cleanMediaRoot = cleanUpSlashes(
-            schema.config.media.tina.mediaRoot
-          );
-          const strippedURL = v.replace(assetsURL, "");
-          return `${cleanMediaRoot}${strippedURL}`;
+          if (!cloudUrl.test(v)) return v;
+          const strippedURL = v.replace(cloudUrl, "");
+          return `${cleanMediaRoot}${stripStagingPrefix(strippedURL)}`;
         });
       }
       return value;
@@ -4660,15 +4669,20 @@ var resolveMediaRelativeToCloud = (value, config = { useRelativeMedia: true }, s
     }
     if (hasTinaMediaConfig(schema) === true) {
       const cleanMediaRoot = cleanUpSlashes(schema.config.media.tina.mediaRoot);
+      const prefix = stagingPrefix(config);
       if (typeof value === "string") {
+        if (ABSOLUTE_URL.test(value)) return value;
         const strippedValue = value.replace(cleanMediaRoot, "");
-        return `https://${config.assetsHost}/${config.clientId}${strippedValue}`;
+        if (ABSOLUTE_URL.test(strippedValue)) return strippedValue;
+        return `https://${config.assetsHost}/${config.clientId}${prefix}${strippedValue}`;
       }
       if (Array.isArray(value)) {
         return value.map((v) => {
           if (!v || typeof v !== "string") return v;
+          if (ABSOLUTE_URL.test(v)) return v;
           const strippedValue = v.replace(cleanMediaRoot, "");
-          return `https://${config.assetsHost}/${config.clientId}${strippedValue}`;
+          if (ABSOLUTE_URL.test(strippedValue)) return strippedValue;
+          return `https://${config.assetsHost}/${config.clientId}${prefix}${strippedValue}`;
         });
       }
     }
@@ -4677,6 +4691,15 @@ var resolveMediaRelativeToCloud = (value, config = { useRelativeMedia: true }, s
     return value;
   }
 };
+var stagingPrefix = (config) => config.branch && config.branch !== config.mediaBranch ? `/__staging/${config.branch}/__file` : "";
+var STAGING_SEGMENT = /^\/__staging\/.+?\/__file(\/.*)$/;
+var stripStagingPrefix = (path9) => {
+  const match = path9.match(STAGING_SEGMENT);
+  return match ? match[1] : path9;
+};
+var ABSOLUTE_URL = /^[a-z][a-z0-9+.\-]*:|^\/\//i;
+var escapeRegExp = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+var cloudUrlPattern = (clientId) => new RegExp(`^https://[^/]+/${escapeRegExp(clientId)}`);
 var cleanUpSlashes = (path9) => {
   if (path9) {
     return `/${path9.replace(/^\/+|\/+$/gm, "")}`;
@@ -4701,6 +4724,8 @@ var resolveFieldData = async ({ namespace, ...field }, rawData, accumulator, tin
   assertShape(rawData, (yup3) => yup3.object());
   const value = rawData[field.name];
   switch (field.type) {
+    case "displayOnly":
+      break;
     case "datetime":
       if (value instanceof Date) {
         accumulator[field.name] = value.toISOString();
@@ -4917,7 +4942,7 @@ var updateObjectWithJsonPath = (obj, path9, oldValue, newValue) => {
   }
   return { object: obj, updated };
 };
-var Resolver = class {
+var Resolver = class _Resolver {
   constructor(init) {
     this.init = init;
     this.config = init.config;
@@ -5188,8 +5213,37 @@ var Resolver = class {
    * path traversal attacks where a user might attempt to read or write files
    * outside of the intended collection.
    */
+  static sanitizePath(input) {
+    if (input.includes("\0")) {
+      throw new Error("Invalid path: null bytes are not allowed");
+    }
+    return input.replace(/\\/g, "/");
+  }
+  /**
+   * Validates that relativePath is non-empty and contains only allowed
+   * characters: a-z, A-Z, 0-9, hyphens, underscores, periods, and
+   * forward slashes.
