npm - @commercetools/cli-topic-integration-layer - Versions diffs - 0.2.1 → 0.3.1 - Mend

@commercetools/cli-topic-integration-layer 0.2.1 → 0.3.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (54) hide show

package/README.md +1 -0
package/dist/commands/integration-layer/explore.d.ts +20 -0
package/dist/commands/integration-layer/explore.js +209 -0
package/dist/commands/integration-layer/explore.js.map +1 -0
package/dist/commands/integration-layer/extension/build.d.ts +2 -0
package/dist/commands/integration-layer/extension/build.js +24 -3
package/dist/commands/integration-layer/extension/build.js.map +1 -1
package/dist/commands/integration-layer/extension/invoke.d.ts +1 -0
package/dist/commands/integration-layer/extension/invoke.js +9 -4
package/dist/commands/integration-layer/extension/invoke.js.map +1 -1
package/dist/commands/integration-layer/extension/push.d.ts +15 -0
package/dist/commands/integration-layer/extension/push.js +137 -3
package/dist/commands/integration-layer/extension/push.js.map +1 -1
package/dist/commands/integration-layer/extension/serve.d.ts +30 -0
package/dist/commands/integration-layer/extension/serve.js +244 -6
package/dist/commands/integration-layer/extension/serve.js.map +1 -1
package/dist/commands/integration-layer/extension/status.js +4 -0
package/dist/commands/integration-layer/extension/status.js.map +1 -1
package/dist/commands/integration-layer/extension/validate.d.ts +2 -0
package/dist/commands/integration-layer/extension/validate.js +24 -2
package/dist/commands/integration-layer/extension/validate.js.map +1 -1
package/dist/commands/integration-layer/init.js +228 -77
package/dist/commands/integration-layer/init.js.map +1 -1
package/dist/lib/awaitBundleState.d.ts +33 -0
package/dist/lib/awaitBundleState.js +77 -0
package/dist/lib/awaitBundleState.js.map +1 -0
package/dist/lib/base.d.ts +35 -0
package/dist/lib/base.js +99 -13
package/dist/lib/base.js.map +1 -1
package/dist/lib/ilClient.d.ts +62 -2
package/dist/lib/ilClient.js +42 -2
package/dist/lib/ilClient.js.map +1 -1
package/dist/lib/sourceRevision.d.ts +39 -0
package/dist/lib/sourceRevision.js +95 -0
package/dist/lib/sourceRevision.js.map +1 -0
package/dist/lib/tooling/exploreSchema.d.ts +15 -0
package/dist/lib/tooling/exploreSchema.js +77 -0
package/dist/lib/tooling/exploreSchema.js.map +1 -0
package/dist/lib/tooling/explorerPage.d.ts +1 -0
package/dist/lib/tooling/explorerPage.js +96 -0
package/dist/lib/tooling/explorerPage.js.map +1 -0
package/dist/lib/tooling/explorerServer.d.ts +27 -0
package/dist/lib/tooling/explorerServer.js +134 -0
package/dist/lib/tooling/explorerServer.js.map +1 -0
package/dist/lib/tooling/extensions.d.ts +77 -0
package/dist/lib/tooling/extensions.js +209 -0
package/dist/lib/tooling/extensions.js.map +1 -0
package/dist/lib/tooling/introspectionRequest.d.ts +13 -0
package/dist/lib/tooling/introspectionRequest.js +47 -0
package/dist/lib/tooling/introspectionRequest.js.map +1 -0
package/dist/lib/tooling/session.d.ts +36 -0
package/dist/lib/tooling/session.js +99 -0
package/dist/lib/tooling/session.js.map +1 -0
package/package.json +10 -12

