@volcanicminds/backend 2.3.2 → 3.0.1

package/lib/loader/tenant.ts

@@ -6,7 +6,7 @@ export async function apply(server: FastifyInstance) {
 
   // Se multi-tenant non è abilitato, usciamo subito e iniettiamo il contesto single-tenant
   if (!multi_tenant?.enabled) {
-    if (log.i) log.info('Multi-Tenant: Disabled — using single-tenant DB context')
+    if (log.i) log.info('Multi-Tenant: Disabled (Using single-tenant DB context)')
 
     server.addHook('onRequest', async (req) => {
       const dataSource = global.connection
@@ -25,23 +25,33 @@ export async function apply(server: FastifyInstance) {
     // Recuperiamo il gestore tenant iniettato o di default
     const tm = server['tenantManager'] as TenantManagement
 
+    // Check if route opts out of tenant context
+    const cfg = (req.routeOptions?.config as { tenantContext?: boolean }) || {}
+    if (cfg.tenantContext === false) {
+      if (log.t) log.trace(`Multi-Tenant: Route ${req.url} opted out of tenant context via config`)
+      // Inject global DB context (public schema) like single-tenant
+      const dataSource = global.connection
+      if (dataSource) req.db = dataSource.manager
+      return
+    }
+
     // Controllo critico: se è abilitato il MT, DEVE esserci un manager implementato
     if (!tm || !tm.isImplemented()) {
       const errorMsg = 'Multi-Tenant enabled but no TenantManager provided/implemented!'
       if (log.f) log.fatal(errorMsg)
-      throw new Error(errorMsg) 
+      throw new Error(errorMsg)
     }
 
     try {
       // 1. Risoluzione Tenant
       const tenant = await tm.resolveTenant(req)
-      
+
       if (!tenant) {
         if (log.w) log.warn(`Multi-Tenant: Tenant resolution failed for request ${req.id}`)
-        return reply.code(404).send({ 
-          statusCode: 404, 
-          error: 'Not Found', 
-          message: 'Tenant not found or resolution failed' 
+        return reply.code(404).send({
+          statusCode: 404,
+          error: 'Not Found',
+          message: 'Tenant not found or resolution failed'
         })
       }
 
@@ -55,9 +65,10 @@ export async function apply(server: FastifyInstance) {
       if (dataSource) {
         const qr = dataSource.createQueryRunner()
         await qr.connect()
-        
+
         // Assegnamo il manager del QueryRunner alla richiesta
         req.db = qr.manager
+        req.runner = qr
 
         // 4. Switch Schema su QUESTO QueryRunner
         // Passiamo il manager affinché il TenantManager possa eseguire "SET search_path" su questa connessione specifica
@@ -66,20 +77,25 @@ export async function apply(server: FastifyInstance) {
         // 5. Cleanup: Rilascio del QueryRunner alla fine della richiesta
         reply.raw.on('finish', async () => {
           if (!qr.isReleased) {
+            try {
+              // Vital: Reset search_path to public avoids polluting the connection pool
+              await qr.query('SET search_path TO public')
+            } catch (err) {
+              if (log.e) log.error(`Multi-Tenant: Failed to reset search_path: ${err}`)
+            }
             await qr.release()
           }
         })
       } else {
         if (log.w) log.warn('Multi-Tenant: Global connection not found! Skipping DB context creation.')
       }
-
     } catch (err: unknown) {
       const message = err instanceof Error ? err.message : String(err)
       if (log.e) log.error(`Multi-Tenant Error: ${message}`)
-      return reply.code(500).send({ 
-        statusCode: 500, 
-        error: 'Internal Server Error', 
-        message: 'Tenant Context Switch Failed' 
+      return reply.code(500).send({
+        statusCode: 500,
+        error: 'Internal Server Error',
+        message: 'Tenant Context Switch Failed'
       })
     }
   })