+   */
+  static validateRelativePath(relativePath) {
+    if (!relativePath.trim()) {
+      throw new Error(
+        "Invalid path: relativePath cannot be empty or whitespace"
+      );
+    }
+    if (relativePath !== relativePath.trim()) {
+      throw new Error(
+        "Invalid path: relativePath cannot have leading or trailing whitespace"
+      );
+    }
+    if (!/^[a-zA-Z0-9\-_./]+$/.test(relativePath)) {
+      throw new Error("Invalid path: relativePath contains invalid characters");
+    }
+  }
   validatePath = (fullPath, collection, relativePath) => {
-    const normalizedPath = path3.normalize(fullPath);
+    if (fullPath.includes("\0")) {
+      throw new Error("Invalid path: null bytes are not allowed");
+    }
+    const normalizedPath = path3.normalize(fullPath.replace(/\\/g, "/"));
     const normalizedCollectionPath = path3.normalize(collection.path);
     const relative = path3.relative(normalizedCollectionPath, normalizedPath);
     if (relative.startsWith("..")) {
@@ -5199,6 +5253,7 @@ var Resolver = class {
       throw new Error(`Invalid path: absolute paths are not allowed`);
     }
     if (relativePath) {
+      _Resolver.validateRelativePath(relativePath);
       const collectionFormat = collection.format || "md";
       const fileExtension = path3.extname(relativePath).toLowerCase().slice(1);
       if (fileExtension !== collectionFormat) {
@@ -5219,17 +5274,19 @@ var Resolver = class {
    * @returns Object containing the collection and validated real path
    */
   getValidatedPath = (collectionName, relativePath, options) => {
+    _Resolver.validateRelativePath(relativePath);
     const collection = this.getCollectionWithName(collectionName);
-    const pathSegments = [collection.path, relativePath];
+    const sanitizedRelativePath = _Resolver.sanitizePath(relativePath);
+    const pathSegments = [collection.path, sanitizedRelativePath];
     if (options?.extraSegments) {
-      pathSegments.push(...options.extraSegments);
+      pathSegments.push(...options.extraSegments.map(_Resolver.sanitizePath));
     }
     const realPath = path3.join(...pathSegments);
     const shouldValidateExtension = options?.validateExtension !== false;
     this.validatePath(
       realPath,
       collection,
-      shouldValidateExtension ? relativePath : void 0
+      shouldValidateExtension ? sanitizedRelativePath : void 0
     );
     return { collection, realPath };
   };
@@ -5257,6 +5314,7 @@ var Resolver = class {
     relativePath
   }) => {
     const collection = this.getCollectionWithName(collectionName);
+    _Resolver.validateRelativePath(relativePath);
     const realPath = path3.join(
       collection.path,
       relativePath,
@@ -5314,6 +5372,12 @@ var Resolver = class {
       if (newRealPath === realPath) {
         return doc;
       }
+      const newPathAlreadyExists = await this.database.documentExists(newRealPath);
+      if (newPathAlreadyExists) {
+        throw new Error(
+          `Unable to rename document, ${newRealPath} already exists`
+        );
+      }
       await this.database.put(newRealPath, doc._rawData, collection.name);
       await this.deleteDocument(realPath);
       const collRefs = await this.findReferences(realPath, collection);
@@ -5863,6 +5927,8 @@ var Resolver = class {
         throw new Error(`Expected to find field by name ${fieldName}`);
       }
       switch (field.type) {
+        case "displayOnly":
+          break;
         case "datetime":
           accum[fieldName] = resolveDateInput(fieldValue, field);
           break;
@@ -6866,7 +6932,10 @@ var Database = class {
         if (!collection) {
           throw new GraphQLError5(`Unable to find collection for ${filepath}.`);
         }
-        if (collection.match?.exclude || collection.match?.include) {
+        const isFolderPlaceholder = filepath.endsWith(
+          `.gitkeep.${collection.format || "md"}`
+        );
+        if (!isFolderPlaceholder && (collection.match?.exclude || collection.match?.include)) {
           const matches = this.tinaSchema.getMatches({ collection });
           const match = micromatch2.isMatch(filepath, matches);
           if (!match) {
@@ -7790,8 +7859,9 @@ var _indexContent = async ({
           ]);
         }
       }
+      let putOps = [];
       if (!isGitKeep(filepath, collection)) {
-        await enqueueOps([
+        putOps = [
           ...makeRefOpsForDocument(
