Port trust center features after main rebase

Move Emile's commitment CRUD into complianceportal management, wire console and visitor GraphQL, and drop portal magic-link sign-in in favor of OAuth /initiate while keeping documents, NDA/full-name gates, and access-request resume markers. Signed-off-by: Bryan Frimin <bryan@probo.com>
2026-07-17 17:06:33 +02:00
parent b221b17d1e
commit bc128ec516
29 changed files with 898 additions and 1023 deletions
--- a/pkg/server/api/complianceportal/v1/trust_center_resolvers.go
+++ b/pkg/server/api/complianceportal/v1/trust_center_resolvers.go
@@ -180,6 +180,25 @@ func (r *complianceFrameworkResolver) Framework(ctx context.Context, obj *types.
 	return types.NewFramework(framework), nil
 }

+// Commitments is the resolver for the commitments field.
+func (r *compliancePortalCommitmentGroupResolver) Commitments(ctx context.Context, obj *types.CompliancePortalCommitmentGroup, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.CompliancePortalCommitmentConnection, error) {
+	scope := coredata.NewScopeFromObjectID(obj.ID)
+	trustService := r.trust
+	pageOrderBy := page.OrderBy[coredata.CompliancePortalCommitmentOrderField]{
+		Field:     coredata.CompliancePortalCommitmentOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	commitmentPage, err := trustService.ListCommitmentsForGroupID(ctx, scope, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list public compliance portal commitments", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewCompliancePortalCommitmentConnection(commitmentPage), nil
+}
+
 // Alias is the resolver for the alias field.
 func (r *documentResolver) Alias(ctx context.Context, obj *types.Document) (*string, error) {
 	return r.ResourceAliasResolver(ctx, obj.ID)
@@ -750,7 +769,7 @@ func (r *trustCenterResolver) ViewerSubscription(ctx context.Context, obj *types
 }

 // Documents is the resolver for the documents field.
-func (r *trustCenterResolver) Documents(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.DocumentConnection, error) {
+func (r *trustCenterResolver) Documents(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey, filter *types.TrustCenterVisibilityFilter) (*types.DocumentConnection, error) {
 	trustCenter := complianceportal.CompliancePageFromContext(ctx)
 	scope := coredata.NewScopeFromObjectID(obj.ID)
 	trustService := r.trust
@@ -760,7 +779,12 @@ func (r *trustCenterResolver) Documents(ctx context.Context, obj *types.TrustCen
 	}
 	cursor := types.NewCursor(first, after, last, before, pageOrderBy)

-	documentPage, err := trustService.ListDocumentsForOrganizationID(ctx, scope, trustCenter.OrganizationID, cursor)
+	documentFilter := coredata.NewDocumentTrustCenterFilter()
+	if filter != nil && filter.Visibility != nil {
+		documentFilter = documentFilter.WithTrustCenterVisibilities(*filter.Visibility)
+	}
+
+	documentPage, err := trustService.ListDocumentsForOrganizationID(ctx, scope, trustCenter.OrganizationID, cursor, documentFilter)
 	if err != nil {
 		r.logger.ErrorCtx(ctx, "cannot list public documents", log.Error(err))
 		return nil, gqlutils.Internal(ctx)
@@ -770,7 +794,7 @@ func (r *trustCenterResolver) Documents(ctx context.Context, obj *types.TrustCen
 }

 // Audits is the resolver for the audits field.
-func (r *trustCenterResolver) Audits(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.AuditConnection, error) {
+func (r *trustCenterResolver) Audits(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey, filter *types.TrustCenterVisibilityFilter) (*types.AuditConnection, error) {
 	trustCenter := complianceportal.CompliancePageFromContext(ctx)
 	scope := coredata.NewScopeFromObjectID(obj.ID)
 	trustService := r.trust
@@ -780,7 +804,12 @@ func (r *trustCenterResolver) Audits(ctx context.Context, obj *types.TrustCenter
 	}
 	cursor := types.NewCursor(first, after, last, before, pageOrderBy)

