@canopy-io/node 0.7.0 → 0.7.2

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @canopy-io/node
 
+## 0.7.2
+
+### Patch Changes
+
+- 66415c2: The NestJS README's first `CanopyModule.forRoot` example now includes the required `verify` option, and `@canopy-io/node`'s types are regenerated from the published spec, adding the `branding.view` and `branding.manage` API key scopes. No behaviour changes.
+
+## 0.7.1
+
+### Patch Changes
+
+- 221e502: `LocalAuthorizer` keeps its copy of the hierarchy in about 40% less memory: one id string per node instead of two. A parsed `GET /api/v1/nodes/parents` response holds each node id twice, as the node's own `id` and again in its children's `parent_node_id`, and the cache used to keep both copies. A 50,000-node hierarchy now costs about 4.6 MB rather than 7.4 MB. Answers are unchanged.
+
 ## 0.7.0
 
 ### Minor Changes

package/README.md

@@ -37,7 +37,8 @@ import { Canopy, isCanopyError } from "@canopy-io/node";
 
 const canopy = new Canopy({ apiKey: process.env.CANOPY_API_KEY });
 
-// The call every integrator makes on every request.
+// A fresh decision from the API. On the request path, prefer LocalAuthorizer
+// (below), which answers in-process.
 const { allowed } = await canopy.permissions.evaluate({
   identity_id: identityId,
   permission: "documents.read",
@@ -102,9 +103,10 @@ try {
 }
 ```
 
-Hosted Login tokens carry an audience, so name your client. Direct API tokens
-carry none and need no option — and a token that has an `aud` is refused
-rather than ignored when you have not said which client you are:
+Hosted Login tokens carry an audience, your `client_id`, so name your client.
+Direct API tokens carry none and need no option. A token that has an `aud` is
+refused rather than ignored when you have not said which client you are, so a
+token minted for another client is never accepted by accident:
 
 ```ts
 new TokenVerifier({ audience: process.env.CANOPY_OAUTH_CLIENT_ID });

package/dist/index.cjs

@@ -1325,8 +1325,16 @@ var LocalAuthorizer = class {
     }
     const parents = /* @__PURE__ */ new Map();
     if (result.modified) {
+      const ids = /* @__PURE__ */ new Map();
       for (const edge of result.data.items) {
-        parents.set(edge.id, edge.parent_node_id ?? null);
+        ids.set(edge.id, edge.id);
+      }
+      for (const edge of result.data.items) {
+        const parent = edge.parent_node_id ?? null;
+        parents.set(
+          edge.id,
+          parent === null ? null : ids.get(parent) ?? parent
+        );
       }
     }
     this.tree = {