             normalizedPath,
             collection?.name,
@@ -7816,18 +7886,21 @@ var _indexContent = async ({
             aliasedData,
             "put",
             level
-          ),
-          {
-            type: "put",
-            key: normalizedPath,
-            value: aliasedData,
-            sublevel: level.sublevel(
-              CONTENT_ROOT_PREFIX,
-              SUBLEVEL_OPTIONS
-            )
-          }
-        ]);
+          )
+        ];
       }
+      await enqueueOps([
+        ...putOps,
+        {
+          type: "put",
+          key: normalizedPath,
+          value: aliasedData,
+          sublevel: level.sublevel(
+            CONTENT_ROOT_PREFIX,
+            SUBLEVEL_OPTIONS
+          )
+        }
+      ]);
     } catch (error) {
       throw new TinaFetchError(`Unable to seed ${filepath}`, {
         originalError: error,
@@ -8021,16 +8094,48 @@ import path7 from "path";
 import fg from "fast-glob";
 import fs2 from "fs-extra";
 import normalize from "normalize-path";
+function resolveRealPath(candidate) {
+  try {
+    return fs2.realpathSync(candidate);
+  } catch {
+    const parent = path7.dirname(candidate);
+    if (parent === candidate) return candidate;
+    return path7.join(resolveRealPath(parent), path7.basename(candidate));
+  }
+}
 function assertWithinBase(filepath, baseDir) {
+  if (filepath.includes("\0")) {
+    throw new Error("Invalid path: null bytes are not allowed");
+  }
+  const sanitized = filepath.replace(/\\/g, "/");
   const resolvedBase = path7.resolve(baseDir);
-  const resolved = path7.resolve(path7.join(baseDir, filepath));
+  const resolved = path7.resolve(path7.join(baseDir, sanitized));
   if (resolved !== resolvedBase && !resolved.startsWith(resolvedBase + path7.sep)) {
     throw new Error(
       `Path traversal detected: "${filepath}" escapes the base directory`
     );
   }
+  try {
+    const realBase = fs2.realpathSync(resolvedBase);
+    const realResolved = resolveRealPath(resolved);
+    if (realResolved !== realBase && !realResolved.startsWith(realBase + path7.sep)) {
+      throw new Error(
+        `Path traversal detected: "${filepath}" escapes the base directory`
+      );
+    }
+  } catch (err) {
+    if (err instanceof Error && err.message.startsWith("Path traversal"))
+      throw err;
+  }
   return resolved;
 }
+var GENERATED_PATH_PREFIXES = ["tina/__generated__/", ".tina/__generated__/"];
+function isGeneratedPath(filepath) {
+  const normalized = filepath.replace(/\\/g, "/");
+  return GENERATED_PATH_PREFIXES.some(
+    (prefix) => normalized.startsWith(prefix)
+  );
+}
 var FilesystemBridge = class {
   rootPath;
   outputPath;
@@ -8038,6 +8143,30 @@ var FilesystemBridge = class {
     this.rootPath = path7.resolve(rootPath);
     this.outputPath = outputPath ? path7.resolve(outputPath) : this.rootPath;
   }
+  // Picks the base directory for a given path. The `assertWithinBase` check
+  // in delete/get/put still runs against the chosen base, so a path like
+  // `tina/__generated__/../../escape.txt` is still rejected — just rejected
+  // against `rootPath` rather than `outputPath`.
+  baseFor(filepath) {
+    return isGeneratedPath(filepath) ? this.rootPath : this.outputPath;
+  }
+  // Defense-in-depth for generated-path routing: assertWithinBase already
+  // rejects paths that escape rootPath, but a path like
+  // `tina/__generated__/../../.env` would resolve to `<rootPath>/.env` —
+  // technically inside rootPath but outside the generated subtree the
+  // routing is supposed to grant access to. Verify the resolved path stays
+  // inside the matching generated subdirectory.
+  assertGeneratedSubtree(filepath, resolved) {
+    if (!isGeneratedPath(filepath)) return;
+    const normalized = filepath.replace(/\\/g, "/");
+    const subdir = normalized.startsWith(".tina/__generated__/") ? ".tina/__generated__" : "tina/__generated__";
+    const generatedRoot = path7.resolve(path7.join(this.rootPath, subdir));
+    if (resolved !== generatedRoot && !resolved.startsWith(generatedRoot + path7.sep)) {
+      throw new Error(
+        `Path traversal detected: "${filepath}" routed via generated prefix but resolved outside ${generatedRoot}`
+      );
+    }
+  }
   async glob(pattern, extension) {
     const basePath = assertWithinBase(pattern, this.outputPath);
     const items = await fg(
@@ -8053,16 +8182,19 @@ var FilesystemBridge = class {
     );