package/dist/lib/tooling/explorerPage.js ADDED Viewed

@@ -0,0 +1,96 @@
+// The GraphiQL page the local explorer serves at `/`.
+//
+// A static HTML shell loading GraphiQL from a CDN (esm.sh, version-pinned + SRI),
+// pointed at this same local server's `/graphql`. Nothing is templated into it: the
+// project key, the edge URL, and the session bearer all live server-side, so the
+// page holds no credential and needs no configuration.
+//
+// The local server answers introspection itself from the resolved schema and proxies
+// everything else to the deployed edge, so GraphiQL gets full docs/autocomplete even
+// though the edge itself has introspection disabled.
+export const EXPLORER_HTML = String.raw `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>GraphQL Explorer · commercetools integration layer</title>
+    <style>
+      body { margin: 0; height: 100dvh; overflow: hidden; }
+      #graphiql { height: 100dvh; }
+      .loading { display: flex; height: 100dvh; align-items: center;
+                 justify-content: center; font-family: ui-sans-serif, system-ui, sans-serif;
+                 color: #6b7280; }
+    </style>
+    <link
+      rel="stylesheet"
+      href="https://esm.sh/graphiql@5.2.4/dist/style.css"
+      integrity="sha384-TFpQQKp325U5sd3PddH4cS0KOB3Gz/aqdEe12Mqkkq3wm2MGcDhRX5WhWf+o8akh"
+      crossorigin="anonymous"
+    />
+    <link
+      rel="stylesheet"
+      href="https://esm.sh/@graphiql/plugin-explorer@5.1.3/dist/style.css"
+      integrity="sha384-vTFGj0krVqwFXLB7kq/VHR0/j2+cCT/B63rge2mULaqnib2OX7DVLUVksTlqvMab"
+      crossorigin="anonymous"
+    />
+    <script type="importmap">
+      {
+        "imports": {
+          "react": "https://esm.sh/react@19.2.0",
+          "react/jsx-runtime": "https://esm.sh/react@19.2.0/jsx-runtime",
+          "react-dom": "https://esm.sh/react-dom@19.2.0",
+          "react-dom/client": "https://esm.sh/react-dom@19.2.0/client",
+          "graphql": "https://esm.sh/graphql@16.11.0",
+          "graphiql": "https://esm.sh/graphiql@5.2.4?standalone&external=react,react-dom,@graphiql/react,graphql",
+          "graphiql/": "https://esm.sh/graphiql@5.2.4/",
+          "@graphiql/plugin-explorer": "https://esm.sh/@graphiql/plugin-explorer@5.1.3?standalone&external=react,@graphiql/react,graphql",
+          "@graphiql/react": "https://esm.sh/@graphiql/react@0.37.7?standalone&external=react,react-dom,graphql,@graphiql/toolkit,@emotion/is-prop-valid",
+          "@graphiql/toolkit": "https://esm.sh/@graphiql/toolkit@0.12.1?standalone&external=graphql"
+        }
+      }
+    </script>
+  </head>
+  <body>
+    <div id="graphiql"><div class="loading">Loading the explorer…</div></div>
+    <script type="module">
+      import React from 'react';
+      import ReactDOM from 'react-dom/client';
+      import { GraphiQL, HISTORY_PLUGIN } from 'graphiql';
+      import { createGraphiQLFetcher } from '@graphiql/toolkit';
+      import { explorerPlugin } from '@graphiql/plugin-explorer';
+      import 'graphiql/setup-workers/esm.sh';
+      // Same-origin: this page and the GraphQL endpoint are both served by the CLI's
+      // local server, which holds the session bearer and forwards to the edge.
+      const fetcher = createGraphiQLFetcher({ url: location.origin + '/graphql' });
+      const plugins = [HISTORY_PLUGIN, explorerPlugin()];
+      const DEFAULT_QUERY = [
+        '# Local GraphQL explorer for your commercetools integration layer.',
+        '#',
+        '# Operations run against the DEPLOYED edge under the session shown in your',
+        '# terminal. Docs and autocomplete come from the schema the CLI resolved.',
+        '',
+        'query Categories {',
+        '  categories {',
+        '    items {',
+        '      name',
+        '    }',
+        '  }',
+        '}',
+        '',
+      ].join('\n');
+      ReactDOM.createRoot(document.getElementById('graphiql')).render(
+        React.createElement(GraphiQL, {
+          fetcher,
+          plugins,
+          defaultQuery: DEFAULT_QUERY,
+        }),
+      );
+    </script>
+  </body>
+</html>
+`;
+//# sourceMappingURL=explorerPage.js.map

package/dist/lib/tooling/explorerPage.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"explorerPage.js","sourceRoot":"","sources":["../../../src/lib/tooling/explorerPage.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,EAAE;AACF,kFAAkF;AAClF,oFAAoF;AACpF,iFAAiF;AACjF,uDAAuD;AACvD,EAAE;AACF,qFAAqF;AACrF,qFAAqF;AACrF,qDAAqD;AAErD,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoFtC,CAAC"}