package/lib/schemas/tenant.ts

@@ -0,0 +1,49 @@
+export const tenantBodySchema = {
+  $id: 'tenantBodySchema',
+  type: 'object',
+  required: ['name', 'slug', 'dbSchema'],
+  properties: {
+    name: { type: 'string', minLength: 1, maxLength: 255 },
+    slug: {
+      type: 'string',
+      minLength: 1,
+      maxLength: 100,
+      pattern: '^[a-z0-9_-]+$'
+    },
+    // S12: constrain to a safe SQL identifier alphabet (used in `SET search_path`).
+    // maxLength 63 = Postgres identifier limit; pattern mirrors the runtime sanitizer.
+    dbSchema: { type: 'string', minLength: 1, maxLength: 63, pattern: '^[a-zA-Z0-9_]+$' },
+    config: { type: 'object', additionalProperties: true }
+  }
+}
+
+export const tenantUpdateBodySchema = {
+  $id: 'tenantUpdateBodySchema',
+  type: 'object',
+  properties: {
+    name: { type: 'string', minLength: 1, maxLength: 255 },
+    status: { type: 'string', enum: ['active', 'suspended', 'archived'] },
+    config: { type: 'object' }
+  }
+}
+
+export const tenantResponseSchema = {
+  $id: 'tenantResponseSchema',
+  type: 'object',
+  properties: {
+    id: { type: 'string', format: 'uuid' },
+    name: { type: 'string' },
+    slug: { type: 'string' },
+    dbSchema: { type: 'string' },
+    status: { type: 'string', enum: ['active', 'suspended', 'archived'] },
+    config: { type: 'object' },
+    createdAt: { type: 'string', format: 'date-time' },
+    updatedAt: { type: 'string', format: 'date-time' }
+  }
+}
+
+export const tenantListResponseSchema = {
+  $id: 'tenantListResponseSchema',
+  type: 'array',
+  items: { $ref: 'tenantResponseSchema#' }
+}

package/lib/util/regexp.ts

@@ -2,25 +2,48 @@
  * min 3 max 33, one special character (. _ -) only in the middle
  * username can have uppercase or lowercase chars
  */
-export const username = /(?=^.{3,33}$)^[a-z][a-z0-9]*[._-]?[a-z0-9]+$/gi
+// NOTE: no `g` flag — with it, `.test()` is stateful (advances lastIndex) and
+// returns alternating true/false across calls on the same input.
+export const username = /(?=^.{3,33}$)^[a-z][a-z0-9]*[._-]?[a-z0-9]+$/i
+// NOTE (S10): separators here are already required (`\.`), so this variant is
+// linear and not ReDoS-prone. Guard length with MAX_EMAIL_LENGTH if you use it.
 export const emailAlt =
   /^(([^<>()[\]\\.,;:\s@"]+(\.[^<>()[\]\\.,;:\s@"]+)*)|(".+"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/
 
 /*
  * email can have multiple words
  * email can use . - or + for smart labeling
+ * TLD has no upper length limit (e.g. .test, .info, .email)
+ * NOTE (S10 — ReDoS): the separators inside the repeating groups are REQUIRED
+ * (`[.+-]`/`[.-]`, not `[.+-]?`/`[.-]?`). With an optional separator the pattern
+ * degenerates to `\w+(\w+)*`, which partitions a run of word-chars in
+ * exponentially many ways → catastrophic backtracking on a long non-matching
+ * input (e.g. many word-chars with no `@`). Making the separator required gives
+ * a single partition → linear time. Always validate via `isEmail()` so the
+ * length guard runs first.
  */
-export const email = /^\w+([.+-]?\w+)*@\w+([.-]?\w+)*(\.\w{2,3})+$/
+export const email = /^\w+([.+-]\w+)*@\w+([.-]\w+)*(\.\w{2,})+$/
+
+// RFC 5321: an email address (forward path) is at most 254 characters.
+export const MAX_EMAIL_LENGTH = 254
+
+/*
+ * Canonical email validator: bounds the input length BEFORE the regex match
+ * (defense in depth) and then applies the (linear) `email` pattern. Prefer this
+ * over calling `email.test()` directly.
+ */
+export const isEmail = (value: unknown): boolean =>
+  typeof value === 'string' && value.length > 0 && value.length <= MAX_EMAIL_LENGTH && email.test(value)
 
