mutation ConsumeLoginToken($token: String!) { consumeLoginToken(token: $token) { accessToken expiresAt user { id email fullName role company { id } } } }