package/dist/lib/tooling/explorerServer.d.ts ADDED Viewed

@@ -0,0 +1,27 @@
+import { type Server } from "node:http";
+import { type GraphQLSchema } from "graphql";
+/** The GraphQL-over-HTTP request body GraphiQL sends. */
+export interface GraphQLBody {
+    query?: string;
+    variables?: Record<string, unknown>;
+    operationName?: string;
+}
+export interface ExplorerServerOptions {
+    /** The schema introspection is answered from (docs, autocomplete, validation). */
+    schema: GraphQLSchema;
+    /** Absolute URL of the deployed edge's per-project GraphQL endpoint. */
+    endpoint: string;
+    /** Session bearer attached to every proxied operation. Never sent to the browser. */
+    bearer: string;
+}
+/**
+ * Build (but do not listen on) the explorer's server.
+ *
+ * The edge endpoint is validated ONCE here, not per request: it must be an
+ * absolute `http:`/`https:` URL. It comes from the operator's own login region or
+ * their explicit `--graphql-url` / `IL_GRAPHQL_URL`, so this is not a trust
+ * boundary — but pinning the scheme up front means a typo or a stray `file://`
+ * fails at startup with a clear message rather than at the first query, and the
+ * value the proxy uses can never be anything else.
+ */
+export declare function createExplorerServer(opts: ExplorerServerOptions): Server;

package/dist/lib/tooling/explorerServer.js ADDED Viewed

@@ -0,0 +1,134 @@
+// The explorer's local HTTP server.
+//
+// Three responsibilities, and the split between the last two is the whole design:
+//
+//   GET  /          the GraphiQL page
+//   POST /graphql   introspection → answered HERE from the resolved schema, because
+//                   the deployed edge runs `introspection: false`
+//                   everything else → proxied to the edge under a session bearer
+//
+// The bearer never reaches the browser: the page is same-origin and this process
+// attaches the credential on the way out.
+//
+// Kept out of the command so it can be started and driven in tests against a stub
+// edge, rather than only exercised by hand.
+import { createServer } from "node:http";
+import { execute, parse, validate } from "graphql";
+import { EXPLORER_HTML } from "./explorerPage.js";
+import { isIntrospectionRequest } from "./introspectionRequest.js";
+/**
+ * Build (but do not listen on) the explorer's server.
+ *
+ * The edge endpoint is validated ONCE here, not per request: it must be an
+ * absolute `http:`/`https:` URL. It comes from the operator's own login region or
+ * their explicit `--graphql-url` / `IL_GRAPHQL_URL`, so this is not a trust
+ * boundary — but pinning the scheme up front means a typo or a stray `file://`
+ * fails at startup with a clear message rather than at the first query, and the
+ * value the proxy uses can never be anything else.
+ */
+export function createExplorerServer(opts) {
+    let parsed;
+    try {
+        parsed = new URL(opts.endpoint);
+    }
+    catch {
+        throw new Error(`the GraphQL edge endpoint is not a valid URL: ${opts.endpoint}`);
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        throw new Error(`the GraphQL edge endpoint must be http(s), got '${parsed.protocol}': ${opts.endpoint}`);
+    }
+    const endpoint = parsed.toString();
+    return createServer((req, res) => {
+        void handle(req, res, { ...opts, endpoint });
+    });
+}
+async function handle(req, res, opts) {
+    const path = (req.url ?? "/").split("?")[0];
+    const json = (status, payload) => {
+        res.writeHead(status, { "content-type": "application/json" });
+        res.end(JSON.stringify(payload));
+    };
+    if (req.method === "GET" && (path === "/" || path === "/index.html")) {
+        res.writeHead(200, { "content-type": "text/html; charset=utf-8" });
+        res.end(EXPLORER_HTML);
+        return;
+    }
+    if (path !== "/graphql") {
+        json(404, { errors: [{ message: `no route ${path}` }] });
+        return;
+    }
+    if (req.method !== "POST") {
+        json(405, { errors: [{ message: "the GraphQL endpoint accepts POST" }] });
+        return;
+    }
+    let body;
+    try {
+        body = JSON.parse(await readBody(req));
+    }
+    catch (err) {
+        json(400, { errors: [{ message: `invalid JSON body: ${err.message}` }] });
+        return;
+    }
+    const query = body.query ?? "";
+    if (!query.trim()) {
+        json(400, { errors: [{ message: "request body must include a 'query'" }] });
+        return;
+    }
+    if (isIntrospectionRequest(query, body.operationName)) {
+        let document;
+        try {
+            document = parse(query);
+        }
+        catch (err) {
+            json(400, { errors: [{ message: err.message }] });
+            return;
+        }
+        const errors = validate(opts.schema, document);
+        if (errors.length) {
+            json(400, { errors: errors.map((e) => ({ message: e.message })) });
+            return;
+        }
+        json(200, await execute({
+            schema: opts.schema,
+            document,
+            variableValues: body.variables,
+            operationName: body.operationName,
+        }));
+        return;
+    }
+    try {
+        // Not SSRF: `opts.endpoint` is fixed when the server is constructed, from the
+        // operator's OWN login region or their explicit --graphql-url/IL_GRAPHQL_URL,
+        // and validated to be an absolute http(s) URL there. Nothing in the request
+        // influences it — the body is forwarded, the destination is not. The server
+        // also binds 127.0.0.1, so the only caller is the developer who chose the URL;
+        // there is no privilege boundary for a forged request to cross.
+        // nosemgrep
+        const upstream = await fetch(opts.endpoint, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                accept: "application/json",
+                authorization: `Bearer ${opts.bearer}`,
+            },
+            body: JSON.stringify(body),
+        });
+        const text = await upstream.text();
+        res.writeHead(upstream.status, {
+            "content-type": upstream.headers.get("content-type") ?? "application/json",
+        });
+        res.end(text);
+    }
+    catch (err) {
+        json(502, {
+            errors: [{ message: `could not reach ${opts.endpoint}: ${err.message}` }],
+        });
+    }
+}
+async function readBody(req) {
+    const chunks = [];
+    for await (const chunk of req)
+        chunks.push(chunk);
+    return Buffer.concat(chunks).toString("utf8");
+}
+//# sourceMappingURL=explorerServer.js.map