 /*
- * password must contain 1 number (0-9)
- * password must contain 1 uppercase chars
- * password must contain 1 lowercase chars
- * password must contain 1 non-alpha number
- * password is 8-64 characters with no space
+ * password must contain at least: 1 lowercase, 1 uppercase, 1 digit, 1 special char
+ * password is at least 8 characters with no space
+ * NOTE: the `-` inside the special-char class is escaped (`\-`). Without the
+ * escape, `()-_` is parsed as the range )..._ (0x29-0x5F), which makes letters
+ * and digits satisfy the "1 special char" requirement (i.e. it is NOT enforced).
  */
 export const password =
-  /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[!@#$%&*()-_=+[\]{}|;:'",.<>?^])[A-Za-z\d!@#$%&*()-_=+[\]{}|;:'",.<>?^]{8,}$/
+  /^(?=.*[a-z])(?=.*[A-Z])(?=.*\d)(?=.*[!@#$%&*()\-_=+[\]{}|;:'",.<>?^])[A-Za-z\d!@#$%&*()\-_=+[\]{}|;:'",.<>?^]{8,}$/
 export const zipCode = /(^\d{5}$)|(^\d{5}-\d{4}$)/
 export const taxCodePersona =
   /^[a-zA-Z]{6}[0-9]{2}[abcdehlmprstABCDEHLMPRST]{1}[0-9]{2}([a-zA-Z]{1}[0-9]{3})[a-zA-Z]{1}$/

