@constructive-io/graphql-server 5.25.0 → 5.25.1

package/esm/protection/document-gate.js

@@ -16,6 +16,13 @@
  * The walk is manual rather than `visitWithTypeInfo` because fragment spreads
  * have to be followed (a document can hide its depth entirely inside
  * fragments) and the visitor does not follow them.
+ *
+ * Schema introspection (`__schema` / `__type`) is governed only by
+ * `enableIntrospection`. Its selections are not walked: the introspection types
+ * carry no connections, so there is nothing to cost, and the standard
+ * introspection document nests a fixed `ofType` chain deeper than a sensible
+ * tenant depth budget, so charging depth would make the budget decide whether
+ * clients can introspect at all — a decision the dedicated switch already owns.
  */
 import { errors } from '@constructive-io/errors';
 import { ASSUMED_PAGE_SIZE } from '@constructive-io/express-context';
@@ -84,6 +91,7 @@ function walkSelectionSet(walk, selectionSet, parentType, depth, multiplier) {
                 if (!walk.protection.enableIntrospection) {
                     reject(errors.INTROSPECTION_DISABLED());
                 }
+                continue;
             }
             const field = parentType && isObjectType(parentType)
                 ? parentType.getFields()[selection.name.value]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@constructive-io/graphql-server",
-  "version": "5.25.0",
+  "version": "5.25.1",
   "author": "Constructive <developers@constructive.io>",
   "description": "Constructive GraphQL Server",
   "main": "index.js",
@@ -96,5 +96,5 @@
     "supertest": "^7.2.2",
     "ts-node": "^10.9.2"
   },
-  "gitHead": "27be33dc1ba8351e2a2c2bbb99b9c0798c0813b9"
+  "gitHead": "164f6e481961196e681eb3dee9e5f9ebcb8fb834"
 }

package/protection/document-gate.d.ts

@@ -16,6 +16,13 @@
  * The walk is manual rather than `visitWithTypeInfo` because fragment spreads
  * have to be followed (a document can hide its depth entirely inside
  * fragments) and the visitor does not follow them.
+ *
+ * Schema introspection (`__schema` / `__type`) is governed only by
+ * `enableIntrospection`. Its selections are not walked: the introspection types
+ * carry no connections, so there is nothing to cost, and the standard
+ * introspection document nests a fixed `ofType` chain deeper than a sensible
+ * tenant depth budget, so charging depth would make the budget decide whether
+ * clients can introspect at all — a decision the dedicated switch already owns.
  */
 import { type RequestProtection } from '@constructive-io/express-context';
 import type { DocumentNode, GraphQLSchema } from 'graphql';

package/protection/document-gate.js

@@ -17,6 +17,13 @@
  * The walk is manual rather than `visitWithTypeInfo` because fragment spreads
  * have to be followed (a document can hide its depth entirely inside
  * fragments) and the visitor does not follow them.
+ *
+ * Schema introspection (`__schema` / `__type`) is governed only by
+ * `enableIntrospection`. Its selections are not walked: the introspection types
+ * carry no connections, so there is nothing to cost, and the standard
+ * introspection document nests a fixed `ofType` chain deeper than a sensible
+ * tenant depth budget, so charging depth would make the budget decide whether
+ * clients can introspect at all — a decision the dedicated switch already owns.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.enforceDocumentProtection = enforceDocumentProtection;
@@ -87,6 +94,7 @@ function walkSelectionSet(walk, selectionSet, parentType, depth, multiplier) {
                 if (!walk.protection.enableIntrospection) {
                     reject(errors_1.errors.INTROSPECTION_DISABLED());
                 }
+                continue;
             }
             const field = parentType && (0, graphql_1.isObjectType)(parentType)
                 ? parentType.getFields()[selection.name.value]