package/dist/lib/tooling/explorerServer.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"explorerServer.js","sourceRoot":"","sources":["../../../src/lib/tooling/explorerServer.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,kFAAkF;AAClF,EAAE;AACF,sCAAsC;AACtC,oFAAoF;AACpF,kEAAkE;AAClE,iFAAiF;AACjF,EAAE;AACF,iFAAiF;AACjF,0CAA0C;AAC1C,EAAE;AACF,kFAAkF;AAClF,4CAA4C;AAE5C,OAAO,EAAE,YAAY,EAA0D,MAAM,WAAW,CAAC;AACjG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAsB,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAkBnE;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2B;IAC9D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,mDAAmD,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAEnC,OAAO,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAoB,EACpB,GAAmB,EACnB,IAA2B;IAE3B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAAgB,EAAE,EAAE;QAChD,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACvB,OAAO;IACT,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,YAAY,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO;IACT,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAgB,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,sBAAuB,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,IAAI,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QACD,IAAI,CACF,GAAG,EACH,MAAM,OAAO,CAAC;YACZ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ;YACR,cAAc,EAAE,IAAI,CAAC,SAAS;YAC9B,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CACH,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,8EAA8E;QAC9E,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,+EAA+E;QAC/E,gEAAgE;QAChE,YAAY;QACZ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;aACvC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC7B,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB;SAC3E,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mBAAmB,IAAI,CAAC,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;SACrF,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC"}

package/dist/lib/tooling/extensions.d.ts ADDED Viewed

@@ -0,0 +1,77 @@
+import { type GraphQLSchema } from "graphql";
+/** An extension package discovered under the workspace's extensions/ directory. */
+export interface DiscoveredExtension {
+    /** The package/directory name (used only for messages — the combined subgraph has one name). */
+    name: string;
+    /** The extension source entry (`<dir>/src/extension.ts`). */
+    entry: string;
+    /** The esbuild bundle output for a standalone build (`<dir>/dist/extension.js`). */
+    outfile: string;
+}
+/**
+ * Discover every extension package under `<root>/<dirName>` that has a
+ * `src/extension.ts`. Sorted by name for stable, deterministic merge output.
+ */
+export declare function discoverExtensions(root: string, dirName: string): Promise<DiscoveredExtension[]>;
+/** One extension's contribution to the combined subgraph. */
+export interface ExtensionModule {
+    name: string;
+    typeDefs: string;
+    resolvers: object;
+}
+/** The single subgraph all extensions merge into. */
+export interface MergedSubgraph {
+    /** Executable subgraph schema (typeDefs + wired resolvers) — for serving. */
+    schema: GraphQLSchema;
+    /** Federation SDL of the merged subgraph — for composing with the core / publishing. */
+    sdl: string;
+}
+/**
+ * Merge several extension modules into ONE federation subgraph — the single bundle a
+ * project deploys. Each extension's SDL is a self-contained subgraph (its own
+ * `type Query`, its own `@link` header), so we can't just concatenate them
+ * (`buildSubgraphSchema` would see two `type Query`). `mergeTypeDefs` folds same-named
+ * types into one — so two extensions can each contribute fields to `Query` — and dedupes
+ * the repeated `@link`.
+ *
+ * First we reject two extensions declaring the SAME field (even identically): merged into
+ * one bundle their resolvers would silently shadow each other, so it's an authoring error
+ * we name loudly rather than paper over. The merged SDL is printed with
+ * `printSubgraphSchema`, so it round-trips as the exact federation SDL the IL validates /
+ * publishes for the deployed bundle.
+ */
+export declare function mergeExtensionSubgraph(modules: ExtensionModule[]): MergedSubgraph;
+/** Result of a combined build — the same shape {@link buildBundle} returns. */
+export interface CombinedBuildResult {
+    /** Absolute path to the single combined bundle. */
+    outfile: string;
+    /** The authors' source files that went into it (for static analysis; excludes the generated entry). */
+    sourceFiles: string[];
+}
+/**
+ * Build ONE combined bundle from every discovered extension — the artifact `push`
+ * uploads. Each extension is bundled + loaded to read its `typeDefs` (merged into one
+ * SDL, so a clash fails here on the author's machine) and to be re-imported by a
+ * generated entry that, at load time, merges the resolvers (per type, then per field),
+ * concatenates `apiExtensions`, and merges `hooks`. That entry is then bundled into the
+ * final self-contained artifact — a faithful stand-in for the single deployed bundle.
+ */
+export declare function buildCombinedBundle(extensions: DiscoveredExtension[], outfile: string): Promise<CombinedBuildResult>;
+/** What {@link bundleForFlags} produced, plus a label for the command's log line. */
+export interface BundleForFlags extends CombinedBuildResult {
+    /** Human description of what was bundled (the entry, or "N extension(s) (…)"). */
+    describe: string;
+}
+/**
+ * The single build step shared by `build`/`validate`/`push`: bundle either the one
+ * extension in the cwd (default) or — with `--all` — every extension under
+ * `<extensionsDir>/*` merged into the one combined bundle a project deploys. Throws a
+ * clean message when `--all` finds nothing to build.
+ */
+export declare function bundleForFlags(opts: {
+    all: boolean;
+    extensionsDir: string;
+    entry: string;
+    out: string;
+    cwd?: string;
+}): Promise<BundleForFlags>;