package/lib/util/secret.ts

@@ -0,0 +1,113 @@
+'use strict'
+
+/**
+ * Startup hardening for cryptographic secrets (JWT, refresh, cookie).
+ *
+ * Rationale: @fastify/jwt already refuses to register with a falsy secret
+ * (`assert(options.secret, 'missing secret')`), but it happily accepts a WEAK
+ * one (short, default or low-entropy), which makes signed tokens forgeable.
+ * For B2B/enterprise usage we fail fast with an actionable message instead.
+ *
+ * Policy:
+ *  - missing/empty     -> always fatal (process.exit(1))
+ *  - weak (short/known/low-entropy):
+ *      - production     -> fatal (process.exit(1))
+ *      - non-production -> warning (tolerated, must be fixed before deploy)
+ */
+
+import logger from './logger.js'
+
+export const MIN_SECRET_LENGTH = 32
+const MIN_DISTINCT_CHARS = 8
+
+// Well-known / placeholder values that must never reach production.
+const COMMON_WEAK_SECRETS = new Set([
+  'secret',
+  'secretkey',
+  'secret-key',
+  'jwtsecret',
+  'jwt_secret',
+  'jwt-secret',
+  'your-secret',
+  'your-secret-key',
+  'your_jwt_secret',
+  'changeme',
+  'change-me',
+  'please-change-me',
+  'password',
+  'passw0rd',
+  'admin',
+  'default',
+  'test',
+  'testing',
+  'example',
+  'mysecret',
+  'supersecret',
+  'topsecret',
+  'token',
+  'volcanic',
+  '123456',
+  '12345678',
+  '123456789',
+  'qwerty',
+  'letmein'
+])
+
+export type SecretCheck = { ok: boolean; missing: boolean; reason?: string }
+
+/**
+ * Pure validator: returns the verdict without side effects (testable).
+ */
+export function validateSecretStrength(value: string | undefined): SecretCheck {
+  if (!value || value.trim().length === 0) {
+    return { ok: false, missing: true, reason: 'missing or empty' }
+  }
+
+  const v = value.trim()
+
+  // Check the denylist BEFORE the length check, using a substring match: a weak
+  // value padded to reach the minimum length (e.g. "changeme" + filler) must
+  // still be rejected. An exact-match-after-length check would be dead code,
+  // since every denylisted token is shorter than MIN_SECRET_LENGTH.
+  const lower = v.toLowerCase()
+  const weak = [...COMMON_WEAK_SECRETS].find((w) => lower.includes(w))
+  if (weak) {
+    return { ok: false, missing: false, reason: `contains a well-known/default value ("${weak}")` }
+  }
+
+  if (v.length < MIN_SECRET_LENGTH) {
+    return { ok: false, missing: false, reason: `too short (${v.length} chars, minimum ${MIN_SECRET_LENGTH})` }
+  }
+
+  const distinct = new Set(v).size
+  if (distinct < MIN_DISTINCT_CHARS) {
+    return { ok: false, missing: false, reason: `low entropy (only ${distinct} distinct characters)` }
+  }
+
+  return { ok: true, missing: false }
+}
+
+/**
+ * Enforce the policy. Exits the process on a fatal condition.
+ *
+ * @param name human-readable env var name (for the message)
+ * @param value the secret value
+ * @param opts.prod whether we are running in production
+ */
+export function assertSecretStrength(name: string, value: string | undefined, opts: { prod: boolean }): void {
+  const { ok, missing, reason } = validateSecretStrength(value)
+  if (ok) return
+
+  const hint = `Set a strong random value (>= ${MIN_SECRET_LENGTH} chars), e.g. \`openssl rand -base64 48\`.`
+
+  // Missing is always fatal; weak is fatal only in production.
+  if (missing || opts.prod) {
+    if (logger.f) logger.fatal(`Startup Security: ${name} is ${reason}. ${hint}`)
+    process.exit(1)
+  } else {
+    if (logger.w)
+      logger.warn(
+        `Startup Security: ${name} is ${reason}. Tolerated in non-production but MUST be fixed before deploying. ${hint}`
+      )
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volcanicminds/backend",
-  "version": "2.3.2",
+  "version": "3.0.1",
   "type": "module",
   "codename": "rome",
   "license": "MIT",
@@ -14,16 +14,13 @@
     "http",
     "https",
     "fastify",
-    "apollo",
     "swagger",
-    "graphql",
