default: "\n \"\"\"Role model used across authz and user management.\"\"\"\n enum UserRole {\n VIEWER\n EDITOR\n ADMIN\n }\n\n \"\"\"Registration mode policy.\"\"\"\n enum RegistrationMode {\n DISABLED\n INVITE\n OPEN\n }\n\n \"\"\"Dashboard execution mode policy.\"\"\"\n enum ExecutionMode {\n SAFE\n TRUSTED\n }\n\n \"\"\"Dashboard visibility states.\"\"\"\n enum DashboardVisibility {\n PRIVATE\n LINK\n PUBLIC\n }\n\n \"\"\"Authentication/registration policy snapshot.\"\"\"\n type AuthPolicy {\n registrationMode: RegistrationMode!\n registrationDefaultRole: UserRole!\n editorCanPublish: Boolean!\n dashboardDefaultVisibility: DashboardVisibility!\n dashboardPublicListingEnabled: Boolean!\n executionMode: ExecutionMode!\n policyEditLock: Boolean!\n }\n\n type Query {\n \"\"\"Publicly accessible auth policy subset for login/registration UX.\"\"\"\n publicAuthPolicy: AuthPolicy!\n\n \"\"\"Admin-visible auth policy snapshot.\"\"\"\n authPolicy: AuthPolicy!\n }\n\n type Mutation {\n \"\"\"Admin-only: update mutable auth policy fields.\"\"\"\n setAuthPolicy(\n registrationMode: RegistrationMode\n registrationDefaultRole: UserRole\n editorCanPublish: Boolean\n dashboardDefaultVisibility: DashboardVisibility\n dashboardPublicListingEnabled: Boolean\n executionMode: ExecutionMode\n ): AuthPolicy!\n }\n"