package/dist/lib/tooling/extensions.js ADDED Viewed

@@ -0,0 +1,209 @@
+// Monorepo helpers for the "one bundle per project" model. In production a project
+// has a SINGLE extension bundle = one federation subgraph (all of a repo's extensions
+// merged), which the router then composes with the integration-layer core subgraph.
+// So a monorepo of `extensions/*` packages must:
+//   - MERGE into one subgraph for local `serve --all` (mergeExtensionSubgraph), and
+//   - BUILD into one bundle for `build/validate/push --all` (buildCombinedBundle),
+// never one-subgraph-per-extension (that's not the deployed shape).
+import { readdir, readFile, stat, writeFile, mkdtemp } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import process from "node:process";
+import { buildSubgraphSchema, printSubgraphSchema } from "@apollo/subgraph";
+import { mergeTypeDefs } from "@graphql-tools/merge";
+import { Kind, parse } from "graphql";
+import { buildBundle } from "./build.js";
+import { loadBundleSource } from "./loadBundle.js";
+/**
+ * Discover every extension package under `<root>/<dirName>` that has a
+ * `src/extension.ts`. Sorted by name for stable, deterministic merge output.
+ */
+export async function discoverExtensions(root, dirName) {
+    const base = join(root, dirName);
+    const dirents = await readdir(base, { withFileTypes: true }).catch(() => []);
+    const found = [];
+    for (const dirent of dirents) {
+        if (!dirent.isDirectory())
+            continue;
+        const entry = join(base, dirent.name, "src", "extension.ts");
+        const hasEntry = await stat(entry)
+            .then((s) => s.isFile())
+            .catch(() => false);
+        if (!hasEntry)
+            continue;
+        found.push({
+            name: dirent.name,
+            entry,
+            outfile: join(base, dirent.name, "dist", "extension.js"),
+        });
+    }
+    return found.sort((a, b) => a.name.localeCompare(b.name));
+}
+/** Collect `Type.field` keys an SDL declares on object/interface types (incl. extensions). */
+function declaredFields(sdl) {
+    const out = [];
+    for (const def of parse(sdl).definitions) {
+        if (def.kind === Kind.OBJECT_TYPE_DEFINITION ||
+            def.kind === Kind.OBJECT_TYPE_EXTENSION ||
+            def.kind === Kind.INTERFACE_TYPE_DEFINITION ||
+            def.kind === Kind.INTERFACE_TYPE_EXTENSION) {
+            for (const f of def.fields ?? [])
+                out.push({ type: def.name.value, field: f.name.value });
+        }
+    }
+    return out;
+}
+/**
+ * Merge several extension modules into ONE federation subgraph — the single bundle a
+ * project deploys. Each extension's SDL is a self-contained subgraph (its own
+ * `type Query`, its own `@link` header), so we can't just concatenate them
+ * (`buildSubgraphSchema` would see two `type Query`). `mergeTypeDefs` folds same-named
+ * types into one — so two extensions can each contribute fields to `Query` — and dedupes
+ * the repeated `@link`.
+ *
+ * First we reject two extensions declaring the SAME field (even identically): merged into
+ * one bundle their resolvers would silently shadow each other, so it's an authoring error
+ * we name loudly rather than paper over. The merged SDL is printed with
+ * `printSubgraphSchema`, so it round-trips as the exact federation SDL the IL validates /
+ * publishes for the deployed bundle.
+ */
+export function mergeExtensionSubgraph(modules) {
+    if (modules.length === 0) {
+        throw new Error("no extension exports a GraphQL subgraph (typeDefs) to merge");
+    }
+    const resolvers = {};
+    const sdls = [];
+    const owner = new Map(); // "Type.field" -> first extension that declared it
+    for (const m of modules) {
+        if (typeof m.typeDefs !== "string" || m.typeDefs.trim() === "") {
+            throw new Error(`extension '${m.name}' must export a non-empty \`typeDefs\` string`);
+        }
+        if (m.resolvers === null || typeof m.resolvers !== "object") {
+            throw new Error(`extension '${m.name}' with \`typeDefs\` must also export a \`resolvers\` object`);
+        }
+        let fields;
+        try {
+            fields = declaredFields(m.typeDefs);
+        }
+        catch (err) {
+            throw new Error(`extension '${m.name}' has invalid \`typeDefs\`: ${err.message}`);
+        }
+        for (const { type, field } of fields) {
+            const key = `${type}.${field}`;
+            const prev = owner.get(key);
+            if (prev !== undefined && prev !== m.name) {
+                throw new Error(`extensions '${prev}' and '${m.name}' both declare \`${key}\` — a project ships one bundle, so each field must be owned by a single extension`);
+            }
+            owner.set(key, m.name);
+        }
+        sdls.push(m.typeDefs);
+        // Merge resolvers per type then per field — the same shape the combined bundle uses.
+        for (const [type, fieldResolvers] of Object.entries(m.resolvers)) {
