@trackunit/iris-app-sdk-vite 1.0.33 → 1.0.36

package/CHANGELOG.md

@@ -1,3 +1,30 @@
+## 1.0.36 (2026-06-22)
+
+### 🧱 Updated Dependencies
+
+- Updated iris-app-build-utilities to 2.0.32
+- Updated iris-app-api to 2.0.31
+- Updated iris-app to 2.0.34
+
+## 1.0.35 (2026-06-22)
+
+### 🩹 Fixes
+
+- **iris-app-sdk:** degrade gracefully when custom-field check can't run [GLU-1302] ([#23721](https://github.com/Trackunit/manager/pull/23721))
+
+### ❤️ Thank You
+
+- Christian Sandbeck
+- Claude Opus 4.8
+
+## 1.0.34 (2026-06-19)
+
+### 🧱 Updated Dependencies
+
+- Updated iris-app-build-utilities to 2.0.31
+- Updated iris-app-api to 2.0.30
+- Updated iris-app to 2.0.33
+
 ## 1.0.33 (2026-06-19)
 
 ### 🧱 Updated Dependencies

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trackunit/iris-app-sdk-vite",
-  "version": "1.0.33",
+  "version": "1.0.36",
   "license": "SEE LICENSE IN LICENSE.txt",
   "repository": "https://github.com/Trackunit/manager",
   "executors": "./executors.json",
@@ -10,8 +10,8 @@
   "dependencies": {
     "rxjs": "7.8.1",
     "win-ca": "^3.5.1",
-    "@trackunit/iris-app-build-utilities": "2.0.30",
-    "@trackunit/iris-app-api": "2.0.29",
+    "@trackunit/iris-app-build-utilities": "2.0.32",
+    "@trackunit/iris-app-api": "2.0.31",
     "tslib": "^2.6.2",
     "vite": "7.3.1",
     "@module-federation/vite": "1.11.0",
@@ -22,7 +22,7 @@
     "@tailwindcss/postcss": "^4.1.18",
     "@vitejs/plugin-react-swc": "^4.2.3",
     "@nx/devkit": "22.7.5",
-    "@trackunit/iris-app": "2.0.32",
+    "@trackunit/iris-app": "2.0.34",
     "cross-keychain": "^1.1.0",
     "jwt-decode": "^3.1.2"
   },

package/src/executors/serve/executor.js

@@ -37,10 +37,19 @@ async function* serveExecutor(options, context) {
     const irisAppManifest = (0, manifestLoader_1.loadManifest)(context.root, projectRootDir);
     const checkCustomFieldsResult = await (0, checkCustomFields_1.checkCustomFields)(irisAppManifest, settings);
     if (checkCustomFieldsResult === "out-of-sync") {
-        throw new Error("Custom fields are out of sync with the latest approved manifest, please submit and get this version approved before you continue developing the app.");
+        throw new Error("Custom fields are out of sync with the latest approved manifest, which can cause the app to behave in unexpected ways. Please submit and get this version approved before you continue developing the app.");
     }
     if (checkCustomFieldsResult === "not-submitted") {
-        throw new Error("Custom fields are not submitted, please submit and get this version approved before you continue developing the app.");
+        throw new Error("Custom fields are not submitted, which can cause the app to behave in unexpected ways. Please submit and get this version approved before you continue developing the app.");
+    }
+    if (checkCustomFieldsResult === "unverified") {
+        // The check could not be completed (network/auth/server failure). This is
+        // non-fatal for local development: warn loudly and continue serving rather
+        // than crashing. The underlying reason was already logged by checkCustomFields.
+        // eslint-disable-next-line no-console
+        console.warn("\n  ⚠️  Custom-field in-sync check was skipped — the latest approved manifest could not be verified " +
+            "(see the warning above). The dev server will start, but your custom fields were NOT validated against the approved manifest. " +
+            "If your local custom field definitions are out of sync, the app may behave in unexpected ways.\n");
     }
     const serversideResult = await (0, iris_app_build_utilities_1.spawnServersideExtensions)(irisAppManifest, context.root);
     try {

package/src/executors/utils/checkCustomFields.js

@@ -24,8 +24,25 @@ const checkCustomFields = async (irisAppManifest, settings) => {
     }
     // eslint-disable-next-line no-console
     console.log("This app is using custom fields, fetching the latest approved manifest to validate that the local custom field definitions are in sync.");
-    const tokenData = await (0, accessTokenCache_1.getCachedAccessToken)(settings);
-    const latestApprovedManifestIfAny = await fetchLatestApprovedManifest(irisAppManifest.moduleFederationName, tokenData.access_token, settings);
+    // The in-sync check is advisory for local development: when it cannot be
+    // completed (auth can't be obtained, the endpoint is unreachable, returns an
+    // error, or sends back a malformed body) we degrade to "unverified" and let
+    // the caller continue, rather than throwing and aborting `serve`. Genuine
+    // "the check ran and found a problem" outcomes (out-of-sync / not-submitted)
+    // are still returned below. Mirrors the warn-and-continue idiom in
+    // accessTokenCache.ts.
+    let latestApprovedManifestIfAny;
+    try {
+        const tokenData = await (0, accessTokenCache_1.getCachedAccessToken)(settings);
+        latestApprovedManifestIfAny = await fetchLatestApprovedManifest(irisAppManifest.moduleFederationName, tokenData.access_token, settings);
+    }
+    catch (error) {
+        const reason = error instanceof Error ? error.message : String(error);
+        // eslint-disable-next-line no-console
+        console.warn(`[checkCustomFields] Could not verify custom fields against the latest approved manifest: ${reason}. ` +
+            "Skipping the in-sync check for this session and continuing — your custom fields were NOT validated.");
+        return "unverified";
+    }
     if (!latestApprovedManifestIfAny) {
         return "not-submitted";
     }
@@ -92,6 +109,13 @@ async function fetchLatestApprovedManifest(irisAppId, accessToken, settings) {
     if (body.errors && body.errors.length > 0) {
         throw new Error(`GraphQL error fetching latest approved manifest: ${body.errors.map(e => e.message).join(", ")}`);
     }
-    return body.data?.manifest ?? null;
+    // A well-formed response always carries the `manifest` field (possibly null
+    // when the app has no approved version yet). Anything else means we cannot
+    // trust the result, so treat it as a failed fetch (→ "unverified" upstream)
+    // rather than misreporting it as "not-submitted".
+    if (!body.data || !("manifest" in body.data)) {
+        throw new Error(`Malformed response fetching latest approved manifest: missing data.manifest in ${JSON.stringify(body)}`);
+    }
+    return body.data.manifest ?? null;
 }
 //# sourceMappingURL=checkCustomFields.js.map