-	auditPage, err := trustService.ListAuditsForOrganizationID(ctx, scope, trustCenter.OrganizationID, cursor)
+	auditFilter := coredata.NewAuditTrustCenterFilter()
+	if filter != nil && filter.Visibility != nil {
+		auditFilter = auditFilter.WithTrustCenterVisibilities(*filter.Visibility)
+	}
+
+	auditPage, err := trustService.ListAuditsForOrganizationID(ctx, scope, trustCenter.OrganizationID, cursor, auditFilter)
 	if err != nil {
 		r.logger.ErrorCtx(ctx, "cannot list public audits", log.Error(err))
 		return nil, gqlutils.Internal(ctx)
@@ -878,8 +907,27 @@ func (r *trustCenterResolver) References(ctx context.Context, obj *types.TrustCe
 	return types.NewTrustCenterReferenceConnection(referencePage), nil
 }

+// CommitmentGroups is the resolver for the commitmentGroups field.
+func (r *trustCenterResolver) CommitmentGroups(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.CompliancePortalCommitmentGroupConnection, error) {
+	scope := coredata.NewScopeFromObjectID(obj.ID)
+	trustService := r.trust
+	pageOrderBy := page.OrderBy[coredata.CompliancePortalCommitmentGroupOrderField]{
+		Field:     coredata.CompliancePortalCommitmentGroupOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	groupPage, err := trustService.ListCommitmentGroupsForPortalID(ctx, scope, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list public compliance portal commitment groups", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewCompliancePortalCommitmentGroupConnection(groupPage), nil
+}
+
 // TrustCenterFiles is the resolver for the trustCenterFiles field.
-func (r *trustCenterResolver) TrustCenterFiles(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.TrustCenterFileConnection, error) {
+func (r *trustCenterResolver) TrustCenterFiles(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey, filter *types.TrustCenterVisibilityFilter) (*types.TrustCenterFileConnection, error) {
 	trustCenter := complianceportal.CompliancePageFromContext(ctx)
 	scope := coredata.NewScopeFromObjectID(obj.ID)
 	trustService := r.trust
@@ -889,14 +937,19 @@ func (r *trustCenterResolver) TrustCenterFiles(ctx context.Context, obj *types.T
 	}
 	cursor := types.NewCursor(first, after, last, before, pageOrderBy)

-	filter := coredata.NewTrustCenterFileFilter(
-		coredata.WithTrustCenterFileVisibilities(
-			coredata.TrustCenterVisibilityPublic,
-			coredata.TrustCenterVisibilityPrivate,
-		),
+	visibilities := []coredata.TrustCenterVisibility{
+		coredata.TrustCenterVisibilityPublic,
+		coredata.TrustCenterVisibilityPrivate,
+	}
+	if filter != nil && filter.Visibility != nil {
+		visibilities = []coredata.TrustCenterVisibility{*filter.Visibility}
+	}
+
+	fileFilter := coredata.NewTrustCenterFileFilter(
+		coredata.WithTrustCenterFileVisibilities(visibilities...),
 	)

-	trustCenterFilePage, err := trustService.ListPortalFilesForOrganizationID(ctx, scope, trustCenter.OrganizationID, cursor, filter)
+	trustCenterFilePage, err := trustService.ListPortalFilesForOrganizationID(ctx, scope, trustCenter.OrganizationID, cursor, fileFilter)
 	if err != nil {
 		r.logger.ErrorCtx(ctx, "cannot list public trust center files", log.Error(err))
 		return nil, gqlutils.Internal(ctx)
@@ -1087,6 +1140,11 @@ func (r *Resolver) ComplianceFramework() schema.ComplianceFrameworkResolver {
 	return &complianceFrameworkResolver{r}
 }

+// CompliancePortalCommitmentGroup returns schema.CompliancePortalCommitmentGroupResolver implementation.
+func (r *Resolver) CompliancePortalCommitmentGroup() schema.CompliancePortalCommitmentGroupResolver {
+	return &compliancePortalCommitmentGroupResolver{r}
+}
+
 // Document returns schema.DocumentResolver implementation.
 func (r *Resolver) Document() schema.DocumentResolver { return &documentResolver{r} }

