Summary
Add GraphQL types, queries, and mutations required to interact with notes from the API.
Scope
- Introduce GraphQL types for notes and any optional action fields
- Provide queries to fetch notes associated with a resource
- Provide mutations to create and edit notes
- Enforce sorted output (e.g., by
createdAt)
- Apply validation at the GraphQL layer
- Ensure RBAC protects note access to authorized staff users
Deliverables
- GraphQL schema additions
- Resolver implementations
- Authorization rules
- Test coverage