+            resolvers[type] = Object.assign(resolvers[type] ?? {}, fieldResolvers);
+        }
+    }
+    let schema;
+    try {
+        // `mergeTypeDefs` folds the per-extension subgraphs into one document. `@apollo/subgraph`
+        // types `resolvers` as its internal `GraphQLResolverMap`; cast through the param type.
+        const typeDefs = mergeTypeDefs(sdls);
+        schema = buildSubgraphSchema({ typeDefs, resolvers });
+    }
+    catch (err) {
+        throw new Error(`extensions do not merge into a single subgraph: ${err.message}`);
+    }
+    return { schema, sdl: printSubgraphSchema(schema) };
+}
+/**
+ * Build ONE combined bundle from every discovered extension — the artifact `push`
+ * uploads. Each extension is bundled + loaded to read its `typeDefs` (merged into one
+ * SDL, so a clash fails here on the author's machine) and to be re-imported by a
+ * generated entry that, at load time, merges the resolvers (per type, then per field),
+ * concatenates `apiExtensions`, and merges `hooks`. That entry is then bundled into the
+ * final self-contained artifact — a faithful stand-in for the single deployed bundle.
+ */
+export async function buildCombinedBundle(extensions, outfile) {
+    if (extensions.length === 0) {
+        throw new Error("no extensions to build");
+    }
+    // 1. Bundle + load each extension to read its exported subgraph (typeDefs/resolvers).
+    const tmp = await mkdtemp(join(tmpdir(), "il-combine-"));
+    const loaded = [];
+    for (const ext of extensions) {
+        const out = join(tmp, `${ext.name}.js`);
+        await buildBundle(ext.entry, out);
+        loaded.push({ name: ext.name, module: loadBundleSource(await readFile(out, "utf8")) });
+    }
+    // 2. Merge the subgraph-bearing extensions into one SDL (conflict detection). An
+    //    extension may be API-extensions-only (no typeDefs) — those contribute no SDL.
+    const withSubgraph = loaded.filter((l) => typeof l.module.typeDefs === "string" && l.module.typeDefs.trim() !== "");
+    const mergedSdl = withSubgraph.length > 0
+        ? mergeExtensionSubgraph(withSubgraph.map((l) => ({
+            name: l.name,
+            typeDefs: l.module.typeDefs,
+            resolvers: l.module.resolvers ?? {},
+        }))).sdl
+        : undefined;
+    // 3. Generate the combining entry: re-import each extension, merge at load time.
+    const imports = extensions
+        .map((e, i) => `import * as e${i} from ${JSON.stringify(e.entry)};`)
+        .join("\n");
+    const modulesArray = `[${extensions.map((_, i) => `e${i}`).join(", ")}]`;
+    const entrySource = `${imports}
+const __modules = ${modulesArray};
+${mergedSdl !== undefined ? `export const typeDefs = ${JSON.stringify(mergedSdl)};` : ""}
+const __mergeResolvers = (mods) => {
+  const out = {};
+  for (const m of mods) {
+    const r = m && m.resolvers;
+    if (!r || typeof r !== "object") continue;
+    for (const type of Object.keys(r)) {
+      out[type] = Object.assign(out[type] ?? {}, r[type]);
+    }
+  }
+  return out;
+};
+export const resolvers = __mergeResolvers(__modules);
+export const apiExtensions = __modules.flatMap((m) =>
+  m && Array.isArray(m.apiExtensions) ? m.apiExtensions : [],
+);
+export const hooks = Object.assign(
+  {},
+  ...__modules.map((m) => (m && m.hooks && typeof m.hooks === "object" ? m.hooks : {})),
+);
+`;
+    const entryPath = join(tmp, "combined-entry.ts");
+    await writeFile(entryPath, entrySource, "utf8");
+    // 4. Bundle the generated entry into the single artifact. Its imported author sources
+    //    feed static analysis; the generated entry itself is trusted, so drop it.
+    const { sourceFiles } = await buildBundle(entryPath, outfile);
+    const generated = resolve(entryPath);
+    return { outfile, sourceFiles: sourceFiles.filter((f) => resolve(f) !== generated) };
+}
+/**
+ * The single build step shared by `build`/`validate`/`push`: bundle either the one
+ * extension in the cwd (default) or — with `--all` — every extension under
+ * `<extensionsDir>/*` merged into the one combined bundle a project deploys. Throws a
+ * clean message when `--all` finds nothing to build.
+ */
+export async function bundleForFlags(opts) {
+    if (!opts.all) {
+        const { outfile, sourceFiles } = await buildBundle(opts.entry, opts.out);
+        return { outfile, sourceFiles, describe: opts.entry };
+    }
+    const extensions = await discoverExtensions(opts.cwd ?? process.cwd(), opts.extensionsDir);
+    if (extensions.length === 0) {
+        throw new Error(`no extensions found under ./${opts.extensionsDir}/*/src/extension.ts — run --all from the monorepo root`);
+    }
+    const { outfile, sourceFiles } = await buildCombinedBundle(extensions, opts.out);
+    return {
+        outfile,
+        sourceFiles,
+        describe: `${extensions.length} extension(s) (${extensions.map((e) => e.name).join(", ")})`,
+    };
+}
+//# sourceMappingURL=extensions.js.map