@@ -1112,13 +1170,14 @@ func (r *Resolver) TrustCenterReference() schema.TrustCenterReferenceResolver {
 }

 type (
-	auditResolver                  struct{ *Resolver }
-	auditReportResolver            struct{ *Resolver }
-	complianceFrameworkResolver    struct{ *Resolver }
-	documentResolver               struct{ *Resolver }
-	frameworkResolver              struct{ *Resolver }
-	subprocessorConnectionResolver struct{ *Resolver }
-	trustCenterResolver            struct{ *Resolver }
-	trustCenterFileResolver        struct{ *Resolver }
-	trustCenterReferenceResolver   struct{ *Resolver }
+	auditResolver                           struct{ *Resolver }
+	auditReportResolver                     struct{ *Resolver }
+	complianceFrameworkResolver             struct{ *Resolver }
+	compliancePortalCommitmentGroupResolver struct{ *Resolver }
+	documentResolver                        struct{ *Resolver }
+	frameworkResolver                       struct{ *Resolver }
+	subprocessorConnectionResolver          struct{ *Resolver }
+	trustCenterResolver                     struct{ *Resolver }
+	trustCenterFileResolver                 struct{ *Resolver }
+	trustCenterReferenceResolver            struct{ *Resolver }
 )
--- a/pkg/server/api/console/v1/graphql/trust_center.graphql
+++ b/pkg/server/api/console/v1/graphql/trust_center.graphql
@@ -106,6 +106,88 @@ enum TrustCenterReferenceOrderField
        )
 }

+enum CompliancePortalCommitmentGroupOrderField
+    @goModel(
+        model: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentGroupOrderField"
+    ) {
+    RANK
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentGroupOrderFieldRank"
+        )
+    CREATED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentGroupOrderFieldCreatedAt"
+        )
+    UPDATED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentGroupOrderFieldUpdatedAt"
+        )
+}
+
+enum CompliancePortalCommitmentOrderField
+    @goModel(
+        model: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentOrderField"
+    ) {
+    RANK
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentOrderFieldRank"
+        )
+    CREATED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentOrderFieldCreatedAt"
+        )
+    UPDATED_AT
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentOrderFieldUpdatedAt"
+        )
+}
+
+enum CompliancePortalCommitmentIcon
+    @goModel(
+        model: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIcon"
+    ) {
+    LOCK_KEY
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconLockKey")
+    EYE_SLASH
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconEyeSlash")
+    FINGERPRINT
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconFingerprint")
+    SHIELD_WARNING
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconShieldWarning")
+    SHIELD_CHECK
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconShieldCheck")
+    SIREN
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconSiren")
+    KEY
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconKey")
+    LOCK
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconLock")
+    CLOUD
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCloud")
+    DATABASE
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconDatabase")
+    GLOBE
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconGlobe")
+    EYE
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconEye")
+    USERS
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconUsers")
+    CERTIFICATE
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCertificate")
+    GAVEL
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconGavel")
+    HEARTBEAT
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconHeartbeat")
+    BELL
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconBell")
+    BUG
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconBug")
+    CODE
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconCode")
+    SERVER
+        @goEnum(value: "go.probo.inc/probo/pkg/coredata.CompliancePortalCommitmentIconServer")
+}
+
 enum ComplianceCustomLinkOrderField
    @goModel(
        model: "go.probo.inc/probo/pkg/coredata.ComplianceCustomLinkOrderField"
@@ -218,6 +300,22 @@ input TrustCenterReferenceOrder
    field: TrustCenterReferenceOrderField!
 }

+input CompliancePortalCommitmentGroupOrder
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.CompliancePortalCommitmentGroupOrderBy"
+    ) {
+    direction: OrderDirection!
+    field: CompliancePortalCommitmentGroupOrderField!
+}
+
+input CompliancePortalCommitmentOrder
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.CompliancePortalCommitmentOrderBy"
+    ) {
+    direction: OrderDirection!
+    field: CompliancePortalCommitmentOrderField!
+}
+
 input TrustCenterFileOrder
    @goModel(
        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.TrustCenterFileOrderBy"
@@ -277,6 +375,14 @@ type TrustCenter implements Node
        orderBy: TrustCenterReferenceOrder
    ): TrustCenterReferenceConnection! @goField(forceResolver: true)

+    commitmentGroups(
+        first: Int
+        after: CursorKey
+        last: Int
+        before: CursorKey
+        orderBy: CompliancePortalCommitmentGroupOrder
+    ): CompliancePortalCommitmentGroupConnection! @goField(forceResolver: true)
+
    complianceFrameworks(
        first: Int
        after: CursorKey
@@ -400,6 +506,66 @@ type TrustCenterReferenceEdge {
    node: TrustCenterReference!
 }