     "helmet",
     "json",
     "typescript",
     "javascript",
     "rest",
     "restful",
-    "graphql",
     "pino",
     "rate limit",
     "jest"
@@ -31,13 +28,22 @@
   "main": "dist/index.js",
   "module": "dist/index.js",
   "types": "dist/index.d.ts",
-  "sideEffects": false,
+  "sideEffects": [
+    "./dist/typeorm.js",
+    "./lib/database/typeorm/**"
+  ],
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js",
       "require": "./dist/index.js"
-    }
+    },
+    "./typeorm": {
+      "types": "./dist/typeorm.d.ts",
+      "import": "./dist/typeorm.js",
+      "require": "./dist/typeorm.js"
+    },
+    "./package.json": "./package.json"
   },
   "files": [
     "dist",
@@ -47,28 +53,30 @@
     "clean": "rm -rf dist",
     "prebuild": "npm run clean",
     "build": "tsc",
+    "postbuild": "node scripts/copy-assets.mjs",
     "preprod": "npm run build",
     "prod": "cd dist && node server.js",
     "start": "tsx --env-file .env server.ts",
     "dev": "tsx watch --env-file .env server.ts",
-    "test": "npm run test:full",
-    "test:full": "cross-env PORT=2231 NODE_ENV=memory BROWSER=false mocha --loader=tsx ./test/index.spec.ts -t 100000",
+    "test": "npm run test:core && npm run test:typeorm",
+    "test:core": "cross-env PORT=2231 NODE_ENV=memory BROWSER=false mocha --import=tsx ./test/index.spec.ts -t 100000 --exit",
+    "test:typeorm": "cross-env NODE_ENV=memory MFA_DB_SECRET=unit-test-secret-please-change-32xyz mocha --import=tsx ./test/typeorm/**/*.spec.ts -t 20000 --exit",
+    "test:full": "npm run test:core",
     "reset": "npm install && npm update && npm run build",
     "upgrade-deps": "npx npm-check-updates -u",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "type-check": "tsc --noEmit",
-    "check-all": "npm run lint && npm run type-check",
+    "depcruise": "depcruise index.ts typeorm.ts lib --config .dependency-cruiser.cjs",
+    "check-all": "npm run lint && npm run type-check && npm run depcruise",
     "combine": "node combine.js"
   },
   "dependencies": {
-    "@apollo/server": "^5.2.0",
-    "@as-integrations/fastify": "^3.1.0",
     "@fastify/compress": "^8.3.0",
     "@fastify/cookie": "^11.0.2",
     "@fastify/cors": "^11.2.0",
     "@fastify/helmet": "^13.0.2",
-    "@fastify/jwt": "^10.0.0",
+    "@fastify/jwt": "^10.1.0",
     "@fastify/multipart": "^9.3.0",
     "@fastify/rate-limit": "^10.3.0",
     "@fastify/schedule": "^6.0.0",
@@ -79,7 +87,6 @@
     "fastify": "^5.6.2",
     "fastify-raw-body": "^5.0.0",
     "glob": "^13.0.0",
-    "graphql": "^16.12.0",
     "i18n": "^0.15.3",
     "lodash": "^4.17.21",
     "nanoid": "^5.1.6",
@@ -90,18 +97,52 @@
     "semver": "^7.7.3",
     "toad-scheduler": "^3.1.0"
   },
+  "peerDependencies": {
+    "bcrypt": "^6.0.0",
+    "pg": "^8.13.0",
+    "pluralize": "^8.0.0",
+    "reflect-metadata": "^0.2.2",
+    "typeorm": "^0.3.28"
+  },
+  "peerDependenciesMeta": {
+    "typeorm": {
+      "optional": true
+    },
+    "bcrypt": {
+      "optional": true
+    },
+    "pluralize": {
+      "optional": true
+    },
+    "reflect-metadata": {
+      "optional": true
+    },
+    "pg": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@eslint/js": "^9.39.2",
+    "@types/bcrypt": "^6.0.0",
     "@types/mocha": "^10.0.10",
     "@types/node": "^24.10.4",
+    "@types/pg": "^8.11.10",
+    "@types/pluralize": "^0.0.33",
     "@types/semver": "^7.7.1",
+    "bcrypt": "^6.0.0",
     "cross-env": "^10.1.0",
+    "dependency-cruiser": "^18.0.0",
     "eslint": "^9.39.2",
     "expect": "^30.2.0",
     "globals": "^16.5.0",
-    "mocha": "^11.7.5",
-    "npm-upgrade": "^3.1.2",
+    "mocha": "^8.1.3",
+    "npm-upgrade": "^0.3.0",
+    "pg": "^8.13.0",
+    "pluralize": "^8.0.0",
+    "reflect-metadata": "^0.2.2",
+    "ts-node": "^10.9.2",
     "tsx": "^4.21.0",
+    "typeorm": "^0.3.28",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.50.0"
   },