package/dist/lib/tooling/extensions.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"extensions.js","sourceRoot":"","sources":["../../../src/lib/tooling/extensions.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,sFAAsF;AACtF,oFAAoF;AACpF,iDAAiD;AACjD,oFAAoF;AACpF,mFAAmF;AACnF,oEAAoE;AAEpE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAsB,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAwB,MAAM,iBAAiB,CAAC;AAYzE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,OAAe;IAEf,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,KAAK,GAA0B,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC;aAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;aACvB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC;SACzD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAiBD,8FAA8F;AAC9F,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACzC,IACE,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,sBAAsB;YACxC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,qBAAqB;YACvC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,yBAAyB;YAC3C,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,wBAAwB,EAC1C,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,SAAS,GAA4C,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,mDAAmD;IAC5F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,+CAA+C,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,6DAA6D,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,+BAAgC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1C,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,UAAU,CAAC,CAAC,IAAI,oBAAoB,GAAG,oFAAoF,CAC/I,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtB,qFAAqF;QACrF,KAAK,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAoC,CAAC,EAAE,CAAC;YAC5F,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,cAAyC,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,IAAI,MAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,0FAA0F;QAC1F,uFAAuF;QACvF,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAE9C,CAAC,CAAC;IACR,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,mDAAoD,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;AACtD,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAiC,EACjC,OAAe;IAEf,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,sFAAsF;IACtF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAgD,EAAE,CAAC;IAC/D,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC;QACxC,MAAM,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,iFAAiF;IACjF,mFAAmF;IACnF,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAK,CAAC,CAAC,MAAM,CAAC,QAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,CAC5F,CAAC;IACF,MAAM,SAAS,GACb,YAAY,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,sBAAsB,CACpB,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAkB;YACrC,SAAS,EAAG,CAAC,CAAC,MAAM,CAAC,SAAgC,IAAI,EAAE;SAC5D,CAAC,CAAC,CACJ,CAAC,GAAG;QACP,CAAC,CAAC,SAAS,CAAC;IAEhB,iFAAiF;IACjF,MAAM,OAAO,GAAG,UAAU;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;SACnE,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACzE,MAAM,WAAW,GAAG,GAAG,OAAO;;oBAEZ,YAAY;;EAE9B,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,2BAA2B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;CAsBvF,CAAC;IACA,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjD,MAAM,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEhD,sFAAsF;IACtF,8EAA8E;IAC9E,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC;AACvF,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAMpC;IACC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3F,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,aAAa,wDAAwD,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACjF,OAAO;QACL,OAAO;QACP,WAAW;QACX,QAAQ,EAAE,GAAG,UAAU,CAAC,MAAM,kBAAkB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;KAC5F,CAAC;AACJ,CAAC"}