+type CompliancePortalCommitmentGroup implements Node {
+    id: ID!
+    title: String!
+    description: String!
+    rank: Int!
+    createdAt: Datetime!
+    updatedAt: Datetime!
+
+    commitments(
+        first: Int
+        after: CursorKey
+        last: Int
+        before: CursorKey
+        orderBy: CompliancePortalCommitmentOrder
+    ): CompliancePortalCommitmentConnection! @goField(forceResolver: true)
+
+    permission(action: String!): Boolean! @goField(forceResolver: true)
+}
+
+type CompliancePortalCommitmentGroupConnection
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.CompliancePortalCommitmentGroupConnection"
+    ) {
+    totalCount: Int! @goField(forceResolver: true)
+    edges: [CompliancePortalCommitmentGroupEdge!]!
+    pageInfo: PageInfo!
+}
+
+type CompliancePortalCommitmentGroupEdge {
+    cursor: CursorKey!
+    node: CompliancePortalCommitmentGroup!
+}
+
+type CompliancePortalCommitment implements Node {
+    id: ID!
+    icon: CompliancePortalCommitmentIcon!
+    eyebrow: String!
+    title: String!
+    description: String!
+    rank: Int!
+    createdAt: Datetime!
+    updatedAt: Datetime!
+
+    permission(action: String!): Boolean! @goField(forceResolver: true)
+}
+
+type CompliancePortalCommitmentConnection
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.CompliancePortalCommitmentConnection"
+    ) {
+    totalCount: Int! @goField(forceResolver: true)
+    edges: [CompliancePortalCommitmentEdge!]!
+    pageInfo: PageInfo!
+}
+
+type CompliancePortalCommitmentEdge {
+    cursor: CursorKey!
+    node: CompliancePortalCommitment!
+}
+
 type ComplianceFramework implements Node
    @goModel(
        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.ComplianceFramework"
@@ -526,6 +692,24 @@ extend type Mutation {
    deleteTrustCenterReference(
        input: DeleteTrustCenterReferenceInput!
    ): DeleteTrustCenterReferencePayload!
+    createCompliancePortalCommitmentGroup(
+        input: CreateCompliancePortalCommitmentGroupInput!
+    ): CreateCompliancePortalCommitmentGroupPayload!
+    updateCompliancePortalCommitmentGroup(
+        input: UpdateCompliancePortalCommitmentGroupInput!
+    ): UpdateCompliancePortalCommitmentGroupPayload!
+    deleteCompliancePortalCommitmentGroup(
+        input: DeleteCompliancePortalCommitmentGroupInput!
+    ): DeleteCompliancePortalCommitmentGroupPayload!
+    createCompliancePortalCommitment(
+        input: CreateCompliancePortalCommitmentInput!
+    ): CreateCompliancePortalCommitmentPayload!
+    updateCompliancePortalCommitment(
+        input: UpdateCompliancePortalCommitmentInput!
+    ): UpdateCompliancePortalCommitmentPayload!
+    deleteCompliancePortalCommitment(
+        input: DeleteCompliancePortalCommitmentInput!
+    ): DeleteCompliancePortalCommitmentPayload!
    createComplianceFramework(
        input: CreateComplianceFrameworkInput!
    ): CreateComplianceFrameworkPayload!
@@ -630,6 +814,44 @@ input DeleteTrustCenterReferenceInput {
    id: ID!
 }

+input CreateCompliancePortalCommitmentGroupInput {
+    trustCenterId: ID!
+    title: String!
+    description: String!
+}
+
+input UpdateCompliancePortalCommitmentGroupInput {
+    id: ID!
+    title: String
+    description: String
+    rank: Int
+}
+
+input DeleteCompliancePortalCommitmentGroupInput {
+    id: ID!
+}
+
+input CreateCompliancePortalCommitmentInput {
+    groupId: ID!
+    icon: CompliancePortalCommitmentIcon!
+    eyebrow: String!
+    title: String!
+    description: String!
+}
+
+input UpdateCompliancePortalCommitmentInput {
+    id: ID!
+    icon: CompliancePortalCommitmentIcon
+    eyebrow: String
+    title: String
+    description: String
+    rank: Int
+}
+
+input DeleteCompliancePortalCommitmentInput {
+    id: ID!
+}
+
 input CreateComplianceFrameworkInput {
    trustCenterId: ID!
    frameworkId: ID!
@@ -729,6 +951,30 @@ type DeleteTrustCenterReferencePayload {
    deletedTrustCenterReferenceId: ID!
 }

