feat(graphiql): add shared types, constants, and validation

Adds type definitions, configuration validation with XSS prevention,
and default GraphQL query constants.

- Add GraphiQL config type definitions
- Add default welcome message and shop query constants
- Add config validation with security checks (313 lines of tests)
- Prevent XSS attacks through URL validation and string sanitization

All validation tests pass

Author: amcaplan

packages/graphiql-console/src/constants/defaultContent.ts

@@ -0,0 +1,41 @@
+// Determine control key based on platform (browser-based detection)
+const isMac = typeof navigator !== 'undefined' && /Mac|iPhone|iPad|iPod/.test(navigator.userAgent)
+const controlKey = isMac ? '⌘' : 'Ctrl'
+
+export const WELCOME_MESSAGE = `# Welcome to GraphiQL for the Shopify Admin API! If you've used
+# GraphiQL before, you can jump to the next tab.
+#
+# GraphiQL is an in-browser tool for writing, validating, and
+# testing GraphQL queries.
+#
+# Type queries into this side of the screen, and you will see intelligent
+# typeaheads aware of the current GraphQL type schema and live syntax and
+# validation errors highlighted within the text.
+#
+# GraphQL queries typically start with a "{" character. Lines that start
+# with a # are ignored.
+#
+# Keyboard shortcuts:
+#
+#   Prettify query:  Shift-${controlKey}-P (or press the prettify button)
+#
+#  Merge fragments:  Shift-${controlKey}-M (or press the merge button)
+#
+#        Run Query:  ${controlKey}-Enter (or press the play button)
+#
+#    Auto Complete:  ${controlKey}-Space (or just start typing)
+#
+`
+
+export const DEFAULT_SHOP_QUERY = `query shopInfo {
+  shop {
+    name
+    url
+    myshopifyDomain
+    plan {
+      displayName
+      partnerDevelopment
+      shopifyPlus
+    }
+  }
+}`

packages/graphiql-console/src/types/config.ts

@@ -0,0 +1,33 @@
+export interface GraphiQLConfig {
+  // Initial server data
+  apiVersion: string
+  apiVersions: string[]
+  appName: string
+  appUrl: string
+  storeFqdn: string
+  // Optional auth key
+  key?: string
+
+  // API endpoints
+  baseUrl: string
+
+  // Optional initial query state
+  query?: string
+  variables?: string
+
+  // Default queries for tabs
+  defaultQueries?: {
+    query: string
+    variables?: string
+    preface?: string
+  }[]
+}
+
+// Global config interface
+declare global {
+  interface Window {
+    __GRAPHIQL_CONFIG__?: GraphiQLConfig
+  }
+}
+
+export {}

packages/graphiql-console/src/types/index.ts

@@ -0,0 +1,2 @@
+export * from './config.ts'
+export * from './serverStatus.ts'

packages/graphiql-console/src/types/serverStatus.ts

@@ -0,0 +1,7 @@
+export interface ServerStatus {
+  serverIsLive: boolean
+  appIsInstalled: boolean
+  storeFqdn?: string
+  appName?: string
+  appUrl?: string
+}