   }
   async delete(filepath) {
-    const resolved = assertWithinBase(filepath, this.outputPath);
+    const resolved = assertWithinBase(filepath, this.baseFor(filepath));
+    this.assertGeneratedSubtree(filepath, resolved);
     await fs2.remove(resolved);
   }
   async get(filepath) {
-    const resolved = assertWithinBase(filepath, this.outputPath);
+    const resolved = assertWithinBase(filepath, this.baseFor(filepath));
+    this.assertGeneratedSubtree(filepath, resolved);
     return (await fs2.readFile(resolved)).toString();
   }
   async put(filepath, data, basePathOverride) {
-    const basePath = basePathOverride || this.outputPath;
+    const basePath = basePathOverride || this.baseFor(filepath);
     const resolved = assertWithinBase(filepath, basePath);
+    this.assertGeneratedSubtree(filepath, resolved);
     await fs2.outputFile(resolved, data);
   }
 };
@@ -8090,7 +8222,11 @@ import { GraphQLError as GraphQLError6 } from "graphql";
 import git2 from "isomorphic-git";
 import normalize2 from "normalize-path";
 function assertWithinBase2(filepath, relativePath) {
-  const qualified = relativePath ? `${relativePath}/${filepath}` : filepath;
+  if (filepath.includes("\0")) {
+    throw new Error("Invalid path: null bytes are not allowed");
+  }
+  const sanitized = filepath.replace(/\\/g, "/");
+  const qualified = relativePath ? `${relativePath}/${sanitized}` : sanitized;
   const normalized = path8.normalize(qualified);
   if (normalized.startsWith("..") || normalized.startsWith("/") || path8.isAbsolute(normalized) || relativePath && normalized !== relativePath && !normalized.startsWith(relativePath + "/")) {
     throw new Error(
@@ -8573,3 +8709,8 @@ export {
 };
 //! Replaces _.get()
 //! Replaces _.flattenDeep()
+/**
+ * @license
+ * Copyright 2023 Forestry.io Holdings, Inc.
+ * SPDX-License-Identifier: Apache-2.0
+ */

package/dist/resolver/index.d.ts

@@ -11,6 +11,11 @@ interface ResolverConfig {
     isAudit: boolean;
 }
 export declare const createResolver: (args: ResolverConfig) => Resolver;
+export declare const resolveFieldData: ({ namespace, ...field }: TinaField<true>, rawData: unknown, accumulator: {
+    [key: string]: unknown;
+}, tinaSchema: TinaSchema, config?: GraphQLConfig, isAudit?: boolean) => Promise<{
+    [key: string]: unknown;
+}>;
 export declare const transformDocumentIntoPayload: (fullPath: string, rawData: {
     _collection: any;
     _template: any;
@@ -235,6 +240,13 @@ export declare class Resolver {
      * path traversal attacks where a user might attempt to read or write files
      * outside of the intended collection.
      */
+    private static sanitizePath;
+    /**
+     * Validates that relativePath is non-empty and contains only allowed
+     * characters: a-z, A-Z, 0-9, hyphens, underscores, periods, and
+     * forward slashes.
+     */
+    private static validateRelativePath;
     private validatePath;
     /**
      * Helper method to get collection and construct validated path.

package/dist/resolver/media-utils.d.ts

@@ -1,6 +1,8 @@
 /**
-
-*/
+ * @license
+ * Copyright 2023 Forestry.io Holdings, Inc.
+ * SPDX-License-Identifier: Apache-2.0
+ */
 import type { Schema } from '@tinacms/schema-tools';
 import type { GraphQLConfig } from '../types';
 /**

package/dist/types.d.ts

@@ -7,4 +7,6 @@ export type GraphQLConfig = {
     useRelativeMedia: false;
     clientId: string;
     assetsHost: string;
+    branch?: string;
+    mediaBranch?: string;
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@tinacms/graphql",
   "type": "module",
-  "version": "0.0.0-059f480-20260324232913",
+  "version": "0.0.0-06c643a-20260521045804",
   "main": "dist/index.js",
   "module": "./dist/index.js",
   "files": [
@@ -43,8 +43,8 @@
     "normalize-path": "^3.0.0",
     "readable-stream": "^4.7.0",
     "yup": "^1.6.1",
-    "@tinacms/mdx": "0.0.0-059f480-20260324232913",
-    "@tinacms/schema-tools": "2.7.0"
+    "@tinacms/schema-tools": "0.0.0-06c643a-20260521045804",
+    "@tinacms/mdx": "0.0.0-06c643a-20260521045804"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org"
@@ -72,8 +72,8 @@
     "vite": "^4.5.9",
     "vitest": "^0.32.4",
     "zod": "^3.24.2",
-    "@tinacms/schema-tools": "2.7.0",
-    "@tinacms/scripts": "0.0.0-059f480-20260324232913"
+    "@tinacms/scripts": "1.6.1",
+    "@tinacms/schema-tools": "0.0.0-06c643a-20260521045804"
   },
   "scripts": {
     "types": "pnpm tsc",