+type CreateCompliancePortalCommitmentGroupPayload {
+    compliancePortalCommitmentGroupEdge: CompliancePortalCommitmentGroupEdge!
+}
+
+type UpdateCompliancePortalCommitmentGroupPayload {
+    compliancePortalCommitmentGroup: CompliancePortalCommitmentGroup!
+}
+
+type DeleteCompliancePortalCommitmentGroupPayload {
+    deletedCompliancePortalCommitmentGroupId: ID!
+}
+
+type CreateCompliancePortalCommitmentPayload {
+    compliancePortalCommitmentEdge: CompliancePortalCommitmentEdge!
+}
+
+type UpdateCompliancePortalCommitmentPayload {
+    compliancePortalCommitment: CompliancePortalCommitment!
+}
+
+type DeleteCompliancePortalCommitmentPayload {
+    deletedCompliancePortalCommitmentId: ID!
+}
+
 type CreateComplianceFrameworkPayload {
    complianceFrameworkEdge: ComplianceFrameworkEdge!
 }
--- a/pkg/server/api/console/v1/trust_center_resolvers.go
+++ b/pkg/server/api/console/v1/trust_center_resolvers.go
@@ -52,6 +52,78 @@ func (r *complianceFrameworkResolver) Framework(ctx context.Context, obj *types.
 	return types.NewFramework(framework), nil
 }

+// Permission is the resolver for the permission field.
+func (r *compliancePortalCommitmentResolver) Permission(ctx context.Context, obj *types.CompliancePortalCommitment, action string) (bool, error) {
+	return r.Resolver.Permission(ctx, obj, action)
+}
+
+// TotalCount is the resolver for the totalCount field.
+func (r *compliancePortalCommitmentConnectionResolver) TotalCount(ctx context.Context, obj *types.CompliancePortalCommitmentConnection) (int, error) {
+	scope, err := r.authorize(ctx, obj.ParentID, management.ActionCompliancePortalCommitmentList)
+	if err != nil {
+		return 0, err
+	}
+
+	count, err := r.management.CountCommitments(ctx, scope, obj.ParentID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot count compliance portal commitments", log.Error(err))
+		return 0, gqlutils.Internal(ctx)
+	}
+
+	return count, nil
+}
+
+// Commitments is the resolver for the commitments field.
+func (r *compliancePortalCommitmentGroupResolver) Commitments(ctx context.Context, obj *types.CompliancePortalCommitmentGroup, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.OrderBy[coredata.CompliancePortalCommitmentOrderField]) (*types.CompliancePortalCommitmentConnection, error) {
+	scope, err := r.authorize(ctx, obj.ID, management.ActionCompliancePortalCommitmentList)
+	if err != nil {
+		return nil, err
+	}
+
+	pageOrderBy := page.OrderBy[coredata.CompliancePortalCommitmentOrderField]{
+		Field:     coredata.CompliancePortalCommitmentOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+
+	if orderBy != nil {
+		pageOrderBy = page.OrderBy[coredata.CompliancePortalCommitmentOrderField]{
+			Field:     orderBy.Field,
+			Direction: orderBy.Direction,
+		}
+	}
+
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	result, err := r.management.ListCommitments(ctx, scope, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list compliance portal commitments", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewCompliancePortalCommitmentConnection(result, obj.ID), nil
+}
+
+// Permission is the resolver for the permission field.
+func (r *compliancePortalCommitmentGroupResolver) Permission(ctx context.Context, obj *types.CompliancePortalCommitmentGroup, action string) (bool, error) {
+	return r.Resolver.Permission(ctx, obj, action)
+}
+
+// TotalCount is the resolver for the totalCount field.
+func (r *compliancePortalCommitmentGroupConnectionResolver) TotalCount(ctx context.Context, obj *types.CompliancePortalCommitmentGroupConnection) (int, error) {
+	scope, err := r.authorize(ctx, obj.ParentID, management.ActionCompliancePortalCommitmentGroupList)
+	if err != nil {
+		return 0, err
+	}
+
+	count, err := r.management.CountCommitmentGroups(ctx, scope, obj.ParentID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot count compliance portal commitment groups", log.Error(err))
+		return 0, gqlutils.Internal(ctx)
+	}
+
+	return count, nil
+}
+
 // Permission is the resolver for the permission field.
 func (r *customDomainResolver) Permission(ctx context.Context, obj *types.CustomDomain, action string) (bool, error) {
 	return r.Resolver.Permission(ctx, obj, action)
@@ -370,6 +442,166 @@ func (r *mutationResolver) DeleteTrustCenterReference(ctx context.Context, input
 	}, nil
 }