package/dist/lib/apollo/context.d.ts

@@ -1,6 +0,0 @@
-import { ApolloFastifyContextFunction } from '@as-integrations/fastify';
-export interface MyContext {
-    greeting: string;
-}
-export declare const myContextFunction: ApolloFastifyContextFunction<MyContext>;
-//# sourceMappingURL=context.d.ts.map

package/dist/lib/apollo/context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../lib/apollo/context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAA;AAEvE,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,eAAO,MAAM,iBAAiB,EAAE,4BAA4B,CAAC,SAAS,CAEpE,CAAA"}

package/dist/lib/apollo/context.js

@@ -1,5 +0,0 @@
-'use strict';
-export const myContextFunction = async () => ({
-    greeting: 'Hello World!! ' + new Date().getTime()
-});
-//# sourceMappingURL=context.js.map

package/dist/lib/apollo/context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../lib/apollo/context.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAQZ,MAAM,CAAC,MAAM,iBAAiB,GAA4C,KAAK,IAAI,EAAE,CAAC,CAAC;IACrF,QAAQ,EAAE,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE;CAClD,CAAC,CAAA"}

package/dist/lib/apollo/resolvers.d.ts

@@ -1,8 +0,0 @@
-import { MyContext } from './context.js';
-declare const resolvers: {
-    Query: {
-        helloWorld: (_parent: any, _args: any, context: MyContext, _info: any) => string;
-    };
-};
-export default resolvers;
-//# sourceMappingURL=resolvers.d.ts.map

package/dist/lib/apollo/resolvers.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolvers.d.ts","sourceRoot":"","sources":["../../../lib/apollo/resolvers.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,QAAA,MAAM,SAAS;;8BAEW,GAAG,SAAS,GAAG,WAAW,SAAS,SAAS,GAAG;;CAExE,CAAA;AAED,eAAe,SAAS,CAAA"}

package/dist/lib/apollo/resolvers.js

@@ -1,8 +0,0 @@
-'use strict';
-const resolvers = {
-    Query: {
-        helloWorld: (_parent, _args, context, _info) => context.greeting
-    }
-};
-export default resolvers;
-//# sourceMappingURL=resolvers.js.map

package/dist/lib/apollo/resolvers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolvers.js","sourceRoot":"","sources":["../../../lib/apollo/resolvers.ts"],"names":[],"mappings":"AACA,YAAY,CAAA;AAIZ,MAAM,SAAS,GAAG;IAChB,KAAK,EAAE;QACL,UAAU,EAAE,CAAC,OAAY,EAAE,KAAU,EAAE,OAAkB,EAAE,KAAU,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ;KAC3F;CACF,CAAA;AAED,eAAe,SAAS,CAAA"}

package/dist/lib/apollo/type-defs.d.ts

@@ -1,3 +0,0 @@
-declare const typeDefs = "\n\ttype Query {\n\t\thelloWorld: String!\n\t}\n";
-export default typeDefs;
-//# sourceMappingURL=type-defs.d.ts.map

package/dist/lib/apollo/type-defs.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"type-defs.d.ts","sourceRoot":"","sources":["../../../lib/apollo/type-defs.ts"],"names":[],"mappings":"AAEA,QAAA,MAAM,QAAQ,qDAIb,CAAA;AAED,eAAe,QAAQ,CAAA"}

package/dist/lib/apollo/type-defs.js

@@ -1,8 +0,0 @@
-'use strict';
-const typeDefs = `
-	type Query {
-		helloWorld: String!
-	}
-`;
-export default typeDefs;
-//# sourceMappingURL=type-defs.js.map

package/dist/lib/apollo/type-defs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"type-defs.js","sourceRoot":"","sources":["../../../lib/apollo/type-defs.ts"],"names":[],"mappings":"AAAA,YAAY,CAAA;AAEZ,MAAM,QAAQ,GAAG;;;;CAIhB,CAAA;AAED,eAAe,QAAQ,CAAA"}

package/lib/apollo/context.ts

@@ -1,11 +0,0 @@
-'use strict'
-
-import { ApolloFastifyContextFunction } from '@as-integrations/fastify'
-
-export interface MyContext {
-  greeting: string
-}
-
-export const myContextFunction: ApolloFastifyContextFunction<MyContext> = async () => ({
-  greeting: 'Hello World!! ' + new Date().getTime()
-})

package/lib/apollo/resolvers.ts

@@ -1,12 +0,0 @@
-/* eslint-disable @typescript-eslint/no-explicit-any */
-'use strict'
-
-import { MyContext } from './context.js'
-
-const resolvers = {
-  Query: {
-    helloWorld: (_parent: any, _args: any, context: MyContext, _info: any) => context.greeting
-  }
-}
-
-export default resolvers

package/lib/apollo/type-defs.ts

@@ -1,9 +0,0 @@
-'use strict'
-
-const typeDefs = `
-	type Query {
-		helloWorld: String!
-	}
-`
-
-export default typeDefs