package/dist/lib/tooling/introspectionRequest.d.ts ADDED Viewed

@@ -0,0 +1,13 @@
+/**
+ * True when `query`'s selected operation is a query whose every top-level selection
+ * is an introspection meta-field (`__schema`, `__type`, `__typename`).
+ *
+ * Unparseable input is NOT introspection: forwarding it lets the edge produce the
+ * error, which is the same message the developer would get in production.
+ *
+ * A mixed operation (`{ __schema { … } categories { … } }`) is also not
+ * introspection — it needs real resolvers, so it goes to the edge and the edge
+ * refuses the `__schema` half. That is the honest answer: the edge genuinely can't
+ * serve it, and pretending otherwise would return half-null data.
+ */
+export declare function isIntrospectionRequest(query: string, operationName?: string): boolean;

package/dist/lib/tooling/introspectionRequest.js ADDED Viewed

@@ -0,0 +1,47 @@
+// Does this operation need answering LOCALLY?
+//
+// The explorer answers introspection itself, from the schema it resolved, because
+// the deployed edge has introspection disabled — that is the whole point of the
+// arrangement. Everything else is proxied to the edge.
+//
+// So this predicate decides which of two very different things happens to a request,
+// and both misclassifications are bad:
+//
+//   a real query judged introspection  → executed against a schema with NO resolvers,
+//                                        silently returning nulls instead of data
+//   introspection judged a real query  → forwarded to an edge that refuses it, so
+//                                        GraphiQL shows no docs
+//
+// Hence: parse and inspect the operation, never string-match. A query that merely
+// MENTIONS `__schema` — in a string literal, a variable default, or as an alias —
+// is a real query.
+import { getOperationAST, parse } from "graphql";
+/**
+ * True when `query`'s selected operation is a query whose every top-level selection
+ * is an introspection meta-field (`__schema`, `__type`, `__typename`).
+ *
+ * Unparseable input is NOT introspection: forwarding it lets the edge produce the
+ * error, which is the same message the developer would get in production.
+ *
+ * A mixed operation (`{ __schema { … } categories { … } }`) is also not
+ * introspection — it needs real resolvers, so it goes to the edge and the edge
+ * refuses the `__schema` half. That is the honest answer: the edge genuinely can't
+ * serve it, and pretending otherwise would return half-null data.
+ */
+export function isIntrospectionRequest(query, operationName) {
+    let document;
+    try {
+        document = parse(query);
+    }
+    catch {
+        return false;
+    }
+    const operation = getOperationAST(document, operationName ?? undefined);
+    if (!operation || operation.operation !== "query")
+        return false;
+    const selections = operation.selectionSet.selections;
+    if (selections.length === 0)
+        return false;
+    return selections.every((selection) => selection.kind === "Field" && selection.name.value.startsWith("__"));
+}
+//# sourceMappingURL=introspectionRequest.js.map

package/dist/lib/tooling/introspectionRequest.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"introspectionRequest.js","sourceRoot":"","sources":["../../../src/lib/tooling/introspectionRequest.ts"],"names":[],"mappings":"AAAA,8CAA8C;AAC9C,EAAE;AACF,kFAAkF;AAClF,gFAAgF;AAChF,uDAAuD;AACvD,EAAE;AACF,qFAAqF;AACrF,uCAAuC;AACvC,EAAE;AACF,sFAAsF;AACtF,kFAAkF;AAClF,kFAAkF;AAClF,gEAAgE;AAChE,EAAE;AACF,kFAAkF;AAClF,kFAAkF;AAClF,mBAAmB;AAEnB,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAEjD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa,EAAE,aAAsB;IAC1E,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,QAAQ,EAAE,aAAa,IAAI,SAAS,CAAC,CAAC;IACxE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAEhE,MAAM,UAAU,GAAG,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC;IACrD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE1C,OAAO,UAAU,CAAC,KAAK,CACrB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CACnF,CAAC;AACJ,CAAC"}