+// CreateCompliancePortalCommitmentGroup is the resolver for the createCompliancePortalCommitmentGroup field.
+func (r *mutationResolver) CreateCompliancePortalCommitmentGroup(ctx context.Context, input types.CreateCompliancePortalCommitmentGroupInput) (*types.CreateCompliancePortalCommitmentGroupPayload, error) {
+	scope, err := r.authorize(ctx, input.TrustCenterID, management.ActionCompliancePortalCommitmentGroupCreate)
+	if err != nil {
+		return nil, err
+	}
+
+	group, err := r.management.CreateCommitmentGroup(
+		ctx, scope,
+		&management.CreateCompliancePortalCommitmentGroupRequest{
+			TrustCenterID: input.TrustCenterID,
+			Title:         input.Title,
+			Description:   input.Description,
+		},
+	)
+	if err != nil {
+		if validationErrors, ok := errors.AsType[validator.ValidationErrors](err); ok {
+			return nil, gqlutils.InvalidValidationErrors(ctx, validationErrors)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot create compliance portal commitment group", log.Error(err))
+
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.CreateCompliancePortalCommitmentGroupPayload{
+		CompliancePortalCommitmentGroupEdge: types.NewCompliancePortalCommitmentGroupEdge(group, coredata.CompliancePortalCommitmentGroupOrderFieldRank),
+	}, nil
+}
+
+// UpdateCompliancePortalCommitmentGroup is the resolver for the updateCompliancePortalCommitmentGroup field.
+func (r *mutationResolver) UpdateCompliancePortalCommitmentGroup(ctx context.Context, input types.UpdateCompliancePortalCommitmentGroupInput) (*types.UpdateCompliancePortalCommitmentGroupPayload, error) {
+	scope, err := r.authorize(ctx, input.ID, management.ActionCompliancePortalCommitmentGroupUpdate)
+	if err != nil {
+		return nil, err
+	}
+
+	group, err := r.management.UpdateCommitmentGroup(
+		ctx, scope,
+		&management.UpdateCompliancePortalCommitmentGroupRequest{
+			ID:          input.ID,
+			Title:       input.Title,
+			Description: input.Description,
+			Rank:        input.Rank,
+		},
+	)
+	if err != nil {
+		if validationErrors, ok := errors.AsType[validator.ValidationErrors](err); ok {
+			return nil, gqlutils.InvalidValidationErrors(ctx, validationErrors)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot update compliance portal commitment group", log.Error(err))
+
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.UpdateCompliancePortalCommitmentGroupPayload{
+		CompliancePortalCommitmentGroup: types.NewCompliancePortalCommitmentGroup(group),
+	}, nil
+}
+
+// DeleteCompliancePortalCommitmentGroup is the resolver for the deleteCompliancePortalCommitmentGroup field.
+func (r *mutationResolver) DeleteCompliancePortalCommitmentGroup(ctx context.Context, input types.DeleteCompliancePortalCommitmentGroupInput) (*types.DeleteCompliancePortalCommitmentGroupPayload, error) {
+	scope, err := r.authorize(ctx, input.ID, management.ActionCompliancePortalCommitmentGroupDelete)
+	if err != nil {
+		return nil, err
+	}
+
+	if err := r.management.DeleteCommitmentGroup(ctx, scope, input.ID); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot delete compliance portal commitment group", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DeleteCompliancePortalCommitmentGroupPayload{
+		DeletedCompliancePortalCommitmentGroupID: input.ID,
+	}, nil
+}
+
+// CreateCompliancePortalCommitment is the resolver for the createCompliancePortalCommitment field.
+func (r *mutationResolver) CreateCompliancePortalCommitment(ctx context.Context, input types.CreateCompliancePortalCommitmentInput) (*types.CreateCompliancePortalCommitmentPayload, error) {
+	scope, err := r.authorize(ctx, input.GroupID, management.ActionCompliancePortalCommitmentCreate)
+	if err != nil {
+		return nil, err
+	}
+
+	commitment, err := r.management.CreateCommitment(
+		ctx, scope,
+		&management.CreateCompliancePortalCommitmentRequest{
+			GroupID:     input.GroupID,
+			Icon:        input.Icon,
+			Eyebrow:     input.Eyebrow,
+			Title:       input.Title,
+			Description: input.Description,
+		},
+	)
+	if err != nil {
+		if validationErrors, ok := errors.AsType[validator.ValidationErrors](err); ok {
+			return nil, gqlutils.InvalidValidationErrors(ctx, validationErrors)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot create compliance portal commitment", log.Error(err))
+
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.CreateCompliancePortalCommitmentPayload{
+		CompliancePortalCommitmentEdge: types.NewCompliancePortalCommitmentEdge(commitment, coredata.CompliancePortalCommitmentOrderFieldRank),
+	}, nil
+}
+
+// UpdateCompliancePortalCommitment is the resolver for the updateCompliancePortalCommitment field.
+func (r *mutationResolver) UpdateCompliancePortalCommitment(ctx context.Context, input types.UpdateCompliancePortalCommitmentInput) (*types.UpdateCompliancePortalCommitmentPayload, error) {
+	scope, err := r.authorize(ctx, input.ID, management.ActionCompliancePortalCommitmentUpdate)
+	if err != nil {
+		return nil, err
+	}
+
+	commitment, err := r.management.UpdateCommitment(
+		ctx, scope,
+		&management.UpdateCompliancePortalCommitmentRequest{
+			ID:          input.ID,
+			Icon:        input.Icon,
+			Eyebrow:     input.Eyebrow,
+			Title:       input.Title,
+			Description: input.Description,
+			Rank:        input.Rank,
+		},
+	)
+	if err != nil {
+		if validationErrors, ok := errors.AsType[validator.ValidationErrors](err); ok {
+			return nil, gqlutils.InvalidValidationErrors(ctx, validationErrors)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot update compliance portal commitment", log.Error(err))
+
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.UpdateCompliancePortalCommitmentPayload{
+		CompliancePortalCommitment: types.NewCompliancePortalCommitment(commitment),
+	}, nil
+}
+
+// DeleteCompliancePortalCommitment is the resolver for the deleteCompliancePortalCommitment field.
+func (r *mutationResolver) DeleteCompliancePortalCommitment(ctx context.Context, input types.DeleteCompliancePortalCommitmentInput) (*types.DeleteCompliancePortalCommitmentPayload, error) {
+	scope, err := r.authorize(ctx, input.ID, management.ActionCompliancePortalCommitmentDelete)
+	if err != nil {
+		return nil, err
+	}
+
+	if err := r.management.DeleteCommitment(ctx, scope, input.ID); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot delete compliance portal commitment", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DeleteCompliancePortalCommitmentPayload{
+		DeletedCompliancePortalCommitmentID: input.ID,
+	}, nil
+}
+
 // CreateComplianceFramework is the resolver for the createComplianceFramework field.
 func (r *mutationResolver) CreateComplianceFramework(ctx context.Context, input types.CreateComplianceFrameworkInput) (*types.CreateComplianceFrameworkPayload, error) {
 	scope, err := r.authorize(ctx, input.TrustCenterID, management.ActionComplianceFrameworkCreate)
@@ -821,6 +1053,36 @@ func (r *trustCenterResolver) References(ctx context.Context, obj *types.TrustCe
 	return types.NewTrustCenterReferenceConnection(result, obj.ID), nil
 }

+// CommitmentGroups is the resolver for the commitmentGroups field.
+func (r *trustCenterResolver) CommitmentGroups(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.OrderBy[coredata.CompliancePortalCommitmentGroupOrderField]) (*types.CompliancePortalCommitmentGroupConnection, error) {
+	scope, err := r.authorize(ctx, obj.ID, management.ActionCompliancePortalCommitmentGroupList)
+	if err != nil {
+		return nil, err
+	}
+
+	pageOrderBy := page.OrderBy[coredata.CompliancePortalCommitmentGroupOrderField]{
+		Field:     coredata.CompliancePortalCommitmentGroupOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+
+	if orderBy != nil {
+		pageOrderBy = page.OrderBy[coredata.CompliancePortalCommitmentGroupOrderField]{
+			Field:     orderBy.Field,
+			Direction: orderBy.Direction,
+		}
+	}
+
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	result, err := r.management.ListCommitmentGroups(ctx, scope, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list compliance portal commitment groups", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewCompliancePortalCommitmentGroupConnection(result, obj.ID), nil
+}
+
 // ComplianceFrameworks is the resolver for the complianceFrameworks field.
 func (r *trustCenterResolver) ComplianceFrameworks(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.OrderBy[coredata.ComplianceFrameworkOrderField]) (*types.ComplianceFrameworkConnection, error) {
 	scope, err := r.authorize(ctx, obj.ID, management.ActionComplianceFrameworkList)
@@ -1296,6 +1558,26 @@ func (r *Resolver) ComplianceFramework() schema.ComplianceFrameworkResolver {
 	return &complianceFrameworkResolver{r}
 }

+// CompliancePortalCommitment returns schema.CompliancePortalCommitmentResolver implementation.
+func (r *Resolver) CompliancePortalCommitment() schema.CompliancePortalCommitmentResolver {
+	return &compliancePortalCommitmentResolver{r}
+}
+
+// CompliancePortalCommitmentConnection returns schema.CompliancePortalCommitmentConnectionResolver implementation.
+func (r *Resolver) CompliancePortalCommitmentConnection() schema.CompliancePortalCommitmentConnectionResolver {
+	return &compliancePortalCommitmentConnectionResolver{r}
+}
+
+// CompliancePortalCommitmentGroup returns schema.CompliancePortalCommitmentGroupResolver implementation.
+func (r *Resolver) CompliancePortalCommitmentGroup() schema.CompliancePortalCommitmentGroupResolver {
+	return &compliancePortalCommitmentGroupResolver{r}
+}
+
+// CompliancePortalCommitmentGroupConnection returns schema.CompliancePortalCommitmentGroupConnectionResolver implementation.
+func (r *Resolver) CompliancePortalCommitmentGroupConnection() schema.CompliancePortalCommitmentGroupConnectionResolver {
+	return &compliancePortalCommitmentGroupConnectionResolver{r}
+}
+
 // CustomDomain returns schema.CustomDomainResolver implementation.
 func (r *Resolver) CustomDomain() schema.CustomDomainResolver { return &customDomainResolver{r} }

@@ -1338,15 +1620,19 @@ func (r *Resolver) TrustCenterReferenceConnection() schema.TrustCenterReferenceC
 }

 type (
-	complianceCustomLinkResolver                struct{ *Resolver }
-	complianceFrameworkResolver                 struct{ *Resolver }
-	customDomainResolver                        struct{ *Resolver }
-	trustCenterResolver                         struct{ *Resolver }
-	trustCenterAccessResolver                   struct{ *Resolver }
-	trustCenterDocumentAccessResolver           struct{ *Resolver }
-	trustCenterDocumentAccessConnectionResolver struct{ *Resolver }
-	trustCenterFileResolver                     struct{ *Resolver }
-	trustCenterFileConnectionResolver           struct{ *Resolver }
-	trustCenterReferenceResolver                struct{ *Resolver }
-	trustCenterReferenceConnectionResolver      struct{ *Resolver }
+	complianceCustomLinkResolver                      struct{ *Resolver }
+	complianceFrameworkResolver                       struct{ *Resolver }
+	compliancePortalCommitmentResolver                struct{ *Resolver }
+	compliancePortalCommitmentConnectionResolver      struct{ *Resolver }
+	compliancePortalCommitmentGroupResolver           struct{ *Resolver }
+	compliancePortalCommitmentGroupConnectionResolver struct{ *Resolver }
+	customDomainResolver                              struct{ *Resolver }
+	trustCenterResolver                               struct{ *Resolver }
+	trustCenterAccessResolver                         struct{ *Resolver }
+	trustCenterDocumentAccessResolver                 struct{ *Resolver }
+	trustCenterDocumentAccessConnectionResolver       struct{ *Resolver }
+	trustCenterFileResolver                           struct{ *Resolver }
+	trustCenterFileConnectionResolver                 struct{ *Resolver }
+	trustCenterReferenceResolver                      struct{ *Resolver }
+	trustCenterReferenceConnectionResolver            struct{ *Resolver }
 )